fortios_system_np6
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_system_np6
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| system_np6 | dict | |||
| vdom | str | root |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_system_np6:
access_token: '{{ fortios_access_token }}'
state: present
system_np6:
fastpath: disable
fp_anomaly:
icmp_csum_err: drop
icmp_frag: allow
icmp_land: allow
ipv4_csum_err: drop
ipv4_land: allow
ipv4_optlsrr: allow
ipv4_optrr: allow
ipv4_optsecurity: allow
ipv4_optssrr: allow
ipv4_optstream: allow
ipv4_opttimestamp: allow
ipv4_proto_err: allow
ipv4_unknopt: allow
ipv6_daddr_err: allow
ipv6_land: allow
ipv6_optendpid: allow
ipv6_opthomeaddr: allow
ipv6_optinvld: allow
ipv6_optjumbo: allow
ipv6_optnsap: allow
ipv6_optralert: allow
ipv6_opttunnel: allow
ipv6_proto_err: allow
ipv6_saddr_err: allow
ipv6_unknopt: allow
tcp_csum_err: drop
tcp_fin_noack: allow
tcp_fin_only: allow
tcp_land: allow
tcp_no_flag: allow
tcp_syn_data: allow
tcp_syn_fin: allow
tcp_winnuke: allow
udp_csum_err: drop
udp_land: allow
garbage_session_collector: disable
hpe:
arp_max: "200000"
enable_shaper: disable
esp_max: "200000"
icmp_max: "200000"
ip_frag_max: "200000"
ip_others_max: "200000"
l2_others_max: "200000"
pri_type_max: "200000"
sctp_max: "200000"
tcp_max: "600000"
tcpfin_rst_max: "600000"
tcpsyn_ack_max: "600000"
tcpsyn_max: "600000"
udp_max: "600000"
ipsec_ob_hash_function: global-hash
ipsec_outbound_hash: disable
low_latency_mode: disable
name: default_name_59
per_session_accounting: disable
session_collector_interval: "64"
session_timeout_fixed: disable
session_timeout_interval: "40"
session_timeout_random_range: "8"
vdom: root
name: Configure NP6 attributes.