createOrgSecurityPolicies

POST https://{{host}}/api/v1/orgs/:org_id/secpolicies

Body Parameters

NOTE: specifically, enable_wireless_bridging allows forwarding of DHCP response to client not associated with the AP

#### RADIUS Parameters Parameter|Type|Description :-------------: |:-------------: |:-------------: Name|Type|Description auth_servers_nasid|string|optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers auth_servers_nasip|string|optional, NAS-IP-ADDRESS to use auth_serverstimeout|int|radius auth session timeout, default is 5 auth_serversretries|int|radius auth session retries, default is 3 authservers|list|list of RADIUS authentication servers, at least one is needed if auth type == eap, order matters where the first one is treated as primary host|string|ip / hostname of RADIUS server port|int|port of RADIUS server, default is 1812 for auth server and 1813 for acct server secret|string|secret of RADIUS server acctservers|list|list of RADIUS accounting servers, optional, order matters where the first one is treated as primary acct_interiminterval|int|how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled coaserver|object|COA (change of authorization) server, optional disable_event_timestampcheck|boolean|whether to disable Event-Timestamp Check, which is used to replay-protection, default is false (i.e. for better security) dynamicvlan|object|for 802.1x enabled|boolean|whether to enable dynamic vlan, default is false type|string|standard (using Tunnel-Private-Group-ID, widely supported), airespace-interface-name (Airespace/Cisco) vlans|object|map between vlanid (as string) to airespace interface names (comma-separated) or null for stndard mapping default_vlan_id|int|vlanid to use when there's no match from RADIUS, default is 999 local_vlan_ids|list|vlanids to be locally bridged radsec|object|RadSec related, once enabled, auth_servers / acct_servers / coaserver will be ignored servername|string|name of the server to verify (against the cacerts in Org Setting) dns_server_rewrite|object|for radiusgroup-based DNS server (rewrite DNS request depending on the Group RADIUS server returns) radius_groups|object|map between radius_group and the desired DNS server (IPv4 only)

Airwatch Parameters

Cisco CWA Parameters

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA for more details.

QoS Parameters

Data Tunnels Parameters

Others Parameters

Data Rates Parameters

Rate Limit Parameters

Request Body

{"name"=>"corporate only", "wlans"=>[{"ssid"=>"office", "band"=>"both", "auth"=>{"type"=>"psk", "pairwise"=>["wpa1-tkip", "wpa2-tkip"]}}, {"ssid"=>"office-guest", "band"=>"5", "auth"=>{"type"=>"open"}}]}