{"Login":{"logIn":"Log In","enterCredentials":"Please enter you credentials","password":"Password","wrongCredentials":"Wrong credentials","errorVerify":"Error verifiying user"},"Password":{"password":"Password","passwordMustMatch":"Passwords must match","passwordPolicy":"Password policy","newPassword":"New password","confirmPassword":"Confirm password","mustHaveCharacters":"Must be at least 8 characters long","mustHaveUpperCase":"Must contain 1 uppercase letter","mustHaveLowerCase":"Must contain 1 lowercase letter","mustHaveOneDigit":"Must contain 1 digit","mustHaveSpecialChar":"Must contain 1 special character"},"Documentation":{"title":"Documentation"},"Titles":{"configuration":"Configuration","unsavedChanges":"Unsaved changes"},"Common":{"theme":"Theme","user":"User","users":"Users","device":"Device","devices":"Devices","associatedDevices":"Associated Devices","sites":"Sites","clients":"Clients","organization":"Organization","organizations":"Organizations","site":"Site","subsite":"Subsite","siteOrg":"Site Organization","name":"Name","email":"Email","role":"Role","model":"Model","selectRole":"Select a role","location":"Location","update":"Update","create":"Create","delete":"Delete","cancel":"Cancel","apply":"Apply","assign":"Assign","register":"Register","save":"Save","select":"Select","yes":"Yes","no":"No","search":"Search {value}","clear":"Clear","keywordSearch":"Keyword Search","noData":"No data found","showing":"Showing","hi":"Hi","to":"to","of":"of","or":"or","elements":"elements","unsavedChangesMessage":"You have unsaved changes. Are you sure you want to cancel?","updateLocation":"Update Location","filterBy":"Filter by...","selectOrgsOrSites":"Select organizations or sites","confirm":"Confirm","type":"Type","accept":"Accept","expandAll":"Expand All","collapseAll":"Collapse All","pendingToAccept":"Pending to accept","new":"New","parent":"Parent","configure":"Configure","reset":"Reset","importCsv":"Import CSV","none":"None","unbind":"Unbind","actions":"Actions","orgOrSite":"Organization or Site","created":"Created","modified":"Modified","details":"Details","downloadTemplate":"Download Template","copy":"copy","optional":"optional","errors":"Errors","path":"Path","goBack":"Go Back","goHome":"Home","external":"External","channel":"Channel","power":"Power","export":"Export","administratorsGuide":"User manual","documentation":"Documentation","upgrade":"Upgrade","version":"Version","map":"Map","upload":"Upload","refresh":"Refresh","minute":"Minute","minutes":"Minutes","hour":"Hour","hours":"Hours","repeat":"Repeat every","and":"and","add":"Add","remove":"Remove","example":"Example"},"Organizations":{"organizationSettings":"Organization settings","deleteMessage":"Are you sure to delete {value} organization?","successfullyCreate":"Organization {value} created successfully","successfullyUpdate":"Organization {value} updated successfully","successfullyDelete":"Organization {value} deleted successfully","createError":"Error creating organization {value}","updateError":"Error updating organization {value}","deleteError":"Error deleting organization {value}","cantDeleteReason":"Cannot delete this organization because it has child organizations or sites.\nYou need delete all of this organization's children before deleting it.","selectOrganization":"Select organization","selectOrganizations":"Select organizations","alreadyExists":"Already exists an organization with name {name} in {org}","deleteParentOrgError":"You cannot delete an organization that has sub-organizations or sites"},"Sites":{"settings":"Site settings","deleteMessage":"Are you sure to delete {value} site?","successfullyCreate":"Site {value} created successfully","successfullyUpdate":"Site {value} updated successfully","successfullyDelete":"Site {value} deleted successfully","successfullyUpdateLocation":"Site {value} location updated successfully","createError":"Error creating site {value}","updateError":"Error updating site {value}","deleteError":"Error deleting site {value}","deleteAssignedError":"It is not possible to delete sites that have subsites, templates or devices assigned","updateLocationError":"Error updating location of site {value}","selectSites":"Select sites","errorCreateName":"Already exists a site with name {name} in {org}","deleteWithTemplate":"You cannot delete sites with a template assigned, please unbind it first"},"Subsites":{"title":"Subsites","deleteMessage":"Are you sure to delete {value} subsite?","cantDelete":"You cannot delete a subsite that has subsites","successfullyDelete":"Subsite {value} deleted successfully","deleteError":"Error deleting subsite {value}","update":"Update subsite","successfullyUpdate":"Subsite {value} updated successfully","updateError":"Error updating subsite {value}","create":"Create subsite","successfullyCreate":"Subsite {value} created successfully","createError":"Error creating subsite {value}","noSelected":"Select subsite","select":"Select subsites","selectToShow":"First, select sites to show subsites","selectedSubsites":"Selected subsites","alreadyExists":"Error creating subsite. A subsite with this name already exists. Please choose another one to proceed"},"Users":{"userRole":"Role","lastLogin":"Last login","error":"Something went wrong","noData":"No users found","notUserFound":"No user found with that ID","deleteMessage":"Are you sure to delete {value} user?","successfullyCreate":"User {value} created successfully","successfullyCreateInOrg":"User {email} created successfully in organization {org}.","successfullyUpdate":"User {value} updated successfully","successfullyDelete":"User {value} deleted successfully","createError":"Error creating user {value}","updateError":"Error updating user {value}","deleteError":"Error deleting user {value}","emailSent":"An email has been sent to {value} with a link to activate the account.","Create":{"name":"Name","email":"Email","password":"Password","create":"Create"},"viewDetails":"View details","resetPassword":"Reset password","resetEmailSent":"Email to reset password sent correctly to user {value}","errorResetEmail":"Error sending email to reset password to user {value}"},"Roles":{"galgusAdmin":"Galgus Admin","galgusOrganizationAdmin":"Galgus Organization Admin","galgusDeviceAdmin":"Galgus Device Admin","organizationAdmin":"Organization Admin","organizationOwner":"Organization Owner","organizationSupporter":"Organization Supporter","deviceManager":"Device Admin","installer":"Installer","configurer":"Organization Configurer","viewer":"Organization Viewer","admin":"Organization Admin"},"ExternalManagers":{"title":"External Managers","infoTooltip":"This action allows the organization to expand its management capacity\nby delegating responsibilities to external managers, facilitating the\nadministration and remote monitoring of specific facilities without\ncompromising the security or control of internal resources.","requestManager":"Request Manager","mailError":"Please enter a valid email to request an external manager","requestError":"Error requesting an external manager","requestSent":"Request sent correctly to {value}","errorRemove":"Error removing external manager {value}","removedSuccessfully":"External manager {value} removed correctly!","accepted":"External manager accepted correctly","errorAccepting":"Error accepting external manager","accessInfo":"You have the option to allow external manager administration for certain\ninstallations. By granting this access, an external manager will be\nable to oversee and manage specific aspects of your system setup.","accessInfoContent":"If you choose to accept, the external manager will\nhave the permissions described above.","accessRequestTitle":"External Manager Access Request","unbindConfirmation":"Are you sure to unbind?"},"OrganizationPage":{"title":"Organization"},"OrganizationsPage":{"title":"Organizations"},"LogsPage":{"title":"Audit"},"SiteSelector":{"create":"Create a site","search":"Search for site","select":"Select site"},"SitePage":{"title":"Site"},"UserProfile":{"title":"Account settings","emailAddress":"Email address","language":"Language","themeSettings":"Theme settings","darkMode":"Dark mode","menuMode":"Menu mode","static":"Static","overlay":"Overlay","fontFamily":"Font Family","scale":"Scale","update":"Update","nameUpdated":"Name updated correctly","errorUpdatingName":"Error updating name","accountSecurity":"Account Security","newPassword":"New password","confirmPassword":"Confirm password","requiredField":"This field is required","passwordMustMatch":"Passwords must match","passwordPolicy":"Password policy","mustHaveCharacters":"Must be at least 8 characters long","mustHaveUpperCase":"Must contain 1 uppercase letter","mustHaveLowerCase":"Must contain 1 lowercase letter","mustHaveOneDigit":"Must contain 1 digit","mustHaveSpecialChar":"Must contain 1 special character","updatePassword":"Update password","updatedPassword":"Password updated successfully"},"Layout":{"hi":"Hi","profile":"Profile","settings":"Account Settings","signOut":"Sign Out","exitApp":"Exit Application"},"Table":{"create":"Create","clearFilter":"Clear","confirmDeleteMessage":"Do you want to delete this record?","no":"No","yes":"Yes"},"Dialog":{"create":"Crear","update":"Update","delete":"Delete","cancel":"Cancel","no":"No","yes":"Yes","deleteHeader":"Delete confirmation"},"Dashboard":{"addDashboard":"Add Dashboard","addWidget":"Add Widget","createDashboard":"Create Dashboard","renameDashboard":"Rename Dashboard","deleteDashboardBtn":"Delete Dashboard","renameWidget":"Rename Widget","deleteDashboard":"Do you want to delete this dashboard?","deleteWidget":"Do you want to delete this widget?","name":"Name","rename":"Rename","overview":"Overview","network":"Network","clients":"Clients","onlyActive":"This tab only allows 'Active' interval"},"Widgets":{"toggleDrag":"Toggle drag","devicesStatusMap":"Devices Map","enterALocation":"Enter a location...","enterALocationOrSelect":"Enter a location or select a point in the map","goToLocation":"Fly to a place","status":"Devices Status","devices":"Devices","health":"System Health","generalHealth":"General health","devicesHealthHelp":"Number of APs by health status","connected":"Connected","disconnected":"Disconnected","systemStatus":"System Summary","systemStatusDesc":"Global Cloud Summary","devicesStatus":"Devices Status","devicesStatusDesc":"Pie chart with connected and disconnected devices","devicesHealth":"Devices Health","devicesHealthDesc":"Pie chart with devices health","mapStatus":"Devices Map","mapStatusDesc":"Map with available devices","connectedClientsByBand":"Connected clients by band","connectedClientsByBandDesc":"Pie chart showing connected clients per band","connectedClientsBySsid":"Connected clients by SSID","connectedClientsByRole":"Connected clients by Role","totalConnectedClientsByRole":"Total clients connected by role in the network","networkUsageByRole":"Network usage by role","networkUsageByClients":"Network usage by clients","networkUsageBySsid":"Network usage by SSID","totalNetworkUsageBySsid":"Total network usage by SSID","networkUsageByBand":"Network usage by band","totalNetworkUsageByBand":"Total network usage by Band","clientsConnectedToNetwork":"Clients connected to network","top10ClientsOrgs":"Top 10 organizations with the most connected clients","top10NetworkUsageOrgs":"Top 10 organizations with the most network usage","top10ClientsSites":"Top 10 sites with most connected clients","top10NetworkUsageSites":"Top 10 sites with the most network usage"},"Devices":{"status":"Status","serialNumber":"Serial Number","model":"Model","health":"Health","memory":"Memory","load":"Load","loadFull":"CPU Load","upstream":"Upstream","downstream":"Downstream","free":"Free","cached":"Cached","buffered":"Buffered","temperature":"Temp","temperatureFull":"Temperature","firmware":"Firmware","type":"Type","ip":"IP","provisioning":"Provisioning","rad":"Rad","radFull":"Current active radius sessions","gps":"GPS","connectedClients":"Connected clients","uptime":"Uptime","activityTime":"Activity Time","lastConnection":"Last Connection","LastConnectionFull":"Last time this device was connected to the controller. This can be used to estimate when a device disconnected","lastContact":"Last Contact","lastUpdate":"Last Update","connectReason":"Connect Reason","connectReasonFull":"Reason supplied by the device for the last connection","certificateExpiryDate":"Exp","certificateExpiryDateFull":"Certificate Expiry Date","noDevicesImported":"No devices imported","assignTo":"Assign To","currentAssignment":"Current assignment","statistics":"Statistics","time":"Time","rawData":"Raw data","notFound":"Device not found","errorConfiguring":"Error configuring device","configuredSuccessfully":"configured successfully","errorGettingConfiguration":"Error getting configuration","assignment":"Assignment","assignInfo":"This feature allows assigning devices to specific organizations and\nsites, making their management and control within the organizational\nstructure easier.","assignInfoSubsites":"This feature allows assigning devices to specific subsites, making their management and control within the organizational structure easier.","assignToOrgOrSite":"Assign devices to the following organization or site:","assignDevicesToSubsite":"Assign devices to the following subsite:","macsNotFound":"The following MACs have been ignored because they were not found","assignDevices":"Assign devices","assignedSuccessfully":"Devices assigned successfully","errorAssigningDevices":"Error assigning devices","noDeviceFoundInCSV":"No device found, please check the imported CSV","selectStatus":"Select status","deviceNotFound":"Attention! This device does not exist on the platform and therefore cannot be assigned.","deviceFound":"Attention! This device already exists on the platform, it cannot be registered again.","devicesFound":"Attention! This devices already exist on the platform, please remove them from the document.","orgsNotFound":"Attention! Some organizations or sites have not been found, please review the document.","import":"Import CSV","register":"Register Devices","registeredSuccessfully":"Devices registered correctly","errorRegister":"Error registering devices","helpText":"This feature allows adding new devices to the platform, making it easier to integrate and manage them within your organizational structure.","add":"Add Device","registerIn":"Register devices in the following organization or site:","assign":"Assign Devices","assignToOrg":"Assign device to organization","asignedToOrg":"Device {serialNumber} assigned correctly to organization {org}","errorAssigningToOrg":"Error assigning device {serialNumber} to organization {org}","unassignFromOrg":"Unassign device from organization","unassignedFromOrg":"Device {serialNumber} unassigned correctly from organization","errorUnassigning":"Error unassigning device {serialNumber} from organization","assignToSite":"Assign device to site","assignToSubsite":"Assign device to subsite","assignedToSite":"Device {serialNumber} assigned correctly to site {site}","assignedToSubsite":"Device {serialNumber} assigned correctly to subsite {subsite}","errorAssigningToSite":"Error assigning device {serialNumber} to site {site}","errorAssigningToSubsite":"Error assigning device {serialNumber} to subsite {subsite}","unassignFromSite":"Unassign device from site","unassignFromSiteConfirm":"Are you sure to unassign device from site?","unassignFromSubsite":"Unassign device from subsite","unassignFromSubsiteConfirm":"Are you sure to unassign device from subsite?","unassignedFromSite":"Device {serialNumber} unassigned correctly from site","unassignedFromSubsite":"Device {serialNumber} unassigned correctly from subsite","errorUnassigningFromSite":"Error unassigning device {serialNumber} from site","errorUnassigningFromSubsite":"Error unassigning device {serialNumber} from subsite","updateAlias":"Update alias","errorUpdateAlias":"Error updating alias of device {serialNumber}","errorApplyingConfiguration":"Some errors occurred while applying the configuration, click here for more details.","rttyError":"Error opening RTTY for AP","online":"Online","offline":"Offline","devicesReportTitle":"Device Report","devicesReportMsg":"We are preparing the device report. It will be available in your inbox shortly; please check your email.","devicesReportExists":"An report is currently being generated. Please wait until it is complete before requesting a new one.","upgradeFirmware":"Upgrade Firmware","offlineSelected":"Any of the selected devices is offline","firmwareUpgraded":"The firmware update for the devices has been successfully requested","firmwareUpgradedSingle":"The firmware update for the device has been successfully requested","errorUpgradeFirmware":"Error upgrading the firmware of the selected devices","errorUpgradeFirmwareSingle":"Error upgrading firmware","selectVersion":"Select version"},"Sessions":{"title":"Sessions","status":"Status","serial":"Serial Number","ack_signal":"Signal","ack_signal_avg":"Average Signal","bssid":"BSSID","channel":"Channel","channel_width":"Channel Width","connected":"Connected Time","delta_counters_rx_bytes":"ΔRx bytes","delta_counters_rx_packets":"ΔRx packets","delta_counters_tx_bytes":"ΔTx bytes","delta_counters_tx_failed":"ΔTx failed","delta_counters_tx_packets":"ΔTx packets","delta_counters_tx_retries":"ΔTx retries","inactive":"Inactive","ipaddr_v4":"IPv4 address","rssi":"RSSI","duration":"Duration","packets":"Packets","noise":"Noise","rx_bytes":"Rx bytes","rx_duration":"Rx duration","rx_packets":"Rx packets","rx_rate_bitrate":"Rx bitrate","rx_rate_chwidth":"Rx chwidth","station":"Station","stationMac":"Station MAC","tx_bytes":"Tx bytes","tx_duration":"Tx duration","tx_failed":"Tx failed","tx_packets":"Tx packets","tx_rate_bitrate":"Tx bitrate","tx_rate_chwidth":"Tx channel width","tx_rate_ht":"Tx HT","tx_rate_mcs":"Tx MCS","tx_rate_sgi":"Tx SGI","tx_retries":"Tx retries","band":"Band","channels":"Channels","frequency":"Frequency","mode":"Mode","ssid":"SSID","lastSeen":"Last seen","usage":"Usage","capabilities":"Capabilities","power":"Power","metrics":"Metrics"},"ConfigurationTemplates":{"title":"Configuration Templates","titleSing":"Configuration Template","titleAbb":"Conf. Template","configureTemplate":"Configure template","configureBindings":"Configure bindings","unbindConfirm":"Are you sure to unbind sites from template","unbindSite":"Unbind site","unbindSuccessfully":"Sites unbound successfully from template","unbindError":"Error unbinding sites from template","sitesBound":"sites or subsites are bound to this configuration template.","confUpdatedSuccessfully":"Configuration of template {name} updated correclty","errorUpdatingConf":"Error updating configuration of template","nameUpdatedSuccessfully":"The template name was updated successfully","errorUpdatingName":"An error occurred while updating the template name","helpText":"This feature allows you to efficiently apply\npredefined configuration templates to a set\nof sites, ensuring configuration consistency\nand facilitating centralized administration.","numberOfBoundSites":"# of bound sites","configureBindingsOf":"Configure bindings of {value}","targetSites":"Target sites","targetSubsites":"Target subsites","bindingsConfiguredSuccessfully":"Bindings of template {value} configured correctly","errorConfiguringBindings":"Error configuring bindings of template {value}","siteunboundSucessfully":"Site {site} unbound successfully from template {template}","errorUnbindSite":"Error unbinding site {site} from template {template.name}","configureBindingSites":"Configure bindings to sites","templates":"Templates","templateCreated":"Template created correcty","errorCreatingTemplate":"Error creating template","alreadyExists":"Error creating template. A template with this name already exists. Please choose another one to proceed","templateDeleted":"Template {value} deleted correctly","errorDeletingTemplate":"Error deleting template {value}","deleteMessage":"Are you sure to delete template {value}?","unbindConfirmation":"Are you sure to unbind site {site} from template {template}?","templateErrors":"Template form error, please check the fields","errorDeleteBound":"You cannot delete templates with any bound site","sectionError":"{context} section"},"Alarms":{"title":"Alarms","configurations":"Configurations","register":"Logs","create":"Create alarm","update":"Update alarm","delete":"Delete alarm","deleteSuccess":"Alarm deleted successfully","deleteError":"Error deleting alarm","createSuccess":"Alarm created successfully","createError":"Error creating alarm","updateSuccess":"Alarm updated successfully","updateError":"Error updating alarm","activate":"Activate","deactivate":"Deactivate","apsOffline":"Number of offline APs","interval":"Time interval","repeat":"Repeat every","status":"Active","scope":"Scope","deleteConfirm":"Are you sure to delete this alarm?","appliedTo":"Applied to","entities":"entities","filterByName":"Search by name","noResults":"No alarms created","notFound":"No alarms found","content":"{aps} or more APs have been offline for more than {time} minutes","contentSing":"{aps} or more APs have been offline for more than {time} minute","name":"Name","sent":"Sent","contentHeader":"Content","emailDestiny":"Destination Email"},"Intervals":{"Active":"Active","Today":"Today","Yesterday":"Yesterday","Last7Days":"Last 7 days"},"Floorplans":{"title":"APs map","floorplans":"Floor plans","floorplan":"Floor plan","create":"Create new floor plan","placed":"Placed","notPlaced":"Not placed","image":"Floor plan image","deleteTitle":"Delete map","deleteTitleConfirmation":"Are you sure to delete?","deleteMapSuccess":"Map deleted successfully","deleteMapError":"Error deleting map","uploadMap":"Upload map","uploadImage":"Upload image","distance":"Distance (meters)","helpLine":"Draw a line by clicking and dragging over the area from which you want to indicate the distance.","point":"top left point of the map","notAllowed":"Any parent or child already has a map assigned.\nYou must remove it before assigning a new one.","dragAps":"Drag APs","errorCreate":"Error uploading map"},"Errors":{"emailWrongFormat":"Entered value does not match email format","emailRequired":"Email is required","nameRequired":"Name is required","roleRequired":"Role is required","passwordRequired":"Password is required","required":"Field required","maxLength":"Maximum length reached","trailLeadSpaces":"Cannot have trailing or leading spaces","minLength":"The minimum length is {value} characters"},"Interval":{"quickIntervals":"Quick Intervals","custom":"Custom inteval","lastMin":"Last min","last15Min":"Last 15 min","last30Min":"Last 30 min","lastHour":"Last hour","last3Hours":"Last 3 hours","last6Hours":"Last 6 hours","last12Hours":"Last 12 hours","lastDay":"Last day","last3Days":"Last 3 days"},"Form":{"required":"Field required","invalidIpv4":"Invalid IPv4 address. Example: 192.168.0.1/12","invalidIpv6":"Invalid IPv6 address (ex.: 2001:db8:3333:4444:5555:6666:7777:8888)","invalidMac":"Invalid MAC value. Example: 00:00:5e:00:53:af","minMaxString":"Value needs to be of a length between {min} (inclusive) and {max} (inclusive)","invalidPortRange":"Invalid port value. It needs to be more than 0 and less than 65 535. If using a port range, please make sure the second port is a higher number than the first one.","invalidPortRanges":"Invalid port range combination! Please make sure both port values are the same type (single or range). If they are ranges, make sure they are both covering the same amount of ports","invalidStaticIpv4d":"Invalid address, this range reserved for multicasting (class D). The first octet should be 223 or lower","invalidStaticIpv4e":"Invalid address, this range reserved for experiments (class E). The first octet should be 223 or lower","missinInterfaceUpstream":"You need to have at least one upstream interface. At the moment, all your interfaces are downstream","wifiBandsMax":"There cannot be more than 8 SSIDs using this wifi-band","invalidProtoPasspoint":"This encryption protocol cannot be used with an access point SSID. Select a protocol that can use Radius.","invalidIeee":"For this encryption protocol, ieee80211w needs to be either 'optional' or 'required'","invalidIeeeRequired":"ieee80211w needs to be 'required' for this encryption protocol","invalidLeaseTime":"Invalid lease time value! They need to be in the digitUnit format. For example: 6d2h5m, which means 6 days, 2 hours and 5 minutes. Here are the accepted units: m, h, d. If you do not want to use a unit, omit it completely. So instead of saying 0d2h0m, use 2h","invalidProto6g":"This encryption protocol cannot be used on an SSID which uses 6G"},"Menu":{"manage":"Manage","overview":"Overview","devices":"Devices","configurationTemplates":"Configuration Templates","configurationTemplate":"Configuration Template","configuration":"Configuration","users":"Users","analysisAndMonitoring":"Analysis & Monitoring","dashboards":"Dashboards","audit":"Audit","sessions":"Sessions","global":"Global","organizations":"Organizations","sites":"Sites","subsites":"Subsites","externalManagers":"Managers Externos","apsMap":"APs Map","alarms":"Alarms"},"GlobalErrors":{"defaultError":"Something went wrong","conflict":"The request could not be processed due to a conflict with the current state of the resource. Please review and try again","notFound":"404","notFoundMessage":"The page you are looking for was not found."