New in version 2.8.
The below requirements are needed on the host that executes this module.
Parameter | Choices/Defaults | Comments | ||
---|---|---|---|---|
firewall_local_in_policy dictionary | Default: null | Configure user defined IPv4 local-in policies. | ||
action string |
| Action performed on traffic matching the policy . | ||
comments string | Comment. | |||
dstaddr list | Destination address object from available options. | |||
name string / required | Address name. Source firewall.address.name firewall.addrgrp.name. | |||
ha_mgmt_intf_only string |
| Enable/disable dedicating the HA management interface only for local-in policy. | ||
intf string | Incoming interface name from available options. Source system.zone.name system.interface.name. | |||
policyid integer / required | User defined local in policy ID. | |||
schedule string | Schedule object from available options. Source firewall.schedule.onetime.name firewall.schedule.recurring.name firewall.schedule.group .name. | |||
service list | Service object from available options. | |||
name string / required | Service name. Source firewall.service.custom.name firewall.service.group.name. | |||
srcaddr list | Source address object from available options. | |||
name string / required | Address name. Source firewall.address.name firewall.addrgrp.name. | |||
state string |
| Deprecated Starting with Ansible 2.9 we recommend using the top-level 'state' parameter. Indicates whether to create or remove the object. | ||
status string |
| Enable/disable this local-in policy. | ||
host string | FortiOS or FortiGate IP address. | |||
https boolean |
| Indicates if the requests towards FortiGate must use HTTPS protocol. | ||
password string | Default: "" | FortiOS or FortiGate password. | ||
ssl_verify boolean added in 2.9 |
| Ensures FortiGate certificate must be verified by a proper CA. | ||
state string added in 2.9 |
| Indicates whether to create or remove the object. This attribute was present already in previous version in a deeper level. It has been moved out to this outer level. | ||
username string | FortiOS or FortiGate username. | |||
vdom string | Default: "root" | Virtual domain, among those defined previously. A vdom is a virtual instance of the FortiGate that can be configured and used as a different unit. |
Note
- hosts: localhost vars: host: "192.168.122.40" username: "admin" password: "" vdom: "root" ssl_verify: "False" tasks: - name: Configure user defined IPv4 local-in policies. fortios_firewall_local_in_policy: host: "{{ host }}" username: "{{ username }}" password: "{{ password }}" vdom: "{{ vdom }}" https: "False" state: "present" firewall_local_in_policy: action: "accept" comments: "<your_own_value>" dstaddr: - name: "default_name_6 (source firewall.address.name firewall.addrgrp.name)" ha_mgmt_intf_only: "enable" intf: "<your_own_value> (source system.zone.name system.interface.name)" policyid: "9" schedule: "<your_own_value> (source firewall.schedule.onetime.name firewall.schedule.recurring.name firewall.schedule.group.name)" service: - name: "default_name_12 (source firewall.service.custom.name firewall.service.group.name)" srcaddr: - name: "default_name_14 (source firewall.address.name firewall.addrgrp.name)" status: "enable"
Common return values are documented here, the following are the fields unique to this module:
Key | Returned | Description |
---|---|---|
build string | always | Build number of the fortigate image Sample: 1547 |
http_method string | always | Last method used to provision the content into FortiGate Sample: PUT |
http_status string | always | Last result given by FortiGate on last operation applied Sample: 200 |
mkey string | success | Master key (id) used in the last call to FortiGate Sample: id |
name string | always | Name of the table used to fulfill the request Sample: urlfilter |
path string | always | Path of the table used to fulfill the request Sample: webfilter |
revision string | always | Internal revision number Sample: 17.0.2.10658 |
serial string | always | Serial number of the unit Sample: FGVMEVYYQT3AB5352 |
status string | always | Indication of the operation's result Sample: success |
vdom string | always | Virtual domain used Sample: root |
version string | always | Version of the FortiGate Sample: v5.6.3 |
Hint
If you notice any issues in this documentation, you can edit this document to improve it.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.9/modules/fortios_firewall_local_in_policy_module.html