fortios_router_policy

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_router_policy

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

Name	Type	Required	Default
access_token	str
enable_log	bool		`false`
member_path	str
member_state	str
router_policy	dict
state	str	yes
vdom	str		`root`

Example

yaml

# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_router_policy:
    access_token: '{{ fortios_access_token }}'
    router_policy:
        action: deny
        dst_negate: enable
        dstaddr:
            - name: default_name_9 (source firewall.address.name firewall.addrgrp.name)
        end_port: "65535"
        end_source_port: "65535"
        groups:
            - name: default_name_14 (source user.group.name)
        input_device:
            - name: default_name_16 (source system.interface.name)
        input_device_negate: enable
        internet_service_custom:
            - name: default_name_19 (source firewall.internet-service-custom.name)
        internet_service_fortiguard:
            - name: default_name_21 (source firewall.internet-service-fortiguard.name)
        internet_service_id:
            - id: "23"
        protocol: "0"
        seq_num: 1
        src_negate: enable
        srcaddr:
            - name: default_name_31 (source firewall.address.name firewall.addrgrp.name)
        start_port: "0"
        start_source_port: "0"
        status: enable
        users:
            - name: default_name_38 (source user.local.name)
    state: present
    vdom: root
  name: Configure IPv4 routing policies.