},"Footer":{"currentVersion":"Current version","unknown":"Unknown"},"Clipboard":{"success":"Text copied to clipboard","error":"Error copying text to clipboard"},"Developers":{"title":"For Developers","apiDoc":"API Rest"},"UserSession":{"keepSessionHeader":"Do you want to keep the session active?","closingSoon":"The terminal will be closed shortly","keepWorking":"Keep the terminal open","keepSession":"Keep session","exit":"Exit","closeSession":"Close session","closedByInactivity":"For your security, you will be logged out due to inactivity."},"TemplatesSchema":{"fullConfig":"Full JSON Config","configUpdatedSuccess":"Configuration updated correctly","radio":"Radio","services":"Services","interface":"Interface","metrics":"Metrics","third-party":"Third Party","unit":"Unit","description":"OpenWrt uCentral schema","properties":{"strict":{"description":"The device will reject any configuration that causes warnings if strict mode is enabled."},"uuid":{"description":"The unique ID of the configuration. This is the unix timestamp of when the config was created."},"globals":{"description":"A device has certain global properties that are used to derive parts of the final configuration that gets applied.","properties":{"ipv4-network":{"description":"Define the IPv4 range that is delegatable to the downstream interfaces This is described as a CIDR block. (192.168.0.0/16, 172.16.128/17)"},"ipv6-network":{"description":"Define the IPv6 range that is delegatable to the downstream interfaces This is described as a CIDR block. (fdca:1234:4567::/48)"},"wireless-multimedia":{"anyOf":{"0":{"description":"Define the default WMM behaviour of all SSIDs on the device. Each access category can be assigned a default class selector that gets used for packet matching."},"1":{"properties":{"profile":{"description":"Define a default profile that shall be used for the WMM behaviour of all SSIDs on the device."}}}}}}},"definitions":{"description":"This section is used to define templates that can be referenced by a configuration. This avoids duplication of data. A RADIUS server can be defined here for example and then referenced by several SSIDs.","properties":{"wireless-encryption":{"description":"A dictionary of wireless encryption templates which can be referenced by the corresponding property name.","patternProperties":{"":{"+":{"description":"A device has certain properties that describe its identity and location. These properties are described inside this object.","properties":{"proto":{"description":"The wireless encryption protocol that shall be used for this BSS"},"key":{"description":"The Pre Shared Key (PSK) that is used for encryption on the BSS when using any of the WPA-PSK modes."},"ieee80211w":{"description":"Enable 802.11w Management Frame Protection (MFP) for this BSS."},"key-caching":{"description":"PMKSA created through EAP authentication and RSN preauthentication can be cached."}}}}}}}},"ethernet":{"items":{"description":"This section defines the linkk speed and duplex mode of the physical copper/fiber ports of the device.","properties":{"select-ports":{"description":"The list of physical network devices that shall be configured. The names are logical ones and wildcardable."},"speed":{"description":"The link speed that shall be forced."},"enabled":{"description":"This allows forcing the port to down state by default."},"services":{"description":"The services that shall be offered on this L2 interface."}}}},"switch":{"description":"This section defines the switch fabric specific features of a physical switch.","properties":{"port-mirror":{"description":"Enable mirror of traffic from multiple minotor ports to a single analysis port.","properties":{"monitor-ports":{"description":"The list of ports that we want to mirror."},"analysis-port":{"description":"The port that mirror'ed packets should be sent to."}}},"loop-detection":{"description":"Enable loop detection on the L2 switches/bridge.","properties":{"protocol":{"description":"Define which protocol shall be used for loop detection."},"roles":{"description":"Define on which logical switches/bridges we want to provide loop-detection."}}}}},"radios":{"items":{"description":"Describe a physical radio on the AP. Each radio can be the parent of multiple VAPs. They all share the same physical properties.","properties":{"band":{"description":"Specifies the wireless band to configure the radio for. Available radio device phys on the target system are matched by the wireless band given here. If multiple radio phys support the same band, the settings specified here will be applied to all of them."},"bandwidth":{"description":"Specifies a narrow channel width in MHz, possible values are 5, 10, 20."},"channel":{"description":"Specifies the wireless channel to use. A value of 'auto' starts the ACS algorithm."},"valid-channels":{"description":"Pass a list of valid-channels that can be used during ACS."},"acs-exclude-6ghz-non-psc":{"description":"Exclude non-psc when doing auto channel selection on 6GHz"},"country":{"description":"Specifies the country code, affects the available channels and transmission powers."},"allow-dfs":{"description":"This property defines whether a radio may use DFS channels."},"channel-mode":{"description":"Define the ideal channel mode that the radio shall use. This can be 802.11n, 802.11ac or 802.11ax. This is just a hint for the AP. If the requested value is not supported then the AP will use the highest common denominator."},"channel-width":{"description":"The channel width that the radio shall use. This is just a hint for the AP. If the requested value is not supported then the AP will use the highest common denominator."},"require-mode":{"description":"Stations that do no fulfill these HT modes will be rejected."},"mimo":{"description":"This option allows configuring the antenna pairs that shall be used. This is just a hint for the AP. If the requested value is not supported then the AP will use the highest common denominator."},"tx-power":{"description":"This option specifies the transmission power in dBm"},"legacy-rates":{"description":"Allow legacy 802.11b data rates."},"beacon-interval":{"description":"Beacon interval in kus (1.024 ms)."},"maximum-clients":{"description":"Set the maximum number of clients that may connect to this radio. This value is accumulative for all attached VAP interfaces."},"maximum-clients-ignore-probe":{"description":"Ignore probe requests if maximum-clients was reached."},"rates":{"description":"The rate configuration of this BSS.","properties":{"beacon":{"description":"The beacon rate that shall be used by the BSS. Values are in Mbps."},"multicast":{"description":"The multicast rate that shall be used by the BSS. Values are in Mbps."}}},"he-settings":{"description":"This section describes the HE specific configuration options of the BSS.","properties":{"multiple-bssid":{"description":"Enabling this option will make the PHY broadcast its BSSs using the multiple BSSID beacon IE."},"ema":{"description":"Enableing this option will make the PHY broadcast its multiple BSSID beacons using EMA."},"bss-color":{"description":"This enables BSS Coloring on the PHY. setting it to 0 disables the feature 1-63 sets the color and 64 will make hostapd pick a random color."}}},"he-6ghz-settings":{"properties":{"power-type":{"description":"This config is to set the 6 GHz Access Point type"},"controller":{"description":"The URL of the AFC controller that the AP shall connect to."},"ca-certificate":{"description":"The CA of the server. This enables mTLS."},"serial-number":{"description":"The serial number that the AP shall send to the AFC controller."},"request-id":{"description":"The request-id that the AP shall send to the AFC controller."},"certificate-ids":{"description":"The certificate IDs that the AP shall send to the AFC controller."},"minimum-power":{"description":"The minimum power that the AP shall request from to the AFC controller."},"frequency-ranges":{"description":"The list of frequency ranges that the AP shall request from to the AFC controller."},"operating-classes":{"description":"The list of frequency ranges that the AP shall request from to the AFC controller."}}},"hostapd-iface-raw":{"description":"This array allows passing raw hostapd.conf lines."}}}},"interfaces":{"items":{"description":"This section describes the logical network interfaces of the device. Interfaces as their primary have a role that is upstream, downstream, guest, ....","properties":{"name":{"description":"This is a free text field, stating the administrative name of the interface. It may contain spaces and special characters."},"role":{"description":"The role defines if the interface is upstream or downstream facing."},"isolate-hosts":{"description":"This option makes sure that any traffic leaving this interface is isolated and all local IP ranges are blocked. It essentially enforces 'guest network' firewall settings."},"metric":{"description":"The routing metric of this logical interface. Lower values have higher priority."},"mtu":{"description":"The MTU of this logical interface."},"services":{"description":"The services that shall be offered on this logical interface. These are just strings such as 'ssh', 'lldp', 'mdns'"},"vlan-awareness":{"description":"Setup additional VLANs inside the bridge"},"ieee8021x-ports":{"description":"The list of physical network devices that shall serve .1x for this interface."},"vlan":{"description":"This section describes the vlan behaviour of a logical network interface.","properties":{"id":{"description":"This is the pvid of the vlan that shall be assigned to the interface. The individual physical network devices contained within the interface need to be told explicitly if egress traffic shall be tagged."}}},"bridge":{"description":"This section describes the bridge behaviour of a logical network interface.","properties":{"mtu":{"description":"The MTU that shall be used by the network interface."},"tx-queue-len":{"description":"The Transmit Queue Length is a TCP/IP stack network interface value that sets the number of packets allowed per kernel transmit queue of a network interface device."},"isolate-ports":{"description":"Isolates the bridge ports from each other."}}},"ethernet":{"items":{"description":"This section defines the physical copper/fiber ports that are members of the interface. Network devices are referenced by their logical names.","properties":{"select-ports":{"description":"The list of physical network devices that shall be added to the interface. The names are logical ones and wildcardable. 'WAN' will use whatever the hardwares default upstream facing port is. 'LANx' will use the 'x'th' downstream facing ethernet port. LAN* will use all downstream ports."},"multicast":{"description":"Enable multicast support."},"learning":{"description":"Controls whether a given port will learn MAC addresses from received traffic or not. If learning if off, the bridge will end up flooding any traffic for which it has no FDB entry. By default this flag is on."},"isolate":{"description":"Only allow communication with non-isolated bridge ports when enabled."},"macaddr":{"description":"Enforce a specific MAC to these ports."},"reverse-path-filter":{"description":"Reverse Path filtering is a method used by the Linux Kernel to help prevent attacks used by Spoofing IP Addresses."},"vlan-tag":{"description":"Shall the port have a vlan tag."}}}},"ipv4":{"description":"This section describes the IPv4 properties of a logical interface.","properties":{"addressing":{"description":"This option defines the method by which the IPv4 address of the interface is chosen."},"subnet":{"description":"This option defines the static IPv4 of the logical interface in CIDR notation. auto/24 can be used, causing the configuration layer to automatically use and address range from globals.ipv4-network."},"gateway":{"description":"This option defines the static IPv4 gateway of the logical interface."},"send-hostname":{"description":"include the devices hostname inside DHCP requests"},"use-dns":{"description":"Define which DNS servers shall be used. This can either be a list of static IPv4 addresse or dhcp (use the server provided by the DHCP lease)"},"disallow-upstream-subnet":{"description":"This option only applies to 'downstream' interfaces. The downstream interface will prevent traffic going out to the listed CIDR4s. This can be used to prevent a guest / captive interface being able to communicate with RFC1918 ranges."},"dhcp":{"description":"This section describes the DHCP server configuration","properties":{"lease-first":{"description":"The last octet of the first IPv4 address in this DHCP pool."},"lease-count":{"description":"The number of IPv4 addresses inside the DHCP pool."},"lease-time":{"description":"How long the lease is valid before a RENEW must be issued."},"use-dns":{"description":"The DNS server sent to clients as DHCP option 6."}}},"dhcp-leases":{"items":{"description":"This section describes the static DHCP leases of this logical interface.","properties":{"macaddr":{"description":"The MAC address of the host that this lease shall be used for."},"static-lease-offset":{"description":"The offset of the IP that shall be used in relation to the first IP in the available range."},"lease-time":{"description":"How long the lease is valid before a RENEW muss ne issued."},"publish-hostname":{"description":"Shall the hosts hostname be made available locally via DNS."}}}},"port-forward":{"items":{"description":"This section describes an IPv4 port forwarding.","properties":{"protocol":{"description":"The layer 3 protocol to match."},"external-port":{"description":"The external port(s) to forward."},"internal-address":{"description":"The internal IP to forward to. The address will be masked and concatenated with the effective interface subnet."},"internal-port":{"description":"The internal port to forward to. Defaults to the external port if omitted."}}}}}},"ipv6":{"description":"This section describes the IPv6 properties of a logical interface.","properties":{"addressing":{"description":"This option defines the method by which the IPv6 subnet of the interface is acquired. In static addressing mode, the specified subnet and gateway, if any, are configured on the interface in a fixed manner. Also - if a prefix size hint is specified - a prefix of the given size is allocated from each upstream received prefix delegation pool and assigned to the interface. In dynamic addressing mode, a DHCPv6 client will be launched to obtain IPv6 prefixes for the interface itself and for downstream delegation. Note that dynamic addressing usually only ever makes sense on upstream interfaces."},"subnet":{"description":"This option defines a static IPv6 prefix in CIDR notation to set on the logical interface. A special notation 'auto/64' can be used, causing the configuration agent to automatically allocate a suitable prefix from the IPv6 address pool specified in globals.ipv6-network. This property only applies to static addressing mode. Note that this is usually not needed due to DHCPv6-PD assisted prefix assignment."},"gateway":{"description":"This option defines the static IPv6 gateway of the logical interface. It only applies to static addressing mode. Note that this is usually not needed due to DHCPv6-PD assisted prefix assignment."},"prefix-size":{"description":"For dynamic addressing interfaces, this property specifies the prefix size to request from an upstream DHCPv6 server through prefix delegation. For static addressing interfaces, it specifies the size of the sub-prefix to allocate from the upstream-received delegation prefixes for assignment to the logical interface."},"dhcpv6":{"description":"This section describes the DHCPv6 server configuration","properties":{"mode":{"description":"Specifies the DHCPv6 server operation mode. When set to 'stateless', the system will announce router advertisements only, without offering stateful DHCPv6 service. When set to 'stateful', emitted router advertisements will instruct clients to obtain a DHCPv6 lease. When set to 'hybrid', clients can freely chose whether to self-assign a random address through SLAAC, whether to request an address via DHCPv6, or both. For maximum compatibility with different clients, it is recommended to use the hybrid mode. The special mode 'relay' will instruct the unit to act as DHCPv6 relay between this interface and any of the IPv6 interfaces in 'upstream' mode."},"announce-dns":{"description":"Overrides the DNS server to announce in DHCPv6 and RA messages. By default, the device will announce its own local interface address as DNS server, essentially acting as proxy for downstream clients. By specifying a non-empty list of IPv6 addresses here, this default behaviour can be overridden."},"filter-prefix":{"description":"Selects a specific downstream prefix or a number of downstream prefix ranges to announce in DHCPv6 and RA messages. By default, all prefixes configured on a given downstream interface are advertised. By specifying an IPv6 prefix in CIDR notation here, only prefixes covered by this CIDR are selected."}}},"port-forward":{"items":{"description":"This section describes an IPv6 port forwarding.","properties":{"protocol":{"description":"The layer 3 protocol to match."},"external-port":{"description":"The external port(s) to forward."},"internal-address":{"description":"The internal IP to forward to. The address will be masked and concatenated with the effective interface subnet."},"internal-port":{"description":"The internal port to forward to. Defaults to the external port if omitted."}}}},"traffic-allow":{"items":{"description":"This section describes an IPv6 traffic accept rule.","properties":{"protocol":{"description":"The layer 3 protocol to match."},"source-address":{"description":"The source IP to allow traffic from."},"source-ports":{"description":"The source port(s) to accept."},"destination-address":{"description":"The destination IP to allow traffic to. The address will be masked and concatenated with the effective interface subnet."},"destination-ports":{"description":"The destination ports to accept."}}}}}},"broad-band":{"oneOf":{"0":{"description":"This Object defines the properties of a broad-band uplink.","properties":{"protocol":{"description":"This uplink uses WWAN/LTE"},"modem-type":{"description":"The local protocol that the modem supports."},"access-point-name":{"description":"Commonly known as APN. The name of a gateway between a mobile network and the internet."},"authentication-type":{"description":"The authentication mode that shall be used."},"pin-code":{"description":"The PIN that shall be used to unlock the SIM card."},"user-name":{"description":"This option is only required if an authentication-type is defined."},"password":{"description":"This option is only required if an authentication-type is defined."},"packet-data-protocol":{"description":"Define what kind of IP stack shall be used."}}},"1":{"description":"This Object defines the properties of a PPPoE uplink.","properties":{"protocol":{"description":"This uplink uses PPPoE"},"user-name":{"description":"The username used to authenticate."},"password":{"description":"The password used to authenticate."}}}}},"ssids":{"items":{"description":"A device has certain properties that describe its identity and location. These properties are described inside this object.","properties":{"purpose":{"description":"An SSID can have a special purpose such as the hidden on-boarding BSS. All purposes other than 'user-defined' are static pre-defined configurations."},"name":{"description":"The broadcasted SSID of the wireless network and for for managed mode the SSID of the network you’re connecting to"},"wifi-bands":{"description":"The band that the SSID should be broadcasted on. The configuration layer will use the first matching band."},"bss-mode":{"description":"Selects the operation mode of the wireless network interface controller."},"bssid":{"description":"Override the BSSID of the network, only applicable in adhoc or sta mode."},"hidden-ssid":{"description":"Disables the broadcasting of beacon frames if set to 1 and,in doing so, hides the ESSID."},"isolate-clients":{"description":"Isolates wireless clients from each other on this BSS."},"strict-forwarding":{"description":"Isolate the BSS from all other members on the bridge apart from the first wired port."},"power-save":{"description":"Unscheduled Automatic Power Save Delivery."},"rts-threshold":{"description":"Set the RTS/CTS threshold of the BSS."},"broadcast-time":{"description":"This option will make the unit braodcast the time inside its beacons."},"unicast-conversion":{"description":"Convert multicast traffic to unicast on this BSS."},"services":{"description":"The services that shall be offered on this logical interface. These are just strings such as 'wifi-steering'"},"dtim-period":{"description":"Set the DTIM (delivery traffic information message) period. There will be one DTIM per this many beacon frames. This may be set between 1 and 255. This option only has an effect on ap wifi-ifaces."},"maximum-clients":{"description":"Set the maximum number of clients that may connect to this VAP."},"proxy-arp":{"description":"Proxy ARP is the technique in which the host router, answers ARP requests intended for another machine."},"fils-discovery-interval":{"description":"The maximum interval for FILS discovery announcement frames. This is a condensed beacon used in 6GHz channels for passive BSS discovery."},"encryption":{"description":"A device has certain properties that describe its identity and location. These properties are described inside this object.","properties":{"proto":{"description":"The wireless encryption protocol that shall be used for this BSS"},"key":{"description":"The Pre Shared Key (PSK) that is used for encryption on the BSS when using any of the WPA-PSK modes."},"ieee80211w":{"description":"Enable 802.11w Management Frame Protection (MFP) for this BSS."},"key-caching":{"description":"PMKSA created through EAP authentication and RSN preauthentication can be cached."}}},"multi-psk":{"anyOf":{"0":{"items":{"description":"A SSID can have multiple PSK/VID mappings. Each one of them can be bound to a specific MAC or be a wildcard.","properties":{"key":{"description":"The Pre Shared Key (PSK) that is used for encryption on the BSS when using any of the WPA-PSK modes."}}}}}},"rrm":{"description":"Enable 802.11k Radio Resource Management (RRM) for this BSS.","properties":{"neighbor-reporting":{"description":"Enable neighbor report via radio measurements (802.11k)."},"reduced-neighbor-reporting":{"description":"Enable reduced neighbor reports."},"lci":{"description":"The content of a LCI measurement subelement"},"civic-location":{"description":"The content of a location civic measurement subelement"},"ftm-responder":{"description":"Publish fine timing measurement (FTM) responder functionality on this BSS."},"stationary-ap":{"description":"Stationary AP config indicates that the AP doesn't move."}}},"rate-limit":{"description":"The UE rate-limiting configuration of this BSS.","properties":{"ingress-rate":{"description":"The ingress rate to which hosts will be shaped. Values are in Mbps"},"egress-rate":{"description":"The egress rate to which hosts will be shaped. Values are in Mbps"}}},"roaming":{"anyOf":{"0":{"description":"Enable 802.11r Fast Roaming for this BSS.","properties":{"message-exchange":{"description":"Shall the pre authenticated message exchange happen over the air or distribution system."