Type: object

OpenWrt uconfig schema

Type: boolean Default: false

The device will reject any configuration that causes warnings if strict mode is enabled.

Type: integer

The unique ID of the configuration. This is the unix timestamp of when the config was created.

Type: object

A device has certain properties that describe its identity and location. These properties are described inside this object.

Type: string

This is a free text field, stating the administrative name of the device. It may contain spaces and special characters.

Type: stringFormat: hostname

The hostname that shall be set on the device. If this field is not set, then the devices serial number is used.

Type: string

This is a free text field, stating the location of the device. It may contain spaces and special characters.

Type: string

This allows you to change the TZ of the device.


Examples:

"UTC"
"EST5"
"CET-1CEST,M3.5.0,M10.5.0/3"

Type: boolean Default: true

This allows forcing all LEDs off.


The device shall have no password, create a random root password or use the provided one.

Type: boolean
Type: string

Type: boolean Default: true

Require username/password login on tty/S ports.

Type: object

A device has certain global properties that are used to derive parts of the final configuration that gets applied.

Type: stringFormat: uc-cidr4

Define the IPv4 range that is delegatable to the downstream interfaces This is described as a CIDR block. (192.168.0.0/16, 172.16.128/17)


Example:

"192.168.0.0/16"

Type: stringFormat: uc-cidr6

Define the IPv6 range that is delegatable to the downstream interfaces This is described as a CIDR block. (fdca:1234:4567::/48)


Example:

"fdca:1234:4567::/48"


Type: object

Define the default WMM behaviour of all SSIDs on the device. Each access category can be assigned a default class selector that gets used for packet matching.

No Additional Properties

Type: array of enum (of string)

Each item of this array must be:

Type: enum (of string)

Must be one of:

  • "CS0"
  • "CS1"
  • "CS2"
  • "CS3"
  • "CS4"
  • "CS5"
  • "CS6"
  • "CS7"
  • "AF11"
  • "AF12"
  • "AF13"
  • "AF21"
  • "AF22"
  • "AF23"
  • "AF31"
  • "AF32"
  • "AF33"
  • "AF41"
  • "AF42"
  • "AF43"
  • "DF"
  • "EF"
  • "VA"
  • "LE"

Type: array of enum (of string)
Same definition as UP0

Type: array of enum (of string)
Same definition as UP0

Type: array of enum (of string)
Same definition as UP0

Type: array of enum (of string)
Same definition as UP0

Type: array of enum (of string)
Same definition as UP0

Type: array of enum (of string)
Same definition as UP0

Type: array of enum (of string)
Same definition as UP0
Type: object
No Additional Properties

Type: enum (of string)

Define a default profile that shall be used for the WMM behaviour of all SSIDs on the device.

Must be one of:

  • "enterprise"
  • "rfc8325"
  • "3gpp"

Type: object

A device has certain global properties that are used to derive parts of the final configuration that gets applied.

Type: object

All properties whose name matches the following regular expression must respect the following conditions

Property name regular expression: .+
Type: object

When using EAP encryption we need to provide the required information allowing us to connect to the AAA servers.

Type: string

NAS-Identifier string for RADIUS messages. When used, this should be unique to the NAS within the scope of the RADIUS server.

Type: boolean Default: false

This will enable support for Chargeable-User-Identity (RFC 4372).

Type: object

Describe the properties of the local Radius server inside hostapd.

Type: string Default: "OpenWrt"

EAP methods that provide mechanism for authenticated server identity delivery use this value.

Type: array

Specifies a collection of local EAP user/psk/vid triplets.

Each item of this array must be:

Type: object

Describes a local EAP user/psk/vid triplet.

Type: stringFormat: uc-mac

Type: string

Must be at least 1 characters long

Type: string

Must be at least 8 characters long

Must be at most 63 characters long

Type: integer

Value must be lesser or equal to 4096


Examples:

3
100
200
4094

Type: object

Dynamic Authorization Extensions (DAE) is an extension to Radius.

Type: stringFormat: uc-ip

The IP of the DAE client.


Example:

"192.168.1.10"

Type: integer

The network port that the DAE client can connet on.

Value must be greater or equal to 1024 and lesser or equal to 65535


Example:

1812

Type: string

The shared DAE authentication secret.


Example:

"secret"


Type: object

Describe the properties of a Radius server.

Type: stringFormat: uc-host

The URI of our Radius server.


Example:

"192.168.1.10"

Type: integer

The network port of our Radius server.

