fortios_firewall_policy6

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_firewall_policy6

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

Name	Type	Required	Default
access_token	str
enable_log	bool		`false`
firewall_policy6	dict
member_path	str
member_state	str
state	str	yes
vdom	str		`root`

Example

yaml

# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_policy6:
    access_token: '{{ fortios_access_token }}'
    firewall_policy6:
        action: accept
        anti_replay: enable
        app_category:
            - id: "6"
        app_group:
            - name: default_name_8 (source application.group.name)
        application:
            - id: "10"
        auto_asic_offload: enable
        devices:
            - name: default_name_19 (source user.device.alias user.device-group.name user.device-category.name)
        diffserv_forward: enable
        diffserv_reverse: enable
        dscp_match: enable
        dscp_negate: enable
        dsri: enable
        dstaddr:
            - name: default_name_31 (source firewall.address6.name firewall.addrgrp6.name firewall.vip6.name firewall.vipgrp6.name system .external-resource.name)
        dstaddr_negate: enable
        dstintf:
            - name: default_name_34 (source system.interface.name system.zone.name)
        firewall_session_dirty: check-all
        fixedport: enable
        fsso_groups:
            - name: default_name_39 (source user.adgrp.name)
        groups:
            - name: default_name_42 (source user.group.name)
        http_policy_redirect: enable
        inbound: enable
        inspection_mode: proxy
        ippool: enable
        logtraffic: all
        logtraffic_start: enable
        name: default_name_53
        nat: enable
        natinbound: enable
        natoutbound: enable
        np_acceleration: enable
        outbound: enable
        policyid: 1
        poolname:
            - name: default_name_62 (source firewall.ippool6.name)
        profile_type: single
        rsso: enable
        send_deny_packet: enable
        service:
            - name: default_name_71 (source firewall.service.custom.name firewall.service.group.name)
        service_negate: enable
        srcaddr:
            - name: default_name_76 (source firewall.address6.name firewall.addrgrp6.name system.external-resource.name)
        srcaddr_negate: enable
        srcintf:
            - name: default_name_79 (source system.zone.name system.interface.name)
        ssh_policy_redirect: enable
        ssl_mirror: enable
        ssl_mirror_intf:
            - name: default_name_84 (source system.zone.name system.interface.name)
        status: enable
        tcp_mss_receiver: "32767"
        tcp_mss_sender: "32767"
        tcp_session_without_syn: all
        timeout_send_rst: enable
        tos_negate: enable
        url_category:
            - id: "97"
        users:
            - name: default_name_99 (source user.local.name)
        utm_status: enable
        vlan_cos_fwd: "3"
        vlan_cos_rev: "3"
        webcache: enable
        webcache_https: disable
    state: present
    vdom: root
  name: Configure IPv6 policies.