Try SpotterConfigure NPU attributes.
| "added in version" 2.1.0 of fortinet.fortimanager"
Authors: Xinwei Du (@dux-fortinet), Xing Li (@lix-fortinet), Jie Xue (@JieX19), Link Zheng (@chillancezen), Frank Shen (@fshen01), Hongbin Lu (@fgtdev-hblu)
preview | supported by community
Install with ansible-galaxy collection install fortinet.fortimanager:==2.4.0
collections:
- name: fortinet.fortimanager
version: 2.4.0This module is able to configure a FortiManager device.
Examples include all parameters and values which need to be adjusted to data sources before usage.
- name: Example playbook (generated based on argument schema)
hosts: fortimanagers
connection: httpapi
vars:
ansible_httpapi_use_ssl: true
ansible_httpapi_validate_certs: false
ansible_httpapi_port: 443
tasks:
- name: Configure NPU attributes.
fortinet.fortimanager.fmgr_system_npu:
# bypass_validation: false
workspace_locking_adom: <value in [global, custom adom including root]>
workspace_locking_timeout: 300
# rc_succeeded: [0, -2, -3, ...]
# rc_failed: [-2, -3, ...]
adom: <your own value>
system_npu:
capwap_offload: <value in [disable, enable]>
dedicated_management_affinity: <string>
dedicated_management_cpu: <value in [disable, enable]>
fastpath: <value in [disable, enable]>
fp_anomaly:
esp_minlen_err: <value in [drop, trap-to-host]>
icmp_csum_err: <value in [drop, trap-to-host]>
icmp_minlen_err: <value in [drop, trap-to-host]>
ipv4_csum_err: <value in [drop, trap-to-host]>
ipv4_ihl_err: <value in [drop, trap-to-host]>
ipv4_len_err: <value in [drop, trap-to-host]>
ipv4_opt_err: <value in [drop, trap-to-host]>
ipv4_ttlzero_err: <value in [drop, trap-to-host]>
ipv4_ver_err: <value in [drop, trap-to-host]>
ipv6_exthdr_len_err: <value in [drop, trap-to-host]>
ipv6_exthdr_order_err: <value in [drop, trap-to-host]>
ipv6_ihl_err: <value in [drop, trap-to-host]>
ipv6_plen_zero: <value in [drop, trap-to-host]>
ipv6_ver_err: <value in [drop, trap-to-host]>
tcp_csum_err: <value in [drop, trap-to-host]>
tcp_hlen_err: <value in [drop, trap-to-host]>
tcp_plen_err: <value in [drop, trap-to-host]>
udp_csum_err: <value in [drop, trap-to-host]>
udp_hlen_err: <value in [drop, trap-to-host]>
udp_len_err: <value in [drop, trap-to-host]>
udp_plen_err: <value in [drop, trap-to-host]>
udplite_cover_err: <value in [drop, trap-to-host]>
udplite_csum_err: <value in [drop, trap-to-host]>
unknproto_minlen_err: <value in [drop, trap-to-host]>
tcp_fin_only: <value in [allow, drop, trap-to-host]>
ipv4_optsecurity: <value in [allow, drop, trap-to-host]>
ipv6_optralert: <value in [allow, drop, trap-to-host]>
tcp_syn_fin: <value in [allow, drop, trap-to-host]>
ipv4_proto_err: <value in [allow, drop, trap-to-host]>
ipv6_saddr_err: <value in [allow, drop, trap-to-host]>
icmp_frag: <value in [allow, drop, trap-to-host]>
ipv4_optssrr: <value in [allow, drop, trap-to-host]>
ipv6_opthomeaddr: <value in [allow, drop, trap-to-host]>
udp_land: <value in [allow, drop, trap-to-host]>
ipv6_optinvld: <value in [allow, drop, trap-to-host]>
tcp_fin_noack: <value in [allow, drop, trap-to-host]>
ipv6_proto_err: <value in [allow, drop, trap-to-host]>
