fortios_firewall_vip6
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_firewall_vip6
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| firewall_vip6 | dict | |||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_vip6:
access_token: '{{ fortios_access_token }}'
firewall_vip6:
add_nat64_route: disable
arp_reply: disable
client_cert: disable
color: "0"
comment: Comment.
embedded_ipv4_address: disable
empty_cert_action: accept
h2_support: enable
h3_support: enable
http_cookie_age: "60"
http_cookie_domain_from_host: disable
http_cookie_generation: "0"
http_cookie_share: disable
http_ip_header: enable
http_multiplex: enable
http_redirect: enable
https_cookie_secure: disable
id: "25"
ldb_method: static
max_embryonic_connections: "1000"
monitor:
- name: default_name_33 (source firewall.ldb-monitor.name)
name: default_name_34
nat_source_vip: disable
nat64: disable
nat66: disable
ndp_reply: disable
outlook_web_access: disable
persistence: none
portforward: disable
protocol: tcp
quic:
ack_delay_exponent: "3"
active_connection_id_limit: "2"
active_migration: enable
grease_quic_bit: enable
max_ack_delay: "25"
max_datagram_frame_size: "1500"
max_idle_timeout: "30000"
max_udp_payload_size: "1500"
realservers:
- healthcheck: disable
holddown_interval: "300"
http_host: myhostname
id: "57"
max_connections: "0"
monitor:
- name: default_name_61 (source firewall.ldb-monitor.name)
port: "0"
status: active
translate_host: enable
verify_cert: enable
weight: "1"
server_type: http
src_vip_filter: disable
ssl_accept_ffdhe_groups: enable
ssl_algorithm: high
ssl_certificate_dict:
- name: default_name_75 (source vpn.certificate.local.name)
ssl_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: ssl-3.0
ssl_client_fallback: disable
ssl_client_rekey_count: "0"
ssl_client_renegotiation: allow
ssl_client_session_state_max: "1000"
ssl_client_session_state_timeout: "30"
ssl_client_session_state_type: disable
ssl_dh_bits: "768"
ssl_hpkp: disable
ssl_hpkp_age: "5184000"
ssl_hpkp_include_subdomains: disable
ssl_hsts: disable
ssl_hsts_age: "5184000"
ssl_hsts_include_subdomains: disable
ssl_http_location_conversion: enable
ssl_http_match_host: enable
ssl_max_version: ssl-3.0
ssl_min_version: ssl-3.0
ssl_mode: half
ssl_pfs: require
ssl_send_empty_frags: enable
ssl_server_algorithm: high
ssl_server_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: ssl-3.0
ssl_server_max_version: ssl-3.0
ssl_server_min_version: ssl-3.0
ssl_server_renegotiation: enable
ssl_server_session_state_max: "100"
ssl_server_session_state_timeout: "60"
ssl_server_session_state_type: disable
type: static-nat
user_agent_detect: disable
weblogic_server: disable
websphere_server: disable
state: present
vdom: root
name: Configure virtual IP for IPv6.