fortios_vpn_ipsec_phase1
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_vpn_ipsec_phase1
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root | ||
| vpn_ipsec_phase1 | dict |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_vpn_ipsec_phase1:
access_token: '{{ fortios_access_token }}'
state: present
vdom: root
vpn_ipsec_phase1:
acct_verify: enable
add_gw_route: enable
add_route: disable
addke1: "0"
addke2: "0"
addke3: "0"
addke4: "0"
addke5: "0"
addke6: "0"
addke7: "0"
assign_ip: disable
assign_ip_from: range
authmethod: psk
authmethod_remote: psk
auto_negotiate: enable
auto_transport_threshold: "15"
azure_ad_autoconnect: enable
cert_id_validation: enable
cert_peer_username_strip: disable
cert_peer_username_validation: none
cert_trust_store: local
certificate:
- name: default_name_31 (source vpn.certificate.local.name)
childless_ike: enable
client_auto_negotiate: disable
client_keep_alive: disable
client_resume: enable
client_resume_interval: "7200"
dev_id_notification: disable
dhgrp: "1"
digital_signature_auth: enable
distance: "15"
dns_mode: manual
dpd: disable
dpd_retrycount: "3"
eap: enable
eap_cert_auth: enable
eap_identity: use-id-payload
ems_sn_check: enable
enforce_unique_id: disable
esn: require
exchange_fgt_device_id: enable
fallback_tcp_threshold: "15"
fec_base: "10"
fec_codec: rs
fec_egress: enable
fec_ingress: enable
fec_receive_timeout: "50"
fec_redundant: "1"
fec_send_timeout: "5"
fgsp_sync: enable
forticlient_enforcement: enable
fortinet_esp: enable
fragmentation: enable
fragmentation_mtu: "1200"
group_authentication: enable
ha_sync_esp_seqno: enable
idle_timeout: enable
idle_timeoutinterval: "15"
ike_version: "1"
inbound_dscp_copy: enable
include_local_lan: disable
ip_delay_interval: "0"
ipv4_exclude_range:
- id: "93"
ipv6_auto_linklocal: enable
ipv6_exclude_range:
- id: "109"
ipv6_prefix: "128"
keepalive: "10"
keylife: "86400"
link_cost: "0"
localid_type: auto
loopback_asymroute: enable
mesh_selector_type: disable
mode: aggressive
mode_cfg: disable
mode_cfg_allow_client_selector: disable
name: default_name_128
nattraversal: enable
negotiate_timeout: "30"
network_id: "0"
network_overlay: disable
npu_offload: enable
peertype: any
ppk: disable
priority: "1"
proposal: des-md5
qkd: disable
qkd_hybrid: disable
reauth: disable
rekey: enable
remote_gw_match: any
remote_gw_ztna_tags:
- name: default_name_157 (source firewall.address.name firewall.addrgrp.name)
remote_gw6_match: any
rsa_signature_format: pkcs1
rsa_signature_hash_override: enable
save_password: disable
send_cert_chain: enable
shared_idle_timeout: enable
signature_hash_alg: sha1
suite_b: disable
transport: udp
type: static
unity_support: disable
wizard_type: custom
xauthtype: disable
name: Configure VPN remote gateway.