fortios_vpn_ipsec_phase2
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_vpn_ipsec_phase2
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root | ||
| vpn_ipsec_phase2 | dict |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_vpn_ipsec_phase2:
access_token: '{{ fortios_access_token }}'
state: present
vdom: root
vpn_ipsec_phase2:
add_route: phase1
addke1: "0"
addke2: "0"
addke3: "0"
addke4: "0"
addke5: "0"
addke6: "0"
addke7: "0"
auto_negotiate: enable
dhcp_ipsec: enable
dhgrp: "1"
diffserv: enable
dst_addr_type: subnet
dst_port: "0"
encapsulation: tunnel-mode
inbound_dscp_copy: phase1
initiator_ts_narrow: enable
ipv4_df: enable
keepalive: enable
keylife_type: seconds
keylifekbs: "5120"
keylifeseconds: "43200"
l2tp: enable
name: default_name_36
pfs: enable
proposal: null-md5
protocol: "0"
replay: enable
route_overlap: use-old
selector_match: exact
single_source: enable
src_addr_type: subnet
src_port: "0"
use_natip: enable
name: Configure VPN autokey tunnel.