Value must be greater or equal to 1024 and lesser or equal to 65535


Example:

1812

Type: string

The shared Radius authentication secret.


Example:

"secret"

Type: array of object

The additional Access-Request attributes that gets sent to the server.

Each item of this array must be:

Type: object

Examples:

{
    "id": 27,
    "value": 900
}
{
    "id": 32,
    "value": "My NAS ID"
}
{
    "id": 56,
    "value": 1004
}
{
    "id": 126,
    "value": "Example Operator"
}

Type: integer

The ID of the RADIUS attribute

Value must be greater or equal to 1 and lesser or equal to 255


Example:

"126:s:Operator"
Type: object

Type: boolean Default: false

Should the radius server be used for MAC address ACL.


Type: object

Type: integer Default: 60

The interim accounting update interval. This value is defined in seconds.

Value must be greater or equal to 60 and lesser or equal to 600

Type: array of object

Each item of this array must be:

Type: object

This section defines the link speed and duplex mode of the physical copper/fiber ports of the device.

Type: array of string

The list of physical network devices that shall be configured. The names are logical ones and wildcardable.

Each item of this array must be:

Type: string

Examples:

"LAN1"
"LAN2"
"LAN3"
"LAN4"
"LAN*"
"WAN*"
"*"

Type: enum (of integer)

The link speed that shall be forced.

Must be one of:

  • 10
  • 100
  • 1000
  • 2500
  • 5000
  • 10000

Type: enum (of string)

The duplex mode that shall be forced.

Must be one of:

  • "half"
  • "full"

Type: string

Specifies the country code, affects the available channels and transmission powers.

Must be at least 2 characters long

Must be at most 2 characters long


Example:

"US"

Type: object

All properties whose name matches the following regular expression must respect the following conditions

Property name regular expression: .+
Type: object

Describe a physical radio on the AP. A radio is be parent to several VAPs. They all share the same physical properties.

Type: boolean

Allow disabling the radio.

Type: enum (of string)

Specifies the wireless band to configure the radio for. Available radio device phys on the target system are matched by the wireless band given here. If multiple radio phys support the same band, the settings specified here will be applied to all of them.

Must be one of:

  • "2G"
  • "5G"
  • "6G"


Specifies the wireless channel to use. A value of 'auto' starts the ACS algorithm.

Type: integer

Value must be greater or equal to 1 and lesser or equal to 196

Type: const
Specific value: "auto"

Type: array of integer

Pass a list of valid-channels that can be used during ACS.

Each item of this array must be:

Type: integer

Value must be greater or equal to 1 and lesser or equal to 196

Type: boolean Default: true

This property defines whether a radio may use DFS channels.

Type: enum (of string) Default: "HE"

Define the ideal channel mode that the radio shall use. This can be 802.11n, 802.11ac or 802.11ax. This is just a hint for the AP. If the requested value is not supported then the AP will use the highest common denominator.

Must be one of:

  • "HT"
  • "VHT"
  • "HE"
  • "EHT"

Type: enum (of integer) Default: 80

The channel width that the radio shall use. This is just a hint for the AP. If the requested value is not supported then the AP will use the highest common denominator.

Must be one of:

  • 20
  • 40
  • 80
  • 160
  • 8080

Type: enum (of string)

Stations that do no fulfill these HT modes will be rejected.

Must be one of:

  • "HT"
  • "VHT"
  • "HE"

Type: enum (of string)

This option allows configuring the antenna pairs that shall be used. This is just a hint for the AP. If the requested value is not supported then the AP will use the highest common denominator.

Must be one of:

  • "1x1"
  • "2x2"
  • "3x3"
  • "4x4"
  • "5x5"
  • "6x6"
  • "7x7"
  • "8x8"

Type: integer

This option specifies the transmission power in dBm

Value must be greater or equal to 0 and lesser or equal to 30

Type: boolean Default: false

Allow legacy 802.11b data rates.

Type: integer Default: 100

Beacon interval in kus (1.024 ms).

Value must be greater or equal to 15 and lesser or equal to 65535

Type: integer Default: 2

Set the DTIM (delivery traffic information message) period. There will be one DTIM per this many beacon frames. This may be set between 1 and 255. This option only has an effect on ap wifi-ifaces.

Value must be greater or equal to 1 and lesser or equal to 255

Type: integer

Set the maximum number of clients that may connect to this radio. This value is accumulative for all attached VAP interfaces.

Type: object

The rate configuration of this BSS.