tcp_land: <value in [allow, drop, trap-to-host]>
ipv4_unknopt: <value in [allow, drop, trap-to-host]>
ipv4_optstream: <value in [allow, drop, trap-to-host]>
ipv6_optjumbo: <value in [allow, drop, trap-to-host]>
icmp_land: <value in [allow, drop, trap-to-host]>
tcp_winnuke: <value in [allow, drop, trap-to-host]>
ipv6_daddr_err: <value in [allow, drop, trap-to-host]>
ipv4_land: <value in [allow, drop, trap-to-host]>
ipv6_opttunnel: <value in [allow, drop, trap-to-host]>
tcp_no_flag: <value in [allow, drop, trap-to-host]>
ipv6_land: <value in [allow, drop, trap-to-host]>
ipv4_optlsrr: <value in [allow, drop, trap-to-host]>
ipv4_opttimestamp: <value in [allow, drop, trap-to-host]>
ipv4_optrr: <value in [allow, drop, trap-to-host]>
ipv6_optnsap: <value in [allow, drop, trap-to-host]>
ipv6_unknopt: <value in [allow, drop, trap-to-host]>
tcp_syn_data: <value in [allow, drop, trap-to-host]>
ipv6_optendpid: <value in [allow, drop, trap-to-host]>
gtpu_plen_err: <value in [drop, trap-to-host]>
vxlan_minlen_err: <value in [drop, trap-to-host]>
capwap_minlen_err: <value in [drop, trap-to-host]>
gre_csum_err: <value in [drop, trap-to-host]>
nvgre_minlen_err: <value in [drop, trap-to-host]>
sctp_l4len_err: <value in [drop, trap-to-host]>
tcp_hlenvsl4len_err: <value in [drop, trap-to-host]>
sctp_crc_err: <value in [drop, trap-to-host]>
sctp_clen_err: <value in [drop, trap-to-host]>
uesp_minlen_err: <value in [drop, trap-to-host]>
gtp_enhanced_cpu_range: <value in [0, 1, 2]>
gtp_enhanced_mode: <value in [disable, enable]>
host_shortcut_mode: <value in [bi-directional, host-shortcut]>
htx_gtse_quota: <value in [100Mbps, 200Mbps, 300Mbps, ...]>
intf_shaping_offload: <value in [disable, enable]>
iph_rsvd_re_cksum: <value in [disable, enable]>
ipsec_dec_subengine_mask: <string>
ipsec_enc_subengine_mask: <string>
ipsec_inbound_cache: <value in [disable, enable]>
ipsec_mtu_override: <value in [disable, enable]>
ipsec_over_vlink: <value in [disable, enable]>
isf_np_queues:
cos0: <string>
cos1: <string>
cos2: <string>
cos3: <string>
cos4: <string>
cos5: <string>
cos6: <string>
cos7: <string>
lag_out_port_select: <value in [disable, enable]>
mcast_session_accounting: <value in [disable, session-based, tpe-based]>
np6_cps_optimization_mode: <value in [disable, enable]>
per_session_accounting: <value in [enable, disable, enable-by-log, ...]>
port_cpu_map:
-
cpu_core: <string>
interface: <string>
port_npu_map:
-
interface: <string>
npu_group_index: <integer>
priority_protocol:
bfd: <value in [disable, enable]>
bgp: <value in [disable, enable]>
slbc: <value in [disable, enable]>
qos_mode: <value in [disable, priority, round-robin]>
rdp_offload: <value in [disable, enable]>
recover_np6_link: <value in [disable, enable]>
session_denied_offload: <value in [disable, enable]>
sse_backpressure: <value in [disable, enable]>
strip_clear_text_padding: <value in [disable, enable]>
strip_esp_padding: <value in [disable, enable]>
sw_eh_hash:
computation: <value in [xor16, xor8, xor4, ...]>
destination_ip_lower_16: <value in [include, exclude]>
