fortios_system_sdwan
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_system_sdwan
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| system_sdwan | dict | |||
| vdom | str | root |
Example
yaml
- fortinet.fortios.fortios_system_sdwan:
system_sdwan:
app_perf_log_period: "0"
duplication:
- dstaddr:
- name: default_name_6 (source firewall.address.name firewall.addrgrp.name)
dstaddr6:
- name: default_name_8 (source firewall.address6.name firewall.addrgrp6.name)
dstintf:
- name: default_name_10 (source system.interface.name system.zone.name system.sdwan.zone.name)
id: "11"
packet_de_duplication: enable
packet_duplication: disable
service:
- name: default_name_15 (source firewall.service.custom.name firewall.service.group.name)
service_id:
- id: "17"
sla_match_service: enable
srcaddr:
- name: default_name_20 (source firewall.address.name firewall.addrgrp.name)
srcaddr6:
- name: default_name_22 (source firewall.address6.name firewall.addrgrp6.name)
srcintf:
- name: default_name_24 (source system.interface.name system.zone.name system.sdwan.zone.name)
duplication_max_discrepancy: "250"
duplication_max_num: "2"
fail_alert_interfaces:
- name: default_name_28 (source system.interface.name)
fail_detect: enable
health_check:
- addr_mode: ipv4
agent_probe_timeout: "60000"
bandwidth_weight: "0"
class_id: "0"
detect_mode: active
embed_measured_health: enable
failtime: "5"
fortiguard: disable
ftp_mode: passive
ha_priority: "1"
interval: "500"
jitter_weight: "0"
latency_weight: "0"
members:
- seq_num: 1
mos_codec: g711
name: default_name_55
packet_loss_weight: "0"
packet_size: "124"
port: "0"
probe_count: "30"
probe_packets: disable
probe_timeout: "500"
protocol: ping
quality_measured_method: half-open
recoverytime: "5"
remote_probe_timeout: "5000"
security_mode: none
server: 192.168.100.40
sla:
- custom_profile_threshold: "0"
id: "71"
jitter_threshold: "5"
latency_threshold: "5"
link_cost_factor: latency
packetloss_threshold: "0"
priority_in_sla: "0"
priority_out_sla: "0"
sla_fail_log_period: "0"
sla_id_redistribute: "0"
sla_pass_log_period: "0"
system_dns: disable
threshold_alert_jitter: "0"
threshold_alert_latency: "0"
threshold_alert_packetloss: "0"
threshold_warning_jitter: "0"
threshold_warning_latency: "0"
threshold_warning_packetloss: "0"
update_bgp_route: enable
update_cascade_interface: enable
update_static_route: enable
vrf: "0"
load_balance_mode: source-ip-based
members:
- comment: Comments.
cost: "0"
ingress_spillover_threshold: "0"
priority: "1"
priority_in_sla: "0"
priority_out_sla: "0"
priority6: "1024"
seq_num: 1
spillover_threshold: "0"
status: disable
transport_group: "0"
volume_ratio: "1"
weight: "1"
neighbor_hold_boot_time: "0"
neighbor_hold_down: enable
neighbor_hold_down_time: "0"
service:
- addr_mode: ipv4
agent_exclusive: enable
bandwidth_weight: "0"
comment: Comments.
default: enable
dscp_forward: enable
dscp_reverse: enable
dst:
- name: default_name_199 (source firewall.address.name firewall.addrgrp.name)
dst_negate: enable
dst6:
- name: default_name_202 (source firewall.address6.name firewall.addrgrp6.name)
end_port: "65535"
end_src_port: "65535"
fib_best_match_force: disable
gateway: enable
groups:
- name: default_name_208 (source user.group.name)
hash_mode: round-robin
health_check:
- name: default_name_211 (source system.sdwan.health-check.name)
hold_down_time: "0"
id: "213"
input_device:
- name: default_name_215 (source system.interface.name)
input_device_negate: enable
input_zone:
- name: default_name_218 (source system.sdwan.zone.name)
internet_service: enable
internet_service_app_ctrl:
- id: "221"
internet_service_app_ctrl_category:
- id: "223"
internet_service_app_ctrl_group:
- name: default_name_225 (source application.group.name)
internet_service_custom:
- name: default_name_227 (source firewall.internet-service-custom.name)
internet_service_custom_group:
- name: default_name_229 (source firewall.internet-service-custom-group.name)
internet_service_fortiguard:
- name: default_name_231 (source firewall.internet-service-fortiguard.name)
internet_service_group:
- name: default_name_233 (source firewall.internet-service-group.name)
internet_service_name:
- name: default_name_235 (source firewall.internet-service-name.name)
jitter_weight: "0"
latency_weight: "0"
link_cost_factor: latency
link_cost_threshold: "10"
load_balance: enable
minimum_sla_meet_members: "0"
mode: auto
name: default_name_243
packet_loss_weight: "0"
passive_measurement: enable
priority_members:
- seq_num: 1
priority_zone:
- name: default_name_249 (source system.sdwan.zone.name)
protocol: "0"
quality_link: "0"
role: standalone
route_tag: "0"
shortcut: enable
shortcut_priority: enable
shortcut_stickiness: enable
sla_compare_method: order
sla_stickiness: enable
src:
- name: default_name_263 (source firewall.address.name firewall.addrgrp.name)
src_negate: enable
src6:
- name: default_name_266 (source firewall.address6.name firewall.addrgrp6.name)
standalone_action: enable
start_port: "1"
start_src_port: "1"
status: enable
tie_break: zone
use_shortcut_sla: enable
users:
- name: default_name_276 (source user.local.name)
zone_mode: enable
speedtest_bypass_routing: disable
status: disable
zone:
- advpn_select: enable
minimum_sla_meet_members: "1"
name: default_name_284
service_sla_tie_break: cfg-order
vdom: root
name: Configure redundant Internet connections with multiple outbound links and health-check profiles.