Type: enum (of integer) Default: 6000

The beacon rate that shall be used by the BSS. Values are in Mbps.

Must be one of:

  • 0
  • 1000
  • 2000
  • 5500
  • 6000
  • 9000
  • 11000
  • 12000
  • 18000
  • 24000
  • 36000
  • 48000
  • 54000

Type: enum (of integer) Default: 24000

The multicast rate that shall be used by the BSS. Values are in Mbps.

Must be one of:

  • 0
  • 1000
  • 2000
  • 5500
  • 6000
  • 9000
  • 11000
  • 12000
  • 18000
  • 24000
  • 36000
  • 48000
  • 54000

Type: object

This section describes the HE specific configuration options of the BSS.

Type: boolean Default: false

Enabling this option will make the PHY broadcast its BSSs using the multiple BSSID beacon IE.

Type: integer Default: 64

This enables BSS Coloring on the PHY. setting it to 0 disables the feature 1-63 sets the color and 64 will make hostapd pick a random color.

Type: object

All properties whose name matches the following regular expression must respect the following conditions

Property name regular expression: .+
Type: object

This section describes the logical network interfaces of the device. Interfaces as their primary have a role that is upstream, downstream, guest, ....

Type: enum (of string)

The role defines if the interface is upstream or downstream facing.

Must be one of:

  • "upstream"
  • "downstream"

Type: boolean

This option makes sure that any traffic leaving this interface is isolated and all local IP ranges are blocked. It essentially enforces "guest network" firewall settings.

Type: integer

The routing metric of this logical interface. Lower values have higher priority.

Value must be greater or equal to 0 and lesser or equal to 4294967295

Type: integer

The MTU of this logical interface.

Value must be greater or equal to 1280 and lesser or equal to 1500

Type: array of string

The services that shall be offered on this logical interface. These are just strings such as "ssh", "lldp", "mdns"

Each item of this array must be:

Type: string

Examples:

"ssh"
"lldp"

Type: object

This section describes the vlan behaviour of a logical network interface.

Type: integer

This is the pvid of the vlan that shall be assigned to the interface. The individual physical network devices contained within the interface need to be told explicitly if egress traffic shall be tagged.

Value must be lesser or equal to 4050

Type: object

This section describes the bridge behaviour of a logical network interface.

Type: integer

The MTU that shall be used by the network interface.

Value must be greater or equal to 256 and lesser or equal to 65535


Example:

1500

Type: integer

The Transmit Queue Length is a TCP/IP stack network interface value that sets the number of packets allowed per kernel transmit queue of a network interface device.


Example:

5000

Type: boolean Default: false

Isolates the bridge ports from each other.

Type: object

All properties whose name matches the following regular expression must respect the following conditions

Property name regular expression: .+
Type: enum (of string)

Must be one of:

  • "auto"
  • "tagged"
  • "un-tagged"

Type: object

The list of physical network devices that shall serve .1x for this interface.u

All properties whose name matches the following regular expression must respect the following conditions

Property name regular expression: .+
Type: enum (of string)
Same definition as interfaces_pattern1_ports_pattern1

Type: object

This section describes the IPv4 properties of a logical interface.

Type: enum (of string)

This option defines the method by which the IPv4 address of the interface is chosen.

Must be one of:

  • "dynamic"
  • "static"
  • "none"

Example:

"static"

Type: stringFormat: uc-cidr4

This option defines the static IPv4 of the logical interface in CIDR notation. auto/24 can be used, causing the configuration layer to automatically use and address range from globals.ipv4-network.


Example:

"auto/24"

Type: stringFormat: ipv4

This option defines the static IPv4 gateway of the logical interface.


Example:

"192.168.1.1"

Type: boolean Default: true

include the devices hostname inside DHCP requests


Example:

true

Type: array of string

Define which DNS servers shall be used. This can either be a list of static IPv4 addresse or dhcp (use the server provided by the DHCP lease)

Each item of this array must be:

Type: stringFormat: ipv4

Examples:

"8.8.8.8"
"4.4.4.4"


This option only applies to "downstream" interfaces. The downstream interface will prevent traffic going out to the listed CIDR4s. This can be used to prevent a guest / captive interface being able to communicate with RFC1918 ranges. Setting this option to 'true' will block all RFC1918 ranges.

Type: array of string

Each item of this array must be:

Type: stringFormat: uc-cidr4

Examples:

"192.168.0.0/16"
"172.16.0.0/12"
"10.0.0.0/8"

Type: object

This section describes the DHCP server configuration

Type: integer

The last octet of the first IPv4 address in this DHCP pool.


