iosxe.Template
Explore with Pulumi AI
This resource can manage the Template configuration.
Example Usage
Coming soon!
Coming soon!
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.iosxe.Template;
import com.pulumi.iosxe.TemplateArgs;
import com.pulumi.iosxe.inputs.TemplateIpAccessGroupArgs;
import com.pulumi.iosxe.inputs.TemplateSwitchportPortSecurityMaximumRangeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new Template("example", TemplateArgs.builder()        
            .accessSessionClosed(true)
            .accessSessionControlDirection("both")
            .accessSessionHostMode("single-host")
            .accessSessionInterfaceTemplateSticky(true)
            .accessSessionInterfaceTemplateStickyTimer(100)
            .accessSessionMonitor(true)
            .accessSessionPortControl("auto")
            .authenticationPeriodic(true)
            .authenticationTimerReauthenticateServer(true)
            .ctsManual(true)
            .ctsManualPolicyStaticSgt(100)
            .ctsManualPolicyStaticTrusted(false)
            .ctsManualPropagateSgt(false)
            .ctsRoleBasedEnforcement(false)
            .deviceTracking(true)
            .deviceTrackingVlanRange("100-199")
            .dot1xMaxReauthReq(3)
            .dot1xMaxReq(3)
            .dot1xPae("both")
            .dot1xTimeoutTxPeriod(2)
            .ipAccessGroups(TemplateIpAccessGroupArgs.builder()
                .access_list("ACL1")
                .direction("in")
                .build())
            .ipDhcpSnoopingLimitRate(10)
            .ipDhcpSnoopingTrust(true)
            .loadInterval(30)
            .mab(true)
            .mabEap(true)
            .servicePolicyInput("SP1")
            .servicePolicyOutput("SP2")
            .servicePolicyTypeControlSubscriber("dot1x_policy")
            .spanningTreeBpduguardEnable(true)
            .spanningTreePortfast(true)
            .spanningTreePortfastDisable(false)
            .spanningTreePortfastEdge(false)
            .spanningTreePortfastNetwork(false)
            .stormControlActionShutdown(true)
            .stormControlActionTrap(true)
            .stormControlBroadcastLevelBpsThreshold(10)
            .stormControlBroadcastLevelPpsThreshold("10")
            .stormControlBroadcastLevelThreshold(10)
            .stormControlMulticastLevelBpsThreshold(10000)
            .stormControlMulticastLevelPpsThreshold("10")
            .stormControlMulticastLevelThreshold(10)
            .subscriberAgingProbe(true)
            .switchportAccessVlan(200)
            .switchportBlockUnicast(false)
            .switchportModeAccess(false)
            .switchportModeTrunk(true)
            .switchportNonegotiate(false)
            .switchportPortSecurity(true)
            .switchportPortSecurityAgingStatic(false)
            .switchportPortSecurityAgingTime(100)
            .switchportPortSecurityAgingType(true)
            .switchportPortSecurityAgingTypeInactivity(true)
            .switchportPortSecurityMaximumRanges(TemplateSwitchportPortSecurityMaximumRangeArgs.builder()
                .range(100)
                .vlan(true)
                .vlan_access(true)
                .build())
            .switchportPortSecurityViolationProtect(false)
            .switchportPortSecurityViolationRestrict(false)
            .switchportPortSecurityViolationShutdown(false)
            .switchportPrivateVlanHostAssociationPrimaryRange(301)
            .switchportPrivateVlanHostAssociationSecondaryRange(302)
            .switchportTrunkAllowedVlans("500-599")
            .switchportTrunkNativeVlanVlanId(10)
            .switchportVoiceVlan(201)
            .templateName("TEMP1")
            .build());
    }
}
Coming soon!
Coming soon!
resources:
  example:
    type: iosxe:Template
    properties:
      accessSessionClosed: true
      accessSessionControlDirection: both
      accessSessionHostMode: single-host
      accessSessionInterfaceTemplateSticky: true
      accessSessionInterfaceTemplateStickyTimer: 100
      accessSessionMonitor: true
      accessSessionPortControl: auto
      authenticationPeriodic: true
      authenticationTimerReauthenticateServer: true
      ctsManual: true
      ctsManualPolicyStaticSgt: 100
      ctsManualPolicyStaticTrusted: false
      ctsManualPropagateSgt: false
      ctsRoleBasedEnforcement: false
      deviceTracking: true
      deviceTrackingVlanRange: 100-199
      dot1xMaxReauthReq: 3
      dot1xMaxReq: 3
      dot1xPae: both
      dot1xTimeoutTxPeriod: 2
      ipAccessGroups:
        - access_list: ACL1
          direction: in
      ipDhcpSnoopingLimitRate: 10
      ipDhcpSnoopingTrust: true
      loadInterval: 30
      mab: true
      mabEap: true
      servicePolicyInput: SP1
      servicePolicyOutput: SP2
      servicePolicyTypeControlSubscriber: dot1x_policy
      spanningTreeBpduguardEnable: true
      spanningTreePortfast: true
      spanningTreePortfastDisable: false
      spanningTreePortfastEdge: false
      spanningTreePortfastNetwork: false
      stormControlActionShutdown: true
      stormControlActionTrap: true
      stormControlBroadcastLevelBpsThreshold: 10
      stormControlBroadcastLevelPpsThreshold: '10'
      stormControlBroadcastLevelThreshold: 10
      stormControlMulticastLevelBpsThreshold: 10000
      stormControlMulticastLevelPpsThreshold: '10'
      stormControlMulticastLevelThreshold: 10
      subscriberAgingProbe: true
      switchportAccessVlan: 200
      switchportBlockUnicast: false
      switchportModeAccess: false
      switchportModeTrunk: true
      switchportNonegotiate: false
      switchportPortSecurity: true
      switchportPortSecurityAgingStatic: false
      switchportPortSecurityAgingTime: 100
      switchportPortSecurityAgingType: true
      switchportPortSecurityAgingTypeInactivity: true
      switchportPortSecurityMaximumRanges:
        - range: 100
          vlan: true
          vlan_access: true
      switchportPortSecurityViolationProtect: false
      switchportPortSecurityViolationRestrict: false
      switchportPortSecurityViolationShutdown: false
      switchportPrivateVlanHostAssociationPrimaryRange: 301
      switchportPrivateVlanHostAssociationSecondaryRange: 302
      switchportTrunkAllowedVlans: 500-599
      switchportTrunkNativeVlanVlanId: 10
      switchportVoiceVlan: 201
      templateName: TEMP1
Create Template Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Template(name: string, args: TemplateArgs, opts?: CustomResourceOptions);@overload
def Template(resource_name: str,
             args: TemplateArgs,
             opts: Optional[ResourceOptions] = None)
@overload
def Template(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             template_name: Optional[str] = None,
             access_session_closed: Optional[bool] = None,
             access_session_control_direction: Optional[str] = None,
             access_session_host_mode: Optional[str] = None,
             access_session_interface_template_sticky: Optional[bool] = None,
             access_session_interface_template_sticky_timer: Optional[int] = None,
             access_session_monitor: Optional[bool] = None,
             access_session_port_control: Optional[str] = None,
             authentication_periodic: Optional[bool] = None,
             authentication_timer_reauthenticate_range: Optional[int] = None,
             authentication_timer_reauthenticate_server: Optional[bool] = None,
             cts_manual: Optional[bool] = None,
             cts_manual_policy_static_sgt: Optional[int] = None,
             cts_manual_policy_static_trusted: Optional[bool] = None,
             cts_manual_propagate_sgt: Optional[bool] = None,
             cts_role_based_enforcement: Optional[bool] = None,
             delete_mode: Optional[str] = None,
             device: Optional[str] = None,
             device_tracking: Optional[bool] = None,
             device_tracking_attach_policies: Optional[Sequence[TemplateDeviceTrackingAttachPolicyArgs]] = None,
             device_tracking_vlan_range: Optional[str] = None,
             dot1x_max_reauth_req: Optional[int] = None,
             dot1x_max_req: Optional[int] = None,
             dot1x_pae: Optional[str] = None,
             dot1x_timeout_tx_period: Optional[int] = None,
             ip_access_groups: Optional[Sequence[TemplateIpAccessGroupArgs]] = None,
             ip_dhcp_snooping_limit_rate: Optional[int] = None,
             ip_dhcp_snooping_trust: Optional[bool] = None,
             load_interval: Optional[int] = None,
             mab: Optional[bool] = None,
             mab_eap: Optional[bool] = None,
             service_policy_input: Optional[str] = None,
             service_policy_output: Optional[str] = None,
             service_policy_type_control_subscriber: Optional[str] = None,
             source_template: Optional[str] = None,
             spanning_tree_bpduguard_enable: Optional[bool] = None,
             spanning_tree_portfast: Optional[bool] = None,
             spanning_tree_portfast_disable: Optional[bool] = None,
             spanning_tree_portfast_edge: Optional[bool] = None,
             spanning_tree_portfast_network: Optional[bool] = None,
             spanning_tree_service_policy: Optional[bool] = None,
             storm_control_action_shutdown: Optional[bool] = None,
             storm_control_action_trap: Optional[bool] = None,
             storm_control_broadcast_level_bps_threshold: Optional[float] = None,
             storm_control_broadcast_level_pps_threshold: Optional[str] = None,
             storm_control_broadcast_level_threshold: Optional[float] = None,
             storm_control_multicast_level_bps_threshold: Optional[float] = None,
             storm_control_multicast_level_pps_threshold: Optional[str] = None,
             storm_control_multicast_level_threshold: Optional[float] = None,
             subscriber_aging_inactivity_timer_probe: Optional[bool] = None,
             subscriber_aging_inactivity_timer_value: Optional[int] = None,
             subscriber_aging_probe: Optional[bool] = None,
             switchport_access_vlan: Optional[int] = None,
             switchport_block_unicast: Optional[bool] = None,
             switchport_mode_access: Optional[bool] = None,
             switchport_mode_trunk: Optional[bool] = None,
             switchport_nonegotiate: Optional[bool] = None,
             switchport_port_security: Optional[bool] = None,
             switchport_port_security_aging_static: Optional[bool] = None,
             switchport_port_security_aging_time: Optional[int] = None,
             switchport_port_security_aging_type: Optional[bool] = None,
             switchport_port_security_aging_type_inactivity: Optional[bool] = None,
             switchport_port_security_maximum_ranges: Optional[Sequence[TemplateSwitchportPortSecurityMaximumRangeArgs]] = None,
             switchport_port_security_violation_protect: Optional[bool] = None,
             switchport_port_security_violation_restrict: Optional[bool] = None,
             switchport_port_security_violation_shutdown: Optional[bool] = None,
             switchport_private_vlan_host_association_primary_range: Optional[int] = None,
             switchport_private_vlan_host_association_secondary_range: Optional[int] = None,
             switchport_trunk_allowed_vlans: Optional[str] = None,
             switchport_trunk_allowed_vlans_all: Optional[bool] = None,
             switchport_trunk_allowed_vlans_none: Optional[bool] = None,
             switchport_trunk_native_vlan_tag: Optional[bool] = None,
             switchport_trunk_native_vlan_vlan_id: Optional[int] = None,
             switchport_voice_vlan: Optional[int] = None)func NewTemplate(ctx *Context, name string, args TemplateArgs, opts ...ResourceOption) (*Template, error)public Template(string name, TemplateArgs args, CustomResourceOptions? opts = null)
public Template(String name, TemplateArgs args)
public Template(String name, TemplateArgs args, CustomResourceOptions options)
type: iosxe:Template
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
 - The unique name of the resource.
 - args TemplateArgs
 - The arguments to resource properties.
 - opts CustomResourceOptions
 - Bag of options to control resource's behavior.
 
- resource_name str
 - The unique name of the resource.
 - args TemplateArgs
 - The arguments to resource properties.
 - opts ResourceOptions
 - Bag of options to control resource's behavior.
 
- ctx Context
 - Context object for the current deployment.
 - name string
 - The unique name of the resource.
 - args TemplateArgs
 - The arguments to resource properties.
 - opts ResourceOption
 - Bag of options to control resource's behavior.
 
- name string
 - The unique name of the resource.
 - args TemplateArgs
 - The arguments to resource properties.
 - opts CustomResourceOptions
 - Bag of options to control resource's behavior.
 
- name String
 - The unique name of the resource.
 - args TemplateArgs
 - The arguments to resource properties.
 - options CustomResourceOptions
 - Bag of options to control resource's behavior.
 