destination_ip_upper_16: <value in [include, exclude]>
destination_port: <value in [include, exclude]>
ip_protocol: <value in [include, exclude]>
netmask_length: <integer>
source_ip_lower_16: <value in [include, exclude]>
source_ip_upper_16: <value in [include, exclude]>
source_port: <value in [include, exclude]>
sw_np_bandwidth: <value in [0G, 2G, 4G, ...]>
switch_np_hash: <value in [src-ip, dst-ip, src-dst-ip]>
uesp_offload: <value in [disable, enable]>
np_queues:
ethernet_type:
-
name: <string>
queue: <integer>
type: <integer>
weight: <integer>
ip_protocol:
-
name: <string>
protocol: <integer>
queue: <integer>
weight: <integer>
ip_service:
-
dport: <integer>
name: <string>
protocol: <integer>
queue: <integer>
sport: <integer>
weight: <integer>
profile:
-
cos0: <value in [queue0, queue1, queue2, ...]>
cos1: <value in [queue0, queue1, queue2, ...]>
cos2: <value in [queue0, queue1, queue2, ...]>
cos3: <value in [queue0, queue1, queue2, ...]>
cos4: <value in [queue0, queue1, queue2, ...]>
cos5: <value in [queue0, queue1, queue2, ...]>
cos6: <value in [queue0, queue1, queue2, ...]>
cos7: <value in [queue0, queue1, queue2, ...]>
dscp0: <value in [queue0, queue1, queue2, ...]>
dscp1: <value in [queue0, queue1, queue2, ...]>
dscp10: <value in [queue0, queue1, queue2, ...]>
dscp11: <value in [queue0, queue1, queue2, ...]>
dscp12: <value in [queue0, queue1, queue2, ...]>
dscp13: <value in [queue0, queue1, queue2, ...]>
dscp14: <value in [queue0, queue1, queue2, ...]>
dscp15: <value in [queue0, queue1, queue2, ...]>
dscp16: <value in [queue0, queue1, queue2, ...]>
dscp17: <value in [queue0, queue1, queue2, ...]>
dscp18: <value in [queue0, queue1, queue2, ...]>
dscp19: <value in [queue0, queue1, queue2, ...]>
dscp2: <value in [queue0, queue1, queue2, ...]>
dscp20: <value in [queue0, queue1, queue2, ...]>
dscp21: <value in [queue0, queue1, queue2, ...]>
dscp22: <value in [queue0, queue1, queue2, ...]>
dscp23: <value in [queue0, queue1, queue2, ...]>
dscp24: <value in [queue0, queue1, queue2, ...]>
dscp25: <value in [queue0, queue1, queue2, ...]>
dscp26: <value in [queue0, queue1, queue2, ...]>
dscp27: <value in [queue0, queue1, queue2, ...]>
dscp28: <value in [queue0, queue1, queue2, ...]>
dscp29: <value in [queue0, queue1, queue2, ...]>
dscp3: <value in [queue0, queue1, queue2, ...]>
dscp30: <value in [queue0, queue1, queue2, ...]>
dscp31: <value in [queue0, queue1, queue2, ...]>
dscp32: <value in [queue0, queue1, queue2, ...]>
dscp33: <value in [queue0, queue1, queue2, ...]>
dscp34: <value in [queue0, queue1, queue2, ...]>
dscp35: <value in [queue0, queue1, queue2, ...]>
dscp36: <value in [queue0, queue1, queue2, ...]>
dscp37: <value in [queue0, queue1, queue2, ...]>
dscp38: <value in [queue0, queue1, queue2, ...]>
dscp39: <value in [queue0, queue1, queue2, ...]>
dscp4: <value in [queue0, queue1, queue2, ...]>
dscp40: <value in [queue0, queue1, queue2, ...]>
dscp41: <value in [queue0, queue1, queue2, ...]>
dscp42: <value in [queue0, queue1, queue2, ...]>
dscp43: <value in [queue0, queue1, queue2, ...]>
dscp44: <value in [queue0, queue1, queue2, ...]>
