fortios_vpn_ipsec_phase1_interface
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_vpn_ipsec_phase1_interface
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root | ||
| vpn_ipsec_phase1_interface | dict |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_vpn_ipsec_phase1_interface:
access_token: '{{ fortios_access_token }}'
state: present
vdom: root
vpn_ipsec_phase1_interface:
acct_verify: enable
add_gw_route: enable
add_route: disable
addke1: "0"
addke2: "0"
addke3: "0"
addke4: "0"
addke5: "0"
addke6: "0"
addke7: "0"
aggregate_member: enable
aggregate_weight: "1"
assign_ip: disable
assign_ip_from: range
authmethod: psk
authmethod_remote: psk
auto_discovery_crossover: allow
auto_discovery_dialup_placeholder: disable
auto_discovery_forwarder: enable
auto_discovery_offer_interval: "5"
auto_discovery_psk: enable
auto_discovery_receiver: enable
auto_discovery_sender: enable
auto_discovery_shortcuts: independent
auto_negotiate: enable
auto_transport_threshold: "15"
azure_ad_autoconnect: enable
cert_id_validation: enable
cert_peer_username_strip: disable
cert_peer_username_validation: none
cert_trust_store: local
certificate:
- name: default_name_41 (source vpn.certificate.local.name)
childless_ike: enable
client_auto_negotiate: disable
client_keep_alive: disable
client_resume: enable
client_resume_interval: "7200"
default_gw_priority: "0"
dev_id_notification: disable
dhgrp: "1"
digital_signature_auth: enable
distance: "15"
dns_mode: manual
dpd: disable
dpd_retrycount: "3"
eap: enable
eap_cert_auth: enable
eap_identity: use-id-payload
ems_sn_check: enable
encapsulation: none
encapsulation_address: ike
enforce_unique_id: disable
esn: require
exchange_fgt_device_id: enable
exchange_interface_ip: enable
fallback_tcp_threshold: "15"
fec_base: "10"
fec_codec: rs
fec_egress: enable
fec_ingress: enable
fec_receive_timeout: "50"
fec_redundant: "1"
fec_send_timeout: "5"
fgsp_sync: enable
forticlient_enforcement: enable
fortinet_esp: enable
fragmentation: enable
fragmentation_mtu: "1200"
group_authentication: enable
ha_sync_esp_seqno: enable
idle_timeout: enable
idle_timeoutinterval: "15"
ike_version: "1"
inbound_dscp_copy: enable
include_local_lan: disable
ip_delay_interval: "0"
ip_fragmentation: pre-encapsulation
ip_version: "4"
ipv4_exclude_range:
- id: "116"
ipv6_auto_linklocal: enable
ipv6_exclude_range:
- id: "132"
ipv6_prefix: "128"
keepalive: "10"
keylife: "86400"
link_cost: "0"
localid_type: auto
loopback_asymroute: enable
mesh_selector_type: disable
mode: aggressive
mode_cfg: disable
mode_cfg_allow_client_selector: disable
monitor_dict:
- name: default_name_154 (source vpn.ipsec.phase1-interface.name)
monitor_hold_down_delay: "0"
monitor_hold_down_type: immediate
monitor_hold_down_weekday: everyday
monitor_min: "0"
name: default_name_160
nattraversal: enable
negotiate_timeout: "30"
net_device: enable
network_id: "0"
network_overlay: disable
npu_offload: enable
packet_redistribution: enable
passive_mode: enable
peer_egress_shaping: enable
peer_egress_shaping_value: "0"
peertype: any
ppk: disable
priority: "1"
proposal: des-md5
qkd: disable
qkd_hybrid: disable
reauth: disable
rekey: enable
remote_gw_match: any
remote_gw_ztna_tags:
- name: default_name_194 (source firewall.address.name firewall.addrgrp.name)
remote_gw6_match: any
rsa_signature_format: pkcs1
rsa_signature_hash_override: enable
save_password: disable
send_cert_chain: enable
shared_idle_timeout: enable
signature_hash_alg: sha1
suite_b: disable
transport: udp
tunnel_search: selectors
type: static
unity_support: disable
vni: "0"
wizard_type: custom
xauthtype: disable
name: Configure VPN remote gateway.