Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Routeros Provider
  3. API Docs
  4. CapsmanSecurity
routeros 1.83.0 published on Wednesday, Apr 16, 2025 by terraform-routeros
terraform-routeros/terraform-provider-routeros

routeros.CapsmanSecurity

Explore with Pulumi AI

routeros 1.83.0 published on Wednesday, Apr 16, 2025 by terraform-routeros
terraform-routeros/terraform-provider-routeros

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as routeros from "@pulumi/routeros";

const testSecurity = new routeros.CapsmanSecurity("testSecurity", {
    authenticationTypes: [
        "wpa-psk",
        "wpa-eap",
        "wpa2-psk",
    ],
    comment: "test_security",
    disablePmkid: true,
    eapMethods: "eap-tls,passthrough",
    eapRadiusAccounting: true,
    encryptions: [
        "tkip",
        "aes-ccm",
    ],
    groupEncryption: "aes-ccm",
    groupKeyUpdate: "1h",
    passphrase: "0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE",
    tlsCertificate: "none",
    tlsMode: "verify-certificate",
});
Copy
import pulumi
import pulumi_routeros as routeros

test_security = routeros.CapsmanSecurity("testSecurity",
    authentication_types=[
        "wpa-psk",
        "wpa-eap",
        "wpa2-psk",
    ],
    comment="test_security",
    disable_pmkid=True,
    eap_methods="eap-tls,passthrough",
    eap_radius_accounting=True,
    encryptions=[
        "tkip",
        "aes-ccm",
    ],
    group_encryption="aes-ccm",
    group_key_update="1h",
    passphrase="0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE",
    tls_certificate="none",
    tls_mode="verify-certificate")
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/routeros/routeros"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := routeros.NewCapsmanSecurity(ctx, "testSecurity", &routeros.CapsmanSecurityArgs{
			AuthenticationTypes: pulumi.StringArray{
				pulumi.String("wpa-psk"),
				pulumi.String("wpa-eap"),
				pulumi.String("wpa2-psk"),
			},
			Comment:             pulumi.String("test_security"),
			DisablePmkid:        pulumi.Bool(true),
			EapMethods:          pulumi.String("eap-tls,passthrough"),
			EapRadiusAccounting: pulumi.Bool(true),
			Encryptions: pulumi.StringArray{
				pulumi.String("tkip"),
				pulumi.String("aes-ccm"),
			},
			GroupEncryption: pulumi.String("aes-ccm"),
			GroupKeyUpdate:  pulumi.String("1h"),
			Passphrase:      pulumi.String("0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE"),
			TlsCertificate:  pulumi.String("none"),
			TlsMode:         pulumi.String("verify-certificate"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Routeros = Pulumi.Routeros;

return await Deployment.RunAsync(() => 
{
    var testSecurity = new Routeros.CapsmanSecurity("testSecurity", new()
    {
        AuthenticationTypes = new[]
        {
            "wpa-psk",
            "wpa-eap",
            "wpa2-psk",
        },
        Comment = "test_security",
        DisablePmkid = true,
        EapMethods = "eap-tls,passthrough",
        EapRadiusAccounting = true,
        Encryptions = new[]
        {
            "tkip",
            "aes-ccm",
        },
        GroupEncryption = "aes-ccm",
        GroupKeyUpdate = "1h",
        Passphrase = "0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE",
        TlsCertificate = "none",
        TlsMode = "verify-certificate",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.routeros.CapsmanSecurity;
import com.pulumi.routeros.CapsmanSecurityArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var testSecurity = new CapsmanSecurity("testSecurity", CapsmanSecurityArgs.builder()
            .authenticationTypes(            
                "wpa-psk",
                "wpa-eap",
                "wpa2-psk")
            .comment("test_security")
            .disablePmkid(true)
            .eapMethods("eap-tls,passthrough")
            .eapRadiusAccounting(true)
            .encryptions(            
                "tkip",
                "aes-ccm")
            .groupEncryption("aes-ccm")
            .groupKeyUpdate("1h")
            .passphrase("0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE")
            .tlsCertificate("none")
            .tlsMode("verify-certificate")
            .build());

    }
}
Copy
resources:
  testSecurity:
    type: routeros:CapsmanSecurity
    properties:
      authenticationTypes:
        - wpa-psk
        - wpa-eap
        - wpa2-psk
      comment: test_security
      disablePmkid: true
      eapMethods: eap-tls,passthrough
      eapRadiusAccounting: true
      encryptions:
        - tkip
        - aes-ccm
      groupEncryption: aes-ccm
      groupKeyUpdate: 1h
      passphrase: 0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE
      tlsCertificate: none
      tlsMode: verify-certificate
Copy

Create CapsmanSecurity Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new CapsmanSecurity(name: string, args?: CapsmanSecurityArgs, opts?: CustomResourceOptions);
@overload
def CapsmanSecurity(resource_name: str,
                    args: Optional[CapsmanSecurityArgs] = None,
                    opts: Optional[ResourceOptions] = None)