},"generate-psk":{"description":"Whether to generate FT response locally for PSK networks. This avoids use of PMK-R1 push/pull from other APs with FT-PSK networks."},"domain-identifier":{"description":"Mobility Domain identifier (dot11FTMobilityDomainID, MDID)."},"pmk-r0-key-holder":{"description":"The pairwise master key R0. This is unique to the mobility domain and is required for fast roaming over the air. If the field is left empty a deterministic key is generated."},"pmk-r1-key-holder":{"description":"The pairwise master key R1. This is unique to the mobility domain and is required for fast roaming over the air. If the field is left empty a deterministic key is generated."},"key-aes-256":{"description":"The AES-256 shared amongst a mobility domain. The R0/1K key pairs will be autogenerated based on this value."}}},"1":{"description":"Enable 802.11r Fast Roaming for this BSS. This will enable 'auto' mode which will work for most scenarios."}}},"radius":{"description":"When using EAP encryption we need to provide the required information allowing us to connect to the AAA servers.","properties":{"nas-identifier":{"description":"NAS-Identifier string for RADIUS messages. When used, this should be unique to the NAS within the scope of the RADIUS server."},"chargeable-user-id":{"description":"This will enable support for Chargeable-User-Identity (RFC 4372)."},"local":{"description":"Describe the properties of the local Radius server inside hostapd.","properties":{"server-identity":{"description":"EAP methods that provide mechanism for authenticated server identity delivery use this value."},"users":{"description":"Specifies a collection of local EAP user/psk/vid triplets.","items":{"description":"Describes a local EAP user/psk/vid triplet."}}}},"dynamic-authorization":{"description":"Dynamic Authorization Extensions (DAE) is an extension to Radius.","properties":{"host":{"description":"The IP of the DAE client."},"port":{"description":"The network port that the DAE client can connet on."},"secret":{"description":"The shared DAE authentication secret."}}},"authentication":{"allOf":{"0":{"description":"Describe the properties of a Radius server.","properties":{"host":{"description":"The URI of our Radius server."},"port":{"description":"The network port of our Radius server."},"secret":{"description":"The shared Radius authentication secret."},"secondary":{"description":"Definition of the secondary/failsafe radius server.","properties":{"host":{"description":"The URI of our Radius server."},"port":{"description":"The network port of our Radius server."},"secret":{"description":"The shared Radius authentication secret."}}},"request-attribute":{"description":"The additional Access-Request attributes that gets sent to the server.","items":{"anyOf":{"0":{"properties":{"vendor-id":{"description":"The ID of the vendor specific RADIUS attribute"},"vendor-attributes":{"items":{"description":"The numeric RADIUS attribute value","properties":{"id":{"description":"The ID of the vendor specific RADIUS attribute"},"value":{"description":"The vendor specific RADIUS attribute value. This needs to be a hexadecimal string."}}}}}},"1":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"value":{"description":"The numeric RADIUS attribute value"}}},"2":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"value":{"description":"The RADIUS attribute value string"}}},"3":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"hex-value":{"description":"The RADIUS attribute value string"}}}}}}}},"1":{"properties":{"mac-filter":{"description":"Should the radius server be used for MAC address ACL."}}}}},"accounting":{"allOf":{"0":{"description":"Describe the properties of a Radius server.","properties":{"host":{"description":"The URI of our Radius server."},"port":{"description":"The network port of our Radius server."},"secret":{"description":"The shared Radius authentication secret."},"secondary":{"description":"Definition of the secondary/failsafe radius server.","properties":{"host":{"description":"The URI of our Radius server."},"port":{"description":"The network port of our Radius server."},"secret":{"description":"The shared Radius authentication secret."}}},"request-attribute":{"description":"The additional Access-Request attributes that gets sent to the server.","items":{"anyOf":{"0":{"properties":{"vendor-id":{"description":"The ID of the vendor specific RADIUS attribute"},"vendor-attributes":{"items":{"description":"The numeric RADIUS attribute value","properties":{"id":{"description":"The ID of the vendor specific RADIUS attribute"},"value":{"description":"The vendor specific RADIUS attribute value. This needs to be a hexadecimal string."}}}}}},"1":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"value":{"description":"The numeric RADIUS attribute value"}}},"2":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"value":{"description":"The RADIUS attribute value string"}}},"3":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"hex-value":{"description":"The RADIUS attribute value string"}}}}}}}},"1":{"properties":{"interval":{"description":"The interim accounting update interval. This value is defined in seconds."}}}}},"health":{"description":"The credentials used when health check probes this radius server.","properties":{"username":{"description":"The username that gets used when doing a healthcheck on this radius server."},"password":{"description":"The password that gets used when doing a healthcheck on this radius server."}}}}},"certificates":{"description":"When running a local EAP server or using STA/MESH to connect to another BSS a set of certificates is required.","properties":{"use-local-certificates":{"description":"The device will use its local certificate bundle for the TLS setup and ignores all other certificate options in this section."},"ca-certificate":{"description":"The local servers CA bundle."},"certificate":{"description":"The local servers certificate."},"private-key":{"description":"The local servers private key/"},"private-key-password":{"description":"The password required to read the private key."}}},"pass-point":{"description":"Enable Hotspot 2.0 support.","properties":{"venue-name":{"description":"This parameter can be used to configure one or more Venue Name Duples for Venue Name ANQP information."},"venue-group":{"description":"The available values are defined in 802.11u."},"venue-type":{"description":"The available values are defined in IEEE Std 802.11u-2011, 7.3.1.34"},"venue-url":{"description":"This parameter can be used to configure one or more Venue URL Duples to provide additional information corresponding to Venue Name information."},"auth-type":{"description":"This parameter indicates what type of network authentication is used in the network.","properties":{"type":{"description":"Specifies the specific network authentication type in use."},"uri":{"description":"Specifies the redirect URL applicable to the indicated authentication type."}}},"domain-name":{"description":"The IEEE 802.11u Domain Name."},"nai-realm":{"description":"NAI Realm information"},"osen":{"description":"OSU Server-Only Authenticated L2 Encryption Network;"},"anqp-domain":{"description":"ANQP Domain ID, An identifier for a set of APs in an ESS that share the same common ANQP information."},"anqp-3gpp-cell-net":{"description":"The ANQP 3GPP Cellular Network information."},"friendly-name":{"description":"This parameter can be used to configure one or more Operator Friendly Name Duples."},"access-network-type":{"description":"Indicate the type of network. This is part of the interworking IE."},"internet":{"description":"Whether the network provides connectivity to the Internet"},"asra":{"description":"Additional Step Required for Access."},"esr":{"description":"Emergency services reachable."},"uesa":{"description":"Unauthenticated emergency service accessible."},"hessid":{"description":"Homogeneous ESS identifier"},"roaming-consortium":{"description":"Roaming Consortium OIs can be configured here. Each OI is between 3 and 15 octets and is configured as a hexstring."},"disable-dgaf":{"description":"Disable Downstream Group-Addressed Forwarding. This can be used to configure a network where no group-addressed frames are allowed."},"ipaddr-type-available":{"description":"IP Address Type Availability."},"connection-capability":{"description":"This can be used to advertise what type of IP traffic can be sent through the hotspot."},"icons":{"description":"The operator icons.","items":{"properties":{"width":{"description":"The width of the operator icon in pixel"},"height":{"description":"The height of the operator icon in pixel"},"type":{"description":"The mimetype of the operator icon"},"icon":{"description":"The base64 encoded image"},"language":{"description":"ISO 639-2 language code of the icon"}}}},"wan-metrics":{"description":"A description of the wan metric offered by this device.","properties":{"info":{"description":"The state of the devices uplink"},"downlink":{"description":"Estimate of WAN backhaul link current downlink speed in kbps."},"uplink":{"description":"Estimate of WAN backhaul link current uplink speed in kbps."}}}}},"quality-thresholds":{"description":"The thresholds that need to be meet for a clien association to be allowed.","properties":{"probe-request-rssi":{"description":"Probe requests will be ignored if the rssi is below this threshold."},"association-request-rssi":{"description":"Association requests will be denied if the rssi is below this threshold."},"client-kick-rssi":{"description":"Clients will get kicked if their SNR drops below this value."},"client-kick-ban-time":{"description":"The duration that a client is banned from re-joining after it was kicked."}}},"access-control-list":{"description":"The MAC ACL that defines which clients are allowed or denied to associations.","properties":{"mode":{"description":"Defines if this is an allow or deny list."},"mac-address":{"description":"Association requests will be denied if the rssi is below this threshold."}}},"captive":{"allOf":{"0":{"oneOf":{"0":{"description":"This section can be used to setup a captive portal on the AP with a click-to-continue splash page.","properties":{"auth-mode":{"description":"This field must be set to 'click-to-continue'"}}},"1":{"description":"This section can be used to setup a captive portal on the AP with a click-to-continue splash page.","properties":{"auth-mode":{"description":"This field must be set to 'radius'"},"auth-server":{"description":"The URI of our Radius Authentication server."},"auth-port":{"description":"The network port of our Radius Authentication server."},"auth-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-server":{"description":"The URI of our Radius Authentication server."},"acct-port":{"description":"The network port of our Radius Authentication server."},"acct-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-interval":{"description":"The timeout used for interim messages."}}},"2":{"description":"This section can be used to setup a captive portal on the AP with a credentials splash page.","properties":{"auth-mode":{"description":"This field must be set to 'credentials'"},"credentials":{"description":"The list of local username/password pairs that can be used to login."}}},"3":{"description":"This section can be used to setup a captive portal on the AP with a remote UAM server.","properties":{"auth-mode":{"description":"This field must be set to 'uam'"},"uam-port":{"description":"The local UAM port."},"uam-secret":{"description":"The pre-shared UAM secret."},"uam-server":{"description":"The fqdn of the UAM server."},"nasid":{"description":"The NASID that gets sent to the UAM server."},"nasmac":{"description":"The NAS MAC that gets send to the UAM server. The devices serial is used if this value is not provided."},"auth-server":{"description":"The URI of our Radius Authentication server."},"auth-port":{"description":"The network port of our Radius Authentication server."},"auth-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-server":{"description":"The URI of our Radius Authentication server."},"acct-port":{"description":"The network port of our Radius Authentication server."},"acct-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-interval":{"description":"The timeout used for interim messages."},"ssid":{"description":"The name of the SSID that shall be sent as part of the UAM redirect."},"mac-format":{"description":"Defines the format used to send the MAC address inside AAA frames."},"final-redirect-url":{"description":"Define the behaviour off the final redirect. Default will honour 'userurl' and fallback to 'local'. Alternatively it is possible to force a redirect to the 'UAM' or 'local' URL."},"mac-auth":{"description":"Try to authenticate new clients using macauth."},"radius-gw-proxy":{"description":"Tunnel all radius traffic via the radius-gw-proxy."}}}}},"1":{"properties":{"walled-garden-fqdn":{"description":"The list of FQDNs that a non-authenticated client is allowed to connect to."},"walled-garden-ipaddr":{"description":"The list of IP addresses that a non-authenticated client is allowed to connect to."},"web-root":{"description":"A base64 encoded TAR file with the custom web-root."},"web-root-url":{"description":"A URL where the webroot should be downloaded from."},"web-root-checksum":{"description":"The SHA256 of the file located at web-root-url."},"idle-timeout":{"description":"How long may a client be idle before getting removed."},"session-timeout":{"description":"How long may a client be idle before getting removed."}}}}},"vlan-awareness":{"description":"Setup additional VLANs inside the bridge"},"hostapd-bss-raw":{"description":"This array allows passing raw hostapd.conf lines."}}}},"tunnel":{"oneOf":{"0":{"description":"This Object defines the properties of a mesh interface overlay.","properties":{"proto":{"description":"This field must be set to mesh."}}},"1":{"description":"This Object defines the properties of a vxlan tunnel.","properties":{"proto":{"description":"This field must be set to vxlan."},"peer-address":{"description":"This is the IP address of the remote host, that the VXLAN tunnel shall be established with."},"peer-port":{"description":"The network port that shall be used to establish the VXLAN tunnel."}}},"2":{"description":"This Object defines the properties of a l2tp tunnel.","properties":{"proto":{"description":"This field must be set to vxlan."},"server":{"description":"This is the IP address of the remote host, that the L2TP tunnel shall be established with."},"user-name":{"description":"The username used to authenticate."},"password":{"description":"The password used to authenticate."}}},"3":{"description":"This Object defines the properties of a GRE tunnel.","properties":{"proto":{"description":"This field must be set to gre."},"peer-address":{"description":"This is the IP address of the remote host, that the GRE tunnel shall be established with."},"dhcp-healthcheck":{"description":"Healthcheck will probe if the remote peer replies to DHCP discovery without sending an ACK."},"dont-fragment":{"description":"Set “Don't Fragment” flag on encapsulated packets."}}},"4":{"description":"This Object defines the properties of a GREv6 tunnel.","properties":{"proto":{"description":"This field must be set to gre6."},"peer-address":{"description":"This is the IPv6 address of the remote host, that the GRE tunnel shall be established with."},"dhcp-healthcheck":{"description":"Healthcheck will probe if the remote peer replies to DHCP discovery without sending an ACK."}}}}}}}},"services":{"description":"This section describes all of the services that may be present on the AP. Each service is then referenced via its name inside an interface, ssid, ...","properties":{"lldp":{"properties":{"describe":{"description":"The LLDP description field. If set to 'auto' it will be derived from unit.name."},"location":{"description":"The LLDP location field. If set to 'auto' it will be derived from unit.location."}}},"ssh":{"description":"This section can be used to setup a SSH server on the AP.","properties":{"port":{"description":"This option defines which port the SSH server shall be available on."},"authorized-keys":{"description":"This allows the upload of public ssh keys. Keys need to be seperated by a newline."},"password-authentication":{"description":"This option defines if password authentication shall be enabled. If set to false, only ssh key based authentication is possible."}}},"ntp":{"description":"This section can be used to setup the upstream NTP servers.","properties":{"servers":{"description":"This is an array of URL/IP of the upstream NTP servers that the unit shall use to acquire its current time."}}},"mdns":{"description":"This section can be used to configure the MDNS server.","properties":{"enable":{"description":"Enable this option if you would like to enable the MDNS server on the unit."}}},"rtty":{"description":"This section can be used to setup a persistent connection to a rTTY server.","properties":{"host":{"description":"The server that the device shall connect to."},"port":{"description":"This option defines the port that device shall connect to."},"token":{"description":"The security token that shall be used to authenticate with the server."},"mutual-tls":{"description":"Shall the connection enforce mTLS"}}},"log":{"description":"This section can be used to configure remote syslog support.","properties":{"host":{"description":"IP address of a syslog server to which the log messages should be sent in addition to the local destination."},"port":{"description":"Port number of the remote syslog server specified with log_ip."},"proto":{"description":"Sets the protocol to use for the connection, either tcp or udp."},"size":{"description":"Size of the file based log buffer in KiB. This value is used as the fallback value for log_buffer_size if the latter is not specified."},"priority":{"description":"Filter messages by their log priority. the value maps directly to the 0-7 range used by syslog."}}},"http":{"description":"Enable the webserver with the on-boarding webui","properties":{"http-port":{"description":"The port that the HTTP server should run on."}}},"igmp":{"description":"This section allows enabling the IGMP/Multicast proxy","properties":{"enable":{"description":"This option defines if the IGMP/Multicast proxy shall be enabled on the device."}}},"ieee8021x":{"description":"This section allows enabling wired ieee802.1X","properties":{"mode":{"description":"This field must be set to 'radius or user'"},"select-ports":{"description":"Specifies a list of ports that we want to filter."},"users":{"description":"Specifies a collection of local EAP user/psk/vid triplets.","items":{"description":"Describes a local EAP user/psk/vid triplet."}},"radius":{"description":"Specifies the information about radius account authentication and accounting","properties":{"nas-identifier":{"description":"NAS-Identifier string for RADIUS messages. When used, this should be unique to the NAS within the scope of the RADIUS server."},"auth-server-addr":{"description":"The URI of our Radius server."},"auth-server-port":{"description":"The network port of our Radius server."},"auth-server-secret":{"description":"The shared Radius authentication secret."},"acct-server-addr":{"description":"The URI of our Radius server."},"acct-server-port":{"description":"The network port of our Radius server."},"acct-server-secret":{"description":"The shared Radius accounting secret."},"coa-server-addr":{"description":"The URI of our Radius server."},"coa-server-port":{"description":"The network port of our Radius server."},"coa-server-secret":{"description":"The shared Radius accounting secret."},"mac-address-bypass":{"description":"Trigger mac-auth when a new ARP is learned."}}}}},"radius-proxy":{"description":"This section can be used to setup a radius security proxy instance (radsecproxy).","properties":{"proxy-secret":{"description":"The radius secret used to communicate with the proxy."},"realms":{"description":"The various realms that we can proxy to.","items":{"anyOf":{"0":{"properties":{"protocol":{"description":"Defines whether the real should use radsec or normal radius."},"realm":{"description":"The realm that that this server shall be used for."},"auto-discover":{"description":"Auto discover radsec server address via realm DNS NAPTR record."},"host":{"description":"The remote proxy server that the device shall connect to."},"port":{"description":"The remote proxy port that the device shall connect to."},"secret":{"description":"The radius secret that will be used for the connection."},"use-local-certificates":{"description":"The device will use its local certificate bundle for the TLS setup and ignores all other certificate options in this section."},"ca-certificate":{"description":"The local servers CA bundle."},"certificate":{"description":"The local servers certificate."},"private-key":{"description":"The local servers private key/"},"private-key-password":{"description":"The password required to read the private key."}}},"1":{"properties":{"protocol":{"description":"Defines whether the real should use radsec or normal radius."},"realm":{"description":"The realm that that this server shall be used for."},"auth-server":{"description":"The URI of our Radius server."},"auth-port":{"description":"The network port of our Radius server."},"auth-secret":{"description":"The shared Radius authentication secret."},"acct-server":{"description":"The URI of our Radius server."},"acct-port":{"description":"The network port of our Radius server."},"acct-secret":{"description":"The shared Radius authentication secret."}}},"2":{"properties":{"protocol":{"description":"Defines whether the real should use radsec or normal radius."},"realm":{"description":"The realm that that this server shall be used for."},"message":{"description":"The message that is sent when a realm is blocked."}}}}}}}},"online-check":{"description":"This section can be used to configure the online check service.","properties":{"ping-hosts":{"description":"Hosts that shall be pinged to find out if we are online."},"download-hosts":{"description":"URLs to which a http/s connection shall be established to find out if we are online. The service will try to download http://$string/online.txt and expects the content of that file to be 'Ok'. HTTP 30x is support allowing https redirects."},"check-interval":{"description":"The interval in seconds in between each online-check."},"check-threshold":{"description":"How often does the online check need to fail until the system assumes that it has lost online connectivity."},"action":{"description":"The action that the device shall execute when it has detected that it is not online."}}},"data-plane":{"description":"This section can be used to define eBPF and cBPF blobs that shall be loaded for virtual data-planes and SDN.","properties":{"ingress-filters":{"description":"A list of programs that can be loaded as ingress filters on interfaces.","items":{"properties":{"name":{"description":"The name of the ingress filter."},"program":{"description":"The base64 encoded xBPF."}}}}}},"wifi-steering":{"description":"This section describes the band steering behaviour of the unit.","properties":{"mode":{"description":"Wifi sterring can happen either locally or via the backend gateway."},"assoc-steering":{"description":"Allow rejecting assoc requests for steering purposes."},"required-snr":{"description":"Minimum required signal level (dBm) for connected clients. If the client will be kicked if the SNR drops below this value."},"required-probe-snr":{"description":"Minimum required signal level (dBm) to allow connections. If the SNR is below this value, probe requests will not be replied to."},"required-roam-snr":{"description":"Minimum required signal level (dBm) before an attempt is made to roam the client to a better AP."},"load-kick-threshold":{"description":"Minimum channel load (%) before kicking clients"},"auto-channel":{"description":"Allow multiple instances of the steering daemon to coordinate the best channel usage amongst eachother."