dscp45: <value in [queue0, queue1, queue2, ...]>
dscp46: <value in [queue0, queue1, queue2, ...]>
dscp47: <value in [queue0, queue1, queue2, ...]>
dscp48: <value in [queue0, queue1, queue2, ...]>
dscp49: <value in [queue0, queue1, queue2, ...]>
dscp5: <value in [queue0, queue1, queue2, ...]>
dscp50: <value in [queue0, queue1, queue2, ...]>
dscp51: <value in [queue0, queue1, queue2, ...]>
dscp52: <value in [queue0, queue1, queue2, ...]>
dscp53: <value in [queue0, queue1, queue2, ...]>
dscp54: <value in [queue0, queue1, queue2, ...]>
dscp55: <value in [queue0, queue1, queue2, ...]>
dscp56: <value in [queue0, queue1, queue2, ...]>
dscp57: <value in [queue0, queue1, queue2, ...]>
dscp58: <value in [queue0, queue1, queue2, ...]>
dscp59: <value in [queue0, queue1, queue2, ...]>
dscp6: <value in [queue0, queue1, queue2, ...]>
dscp60: <value in [queue0, queue1, queue2, ...]>
dscp61: <value in [queue0, queue1, queue2, ...]>
dscp62: <value in [queue0, queue1, queue2, ...]>
dscp63: <value in [queue0, queue1, queue2, ...]>
dscp7: <value in [queue0, queue1, queue2, ...]>
dscp8: <value in [queue0, queue1, queue2, ...]>
dscp9: <value in [queue0, queue1, queue2, ...]>
id: <integer>
type: <value in [cos, dscp]>
weight: <integer>
scheduler:
-
mode: <value in [none, priority, round-robin]>
name: <string>
udp_timeout_profile:
-
id: <integer>
udp_idle: <integer>
qtm_buf_mode: <value in [6ch, 4ch]>
default_qos_type: <value in [policing, shaping, policing-enhanced]>
tcp_rst_timeout: <integer>
ipsec_local_uesp_port: <integer>
htab_dedi_queue_nr: <integer>
double_level_mcast_offload: <value in [disable, enable]>
dse_timeout: <integer>
ippool_overload_low: <integer>
pba_eim: <value in [disallow, allow]>
policy_offload_level: <value in [disable, dos-offload, full-offload]>
max_session_timeout: <integer>
port_path_option:
ports_using_npu: <list or string>
vlan_lookup_cache: <value in [disable, enable]>
dos_options:
npu_dos_meter_mode: <value in [local, global]>
npu_dos_synproxy_mode: <value in [synack2ack, pass-synack]>
npu_dos_tpe_mode: <value in [disable, enable]>
hash_tbl_spread: <value in [disable, enable]>
tcp_timeout_profile:
-
close_wait: <integer>
fin_wait: <integer>
id: <integer>
syn_sent: <integer>
syn_wait: <integer>
tcp_idle: <integer>
time_wait: <integer>
ip_reassembly:
max_timeout: <integer>
min_timeout: <integer>
status: <value in [disable, enable]>
gtp_support: <value in [disable, enable]>
htx_icmp_csum_chk: <value in [pass, drop]>
hpe:
all_protocol: <integer>
arp_max: <integer>
enable_shaper: <value in [disable, enable]>
esp_max: <integer>
high_priority: <integer>
icmp_max: <integer>
ip_frag_max: <integer>
ip_others_max: <integer>
l2_others_max: <integer>
pri_type_max: <integer>
sctp_max: <integer>
tcp_max: <integer>
tcpfin_rst_max: <integer>
tcpsyn_ack_max: <integer>
tcpsyn_max: <integer>
udp_max: <integer>
enable_queue_shaper: <value in [disable, enable]>
exception_code: <integer>
fragment_with_sess: <integer>
fragment_without_session: <integer>
queue_shaper_max: <integer>
dsw_dts_profile:
-
action: <value in [wait, drop, drop_tmr_0, ...]>
