fortios_firewall_central_snat_map

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_firewall_central_snat_map

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

Name	Type	Default
access_token	str
action	str
after	str
before	str
enable_log	bool	`false`
firewall_central_snat_map	dict
member_path	str
member_state	str
self	str
state	str
vdom	str	`root`

Example

yaml

# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_central_snat_map:
    access_token: '{{ fortios_access_token }}'
    firewall_central_snat_map:
        dst_addr:
            - name: default_name_5 (source firewall.address.name firewall.addrgrp.name)
        dst_addr6:
            - name: default_name_7 (source firewall.address6.name firewall.addrgrp6.name)
        dstintf:
            - name: default_name_10 (source system.interface.name system.zone.name system.sdwan.zone.name)
        nat: disable
        nat_ippool:
            - name: default_name_13 (source firewall.ippool.name)
        nat_ippool6:
            - name: default_name_15 (source firewall.ippool6.name)
        nat46: enable
        nat64: enable
        orig_addr:
            - name: default_name_20 (source firewall.address.name firewall.addrgrp.name system.external-resource.name)
        orig_addr6:
            - name: default_name_22 (source firewall.address6.name firewall.addrgrp6.name system.external-resource.name)
        policyid: 1
        port_preserve: enable
        port_random: enable
        protocol: "0"
        srcintf:
            - name: default_name_29 (source system.interface.name system.zone.name system.sdwan.zone.name)
        status: enable
        type: ipv4
    state: present
    vdom: root
  name: Configure IPv4 and IPv6 central SNAT policies.