},"ipv6":{"description":"Use IPv6 multicast to communicate with remote usteerd instances, rather than IPv4 broadcast."}}},"quality-of-service":{"description":"This section describes the QoS behaviour of the unit.","properties":{"select-ports":{"description":"The physical network devices that shall be considered the primary uplink interface. All classification and shaping will happen on this device."},"bandwidth-up":{"description":"Defines the upload bandwidth of this device. If it is not known or the device is attached to a shared medium, this value needs to be 0."},"bandwidth-down":{"description":"Defines the download bandwidth of this device. If it is not known or the device is attached to a shared medium, this value needs to be 0."},"bulk-detection":{"description":"The QoS feature can automatically detect and classify bulk flows. This is based on average packet size and PPS.","properties":{"dscp":{"description":"The differentiated services code point that shall be assigned to packets that belong to a bulk flow."},"packets-per-second":{"description":"The required PPS rate that will cause a flow to be classified as bulk."}}},"services":{"description":"A list of predefined named services that shall be classified according to the communities DB."},"classifier":{"description":"A list of classifiers. Each classifier will map certain traffic to specific ToS/DSCP values based upon the defined constraints.","items":{"properties":{"dscp":{"description":"The differentiated services code point that shall be assigned to packet that match the rules of this entry."},"ports":{"description":"Each entry defines a layer3 protocol and a port(range) that will be used to match packets.","items":{"properties":{"protocol":{"description":"The port match can apply for TCP, UDP or any IP protocol."},"port":{"description":"The port of this match rule."},"range-end":{"description":"The last port of this match rule if it is a port range."},"reclassify":{"description":"Ignore the ToS/DSCP of packets and reclassify them."}}}},"dns":{"description":"Each entry defines a wildcard FQDN. The IP that this resolves to will be used to match packets.","items":{"properties":{"suffix-matching":{"description":"Match for all suffixes of the FQDN."},"reclassify":{"description":"Ignore the ToS/DSCP of packets and reclassify them."}}}}}}}}},"facebook-wifi":{"description":"This section describes the FaceBook Wifi behaviour of the unit.","properties":{"vendor-id":{"description":"The Vendors ID."},"gateway-id":{"description":"The Gateways ID."},"secret":{"description":"The Device specific secret"}}},"airtime-fairness":{"description":"This section describes the vlan behaviour of a logical network interface.","properties":{"voice-weight":{"description":"Voice traffic does not get aggregated. As voice and video are both considered priotity voice is considered to have a heavier weight when calculation priority average."},"packet-threshold":{"description":"The amount of packets that need to be received for a specific type of traffic before new averageg is calculated."},"bulk-threshold":{"description":"This option is a percentual value. If more the X% of the traffic is bulk, we assign the bulk weight."},"priority-threshold":{"description":"This option is a percentual value. If more the X% of the traffic is priority, we assign the priority weight. Priority classification will take precedence over bulk."},"weight-normal":{"description":"The default ATF weight that UEs get assigned."},"weight-priority":{"description":"The default ATF weight that UEs get assigned when priority traffic above the configured percentage is detected."},"weight-bulk":{"description":"The default ATF weight that UEs get assigned when bulk traffic above the configured percentage is detected."}}},"wireguard-overlay":{"description":"This Object defines the properties of a wireguard-overlay.","properties":{"proto":{"description":"This field must be set to wireguard-overlay."},"private-key":{"description":"The private key of the device. This key is used to lookup the host entry inside the config."},"peer-port":{"description":"The network port that shall be used to establish the wireguard tunnel."},"peer-exchange-port":{"description":"The network port that shall be used to exchange peer data inside the tunnel."},"root-node":{"description":"The descritption of the root node of the overlay.","properties":{"key":{"description":"The public key of the host."},"endpoint":{"description":"The public IP of the host (optional)."},"ipaddr":{"description":"The list of private IPs that a host is reachable on inside the overlay."}}},"hosts":{"description":"The list of all known hosts inside the overlay.","items":{"properties":{"name":{"description":"The unique name of the host."},"key":{"description":"The public key of the host."},"endpoint":{"description":"The public IP of the host (optional)."},"subnet":{"description":"The list of subnets that shall be routed to this host."},"ipaddr":{"description":"The list of private IPs that a host is reachable on inside the overlay."}}}},"vxlan":{"description":"The descritption of the root node of the overlay.","properties":{"port":{"description":"The network port that shall be used to establish the vxlan overlay."},"mtu":{"description":"The MTU that shall be used by the vxlan tunnel."},"isolate":{"description":"If set to true hosts will only be able to talk with the root node and not forward L@ traffic between each other."}}}}},"captive":{"allOf":{"0":{"oneOf":{"0":{"description":"This section can be used to setup a captive portal on the AP with a click-to-continue splash page.","properties":{"auth-mode":{"description":"This field must be set to 'click-to-continue'"}}},"1":{"description":"This section can be used to setup a captive portal on the AP with a click-to-continue splash page.","properties":{"auth-mode":{"description":"This field must be set to 'radius'"},"auth-server":{"description":"The URI of our Radius Authentication server."},"auth-port":{"description":"The network port of our Radius Authentication server."},"auth-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-server":{"description":"The URI of our Radius Authentication server."},"acct-port":{"description":"The network port of our Radius Authentication server."},"acct-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-interval":{"description":"The timeout used for interim messages."}}},"2":{"description":"This section can be used to setup a captive portal on the AP with a credentials splash page.","properties":{"auth-mode":{"description":"This field must be set to 'credentials'"},"credentials":{"description":"The list of local username/password pairs that can be used to login."}}},"3":{"description":"This section can be used to setup a captive portal on the AP with a remote UAM server.","properties":{"auth-mode":{"description":"This field must be set to 'uam'"},"uam-port":{"description":"The local UAM port."},"uam-secret":{"description":"The pre-shared UAM secret."},"uam-server":{"description":"The fqdn of the UAM server."},"nasid":{"description":"The NASID that gets sent to the UAM server."},"nasmac":{"description":"The NAS MAC that gets send to the UAM server. The devices serial is used if this value is not provided."},"auth-server":{"description":"The URI of our Radius Authentication server."},"auth-port":{"description":"The network port of our Radius Authentication server."},"auth-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-server":{"description":"The URI of our Radius Authentication server."},"acct-port":{"description":"The network port of our Radius Authentication server."},"acct-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-interval":{"description":"The timeout used for interim messages."},"ssid":{"description":"The name of the SSID that shall be sent as part of the UAM redirect."},"mac-format":{"description":"Defines the format used to send the MAC address inside AAA frames."},"final-redirect-url":{"description":"Define the behaviour off the final redirect. Default will honour 'userurl' and fallback to 'local'. Alternatively it is possible to force a redirect to the 'UAM' or 'local' URL."},"mac-auth":{"description":"Try to authenticate new clients using macauth."},"radius-gw-proxy":{"description":"Tunnel all radius traffic via the radius-gw-proxy."}}}}},"1":{"properties":{"walled-garden-fqdn":{"description":"The list of FQDNs that a non-authenticated client is allowed to connect to."},"walled-garden-ipaddr":{"description":"The list of IP addresses that a non-authenticated client is allowed to connect to."},"web-root":{"description":"A base64 encoded TAR file with the custom web-root."},"web-root-url":{"description":"A URL where the webroot should be downloaded from."},"web-root-checksum":{"description":"The SHA256 of the file located at web-root-url."},"idle-timeout":{"description":"How long may a client be idle before getting removed."},"session-timeout":{"description":"How long may a client be idle before getting removed."}}}}},"gps":{"description":"This section can be used to configure a GPS dongle","properties":{"adjust-time":{"description":"Adjust the systems clock upon a successful GPS lock."},"baud-rate":{"description":"The baudrate used by the attached GPS dongle"}}},"dhcp-relay":{"description":"Define the vlans on which the dhcp shall be relayed.","properties":{"select-ports":{"description":"The list of physical network devices that shall be used to fwd the DHCP frames."},"vlans":{"description":"The list of all vlans","items":{"properties":{"vlan":{"description":"The vlan id."},"relay-server":{"description":"The unicast target DHCP pool server where frames get relayed to."},"circuit-id-format":{"description":"This option selects what info shall be contained within a relayed frame's circuit ID."},"remote-id-format":{"description":"This option selects what info shall be contained within a relayed frame's remote ID."}}}}}},"admin-ui":{"properties":{"wifi-ssid":{"description":"The name of the admin ssid."},"wifi-key":{"description":"The Pre Shared Key (PSK) that is used for encryption on the BSS."},"wifi-bands":{"description":"The band that the SSID should be broadcasted on. The configuration layer will use the first matching band."},"offline-trigger":{"description":"The admin-ui will be spawned when this offline threshold was exceeded."}}},"rrm":{"description":"This section describes the band steering behaviour of the unit.","properties":{"beacon-request-assoc":{"description":"Tell stations to send a beacon request scan when they associate."},"station-stats-interval":{"description":"Periodically send station statistics every N seconds."},"chanutil":{"description":"RRM policy based on Channel Utilization for optimization.","properties":{"interval":{"description":"The interval to check channel utilization (in seconds)."},"threshold":{"description":"The airtime utilization threshold."},"consecutive-threshold-breach":{"description":"The number of times the Channel Utilization is higher than the threshold before triggering channel optimization."},"algo":{"description":"The algorithm for channel optimization."}}}}},"fingerprint":{"description":"This section can be used to configure device fingerprinting.","properties":{"mode":{"description":"Enable this option if you would like to enable the MDNS server on the unit."},"minimum-age":{"description":"The minimum age a fingerprint must have before it is reported."},"maximum-age":{"description":"The age at which fingerprints get flushed from the local state."},"periodicity":{"description":"This value defines the period at which entries get reported."},"allow-wan":{"description":"Allow fingerprinting devices found on the WAN port."}}},"snmpd":{"description":"SNMP sections.","properties":{"agent":{"description":"Configure the SNMP agent.","properties":{"agentaddress":{"description":"Define the agent configuration."}}},"access":{"description":"List of access types for SNMP.","properties":{"public_access":{"description":"Configuration of public access.","properties":{"context":{"description":"A collection of management information accessible by an SNMP entity."},"group":{"description":"Group related to the access."},"level":{"description":"Level of authorization."},"notify":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."},"prefix":{"description":"Specifies how CONTEXT should be matched against the context of the incoming request."},"read":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."},"version":{"description":"SNMP version."},"write":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."}}},"private_access":{"description":"Configuration of public access.","properties":{"context":{"description":"A collection of management information accessible by an SNMP entity."},"group":{"description":"Group related to the access."},"level":{"description":"Level of authorization."},"notify":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."},"prefix":{"description":"Specifies how CONTEXT should be matched against the context of the incoming request."},"read":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."},"version":{"description":"SNMP version."},"write":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."}}}}},"agentx":{"description":"Configure the role in AgentX protocol.","properties":{"type":{"description":"AgentX protocol role."}}},"com2sec":{"description":"Map an SNMPv1 or SNMPv2c community string to a security name..","properties":{"public":{"description":"Public com2sec.","properties":{"community":{"description":"Community name."},"secname":{"description":"Security name."},"source":{"description":"A restricted source can either be a specific hostname or a subnet."}}},"private":{"description":"Private com2sec.","properties":{"community":{"description":"Community name."},"secname":{"description":"Security name."},"source":{"description":"A restricted source can either be a specific hostname or a subnet."}}}}},"general":{"description":"General options for SNMP service.","properties":{"enabled":{"description":"Enable or disable the service"}}},"pass":{"description":"List of community permissions.","items":{"properties":{"miboid":{"description":"OID used by pass protocol."},"name":{"description":"Name of the MIB."},"prog":{"description":"MIB script."}}}},"group":{"description":"List of pass sections for SNMP.","properties":{"public_v1":{"properties":{"group":{"description":"Group name."},"secname":{"description":"Related security name."},"version":{"description":"SNMP version."}}},"private_v1":{"properties":{"group":{"description":"Group name."},"secname":{"description":"Related security name."},"version":{"description":"SNMP version."}}},"private_v2c":{"properties":{"group":{"description":"Group name."},"secname":{"description":"Related security name."},"version":{"description":"SNMP version."}}},"public_v2c":{"properties":{"group":{"description":"Group name."},"secname":{"description":"Related security name."},"version":{"description":"SNMP version."}}}}},"system":{"description":"System information used by SNMP service.","properties":{"sysContact":{"description":"Contact information."},"sysLocation":{"description":"Location information."},"sysName":{"description":"System name."}}},"view":{"description":"View configuration.","properties":{"oid":{"description":"Define the source oid tree for the view."},"type":{"description":"Type is either included or excluded."},"viewname":{"description":"View name."}}}}}}},"metrics":{"description":"There are several types of mertics that shall be reported in certain intervals. This section provides a granual configuration.","properties":{"statistics":{"description":"Statistics are traffic counters, neighbor tables, ...","properties":{"interval":{"description":"The reporting interval defined in seconds."},"types":{"description":"A list of names of subsystems that shall be reported periodically."}}},"health":{"description":"Health check gets executed periodically and will report a health value between 0-100 indicating how healthy the device thinks it is","properties":{"interval":{"description":"The reporting interval defined in seconds."},"dhcp-local":{"description":"This is makes the AP probe local downstream DHCP servers."},"dhcp-remote":{"description":"This is makes the AP probe remote upstream DHCP servers."},"dns-local":{"description":"This is makes the AP probe DNS servers."},"dns-remote":{"description":"This is makes the AP probe DNS servers."}}},"wifi-frames":{"description":"Define which types of ieee802.11 management frames shall be sent up to the controller.","properties":{"filters":{"description":"A list of the management frames types that shall be sent to the backend."}}},"dhcp-snooping":{"description":"DHCP snooping allows us to intercept DHCP packages on interface that are bridged, where DHCP is not offered as a service by the AP.","properties":{"filters":{"description":"A list of the message types that shall be sent to the backend."}}},"wifi-scan":{"description":"Define the behaviour of the periodic wifi scanning interface.","properties":{"interval":{"description":"The periodicity at which the scan shall be performed."},"verbose":{"description":"Add capabilities, v/ht_oper, ... to the resulting scan info."},"information-elements":{"description":"Add all IEs to the resulting scan info."}}},"telemetry":{"description":"Configure the unsolicited telemetry stream.","properties":{"interval":{"description":"The reporting interval defined in seconds."},"types":{"description":"The event types that get added to telemetry."}}},"realtime":{"description":"Configure the realtime events that get sent to the cloud.","properties":{"types":{"description":"The event types that get added to telemetry."}}}}},"config-raw":{"description":"This object allows passing raw uci commands, that get applied after all the other configuration was ben generated."},"third-party":{"properties":{"dynamic-vxlan":{"items":{"properties":{"vlan_bridge":{"title":"VLAN Bridge"},"own_vxlanid":{"title":"VXLAN ID"}}}},"radius-filterid":{"items":{"properties":{"ssid":{"title":"SSID"},"filterid-vlanid":{"title":"Filter ID VLAN ID","additionalProperties":{"title":"Value from 1 to 4094"}}}}},"cht":{"properties":{"aca":{"title":"Automatic Channel Assignment (ACA)","properties":{"enabled":{"description":"Enable/disable ACA module"},"enable_dfs":{"title":"Enable DFS","description":"Include DFS channels as candidates in the algorithm"},"enable_unii3plus":{"title":"Enable unii3plus"}}},"blutu":{"title":"Bluetooth","properties":{"enabled":{"description":"Enable/disable Bluetooth module"},"device_max_age":{"title":"Device max age","description":"Time to store in memory a scanned device after the last"},"filter_random_macs":{"title":"Filter random MACs"},"scan_period":{"title":"Scan period","description":"Bluetooth scan period in seconds"}}},"lb":{"title":"Load Balancing","properties":{"enabled":{"description":"Enable/disable Load Balancing module"},"lb_only_v":{"title":"Load balancing only v","description":"Only move clients that support 802.11v"}}},"loc":{"title":"Location","properties":{"enabled":{"description":"Enable/disable Location module"},"calc_interval":{"title":"Calc interval","description":"Periodic interval to execute location algorithm"},"group":{"description":"Location group"},"loc_users_enabled":{"title":"Location users enabled","description":"Enable/disable location for non associated clients"},"method_loc":{"title":"Location method","description":"Method of operation of location"},"min_nodes_loc":{"title":"Minimum nodes","description":"Mininum number of CHT nodes that must be collaborating for calculating the position of the clients"},"old_calc_weight":{"title":"Calc Weight","description":"Weight to ponderate the previous position when calculating the new one"}}},"mcast":{"title":"Multicast2Unicast","properties":{"enabled":{"description":"Enable/disable Multicast2Unicast module"}}},"mgr":{"title":"Manager","properties":{"enabled":{"description":"Enable/disable connection to Cloud Manager"},"org_name_l1":{"title":"Level 1 Organization name"},"org_name_l2":{"title":"Level 2 Organization name"},"org_name_l3":{"title":"Level 3 Organization name"},"org_site":{"title":"Site","description":"Site where the AP is deployed"},"org_site_area":{"title":"Site area","description":"Area inside the site where the AP is deployed"},"webhook_enabled":{"description":"Enable/disable webhooks"},"webhook_events":{"description":"Array of suscripted statics messages, 24->stas, 34->users, 44->blutu devices"},"webhook_info":{"description":"Enable/disable webhooks information messages"},"webhook_secret":{"title":"Webhook secret","description":"Key used in the signature algorithm to create a cryptographic hash of the webhook payload"},"webhook_ssl_verification":{"title":"Webhook ssl verification","description":"Enable/disable SSL validation of the webhook endpoint"},"webhook_url":{"title":"Webhook URL","description":"URL of the webhook endpoint. It can be http or https"},"cert_subdomain":{"title":"R14 Certificate subdomain","description":"subdomain of URL of the certificate endpoint"}}},"net":{"properties":{"port":{"description":"UDP Port"}}},"pre":{"properties":{"enabled":{"description":"Enable/disable PRE module"},"stas_5ghz_percent":{"title":"Stas 5GHz percent","description":"Percentage of desired stations connected to 5GHz band"},"util_weight":{"title":"Util weight","description":"Weight assigned to channel utilization"},"wl_timeout_auth":{"title":"Timeout auth","description":"Time to wait before accepting a connection from a station to a closed radio"}}},"sr":{"title":"Smart Roaming","properties":{"enabled":{"description":"Enable/disable Smart Roaming module"},"enable_sr_inact":{"title":"Enable inactivity criteria"},"enable_sr_rssi":{"title":"Enable RSSI criteria in SR algorithm"},"max_inactive":{"title":"Max inactive","description":"Time from which SR will start applying inactivity criteria"},"min_snr":{"title":"Minimum snr","description":"Minimum RSSI difference to perform a ROAM"},"sr_only_v":{"title":"Only move clients that support 802.11v"}}},"swarm":{"properties":{"chtzone_ip":{"title":"CHTZone IP","description":"Valid multicast IP address (IPv4 or IPv6)"},"globalzone_ip":{"title":"Global CHTZone IP","description":"Valid multicast IP address (IPv4 or IPv6)"}}},"tc":{"title":"Traffic Control (TC)","properties":{"dl_sta_lower_limit":{"title":"Minimum guaranteed download bandwidth per station (Mbps)"},"dl_sta_upper_limit":{"title":"Download limit per station (Mbps)"},"rad_lower_limit":{"title":"Guaranteed minimum download bandwidth per radio (Mbps)"},"rad_upper_limit":{"title":"Download limit per radio (Mbps)"},"ul_sta_upper_limit":{"title":"Upload limit per station (Mbps)"}}},"wifi":{"properties":{"enhanced_fingerprinting":{"title":"Enhanced_fingerprinting"},"fingerprinting_enabled":{"title":"Enable tracking of non associated stations"}}}}}}},"unit":{"description":"A device has certain properties that describe its identity and location. These properties are described inside this object.","properties":{"name":{"description":"This is a free text field, stating the administrative name of the device. It may contain spaces and special characters."},"hostname":{"description":"The hostname that shall be set on the device. If this field is not set, then the devices serial number is used."},"location":{"description":"This is a free text field, stating the location of the device. It may contain spaces and special characters."},"timezone":{"description":"This allows you to change the TZ of the device."},"leds-active":{"description":"This allows forcing all LEDs off."},"random-password":{"description":"The device shall create a random root password and tell the gateway about it."},"system-password":{"description":"System-config string that holds the password for main (root / admin) user to apply."},"beacon-advertisement":{"description":"The TIP vendor IEs that shall be added to beacons","properties":{"device-name":{"description":"Add an IE containing the device's name to beacons."},"device-serial":{"description":"Add an IE containing the device's serial to beacons."},"network-id":{"description":"A provider specific ID for the network/venue that the device is part of."