fortios_wireless_controller_vap
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_wireless_controller_vap
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root | ||
| wireless_controller_vap | dict |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_wireless_controller_vap:
access_token: '{{ fortios_access_token }}'
state: present
vdom: root
wireless_controller_vap:
acct_interim_interval: "43200"
additional_akms: akm6
address_group_policy: disable
akm24_only: disable
application_detection_engine: enable
application_dscp_marking: enable
application_report_intv: "120"
atf_weight: "20"
auth: radius
beacon_advertising: name
beacon_protection: disable
broadcast_ssid: enable
broadcast_suppression: dhcp-up
bss_color_partial: enable
bstm_disassociation_imminent: enable
bstm_load_balancing_disassoc_timer: "10"
bstm_rssi_disassoc_timer: "200"
called_station_id_type: mac
captive_network_assistant_bypass: enable
captive_portal: enable
captive_portal_auth_timeout: "0"
captive_portal_fw_accounting: enable
captive_portal_session_timeout_interval: "432000"
dhcp_address_enforcement: enable
dhcp_lease_time: "2400"
dhcp_option43_insertion: enable
dhcp_option82_circuit_id_insertion: style-1
dhcp_option82_insertion: enable
dhcp_option82_remote_id_insertion: style-1
domain_name_stripping: disable
dynamic_vlan: enable
eap_reauth: enable
eap_reauth_intv: "86400"
eapol_key_retries: disable
encrypt: TKIP
external_fast_roaming: enable
external_pre_auth: enable
external_web_format: auto-detect
fast_bss_transition: disable
fast_roaming: enable
ft_mobility_domain: "1000"
ft_over_ds: disable
ft_r0_key_lifetime: "480"
gas_comeback_delay: "500"
gas_fragmentation_limit: "1024"
gtk_rekey: enable
gtk_rekey_intv: "86400"
high_efficiency: enable
igmp_snooping: enable
intra_vap_privacy: enable
ipv6_rules: drop-icmp6ra
keyindex: "1"
l3_roaming: enable
l3_roaming_mode: direct
ldpc: disable
local_authentication: enable
local_bridging: enable
local_lan: allow
local_lan_partition: enable
local_standalone: enable
local_standalone_dns: enable
local_standalone_nat: enable
mac_auth_bypass: enable
mac_called_station_delimiter: hyphen
mac_calling_station_delimiter: hyphen
mac_case: uppercase
mac_filter: enable
mac_filter_list:
- id: "90"
mac_filter_policy: allow
mac_filter_policy_other: allow
mac_password_delimiter: hyphen
mac_username_delimiter: hyphen
max_clients: "0"
max_clients_ap: "0"
mbo: disable
mbo_cell_data_conn_pref: excluded
me_disable_thresh: "32"
mesh_backhaul: enable
mlo: disable
mpsk: enable
mpsk_concurrent_clients: "32767"
mu_mimo: enable
multicast_enhance: enable
multicast_rate: "0"
nac: enable
name: default_name_118
nas_filter_rule: enable
neighbor_report_dual_band: disable
okc: disable
osen: enable
owe_groups: "19"
owe_transition: disable
pmf: disable
pmf_assoc_comeback_timeout: "1"
pmf_sa_query_retry_timeout: "2"
port_macauth: disable
port_macauth_reauth_timeout: "7200"
port_macauth_timeout: "600"
portal_type: auth
pre_auth: enable
probe_resp_suppression: enable
ptk_rekey: enable
ptk_rekey_intv: "86400"
quarantine: enable
radio_sensitivity: enable
radius_mac_auth: enable
radius_mac_auth_block_interval: "0"
radius_mac_auth_usergroups:
- name: default_name_155 (source user.group.name)
radius_mac_mpsk_auth: enable
radius_mac_mpsk_timeout: "86400"
rates_11a: "6"
rates_11ac_ss12: mcs0/1
rates_11ac_ss34: mcs0/3
rates_11ax_ss12: mcs0/1
rates_11ax_ss34: mcs0/3
rates_11bg: "1"
rates_11n_ss12: mcs0/1
rates_11n_ss34: mcs16/3
roaming_acct_interim_update: enable
sae_groups: "19"
sae_h2e_only: enable
sae_hnp_only: enable
sae_pk: enable
scan_botnet_connections: disable
schedule:
- name: default_name_181 (source firewall.schedule.group.name firewall.schedule.recurring.name firewall.schedule.onetime.name)
security: open
security_obsolete_option: enable
selected_usergroups:
- name: default_name_188 (source user.group.name)
set_80211k: disable
set_80211v: disable
split_tunneling: enable
sticky_client_remove: enable
target_wake_time: enable
tkip_counter_measure: enable
tunnel_echo_interval: "300"
tunnel_fallback_interval: "7200"
usergroup:
- name: default_name_202 (source user.group.name)
utm_log: enable
utm_status: enable
vlan_auto: enable
vlan_name:
- name: default_name_209
vlan_id:
- 1
vlan_pool:
- id: "212"
vlan_pooling: wtp-group
vlanid: "0"
voice_enterprise: disable
name: Configure Virtual Access Points (VAPs).