fortios_switch_controller_managed_switch

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_switch_controller_managed_switch

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

Name	Type	Required	Default
access_token	str
enable_log	bool		`false`
member_path	str
member_state	str
state	str	yes
switch_controller_managed_switch	dict
vdom	str		`root`

Example

yaml

# Define these inventory variables: fortios_access_token, fortios_managed_switch_serial.
- fortinet.fortios.fortios_switch_controller_managed_switch:
    access_token: '{{ fortios_access_token }}'
    state: present
    switch_controller_managed_switch:
        delayed_restart_trigger: "0"
        dhcp_server_access_list: global
        dhcp_snooping_static_client:
            - name: default_name_25
        directly_connected: "0"
        dynamically_discovered: "0"
        firmware_provision: enable
        firmware_provision_latest: disable
        fsw_wan1_admin: discovered
        fsw_wan2_admin: discovered
        igmp_snooping:
            aging_time: "300"
            flood_unknown_multicast: enable
            local_override: enable
        l3_discovered: "0"
        max_allowed_trunk_members: "0"
        mclag_igmp_snooping_aware: enable
        mgmt_mode: "0"
        mirror:
            - name: default_name_62
              src_egress:
                - name: default_name_64
              src_ingress:
                - name: default_name_66
              status: active
              switching_packet: enable
        name: default_name_69
        override_snmp_community: enable
        override_snmp_sysinfo: disable
        override_snmp_trap_threshold: enable
        override_snmp_user: enable
        poe_detection_type: "0"
        poe_lldp_detection: enable
        poe_pre_standard_detection: enable
        pre_provisioned: "0"
        ptp_status: disable
        purdue_level: "1"
        qos_drop_policy: taildrop
        qos_red_probability: "12"
        radius_nas_ip_override: disable
        remote_log:
            - csv: enable
              facility: kernel
              name: default_name_206
              port: "514"
              server: 192.168.100.40
              severity: emergency
              status: enable
        route_offload: disable
        route_offload_mclag: disable
        router_static:
            - blackhole: disable
              comment: Comment.
              distance: "10"
              dynamic_gateway: disable
              id: "224"
              status: disable
        router_vrf:
            - name: default_name_229
              vrfid: "0"
        settings_802_1X:
            link_down_auth: set-unauth
            local_override: enable
            mab_reauth: disable
            mac_called_station_delimiter: colon
            mac_calling_station_delimiter: colon
            mac_case: lowercase
            mac_password_delimiter: colon
            mac_username_delimiter: colon
            max_reauth_attempt: "3"
            reauth_period: "60"
            tx_period: "30"
        snmp_community:
            - events: cpu-high
              hosts:
                - id: "236"
              id: "238"
              name: default_name_239
              query_v1_port: "161"
              query_v1_status: disable
              query_v2c_port: "161"
              query_v2c_status: disable
              status: disable
              trap_v1_lport: "162"
              trap_v1_rport: "162"
              trap_v1_status: disable
              trap_v2c_lport: "162"
              trap_v2c_rport: "162"
              trap_v2c_status: disable
        snmp_sysinfo:
            status: disable
        snmp_trap_threshold:
            trap_high_cpu_threshold: "80"
            trap_log_full_threshold: "90"
            trap_low_memory_threshold: "80"
        snmp_user:
            - auth_proto: md5
              name: default_name_264
              priv_proto: aes128
              queries: disable
              query_port: "161"
              security_level: no-auth-no-priv
        static_mac:
            - id: "273"
              type: static
        storm_control:
            broadcast: enable
            burst_size_level: "0"
            local_override: enable
            rate: "500"
            unknown_multicast: enable
            unknown_unicast: enable
        stp_instance:
            - id: "286"
              priority: "0"
        stp_settings:
            forward_time: "15"
            hello_time: "2"
            local_override: enable
            max_age: "20"
            max_hops: "20"
            name: default_name_294
            pending_timer: "4"
            revision: "0"
            status: enable
        switch_id: '{{ fortios_managed_switch_serial }}'
        switch_log:
            local_override: enable
            severity: emergency
            status: enable
        switch_stp_settings:
            status: enable
        system_dhcp_server:
            - dns_service: local
              id: "314"
              ip_range:
                - id: "318"
              lease_time: "604800"
              ntp_service: local
              options:
                - code: "0"
                  id: "328"
                  type: hex
              status: disable
        system_interface:
            - allowaccess: ping
              mode: static
              name: default_name_339
              status: disable
              type: vlan
        type: virtual
        version: "0"
    vdom: root
  name: Configure FortiSwitch devices that are managed by this FortiGate.