Example:

10

Type: integer

The number of IPv4 addresses inside the DHCP pool.


Example:

100

Type: stringFormat: uc-timeout Default: "6h"

How long the lease is valid before a RENEW must be issued.

Type: array of string

The DNS server sent to clients as DHCP option 6.

Each item of this array must be:

Type: stringFormat: ipv4

Type: array

Each item of this array must be:

Type: object

This section describes the static DHCP leases of this logical interface.

Type: stringFormat: uc-mac

The MAC address of the host that this lease shall be used for.


Example:

"00:11:22:33:44:55"

Type: integer

The offset of the IP that shall be used in relation to the first IP in the available range.


Example:

10

Type: stringFormat: uc-timeout Default: "6h"

How long the lease is valid before a RENEW muss ne issued.

Type: boolean Default: true

Shall the hosts hostname be made available locally via DNS.

Type: object

This section describes the IPv6 properties of a logical interface.

Type: enum (of string)

This option defines the method by which the IPv6 subnet of the interface is acquired. In static addressing mode, the specified subnet and gateway, if any, are configured on the interface in a fixed manner. Also - if a prefix size hint is specified - a prefix of the given size is allocated from each upstream received prefix delegation pool and assigned to the interface. In dynamic addressing mode, a DHCPv6 client will be launched to obtain IPv6 prefixes for the interface itself and for downstream delegation. Note that dynamic addressing usually only ever makes sense on upstream interfaces.

Must be one of:

  • "dynamic"
  • "static"

Type: stringFormat: uc-cidr6

This option defines a static IPv6 prefix in CIDR notation to set on the logical interface. A special notation "auto/64" can be used, causing the configuration agent to automatically allocate a suitable prefix from the IPv6 address pool specified in globals.ipv6-network. This property only applies to static addressing mode. Note that this is usually not needed due to DHCPv6-PD assisted prefix assignment.


Example:

"auto/64"

Type: stringFormat: ipv6

This option defines the static IPv6 gateway of the logical interface. It only applies to static addressing mode. Note that this is usually not needed due to DHCPv6-PD assisted prefix assignment.


Example:

"2001:db8:123:456::1"

Type: integer

For dynamic addressing interfaces, this property specifies the prefix size to request from an upstream DHCPv6 server through prefix delegation. For static addressing interfaces, it specifies the size of the sub-prefix to allocate from the upstream-received delegation prefixes for assignment to the logical interface.

Value must be greater or equal to 0 and lesser or equal to 64

Type: object

This section describes the DHCPv6 server configuration

Type: enum (of string)

Specifies the DHCPv6 server operation mode. When set to "stateless", the system will announce router advertisements only, without offering stateful DHCPv6 service. When set to "stateful", emitted router advertisements will instruct clients to obtain a DHCPv6 lease. When set to "hybrid", clients can freely chose whether to self-assign a random address through SLAAC, whether to request an address via DHCPv6, or both. For maximum compatibility with different clients, it is recommended to use the hybrid mode. The special mode "relay" will instruct the unit to act as DHCPv6 relay between this interface and any of the IPv6 interfaces in "upstream" mode.

Must be one of:

  • "hybrid"
  • "stateless"
  • "stateful"
  • "relay"

Type: array of string

Overrides the DNS server to announce in DHCPv6 and RA messages. By default, the device will announce its own local interface address as DNS server, essentially acting as proxy for downstream clients. By specifying a non-empty list of IPv6 addresses here, this default behaviour can be overridden.

Each item of this array must be:

Type: stringFormat: ipv6

Type: stringFormat: uc-cidr6 Default: "::/0"

Selects a specific downstream prefix or a number of downstream prefix ranges to announce in DHCPv6 and RA messages. By default, all prefixes configured on a given downstream interface are advertised. By specifying an IPv6 prefix in CIDR notation here, only prefixes covered by this CIDR are selected.

Type: object

All properties whose name matches the following regular expression must respect the following conditions

Property name regular expression: .+
Type: object

A device has certain properties that describe its identity and location. These properties are described inside this object.

Type: enum (of string) Default: "user-defined"

An SSID can have a special purpose such as the hidden on-boarding BSS. All purposes other than "user-defined" are static pre-defined configurations.

Must be one of:

  • "user-defined"
  • "system-defaults"

Type: enum (of string) Default: "manual"

The encryption/authentication method used by this BSS.

