PARALLAX

fortios_vpn_ipsec_phase1_interface

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_vpn_ipsec_phase1_interface

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

NameTypeRequiredDefaultDescription
access_tokenstr
enable_logboolfalse
member_pathstr
member_statestr
statestryes
vdomstrroot
vpn_ipsec_phase1_interfacedict

Example

yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_vpn_ipsec_phase1_interface:
    access_token: '{{ fortios_access_token }}'
    state: present
    vdom: root
    vpn_ipsec_phase1_interface:
        acct_verify: enable
        add_gw_route: enable
        add_route: disable
        addke1: "0"
        addke2: "0"
        addke3: "0"
        addke4: "0"
        addke5: "0"
        addke6: "0"
        addke7: "0"
        aggregate_member: enable
        aggregate_weight: "1"
        assign_ip: disable
        assign_ip_from: range
        authmethod: psk
        authmethod_remote: psk
        auto_discovery_crossover: allow
        auto_discovery_dialup_placeholder: disable
        auto_discovery_forwarder: enable
        auto_discovery_offer_interval: "5"
        auto_discovery_psk: enable
        auto_discovery_receiver: enable
        auto_discovery_sender: enable
        auto_discovery_shortcuts: independent
        auto_negotiate: enable
        auto_transport_threshold: "15"
        azure_ad_autoconnect: enable
        cert_id_validation: enable
        cert_peer_username_strip: disable
        cert_peer_username_validation: none
        cert_trust_store: local
        certificate:
            - name: default_name_41 (source vpn.certificate.local.name)
        childless_ike: enable
        client_auto_negotiate: disable
        client_keep_alive: disable
        client_resume: enable
        client_resume_interval: "7200"
        default_gw_priority: "0"
        dev_id_notification: disable
        dhgrp: "1"
        digital_signature_auth: enable
        distance: "15"
        dns_mode: manual
        dpd: disable
        dpd_retrycount: "3"
        eap: enable
        eap_cert_auth: enable
        eap_identity: use-id-payload
        ems_sn_check: enable
        encapsulation: none
        encapsulation_address: ike
        enforce_unique_id: disable
        esn: require
        exchange_fgt_device_id: enable
        exchange_interface_ip: enable
        fallback_tcp_threshold: "15"
        fec_base: "10"
        fec_codec: rs
        fec_egress: enable
        fec_ingress: enable
        fec_receive_timeout: "50"
        fec_redundant: "1"
        fec_send_timeout: "5"
        fgsp_sync: enable
        forticlient_enforcement: enable
        fortinet_esp: enable
        fragmentation: enable
        fragmentation_mtu: "1200"
        group_authentication: enable
        ha_sync_esp_seqno: enable
        idle_timeout: enable
        idle_timeoutinterval: "15"
        ike_version: "1"
        inbound_dscp_copy: enable
        include_local_lan: disable
        ip_delay_interval: "0"
        ip_fragmentation: pre-encapsulation
        ip_version: "4"
        ipv4_exclude_range:
            - id: "116"
        ipv6_auto_linklocal: enable
        ipv6_exclude_range:
            - id: "132"
        ipv6_prefix: "128"
        keepalive: "10"
        keylife: "86400"
        link_cost: "0"
        localid_type: auto
        loopback_asymroute: enable
        mesh_selector_type: disable
        mode: aggressive
        mode_cfg: disable
        mode_cfg_allow_client_selector: disable
        monitor_dict:
            - name: default_name_154 (source vpn.ipsec.phase1-interface.name)
        monitor_hold_down_delay: "0"
        monitor_hold_down_type: immediate
        monitor_hold_down_weekday: everyday
        monitor_min: "0"
        name: default_name_160
        nattraversal: enable
        negotiate_timeout: "30"
        net_device: enable
        network_id: "0"
        network_overlay: disable
        npu_offload: enable
        packet_redistribution: enable
        passive_mode: enable
        peer_egress_shaping: enable
        peer_egress_shaping_value: "0"
        peertype: any
        ppk: disable
        priority: "1"
        proposal: des-md5
        qkd: disable
        qkd_hybrid: disable
        reauth: disable
        rekey: enable
        remote_gw_match: any
        remote_gw_ztna_tags:
            - name: default_name_194 (source firewall.address.name firewall.addrgrp.name)
        remote_gw6_match: any
        rsa_signature_format: pkcs1
        rsa_signature_hash_override: enable
        save_password: disable
        send_cert_chain: enable
        shared_idle_timeout: enable
        signature_hash_alg: sha1
        suite_b: disable
        transport: udp
        tunnel_search: selectors
        type: static
        unity_support: disable
        vni: "0"
        wizard_type: custom
        xauthtype: disable
  name: Configure VPN remote gateway.
Search
    ↑ ↓ move↵ openesc close