@overload
def CapsmanSecurity(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    ___id_: Optional[float] = None,
                    ___path_: Optional[str] = None,
                    authentication_types: Optional[Sequence[str]] = None,
                    capsman_security_id: Optional[str] = None,
                    comment: Optional[str] = None,
                    disable_pmkid: Optional[bool] = None,
                    eap_methods: Optional[str] = None,
                    eap_radius_accounting: Optional[bool] = None,
                    encryptions: Optional[Sequence[str]] = None,
                    group_encryption: Optional[str] = None,
                    group_key_update: Optional[str] = None,
                    name: Optional[str] = None,
                    passphrase: Optional[str] = None,
                    tls_certificate: Optional[str] = None,
                    tls_mode: Optional[str] = None)
func NewCapsmanSecurity(ctx *Context, name string, args *CapsmanSecurityArgs, opts ...ResourceOption) (*CapsmanSecurity, error)
public CapsmanSecurity(string name, CapsmanSecurityArgs? args = null, CustomResourceOptions? opts = null)
public CapsmanSecurity(String name, CapsmanSecurityArgs args)
public CapsmanSecurity(String name, CapsmanSecurityArgs args, CustomResourceOptions options)

type: routeros:CapsmanSecurity
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args CapsmanSecurityArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args CapsmanSecurityArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args CapsmanSecurityArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args CapsmanSecurityArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. CapsmanSecurityArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

CapsmanSecurity Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The CapsmanSecurity resource accepts the following input properties:

AuthenticationTypes List<string>
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
CapsmanSecurityId string
The ID of this resource.
Comment string
DisablePmkid bool
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
EapMethods string
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
EapRadiusAccounting bool
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
Encryptions List<string>
Set type of unicast encryption algorithm used.
GroupEncryption string
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
GroupKeyUpdate string
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
Name string
Passphrase string
WPA or WPA2 pre-shared key.
TlsCertificate string
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
TlsMode string
This property has effect only when security.eap-methods contains eap-tls.
___id_ double
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ string
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
AuthenticationTypes []string
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
CapsmanSecurityId string
The ID of this resource.
Comment string
DisablePmkid bool
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
EapMethods string
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
EapRadiusAccounting bool
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
Encryptions []string
Set type of unicast encryption algorithm used.
GroupEncryption string
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
GroupKeyUpdate string
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
Name string
Passphrase string
WPA or WPA2 pre-shared key.
TlsCertificate string
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
TlsMode string
This property has effect only when security.eap-methods contains eap-tls.
___id_ float64
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ string
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
___id_ Double
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ String
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
authenticationTypes List<String>
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
capsmanSecurityId String
The ID of this resource.
comment String
disablePmkid Boolean
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
eapMethods String
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
eapRadiusAccounting Boolean
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
encryptions List<String>
Set type of unicast encryption algorithm used.
groupEncryption String
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
groupKeyUpdate String
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
name String
passphrase String
WPA or WPA2 pre-shared key.
tlsCertificate String
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
tlsMode String
This property has effect only when security.eap-methods contains eap-tls.
___id_ number
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ string
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
authenticationTypes string[]
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
capsmanSecurityId string
The ID of this resource.
comment string
disablePmkid boolean
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
eapMethods string
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
eapRadiusAccounting boolean
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
encryptions string[]
Set type of unicast encryption algorithm used.
groupEncryption string
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
groupKeyUpdate string
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
name string
passphrase string
WPA or WPA2 pre-shared key.
tlsCertificate string
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
tlsMode string
This property has effect only when security.eap-methods contains eap-tls.
___id_ float
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ str
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
authentication_types Sequence[str]
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
capsman_security_id str
The ID of this resource.
comment str
disable_pmkid bool
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
eap_methods str
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
eap_radius_accounting bool
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
encryptions Sequence[str]
Set type of unicast encryption algorithm used.
group_encryption str
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
group_key_update str
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
name str
passphrase str
WPA or WPA2 pre-shared key.
tls_certificate str
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
tls_mode str
This property has effect only when security.eap-methods contains eap-tls.
___id_ Number
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ String
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
authenticationTypes List<String>
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
capsmanSecurityId String
The ID of this resource.
comment String
disablePmkid Boolean
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
eapMethods String
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
eapRadiusAccounting Boolean
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
encryptions List<String>
Set type of unicast encryption algorithm used.
groupEncryption String
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
groupKeyUpdate String
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
name String
passphrase String
WPA or WPA2 pre-shared key.
tlsCertificate String
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
tlsMode String
This property has effect only when security.eap-methods contains eap-tls.