Must be one of:

  • "manual"
  • "none"
  • "compatibility"
  • "maximum"
  • "enterprise"
  • "opportunistic"

Type: string

The broadcasted SSID of the wireless network and for for managed mode the SSID of the network you’re connecting to

Must be at least 1 characters long

Must be at most 32 characters long

Type: array of string

The list of radios hat the SSID should be broadcasted on. The configuration layer will use the first matching phy/band.

Each item of this array must be:

Type: enum (of string) Default: "ap"

Selects the operation mode of the wireless network interface controller.

Must be one of:

  • "ap"
  • "sta"
  • "mesh"
  • "wds-ap"
  • "wds-sta"
  • "wds-repeater"

Type: stringFormat: uc-mac

Override the BSSID of the network, only applicable in adhoc or sta mode.

Type: boolean

Disables the broadcasting of beacon frames if set to 1 and,in doing so, hides the ESSID.

Type: boolean

Isolates wireless clients from each other on this BSS.

Type: boolean

Convert multicast traffic to unicast on this BSS.

Type: array of string

The services that shall be offered on this logical interface. These are just strings such as "wifi-steering"

Each item of this array must be:

Type: string

Example:

"wifi-steering"

Type: boolean Default: false

Proxy ARP is the technique in which the host router, answers ARP requests intended for another machine.

Type: string

Type: integer Default: 20

The maximum interval for FILS discovery announcement frames. This is a condensed beacon used in 6GHz channels for passive BSS discovery.

Value must be lesser or equal to 20

Type: object

A device has certain properties that describe its identity and location. These properties are described inside this object.

Type: enum (of string)

The wireless encryption protocol that shall be used for this BSS

Must be one of:

  • "none"
  • "owe"
  • "owe-transition"
  • "psk"
  • "psk2"
  • "psk-mixed"
  • "wpa"
  • "wpa2"
  • "wpa-mixed"
  • "sae"
  • "sae-mixed"
  • "wpa3"
  • "wpa3-192"
  • "wpa3-mixed"

Example:

"psk2"

Type: string

The Pre Shared Key (PSK) that is used for encryption on the BSS when using any of the WPA-PSK modes.

Must be at least 8 characters long

Must be at most 63 characters long

Type: enum (of string) Default: "disabled"

Enable 802.11w Management Frame Protection (MFP) for this BSS.

Must be one of:

  • "disabled"
  • "optional"
  • "required"

Type: boolean Default: true

PMKSA created through EAP authentication and RSN preauthentication can be cached.

Type: string

The name of the radius server that shall be used. The settings reside inside the configurations block of the config.

Type: array

Each item of this array must be:

Type: object

A SSID can have multiple PSK/VID mappings. Each one of them can be bound to a specific MAC or be a wildcard.

Type: stringFormat: uc-mac

Type: string

The Pre Shared Key (PSK) that is used for encryption on the BSS when using any of the WPA-PSK modes.

Must be at least 8 characters long

Must be at most 63 characters long

Type: integer

Value must be lesser or equal to 4096


Examples:

3
100
200
4094

Type: object

The UE rate-limiting configuration of this BSS.

Type: integer Default: 0

The ingress rate to which hosts will be shaped. Values are in Mbps

Type: integer Default: 0

The egress rate to which hosts will be shaped. Values are in Mbps


Type: object

Enable 802.11r Fast Roaming for this BSS.

Type: enum (of string) Default: "air"

Shall the pre authenticated message exchange happen over the air or distribution system.

Must be one of:

  • "air"
  • "ds"

Type: boolean Default: true

Whether to generate FT response locally for PSK networks. This avoids use of PMK-R1 push/pull from other APs with FT-PSK networks.

Type: string

Mobility Domain identifier (dot11FTMobilityDomainID, MDID).

Must be at least 4 characters long

Must be at most 4 characters long


Example:

"abcd"
Type: boolean

Enable 802.11r Fast Roaming for this BSS. This will enable "auto" mode which will work for most scenarios.

Type: object

The MAC ACL that defines which clients are allowed or denied to associations.

Type: enum (of string)

Defines if this is an allow or deny list.

Must be one of:

  • "allow"
  • "deny"

Type: array of string

Association requests will be denied if the rssi is below this threshold.

Each item of this array must be:

Type: array of string

This array allows passing raw hostapd.conf lines.