Constructor example
The following reference example uses placeholder values for all input properties.
var templateResource = new Iosxe.Template("templateResource", new()
{
    TemplateName = "string",
    AccessSessionClosed = false,
    AccessSessionControlDirection = "string",
    AccessSessionHostMode = "string",
    AccessSessionInterfaceTemplateSticky = false,
    AccessSessionInterfaceTemplateStickyTimer = 0,
    AccessSessionMonitor = false,
    AccessSessionPortControl = "string",
    AuthenticationPeriodic = false,
    AuthenticationTimerReauthenticateRange = 0,
    AuthenticationTimerReauthenticateServer = false,
    CtsManual = false,
    CtsManualPolicyStaticSgt = 0,
    CtsManualPolicyStaticTrusted = false,
    CtsManualPropagateSgt = false,
    CtsRoleBasedEnforcement = false,
    DeleteMode = "string",
    Device = "string",
    DeviceTracking = false,
    DeviceTrackingAttachPolicies = new[]
    {
        new Iosxe.Inputs.TemplateDeviceTrackingAttachPolicyArgs
        {
            PolicyName = "string",
            VlanRange = "string",
        },
    },
    DeviceTrackingVlanRange = "string",
    Dot1xMaxReauthReq = 0,
    Dot1xMaxReq = 0,
    Dot1xPae = "string",
    Dot1xTimeoutTxPeriod = 0,
    IpAccessGroups = new[]
    {
        new Iosxe.Inputs.TemplateIpAccessGroupArgs
        {
            Direction = "string",
            AccessList = "string",
        },
    },
    IpDhcpSnoopingLimitRate = 0,
    IpDhcpSnoopingTrust = false,
    LoadInterval = 0,
    Mab = false,
    MabEap = false,
    ServicePolicyInput = "string",
    ServicePolicyOutput = "string",
    ServicePolicyTypeControlSubscriber = "string",
    SourceTemplate = "string",
    SpanningTreeBpduguardEnable = false,
    SpanningTreePortfast = false,
    SpanningTreePortfastDisable = false,
    SpanningTreePortfastEdge = false,
    SpanningTreePortfastNetwork = false,
    SpanningTreeServicePolicy = false,
    StormControlActionShutdown = false,
    StormControlActionTrap = false,
    StormControlBroadcastLevelBpsThreshold = 0,
    StormControlBroadcastLevelPpsThreshold = "string",
    StormControlBroadcastLevelThreshold = 0,
    StormControlMulticastLevelBpsThreshold = 0,
    StormControlMulticastLevelPpsThreshold = "string",
    StormControlMulticastLevelThreshold = 0,
    SubscriberAgingInactivityTimerProbe = false,
    SubscriberAgingInactivityTimerValue = 0,
    SubscriberAgingProbe = false,
    SwitchportAccessVlan = 0,
    SwitchportBlockUnicast = false,
    SwitchportModeAccess = false,
    SwitchportModeTrunk = false,
    SwitchportNonegotiate = false,
    SwitchportPortSecurity = false,
    SwitchportPortSecurityAgingStatic = false,
    SwitchportPortSecurityAgingTime = 0,
    SwitchportPortSecurityAgingType = false,
    SwitchportPortSecurityAgingTypeInactivity = false,
    SwitchportPortSecurityMaximumRanges = new[]
    {
        new Iosxe.Inputs.TemplateSwitchportPortSecurityMaximumRangeArgs
        {
            Range = 0,
            Vlan = false,
            VlanAccess = false,
        },
    },
    SwitchportPortSecurityViolationProtect = false,
    SwitchportPortSecurityViolationRestrict = false,
    SwitchportPortSecurityViolationShutdown = false,
    SwitchportPrivateVlanHostAssociationPrimaryRange = 0,
    SwitchportPrivateVlanHostAssociationSecondaryRange = 0,
    SwitchportTrunkAllowedVlans = "string",
    SwitchportTrunkAllowedVlansAll = false,
    SwitchportTrunkAllowedVlansNone = false,
    SwitchportTrunkNativeVlanTag = false,
    SwitchportTrunkNativeVlanVlanId = 0,
    SwitchportVoiceVlan = 0,
});
example, err := iosxe.NewTemplate(ctx, "templateResource", &iosxe.TemplateArgs{
	TemplateName:                              pulumi.String("string"),
	AccessSessionClosed:                       pulumi.Bool(false),
	AccessSessionControlDirection:             pulumi.String("string"),
	AccessSessionHostMode:                     pulumi.String("string"),
	AccessSessionInterfaceTemplateSticky:      pulumi.Bool(false),
	AccessSessionInterfaceTemplateStickyTimer: pulumi.Int(0),
	AccessSessionMonitor:                      pulumi.Bool(false),
	AccessSessionPortControl:                  pulumi.String("string"),
	AuthenticationPeriodic:                    pulumi.Bool(false),
	AuthenticationTimerReauthenticateRange:    pulumi.Int(0),
	AuthenticationTimerReauthenticateServer:   pulumi.Bool(false),
	CtsManual:                                 pulumi.Bool(false),
	CtsManualPolicyStaticSgt:                  pulumi.Int(0),
	CtsManualPolicyStaticTrusted:              pulumi.Bool(false),
	CtsManualPropagateSgt:                     pulumi.Bool(false),
	CtsRoleBasedEnforcement:                   pulumi.Bool(false),
	DeleteMode:                                pulumi.String("string"),
	Device:                                    pulumi.String("string"),
	DeviceTracking:                            pulumi.Bool(false),
	DeviceTrackingAttachPolicies: iosxe.TemplateDeviceTrackingAttachPolicyArray{
		&iosxe.TemplateDeviceTrackingAttachPolicyArgs{
			PolicyName: pulumi.String("string"),
			VlanRange:  pulumi.String("string"),
		},
	},
	DeviceTrackingVlanRange: pulumi.String("string"),
	Dot1xMaxReauthReq:       pulumi.Int(0),
	Dot1xMaxReq:             pulumi.Int(0),
	Dot1xPae:                pulumi.String("string"),
	Dot1xTimeoutTxPeriod:    pulumi.Int(0),
	IpAccessGroups: iosxe.TemplateIpAccessGroupArray{
		&iosxe.TemplateIpAccessGroupArgs{
			Direction:  pulumi.String("string"),
			AccessList: pulumi.String("string"),
		},
	},
	IpDhcpSnoopingLimitRate:                   pulumi.Int(0),
	IpDhcpSnoopingTrust:                       pulumi.Bool(false),
	LoadInterval:                              pulumi.Int(0),
	Mab:                                       pulumi.Bool(false),
	MabEap:                                    pulumi.Bool(false),
	ServicePolicyInput:                        pulumi.String("string"),
	ServicePolicyOutput:                       pulumi.String("string"),
	ServicePolicyTypeControlSubscriber:        pulumi.String("string"),
	SourceTemplate:                            pulumi.String("string"),
	SpanningTreeBpduguardEnable:               pulumi.Bool(false),
	SpanningTreePortfast:                      pulumi.Bool(false),
	SpanningTreePortfastDisable:               pulumi.Bool(false),
	SpanningTreePortfastEdge:                  pulumi.Bool(false),
	SpanningTreePortfastNetwork:               pulumi.Bool(false),
	SpanningTreeServicePolicy:                 pulumi.Bool(false),
	StormControlActionShutdown:                pulumi.Bool(false),
	StormControlActionTrap:                    pulumi.Bool(false),
	StormControlBroadcastLevelBpsThreshold:    pulumi.Float64(0),
	StormControlBroadcastLevelPpsThreshold:    pulumi.String("string"),
	StormControlBroadcastLevelThreshold:       pulumi.Float64(0),
	StormControlMulticastLevelBpsThreshold:    pulumi.Float64(0),
	StormControlMulticastLevelPpsThreshold:    pulumi.String("string"),
	StormControlMulticastLevelThreshold:       pulumi.Float64(0),
	SubscriberAgingInactivityTimerProbe:       pulumi.Bool(false),
	SubscriberAgingInactivityTimerValue:       pulumi.Int(0),
	SubscriberAgingProbe:                      pulumi.Bool(false),
	SwitchportAccessVlan:                      pulumi.Int(0),
	SwitchportBlockUnicast:                    pulumi.Bool(false),
	SwitchportModeAccess:                      pulumi.Bool(false),
	SwitchportModeTrunk:                       pulumi.Bool(false),
	SwitchportNonegotiate:                     pulumi.Bool(false),
	SwitchportPortSecurity:                    pulumi.Bool(false),
	SwitchportPortSecurityAgingStatic:         pulumi.Bool(false),
	SwitchportPortSecurityAgingTime:           pulumi.Int(0),
	SwitchportPortSecurityAgingType:           pulumi.Bool(false),
	SwitchportPortSecurityAgingTypeInactivity: pulumi.Bool(false),
	SwitchportPortSecurityMaximumRanges: iosxe.TemplateSwitchportPortSecurityMaximumRangeArray{
		&iosxe.TemplateSwitchportPortSecurityMaximumRangeArgs{
			Range:      pulumi.Int(0),
			Vlan:       pulumi.Bool(false),
			VlanAccess: pulumi.Bool(false),
		},
	},
	SwitchportPortSecurityViolationProtect:             pulumi.Bool(false),
	SwitchportPortSecurityViolationRestrict:            pulumi.Bool(false),
	SwitchportPortSecurityViolationShutdown:            pulumi.Bool(false),
	SwitchportPrivateVlanHostAssociationPrimaryRange:   pulumi.Int(0),
	SwitchportPrivateVlanHostAssociationSecondaryRange: pulumi.Int(0),
	SwitchportTrunkAllowedVlans:                        pulumi.String("string"),
	SwitchportTrunkAllowedVlansAll:                     pulumi.Bool(false),
	SwitchportTrunkAllowedVlansNone:                    pulumi.Bool(false),
	SwitchportTrunkNativeVlanTag:                       pulumi.Bool(false),
	SwitchportTrunkNativeVlanVlanId:                    pulumi.Int(0),
	SwitchportVoiceVlan:                                pulumi.Int(0),
})
var templateResource = new Template("templateResource", TemplateArgs.builder()
    .templateName("string")
    .accessSessionClosed(false)
    .accessSessionControlDirection("string")
    .accessSessionHostMode("string")
    .accessSessionInterfaceTemplateSticky(false)
    .accessSessionInterfaceTemplateStickyTimer(0)
    .accessSessionMonitor(false)
    .accessSessionPortControl("string")
    .authenticationPeriodic(false)
    .authenticationTimerReauthenticateRange(0)
    .authenticationTimerReauthenticateServer(false)
    .ctsManual(false)
    .ctsManualPolicyStaticSgt(0)
    .ctsManualPolicyStaticTrusted(false)
    .ctsManualPropagateSgt(false)
    .ctsRoleBasedEnforcement(false)
    .deleteMode("string")
    .device("string")
    .deviceTracking(false)
    .deviceTrackingAttachPolicies(TemplateDeviceTrackingAttachPolicyArgs.builder()
        .policyName("string")
        .vlanRange("string")
        .build())
    .deviceTrackingVlanRange("string")
    .dot1xMaxReauthReq(0)
    .dot1xMaxReq(0)
    .dot1xPae("string")
    .dot1xTimeoutTxPeriod(0)
    .ipAccessGroups(TemplateIpAccessGroupArgs.builder()
        .direction("string")
        .accessList("string")
        .build())
    .ipDhcpSnoopingLimitRate(0)
    .ipDhcpSnoopingTrust(false)
    .loadInterval(0)
    .mab(false)
    .mabEap(false)
    .servicePolicyInput("string")
    .servicePolicyOutput("string")
    .servicePolicyTypeControlSubscriber("string")
    .sourceTemplate("string")
    .spanningTreeBpduguardEnable(false)
    .spanningTreePortfast(false)
    .spanningTreePortfastDisable(false)
    .spanningTreePortfastEdge(false)
    .spanningTreePortfastNetwork(false)
    .spanningTreeServicePolicy(false)
    .stormControlActionShutdown(false)
    .stormControlActionTrap(false)
    .stormControlBroadcastLevelBpsThreshold(0)
    .stormControlBroadcastLevelPpsThreshold("string")
    .stormControlBroadcastLevelThreshold(0)
    .stormControlMulticastLevelBpsThreshold(0)
    .stormControlMulticastLevelPpsThreshold("string")
    .stormControlMulticastLevelThreshold(0)
    .subscriberAgingInactivityTimerProbe(false)
    .subscriberAgingInactivityTimerValue(0)
    .subscriberAgingProbe(false)
    .switchportAccessVlan(0)
    .switchportBlockUnicast(false)
    .switchportModeAccess(false)
    .switchportModeTrunk(false)
    .switchportNonegotiate(false)
    .switchportPortSecurity(false)
    .switchportPortSecurityAgingStatic(false)
    .switchportPortSecurityAgingTime(0)
    .switchportPortSecurityAgingType(false)
    .switchportPortSecurityAgingTypeInactivity(false)
    .switchportPortSecurityMaximumRanges(TemplateSwitchportPortSecurityMaximumRangeArgs.builder()
        .range(0)
        .vlan(false)
        .vlanAccess(false)
        .build())
    .switchportPortSecurityViolationProtect(false)
    .switchportPortSecurityViolationRestrict(false)
    .switchportPortSecurityViolationShutdown(false)
    .switchportPrivateVlanHostAssociationPrimaryRange(0)
    .switchportPrivateVlanHostAssociationSecondaryRange(0)
    .switchportTrunkAllowedVlans("string")
    .switchportTrunkAllowedVlansAll(false)
    .switchportTrunkAllowedVlansNone(false)
    .switchportTrunkNativeVlanTag(false)
    .switchportTrunkNativeVlanVlanId(0)
    .switchportVoiceVlan(0)
    .build());
template_resource = iosxe.Template("templateResource",
    template_name="string",
    access_session_closed=False,
    access_session_control_direction="string",
    access_session_host_mode="string",
    access_session_interface_template_sticky=False,
    access_session_interface_template_sticky_timer=0,
    access_session_monitor=False,
    access_session_port_control="string",
    authentication_periodic=False,
    authentication_timer_reauthenticate_range=0,
    authentication_timer_reauthenticate_server=False,
    cts_manual=False,
    cts_manual_policy_static_sgt=0,
    cts_manual_policy_static_trusted=False,
    cts_manual_propagate_sgt=False,
    cts_role_based_enforcement=False,
    delete_mode="string",
    device="string",
    device_tracking=False,
    device_tracking_attach_policies=[{
        "policy_name": "string",
        "vlan_range": "string",
    }],
    device_tracking_vlan_range="string",
    dot1x_max_reauth_req=0,
    dot1x_max_req=0,
    dot1x_pae="string",
    dot1x_timeout_tx_period=0,
    ip_access_groups=[{
        "direction": "string",
        "access_list": "string",
    }],
    ip_dhcp_snooping_limit_rate=0,
    ip_dhcp_snooping_trust=False,
    load_interval=0,
    mab=False,
    mab_eap=False,
    service_policy_input="string",
    service_policy_output="string",
    service_policy_type_control_subscriber="string",
    source_template="string",
    spanning_tree_bpduguard_enable=False,
    spanning_tree_portfast=False,
    spanning_tree_portfast_disable=False,
    spanning_tree_portfast_edge=False,
    spanning_tree_portfast_network=False,
    spanning_tree_service_policy=False,
    storm_control_action_shutdown=False,
