fortios_user_radius
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_user_radius
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| user_radius | dict | |||
| vdom | str | root |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_user_radius:
access_token: '{{ fortios_access_token }}'
state: present
user_radius:
account_key_cert_field: othername
account_key_processing: same
accounting_server:
- id: "6"
interface_select_method: auto
port: "0"
server: 192.168.100.40
source_ip: 84.230.14.43
status: enable
vrf_select: "0"
acct_all_servers: enable
acct_interim_interval: "0"
all_usergroup: disable
auth_type: auto
call_station_id_type: legacy
class:
- name: default_name_22
delimiter: plus
group_override_attr_type: filter-Id
h3c_compatibility: enable
interface_select_method: auto
mac_case: uppercase
mac_password_delimiter: hyphen
mac_username_delimiter: hyphen
name: default_name_32
nas_id_type: legacy
password_encoding: auto
password_renewal: enable
radius_coa: enable
radius_port: "0"
require_message_authenticator: enable
rsso: enable
rsso_context_timeout: "28800"
rsso_endpoint_attribute: User-Name
rsso_endpoint_block_attribute: User-Name
rsso_ep_one_ip_only: enable
rsso_flush_ip_session: enable
rsso_log_flags: protocol-error
rsso_log_period: "0"
rsso_radius_response: enable
rsso_radius_server_port: "1813"
rsso_validate_request_secret: enable
server: 192.168.100.40
server_identity_check: enable
source_ip: 84.230.14.43
sso_attribute: User-Name
sso_attribute_value_override: enable
status_ttl: "300"
switch_controller_acct_fast_framedip_detect: "2"
switch_controller_nas_ip_dynamic: enable
switch_controller_service_type: login
timeout: "5"
tls_min_proto_version: default
transport_protocol: udp
use_management_vdom: enable
username_case_sensitive: enable
vrf_select: "0"
vdom: root
name: Configure RADIUS server entries.