min_limit: <integer>
profile_id: <integer>
step: <integer>
hash_config: <value in [5-tuple, src-ip, src-dst-ip]>
ipsec_ob_np_sel: <value in [RR, rr, Packet, ...]>
napi_break_interval: <integer>
background_sse_scan:
scan: <value in [disable, enable]>
stats_update_interval: <integer>
udp_keepalive_interval: <integer>
scan_stale: <integer>
scan_vt: <integer>
stats_qual_access: <integer>
stats_qual_duration: <integer>
udp_qual_access: <integer>
udp_qual_duration: <integer>
inbound_dscp_copy_port: <list or string>
session_acct_interval: <integer>
htab_msg_queue: <value in [idle, data, dedicated]>
dsw_queue_dts_profile:
-
iport: <value in [EIF0, eif0, EIF1, ...]>
name: <string>
oport: <value in [EIF0, eif0, EIF1, ...]>
profile_id: <integer>
queue_select: <integer>
hw_ha_scan_interval: <integer>
ippool_overload_high: <integer>
nat46_force_ipv4_packet_forwarding: <value in [disable, enable]>
prp_port_out: <list or string>
isf_np_rx_tr_distr: <value in [port-flow, round-robin, randomized]>
mcast_session_counting6: <value in [disable, enable, session-based, ...]>
prp_port_in: <list or string>
rps_mode: <value in [disable, enable]>
per_policy_accounting: <value in [disable, enable]>
mcast_session_counting: <value in [disable, enable, session-based, ...]>
inbound_dscp_copy: <value in [disable, enable]>
ipsec_host_dfclr: <value in [disable, enable]>
process_icmp_by_host: <value in [disable, enable]>
dedicated_tx_npu: <value in [disable, enable]>
ull_port_mode: <value in [10G, 25G]>
sse_ha_scan:
gap: <integer>
max_session_cnt: <integer>
min_duration: <integer>
hash_ipv6_sel: <integer>
ip_fragment_offload: <value in [disable, enable]>
ple_non_syn_tcp_action: <value in [forward, drop]>
npu_group_effective_scope: <integer>
ipsec_STS_timeout: <value in [1, 2, 3, ...]>
ipsec_throughput_msg_frequency: <value in [disable, 32KB, 64KB, ...]>
ipt_STS_timeout: <value in [1, 2, 3, ...]>
ipt_throughput_msg_frequency: <value in [disable, 32KB, 64KB, ...]>
prp_session_clear_mode: <value in [blocking, non-blocking, do-not-clear]>
shaping_stats: <value in [disable, enable]>
sw_tr_hash:
draco15: <value in [disable, enable]>
tcp_udp_port: <value in [include, exclude]>
default_tcp_refresh_dir: <value in [both, outgoing, incoming]>
default_udp_refresh_dir: <value in [both, outgoing, incoming]>
max_receive_unit: <integer>
npu_tcam:
-
data:
df: <value in [disable, enable]>
dstip: <string>
dstipv6: <string>
dstmac: <string>
dstport: <integer>
ethertype: <string>
ext_tag: <value in [disable, enable]>
frag_off: <integer>
gen_buf_cnt: <integer>
gen_iv: <value in [invalid, valid]>
gen_l3_flags: <integer>
gen_l4_flags: <integer>
gen_pkt_ctrl: <integer>
gen_pri: <integer>
gen_pri_v: <value in [invalid, valid]>
gen_tv: <value in [invalid, valid]>
ihl: <integer>
ip4_id: <integer>
ip6_fl: <integer>
ipver: <integer>
l4_wd10: <integer>
l4_wd11: <integer>
l4_wd8: <integer>
l4_wd9: <integer>
mf: <value in [disable, enable]>
protocol: <integer>
slink: <integer>
smac_change: <value in [disable, enable]>
sp: <integer>
src_cfi: <value in [disable, enable]>
src_prio: <integer>