    storm_control_action_trap=False,
    storm_control_broadcast_level_bps_threshold=0,
    storm_control_broadcast_level_pps_threshold="string",
    storm_control_broadcast_level_threshold=0,
    storm_control_multicast_level_bps_threshold=0,
    storm_control_multicast_level_pps_threshold="string",
    storm_control_multicast_level_threshold=0,
    subscriber_aging_inactivity_timer_probe=False,
    subscriber_aging_inactivity_timer_value=0,
    subscriber_aging_probe=False,
    switchport_access_vlan=0,
    switchport_block_unicast=False,
    switchport_mode_access=False,
    switchport_mode_trunk=False,
    switchport_nonegotiate=False,
    switchport_port_security=False,
    switchport_port_security_aging_static=False,
    switchport_port_security_aging_time=0,
    switchport_port_security_aging_type=False,
    switchport_port_security_aging_type_inactivity=False,
    switchport_port_security_maximum_ranges=[{
        "range": 0,
        "vlan": False,
        "vlan_access": False,
    }],
    switchport_port_security_violation_protect=False,
    switchport_port_security_violation_restrict=False,
    switchport_port_security_violation_shutdown=False,
    switchport_private_vlan_host_association_primary_range=0,
    switchport_private_vlan_host_association_secondary_range=0,
    switchport_trunk_allowed_vlans="string",
    switchport_trunk_allowed_vlans_all=False,
    switchport_trunk_allowed_vlans_none=False,
    switchport_trunk_native_vlan_tag=False,
    switchport_trunk_native_vlan_vlan_id=0,
    switchport_voice_vlan=0)
const templateResource = new iosxe.Template("templateResource", {
    templateName: "string",
    accessSessionClosed: false,
    accessSessionControlDirection: "string",
    accessSessionHostMode: "string",
    accessSessionInterfaceTemplateSticky: false,
    accessSessionInterfaceTemplateStickyTimer: 0,
    accessSessionMonitor: false,
    accessSessionPortControl: "string",
    authenticationPeriodic: false,
    authenticationTimerReauthenticateRange: 0,
    authenticationTimerReauthenticateServer: false,
    ctsManual: false,
    ctsManualPolicyStaticSgt: 0,
    ctsManualPolicyStaticTrusted: false,
    ctsManualPropagateSgt: false,
    ctsRoleBasedEnforcement: false,
    deleteMode: "string",
    device: "string",
    deviceTracking: false,
    deviceTrackingAttachPolicies: [{
        policyName: "string",
        vlanRange: "string",
    }],
    deviceTrackingVlanRange: "string",
    dot1xMaxReauthReq: 0,
    dot1xMaxReq: 0,
    dot1xPae: "string",
    dot1xTimeoutTxPeriod: 0,
    ipAccessGroups: [{
        direction: "string",
        accessList: "string",
    }],
    ipDhcpSnoopingLimitRate: 0,
    ipDhcpSnoopingTrust: false,
    loadInterval: 0,
    mab: false,
    mabEap: false,
    servicePolicyInput: "string",
    servicePolicyOutput: "string",
    servicePolicyTypeControlSubscriber: "string",
    sourceTemplate: "string",
    spanningTreeBpduguardEnable: false,
    spanningTreePortfast: false,
    spanningTreePortfastDisable: false,
    spanningTreePortfastEdge: false,
    spanningTreePortfastNetwork: false,
    spanningTreeServicePolicy: false,
    stormControlActionShutdown: false,
    stormControlActionTrap: false,
    stormControlBroadcastLevelBpsThreshold: 0,
    stormControlBroadcastLevelPpsThreshold: "string",
    stormControlBroadcastLevelThreshold: 0,
    stormControlMulticastLevelBpsThreshold: 0,
    stormControlMulticastLevelPpsThreshold: "string",
    stormControlMulticastLevelThreshold: 0,
    subscriberAgingInactivityTimerProbe: false,
    subscriberAgingInactivityTimerValue: 0,
    subscriberAgingProbe: false,
    switchportAccessVlan: 0,
    switchportBlockUnicast: false,
    switchportModeAccess: false,
    switchportModeTrunk: false,
    switchportNonegotiate: false,
    switchportPortSecurity: false,
    switchportPortSecurityAgingStatic: false,
    switchportPortSecurityAgingTime: 0,
    switchportPortSecurityAgingType: false,
    switchportPortSecurityAgingTypeInactivity: false,
    switchportPortSecurityMaximumRanges: [{
        range: 0,
        vlan: false,
        vlanAccess: false,
    }],
    switchportPortSecurityViolationProtect: false,
    switchportPortSecurityViolationRestrict: false,
    switchportPortSecurityViolationShutdown: false,
    switchportPrivateVlanHostAssociationPrimaryRange: 0,
    switchportPrivateVlanHostAssociationSecondaryRange: 0,
    switchportTrunkAllowedVlans: "string",
    switchportTrunkAllowedVlansAll: false,
    switchportTrunkAllowedVlansNone: false,
    switchportTrunkNativeVlanTag: false,
    switchportTrunkNativeVlanVlanId: 0,
    switchportVoiceVlan: 0,
});
type: iosxe:Template
properties:
    accessSessionClosed: false
    accessSessionControlDirection: string
    accessSessionHostMode: string
    accessSessionInterfaceTemplateSticky: false
    accessSessionInterfaceTemplateStickyTimer: 0
    accessSessionMonitor: false
    accessSessionPortControl: string
    authenticationPeriodic: false
    authenticationTimerReauthenticateRange: 0
    authenticationTimerReauthenticateServer: false
    ctsManual: false
    ctsManualPolicyStaticSgt: 0
    ctsManualPolicyStaticTrusted: false
    ctsManualPropagateSgt: false
    ctsRoleBasedEnforcement: false
    deleteMode: string
    device: string
    deviceTracking: false
    deviceTrackingAttachPolicies:
        - policyName: string
          vlanRange: string
    deviceTrackingVlanRange: string
    dot1xMaxReauthReq: 0
    dot1xMaxReq: 0
    dot1xPae: string
    dot1xTimeoutTxPeriod: 0
    ipAccessGroups:
        - accessList: string
          direction: string
    ipDhcpSnoopingLimitRate: 0
    ipDhcpSnoopingTrust: false
    loadInterval: 0
    mab: false
    mabEap: false
    servicePolicyInput: string
    servicePolicyOutput: string
    servicePolicyTypeControlSubscriber: string
    sourceTemplate: string
    spanningTreeBpduguardEnable: false
    spanningTreePortfast: false
    spanningTreePortfastDisable: false
    spanningTreePortfastEdge: false
    spanningTreePortfastNetwork: false
    spanningTreeServicePolicy: false
    stormControlActionShutdown: false
    stormControlActionTrap: false
    stormControlBroadcastLevelBpsThreshold: 0
    stormControlBroadcastLevelPpsThreshold: string
    stormControlBroadcastLevelThreshold: 0
    stormControlMulticastLevelBpsThreshold: 0
    stormControlMulticastLevelPpsThreshold: string
    stormControlMulticastLevelThreshold: 0
    subscriberAgingInactivityTimerProbe: false
    subscriberAgingInactivityTimerValue: 0
    subscriberAgingProbe: false
    switchportAccessVlan: 0
    switchportBlockUnicast: false
    switchportModeAccess: false
    switchportModeTrunk: false
    switchportNonegotiate: false
    switchportPortSecurity: false
    switchportPortSecurityAgingStatic: false
    switchportPortSecurityAgingTime: 0
    switchportPortSecurityAgingType: false
    switchportPortSecurityAgingTypeInactivity: false
    switchportPortSecurityMaximumRanges:
        - range: 0
          vlan: false
          vlanAccess: false
    switchportPortSecurityViolationProtect: false
    switchportPortSecurityViolationRestrict: false
    switchportPortSecurityViolationShutdown: false
    switchportPrivateVlanHostAssociationPrimaryRange: 0
    switchportPrivateVlanHostAssociationSecondaryRange: 0
    switchportTrunkAllowedVlans: string
    switchportTrunkAllowedVlansAll: false
    switchportTrunkAllowedVlansNone: false
    switchportTrunkNativeVlanTag: false
    switchportTrunkNativeVlanVlanId: 0
    switchportVoiceVlan: 0
    templateName: string
Template Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Template resource accepts the following input properties:
- Template
Name string - Template name
 - Access
Session boolClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - Access
Session stringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - Access
Session stringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - Access
Session boolInterface Template Sticky  - Interface templates set to sticky
 - Access
Session intInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - Access
Session boolMonitor  - Apply template to monitor access sessions on the port
 - Access
Session stringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - Authentication
Periodic bool - Enable or Disable Reauthentication for this port
 - Authentication
Timer intReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - Authentication
Timer boolReauthenticate Server  - Obtain re-authentication timeout value from the server
 - Cts
Manual bool - Supply local configuration for CTS parameters
 - Cts
Manual intPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - Cts
Manual boolPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - Cts
Manual boolPropagate Sgt  - CTS SGT Propagation configuration
 - Cts
Role boolBased Enforcement  - Enable Role-based Access Control enforcement
 - Delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - Device string
 - A device name from the provider configuration.
 - Device
Tracking bool - Configure device-tracking on the interface
 - Device
Tracking List<Lbrlabs.Attach Policies Pulumi Package. Iosxe. Inputs. Template Device Tracking Attach Policy>  - policy name for device tracking
 - Device
Tracking stringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - Dot1x
Max intReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - Dot1x
Max intReq  - Max No. of Retries - Range: 
1-10 - Dot1x
Pae string - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - Dot1x
Timeout intTx Period  - Timeout for supplicant retries - Range: 
1-65535 - Ip
Access List<Lbrlabs.Groups Pulumi Package. Iosxe. Inputs. Template Ip Access Group>  - Access control list for IP packets
 - Ip
Dhcp intSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - Ip
Dhcp boolSnooping Trust  - DHCP Snooping trust config
 - Load
Interval int - Load interval delay in seconds - Range: 
30-600 - Mab bool
 - MAC Authentication Bypass Interface Config Commands
 - Mab
Eap bool - Use EAP authentication for MAC Auth Bypass
 - Service
Policy stringInput  - policy-map name
 - Service
Policy stringOutput  - policy-map name
 - Service
Policy stringType Control Subscriber  - Apply a subscriber control policy to the interface
 - Source
Template string - Get config from a template
 - Spanning
Tree boolBpduguard Enable  - Enable BPDU guard for this interface
 - Spanning
Tree boolPortfast  - Portfast options for the interface
 - Spanning
Tree boolPortfast Disable  - Disable portfast for this interface
 - Spanning
Tree boolPortfast Edge  - Enable portfast edge on the interface
 - Spanning
Tree boolPortfast Network  - Enable portfast network on the interface
 - Spanning
Tree boolService Policy  - help
 - Storm
Control boolAction Shutdown  - Shutdown this interface if a storm occurs
 - Storm
Control boolAction Trap  - Send SNMP trap if a storm occurs
 - Storm
Control doubleBroadcast Level Bps Threshold  - Enter threshold
 - Storm
Control stringBroadcast Level Pps Threshold  - Enter threshold
 - Storm
Control doubleBroadcast Level Threshold  - Enter threshold
 - Storm
Control doubleMulticast Level Bps Threshold  - Enter threshold
 - Storm
Control stringMulticast Level Pps Threshold  - Enter threshold
 - Storm
Control doubleMulticast Level Threshold  - Enter threshold
 - Subscriber
Aging boolInactivity Timer Probe  - ARP probe
 - Subscriber
Aging intInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - Subscriber
Aging boolProbe  - ARP probe
 - Switchport
Access intVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - Switchport
Block boolUnicast  - Block unknown unicast addresses
 - Switchport
Mode boolAccess  - Set trunking mode to ACCESS unconditionally
 - Switchport
Mode boolTrunk  - Set trunking mode to TRUNK unconditionally
 - Switchport
Nonegotiate bool - Device will not engage in negotiation protocol on this interface
 - Switchport
Port boolSecurity  - Security related command
 - Switchport
Port boolSecurity Aging Static  - Enable aging for configured secure addresses
 - Switchport
Port intSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - Switchport
Port boolSecurity Aging Type  - Port-security aging type
 - Switchport
Port boolSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - Switchport
Port List<Lbrlabs.Security Maximum Ranges Pulumi Package. Iosxe. Inputs. Template Switchport Port Security Maximum Range>  - Switchport
Port boolSecurity Violation Protect  - Security violation protect mode
 - Switchport
Port boolSecurity Violation Restrict  - Security violation restrict mode
 - Switchport
Port boolSecurity Violation Shutdown  - Security violation shutdown mode
 - Switchport
Private intVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - Switchport
Private intVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - Switchport
Trunk stringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - Switchport
Trunk boolAllowed Vlans All  - all VLANs
 - Switchport
Trunk boolAllowed Vlans None  - no VLANs
 - Switchport
Trunk boolNative Vlan Tag  - Set native VLAN tagging state
 - Switchport
Trunk intNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - Switchport
Voice intVlan  - Vlan for voice traffic - Range: 
1-4094 
- Template
Name string - Template name
 - Access
Session boolClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - Access
Session stringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - Access
Session stringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - Access
Session boolInterface Template Sticky  - Interface templates set to sticky
 - Access
Session intInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - Access
Session boolMonitor  - Apply template to monitor access sessions on the port
 - Access
Session stringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - Authentication
