fortios_firewall_gtp
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_firewall_gtp
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| firewall_gtp | dict | |||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_gtp:
access_token: '{{ fortios_access_token }}'
firewall_gtp:
apn:
- action: allow
apnmember:
- name: default_name_7 (source gtp.apn.name gtp.apngrp.name)
id: "8"
selection_mode: ms
apn_filter: enable
comment: Comment.
context_id: "696"
control_plane_message_rate_limit: "0"
default_apn_action: allow
default_imsi_action: allow
default_ip_action: allow
default_noip_action: allow
default_policy_action: allow
denied_log: enable
echo_request_interval: "0"
echo_requires_path_in_use: enable
extension_log: enable
forwarded_log: enable
gtp_in_gtp: allow
gtpu_denied_log: enable
gtpu_forwarded_log: enable
gtpu_log_freq: "0"
gtpv0: allow
half_close_timeout: "10"
half_open_timeout: "300"
ie_remove_policy:
- id: "41"
remove_ies: apn-restriction
ie_remover: enable
ie_validation:
apn_restriction: enable
charging_ID: enable
charging_gateway_addr: enable
end_user_addr: enable
gsn_addr: enable
imei: enable
imsi: enable
mm_context: enable
ms_tzone: enable
ms_validated: enable
msisdn: enable
nsapi: enable
pdp_context: enable
qos_profile: enable
rai: enable
rat_type: enable
reordering_required: enable
selection_mode: enable
uli: enable
imsi:
- action: allow
apnmember:
- name: default_name_71 (source gtp.apn.name gtp.apngrp.name)
id: "72"
selection_mode: ms
imsi_filter: enable
invalid_reserved_field: allow
ip_filter: enable
ip_policy:
- action: allow
id: "86"
log_freq: "0"
log_gtpu_limit: "0"
max_message_length: "1452"
message_rate_limit:
create_aa_pdp_request: "0"
create_aa_pdp_response: "0"
create_mbms_request: "0"
create_mbms_response: "0"
create_pdp_request: "0"
create_pdp_response: "0"
delete_aa_pdp_request: "0"
delete_aa_pdp_response: "0"
delete_mbms_request: "0"
delete_mbms_response: "0"
delete_pdp_request: "0"
delete_pdp_response: "0"
echo_reponse: "0"
echo_request: "0"
echo_response: "0"
error_indication: "0"
failure_report_request: "0"
failure_report_response: "0"
fwd_reloc_complete_ack: "0"
fwd_relocation_complete: "0"
fwd_relocation_request: "0"
fwd_relocation_response: "0"
fwd_srns_context: "0"
fwd_srns_context_ack: "0"
g_pdu: "0"
identification_request: "0"
identification_response: "0"
mbms_de_reg_request: "0"
mbms_de_reg_response: "0"
mbms_notify_rej_request: "0"
mbms_notify_rej_response: "0"
mbms_notify_request: "0"
mbms_notify_response: "0"
mbms_reg_request: "0"
mbms_reg_response: "0"
mbms_ses_start_request: "0"
mbms_ses_start_response: "0"
mbms_ses_stop_request: "0"
mbms_ses_stop_response: "0"
note_ms_request: "0"
note_ms_response: "0"
pdu_notify_rej_request: "0"
pdu_notify_rej_response: "0"
pdu_notify_request: "0"
pdu_notify_response: "0"
ran_info: "0"
relocation_cancel_request: "0"
relocation_cancel_response: "0"
send_route_request: "0"
send_route_response: "0"
sgsn_context_ack: "0"
sgsn_context_request: "0"
sgsn_context_response: "0"
support_ext_hdr_notify: "0"
update_mbms_request: "0"
update_mbms_response: "0"
update_pdp_request: "0"
update_pdp_response: "0"
version_not_support: "0"
message_rate_limit_v0:
create_pdp_request: "0"
delete_pdp_request: "0"
echo_request: "0"
message_rate_limit_v1:
create_pdp_request: "0"
delete_pdp_request: "0"
echo_request: "0"
message_rate_limit_v2:
create_session_request: "0"
delete_session_request: "0"
echo_request: "0"
min_message_length: "0"
miss_must_ie: allow
monitor_mode: enable
name: default_name_171
noip_filter: enable
noip_policy:
- action: allow
end: "0"
id: "176"
start: "0"
type: etsi
out_of_state_ie: allow
out_of_state_message: allow
per_apn_shaper:
- id: "183"
rate_limit: "0"
version: "1"
policy:
- action: allow
apn_sel_mode: ms
apnmember:
- name: default_name_190 (source gtp.apn.name gtp.apngrp.name)
id: "191"
max_apn_restriction: all
messages: create-req
rat_type: any
policy_filter: enable
policy_v2:
- action: allow
apn_sel_mode: ms
apnmember:
- name: default_name_207 (source gtp.apn.name gtp.apngrp.name)
id: "208"
max_apn_restriction: all
messages: create-ses-req
rat_type: any
port_notify: "21123"
rate_limit_mode: per-profile
rate_limited_log: enable
rate_sampling_interval: "1"
remove_if_echo_expires: enable
remove_if_recovery_differ: enable
reserved_ie: allow
send_delete_when_timeout: enable
send_delete_when_timeout_v2: enable
spoof_src_addr: allow
state_invalid_log: enable
sub_second_interval: "0.5"
sub_second_sampling: enable
traffic_count_log: enable
tunnel_limit: "0"
tunnel_limit_log: enable
tunnel_timeout: "86400"
unknown_version_action: allow
user_plane_message_rate_limit: "0"
warning_threshold: "0"
state: present
vdom: root
name: Configure GTP.