fortios_firewall_vip
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_firewall_vip
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| firewall_vip | dict | |||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_vip:
access_token: '{{ fortios_access_token }}'
firewall_vip:
add_nat46_route: disable
arp_reply: disable
client_cert: disable
color: "0"
comment: Comment.
dns_mapping_ttl: "0"
empty_cert_action: accept
extaddr:
- name: default_name_11 (source firewall.address.name firewall.addrgrp.name)
gratuitous_arp_interval: "0"
gslb_hostname: myhostname
gslb_public_ips:
- index: 1
h2_support: enable
h3_support: enable
http_cookie_age: "60"
http_cookie_domain_from_host: disable
http_cookie_generation: "0"
http_cookie_share: disable
http_ip_header: enable
http_multiplex: enable
http_multiplex_max_concurrent_request: "0"
http_multiplex_max_request: "0"
http_multiplex_ttl: "15"
http_redirect: enable
http_supported_max_version: http1
https_cookie_secure: disable
id: "38"
ldb_method: static
max_embryonic_connections: "1000"
monitor:
- name: default_name_48 (source firewall.ldb-monitor.name)
name: default_name_49
nat_source_vip: disable
nat44: disable
nat46: disable
one_click_gslb_server: disable
outlook_web_access: disable
persistence: none
portforward: disable
portmapping_type: 1-to-1
protocol: tcp
quic:
ack_delay_exponent: "3"
active_connection_id_limit: "2"
active_migration: enable
grease_quic_bit: enable
max_ack_delay: "25"
max_datagram_frame_size: "1500"
max_idle_timeout: "30000"
max_udp_payload_size: "1500"
realservers:
- healthcheck: disable
holddown_interval: "300"
http_host: myhostname
id: "74"
max_connections: "0"
monitor:
- name: default_name_78 (source firewall.ldb-monitor.name)
port: "0"
status: active
translate_host: enable
type: ip
verify_cert: enable
weight: "1"
server_type: http
service:
- name: default_name_87 (source firewall.service.custom.name firewall.service.group.name)
src_vip_filter: disable
ssl_accept_ffdhe_groups: enable
ssl_algorithm: high
ssl_certificate_dict:
- name: default_name_97 (source vpn.certificate.local.name)
ssl_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: ssl-3.0
ssl_client_fallback: disable
ssl_client_rekey_count: "0"
ssl_client_renegotiation: allow
ssl_client_session_state_max: "1000"
ssl_client_session_state_timeout: "30"
ssl_client_session_state_type: disable
ssl_dh_bits: "768"
ssl_hpkp: disable
ssl_hpkp_age: "5184000"
ssl_hpkp_include_subdomains: disable
ssl_hsts: disable
ssl_hsts_age: "5184000"
ssl_hsts_include_subdomains: disable
ssl_http_location_conversion: enable
ssl_http_match_host: enable
ssl_max_version: ssl-3.0
ssl_min_version: ssl-3.0
ssl_mode: half
ssl_pfs: require
ssl_send_empty_frags: enable
ssl_server_algorithm: high
ssl_server_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: ssl-3.0
ssl_server_max_version: ssl-3.0
ssl_server_min_version: ssl-3.0
ssl_server_renegotiation: enable
ssl_server_session_state_max: "100"
ssl_server_session_state_timeout: "60"
ssl_server_session_state_type: disable
status: disable
type: static-nat
user_agent_detect: disable
weblogic_server: disable
websphere_server: disable
state: present
vdom: root
name: Configure virtual IP for IPv4.