Periodic bool - Enable or Disable Reauthentication for this port
 - Authentication
Timer intReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - Authentication
Timer boolReauthenticate Server  - Obtain re-authentication timeout value from the server
 - Cts
Manual bool - Supply local configuration for CTS parameters
 - Cts
Manual intPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - Cts
Manual boolPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - Cts
Manual boolPropagate Sgt  - CTS SGT Propagation configuration
 - Cts
Role boolBased Enforcement  - Enable Role-based Access Control enforcement
 - Delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - Device string
 - A device name from the provider configuration.
 - Device
Tracking bool - Configure device-tracking on the interface
 - Device
Tracking []TemplateAttach Policies Device Tracking Attach Policy Args  - policy name for device tracking
 - Device
Tracking stringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - Dot1x
Max intReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - Dot1x
Max intReq  - Max No. of Retries - Range: 
1-10 - Dot1x
Pae string - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - Dot1x
Timeout intTx Period  - Timeout for supplicant retries - Range: 
1-65535 - Ip
Access []TemplateGroups Ip Access Group Args  - Access control list for IP packets
 - Ip
Dhcp intSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - Ip
Dhcp boolSnooping Trust  - DHCP Snooping trust config
 - Load
Interval int - Load interval delay in seconds - Range: 
30-600 - Mab bool
 - MAC Authentication Bypass Interface Config Commands
 - Mab
Eap bool - Use EAP authentication for MAC Auth Bypass
 - Service
Policy stringInput  - policy-map name
 - Service
Policy stringOutput  - policy-map name
 - Service
Policy stringType Control Subscriber  - Apply a subscriber control policy to the interface
 - Source
Template string - Get config from a template
 - Spanning
Tree boolBpduguard Enable  - Enable BPDU guard for this interface
 - Spanning
Tree boolPortfast  - Portfast options for the interface
 - Spanning
Tree boolPortfast Disable  - Disable portfast for this interface
 - Spanning
Tree boolPortfast Edge  - Enable portfast edge on the interface
 - Spanning
Tree boolPortfast Network  - Enable portfast network on the interface
 - Spanning
Tree boolService Policy  - help
 - Storm
Control boolAction Shutdown  - Shutdown this interface if a storm occurs
 - Storm
Control boolAction Trap  - Send SNMP trap if a storm occurs
 - Storm
Control float64Broadcast Level Bps Threshold  - Enter threshold
 - Storm
Control stringBroadcast Level Pps Threshold  - Enter threshold
 - Storm
Control float64Broadcast Level Threshold  - Enter threshold
 - Storm
Control float64Multicast Level Bps Threshold  - Enter threshold
 - Storm
Control stringMulticast Level Pps Threshold  - Enter threshold
 - Storm
Control float64Multicast Level Threshold  - Enter threshold
 - Subscriber
Aging boolInactivity Timer Probe  - ARP probe
 - Subscriber
Aging intInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - Subscriber
Aging boolProbe  - ARP probe
 - Switchport
Access intVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - Switchport
Block boolUnicast  - Block unknown unicast addresses
 - Switchport
Mode boolAccess  - Set trunking mode to ACCESS unconditionally
 - Switchport
Mode boolTrunk  - Set trunking mode to TRUNK unconditionally
 - Switchport
Nonegotiate bool - Device will not engage in negotiation protocol on this interface
 - Switchport
Port boolSecurity  - Security related command
 - Switchport
Port boolSecurity Aging Static  - Enable aging for configured secure addresses
 - Switchport
Port intSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - Switchport
Port boolSecurity Aging Type  - Port-security aging type
 - Switchport
Port boolSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - Switchport
Port []TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range Args  - Switchport
Port boolSecurity Violation Protect  - Security violation protect mode
 - Switchport
Port boolSecurity Violation Restrict  - Security violation restrict mode
 - Switchport
Port boolSecurity Violation Shutdown  - Security violation shutdown mode
 - Switchport
Private intVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - Switchport
Private intVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - Switchport
Trunk stringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - Switchport
Trunk boolAllowed Vlans All  - all VLANs
 - Switchport
Trunk boolAllowed Vlans None  - no VLANs
 - Switchport
Trunk boolNative Vlan Tag  - Set native VLAN tagging state
 - Switchport
Trunk intNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - Switchport
Voice intVlan  - Vlan for voice traffic - Range: 
1-4094 
- template
Name String - Template name
 - access
Session BooleanClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - access
Session StringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - access
Session StringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - access
Session BooleanInterface Template Sticky  - Interface templates set to sticky
 - access
Session IntegerInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - access
Session BooleanMonitor  - Apply template to monitor access sessions on the port
 - access
Session StringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - authentication
Periodic Boolean - Enable or Disable Reauthentication for this port
 - authentication
Timer IntegerReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - authentication
Timer BooleanReauthenticate Server  - Obtain re-authentication timeout value from the server
 - cts
Manual Boolean - Supply local configuration for CTS parameters
 - cts
Manual IntegerPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - cts
Manual BooleanPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - cts
Manual BooleanPropagate Sgt  - CTS SGT Propagation configuration
 - cts
Role BooleanBased Enforcement  - Enable Role-based Access Control enforcement
 - delete
Mode String - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - device String
 - A device name from the provider configuration.
 - device
Tracking Boolean - Configure device-tracking on the interface
 - device
Tracking List<TemplateAttach Policies Device Tracking Attach Policy>  - policy name for device tracking
 - device
Tracking StringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - dot1x
Max IntegerReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - dot1x
Max IntegerReq  - Max No. of Retries - Range: 
1-10 - dot1x
Pae String - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - dot1x
Timeout IntegerTx Period  - Timeout for supplicant retries - Range: 
1-65535 - ip
Access List<TemplateGroups Ip Access Group>  - Access control list for IP packets
 - ip
Dhcp IntegerSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - ip
Dhcp BooleanSnooping Trust  - DHCP Snooping trust config
 - load
Interval Integer - Load interval delay in seconds - Range: 
30-600 - mab Boolean
 - MAC Authentication Bypass Interface Config Commands
 - mab
Eap Boolean - Use EAP authentication for MAC Auth Bypass
 - service
Policy StringInput  - policy-map name
 - service
Policy StringOutput  - policy-map name
 - service
Policy StringType Control Subscriber  - Apply a subscriber control policy to the interface
 - source
Template String - Get config from a template
 - spanning
Tree BooleanBpduguard Enable  - Enable BPDU guard for this interface
 - spanning
Tree BooleanPortfast  - Portfast options for the interface
 - spanning
Tree BooleanPortfast Disable  - Disable portfast for this interface
 - spanning
Tree BooleanPortfast Edge  - Enable portfast edge on the interface
 - spanning
Tree BooleanPortfast Network  - Enable portfast network on the interface
 - spanning
Tree BooleanService Policy  - help
 - storm
Control BooleanAction Shutdown  - Shutdown this interface if a storm occurs
 - storm
Control BooleanAction Trap  - Send SNMP trap if a storm occurs
 - storm
Control DoubleBroadcast Level Bps Threshold  - Enter threshold
 - storm
Control StringBroadcast Level Pps Threshold  - Enter threshold
 - storm
Control DoubleBroadcast Level Threshold  - Enter threshold
 - storm
Control DoubleMulticast Level Bps Threshold  - Enter threshold
 - storm
Control StringMulticast Level Pps Threshold  - Enter threshold
 - storm
Control DoubleMulticast Level Threshold  - Enter threshold
 - subscriber
Aging BooleanInactivity Timer Probe  - ARP probe
 - subscriber
Aging IntegerInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - subscriber
Aging BooleanProbe  - ARP probe
 - switchport
Access IntegerVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - switchport
Block BooleanUnicast  - Block unknown unicast addresses
 - switchport
Mode BooleanAccess  - Set trunking mode to ACCESS unconditionally
 - switchport
Mode BooleanTrunk  - Set trunking mode to TRUNK unconditionally
 - switchport
Nonegotiate Boolean - Device will not engage in negotiation protocol on this interface
 - switchport
Port BooleanSecurity  - Security related command
 - switchport
Port BooleanSecurity Aging Static  - Enable aging for configured secure addresses
 - switchport
Port IntegerSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - switchport
Port BooleanSecurity Aging Type  - Port-security aging type
 - switchport
Port BooleanSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - switchport
Port List<TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range>  - switchport
Port BooleanSecurity Violation Protect  - Security violation protect mode
 - switchport
Port BooleanSecurity Violation Restrict  - Security violation restrict mode
 - switchport
Port BooleanSecurity Violation Shutdown  - Security violation shutdown mode
 - switchport
Private IntegerVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - switchport
Private IntegerVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - switchport
Trunk StringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - switchport
Trunk BooleanAllowed Vlans All  - all VLANs
 - switchport
Trunk BooleanAllowed Vlans None  - no VLANs
 - switchport
Trunk BooleanNative Vlan Tag  - Set native VLAN tagging state
 - switchport
Trunk IntegerNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - switchport
Voice IntegerVlan  - Vlan for voice traffic - Range: 
1-4094 
- template
Name string - Template name
 - access
Session booleanClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - access
Session stringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - access
Session stringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - access
Session booleanInterface Template Sticky  - Interface templates set to sticky
 - access
Session numberInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - access
Session booleanMonitor  - Apply template to monitor access sessions on the port
 - access
Session stringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - authentication
Periodic boolean - Enable or Disable Reauthentication for this port
 - authentication
Timer numberReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - authentication
Timer booleanReauthenticate Server  - Obtain re-authentication timeout value from the server
 - cts
Manual boolean - Supply local configuration for CTS parameters
 - cts
Manual numberPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - cts
Manual booleanPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - cts
Manual booleanPropagate Sgt  - CTS SGT Propagation configuration
 - cts
Role booleanBased Enforcement  - Enable Role-based Access Control enforcement
 - delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - device string
 - A device name from the provider configuration.
 - device
Tracking boolean - Configure device-tracking on the interface
 - device
Tracking TemplateAttach Policies Device Tracking Attach Policy[]  - policy name for device tracking
 - device
Tracking stringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - dot1x
Max numberReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - dot1x
Max numberReq  - Max No. of Retries - Range: 
1-10 - dot1x
Pae string - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - dot1x
Timeout numberTx Period  - Timeout for supplicant retries - Range: 
1-65535 - ip
Access TemplateGroups Ip Access Group[]  - Access control list for IP packets
 - ip
Dhcp numberSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - ip
Dhcp booleanSnooping Trust  - DHCP Snooping trust config
 - load
Interval number - Load interval delay in seconds - Range: 
30-600 - mab boolean
 - MAC Authentication Bypass Interface Config Commands
 - mab
Eap boolean - Use EAP authentication for MAC Auth Bypass
 - service
Policy stringInput  - policy-map name
 - service
Policy stringOutput  - policy-map name
 - service
Policy stringType Control Subscriber  - Apply a subscriber control policy to the interface
 - source
Template string - Get config from a template
 - spanning
Tree booleanBpduguard Enable  - Enable BPDU guard for this interface
 - spanning
Tree booleanPortfast  - Portfast options for the interface
 - spanning
Tree booleanPortfast Disable  - Disable portfast for this interface
 - spanning
Tree booleanPortfast Edge  - Enable portfast edge on the interface
 - spanning
Tree booleanPortfast Network  - Enable portfast network on the interface
 - spanning
Tree booleanService Policy  - help
 - storm
Control booleanAction Shutdown  - Shutdown this interface if a storm occurs
 - storm
Control booleanAction Trap  - Send SNMP trap if a storm occurs
 - storm
Control numberBroadcast Level Bps Threshold  - Enter threshold
 - storm
Control stringBroadcast Level Pps Threshold  - Enter threshold
 - storm
Control numberBroadcast Level Threshold  - Enter threshold
 - storm