}}}}}}},"default":{"Login":{"logIn":"Log In","enterCredentials":"Please enter you credentials","password":"Password","wrongCredentials":"Wrong credentials","errorVerify":"Error verifiying user"},"Password":{"password":"Password","passwordMustMatch":"Passwords must match","passwordPolicy":"Password policy","newPassword":"New password","confirmPassword":"Confirm password","mustHaveCharacters":"Must be at least 8 characters long","mustHaveUpperCase":"Must contain 1 uppercase letter","mustHaveLowerCase":"Must contain 1 lowercase letter","mustHaveOneDigit":"Must contain 1 digit","mustHaveSpecialChar":"Must contain 1 special character"},"Documentation":{"title":"Documentation"},"Titles":{"configuration":"Configuration","unsavedChanges":"Unsaved changes"},"Common":{"theme":"Theme","user":"User","users":"Users","device":"Device","devices":"Devices","associatedDevices":"Associated Devices","sites":"Sites","clients":"Clients","organization":"Organization","organizations":"Organizations","site":"Site","subsite":"Subsite","siteOrg":"Site Organization","name":"Name","email":"Email","role":"Role","model":"Model","selectRole":"Select a role","location":"Location","update":"Update","create":"Create","delete":"Delete","cancel":"Cancel","apply":"Apply","assign":"Assign","register":"Register","save":"Save","select":"Select","yes":"Yes","no":"No","search":"Search {value}","clear":"Clear","keywordSearch":"Keyword Search","noData":"No data found","showing":"Showing","hi":"Hi","to":"to","of":"of","or":"or","elements":"elements","unsavedChangesMessage":"You have unsaved changes. Are you sure you want to cancel?","updateLocation":"Update Location","filterBy":"Filter by...","selectOrgsOrSites":"Select organizations or sites","confirm":"Confirm","type":"Type","accept":"Accept","expandAll":"Expand All","collapseAll":"Collapse All","pendingToAccept":"Pending to accept","new":"New","parent":"Parent","configure":"Configure","reset":"Reset","importCsv":"Import CSV","none":"None","unbind":"Unbind","actions":"Actions","orgOrSite":"Organization or Site","created":"Created","modified":"Modified","details":"Details","downloadTemplate":"Download Template","copy":"copy","optional":"optional","errors":"Errors","path":"Path","goBack":"Go Back","goHome":"Home","external":"External","channel":"Channel","power":"Power","export":"Export","administratorsGuide":"User manual","documentation":"Documentation","upgrade":"Upgrade","version":"Version","map":"Map","upload":"Upload","refresh":"Refresh","minute":"Minute","minutes":"Minutes","hour":"Hour","hours":"Hours","repeat":"Repeat every","and":"and","add":"Add","remove":"Remove","example":"Example"},"Organizations":{"organizationSettings":"Organization settings","deleteMessage":"Are you sure to delete {value} organization?","successfullyCreate":"Organization {value} created successfully","successfullyUpdate":"Organization {value} updated successfully","successfullyDelete":"Organization {value} deleted successfully","createError":"Error creating organization {value}","updateError":"Error updating organization {value}","deleteError":"Error deleting organization {value}","cantDeleteReason":"Cannot delete this organization because it has child organizations or sites.\nYou need delete all of this organization's children before deleting it.","selectOrganization":"Select organization","selectOrganizations":"Select organizations","alreadyExists":"Already exists an organization with name {name} in {org}","deleteParentOrgError":"You cannot delete an organization that has sub-organizations or sites"},"Sites":{"settings":"Site settings","deleteMessage":"Are you sure to delete {value} site?","successfullyCreate":"Site {value} created successfully","successfullyUpdate":"Site {value} updated successfully","successfullyDelete":"Site {value} deleted successfully","successfullyUpdateLocation":"Site {value} location updated successfully","createError":"Error creating site {value}","updateError":"Error updating site {value}","deleteError":"Error deleting site {value}","deleteAssignedError":"It is not possible to delete sites that have subsites, templates or devices assigned","updateLocationError":"Error updating location of site {value}","selectSites":"Select sites","errorCreateName":"Already exists a site with name {name} in {org}","deleteWithTemplate":"You cannot delete sites with a template assigned, please unbind it first"},"Subsites":{"title":"Subsites","deleteMessage":"Are you sure to delete {value} subsite?","cantDelete":"You cannot delete a subsite that has subsites","successfullyDelete":"Subsite {value} deleted successfully","deleteError":"Error deleting subsite {value}","update":"Update subsite","successfullyUpdate":"Subsite {value} updated successfully","updateError":"Error updating subsite {value}","create":"Create subsite","successfullyCreate":"Subsite {value} created successfully","createError":"Error creating subsite {value}","noSelected":"Select subsite","select":"Select subsites","selectToShow":"First, select sites to show subsites","selectedSubsites":"Selected subsites","alreadyExists":"Error creating subsite. A subsite with this name already exists. Please choose another one to proceed"},"Users":{"userRole":"Role","lastLogin":"Last login","error":"Something went wrong","noData":"No users found","notUserFound":"No user found with that ID","deleteMessage":"Are you sure to delete {value} user?","successfullyCreate":"User {value} created successfully","successfullyCreateInOrg":"User {email} created successfully in organization {org}.","successfullyUpdate":"User {value} updated successfully","successfullyDelete":"User {value} deleted successfully","createError":"Error creating user {value}","updateError":"Error updating user {value}","deleteError":"Error deleting user {value}","emailSent":"An email has been sent to {value} with a link to activate the account.","Create":{"name":"Name","email":"Email","password":"Password","create":"Create"},"viewDetails":"View details","resetPassword":"Reset password","resetEmailSent":"Email to reset password sent correctly to user {value}","errorResetEmail":"Error sending email to reset password to user {value}"},"Roles":{"galgusAdmin":"Galgus Admin","galgusOrganizationAdmin":"Galgus Organization Admin","galgusDeviceAdmin":"Galgus Device Admin","organizationAdmin":"Organization Admin","organizationOwner":"Organization Owner","organizationSupporter":"Organization Supporter","deviceManager":"Device Admin","installer":"Installer","configurer":"Organization Configurer","viewer":"Organization Viewer","admin":"Organization Admin"},"ExternalManagers":{"title":"External Managers","infoTooltip":"This action allows the organization to expand its management capacity\nby delegating responsibilities to external managers, facilitating the\nadministration and remote monitoring of specific facilities without\ncompromising the security or control of internal resources.","requestManager":"Request Manager","mailError":"Please enter a valid email to request an external manager","requestError":"Error requesting an external manager","requestSent":"Request sent correctly to {value}","errorRemove":"Error removing external manager {value}","removedSuccessfully":"External manager {value} removed correctly!","accepted":"External manager accepted correctly","errorAccepting":"Error accepting external manager","accessInfo":"You have the option to allow external manager administration for certain\ninstallations. By granting this access, an external manager will be\nable to oversee and manage specific aspects of your system setup.","accessInfoContent":"If you choose to accept, the external manager will\nhave the permissions described above.","accessRequestTitle":"External Manager Access Request","unbindConfirmation":"Are you sure to unbind?"},"OrganizationPage":{"title":"Organization"},"OrganizationsPage":{"title":"Organizations"},"LogsPage":{"title":"Audit"},"SiteSelector":{"create":"Create a site","search":"Search for site","select":"Select site"},"SitePage":{"title":"Site"},"UserProfile":{"title":"Account settings","emailAddress":"Email address","language":"Language","themeSettings":"Theme settings","darkMode":"Dark mode","menuMode":"Menu mode","static":"Static","overlay":"Overlay","fontFamily":"Font Family","scale":"Scale","update":"Update","nameUpdated":"Name updated correctly","errorUpdatingName":"Error updating name","accountSecurity":"Account Security","newPassword":"New password","confirmPassword":"Confirm password","requiredField":"This field is required","passwordMustMatch":"Passwords must match","passwordPolicy":"Password policy","mustHaveCharacters":"Must be at least 8 characters long","mustHaveUpperCase":"Must contain 1 uppercase letter","mustHaveLowerCase":"Must contain 1 lowercase letter","mustHaveOneDigit":"Must contain 1 digit","mustHaveSpecialChar":"Must contain 1 special character","updatePassword":"Update password","updatedPassword":"Password updated successfully"},"Layout":{"hi":"Hi","profile":"Profile","settings":"Account Settings","signOut":"Sign Out","exitApp":"Exit Application"},"Table":{"create":"Create","clearFilter":"Clear","confirmDeleteMessage":"Do you want to delete this record?","no":"No","yes":"Yes"},"Dialog":{"create":"Crear","update":"Update","delete":"Delete","cancel":"Cancel","no":"No","yes":"Yes","deleteHeader":"Delete confirmation"},"Dashboard":{"addDashboard":"Add Dashboard","addWidget":"Add Widget","createDashboard":"Create Dashboard","renameDashboard":"Rename Dashboard","deleteDashboardBtn":"Delete Dashboard","renameWidget":"Rename Widget","deleteDashboard":"Do you want to delete this dashboard?","deleteWidget":"Do you want to delete this widget?","name":"Name","rename":"Rename","overview":"Overview","network":"Network","clients":"Clients","onlyActive":"This tab only allows 'Active' interval"},"Widgets":{"toggleDrag":"Toggle drag","devicesStatusMap":"Devices Map","enterALocation":"Enter a location...","enterALocationOrSelect":"Enter a location or select a point in the map","goToLocation":"Fly to a place","status":"Devices Status","devices":"Devices","health":"System Health","generalHealth":"General health","devicesHealthHelp":"Number of APs by health status","connected":"Connected","disconnected":"Disconnected","systemStatus":"System Summary","systemStatusDesc":"Global Cloud Summary","devicesStatus":"Devices Status","devicesStatusDesc":"Pie chart with connected and disconnected devices","devicesHealth":"Devices Health","devicesHealthDesc":"Pie chart with devices health","mapStatus":"Devices Map","mapStatusDesc":"Map with available devices","connectedClientsByBand":"Connected clients by band","connectedClientsByBandDesc":"Pie chart showing connected clients per band","connectedClientsBySsid":"Connected clients by SSID","connectedClientsByRole":"Connected clients by Role","totalConnectedClientsByRole":"Total clients connected by role in the network","networkUsageByRole":"Network usage by role","networkUsageByClients":"Network usage by clients","networkUsageBySsid":"Network usage by SSID","totalNetworkUsageBySsid":"Total network usage by SSID","networkUsageByBand":"Network usage by band","totalNetworkUsageByBand":"Total network usage by Band","clientsConnectedToNetwork":"Clients connected to network","top10ClientsOrgs":"Top 10 organizations with the most connected clients","top10NetworkUsageOrgs":"Top 10 organizations with the most network usage","top10ClientsSites":"Top 10 sites with most connected clients","top10NetworkUsageSites":"Top 10 sites with the most network usage"},"Devices":{"status":"Status","serialNumber":"Serial Number","model":"Model","health":"Health","memory":"Memory","load":"Load","loadFull":"CPU Load","upstream":"Upstream","downstream":"Downstream","free":"Free","cached":"Cached","buffered":"Buffered","temperature":"Temp","temperatureFull":"Temperature","firmware":"Firmware","type":"Type","ip":"IP","provisioning":"Provisioning","rad":"Rad","radFull":"Current active radius sessions","gps":"GPS","connectedClients":"Connected clients","uptime":"Uptime","activityTime":"Activity Time","lastConnection":"Last Connection","LastConnectionFull":"Last time this device was connected to the controller. This can be used to estimate when a device disconnected","lastContact":"Last Contact","lastUpdate":"Last Update","connectReason":"Connect Reason","connectReasonFull":"Reason supplied by the device for the last connection","certificateExpiryDate":"Exp","certificateExpiryDateFull":"Certificate Expiry Date","noDevicesImported":"No devices imported","assignTo":"Assign To","currentAssignment":"Current assignment","statistics":"Statistics","time":"Time","rawData":"Raw data","notFound":"Device not found","errorConfiguring":"Error configuring device","configuredSuccessfully":"configured successfully","errorGettingConfiguration":"Error getting configuration","assignment":"Assignment","assignInfo":"This feature allows assigning devices to specific organizations and\nsites, making their management and control within the organizational\nstructure easier.","assignInfoSubsites":"This feature allows assigning devices to specific subsites, making their management and control within the organizational structure easier.","assignToOrgOrSite":"Assign devices to the following organization or site:","assignDevicesToSubsite":"Assign devices to the following subsite:","macsNotFound":"The following MACs have been ignored because they were not found","assignDevices":"Assign devices","assignedSuccessfully":"Devices assigned successfully","errorAssigningDevices":"Error assigning devices","noDeviceFoundInCSV":"No device found, please check the imported CSV","selectStatus":"Select status","deviceNotFound":"Attention! This device does not exist on the platform and therefore cannot be assigned.","deviceFound":"Attention! This device already exists on the platform, it cannot be registered again.","devicesFound":"Attention! This devices already exist on the platform, please remove them from the document.","orgsNotFound":"Attention! Some organizations or sites have not been found, please review the document.","import":"Import CSV","register":"Register Devices","registeredSuccessfully":"Devices registered correctly","errorRegister":"Error registering devices","helpText":"This feature allows adding new devices to the platform, making it easier to integrate and manage them within your organizational structure.","add":"Add Device","registerIn":"Register devices in the following organization or site:","assign":"Assign Devices","assignToOrg":"Assign device to organization","asignedToOrg":"Device {serialNumber} assigned correctly to organization {org}","errorAssigningToOrg":"Error assigning device {serialNumber} to organization {org}","unassignFromOrg":"Unassign device from organization","unassignedFromOrg":"Device {serialNumber} unassigned correctly from organization","errorUnassigning":"Error unassigning device {serialNumber} from organization","assignToSite":"Assign device to site","assignToSubsite":"Assign device to subsite","assignedToSite":"Device {serialNumber} assigned correctly to site {site}","assignedToSubsite":"Device {serialNumber} assigned correctly to subsite {subsite}","errorAssigningToSite":"Error assigning device {serialNumber} to site {site}","errorAssigningToSubsite":"Error assigning device {serialNumber} to subsite {subsite}","unassignFromSite":"Unassign device from site","unassignFromSiteConfirm":"Are you sure to unassign device from site?","unassignFromSubsite":"Unassign device from subsite","unassignFromSubsiteConfirm":"Are you sure to unassign device from subsite?","unassignedFromSite":"Device {serialNumber} unassigned correctly from site","unassignedFromSubsite":"Device {serialNumber} unassigned correctly from subsite","errorUnassigningFromSite":"Error unassigning device {serialNumber} from site","errorUnassigningFromSubsite":"Error unassigning device {serialNumber} from subsite","updateAlias":"Update alias","errorUpdateAlias":"Error updating alias of device {serialNumber}","errorApplyingConfiguration":"Some errors occurred while applying the configuration, click here for more details.","rttyError":"Error opening RTTY for AP","online":"Online","offline":"Offline","devicesReportTitle":"Device Report","devicesReportMsg":"We are preparing the device report. It will be available in your inbox shortly; please check your email.","devicesReportExists":"An report is currently being generated. Please wait until it is complete before requesting a new one.","upgradeFirmware":"Upgrade Firmware","offlineSelected":"Any of the selected devices is offline","firmwareUpgraded":"The firmware update for the devices has been successfully requested","firmwareUpgradedSingle":"The firmware update for the device has been successfully requested","errorUpgradeFirmware":"Error upgrading the firmware of the selected devices","errorUpgradeFirmwareSingle":"Error upgrading firmware","selectVersion":"Select version"},"Sessions":{"title":"Sessions","status":"Status","serial":"Serial Number","ack_signal":"Signal","ack_signal_avg":"Average Signal","bssid":"BSSID","channel":"Channel","channel_width":"Channel Width","connected":"Connected Time","delta_counters_rx_bytes":"ΔRx bytes","delta_counters_rx_packets":"ΔRx packets","delta_counters_tx_bytes":"ΔTx bytes","delta_counters_tx_failed":"ΔTx failed","delta_counters_tx_packets":"ΔTx packets","delta_counters_tx_retries":"ΔTx retries","inactive":"Inactive","ipaddr_v4":"IPv4 address","rssi":"RSSI","duration":"Duration","packets":"Packets","noise":"Noise","rx_bytes":"Rx bytes","rx_duration":"Rx duration","rx_packets":"Rx packets","rx_rate_bitrate":"Rx bitrate","rx_rate_chwidth":"Rx chwidth","station":"Station","stationMac":"Station MAC","tx_bytes":"Tx bytes","tx_duration":"Tx duration","tx_failed":"Tx failed","tx_packets":"Tx packets","tx_rate_bitrate":"Tx bitrate","tx_rate_chwidth":"Tx channel width","tx_rate_ht":"Tx HT","tx_rate_mcs":"Tx MCS","tx_rate_sgi":"Tx SGI","tx_retries":"Tx retries","band":"Band","channels":"Channels","frequency":"Frequency","mode":"Mode","ssid":"SSID","lastSeen":"Last seen","usage":"Usage","capabilities":"Capabilities","power":"Power","metrics":"Metrics"},"ConfigurationTemplates":{"title":"Configuration Templates","titleSing":"Configuration Template","titleAbb":"Conf. Template","configureTemplate":"Configure template","configureBindings":"Configure bindings","unbindConfirm":"Are you sure to unbind sites from template","unbindSite":"Unbind site","unbindSuccessfully":"Sites unbound successfully from template","unbindError":"Error unbinding sites from template","sitesBound":"sites or subsites are bound to this configuration template.","confUpdatedSuccessfully":"Configuration of template {name} updated correclty","errorUpdatingConf":"Error updating configuration of template","nameUpdatedSuccessfully":"The template name was updated successfully","errorUpdatingName":"An error occurred while updating the template name","helpText":"This feature allows you to efficiently apply\npredefined configuration templates to a set\nof sites, ensuring configuration consistency\nand facilitating centralized administration.","numberOfBoundSites":"# of bound sites","configureBindingsOf":"Configure bindings of {value}","targetSites":"Target sites","targetSubsites":"Target subsites","bindingsConfiguredSuccessfully":"Bindings of template {value} configured correctly","errorConfiguringBindings":"Error configuring bindings of template {value}","siteunboundSucessfully":"Site {site} unbound successfully from template {template}","errorUnbindSite":"Error unbinding site {site} from template {template.name}","configureBindingSites":"Configure bindings to sites","templates":"Templates","templateCreated":"Template created correcty","errorCreatingTemplate":"Error creating template","alreadyExists":"Error creating template. A template with this name already exists. Please choose another one to proceed","templateDeleted":"Template {value} deleted correctly","errorDeletingTemplate":"Error deleting template {value}","deleteMessage":"Are you sure to delete template {value}?","unbindConfirmation":"Are you sure to unbind site {site} from template {template}?","templateErrors":"Template form error, please check the fields","errorDeleteBound":"You cannot delete templates with any bound site","sectionError":"{context} section"},"Alarms":{"title":"Alarms","configurations":"Configurations","register":"Logs","create":"Create alarm","update":"Update alarm","delete":"Delete alarm","deleteSuccess":"Alarm deleted successfully","deleteError":"Error deleting alarm","createSuccess":"Alarm created successfully","createError":"Error creating alarm","updateSuccess":"Alarm updated successfully","updateError":"Error updating alarm","activate":"Activate","deactivate":"Deactivate","apsOffline":"Number of offline APs","interval":"Time interval","repeat":"Repeat every","status":"Active","scope":"Scope","deleteConfirm":"Are you sure to delete this alarm?","appliedTo":"Applied to","entities":"entities","filterByName":"Search by name","noResults":"No alarms created","notFound":"No alarms found","content":"{aps} or more APs have been offline for more than {time} minutes","contentSing":"{aps} or more APs have been offline for more than {time} minute","name":"Name","sent":"Sent","contentHeader":"Content","emailDestiny":"Destination Email"},"Intervals":{"Active":"Active","Today":"Today","Yesterday":"Yesterday","Last7Days":"Last 7 days"},"Floorplans":{"title":"APs map","floorplans":"Floor plans","floorplan":"Floor plan","create":"Create new floor plan","placed":"Placed","notPlaced":"Not placed","image":"Floor plan image","deleteTitle":"Delete map","deleteTitleConfirmation":"Are you sure to delete?","deleteMapSuccess":"Map deleted successfully","deleteMapError":"Error deleting map","uploadMap":"Upload map","uploadImage":"Upload image","distance":"Distance (meters)","helpLine":"Draw a line by clicking and dragging over the area from which you want to indicate the distance.","point":"top left point of the map","notAllowed":"Any parent or child already has a map assigned.\nYou must remove it before assigning a new one.","dragAps":"Drag APs","errorCreate":"Error uploading map"},"Errors":{"emailWrongFormat":"Entered value does not match email format","emailRequired":"Email is required","nameRequired":"Name is required","roleRequired":"Role is required","passwordRequired":"Password is required","required":"Field required","maxLength":"Maximum length reached","trailLeadSpaces":"Cannot have trailing or leading spaces","minLength":"The minimum length is {value} characters"},"Interval":{"quickIntervals":"Quick Intervals","custom":"Custom inteval","lastMin":"Last min","last15Min":"Last 15 min","last30Min":"Last 30 min","lastHour":"Last hour","last3Hours":"Last 3 hours","last6Hours":"Last 6 hours","last12Hours":"Last 12 hours","lastDay":"Last day","last3Days":"Last 3 days"},"Form":{"required":"Field required","invalidIpv4":"Invalid IPv4 address. Example: 192.168.0.1/12","invalidIpv6":"Invalid IPv6 address (ex.: 2001:db8:3333:4444:5555:6666:7777:8888)","invalidMac":"Invalid MAC value. Example: 00:00:5e:00:53:af","minMaxString":"Value needs to be of a length between {min} (inclusive) and {max} (inclusive)","invalidPortRange":"Invalid port value. It needs to be more than 0 and less than 65 535. If using a port range, please make sure the second port is a higher number than the first one.","invalidPortRanges":"Invalid port range combination! Please make sure both port values are the same type (single or range). If they are ranges, make sure they are both covering the same amount of ports","invalidStaticIpv4d":"Invalid address, this range reserved for multicasting (class D). The first octet should be 223 or lower","invalidStaticIpv4e":"Invalid address, this range reserved for experiments (class E). The first octet should be 223 or lower","missinInterfaceUpstream":"You need to have at least one upstream interface. At the moment, all your interfaces are downstream","wifiBandsMax":"There cannot be more than 8 SSIDs using this wifi-band","invalidProtoPasspoint":"This encryption protocol cannot be used with an access point SSID. Select a protocol that can use Radius.","invalidIeee":"For this encryption protocol, ieee80211w needs to be either 'optional' or 'required'","invalidIeeeRequired":"ieee80211w needs to be 'required' for this encryption protocol","invalidLeaseTime":"Invalid lease time value! They need to be in the digitUnit format. For example: 6d2h5m, which means 6 days, 2 hours and 5 minutes. Here are the accepted units: m, h, d. If you do not want to use a unit, omit it completely. So instead of saying 0d2h0m, use 2h","invalidProto6g":"This encryption protocol cannot be used on an SSID which uses 6G"},"Menu":{"manage":"Manage","overview":"Overview","devices":"Devices","configurationTemplates":"Configuration Templates","configurationTemplate":"Configuration Template","configuration":"Configuration","users":"Users","analysisAndMonitoring":"Analysis & Monitoring","dashboards":"Dashboards","audit":"Audit","sessions":"Sessions","global":"Global","organizations":"Organizations","sites":"Sites","subsites":"Subsites","externalManagers":"Managers Externos","apsMap":"APs Map","alarms":"Alarms"},"GlobalErrors":{"defaultError":"Something went wrong","conflict":"The request could not be processed due to a conflict with the current state of the resource. Please review and try again","notFound":"404","notFoundMessage":"The page you are looking for was not found."