fortios_firewall_local_in_policy

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_firewall_local_in_policy

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

Name	Type	Required	Default
access_token	str
enable_log	bool		`false`
firewall_local_in_policy	dict
member_path	str
member_state	str
state	str	yes
vdom	str		`root`

Example

yaml

# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_local_in_policy:
    access_token: '{{ fortios_access_token }}'
    firewall_local_in_policy:
        action: accept
        dstaddr:
            - name: default_name_6 (source firewall.address.name firewall.addrgrp.name system.external-resource.name)
        dstaddr_negate: enable
        ha_mgmt_intf_only: enable
        internet_service_src: enable
        internet_service_src_custom:
            - name: default_name_11 (source firewall.internet-service-custom.name)
        internet_service_src_custom_group:
            - name: default_name_13 (source firewall.internet-service-custom-group.name)
        internet_service_src_fortiguard:
            - name: default_name_15 (source firewall.internet-service-fortiguard.name)
        internet_service_src_group:
            - name: default_name_17 (source firewall.internet-service-group.name)
        internet_service_src_name:
            - name: default_name_19 (source firewall.internet-service-name.name)
        internet_service_src_negate: enable
        intf_dict:
            - name: default_name_23 (source system.zone.name system.sdwan.zone.name system.interface.name)
        logtraffic: enable
        policyid: 1
        service:
            - name: default_name_28 (source firewall.service.custom.name firewall.service.group.name)
        service_negate: enable
        srcaddr:
            - name: default_name_31 (source firewall.address.name firewall.addrgrp.name system.external-resource.name)
        srcaddr_negate: enable
        status: enable
        virtual_patch: enable
    state: present
    vdom: root
  name: Configure user defined IPv4 local-in policies.