Control numberMulticast Level Bps Threshold  - Enter threshold
 - storm
Control stringMulticast Level Pps Threshold  - Enter threshold
 - storm
Control numberMulticast Level Threshold  - Enter threshold
 - subscriber
Aging booleanInactivity Timer Probe  - ARP probe
 - subscriber
Aging numberInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - subscriber
Aging booleanProbe  - ARP probe
 - switchport
Access numberVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - switchport
Block booleanUnicast  - Block unknown unicast addresses
 - switchport
Mode booleanAccess  - Set trunking mode to ACCESS unconditionally
 - switchport
Mode booleanTrunk  - Set trunking mode to TRUNK unconditionally
 - switchport
Nonegotiate boolean - Device will not engage in negotiation protocol on this interface
 - switchport
Port booleanSecurity  - Security related command
 - switchport
Port booleanSecurity Aging Static  - Enable aging for configured secure addresses
 - switchport
Port numberSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - switchport
Port booleanSecurity Aging Type  - Port-security aging type
 - switchport
Port booleanSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - switchport
Port TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range[]  - switchport
Port booleanSecurity Violation Protect  - Security violation protect mode
 - switchport
Port booleanSecurity Violation Restrict  - Security violation restrict mode
 - switchport
Port booleanSecurity Violation Shutdown  - Security violation shutdown mode
 - switchport
Private numberVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - switchport
Private numberVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - switchport
Trunk stringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - switchport
Trunk booleanAllowed Vlans All  - all VLANs
 - switchport
Trunk booleanAllowed Vlans None  - no VLANs
 - switchport
Trunk booleanNative Vlan Tag  - Set native VLAN tagging state
 - switchport
Trunk numberNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - switchport
Voice numberVlan  - Vlan for voice traffic - Range: 
1-4094 
- template_
name str - Template name
 - access_
session_ boolclosed  - Enable closed access on port (disabled by default, i.e. open access)
 - access_
session_ strcontrol_ direction  - Set the control-direction on the interface - Choices: 
both,in - access_
session_ strhost_ mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - access_
session_ boolinterface_ template_ sticky  - Interface templates set to sticky
 - access_
session_ intinterface_ template_ sticky_ timer  - Sticky timer value - Range: 
1-65535 - access_
session_ boolmonitor  - Apply template to monitor access sessions on the port
 - access_
session_ strport_ control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - authentication_
periodic bool - Enable or Disable Reauthentication for this port
 - authentication_
timer_ intreauthenticate_ range  - Enter a value between 1 and 65535 - Range: 
1-65535 - authentication_
timer_ boolreauthenticate_ server  - Obtain re-authentication timeout value from the server
 - cts_
manual bool - Supply local configuration for CTS parameters
 - cts_
manual_ intpolicy_ static_ sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - cts_
manual_ boolpolicy_ static_ trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - cts_
manual_ boolpropagate_ sgt  - CTS SGT Propagation configuration
 - cts_
role_ boolbased_ enforcement  - Enable Role-based Access Control enforcement
 - delete_
mode str - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - device str
 - A device name from the provider configuration.
 - device_
tracking bool - Configure device-tracking on the interface
 - device_
tracking_ Sequence[Templateattach_ policies Device Tracking Attach Policy Args]  - policy name for device tracking
 - device_
tracking_ strvlan_ range  - VLAN IDs of the VLANs for which this policy applies
 - dot1x_
max_ intreauth_ req  - Max No. of Reauthentication Attempts - Range: 
1-10 - dot1x_
max_ intreq  - Max No. of Retries - Range: 
1-10 - dot1x_
pae str - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - dot1x_
timeout_ inttx_ period  - Timeout for supplicant retries - Range: 
1-65535 - ip_
access_ Sequence[Templategroups Ip Access Group Args]  - Access control list for IP packets
 - ip_
dhcp_ intsnooping_ limit_ rate  - DHCP snooping rate limit - Range: 
1-2048 - ip_
dhcp_ boolsnooping_ trust  - DHCP Snooping trust config
 - load_
interval int - Load interval delay in seconds - Range: 
30-600 - mab bool
 - MAC Authentication Bypass Interface Config Commands
 - mab_
eap bool - Use EAP authentication for MAC Auth Bypass
 - service_
policy_ strinput  - policy-map name
 - service_
policy_ stroutput  - policy-map name
 - service_
policy_ strtype_ control_ subscriber  - Apply a subscriber control policy to the interface
 - source_
template str - Get config from a template
 - spanning_
tree_ boolbpduguard_ enable  - Enable BPDU guard for this interface
 - spanning_
tree_ boolportfast  - Portfast options for the interface
 - spanning_
tree_ boolportfast_ disable  - Disable portfast for this interface
 - spanning_
tree_ boolportfast_ edge  - Enable portfast edge on the interface
 - spanning_
tree_ boolportfast_ network  - Enable portfast network on the interface
 - spanning_
tree_ boolservice_ policy  - help
 - storm_
control_ boolaction_ shutdown  - Shutdown this interface if a storm occurs
 - storm_
control_ boolaction_ trap  - Send SNMP trap if a storm occurs
 - storm_
control_ floatbroadcast_ level_ bps_ threshold  - Enter threshold
 - storm_
control_ strbroadcast_ level_ pps_ threshold  - Enter threshold
 - storm_
control_ floatbroadcast_ level_ threshold  - Enter threshold
 - storm_
control_ floatmulticast_ level_ bps_ threshold  - Enter threshold
 - storm_
control_ strmulticast_ level_ pps_ threshold  - Enter threshold
 - storm_
control_ floatmulticast_ level_ threshold  - Enter threshold
 - subscriber_
aging_ boolinactivity_ timer_ probe  - ARP probe
 - subscriber_
aging_ intinactivity_ timer_ value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - subscriber_
aging_ boolprobe  - ARP probe
 - switchport_
access_ intvlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - switchport_
block_ boolunicast  - Block unknown unicast addresses
 - switchport_
mode_ boolaccess  - Set trunking mode to ACCESS unconditionally
 - switchport_
mode_ booltrunk  - Set trunking mode to TRUNK unconditionally
 - switchport_
nonegotiate bool - Device will not engage in negotiation protocol on this interface
 - switchport_
port_ boolsecurity  - Security related command
 - switchport_
port_ boolsecurity_ aging_ static  - Enable aging for configured secure addresses
 - switchport_
port_ intsecurity_ aging_ time  - Port-security aging time - Range: 
1-1440 - switchport_
port_ boolsecurity_ aging_ type  - Port-security aging type
 - switchport_
port_ boolsecurity_ aging_ type_ inactivity  - Aging based on inactivity time period
 - switchport_
port_ Sequence[Templatesecurity_ maximum_ ranges Switchport Port Security Maximum Range Args]  - switchport_
port_ boolsecurity_ violation_ protect  - Security violation protect mode
 - switchport_
port_ boolsecurity_ violation_ restrict  - Security violation restrict mode
 - switchport_
port_ boolsecurity_ violation_ shutdown  - Security violation shutdown mode
 - switchport_
private_ intvlan_ host_ association_ primary_ range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - switchport_
private_ intvlan_ host_ association_ secondary_ range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - switchport_
trunk_ strallowed_ vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - switchport_
trunk_ boolallowed_ vlans_ all  - all VLANs
 - switchport_
trunk_ boolallowed_ vlans_ none  - no VLANs
 - switchport_
trunk_ boolnative_ vlan_ tag  - Set native VLAN tagging state
 - switchport_
trunk_ intnative_ vlan_ vlan_ id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - switchport_
voice_ intvlan  - Vlan for voice traffic - Range: 
1-4094 
- template
Name String - Template name
 - access
Session BooleanClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - access
Session StringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - access
Session StringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - access
Session BooleanInterface Template Sticky  - Interface templates set to sticky
 - access
Session NumberInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - access
Session BooleanMonitor  - Apply template to monitor access sessions on the port
 - access
Session StringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - authentication
Periodic Boolean - Enable or Disable Reauthentication for this port
 - authentication
Timer NumberReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - authentication
Timer BooleanReauthenticate Server  - Obtain re-authentication timeout value from the server
 - cts
Manual Boolean - Supply local configuration for CTS parameters
 - cts
Manual NumberPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - cts
Manual BooleanPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - cts
Manual BooleanPropagate Sgt  - CTS SGT Propagation configuration
 - cts
Role BooleanBased Enforcement  - Enable Role-based Access Control enforcement
 - delete
Mode String - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - device String
 - A device name from the provider configuration.
 - device
Tracking Boolean - Configure device-tracking on the interface
 - device
Tracking List<Property Map>Attach Policies  - policy name for device tracking
 - device
Tracking StringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - dot1x
Max NumberReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - dot1x
Max NumberReq  - Max No. of Retries - Range: 
1-10 - dot1x
Pae String - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - dot1x
Timeout NumberTx Period  - Timeout for supplicant retries - Range: 
1-65535 - ip
Access List<Property Map>Groups  - Access control list for IP packets
 - ip
Dhcp NumberSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - ip
Dhcp BooleanSnooping Trust  - DHCP Snooping trust config
 - load
Interval Number - Load interval delay in seconds - Range: 
30-600 - mab Boolean
 - MAC Authentication Bypass Interface Config Commands
 - mab
Eap Boolean - Use EAP authentication for MAC Auth Bypass
 - service
Policy StringInput  - policy-map name
 - service
Policy StringOutput  - policy-map name
 - service
Policy StringType Control Subscriber  - Apply a subscriber control policy to the interface
 - source
Template String - Get config from a template
 - spanning
Tree BooleanBpduguard Enable  - Enable BPDU guard for this interface
 - spanning
Tree BooleanPortfast  - Portfast options for the interface
 - spanning
Tree BooleanPortfast Disable  - Disable portfast for this interface
 - spanning
Tree BooleanPortfast Edge  - Enable portfast edge on the interface
 - spanning
Tree BooleanPortfast Network  - Enable portfast network on the interface
 - spanning
Tree BooleanService Policy  - help
 - storm
Control BooleanAction Shutdown  - Shutdown this interface if a storm occurs
 - storm
Control BooleanAction Trap  - Send SNMP trap if a storm occurs
 - storm
Control NumberBroadcast Level Bps Threshold  - Enter threshold
 - storm
Control StringBroadcast Level Pps Threshold  - Enter threshold
 - storm
Control NumberBroadcast Level Threshold  - Enter threshold
 - storm
Control NumberMulticast Level Bps Threshold  - Enter threshold
 - storm
Control StringMulticast Level Pps Threshold  - Enter threshold
 - storm
Control NumberMulticast Level Threshold  - Enter threshold
 - subscriber
Aging BooleanInactivity Timer Probe  - ARP probe
 - subscriber
Aging NumberInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - subscriber
Aging BooleanProbe  - ARP probe
 - switchport
Access NumberVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - switchport
Block BooleanUnicast  - Block unknown unicast addresses
 - switchport
Mode BooleanAccess  - Set trunking mode to ACCESS unconditionally
 - switchport
Mode BooleanTrunk  - Set trunking mode to TRUNK unconditionally
 - switchport
Nonegotiate Boolean - Device will not engage in negotiation protocol on this interface
 - switchport
Port BooleanSecurity  - Security related command
 - switchport
Port BooleanSecurity Aging Static  - Enable aging for configured secure addresses
 - switchport
Port NumberSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - switchport
Port BooleanSecurity Aging Type  - Port-security aging type
 - switchport
Port BooleanSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - switchport
Port List<Property Map>Security Maximum Ranges  - switchport
Port BooleanSecurity Violation Protect  - Security violation protect mode
 - switchport
Port BooleanSecurity Violation Restrict  - Security violation restrict mode
 - switchport
Port BooleanSecurity Violation Shutdown  - Security violation shutdown mode
 - switchport
Private NumberVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - switchport
Private NumberVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - switchport
Trunk StringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - switchport
Trunk BooleanAllowed Vlans All  - all VLANs
 - switchport
Trunk BooleanAllowed Vlans None  - no VLANs
 - switchport
Trunk BooleanNative Vlan Tag  - Set native VLAN tagging state
 - switchport
Trunk NumberNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - switchport
Voice NumberVlan  - Vlan for voice traffic - Range: 
1-4094 
Outputs
All input properties are implicitly available as output properties. Additionally, the Template resource produces the following output properties:
- Id string
 - The provider-assigned unique ID for this managed resource.
 