},"Footer":{"currentVersion":"Current version","unknown":"Unknown"},"Clipboard":{"success":"Text copied to clipboard","error":"Error copying text to clipboard"},"Developers":{"title":"For Developers","apiDoc":"API Rest"},"UserSession":{"keepSessionHeader":"Do you want to keep the session active?","closingSoon":"The terminal will be closed shortly","keepWorking":"Keep the terminal open","keepSession":"Keep session","exit":"Exit","closeSession":"Close session","closedByInactivity":"For your security, you will be logged out due to inactivity."},"TemplatesSchema":{"fullConfig":"Full JSON Config","configUpdatedSuccess":"Configuration updated correctly","radio":"Radio","services":"Services","interface":"Interface","metrics":"Metrics","third-party":"Third Party","unit":"Unit","description":"OpenWrt uCentral schema","properties":{"strict":{"description":"The device will reject any configuration that causes warnings if strict mode is enabled."},"uuid":{"description":"The unique ID of the configuration. This is the unix timestamp of when the config was created."},"globals":{"description":"A device has certain global properties that are used to derive parts of the final configuration that gets applied.","properties":{"ipv4-network":{"description":"Define the IPv4 range that is delegatable to the downstream interfaces This is described as a CIDR block. (192.168.0.0/16, 172.16.128/17)"},"ipv6-network":{"description":"Define the IPv6 range that is delegatable to the downstream interfaces This is described as a CIDR block. (fdca:1234:4567::/48)"},"wireless-multimedia":{"anyOf":{"0":{"description":"Define the default WMM behaviour of all SSIDs on the device. Each access category can be assigned a default class selector that gets used for packet matching."},"1":{"properties":{"profile":{"description":"Define a default profile that shall be used for the WMM behaviour of all SSIDs on the device."}}}}}}},"definitions":{"description":"This section is used to define templates that can be referenced by a configuration. This avoids duplication of data. A RADIUS server can be defined here for example and then referenced by several SSIDs.","properties":{"wireless-encryption":{"description":"A dictionary of wireless encryption templates which can be referenced by the corresponding property name.","patternProperties":{"":{"+":{"description":"A device has certain properties that describe its identity and location. These properties are described inside this object.","properties":{"proto":{"description":"The wireless encryption protocol that shall be used for this BSS"},"key":{"description":"The Pre Shared Key (PSK) that is used for encryption on the BSS when using any of the WPA-PSK modes."},"ieee80211w":{"description":"Enable 802.11w Management Frame Protection (MFP) for this BSS."},"key-caching":{"description":"PMKSA created through EAP authentication and RSN preauthentication can be cached."}}}}}}}},"ethernet":{"items":{"description":"This section defines the linkk speed and duplex mode of the physical copper/fiber ports of the device.","properties":{"select-ports":{"description":"The list of physical network devices that shall be configured. The names are logical ones and wildcardable."},"speed":{"description":"The link speed that shall be forced."},"enabled":{"description":"This allows forcing the port to down state by default."},"services":{"description":"The services that shall be offered on this L2 interface."}}}},"switch":{"description":"This section defines the switch fabric specific features of a physical switch.","properties":{"port-mirror":{"description":"Enable mirror of traffic from multiple minotor ports to a single analysis port.","properties":{"monitor-ports":{"description":"The list of ports that we want to mirror."},"analysis-port":{"description":"The port that mirror'ed packets should be sent to."}}},"loop-detection":{"description":"Enable loop detection on the L2 switches/bridge.","properties":{"protocol":{"description":"Define which protocol shall be used for loop detection."},"roles":{"description":"Define on which logical switches/bridges we want to provide loop-detection."}}}}},"radios":{"items":{"description":"Describe a physical radio on the AP. Each radio can be the parent of multiple VAPs. They all share the same physical properties.","properties":{"band":{"description":"Specifies the wireless band to configure the radio for. Available radio device phys on the target system are matched by the wireless band given here. If multiple radio phys support the same band, the settings specified here will be applied to all of them."},"bandwidth":{"description":"Specifies a narrow channel width in MHz, possible values are 5, 10, 20."},"channel":{"description":"Specifies the wireless channel to use. A value of 'auto' starts the ACS algorithm."},"valid-channels":{"description":"Pass a list of valid-channels that can be used during ACS."},"acs-exclude-6ghz-non-psc":{"description":"Exclude non-psc when doing auto channel selection on 6GHz"},"country":{"description":"Specifies the country code, affects the available channels and transmission powers."},"allow-dfs":{"description":"This property defines whether a radio may use DFS channels."},"channel-mode":{"description":"Define the ideal channel mode that the radio shall use. This can be 802.11n, 802.11ac or 802.11ax. This is just a hint for the AP. If the requested value is not supported then the AP will use the highest common denominator."},"channel-width":{"description":"The channel width that the radio shall use. This is just a hint for the AP. If the requested value is not supported then the AP will use the highest common denominator."},"require-mode":{"description":"Stations that do no fulfill these HT modes will be rejected."},"mimo":{"description":"This option allows configuring the antenna pairs that shall be used. This is just a hint for the AP. If the requested value is not supported then the AP will use the highest common denominator."},"tx-power":{"description":"This option specifies the transmission power in dBm"},"legacy-rates":{"description":"Allow legacy 802.11b data rates."},"beacon-interval":{"description":"Beacon interval in kus (1.024 ms)."},"maximum-clients":{"description":"Set the maximum number of clients that may connect to this radio. This value is accumulative for all attached VAP interfaces."},"maximum-clients-ignore-probe":{"description":"Ignore probe requests if maximum-clients was reached."},"rates":{"description":"The rate configuration of this BSS.","properties":{"beacon":{"description":"The beacon rate that shall be used by the BSS. Values are in Mbps."},"multicast":{"description":"The multicast rate that shall be used by the BSS. Values are in Mbps."}}},"he-settings":{"description":"This section describes the HE specific configuration options of the BSS.","properties":{"multiple-bssid":{"description":"Enabling this option will make the PHY broadcast its BSSs using the multiple BSSID beacon IE."},"ema":{"description":"Enableing this option will make the PHY broadcast its multiple BSSID beacons using EMA."},"bss-color":{"description":"This enables BSS Coloring on the PHY. setting it to 0 disables the feature 1-63 sets the color and 64 will make hostapd pick a random color."}}},"he-6ghz-settings":{"properties":{"power-type":{"description":"This config is to set the 6 GHz Access Point type"},"controller":{"description":"The URL of the AFC controller that the AP shall connect to."},"ca-certificate":{"description":"The CA of the server. This enables mTLS."},"serial-number":{"description":"The serial number that the AP shall send to the AFC controller."},"request-id":{"description":"The request-id that the AP shall send to the AFC controller."},"certificate-ids":{"description":"The certificate IDs that the AP shall send to the AFC controller."},"minimum-power":{"description":"The minimum power that the AP shall request from to the AFC controller."},"frequency-ranges":{"description":"The list of frequency ranges that the AP shall request from to the AFC controller."},"operating-classes":{"description":"The list of frequency ranges that the AP shall request from to the AFC controller."}}},"hostapd-iface-raw":{"description":"This array allows passing raw hostapd.conf lines."}}}},"interfaces":{"items":{"description":"This section describes the logical network interfaces of the device. Interfaces as their primary have a role that is upstream, downstream, guest, ....","properties":{"name":{"description":"This is a free text field, stating the administrative name of the interface. It may contain spaces and special characters."},"role":{"description":"The role defines if the interface is upstream or downstream facing."},"isolate-hosts":{"description":"This option makes sure that any traffic leaving this interface is isolated and all local IP ranges are blocked. It essentially enforces 'guest network' firewall settings."},"metric":{"description":"The routing metric of this logical interface. Lower values have higher priority."},"mtu":{"description":"The MTU of this logical interface."},"services":{"description":"The services that shall be offered on this logical interface. These are just strings such as 'ssh', 'lldp', 'mdns'"},"vlan-awareness":{"description":"Setup additional VLANs inside the bridge"},"ieee8021x-ports":{"description":"The list of physical network devices that shall serve .1x for this interface."},"vlan":{"description":"This section describes the vlan behaviour of a logical network interface.","properties":{"id":{"description":"This is the pvid of the vlan that shall be assigned to the interface. The individual physical network devices contained within the interface need to be told explicitly if egress traffic shall be tagged."}}},"bridge":{"description":"This section describes the bridge behaviour of a logical network interface.","properties":{"mtu":{"description":"The MTU that shall be used by the network interface."},"tx-queue-len":{"description":"The Transmit Queue Length is a TCP/IP stack network interface value that sets the number of packets allowed per kernel transmit queue of a network interface device."},"isolate-ports":{"description":"Isolates the bridge ports from each other."}}},"ethernet":{"items":{"description":"This section defines the physical copper/fiber ports that are members of the interface. Network devices are referenced by their logical names.","properties":{"select-ports":{"description":"The list of physical network devices that shall be added to the interface. The names are logical ones and wildcardable. 'WAN' will use whatever the hardwares default upstream facing port is. 'LANx' will use the 'x'th' downstream facing ethernet port. LAN* will use all downstream ports."},"multicast":{"description":"Enable multicast support."},"learning":{"description":"Controls whether a given port will learn MAC addresses from received traffic or not. If learning if off, the bridge will end up flooding any traffic for which it has no FDB entry. By default this flag is on."},"isolate":{"description":"Only allow communication with non-isolated bridge ports when enabled."},"macaddr":{"description":"Enforce a specific MAC to these ports."},"reverse-path-filter":{"description":"Reverse Path filtering is a method used by the Linux Kernel to help prevent attacks used by Spoofing IP Addresses."},"vlan-tag":{"description":"Shall the port have a vlan tag."}}}},"ipv4":{"description":"This section describes the IPv4 properties of a logical interface.","properties":{"addressing":{"description":"This option defines the method by which the IPv4 address of the interface is chosen."},"subnet":{"description":"This option defines the static IPv4 of the logical interface in CIDR notation. auto/24 can be used, causing the configuration layer to automatically use and address range from globals.ipv4-network."},"gateway":{"description":"This option defines the static IPv4 gateway of the logical interface."},"send-hostname":{"description":"include the devices hostname inside DHCP requests"},"use-dns":{"description":"Define which DNS servers shall be used. This can either be a list of static IPv4 addresse or dhcp (use the server provided by the DHCP lease)"},"disallow-upstream-subnet":{"description":"This option only applies to 'downstream' interfaces. The downstream interface will prevent traffic going out to the listed CIDR4s. This can be used to prevent a guest / captive interface being able to communicate with RFC1918 ranges."},"dhcp":{"description":"This section describes the DHCP server configuration","properties":{"lease-first":{"description":"The last octet of the first IPv4 address in this DHCP pool."},"lease-count":{"description":"The number of IPv4 addresses inside the DHCP pool."},"lease-time":{"description":"How long the lease is valid before a RENEW must be issued."},"use-dns":{"description":"The DNS server sent to clients as DHCP option 6."}}},"dhcp-leases":{"items":{"description":"This section describes the static DHCP leases of this logical interface.","properties":{"macaddr":{"description":"The MAC address of the host that this lease shall be used for."},"static-lease-offset":{"description":"The offset of the IP that shall be used in relation to the first IP in the available range."},"lease-time":{"description":"How long the lease is valid before a RENEW muss ne issued."},"publish-hostname":{"description":"Shall the hosts hostname be made available locally via DNS."}}}},"port-forward":{"items":{"description":"This section describes an IPv4 port forwarding.","properties":{"protocol":{"description":"The layer 3 protocol to match."},"external-port":{"description":"The external port(s) to forward."},"internal-address":{"description":"The internal IP to forward to. The address will be masked and concatenated with the effective interface subnet."},"internal-port":{"description":"The internal port to forward to. Defaults to the external port if omitted."}}}}}},"ipv6":{"description":"This section describes the IPv6 properties of a logical interface.","properties":{"addressing":{"description":"This option defines the method by which the IPv6 subnet of the interface is acquired. In static addressing mode, the specified subnet and gateway, if any, are configured on the interface in a fixed manner. Also - if a prefix size hint is specified - a prefix of the given size is allocated from each upstream received prefix delegation pool and assigned to the interface. In dynamic addressing mode, a DHCPv6 client will be launched to obtain IPv6 prefixes for the interface itself and for downstream delegation. Note that dynamic addressing usually only ever makes sense on upstream interfaces."},"subnet":{"description":"This option defines a static IPv6 prefix in CIDR notation to set on the logical interface. A special notation 'auto/64' can be used, causing the configuration agent to automatically allocate a suitable prefix from the IPv6 address pool specified in globals.ipv6-network. This property only applies to static addressing mode. Note that this is usually not needed due to DHCPv6-PD assisted prefix assignment."},"gateway":{"description":"This option defines the static IPv6 gateway of the logical interface. It only applies to static addressing mode. Note that this is usually not needed due to DHCPv6-PD assisted prefix assignment."},"prefix-size":{"description":"For dynamic addressing interfaces, this property specifies the prefix size to request from an upstream DHCPv6 server through prefix delegation. For static addressing interfaces, it specifies the size of the sub-prefix to allocate from the upstream-received delegation prefixes for assignment to the logical interface."},"dhcpv6":{"description":"This section describes the DHCPv6 server configuration","properties":{"mode":{"description":"Specifies the DHCPv6 server operation mode. When set to 'stateless', the system will announce router advertisements only, without offering stateful DHCPv6 service. When set to 'stateful', emitted router advertisements will instruct clients to obtain a DHCPv6 lease. When set to 'hybrid', clients can freely chose whether to self-assign a random address through SLAAC, whether to request an address via DHCPv6, or both. For maximum compatibility with different clients, it is recommended to use the hybrid mode. The special mode 'relay' will instruct the unit to act as DHCPv6 relay between this interface and any of the IPv6 interfaces in 'upstream' mode."},"announce-dns":{"description":"Overrides the DNS server to announce in DHCPv6 and RA messages. By default, the device will announce its own local interface address as DNS server, essentially acting as proxy for downstream clients. By specifying a non-empty list of IPv6 addresses here, this default behaviour can be overridden."},"filter-prefix":{"description":"Selects a specific downstream prefix or a number of downstream prefix ranges to announce in DHCPv6 and RA messages. By default, all prefixes configured on a given downstream interface are advertised. By specifying an IPv6 prefix in CIDR notation here, only prefixes covered by this CIDR are selected."}}},"port-forward":{"items":{"description":"This section describes an IPv6 port forwarding.","properties":{"protocol":{"description":"The layer 3 protocol to match."},"external-port":{"description":"The external port(s) to forward."},"internal-address":{"description":"The internal IP to forward to. The address will be masked and concatenated with the effective interface subnet."},"internal-port":{"description":"The internal port to forward to. Defaults to the external port if omitted."}}}},"traffic-allow":{"items":{"description":"This section describes an IPv6 traffic accept rule.","properties":{"protocol":{"description":"The layer 3 protocol to match."},"source-address":{"description":"The source IP to allow traffic from."},"source-ports":{"description":"The source port(s) to accept."},"destination-address":{"description":"The destination IP to allow traffic to. The address will be masked and concatenated with the effective interface subnet."},"destination-ports":{"description":"The destination ports to accept."}}}}}},"broad-band":{"oneOf":{"0":{"description":"This Object defines the properties of a broad-band uplink.","properties":{"protocol":{"description":"This uplink uses WWAN/LTE"},"modem-type":{"description":"The local protocol that the modem supports."},"access-point-name":{"description":"Commonly known as APN. The name of a gateway between a mobile network and the internet."},"authentication-type":{"description":"The authentication mode that shall be used."},"pin-code":{"description":"The PIN that shall be used to unlock the SIM card."},"user-name":{"description":"This option is only required if an authentication-type is defined."},"password":{"description":"This option is only required if an authentication-type is defined."},"packet-data-protocol":{"description":"Define what kind of IP stack shall be used."}}},"1":{"description":"This Object defines the properties of a PPPoE uplink.","properties":{"protocol":{"description":"This uplink uses PPPoE"},"user-name":{"description":"The username used to authenticate."},"password":{"description":"The password used to authenticate."}}}}},"ssids":{"items":{"description":"A device has certain properties that describe its identity and location. These properties are described inside this object.","properties":{"purpose":{"description":"An SSID can have a special purpose such as the hidden on-boarding BSS. All purposes other than 'user-defined' are static pre-defined configurations."},"name":{"description":"The broadcasted SSID of the wireless network and for for managed mode the SSID of the network you’re connecting to"},"wifi-bands":{"description":"The band that the SSID should be broadcasted on. The configuration layer will use the first matching band."},"bss-mode":{"description":"Selects the operation mode of the wireless network interface controller."},"bssid":{"description":"Override the BSSID of the network, only applicable in adhoc or sta mode."},"hidden-ssid":{"description":"Disables the broadcasting of beacon frames if set to 1 and,in doing so, hides the ESSID."},"isolate-clients":{"description":"Isolates wireless clients from each other on this BSS."},"strict-forwarding":{"description":"Isolate the BSS from all other members on the bridge apart from the first wired port."},"power-save":{"description":"Unscheduled Automatic Power Save Delivery."},"rts-threshold":{"description":"Set the RTS/CTS threshold of the BSS."},"broadcast-time":{"description":"This option will make the unit braodcast the time inside its beacons."},"unicast-conversion":{"description":"Convert multicast traffic to unicast on this BSS."},"services":{"description":"The services that shall be offered on this logical interface. These are just strings such as 'wifi-steering'"},"dtim-period":{"description":"Set the DTIM (delivery traffic information message) period. There will be one DTIM per this many beacon frames. This may be set between 1 and 255. This option only has an effect on ap wifi-ifaces."},"maximum-clients":{"description":"Set the maximum number of clients that may connect to this VAP."},"proxy-arp":{"description":"Proxy ARP is the technique in which the host router, answers ARP requests intended for another machine."},"fils-discovery-interval":{"description":"The maximum interval for FILS discovery announcement frames. This is a condensed beacon used in 6GHz channels for passive BSS discovery."},"encryption":{"description":"A device has certain properties that describe its identity and location. These properties are described inside this object.","properties":{"proto":{"description":"The wireless encryption protocol that shall be used for this BSS"},"key":{"description":"The Pre Shared Key (PSK) that is used for encryption on the BSS when using any of the WPA-PSK modes."},"ieee80211w":{"description":"Enable 802.11w Management Frame Protection (MFP) for this BSS."},"key-caching":{"description":"PMKSA created through EAP authentication and RSN preauthentication can be cached."}}},"multi-psk":{"anyOf":{"0":{"items":{"description":"A SSID can have multiple PSK/VID mappings. Each one of them can be bound to a specific MAC or be a wildcard.","properties":{"key":{"description":"The Pre Shared Key (PSK) that is used for encryption on the BSS when using any of the WPA-PSK modes."}}}}}},"rrm":{"description":"Enable 802.11k Radio Resource Management (RRM) for this BSS.","properties":{"neighbor-reporting":{"description":"Enable neighbor report via radio measurements (802.11k)."},"reduced-neighbor-reporting":{"description":"Enable reduced neighbor reports."},"lci":{"description":"The content of a LCI measurement subelement"},"civic-location":{"description":"The content of a location civic measurement subelement"},"ftm-responder":{"description":"Publish fine timing measurement (FTM) responder functionality on this BSS."},"stationary-ap":{"description":"Stationary AP config indicates that the AP doesn't move."}}},"rate-limit":{"description":"The UE rate-limiting configuration of this BSS.","properties":{"ingress-rate":{"description":"The ingress rate to which hosts will be shaped. Values are in Mbps"},"egress-rate":{"description":"The egress rate to which hosts will be shaped. Values are in Mbps"}}},"roaming":{"anyOf":{"0":{"description":"Enable 802.11r Fast Roaming for this BSS.","properties":{"message-exchange":{"description":"Shall the pre authenticated message exchange happen over the air or distribution system."