chillancezen.fortimanager.fmgr_system_npu (2.1.6) — module

no description

| "added in version" 1.0.0 of chillancezen.fortimanager"

Authors: Link Zheng (@chillancezen), Jie Xue (@JieX19), Frank Shen (@fshen01), Hongbin Lu (@fgtdev-hblu)

preview | supported by community

Install collection

Install with ansible-galaxy collection install chillancezen.fortimanager:==2.1.6


Add to requirements.yml

  collections:
    - name: chillancezen.fortimanager
      version: 2.1.6

Description

This module is able to configure a FortiManager device.

Examples include all parameters and values which need to be adjusted to data sources before usage.

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
 - hosts: fortimanager-inventory
   collections:
     - fortinet.fortimanager
   connection: httpapi
   vars:
      ansible_httpapi_use_ssl: True
      ansible_httpapi_validate_certs: False
      ansible_httpapi_port: 443
   tasks:
    - name: no description
      fmgr_system_npu:
         bypass_validation: False
         workspace_locking_adom: <value in [global, custom adom including root]>
         workspace_locking_timeout: 300
         rc_succeeded: [0, -2, -3, ...]
         rc_failed: [-2, -3, ...]
         adom: <your own value>
         system_npu:
            capwap-offload: <value in [disable, enable]>
            dedicated-management-affinity: <value of string>
            dedicated-management-cpu: <value in [disable, enable]>
            fastpath: <value in [disable, enable]>
            fp-anomaly:
               esp-minlen-err: <value in [drop, trap-to-host]>
               icmp-csum-err: <value in [drop, trap-to-host]>
               icmp-minlen-err: <value in [drop, trap-to-host]>
               ipv4-csum-err: <value in [drop, trap-to-host]>
               ipv4-ihl-err: <value in [drop, trap-to-host]>
               ipv4-len-err: <value in [drop, trap-to-host]>
               ipv4-opt-err: <value in [drop, trap-to-host]>
               ipv4-ttlzero-err: <value in [drop, trap-to-host]>
               ipv4-ver-err: <value in [drop, trap-to-host]>
               ipv6-exthdr-len-err: <value in [drop, trap-to-host]>
               ipv6-exthdr-order-err: <value in [drop, trap-to-host]>
               ipv6-ihl-err: <value in [drop, trap-to-host]>
               ipv6-plen-zero: <value in [drop, trap-to-host]>
               ipv6-ver-err: <value in [drop, trap-to-host]>
               tcp-csum-err: <value in [drop, trap-to-host]>
               tcp-hlen-err: <value in [drop, trap-to-host]>
               tcp-plen-err: <value in [drop, trap-to-host]>
               udp-csum-err: <value in [drop, trap-to-host]>
               udp-hlen-err: <value in [drop, trap-to-host]>
               udp-len-err: <value in [drop, trap-to-host]>
               udp-plen-err: <value in [drop, trap-to-host]>
               udplite-cover-err: <value in [drop, trap-to-host]>
               udplite-csum-err: <value in [drop, trap-to-host]>
               unknproto-minlen-err: <value in [drop, trap-to-host]>
            gtp-enhanced-cpu-range: <value in [0, 1, 2]>
            gtp-enhanced-mode: <value in [disable, enable]>
            host-shortcut-mode: <value in [bi-directional, host-shortcut]>
            htx-gtse-quota: <value in [100Mbps, 200Mbps, 300Mbps, ...]>
            intf-shaping-offload: <value in [disable, enable]>
            iph-rsvd-re-cksum: <value in [disable, enable]>
            ipsec-dec-subengine-mask: <value of string>
            ipsec-enc-subengine-mask: <value of string>
            ipsec-inbound-cache: <value in [disable, enable]>
            ipsec-mtu-override: <value in [disable, enable]>
            ipsec-over-vlink: <value in [disable, enable]>
            isf-np-queues:
               cos0: <value of string>
               cos1: <value of string>
               cos2: <value of string>
               cos3: <value of string>
               cos4: <value of string>
               cos5: <value of string>
               cos6: <value of string>
               cos7: <value of string>
            lag-out-port-select: <value in [disable, enable]>
            mcast-session-accounting: <value in [disable, session-based, tpe-based]>
            np6-cps-optimization-mode: <value in [disable, enable]>
            per-session-accounting: <value in [enable, disable, enable-by-log, ...]>
            port-cpu-map:
              -
                  cpu-core: <value of string>
                  interface: <value of string>
            port-npu-map:
              -
                  interface: <value of string>
                  npu-group-index: <value of integer>
            priority-protocol:
               bfd: <value in [disable, enable]>
               bgp: <value in [disable, enable]>
               slbc: <value in [disable, enable]>
            qos-mode: <value in [disable, priority, round-robin]>
            rdp-offload: <value in [disable, enable]>
            recover-np6-link: <value in [disable, enable]>
            session-denied-offload: <value in [disable, enable]>
            sse-backpressure: <value in [disable, enable]>
            strip-clear-text-padding: <value in [disable, enable]>
            strip-esp-padding: <value in [disable, enable]>
            sw-eh-hash:
               computation: <value in [xor16, xor8, xor4, ...]>
               destination-ip-lower-16: <value in [include, exclude]>
               destination-ip-upper-16: <value in [include, exclude]>
               destination-port: <value in [include, exclude]>
               ip-protocol: <value in [include, exclude]>
               netmask-length: <value of integer>
               source-ip-lower-16: <value in [include, exclude]>
               source-ip-upper-16: <value in [include, exclude]>
               source-port: <value in [include, exclude]>
            sw-np-bandwidth: <value in [0G, 2G, 4G, ...]>
            switch-np-hash: <value in [src-ip, dst-ip, src-dst-ip]>
            uesp-offload: <value in [disable, enable]>

Outputs

request_url:
  description: The full url requested
  returned: always
  sample: /sys/login/user
  type: str
response_code:
  description: The status of api request
  returned: always
  sample: 0
  type: int
response_message:
  description: The descriptive message of the api response
  returned: always
  sample: OK.
  type: str