- Id string
 - The provider-assigned unique ID for this managed resource.
 
- id String
 - The provider-assigned unique ID for this managed resource.
 
- id string
 - The provider-assigned unique ID for this managed resource.
 
- id str
 - The provider-assigned unique ID for this managed resource.
 
- id String
 - The provider-assigned unique ID for this managed resource.
 
Look up Existing Template Resource
Get an existing Template resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: TemplateState, opts?: CustomResourceOptions): Template@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_session_closed: Optional[bool] = None,
        access_session_control_direction: Optional[str] = None,
        access_session_host_mode: Optional[str] = None,
        access_session_interface_template_sticky: Optional[bool] = None,
        access_session_interface_template_sticky_timer: Optional[int] = None,
        access_session_monitor: Optional[bool] = None,
        access_session_port_control: Optional[str] = None,
        authentication_periodic: Optional[bool] = None,
        authentication_timer_reauthenticate_range: Optional[int] = None,
        authentication_timer_reauthenticate_server: Optional[bool] = None,
        cts_manual: Optional[bool] = None,
        cts_manual_policy_static_sgt: Optional[int] = None,
        cts_manual_policy_static_trusted: Optional[bool] = None,
        cts_manual_propagate_sgt: Optional[bool] = None,
        cts_role_based_enforcement: Optional[bool] = None,
        delete_mode: Optional[str] = None,
        device: Optional[str] = None,
        device_tracking: Optional[bool] = None,
        device_tracking_attach_policies: Optional[Sequence[TemplateDeviceTrackingAttachPolicyArgs]] = None,
        device_tracking_vlan_range: Optional[str] = None,
        dot1x_max_reauth_req: Optional[int] = None,
        dot1x_max_req: Optional[int] = None,
        dot1x_pae: Optional[str] = None,
        dot1x_timeout_tx_period: Optional[int] = None,
        ip_access_groups: Optional[Sequence[TemplateIpAccessGroupArgs]] = None,
        ip_dhcp_snooping_limit_rate: Optional[int] = None,
        ip_dhcp_snooping_trust: Optional[bool] = None,
        load_interval: Optional[int] = None,
        mab: Optional[bool] = None,
        mab_eap: Optional[bool] = None,
        service_policy_input: Optional[str] = None,
        service_policy_output: Optional[str] = None,
        service_policy_type_control_subscriber: Optional[str] = None,
        source_template: Optional[str] = None,
        spanning_tree_bpduguard_enable: Optional[bool] = None,
        spanning_tree_portfast: Optional[bool] = None,
        spanning_tree_portfast_disable: Optional[bool] = None,
        spanning_tree_portfast_edge: Optional[bool] = None,
        spanning_tree_portfast_network: Optional[bool] = None,
        spanning_tree_service_policy: Optional[bool] = None,
        storm_control_action_shutdown: Optional[bool] = None,
        storm_control_action_trap: Optional[bool] = None,
        storm_control_broadcast_level_bps_threshold: Optional[float] = None,
        storm_control_broadcast_level_pps_threshold: Optional[str] = None,
        storm_control_broadcast_level_threshold: Optional[float] = None,
        storm_control_multicast_level_bps_threshold: Optional[float] = None,
        storm_control_multicast_level_pps_threshold: Optional[str] = None,
        storm_control_multicast_level_threshold: Optional[float] = None,
        subscriber_aging_inactivity_timer_probe: Optional[bool] = None,
        subscriber_aging_inactivity_timer_value: Optional[int] = None,
        subscriber_aging_probe: Optional[bool] = None,
        switchport_access_vlan: Optional[int] = None,
        switchport_block_unicast: Optional[bool] = None,
        switchport_mode_access: Optional[bool] = None,
        switchport_mode_trunk: Optional[bool] = None,
        switchport_nonegotiate: Optional[bool] = None,
        switchport_port_security: Optional[bool] = None,
        switchport_port_security_aging_static: Optional[bool] = None,
        switchport_port_security_aging_time: Optional[int] = None,
        switchport_port_security_aging_type: Optional[bool] = None,
        switchport_port_security_aging_type_inactivity: Optional[bool] = None,
        switchport_port_security_maximum_ranges: Optional[Sequence[TemplateSwitchportPortSecurityMaximumRangeArgs]] = None,
        switchport_port_security_violation_protect: Optional[bool] = None,
        switchport_port_security_violation_restrict: Optional[bool] = None,
        switchport_port_security_violation_shutdown: Optional[bool] = None,
        switchport_private_vlan_host_association_primary_range: Optional[int] = None,
        switchport_private_vlan_host_association_secondary_range: Optional[int] = None,
        switchport_trunk_allowed_vlans: Optional[str] = None,
        switchport_trunk_allowed_vlans_all: Optional[bool] = None,
        switchport_trunk_allowed_vlans_none: Optional[bool] = None,
        switchport_trunk_native_vlan_tag: Optional[bool] = None,
        switchport_trunk_native_vlan_vlan_id: Optional[int] = None,
        switchport_voice_vlan: Optional[int] = None,
        template_name: Optional[str] = None) -> Templatefunc GetTemplate(ctx *Context, name string, id IDInput, state *TemplateState, opts ...ResourceOption) (*Template, error)public static Template Get(string name, Input<string> id, TemplateState? state, CustomResourceOptions? opts = null)public static Template get(String name, Output<String> id, TemplateState state, CustomResourceOptions options)resources:  _:    type: iosxe:Template    get:      id: ${id}- name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 - state
 - Any extra arguments used during the lookup.
 - opts
 - A bag of options that control this resource's behavior.
 
- resource_name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 
- name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 - state
 - Any extra arguments used during the lookup.
 - opts
 - A bag of options that control this resource's behavior.
 
- name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 - state
 - Any extra arguments used during the lookup.
 - opts
 - A bag of options that control this resource's behavior.
 
- name
 - The unique name of the resulting resource.
 - id
 - The unique provider ID of the resource to lookup.
 - state
 - Any extra arguments used during the lookup.
 - opts
 - A bag of options that control this resource's behavior.
 
- Access
Session boolClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - Access
Session stringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - Access
Session stringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - Access
Session boolInterface Template Sticky  - Interface templates set to sticky
 - Access
Session intInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - Access
Session boolMonitor  - Apply template to monitor access sessions on the port
 - Access
Session stringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - Authentication
Periodic bool - Enable or Disable Reauthentication for this port
 - Authentication
Timer intReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - Authentication
Timer boolReauthenticate Server  - Obtain re-authentication timeout value from the server
 - Cts
Manual bool - Supply local configuration for CTS parameters
 - Cts
Manual intPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - Cts
Manual boolPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - Cts
Manual boolPropagate Sgt  - CTS SGT Propagation configuration
 - Cts
Role boolBased Enforcement  - Enable Role-based Access Control enforcement
 - Delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - Device string
 - A device name from the provider configuration.
 - Device
Tracking bool - Configure device-tracking on the interface
 - Device
Tracking List<Lbrlabs.Attach Policies Pulumi Package. Iosxe. Inputs. Template Device Tracking Attach Policy>  - policy name for device tracking
 - Device
Tracking stringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - Dot1x
Max intReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - Dot1x
Max intReq  - Max No. of Retries - Range: 
1-10 - Dot1x
Pae string - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - Dot1x
Timeout intTx Period  - Timeout for supplicant retries - Range: 
1-65535 - Ip
Access List<Lbrlabs.Groups Pulumi Package. Iosxe. Inputs. Template Ip Access Group>  - Access control list for IP packets
 - Ip
Dhcp intSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - Ip
Dhcp boolSnooping Trust  - DHCP Snooping trust config
 - Load
Interval int - Load interval delay in seconds - Range: 
30-600 - Mab bool
 - MAC Authentication Bypass Interface Config Commands
 - Mab
Eap bool - Use EAP authentication for MAC Auth Bypass
 - Service
Policy stringInput  - policy-map name
 - Service
Policy stringOutput  - policy-map name
 - Service
Policy stringType Control Subscriber  - Apply a subscriber control policy to the interface
 - Source
Template string - Get config from a template
 - Spanning
Tree boolBpduguard Enable  - Enable BPDU guard for this interface
 - Spanning
Tree boolPortfast  - Portfast options for the interface
 - Spanning
Tree boolPortfast Disable  - Disable portfast for this interface
 - Spanning
Tree boolPortfast Edge  - Enable portfast edge on the interface
 - Spanning
Tree boolPortfast Network  - Enable portfast network on the interface
 - Spanning
Tree boolService Policy  - help
 - Storm
Control boolAction Shutdown  - Shutdown this interface if a storm occurs
 - Storm
Control boolAction Trap  - Send SNMP trap if a storm occurs
 - Storm
Control doubleBroadcast Level Bps Threshold  - Enter threshold
 - Storm
Control stringBroadcast Level Pps Threshold  - Enter threshold
 - Storm
Control doubleBroadcast Level Threshold  - Enter threshold
 - Storm
Control doubleMulticast Level Bps Threshold  - Enter threshold
 - Storm
Control stringMulticast Level Pps Threshold  - Enter threshold
 - Storm
Control doubleMulticast Level Threshold  - Enter threshold
 - Subscriber
Aging boolInactivity Timer Probe  - ARP probe
 - Subscriber
Aging intInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - Subscriber
Aging boolProbe  - ARP probe
 - Switchport
Access intVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - Switchport
Block boolUnicast  - Block unknown unicast addresses
 - Switchport
Mode boolAccess  - Set trunking mode to ACCESS unconditionally
 - Switchport
Mode boolTrunk  - Set trunking mode to TRUNK unconditionally
 - Switchport
Nonegotiate bool - Device will not engage in negotiation protocol on this interface
 - Switchport
Port boolSecurity  - Security related command
 - Switchport
Port boolSecurity Aging Static  - Enable aging for configured secure addresses
 - Switchport
Port intSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - Switchport
Port boolSecurity Aging Type  - Port-security aging type
 - Switchport
Port boolSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - Switchport
Port List<Lbrlabs.Security Maximum Ranges Pulumi Package. Iosxe. Inputs. Template Switchport Port Security Maximum Range>  - Switchport
Port boolSecurity Violation Protect  - Security violation protect mode
 - Switchport
Port boolSecurity Violation Restrict  - Security violation restrict mode
 - Switchport
Port boolSecurity Violation Shutdown  - Security violation shutdown mode
 - Switchport
Private intVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - Switchport
Private intVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - Switchport
Trunk stringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - Switchport
Trunk boolAllowed Vlans All  - all VLANs
 - Switchport
Trunk boolAllowed Vlans None  - no VLANs
 - Switchport
Trunk boolNative Vlan Tag  - Set native VLAN tagging state
 - Switchport
Trunk intNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - Switchport
Voice intVlan  - Vlan for voice traffic - Range: 
1-4094 - Template
Name string - Template name
 