},"generate-psk":{"description":"Whether to generate FT response locally for PSK networks. This avoids use of PMK-R1 push/pull from other APs with FT-PSK networks."},"domain-identifier":{"description":"Mobility Domain identifier (dot11FTMobilityDomainID, MDID)."},"pmk-r0-key-holder":{"description":"The pairwise master key R0. This is unique to the mobility domain and is required for fast roaming over the air. If the field is left empty a deterministic key is generated."},"pmk-r1-key-holder":{"description":"The pairwise master key R1. This is unique to the mobility domain and is required for fast roaming over the air. If the field is left empty a deterministic key is generated."},"key-aes-256":{"description":"The AES-256 shared amongst a mobility domain. The R0/1K key pairs will be autogenerated based on this value."}}},"1":{"description":"Enable 802.11r Fast Roaming for this BSS. This will enable 'auto' mode which will work for most scenarios."}}},"radius":{"description":"When using EAP encryption we need to provide the required information allowing us to connect to the AAA servers.","properties":{"nas-identifier":{"description":"NAS-Identifier string for RADIUS messages. When used, this should be unique to the NAS within the scope of the RADIUS server."},"chargeable-user-id":{"description":"This will enable support for Chargeable-User-Identity (RFC 4372)."},"local":{"description":"Describe the properties of the local Radius server inside hostapd.","properties":{"server-identity":{"description":"EAP methods that provide mechanism for authenticated server identity delivery use this value."},"users":{"description":"Specifies a collection of local EAP user/psk/vid triplets.","items":{"description":"Describes a local EAP user/psk/vid triplet."}}}},"dynamic-authorization":{"description":"Dynamic Authorization Extensions (DAE) is an extension to Radius.","properties":{"host":{"description":"The IP of the DAE client."},"port":{"description":"The network port that the DAE client can connet on."},"secret":{"description":"The shared DAE authentication secret."}}},"authentication":{"allOf":{"0":{"description":"Describe the properties of a Radius server.","properties":{"host":{"description":"The URI of our Radius server."},"port":{"description":"The network port of our Radius server."},"secret":{"description":"The shared Radius authentication secret."},"secondary":{"description":"Definition of the secondary/failsafe radius server.","properties":{"host":{"description":"The URI of our Radius server."},"port":{"description":"The network port of our Radius server."},"secret":{"description":"The shared Radius authentication secret."}}},"request-attribute":{"description":"The additional Access-Request attributes that gets sent to the server.","items":{"anyOf":{"0":{"properties":{"vendor-id":{"description":"The ID of the vendor specific RADIUS attribute"},"vendor-attributes":{"items":{"description":"The numeric RADIUS attribute value","properties":{"id":{"description":"The ID of the vendor specific RADIUS attribute"},"value":{"description":"The vendor specific RADIUS attribute value. This needs to be a hexadecimal string."}}}}}},"1":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"value":{"description":"The numeric RADIUS attribute value"}}},"2":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"value":{"description":"The RADIUS attribute value string"}}},"3":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"hex-value":{"description":"The RADIUS attribute value string"}}}}}}}},"1":{"properties":{"mac-filter":{"description":"Should the radius server be used for MAC address ACL."}}}}},"accounting":{"allOf":{"0":{"description":"Describe the properties of a Radius server.","properties":{"host":{"description":"The URI of our Radius server."},"port":{"description":"The network port of our Radius server."},"secret":{"description":"The shared Radius authentication secret."},"secondary":{"description":"Definition of the secondary/failsafe radius server.","properties":{"host":{"description":"The URI of our Radius server."},"port":{"description":"The network port of our Radius server."},"secret":{"description":"The shared Radius authentication secret."}}},"request-attribute":{"description":"The additional Access-Request attributes that gets sent to the server.","items":{"anyOf":{"0":{"properties":{"vendor-id":{"description":"The ID of the vendor specific RADIUS attribute"},"vendor-attributes":{"items":{"description":"The numeric RADIUS attribute value","properties":{"id":{"description":"The ID of the vendor specific RADIUS attribute"},"value":{"description":"The vendor specific RADIUS attribute value. This needs to be a hexadecimal string."}}}}}},"1":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"value":{"description":"The numeric RADIUS attribute value"}}},"2":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"value":{"description":"The RADIUS attribute value string"}}},"3":{"properties":{"id":{"description":"The ID of the RADIUS attribute"},"hex-value":{"description":"The RADIUS attribute value string"}}}}}}}},"1":{"properties":{"interval":{"description":"The interim accounting update interval. This value is defined in seconds."}}}}},"health":{"description":"The credentials used when health check probes this radius server.","properties":{"username":{"description":"The username that gets used when doing a healthcheck on this radius server."},"password":{"description":"The password that gets used when doing a healthcheck on this radius server."}}}}},"certificates":{"description":"When running a local EAP server or using STA/MESH to connect to another BSS a set of certificates is required.","properties":{"use-local-certificates":{"description":"The device will use its local certificate bundle for the TLS setup and ignores all other certificate options in this section."},"ca-certificate":{"description":"The local servers CA bundle."},"certificate":{"description":"The local servers certificate."},"private-key":{"description":"The local servers private key/"},"private-key-password":{"description":"The password required to read the private key."}}},"pass-point":{"description":"Enable Hotspot 2.0 support.","properties":{"venue-name":{"description":"This parameter can be used to configure one or more Venue Name Duples for Venue Name ANQP information."},"venue-group":{"description":"The available values are defined in 802.11u."},"venue-type":{"description":"The available values are defined in IEEE Std 802.11u-2011, 7.3.1.34"},"venue-url":{"description":"This parameter can be used to configure one or more Venue URL Duples to provide additional information corresponding to Venue Name information."},"auth-type":{"description":"This parameter indicates what type of network authentication is used in the network.","properties":{"type":{"description":"Specifies the specific network authentication type in use."},"uri":{"description":"Specifies the redirect URL applicable to the indicated authentication type."}}},"domain-name":{"description":"The IEEE 802.11u Domain Name."},"nai-realm":{"description":"NAI Realm information"},"osen":{"description":"OSU Server-Only Authenticated L2 Encryption Network;"},"anqp-domain":{"description":"ANQP Domain ID, An identifier for a set of APs in an ESS that share the same common ANQP information."},"anqp-3gpp-cell-net":{"description":"The ANQP 3GPP Cellular Network information."},"friendly-name":{"description":"This parameter can be used to configure one or more Operator Friendly Name Duples."},"access-network-type":{"description":"Indicate the type of network. This is part of the interworking IE."},"internet":{"description":"Whether the network provides connectivity to the Internet"},"asra":{"description":"Additional Step Required for Access."},"esr":{"description":"Emergency services reachable."},"uesa":{"description":"Unauthenticated emergency service accessible."},"hessid":{"description":"Homogeneous ESS identifier"},"roaming-consortium":{"description":"Roaming Consortium OIs can be configured here. Each OI is between 3 and 15 octets and is configured as a hexstring."},"disable-dgaf":{"description":"Disable Downstream Group-Addressed Forwarding. This can be used to configure a network where no group-addressed frames are allowed."},"ipaddr-type-available":{"description":"IP Address Type Availability."},"connection-capability":{"description":"This can be used to advertise what type of IP traffic can be sent through the hotspot."},"icons":{"description":"The operator icons.","items":{"properties":{"width":{"description":"The width of the operator icon in pixel"},"height":{"description":"The height of the operator icon in pixel"},"type":{"description":"The mimetype of the operator icon"},"icon":{"description":"The base64 encoded image"},"language":{"description":"ISO 639-2 language code of the icon"}}}},"wan-metrics":{"description":"A description of the wan metric offered by this device.","properties":{"info":{"description":"The state of the devices uplink"},"downlink":{"description":"Estimate of WAN backhaul link current downlink speed in kbps."},"uplink":{"description":"Estimate of WAN backhaul link current uplink speed in kbps."}}}}},"quality-thresholds":{"description":"The thresholds that need to be meet for a clien association to be allowed.","properties":{"probe-request-rssi":{"description":"Probe requests will be ignored if the rssi is below this threshold."},"association-request-rssi":{"description":"Association requests will be denied if the rssi is below this threshold."},"client-kick-rssi":{"description":"Clients will get kicked if their SNR drops below this value."},"client-kick-ban-time":{"description":"The duration that a client is banned from re-joining after it was kicked."}}},"access-control-list":{"description":"The MAC ACL that defines which clients are allowed or denied to associations.","properties":{"mode":{"description":"Defines if this is an allow or deny list."},"mac-address":{"description":"Association requests will be denied if the rssi is below this threshold."}}},"captive":{"allOf":{"0":{"oneOf":{"0":{"description":"This section can be used to setup a captive portal on the AP with a click-to-continue splash page.","properties":{"auth-mode":{"description":"This field must be set to 'click-to-continue'"}}},"1":{"description":"This section can be used to setup a captive portal on the AP with a click-to-continue splash page.","properties":{"auth-mode":{"description":"This field must be set to 'radius'"},"auth-server":{"description":"The URI of our Radius Authentication server."},"auth-port":{"description":"The network port of our Radius Authentication server."},"auth-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-server":{"description":"The URI of our Radius Authentication server."},"acct-port":{"description":"The network port of our Radius Authentication server."},"acct-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-interval":{"description":"The timeout used for interim messages."}}},"2":{"description":"This section can be used to setup a captive portal on the AP with a credentials splash page.","properties":{"auth-mode":{"description":"This field must be set to 'credentials'"},"credentials":{"description":"The list of local username/password pairs that can be used to login."}}},"3":{"description":"This section can be used to setup a captive portal on the AP with a remote UAM server.","properties":{"auth-mode":{"description":"This field must be set to 'uam'"},"uam-port":{"description":"The local UAM port."},"uam-secret":{"description":"The pre-shared UAM secret."},"uam-server":{"description":"The fqdn of the UAM server."},"nasid":{"description":"The NASID that gets sent to the UAM server."},"nasmac":{"description":"The NAS MAC that gets send to the UAM server. The devices serial is used if this value is not provided."},"auth-server":{"description":"The URI of our Radius Authentication server."},"auth-port":{"description":"The network port of our Radius Authentication server."},"auth-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-server":{"description":"The URI of our Radius Authentication server."},"acct-port":{"description":"The network port of our Radius Authentication server."},"acct-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-interval":{"description":"The timeout used for interim messages."},"ssid":{"description":"The name of the SSID that shall be sent as part of the UAM redirect."},"mac-format":{"description":"Defines the format used to send the MAC address inside AAA frames."},"final-redirect-url":{"description":"Define the behaviour off the final redirect. Default will honour 'userurl' and fallback to 'local'. Alternatively it is possible to force a redirect to the 'UAM' or 'local' URL."},"mac-auth":{"description":"Try to authenticate new clients using macauth."},"radius-gw-proxy":{"description":"Tunnel all radius traffic via the radius-gw-proxy."}}}}},"1":{"properties":{"walled-garden-fqdn":{"description":"The list of FQDNs that a non-authenticated client is allowed to connect to."},"walled-garden-ipaddr":{"description":"The list of IP addresses that a non-authenticated client is allowed to connect to."},"web-root":{"description":"A base64 encoded TAR file with the custom web-root."},"web-root-url":{"description":"A URL where the webroot should be downloaded from."},"web-root-checksum":{"description":"The SHA256 of the file located at web-root-url."},"idle-timeout":{"description":"How long may a client be idle before getting removed."},"session-timeout":{"description":"How long may a client be idle before getting removed."}}}}},"vlan-awareness":{"description":"Setup additional VLANs inside the bridge"},"hostapd-bss-raw":{"description":"This array allows passing raw hostapd.conf lines."}}}},"tunnel":{"oneOf":{"0":{"description":"This Object defines the properties of a mesh interface overlay.","properties":{"proto":{"description":"This field must be set to mesh."}}},"1":{"description":"This Object defines the properties of a vxlan tunnel.","properties":{"proto":{"description":"This field must be set to vxlan."},"peer-address":{"description":"This is the IP address of the remote host, that the VXLAN tunnel shall be established with."},"peer-port":{"description":"The network port that shall be used to establish the VXLAN tunnel."}}},"2":{"description":"This Object defines the properties of a l2tp tunnel.","properties":{"proto":{"description":"This field must be set to vxlan."},"server":{"description":"This is the IP address of the remote host, that the L2TP tunnel shall be established with."},"user-name":{"description":"The username used to authenticate."},"password":{"description":"The password used to authenticate."}}},"3":{"description":"This Object defines the properties of a GRE tunnel.","properties":{"proto":{"description":"This field must be set to gre."},"peer-address":{"description":"This is the IP address of the remote host, that the GRE tunnel shall be established with."},"dhcp-healthcheck":{"description":"Healthcheck will probe if the remote peer replies to DHCP discovery without sending an ACK."},"dont-fragment":{"description":"Set “Don't Fragment” flag on encapsulated packets."}}},"4":{"description":"This Object defines the properties of a GREv6 tunnel.","properties":{"proto":{"description":"This field must be set to gre6."},"peer-address":{"description":"This is the IPv6 address of the remote host, that the GRE tunnel shall be established with."},"dhcp-healthcheck":{"description":"Healthcheck will probe if the remote peer replies to DHCP discovery without sending an ACK."}}}}}}}},"services":{"description":"This section describes all of the services that may be present on the AP. Each service is then referenced via its name inside an interface, ssid, ...","properties":{"lldp":{"properties":{"describe":{"description":"The LLDP description field. If set to 'auto' it will be derived from unit.name."},"location":{"description":"The LLDP location field. If set to 'auto' it will be derived from unit.location."}}},"ssh":{"description":"This section can be used to setup a SSH server on the AP.","properties":{"port":{"description":"This option defines which port the SSH server shall be available on."},"authorized-keys":{"description":"This allows the upload of public ssh keys. Keys need to be seperated by a newline."},"password-authentication":{"description":"This option defines if password authentication shall be enabled. If set to false, only ssh key based authentication is possible."}}},"ntp":{"description":"This section can be used to setup the upstream NTP servers.","properties":{"servers":{"description":"This is an array of URL/IP of the upstream NTP servers that the unit shall use to acquire its current time."}}},"mdns":{"description":"This section can be used to configure the MDNS server.","properties":{"enable":{"description":"Enable this option if you would like to enable the MDNS server on the unit."}}},"rtty":{"description":"This section can be used to setup a persistent connection to a rTTY server.","properties":{"host":{"description":"The server that the device shall connect to."},"port":{"description":"This option defines the port that device shall connect to."},"token":{"description":"The security token that shall be used to authenticate with the server."},"mutual-tls":{"description":"Shall the connection enforce mTLS"}}},"log":{"description":"This section can be used to configure remote syslog support.","properties":{"host":{"description":"IP address of a syslog server to which the log messages should be sent in addition to the local destination."},"port":{"description":"Port number of the remote syslog server specified with log_ip."},"proto":{"description":"Sets the protocol to use for the connection, either tcp or udp."},"size":{"description":"Size of the file based log buffer in KiB. This value is used as the fallback value for log_buffer_size if the latter is not specified."},"priority":{"description":"Filter messages by their log priority. the value maps directly to the 0-7 range used by syslog."}}},"http":{"description":"Enable the webserver with the on-boarding webui","properties":{"http-port":{"description":"The port that the HTTP server should run on."}}},"igmp":{"description":"This section allows enabling the IGMP/Multicast proxy","properties":{"enable":{"description":"This option defines if the IGMP/Multicast proxy shall be enabled on the device."}}},"ieee8021x":{"description":"This section allows enabling wired ieee802.1X","properties":{"mode":{"description":"This field must be set to 'radius or user'"},"select-ports":{"description":"Specifies a list of ports that we want to filter."},"users":{"description":"Specifies a collection of local EAP user/psk/vid triplets.","items":{"description":"Describes a local EAP user/psk/vid triplet."}},"radius":{"description":"Specifies the information about radius account authentication and accounting","properties":{"nas-identifier":{"description":"NAS-Identifier string for RADIUS messages. When used, this should be unique to the NAS within the scope of the RADIUS server."},"auth-server-addr":{"description":"The URI of our Radius server."},"auth-server-port":{"description":"The network port of our Radius server."},"auth-server-secret":{"description":"The shared Radius authentication secret."},"acct-server-addr":{"description":"The URI of our Radius server."},"acct-server-port":{"description":"The network port of our Radius server."},"acct-server-secret":{"description":"The shared Radius accounting secret."},"coa-server-addr":{"description":"The URI of our Radius server."},"coa-server-port":{"description":"The network port of our Radius server."},"coa-server-secret":{"description":"The shared Radius accounting secret."},"mac-address-bypass":{"description":"Trigger mac-auth when a new ARP is learned."}}}}},"radius-proxy":{"description":"This section can be used to setup a radius security proxy instance (radsecproxy).","properties":{"proxy-secret":{"description":"The radius secret used to communicate with the proxy."},"realms":{"description":"The various realms that we can proxy to.","items":{"anyOf":{"0":{"properties":{"protocol":{"description":"Defines whether the real should use radsec or normal radius."},"realm":{"description":"The realm that that this server shall be used for."},"auto-discover":{"description":"Auto discover radsec server address via realm DNS NAPTR record."},"host":{"description":"The remote proxy server that the device shall connect to."},"port":{"description":"The remote proxy port that the device shall connect to."},"secret":{"description":"The radius secret that will be used for the connection."},"use-local-certificates":{"description":"The device will use its local certificate bundle for the TLS setup and ignores all other certificate options in this section."},"ca-certificate":{"description":"The local servers CA bundle."},"certificate":{"description":"The local servers certificate."},"private-key":{"description":"The local servers private key/"},"private-key-password":{"description":"The password required to read the private key."}}},"1":{"properties":{"protocol":{"description":"Defines whether the real should use radsec or normal radius."},"realm":{"description":"The realm that that this server shall be used for."},"auth-server":{"description":"The URI of our Radius server."},"auth-port":{"description":"The network port of our Radius server."},"auth-secret":{"description":"The shared Radius authentication secret."},"acct-server":{"description":"The URI of our Radius server."},"acct-port":{"description":"The network port of our Radius server."},"acct-secret":{"description":"The shared Radius authentication secret."}}},"2":{"properties":{"protocol":{"description":"Defines whether the real should use radsec or normal radius."},"realm":{"description":"The realm that that this server shall be used for."},"message":{"description":"The message that is sent when a realm is blocked."}}}}}}}},"online-check":{"description":"This section can be used to configure the online check service.","properties":{"ping-hosts":{"description":"Hosts that shall be pinged to find out if we are online."},"download-hosts":{"description":"URLs to which a http/s connection shall be established to find out if we are online. The service will try to download http://$string/online.txt and expects the content of that file to be 'Ok'. HTTP 30x is support allowing https redirects."},"check-interval":{"description":"The interval in seconds in between each online-check."},"check-threshold":{"description":"How often does the online check need to fail until the system assumes that it has lost online connectivity."},"action":{"description":"The action that the device shall execute when it has detected that it is not online."}}},"data-plane":{"description":"This section can be used to define eBPF and cBPF blobs that shall be loaded for virtual data-planes and SDN.","properties":{"ingress-filters":{"description":"A list of programs that can be loaded as ingress filters on interfaces.","items":{"properties":{"name":{"description":"The name of the ingress filter."},"program":{"description":"The base64 encoded xBPF."}}}}}},"wifi-steering":{"description":"This section describes the band steering behaviour of the unit.","properties":{"mode":{"description":"Wifi sterring can happen either locally or via the backend gateway."},"assoc-steering":{"description":"Allow rejecting assoc requests for steering purposes."},"required-snr":{"description":"Minimum required signal level (dBm) for connected clients. If the client will be kicked if the SNR drops below this value."},"required-probe-snr":{"description":"Minimum required signal level (dBm) to allow connections. If the SNR is below this value, probe requests will not be replied to."},"required-roam-snr":{"description":"Minimum required signal level (dBm) before an attempt is made to roam the client to a better AP."},"load-kick-threshold":{"description":"Minimum channel load (%) before kicking clients"},"auto-channel":{"description":"Allow multiple instances of the steering daemon to coordinate the best channel usage amongst eachother."