fortios_firewall_shaping_policy
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_firewall_shaping_policy
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| action | str | |||
| after | str | |||
| before | str | |||
| enable_log | bool | false | ||
| firewall_shaping_policy | dict | |||
| member_path | str | |||
| member_state | str | |||
| self | str | |||
| state | str | |||
| vdom | str | root |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_shaping_policy:
access_token: '{{ fortios_access_token }}'
firewall_shaping_policy:
app_category:
- id: "4"
app_group:
- name: default_name_6 (source application.group.name)
application:
- id: "8"
class_id: "0"
comment: Comments.
diffserv_forward: enable
diffserv_reverse: enable
dstaddr:
- name: default_name_18 (source firewall.address.name firewall.addrgrp.name)
dstaddr6:
- name: default_name_20 (source firewall.address6.name firewall.addrgrp6.name)
dstintf:
- name: default_name_22 (source system.interface.name system.zone.name system.sdwan.zone.name)
groups:
- name: default_name_24 (source user.group.name)
id: "25"
internet_service: enable
internet_service_custom:
- name: default_name_28 (source firewall.internet-service-custom.name)
internet_service_custom_group:
- name: default_name_30 (source firewall.internet-service-custom-group.name)
internet_service_fortiguard:
- name: default_name_32 (source firewall.internet-service-fortiguard.name)
internet_service_group:
- name: default_name_34 (source firewall.internet-service-group.name)
internet_service_id:
- id: "36"
internet_service_name:
- name: default_name_38 (source firewall.internet-service-name.name)
internet_service_src: enable
internet_service_src_custom:
- name: default_name_41 (source firewall.internet-service-custom.name)
internet_service_src_custom_group:
- name: default_name_43 (source firewall.internet-service-custom-group.name)
internet_service_src_fortiguard:
- name: default_name_45 (source firewall.internet-service-fortiguard.name)
internet_service_src_group:
- name: default_name_47 (source firewall.internet-service-group.name)
internet_service_src_id:
- id: "49"
internet_service_src_name:
- name: default_name_51 (source firewall.internet-service-name.name)
ip_version: "4"
name: default_name_53
service:
- name: default_name_57 (source firewall.service.custom.name firewall.service.group.name)
srcaddr:
- name: default_name_59 (source firewall.address.name firewall.addrgrp.name)
srcaddr6:
- name: default_name_61 (source firewall.address6.name firewall.addrgrp6.name)
srcintf:
- name: default_name_63 (source system.interface.name system.zone.name system.sdwan.zone.name)
status: enable
tos_negate: enable
traffic_type: forwarding
url_category:
- id: "72"
users:
- name: default_name_74 (source user.local.name)
state: present
vdom: root
name: Configure shaping policies.