Each item of this array must be:

Type: string

Examples:

"ap_table_expiration_time=3600"
"device_type=6-0050F204-1"
"ieee80211h=1"
"rssi_ignore_probe_request=-75"
"time_zone=EST5"
"uuid=12345678-9abc-def0-1234-56789abcdef0"
"venue_url=1:http://www.example.com/info-eng"
"wpa_deny_ptk0_rekey=0"

Type: object

This Object defines the properties of a mesh interface overlay.

Type: const

This field must be set to mesh.

Specific value: "mesh-batman"

Type: object

This section describes all of the services that may be present on the AP. Each service is then referenced via its name inside an interface, ssid, ...

Type: object

This section can be used to setup a SSH server on the AP.

Type: integer Default: 22

This option defines which port the SSH server shall be available on.

Value must be lesser or equal to 65535

Type: array of string

This allows the upload of public ssh keys. Keys need to be seperated by a newline.

Each item of this array must be:

Type: string

Examples:

"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC0ghdSd2D2y08TFowZLMZn3x1/Djw3BkNsIeHt/Z+RaXwvfV1NQAnNdaOngMT/3uf5jZtYxhpl+dbZtRhoUPRvKflKBeFHYBqjZVzD3r4ns2Ofm2UpHlbdOpMuy9oeTSCeF0IKZZ6szpkvSirQogeP2fe9KRkzQpiza6YxxaJlWw== user@example"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ4FDjyCsg+1Mh2C5G7ibR3z0Kw1dU57kfXebLRwS6CL bob@work"
"ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBP/JpJ/KHtKKImzISBDwLO0/EwytIr4pGZQXcP6GCSHchLMyfjf147KNlF9gC+3FibzqKH02EiQspVhRgfuK6y0= alice@home"

Type: boolean Default: true

This option defines if password authentication shall be enabled. If set to false, only ssh key based authentication is possible.

Type: object

This section can be used to setup the mdns servers.

Type: array of string

This is an array of additional hostnames that the AP shall announce.

Each item of this array must be:

Type: object

This section can be used to enable lldp on network ports..

Type: string

The name that gets annouced.

Type: string

The description that gets annouced.

Type: object

This section can be used to setup the upstream NTP servers.

Type: array of string

This is an array of URL/IP of the upstream NTP servers that the unit shall use to acquire its current time.

Each item of this array must be:

Type: stringFormat: uc-host

Example:

"0.openwrt.pool.ntp.org"

Type: object

This section can be used to configure remote syslog support.

Type: stringFormat: uc-host

IP address of a syslog server to which the log messages should be sent in addition to the local destination.


Example:

"192.168.1.10"

Type: integer

Port number of the remote syslog server specified with log_ip.

Value must be greater or equal to 100 and lesser or equal to 65535


Example:

2000

Type: enum (of string) Default: "udp"

Sets the protocol to use for the connection, either tcp or udp.

Must be one of:

  • "tcp"
  • "udp"

Type: integer Default: 1000

Size of the file based log buffer in KiB. This value is used as the fallback value for logbuffersize if the latter is not specified.

Value must be greater or equal to 32

Type: integer Default: 7

Filter messages by their log priority. the value maps directly to the 0-7 range used by syslog.

Value must be greater or equal to 0

Type: object

This section allows enabling wired ieee802.1X

Type: enum (of string)

This field must be set to 'radius or user'

Must be one of:

  • "radius"
  • "user"

Type: array

Specifies a collection of local EAP user/psk/vid triplets.

Each item of this array must be:

Type: object

Specifies the information about radius account authentication and accounting

Type: string

NAS-Identifier string for RADIUS messages. When used, this should be unique to the NAS within the scope of the RADIUS server.

Type: string

The URI of our Radius server.


Example:

"192.168.1.10"

Type: integer

The network port of our Radius server.

Value must be greater or equal to 1024 and lesser or equal to 65535


Example:

1812

Type: string

The shared Radius authentication secret.


Example:

"secret"

Type: string

The URI of our Radius server.


Example:

"192.168.1.10"

Type: integer

The network port of our Radius server.

Value must be greater or equal to 1024 and lesser or equal to 65535


Example:

1813

Type: string

The shared Radius accounting secret.


Example:

"secret"

Type: string

The URI of our Radius server.


Example:

"192.168.1.10"

Type: integer

The network port of our Radius server.

Value must be greater or equal to 1024 and lesser or equal to 65535


Example:

1814

Type: string

The shared Radius accounting secret.


Example:

"secret"

Type: boolean

Trigger mac-auth when a new ARP is learned.