PARALLAX

fortios_wireless_controller_vap

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_wireless_controller_vap

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

NameTypeRequiredDefaultDescription
access_tokenstr
enable_logboolfalse
member_pathstr
member_statestr
statestryes
vdomstrroot
wireless_controller_vapdict

Example

yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_wireless_controller_vap:
    access_token: '{{ fortios_access_token }}'
    state: present
    vdom: root
    wireless_controller_vap:
        acct_interim_interval: "43200"
        additional_akms: akm6
        address_group_policy: disable
        akm24_only: disable
        application_detection_engine: enable
        application_dscp_marking: enable
        application_report_intv: "120"
        atf_weight: "20"
        auth: radius
        beacon_advertising: name
        beacon_protection: disable
        broadcast_ssid: enable
        broadcast_suppression: dhcp-up
        bss_color_partial: enable
        bstm_disassociation_imminent: enable
        bstm_load_balancing_disassoc_timer: "10"
        bstm_rssi_disassoc_timer: "200"
        called_station_id_type: mac
        captive_network_assistant_bypass: enable
        captive_portal: enable
        captive_portal_auth_timeout: "0"
        captive_portal_fw_accounting: enable
        captive_portal_session_timeout_interval: "432000"
        dhcp_address_enforcement: enable
        dhcp_lease_time: "2400"
        dhcp_option43_insertion: enable
        dhcp_option82_circuit_id_insertion: style-1
        dhcp_option82_insertion: enable
        dhcp_option82_remote_id_insertion: style-1
        domain_name_stripping: disable
        dynamic_vlan: enable
        eap_reauth: enable
        eap_reauth_intv: "86400"
        eapol_key_retries: disable
        encrypt: TKIP
        external_fast_roaming: enable
        external_pre_auth: enable
        external_web_format: auto-detect
        fast_bss_transition: disable
        fast_roaming: enable
        ft_mobility_domain: "1000"
        ft_over_ds: disable
        ft_r0_key_lifetime: "480"
        gas_comeback_delay: "500"
        gas_fragmentation_limit: "1024"
        gtk_rekey: enable
        gtk_rekey_intv: "86400"
        high_efficiency: enable
        igmp_snooping: enable
        intra_vap_privacy: enable
        ipv6_rules: drop-icmp6ra
        keyindex: "1"
        l3_roaming: enable
        l3_roaming_mode: direct
        ldpc: disable
        local_authentication: enable
        local_bridging: enable
        local_lan: allow
        local_lan_partition: enable
        local_standalone: enable
        local_standalone_dns: enable
        local_standalone_nat: enable
        mac_auth_bypass: enable
        mac_called_station_delimiter: hyphen
        mac_calling_station_delimiter: hyphen
        mac_case: uppercase
        mac_filter: enable
        mac_filter_list:
            - id: "90"
              mac_filter_policy: allow
        mac_filter_policy_other: allow
        mac_password_delimiter: hyphen
        mac_username_delimiter: hyphen
        max_clients: "0"
        max_clients_ap: "0"
        mbo: disable
        mbo_cell_data_conn_pref: excluded
        me_disable_thresh: "32"
        mesh_backhaul: enable
        mlo: disable
        mpsk: enable
        mpsk_concurrent_clients: "32767"
        mu_mimo: enable
        multicast_enhance: enable
        multicast_rate: "0"
        nac: enable
        name: default_name_118
        nas_filter_rule: enable
        neighbor_report_dual_band: disable
        okc: disable
        osen: enable
        owe_groups: "19"
        owe_transition: disable
        pmf: disable
        pmf_assoc_comeback_timeout: "1"
        pmf_sa_query_retry_timeout: "2"
        port_macauth: disable
        port_macauth_reauth_timeout: "7200"
        port_macauth_timeout: "600"
        portal_type: auth
        pre_auth: enable
        probe_resp_suppression: enable
        ptk_rekey: enable
        ptk_rekey_intv: "86400"
        quarantine: enable
        radio_sensitivity: enable
        radius_mac_auth: enable
        radius_mac_auth_block_interval: "0"
        radius_mac_auth_usergroups:
            - name: default_name_155 (source user.group.name)
        radius_mac_mpsk_auth: enable
        radius_mac_mpsk_timeout: "86400"
        rates_11a: "6"
        rates_11ac_ss12: mcs0/1
        rates_11ac_ss34: mcs0/3
        rates_11ax_ss12: mcs0/1
        rates_11ax_ss34: mcs0/3
        rates_11bg: "1"
        rates_11n_ss12: mcs0/1
        rates_11n_ss34: mcs16/3
        roaming_acct_interim_update: enable
        sae_groups: "19"
        sae_h2e_only: enable
        sae_hnp_only: enable
        sae_pk: enable
        scan_botnet_connections: disable
        schedule:
            - name: default_name_181 (source firewall.schedule.group.name firewall.schedule.recurring.name firewall.schedule.onetime.name)
        security: open
        security_obsolete_option: enable
        selected_usergroups:
            - name: default_name_188 (source user.group.name)
        set_80211k: disable
        set_80211v: disable
        split_tunneling: enable
        sticky_client_remove: enable
        target_wake_time: enable
        tkip_counter_measure: enable
        tunnel_echo_interval: "300"
        tunnel_fallback_interval: "7200"
        usergroup:
            - name: default_name_202 (source user.group.name)
        utm_log: enable
        utm_status: enable
        vlan_auto: enable
        vlan_name:
            - name: default_name_209
              vlan_id:
                - 1
        vlan_pool:
            - id: "212"
        vlan_pooling: wtp-group
        vlanid: "0"
        voice_enterprise: disable
  name: Configure Virtual Access Points (VAPs).
Search
    ↑ ↓ move↵ openesc close