- Access
Session boolClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - Access
Session stringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - Access
Session stringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - Access
Session boolInterface Template Sticky  - Interface templates set to sticky
 - Access
Session intInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - Access
Session boolMonitor  - Apply template to monitor access sessions on the port
 - Access
Session stringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - Authentication
Periodic bool - Enable or Disable Reauthentication for this port
 - Authentication
Timer intReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - Authentication
Timer boolReauthenticate Server  - Obtain re-authentication timeout value from the server
 - Cts
Manual bool - Supply local configuration for CTS parameters
 - Cts
Manual intPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - Cts
Manual boolPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - Cts
Manual boolPropagate Sgt  - CTS SGT Propagation configuration
 - Cts
Role boolBased Enforcement  - Enable Role-based Access Control enforcement
 - Delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - Device string
 - A device name from the provider configuration.
 - Device
Tracking bool - Configure device-tracking on the interface
 - Device
Tracking []TemplateAttach Policies Device Tracking Attach Policy Args  - policy name for device tracking
 - Device
Tracking stringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - Dot1x
Max intReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - Dot1x
Max intReq  - Max No. of Retries - Range: 
1-10 - Dot1x
Pae string - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - Dot1x
Timeout intTx Period  - Timeout for supplicant retries - Range: 
1-65535 - Ip
Access []TemplateGroups Ip Access Group Args  - Access control list for IP packets
 - Ip
Dhcp intSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - Ip
Dhcp boolSnooping Trust  - DHCP Snooping trust config
 - Load
Interval int - Load interval delay in seconds - Range: 
30-600 - Mab bool
 - MAC Authentication Bypass Interface Config Commands
 - Mab
Eap bool - Use EAP authentication for MAC Auth Bypass
 - Service
Policy stringInput  - policy-map name
 - Service
Policy stringOutput  - policy-map name
 - Service
Policy stringType Control Subscriber  - Apply a subscriber control policy to the interface
 - Source
Template string - Get config from a template
 - Spanning
Tree boolBpduguard Enable  - Enable BPDU guard for this interface
 - Spanning
Tree boolPortfast  - Portfast options for the interface
 - Spanning
Tree boolPortfast Disable  - Disable portfast for this interface
 - Spanning
Tree boolPortfast Edge  - Enable portfast edge on the interface
 - Spanning
Tree boolPortfast Network  - Enable portfast network on the interface
 - Spanning
Tree boolService Policy  - help
 - Storm
Control boolAction Shutdown  - Shutdown this interface if a storm occurs
 - Storm
Control boolAction Trap  - Send SNMP trap if a storm occurs
 - Storm
Control float64Broadcast Level Bps Threshold  - Enter threshold
 - Storm
Control stringBroadcast Level Pps Threshold  - Enter threshold
 - Storm
Control float64Broadcast Level Threshold  - Enter threshold
 - Storm
Control float64Multicast Level Bps Threshold  - Enter threshold
 - Storm
Control stringMulticast Level Pps Threshold  - Enter threshold
 - Storm
Control float64Multicast Level Threshold  - Enter threshold
 - Subscriber
Aging boolInactivity Timer Probe  - ARP probe
 - Subscriber
Aging intInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - Subscriber
Aging boolProbe  - ARP probe
 - Switchport
Access intVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - Switchport
Block boolUnicast  - Block unknown unicast addresses
 - Switchport
Mode boolAccess  - Set trunking mode to ACCESS unconditionally
 - Switchport
Mode boolTrunk  - Set trunking mode to TRUNK unconditionally
 - Switchport
Nonegotiate bool - Device will not engage in negotiation protocol on this interface
 - Switchport
Port boolSecurity  - Security related command
 - Switchport
Port boolSecurity Aging Static  - Enable aging for configured secure addresses
 - Switchport
Port intSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - Switchport
Port boolSecurity Aging Type  - Port-security aging type
 - Switchport
Port boolSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - Switchport
Port []TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range Args  - Switchport
Port boolSecurity Violation Protect  - Security violation protect mode
 - Switchport
Port boolSecurity Violation Restrict  - Security violation restrict mode
 - Switchport
Port boolSecurity Violation Shutdown  - Security violation shutdown mode
 - Switchport
Private intVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - Switchport
Private intVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - Switchport
Trunk stringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - Switchport
Trunk boolAllowed Vlans All  - all VLANs
 - Switchport
Trunk boolAllowed Vlans None  - no VLANs
 - Switchport
Trunk boolNative Vlan Tag  - Set native VLAN tagging state
 - Switchport
Trunk intNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - Switchport
Voice intVlan  - Vlan for voice traffic - Range: 
1-4094 - Template
Name string - Template name
 
- access
Session BooleanClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - access
Session StringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - access
Session StringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - access
Session BooleanInterface Template Sticky  - Interface templates set to sticky
 - access
Session IntegerInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - access
Session BooleanMonitor  - Apply template to monitor access sessions on the port
 - access
Session StringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - authentication
Periodic Boolean - Enable or Disable Reauthentication for this port
 - authentication
Timer IntegerReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - authentication
Timer BooleanReauthenticate Server  - Obtain re-authentication timeout value from the server
 - cts
Manual Boolean - Supply local configuration for CTS parameters
 - cts
Manual IntegerPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - cts
Manual BooleanPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - cts
Manual BooleanPropagate Sgt  - CTS SGT Propagation configuration
 - cts
Role BooleanBased Enforcement  - Enable Role-based Access Control enforcement
 - delete
Mode String - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - device String
 - A device name from the provider configuration.
 - device
Tracking Boolean - Configure device-tracking on the interface
 - device
Tracking List<TemplateAttach Policies Device Tracking Attach Policy>  - policy name for device tracking
 - device
Tracking StringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - dot1x
Max IntegerReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - dot1x
Max IntegerReq  - Max No. of Retries - Range: 
1-10 - dot1x
Pae String - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - dot1x
Timeout IntegerTx Period  - Timeout for supplicant retries - Range: 
1-65535 - ip
Access List<TemplateGroups Ip Access Group>  - Access control list for IP packets
 - ip
Dhcp IntegerSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - ip
Dhcp BooleanSnooping Trust  - DHCP Snooping trust config
 - load
Interval Integer - Load interval delay in seconds - Range: 
30-600 - mab Boolean
 - MAC Authentication Bypass Interface Config Commands
 - mab
Eap Boolean - Use EAP authentication for MAC Auth Bypass
 - service
Policy StringInput  - policy-map name
 - service
Policy StringOutput  - policy-map name
 - service
Policy StringType Control Subscriber  - Apply a subscriber control policy to the interface
 - source
Template String - Get config from a template
 - spanning
Tree BooleanBpduguard Enable  - Enable BPDU guard for this interface
 - spanning
Tree BooleanPortfast  - Portfast options for the interface
 - spanning
Tree BooleanPortfast Disable  - Disable portfast for this interface
 - spanning
Tree BooleanPortfast Edge  - Enable portfast edge on the interface
 - spanning
Tree BooleanPortfast Network  - Enable portfast network on the interface
 - spanning
Tree BooleanService Policy  - help
 - storm
Control BooleanAction Shutdown  - Shutdown this interface if a storm occurs
 - storm
Control BooleanAction Trap  - Send SNMP trap if a storm occurs
 - storm
Control DoubleBroadcast Level Bps Threshold  - Enter threshold
 - storm
Control StringBroadcast Level Pps Threshold  - Enter threshold
 - storm
Control DoubleBroadcast Level Threshold  - Enter threshold
 - storm
Control DoubleMulticast Level Bps Threshold  - Enter threshold
 - storm
Control StringMulticast Level Pps Threshold  - Enter threshold
 - storm
Control DoubleMulticast Level Threshold  - Enter threshold
 - subscriber
Aging BooleanInactivity Timer Probe  - ARP probe
 - subscriber
Aging IntegerInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - subscriber
Aging BooleanProbe  - ARP probe
 - switchport
Access IntegerVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - switchport
Block BooleanUnicast  - Block unknown unicast addresses
 - switchport
Mode BooleanAccess  - Set trunking mode to ACCESS unconditionally
 - switchport
Mode BooleanTrunk  - Set trunking mode to TRUNK unconditionally
 - switchport
Nonegotiate Boolean - Device will not engage in negotiation protocol on this interface
 - switchport
Port BooleanSecurity  - Security related command
 - switchport
Port BooleanSecurity Aging Static  - Enable aging for configured secure addresses
 - switchport
Port IntegerSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - switchport
Port BooleanSecurity Aging Type  - Port-security aging type
 - switchport
Port BooleanSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - switchport
Port List<TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range>  - switchport
Port BooleanSecurity Violation Protect  - Security violation protect mode
 - switchport
Port BooleanSecurity Violation Restrict  - Security violation restrict mode
 - switchport
Port BooleanSecurity Violation Shutdown  - Security violation shutdown mode
 - switchport
Private IntegerVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - switchport
Private IntegerVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - switchport
Trunk StringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - switchport
Trunk BooleanAllowed Vlans All  - all VLANs
 - switchport
Trunk BooleanAllowed Vlans None  - no VLANs
 - switchport
Trunk BooleanNative Vlan Tag  - Set native VLAN tagging state
 - switchport
Trunk IntegerNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - switchport
Voice IntegerVlan  - Vlan for voice traffic - Range: 
1-4094 - template
Name String - Template name
 
- access
Session booleanClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - access
Session stringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - access
Session stringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - access
Session booleanInterface Template Sticky  - Interface templates set to sticky
 - access
Session numberInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - access
Session booleanMonitor  - Apply template to monitor access sessions on the port
 - access
Session stringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - authentication
Periodic boolean - Enable or Disable Reauthentication for this port
 - authentication
Timer numberReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - authentication
Timer booleanReauthenticate Server  - Obtain re-authentication timeout value from the server
 - cts
Manual boolean - Supply local configuration for CTS parameters
 - cts
Manual numberPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - cts
Manual booleanPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - cts
Manual booleanPropagate Sgt  - CTS SGT Propagation configuration
 - cts
Role booleanBased Enforcement  - Enable Role-based Access Control enforcement
 - delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - device string
 - A device name from the provider configuration.
 - device
Tracking boolean - Configure device-tracking on the interface
 - device
Tracking TemplateAttach Policies Device Tracking Attach Policy[]  - policy name for device tracking
 - device
Tracking stringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - dot1x
Max numberReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - dot1x
Max numberReq  - Max No. of Retries - Range: 
1-10 - dot1x
Pae string - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - dot1x
Timeout numberTx Period  - Timeout for supplicant retries - Range: 
1-65535 - ip
Access TemplateGroups Ip Access Group[]  - Access control list for IP packets
 - ip
Dhcp numberSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - ip
Dhcp booleanSnooping Trust  - DHCP Snooping trust config
 - load
Interval number - Load interval delay in seconds - Range: 
30-600 - mab boolean
 - MAC Authentication Bypass Interface Config Commands
 - mab
Eap boolean - Use EAP authentication for MAC Auth Bypass
 - service
Policy stringInput  - policy-map name
 - service
Policy stringOutput  - policy-map name
 - service
Policy stringType Control Subscriber  - Apply a subscriber control policy to the interface
 - source
Template string - Get config from a template
 - spanning
Tree booleanBpduguard Enable  - Enable BPDU guard for this interface
 - spanning
Tree booleanPortfast  - Portfast options for the interface
 - spanning
Tree booleanPortfast Disable  - Disable portfast for this interface
 - spanning
Tree booleanPortfast Edge  - Enable portfast edge on the interface
 - spanning
Tree booleanPortfast Network  - Enable portfast network on the interface
 - spanning
Tree booleanService Policy  - help
 - storm
Control booleanAction Shutdown  - Shutdown this interface if a storm occurs
 - storm
Control booleanAction Trap  - Send SNMP trap if a storm occurs
 - storm
Control numberBroadcast Level Bps Threshold  - Enter threshold
 - storm
Control stringBroadcast Level Pps Threshold  - Enter threshold
 - storm
Control numberBroadcast Level Threshold  - Enter threshold
 - storm
Control numberMulticast Level Bps Threshold  - Enter threshold
 - storm
Control stringMulticast Level Pps Threshold  - Enter threshold
 - storm
Control numberMulticast Level Threshold  - Enter threshold
 - subscriber
Aging booleanInactivity Timer Probe  - ARP probe
 - subscriber
Aging numberInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - subscriber
Aging booleanProbe  - ARP probe
 - switchport
Access numberVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - switchport
Block booleanUnicast  - Block unknown unicast addresses
 - switchport
Mode booleanAccess  - Set trunking mode to ACCESS unconditionally
 - switchport
Mode booleanTrunk  - Set trunking mode to TRUNK unconditionally
 - switchport
Nonegotiate boolean - Device will not engage in negotiation protocol on this interface
 - switchport
Port booleanSecurity  - Security related command
 - switchport
Port booleanSecurity Aging Static  - Enable aging for configured secure addresses
 - switchport
Port numberSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - switchport
Port booleanSecurity Aging Type  - Port-security aging type
 - switchport
Port booleanSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - switchport
Port TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range[]  - switchport
Port booleanSecurity Violation Protect  - Security violation protect mode
 - switchport
Port booleanSecurity Violation Restrict  - Security violation restrict mode
 - switchport
Port booleanSecurity Violation Shutdown  - Security violation shutdown mode
 - switchport
Private numberVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - switchport
Private numberVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - switchport
Trunk stringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - switchport
Trunk booleanAllowed Vlans All  - all VLANs
 - switchport
Trunk booleanAllowed Vlans None  - no VLANs
 - switchport
Trunk booleanNative Vlan Tag  - Set native VLAN tagging state
 - switchport
Trunk numberNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - switchport
Voice numberVlan  - Vlan for voice traffic - Range: 
1-4094 - template
Name string - Template name
 