Outputs

All input properties are implicitly available as output properties. Additionally, the CapsmanSecurity resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing CapsmanSecurity Resource

Get an existing CapsmanSecurity resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: CapsmanSecurityState, opts?: CustomResourceOptions): CapsmanSecurity
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        ___id_: Optional[float] = None,
        ___path_: Optional[str] = None,
        authentication_types: Optional[Sequence[str]] = None,
        capsman_security_id: Optional[str] = None,
        comment: Optional[str] = None,
        disable_pmkid: Optional[bool] = None,
        eap_methods: Optional[str] = None,
        eap_radius_accounting: Optional[bool] = None,
        encryptions: Optional[Sequence[str]] = None,
        group_encryption: Optional[str] = None,
        group_key_update: Optional[str] = None,
        name: Optional[str] = None,
        passphrase: Optional[str] = None,
        tls_certificate: Optional[str] = None,
        tls_mode: Optional[str] = None) -> CapsmanSecurity
func GetCapsmanSecurity(ctx *Context, name string, id IDInput, state *CapsmanSecurityState, opts ...ResourceOption) (*CapsmanSecurity, error)
public static CapsmanSecurity Get(string name, Input<string> id, CapsmanSecurityState? state, CustomResourceOptions? opts = null)
public static CapsmanSecurity get(String name, Output<String> id, CapsmanSecurityState state, CustomResourceOptions options)
resources:  _:    type: routeros:CapsmanSecurity    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AuthenticationTypes List<string>
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
CapsmanSecurityId string
The ID of this resource.
Comment string
DisablePmkid bool
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
EapMethods string
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
EapRadiusAccounting bool
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
Encryptions List<string>
Set type of unicast encryption algorithm used.
GroupEncryption string
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
GroupKeyUpdate string
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
Name string
Passphrase string
WPA or WPA2 pre-shared key.
TlsCertificate string
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
TlsMode string
This property has effect only when security.eap-methods contains eap-tls.
___id_ double
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ string
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
AuthenticationTypes []string
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
CapsmanSecurityId string
The ID of this resource.
Comment string
DisablePmkid bool
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
EapMethods string
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
EapRadiusAccounting bool
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
Encryptions []string
Set type of unicast encryption algorithm used.
GroupEncryption string
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
GroupKeyUpdate string
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
Name string
Passphrase string
WPA or WPA2 pre-shared key.
TlsCertificate string
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
TlsMode string
This property has effect only when security.eap-methods contains eap-tls.
___id_ float64
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ string
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
___id_ Double
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ String
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
authenticationTypes List<String>
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
capsmanSecurityId String
The ID of this resource.
comment String
disablePmkid Boolean
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
eapMethods String
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
eapRadiusAccounting Boolean
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
encryptions List<String>
Set type of unicast encryption algorithm used.
groupEncryption String
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
groupKeyUpdate String
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
name String
passphrase String
WPA or WPA2 pre-shared key.
tlsCertificate String
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
tlsMode String
This property has effect only when security.eap-methods contains eap-tls.
___id_ number
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ string
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
authenticationTypes string[]
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
capsmanSecurityId string
The ID of this resource.
comment string
disablePmkid boolean
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
eapMethods string
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
eapRadiusAccounting boolean
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
encryptions string[]
Set type of unicast encryption algorithm used.
groupEncryption string
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
groupKeyUpdate string
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
name string
passphrase string
WPA or WPA2 pre-shared key.
tlsCertificate string
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
tlsMode string
This property has effect only when security.eap-methods contains eap-tls.
___id_ float
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ str
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
authentication_types Sequence[str]
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
capsman_security_id str
The ID of this resource.
comment str
disable_pmkid bool
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
eap_methods str
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
eap_radius_accounting bool
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
encryptions Sequence[str]
Set type of unicast encryption algorithm used.
group_encryption str
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
group_key_update str
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
name str
passphrase str
WPA or WPA2 pre-shared key.
tls_certificate str
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
tls_mode str
This property has effect only when security.eap-methods contains eap-tls.
___id_ Number
Resource ID type (.id / name). This is an internal service field, setting a value is not required.
___path_ String
Resource path for CRUD operations. This is an internal service field, setting a value is not required.
authenticationTypes List<String>
Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
capsmanSecurityId String
The ID of this resource.
comment String
disablePmkid Boolean
Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
eapMethods String
eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
eapRadiusAccounting Boolean
Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
encryptions List<String>
Set type of unicast encryption algorithm used.
groupEncryption String
Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
groupKeyUpdate String
Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
name String
passphrase String
WPA or WPA2 pre-shared key.
tlsCertificate String
Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
tlsMode String
This property has effect only when security.eap-methods contains eap-tls.

Import

#The ID can be found via API or the terminal

#The command for the terminal is -> :put [/caps-man/security get [print show-ids]]

$ pulumi import routeros:index/capsmanSecurity:CapsmanSecurity test_security "*1"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
routeros terraform-routeros/terraform-provider-routeros
License
Notes
This Pulumi package is based on the routeros Terraform Provider.
routeros 1.83.0 published on Wednesday, Apr 16, 2025 by terraform-routeros
terraform-routeros/terraform-provider-routeros