},"ipv6":{"description":"Use IPv6 multicast to communicate with remote usteerd instances, rather than IPv4 broadcast."}}},"quality-of-service":{"description":"This section describes the QoS behaviour of the unit.","properties":{"select-ports":{"description":"The physical network devices that shall be considered the primary uplink interface. All classification and shaping will happen on this device."},"bandwidth-up":{"description":"Defines the upload bandwidth of this device. If it is not known or the device is attached to a shared medium, this value needs to be 0."},"bandwidth-down":{"description":"Defines the download bandwidth of this device. If it is not known or the device is attached to a shared medium, this value needs to be 0."},"bulk-detection":{"description":"The QoS feature can automatically detect and classify bulk flows. This is based on average packet size and PPS.","properties":{"dscp":{"description":"The differentiated services code point that shall be assigned to packets that belong to a bulk flow."},"packets-per-second":{"description":"The required PPS rate that will cause a flow to be classified as bulk."}}},"services":{"description":"A list of predefined named services that shall be classified according to the communities DB."},"classifier":{"description":"A list of classifiers. Each classifier will map certain traffic to specific ToS/DSCP values based upon the defined constraints.","items":{"properties":{"dscp":{"description":"The differentiated services code point that shall be assigned to packet that match the rules of this entry."},"ports":{"description":"Each entry defines a layer3 protocol and a port(range) that will be used to match packets.","items":{"properties":{"protocol":{"description":"The port match can apply for TCP, UDP or any IP protocol."},"port":{"description":"The port of this match rule."},"range-end":{"description":"The last port of this match rule if it is a port range."},"reclassify":{"description":"Ignore the ToS/DSCP of packets and reclassify them."}}}},"dns":{"description":"Each entry defines a wildcard FQDN. The IP that this resolves to will be used to match packets.","items":{"properties":{"suffix-matching":{"description":"Match for all suffixes of the FQDN."},"reclassify":{"description":"Ignore the ToS/DSCP of packets and reclassify them."}}}}}}}}},"facebook-wifi":{"description":"This section describes the FaceBook Wifi behaviour of the unit.","properties":{"vendor-id":{"description":"The Vendors ID."},"gateway-id":{"description":"The Gateways ID."},"secret":{"description":"The Device specific secret"}}},"airtime-fairness":{"description":"This section describes the vlan behaviour of a logical network interface.","properties":{"voice-weight":{"description":"Voice traffic does not get aggregated. As voice and video are both considered priotity voice is considered to have a heavier weight when calculation priority average."},"packet-threshold":{"description":"The amount of packets that need to be received for a specific type of traffic before new averageg is calculated."},"bulk-threshold":{"description":"This option is a percentual value. If more the X% of the traffic is bulk, we assign the bulk weight."},"priority-threshold":{"description":"This option is a percentual value. If more the X% of the traffic is priority, we assign the priority weight. Priority classification will take precedence over bulk."},"weight-normal":{"description":"The default ATF weight that UEs get assigned."},"weight-priority":{"description":"The default ATF weight that UEs get assigned when priority traffic above the configured percentage is detected."},"weight-bulk":{"description":"The default ATF weight that UEs get assigned when bulk traffic above the configured percentage is detected."}}},"wireguard-overlay":{"description":"This Object defines the properties of a wireguard-overlay.","properties":{"proto":{"description":"This field must be set to wireguard-overlay."},"private-key":{"description":"The private key of the device. This key is used to lookup the host entry inside the config."},"peer-port":{"description":"The network port that shall be used to establish the wireguard tunnel."},"peer-exchange-port":{"description":"The network port that shall be used to exchange peer data inside the tunnel."},"root-node":{"description":"The descritption of the root node of the overlay.","properties":{"key":{"description":"The public key of the host."},"endpoint":{"description":"The public IP of the host (optional)."},"ipaddr":{"description":"The list of private IPs that a host is reachable on inside the overlay."}}},"hosts":{"description":"The list of all known hosts inside the overlay.","items":{"properties":{"name":{"description":"The unique name of the host."},"key":{"description":"The public key of the host."},"endpoint":{"description":"The public IP of the host (optional)."},"subnet":{"description":"The list of subnets that shall be routed to this host."},"ipaddr":{"description":"The list of private IPs that a host is reachable on inside the overlay."}}}},"vxlan":{"description":"The descritption of the root node of the overlay.","properties":{"port":{"description":"The network port that shall be used to establish the vxlan overlay."},"mtu":{"description":"The MTU that shall be used by the vxlan tunnel."},"isolate":{"description":"If set to true hosts will only be able to talk with the root node and not forward L@ traffic between each other."}}}}},"captive":{"allOf":{"0":{"oneOf":{"0":{"description":"This section can be used to setup a captive portal on the AP with a click-to-continue splash page.","properties":{"auth-mode":{"description":"This field must be set to 'click-to-continue'"}}},"1":{"description":"This section can be used to setup a captive portal on the AP with a click-to-continue splash page.","properties":{"auth-mode":{"description":"This field must be set to 'radius'"},"auth-server":{"description":"The URI of our Radius Authentication server."},"auth-port":{"description":"The network port of our Radius Authentication server."},"auth-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-server":{"description":"The URI of our Radius Authentication server."},"acct-port":{"description":"The network port of our Radius Authentication server."},"acct-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-interval":{"description":"The timeout used for interim messages."}}},"2":{"description":"This section can be used to setup a captive portal on the AP with a credentials splash page.","properties":{"auth-mode":{"description":"This field must be set to 'credentials'"},"credentials":{"description":"The list of local username/password pairs that can be used to login."}}},"3":{"description":"This section can be used to setup a captive portal on the AP with a remote UAM server.","properties":{"auth-mode":{"description":"This field must be set to 'uam'"},"uam-port":{"description":"The local UAM port."},"uam-secret":{"description":"The pre-shared UAM secret."},"uam-server":{"description":"The fqdn of the UAM server."},"nasid":{"description":"The NASID that gets sent to the UAM server."},"nasmac":{"description":"The NAS MAC that gets send to the UAM server. The devices serial is used if this value is not provided."},"auth-server":{"description":"The URI of our Radius Authentication server."},"auth-port":{"description":"The network port of our Radius Authentication server."},"auth-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-server":{"description":"The URI of our Radius Authentication server."},"acct-port":{"description":"The network port of our Radius Authentication server."},"acct-secret":{"description":"The shared Radius authentication Authentication secret."},"acct-interval":{"description":"The timeout used for interim messages."},"ssid":{"description":"The name of the SSID that shall be sent as part of the UAM redirect."},"mac-format":{"description":"Defines the format used to send the MAC address inside AAA frames."},"final-redirect-url":{"description":"Define the behaviour off the final redirect. Default will honour 'userurl' and fallback to 'local'. Alternatively it is possible to force a redirect to the 'UAM' or 'local' URL."},"mac-auth":{"description":"Try to authenticate new clients using macauth."},"radius-gw-proxy":{"description":"Tunnel all radius traffic via the radius-gw-proxy."}}}}},"1":{"properties":{"walled-garden-fqdn":{"description":"The list of FQDNs that a non-authenticated client is allowed to connect to."},"walled-garden-ipaddr":{"description":"The list of IP addresses that a non-authenticated client is allowed to connect to."},"web-root":{"description":"A base64 encoded TAR file with the custom web-root."},"web-root-url":{"description":"A URL where the webroot should be downloaded from."},"web-root-checksum":{"description":"The SHA256 of the file located at web-root-url."},"idle-timeout":{"description":"How long may a client be idle before getting removed."},"session-timeout":{"description":"How long may a client be idle before getting removed."}}}}},"gps":{"description":"This section can be used to configure a GPS dongle","properties":{"adjust-time":{"description":"Adjust the systems clock upon a successful GPS lock."},"baud-rate":{"description":"The baudrate used by the attached GPS dongle"}}},"dhcp-relay":{"description":"Define the vlans on which the dhcp shall be relayed.","properties":{"select-ports":{"description":"The list of physical network devices that shall be used to fwd the DHCP frames."},"vlans":{"description":"The list of all vlans","items":{"properties":{"vlan":{"description":"The vlan id."},"relay-server":{"description":"The unicast target DHCP pool server where frames get relayed to."},"circuit-id-format":{"description":"This option selects what info shall be contained within a relayed frame's circuit ID."},"remote-id-format":{"description":"This option selects what info shall be contained within a relayed frame's remote ID."}}}}}},"admin-ui":{"properties":{"wifi-ssid":{"description":"The name of the admin ssid."},"wifi-key":{"description":"The Pre Shared Key (PSK) that is used for encryption on the BSS."},"wifi-bands":{"description":"The band that the SSID should be broadcasted on. The configuration layer will use the first matching band."},"offline-trigger":{"description":"The admin-ui will be spawned when this offline threshold was exceeded."}}},"rrm":{"description":"This section describes the band steering behaviour of the unit.","properties":{"beacon-request-assoc":{"description":"Tell stations to send a beacon request scan when they associate."},"station-stats-interval":{"description":"Periodically send station statistics every N seconds."},"chanutil":{"description":"RRM policy based on Channel Utilization for optimization.","properties":{"interval":{"description":"The interval to check channel utilization (in seconds)."},"threshold":{"description":"The airtime utilization threshold."},"consecutive-threshold-breach":{"description":"The number of times the Channel Utilization is higher than the threshold before triggering channel optimization."},"algo":{"description":"The algorithm for channel optimization."}}}}},"fingerprint":{"description":"This section can be used to configure device fingerprinting.","properties":{"mode":{"description":"Enable this option if you would like to enable the MDNS server on the unit."},"minimum-age":{"description":"The minimum age a fingerprint must have before it is reported."},"maximum-age":{"description":"The age at which fingerprints get flushed from the local state."},"periodicity":{"description":"This value defines the period at which entries get reported."},"allow-wan":{"description":"Allow fingerprinting devices found on the WAN port."}}},"snmpd":{"description":"SNMP sections.","properties":{"agent":{"description":"Configure the SNMP agent.","properties":{"agentaddress":{"description":"Define the agent configuration."}}},"access":{"description":"List of access types for SNMP.","properties":{"public_access":{"description":"Configuration of public access.","properties":{"context":{"description":"A collection of management information accessible by an SNMP entity."},"group":{"description":"Group related to the access."},"level":{"description":"Level of authorization."},"notify":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."},"prefix":{"description":"Specifies how CONTEXT should be matched against the context of the incoming request."},"read":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."},"version":{"description":"SNMP version."},"write":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."}}},"private_access":{"description":"Configuration of public access.","properties":{"context":{"description":"A collection of management information accessible by an SNMP entity."},"group":{"description":"Group related to the access."},"level":{"description":"Level of authorization."},"notify":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."},"prefix":{"description":"Specifies how CONTEXT should be matched against the context of the incoming request."},"read":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."},"version":{"description":"SNMP version."},"write":{"description":"Specifies the view to be used for GET*, SET and TRAP/INFORM requests."}}}}},"agentx":{"description":"Configure the role in AgentX protocol.","properties":{"type":{"description":"AgentX protocol role."}}},"com2sec":{"description":"Map an SNMPv1 or SNMPv2c community string to a security name..","properties":{"public":{"description":"Public com2sec.","properties":{"community":{"description":"Community name."},"secname":{"description":"Security name."},"source":{"description":"A restricted source can either be a specific hostname or a subnet."}}},"private":{"description":"Private com2sec.","properties":{"community":{"description":"Community name."},"secname":{"description":"Security name."},"source":{"description":"A restricted source can either be a specific hostname or a subnet."}}}}},"general":{"description":"General options for SNMP service.","properties":{"enabled":{"description":"Enable or disable the service"}}},"pass":{"description":"List of community permissions.","items":{"properties":{"miboid":{"description":"OID used by pass protocol."},"name":{"description":"Name of the MIB."},"prog":{"description":"MIB script."}}}},"group":{"description":"List of pass sections for SNMP.","properties":{"public_v1":{"properties":{"group":{"description":"Group name."},"secname":{"description":"Related security name."},"version":{"description":"SNMP version."}}},"private_v1":{"properties":{"group":{"description":"Group name."},"secname":{"description":"Related security name."},"version":{"description":"SNMP version."}}},"private_v2c":{"properties":{"group":{"description":"Group name."},"secname":{"description":"Related security name."},"version":{"description":"SNMP version."}}},"public_v2c":{"properties":{"group":{"description":"Group name."},"secname":{"description":"Related security name."},"version":{"description":"SNMP version."}}}}},"system":{"description":"System information used by SNMP service.","properties":{"sysContact":{"description":"Contact information."},"sysLocation":{"description":"Location information."},"sysName":{"description":"System name."}}},"view":{"description":"View configuration.","properties":{"oid":{"description":"Define the source oid tree for the view."},"type":{"description":"Type is either included or excluded."},"viewname":{"description":"View name."}}}}}}},"metrics":{"description":"There are several types of mertics that shall be reported in certain intervals. This section provides a granual configuration.","properties":{"statistics":{"description":"Statistics are traffic counters, neighbor tables, ...","properties":{"interval":{"description":"The reporting interval defined in seconds."},"types":{"description":"A list of names of subsystems that shall be reported periodically."}}},"health":{"description":"Health check gets executed periodically and will report a health value between 0-100 indicating how healthy the device thinks it is","properties":{"interval":{"description":"The reporting interval defined in seconds."},"dhcp-local":{"description":"This is makes the AP probe local downstream DHCP servers."},"dhcp-remote":{"description":"This is makes the AP probe remote upstream DHCP servers."},"dns-local":{"description":"This is makes the AP probe DNS servers."},"dns-remote":{"description":"This is makes the AP probe DNS servers."}}},"wifi-frames":{"description":"Define which types of ieee802.11 management frames shall be sent up to the controller.","properties":{"filters":{"description":"A list of the management frames types that shall be sent to the backend."}}},"dhcp-snooping":{"description":"DHCP snooping allows us to intercept DHCP packages on interface that are bridged, where DHCP is not offered as a service by the AP.","properties":{"filters":{"description":"A list of the message types that shall be sent to the backend."}}},"wifi-scan":{"description":"Define the behaviour of the periodic wifi scanning interface.","properties":{"interval":{"description":"The periodicity at which the scan shall be performed."},"verbose":{"description":"Add capabilities, v/ht_oper, ... to the resulting scan info."},"information-elements":{"description":"Add all IEs to the resulting scan info."}}},"telemetry":{"description":"Configure the unsolicited telemetry stream.","properties":{"interval":{"description":"The reporting interval defined in seconds."},"types":{"description":"The event types that get added to telemetry."}}},"realtime":{"description":"Configure the realtime events that get sent to the cloud.","properties":{"types":{"description":"The event types that get added to telemetry."}}}}},"config-raw":{"description":"This object allows passing raw uci commands, that get applied after all the other configuration was ben generated."},"third-party":{"properties":{"dynamic-vxlan":{"items":{"properties":{"vlan_bridge":{"title":"VLAN Bridge"},"own_vxlanid":{"title":"VXLAN ID"}}}},"radius-filterid":{"items":{"properties":{"ssid":{"title":"SSID"},"filterid-vlanid":{"title":"Filter ID VLAN ID","additionalProperties":{"title":"Value from 1 to 4094"}}}}},"cht":{"properties":{"aca":{"title":"Automatic Channel Assignment (ACA)","properties":{"enabled":{"description":"Enable/disable ACA module"},"enable_dfs":{"title":"Enable DFS","description":"Include DFS channels as candidates in the algorithm"},"enable_unii3plus":{"title":"Enable unii3plus"}}},"blutu":{"title":"Bluetooth","properties":{"enabled":{"description":"Enable/disable Bluetooth module"},"device_max_age":{"title":"Device max age","description":"Time to store in memory a scanned device after the last"},"filter_random_macs":{"title":"Filter random MACs"},"scan_period":{"title":"Scan period","description":"Bluetooth scan period in seconds"}}},"lb":{"title":"Load Balancing","properties":{"enabled":{"description":"Enable/disable Load Balancing module"},"lb_only_v":{"title":"Load balancing only v","description":"Only move clients that support 802.11v"}}},"loc":{"title":"Location","properties":{"enabled":{"description":"Enable/disable Location module"},"calc_interval":{"title":"Calc interval","description":"Periodic interval to execute location algorithm"},"group":{"description":"Location group"},"loc_users_enabled":{"title":"Location users enabled","description":"Enable/disable location for non associated clients"},"method_loc":{"title":"Location method","description":"Method of operation of location"},"min_nodes_loc":{"title":"Minimum nodes","description":"Mininum number of CHT nodes that must be collaborating for calculating the position of the clients"},"old_calc_weight":{"title":"Calc Weight","description":"Weight to ponderate the previous position when calculating the new one"}}},"mcast":{"title":"Multicast2Unicast","properties":{"enabled":{"description":"Enable/disable Multicast2Unicast module"}}},"mgr":{"title":"Manager","properties":{"enabled":{"description":"Enable/disable connection to Cloud Manager"},"org_name_l1":{"title":"Level 1 Organization name"},"org_name_l2":{"title":"Level 2 Organization name"},"org_name_l3":{"title":"Level 3 Organization name"},"org_site":{"title":"Site","description":"Site where the AP is deployed"},"org_site_area":{"title":"Site area","description":"Area inside the site where the AP is deployed"},"webhook_enabled":{"description":"Enable/disable webhooks"},"webhook_events":{"description":"Array of suscripted statics messages, 24->stas, 34->users, 44->blutu devices"},"webhook_info":{"description":"Enable/disable webhooks information messages"},"webhook_secret":{"title":"Webhook secret","description":"Key used in the signature algorithm to create a cryptographic hash of the webhook payload"},"webhook_ssl_verification":{"title":"Webhook ssl verification","description":"Enable/disable SSL validation of the webhook endpoint"},"webhook_url":{"title":"Webhook URL","description":"URL of the webhook endpoint. It can be http or https"},"cert_subdomain":{"title":"R14 Certificate subdomain","description":"subdomain of URL of the certificate endpoint"}}},"net":{"properties":{"port":{"description":"UDP Port"}}},"pre":{"properties":{"enabled":{"description":"Enable/disable PRE module"},"stas_5ghz_percent":{"title":"Stas 5GHz percent","description":"Percentage of desired stations connected to 5GHz band"},"util_weight":{"title":"Util weight","description":"Weight assigned to channel utilization"},"wl_timeout_auth":{"title":"Timeout auth","description":"Time to wait before accepting a connection from a station to a closed radio"}}},"sr":{"title":"Smart Roaming","properties":{"enabled":{"description":"Enable/disable Smart Roaming module"},"enable_sr_inact":{"title":"Enable inactivity criteria"},"enable_sr_rssi":{"title":"Enable RSSI criteria in SR algorithm"},"max_inactive":{"title":"Max inactive","description":"Time from which SR will start applying inactivity criteria"},"min_snr":{"title":"Minimum snr","description":"Minimum RSSI difference to perform a ROAM"},"sr_only_v":{"title":"Only move clients that support 802.11v"}}},"swarm":{"properties":{"chtzone_ip":{"title":"CHTZone IP","description":"Valid multicast IP address (IPv4 or IPv6)"},"globalzone_ip":{"title":"Global CHTZone IP","description":"Valid multicast IP address (IPv4 or IPv6)"}}},"tc":{"title":"Traffic Control (TC)","properties":{"dl_sta_lower_limit":{"title":"Minimum guaranteed download bandwidth per station (Mbps)"},"dl_sta_upper_limit":{"title":"Download limit per station (Mbps)"},"rad_lower_limit":{"title":"Guaranteed minimum download bandwidth per radio (Mbps)"},"rad_upper_limit":{"title":"Download limit per radio (Mbps)"},"ul_sta_upper_limit":{"title":"Upload limit per station (Mbps)"}}},"wifi":{"properties":{"enhanced_fingerprinting":{"title":"Enhanced_fingerprinting"},"fingerprinting_enabled":{"title":"Enable tracking of non associated stations"}}}}}}},"unit":{"description":"A device has certain properties that describe its identity and location. These properties are described inside this object.","properties":{"name":{"description":"This is a free text field, stating the administrative name of the device. It may contain spaces and special characters."},"hostname":{"description":"The hostname that shall be set on the device. If this field is not set, then the devices serial number is used."},"location":{"description":"This is a free text field, stating the location of the device. It may contain spaces and special characters."},"timezone":{"description":"This allows you to change the TZ of the device."},"leds-active":{"description":"This allows forcing all LEDs off."},"random-password":{"description":"The device shall create a random root password and tell the gateway about it."},"system-password":{"description":"System-config string that holds the password for main (root / admin) user to apply."},"beacon-advertisement":{"description":"The TIP vendor IEs that shall be added to beacons","properties":{"device-name":{"description":"Add an IE containing the device's name to beacons."},"device-serial":{"description":"Add an IE containing the device's serial to beacons."},"network-id":{"description":"A provider specific ID for the network/venue that the device is part of."}}}}}}}}}