Try SpotterManages vpn-community-star objects on Check Point over Web Services API
| "added in version" 2.9 of ansible.builtin"
Authors: Or Soffer (@chkp-orso)
preview | supported by community
pipInstall with pip install ansible==2.9.17
Manages vpn-community-star objects on Check Point devices including creating, updating and removing objects.
All operations are performed over Web Services API.
- name: add-vpn-community-star
cp_mgmt_vpn_community_star:
center_gateways: Second_Security_Gateway
encryption_method: prefer ikev2 but support ikev1
encryption_suite: custom
ike_phase_1:
data_integrity: sha1
diffie_hellman_group: group 19
encryption_algorithm: aes-128
ike_phase_2:
data_integrity: aes-xcbc
encryption_algorithm: aes-gcm-128
name: New_VPN_Community_Star_1
state: present
- name: set-vpn-community-star
cp_mgmt_vpn_community_star:
encryption_method: ikev2 only
encryption_suite: custom
ike_phase_1:
data_integrity: sha1
diffie_hellman_group: group 19
encryption_algorithm: aes-128
ike_phase_2:
data_integrity: aes-xcbc
encryption_algorithm: aes-gcm-128
name: New_VPN_Community_Star_1
state: present
- name: delete-vpn-community-star
cp_mgmt_vpn_community_star:
name: New_VPN_Community_Star_1
state: absent
name:
description:
- Object name.
required: true
type: str
tags:
description:
- Collection of tag identifiers.
type: list
color:
choices:
- aquamarine
- black
- blue
- crete blue
- burlywood
- cyan
- dark green
- khaki
- orchid
- dark orange
- dark sea green
- pink
- turquoise
- dark blue
- firebrick
- brown
- forest green
- gold
- dark gold
- gray
- dark gray
- light green
- lemon chiffon
- coral
- sea green
- sky blue
- magenta
- purple
- slate blue
- violet red
- navy blue
- olive
- orange
- red
- sienna
- yellow
description:
- Color of the object. Should be one of existing colors.
type: str
state:
choices:
- present
- absent
default: present
description:
- State of the access rule (present or absent).
type: str
version:
description:
- Version of checkpoint. If not given one, the latest version taken.
type: str
comments:
description:
- Comments string.
type: str
ike_phase_1:
description:
- Ike Phase 1 settings. Only applicable when the encryption-suite is set to [custom].
suboptions:
data_integrity:
choices:
- aes-xcbc
- sha1
- sha256
- sha384
- md5
description:
- The hash algorithm to be used.
type: str
diffie_hellman_group:
choices:
- group-1
- group-2
- group-5
- group-14
- group-19
- group-20
description:
- The Diffie-Hellman group to be used.
type: str
encryption_algorithm:
choices:
- cast
- aes-256
- des
- aes-128
- 3des
description:
- The encryption algorithm to be used.
type: str
type: dict
ike_phase_2:
description:
- Ike Phase 2 settings. Only applicable when the encryption-suite is set to [custom].
suboptions:
data_integrity:
choices:
- aes-xcbc
- sha1
- sha256
- sha384
- md5
description:
- The hash algorithm to be used.
type: str
encryption_algorithm:
choices:
- cast
- aes-gcm-256
- cast-40
- aes-256
- des
- aes-128
- 3des
- des-40cp
- aes-gcm-128
- none
description:
- The encryption algorithm to be used.
type: str
type: dict
details_level:
choices:
- uid
- standard
- full
description:
- The level of detail for some of the fields in the response can vary from showing
only the UID value of the object to a fully detailed representation of the object.
type: str
ignore_errors:
description:
- Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings
flag was omitted - warnings will also be ignored.
type: bool
wait_for_task:
default: true
description:
- Wait for the task to end. Such as publish task.
type: bool
shared_secrets:
description:
- Shared secrets for external gateways.
suboptions:
external_gateway:
description:
- External gateway identified by the name or UID.
type: str
shared_secret:
description:
- Shared secret.
type: str
type: list
center_gateways:
description:
- Collection of Gateway objects representing center gateways identified by the name
or UID.
type: list
ignore_warnings:
description:
- Apply changes ignoring warnings.
type: bool
encryption_suite:
choices:
- suite-b-gcm-256
- custom
- vpn b
- vpn a
- suite-b-gcm-128
description:
- The encryption suite to be used.
type: str
encryption_method:
choices:
- prefer ikev2 but support ikev1
- ikev2 only
- ikev1 for ipv4 and ikev2 for ipv6 only
description:
- The encryption method to be used.
type: str
use_shared_secret:
description:
- Indicates whether the shared secret should be used for all external gateways.
type: bool
satellite_gateways:
description:
- Collection of Gateway objects representing satellite gateways identified by the
name or UID.
type: list
auto_publish_session:
default: false
description:
- Publish the current session if changes have been performed after task completes.
type: bool
mesh_center_gateways:
description:
- Indicates whether the meshed community is in center.
type: bool
wait_for_task_timeout:
default: 30
description:
- How many minutes to wait until throwing a timeout error.
type: int
cp_mgmt_vpn_community_star: description: The checkpoint object created or updated. returned: always, except when deleting the object. type: dict