- access_
session_ boolclosed  - Enable closed access on port (disabled by default, i.e. open access)
 - access_
session_ strcontrol_ direction  - Set the control-direction on the interface - Choices: 
both,in - access_
session_ strhost_ mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - access_
session_ boolinterface_ template_ sticky  - Interface templates set to sticky
 - access_
session_ intinterface_ template_ sticky_ timer  - Sticky timer value - Range: 
1-65535 - access_
session_ boolmonitor  - Apply template to monitor access sessions on the port
 - access_
session_ strport_ control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - authentication_
periodic bool - Enable or Disable Reauthentication for this port
 - authentication_
timer_ intreauthenticate_ range  - Enter a value between 1 and 65535 - Range: 
1-65535 - authentication_
timer_ boolreauthenticate_ server  - Obtain re-authentication timeout value from the server
 - cts_
manual bool - Supply local configuration for CTS parameters
 - cts_
manual_ intpolicy_ static_ sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - cts_
manual_ boolpolicy_ static_ trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - cts_
manual_ boolpropagate_ sgt  - CTS SGT Propagation configuration
 - cts_
role_ boolbased_ enforcement  - Enable Role-based Access Control enforcement
 - delete_
mode str - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - device str
 - A device name from the provider configuration.
 - device_
tracking bool - Configure device-tracking on the interface
 - device_
tracking_ Sequence[Templateattach_ policies Device Tracking Attach Policy Args]  - policy name for device tracking
 - device_
tracking_ strvlan_ range  - VLAN IDs of the VLANs for which this policy applies
 - dot1x_
max_ intreauth_ req  - Max No. of Reauthentication Attempts - Range: 
1-10 - dot1x_
max_ intreq  - Max No. of Retries - Range: 
1-10 - dot1x_
pae str - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - dot1x_
timeout_ inttx_ period  - Timeout for supplicant retries - Range: 
1-65535 - ip_
access_ Sequence[Templategroups Ip Access Group Args]  - Access control list for IP packets
 - ip_
dhcp_ intsnooping_ limit_ rate  - DHCP snooping rate limit - Range: 
1-2048 - ip_
dhcp_ boolsnooping_ trust  - DHCP Snooping trust config
 - load_
interval int - Load interval delay in seconds - Range: 
30-600 - mab bool
 - MAC Authentication Bypass Interface Config Commands
 - mab_
eap bool - Use EAP authentication for MAC Auth Bypass
 - service_
policy_ strinput  - policy-map name
 - service_
policy_ stroutput  - policy-map name
 - service_
policy_ strtype_ control_ subscriber  - Apply a subscriber control policy to the interface
 - source_
template str - Get config from a template
 - spanning_
tree_ boolbpduguard_ enable  - Enable BPDU guard for this interface
 - spanning_
tree_ boolportfast  - Portfast options for the interface
 - spanning_
tree_ boolportfast_ disable  - Disable portfast for this interface
 - spanning_
tree_ boolportfast_ edge  - Enable portfast edge on the interface
 - spanning_
tree_ boolportfast_ network  - Enable portfast network on the interface
 - spanning_
tree_ boolservice_ policy  - help
 - storm_
control_ boolaction_ shutdown  - Shutdown this interface if a storm occurs
 - storm_
control_ boolaction_ trap  - Send SNMP trap if a storm occurs
 - storm_
control_ floatbroadcast_ level_ bps_ threshold  - Enter threshold
 - storm_
control_ strbroadcast_ level_ pps_ threshold  - Enter threshold
 - storm_
control_ floatbroadcast_ level_ threshold  - Enter threshold
 - storm_
control_ floatmulticast_ level_ bps_ threshold  - Enter threshold
 - storm_
control_ strmulticast_ level_ pps_ threshold  - Enter threshold
 - storm_
control_ floatmulticast_ level_ threshold  - Enter threshold
 - subscriber_
aging_ boolinactivity_ timer_ probe  - ARP probe
 - subscriber_
aging_ intinactivity_ timer_ value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - subscriber_
aging_ boolprobe  - ARP probe
 - switchport_
access_ intvlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - switchport_
block_ boolunicast  - Block unknown unicast addresses
 - switchport_
mode_ boolaccess  - Set trunking mode to ACCESS unconditionally
 - switchport_
mode_ booltrunk  - Set trunking mode to TRUNK unconditionally
 - switchport_
nonegotiate bool - Device will not engage in negotiation protocol on this interface
 - switchport_
port_ boolsecurity  - Security related command
 - switchport_
port_ boolsecurity_ aging_ static  - Enable aging for configured secure addresses
 - switchport_
port_ intsecurity_ aging_ time  - Port-security aging time - Range: 
1-1440 - switchport_
port_ boolsecurity_ aging_ type  - Port-security aging type
 - switchport_
port_ boolsecurity_ aging_ type_ inactivity  - Aging based on inactivity time period
 - switchport_
port_ Sequence[Templatesecurity_ maximum_ ranges Switchport Port Security Maximum Range Args]  - switchport_
port_ boolsecurity_ violation_ protect  - Security violation protect mode
 - switchport_
port_ boolsecurity_ violation_ restrict  - Security violation restrict mode
 - switchport_
port_ boolsecurity_ violation_ shutdown  - Security violation shutdown mode
 - switchport_
private_ intvlan_ host_ association_ primary_ range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - switchport_
private_ intvlan_ host_ association_ secondary_ range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - switchport_
trunk_ strallowed_ vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - switchport_
trunk_ boolallowed_ vlans_ all  - all VLANs
 - switchport_
trunk_ boolallowed_ vlans_ none  - no VLANs
 - switchport_
trunk_ boolnative_ vlan_ tag  - Set native VLAN tagging state
 - switchport_
trunk_ intnative_ vlan_ vlan_ id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - switchport_
voice_ intvlan  - Vlan for voice traffic - Range: 
1-4094 - template_
name str - Template name
 
- access
Session BooleanClosed  - Enable closed access on port (disabled by default, i.e. open access)
 - access
Session StringControl Direction  - Set the control-direction on the interface - Choices: 
both,in - access
Session StringHost Mode  - Set the Host mode for authentication on this interface - Choices: 
multi-auth,multi-domain,multi-host,single-host - access
Session BooleanInterface Template Sticky  - Interface templates set to sticky
 - access
Session NumberInterface Template Sticky Timer  - Sticky timer value - Range: 
1-65535 - access
Session BooleanMonitor  - Apply template to monitor access sessions on the port
 - access
Session StringPort Control  - Set the port-control value - Choices: 
auto,force-authorized,force-unauthorized - authentication
Periodic Boolean - Enable or Disable Reauthentication for this port
 - authentication
Timer NumberReauthenticate Range  - Enter a value between 1 and 65535 - Range: 
1-65535 - authentication
Timer BooleanReauthenticate Server  - Obtain re-authentication timeout value from the server
 - cts
Manual Boolean - Supply local configuration for CTS parameters
 - cts
Manual NumberPolicy Static Sgt  - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range: 
2-65519 - cts
Manual BooleanPolicy Static Trusted  - Trust the Source Group Tags (SGT) that the peer uses for sending
 - cts
Manual BooleanPropagate Sgt  - CTS SGT Propagation configuration
 - cts
Role BooleanBased Enforcement  - Enable Role-based Access Control enforcement
 - delete
Mode String - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is 
all. - Choices:all,attributes - device String
 - A device name from the provider configuration.
 - device
Tracking Boolean - Configure device-tracking on the interface
 - device
Tracking List<Property Map>Attach Policies  - policy name for device tracking
 - device
Tracking StringVlan Range  - VLAN IDs of the VLANs for which this policy applies
 - dot1x
Max NumberReauth Req  - Max No. of Reauthentication Attempts - Range: 
1-10 - dot1x
Max NumberReq  - Max No. of Retries - Range: 
1-10 - dot1x
Pae String - Set 802.1x interface pae type - Choices: 
authenticator,both,supplicant - dot1x
Timeout NumberTx Period  - Timeout for supplicant retries - Range: 
1-65535 - ip
Access List<Property Map>Groups  - Access control list for IP packets
 - ip
Dhcp NumberSnooping Limit Rate  - DHCP snooping rate limit - Range: 
1-2048 - ip
Dhcp BooleanSnooping Trust  - DHCP Snooping trust config
 - load
Interval Number - Load interval delay in seconds - Range: 
30-600 - mab Boolean
 - MAC Authentication Bypass Interface Config Commands
 - mab
Eap Boolean - Use EAP authentication for MAC Auth Bypass
 - service
Policy StringInput  - policy-map name
 - service
Policy StringOutput  - policy-map name
 - service
Policy StringType Control Subscriber  - Apply a subscriber control policy to the interface
 - source
Template String - Get config from a template
 - spanning
Tree BooleanBpduguard Enable  - Enable BPDU guard for this interface
 - spanning
Tree BooleanPortfast  - Portfast options for the interface
 - spanning
Tree BooleanPortfast Disable  - Disable portfast for this interface
 - spanning
Tree BooleanPortfast Edge  - Enable portfast edge on the interface
 - spanning
Tree BooleanPortfast Network  - Enable portfast network on the interface
 - spanning
Tree BooleanService Policy  - help
 - storm
Control BooleanAction Shutdown  - Shutdown this interface if a storm occurs
 - storm
Control BooleanAction Trap  - Send SNMP trap if a storm occurs
 - storm
Control NumberBroadcast Level Bps Threshold  - Enter threshold
 - storm
Control StringBroadcast Level Pps Threshold  - Enter threshold
 - storm
Control NumberBroadcast Level Threshold  - Enter threshold
 - storm
Control NumberMulticast Level Bps Threshold  - Enter threshold
 - storm
Control StringMulticast Level Pps Threshold  - Enter threshold
 - storm
Control NumberMulticast Level Threshold  - Enter threshold
 - subscriber
Aging BooleanInactivity Timer Probe  - ARP probe
 - subscriber
Aging NumberInactivity Timer Value  - Enter a value between 1 and 65535 in seconds - Range: 
1-65535 - subscriber
Aging BooleanProbe  - ARP probe
 - switchport
Access NumberVlan  - VLAN ID of the VLAN when this port is in access mode - Range: 
1-4094 - switchport
Block BooleanUnicast  - Block unknown unicast addresses
 - switchport
Mode BooleanAccess  - Set trunking mode to ACCESS unconditionally
 - switchport
Mode BooleanTrunk  - Set trunking mode to TRUNK unconditionally
 - switchport
Nonegotiate Boolean - Device will not engage in negotiation protocol on this interface
 - switchport
Port BooleanSecurity  - Security related command
 - switchport
Port BooleanSecurity Aging Static  - Enable aging for configured secure addresses
 - switchport
Port NumberSecurity Aging Time  - Port-security aging time - Range: 
1-1440 - switchport
Port BooleanSecurity Aging Type  - Port-security aging type
 - switchport
Port BooleanSecurity Aging Type Inactivity  - Aging based on inactivity time period
 - switchport
Port List<Property Map>Security Maximum Ranges  - switchport
Port BooleanSecurity Violation Protect  - Security violation protect mode
 - switchport
Port BooleanSecurity Violation Restrict  - Security violation restrict mode
 - switchport
Port BooleanSecurity Violation Shutdown  - Security violation shutdown mode
 - switchport
Private NumberVlan Host Association Primary Range  - Primary normal range VLAN ID of the private VLAN port association - Range: 
2-1001 - switchport
Private NumberVlan Host Association Secondary Range  - Secondary normal range VLAN ID of the private VLAN host port association - Range: 
2-1001 - switchport
Trunk StringAllowed Vlans  - VLAN IDs of the allowed VLANs when this port is in trunking mode
 - switchport
Trunk BooleanAllowed Vlans All  - all VLANs
 - switchport
Trunk BooleanAllowed Vlans None  - no VLANs
 - switchport
Trunk BooleanNative Vlan Tag  - Set native VLAN tagging state
 - switchport
Trunk NumberNative Vlan Vlan Id  - VLAN ID of the native VLAN when this port is in trunking mode - Range: 
1-4094 - switchport
Voice NumberVlan  - Vlan for voice traffic - Range: 
1-4094 - template
Name String - Template name
 
Supporting Types
TemplateDeviceTrackingAttachPolicy, TemplateDeviceTrackingAttachPolicyArgs          
- Policy
Name string - Vlan
Range string 
- Policy
Name string - Vlan
Range string 
- policy
Name String - vlan
Range String 
- policy
Name string - vlan
Range string 
- policy_
name str - vlan_
range str 
- policy
Name String - vlan
Range String 
TemplateIpAccessGroup, TemplateIpAccessGroupArgs        
- Direction string
 - Access
List string 
- Direction string
 - Access
List string 
- direction String
 - access
List String 
- direction string
 - access
List string 
- direction str
 - access_
list str 
- direction String
 - access
List String 
TemplateSwitchportPortSecurityMaximumRange, TemplateSwitchportPortSecurityMaximumRangeArgs            
- Range int
 - Vlan bool
 - Vlan
Access bool 
- Range int
 - Vlan bool
 - Vlan
Access bool 
- range Integer
 - vlan Boolean
 - vlan
Access Boolean 
- range number
 - vlan boolean
 - vlan
Access boolean 
- range int
 - vlan bool
 - vlan_
access bool 
- range Number
 - vlan Boolean
 - vlan
Access Boolean 
Import
 $ pulumi import iosxe:index/template:Template example "Cisco-IOS-XE-native:native/template/Cisco-IOS-XE-template:template_details=TEMP1"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
 - iosxe lbrlabs/pulumi-iosxe
 - License
 - Apache-2.0
 - Notes
 - This Pulumi package is based on the 
iosxeTerraform Provider.