src_updt: <value in [disable, enable]>
srcip: <string>
srcipv6: <string>
srcmac: <string>
srcport: <integer>
svid: <integer>
tcp_ack: <value in [disable, enable]>
tcp_cwr: <value in [disable, enable]>
tcp_ece: <value in [disable, enable]>
tcp_fin: <value in [disable, enable]>
tcp_push: <value in [disable, enable]>
tcp_rst: <value in [disable, enable]>
tcp_syn: <value in [disable, enable]>
tcp_urg: <value in [disable, enable]>
tgt_cfi: <value in [disable, enable]>
tgt_prio: <integer>
tgt_updt: <value in [disable, enable]>
tgt_v: <value in [invalid, valid]>
tos: <integer>
tp: <integer>
ttl: <integer>
tvid: <integer>
vdid: <integer>
dbg_dump: <integer>
mask:
df: <value in [disable, enable]>
dstip: <string>
dstipv6: <string>
dstmac: <string>
dstport: <integer>
ethertype: <string>
ext_tag: <value in [disable, enable]>
frag_off: <integer>
gen_buf_cnt: <integer>
gen_iv: <value in [invalid, valid]>
gen_l3_flags: <integer>
gen_l4_flags: <integer>
gen_pkt_ctrl: <integer>
gen_pri: <integer>
gen_pri_v: <value in [invalid, valid]>
gen_tv: <value in [invalid, valid]>
ihl: <integer>
ip4_id: <integer>
ip6_fl: <integer>
ipver: <integer>
l4_wd10: <integer>
l4_wd11: <integer>
l4_wd8: <integer>
l4_wd9: <integer>
mf: <value in [disable, enable]>
protocol: <integer>
slink: <integer>
smac_change: <value in [disable, enable]>
sp: <integer>
src_cfi: <value in [disable, enable]>
src_prio: <integer>
src_updt: <value in [disable, enable]>
srcip: <string>
srcipv6: <string>
srcmac: <string>
srcport: <integer>
svid: <integer>
tcp_ack: <value in [disable, enable]>
tcp_cwr: <value in [disable, enable]>
tcp_ece: <value in [disable, enable]>
tcp_fin: <value in [disable, enable]>
tcp_push: <value in [disable, enable]>
tcp_rst: <value in [disable, enable]>
tcp_syn: <value in [disable, enable]>
tcp_urg: <value in [disable, enable]>
tgt_cfi: <value in [disable, enable]>
tgt_prio: <integer>
tgt_updt: <value in [disable, enable]>
tgt_v: <value in [invalid, valid]>
tos: <integer>
tp: <integer>
ttl: <integer>
tvid: <integer>
vdid: <integer>
mir_act:
vlif: <integer>
name: <string>
oid: <integer>
pri_act:
priority: <integer>
weight: <integer>
sact:
act: <integer>
act_v: <value in [disable, enable]>
bmproc: <integer>
bmproc_v: <value in [disable, enable]>
df_lif: <integer>
df_lif_v: <value in [disable, enable]>
dfr: <integer>
dfr_v: <value in [disable, enable]>
dmac_skip: <integer>
dmac_skip_v: <value in [disable, enable]>
dosen: <integer>
dosen_v: <value in [disable, enable]>
espff_proc: <integer>
espff_proc_v: <value in [disable, enable]>
etype_pid: <integer>
etype_pid_v: <value in [disable, enable]>
frag_proc: <integer>
frag_proc_v: <value in [disable, enable]>
fwd: <integer>
fwd_lif: <integer>
fwd_lif_v: <value in [disable, enable]>
fwd_tvid: <integer>
fwd_tvid_v: <value in [disable, enable]>
fwd_v: <value in [disable, enable]>
icpen: <integer>
icpen_v: <value in [disable, enable]>
igmp_mld_snp: <integer>
igmp_mld_snp_v: <value in [disable, enable]>
learn: <integer>
learn_v: <value in [disable, enable]>
m_srh_ctrl: <integer>
m_srh_ctrl_v: <value in [disable, enable]>
mac_id: <integer>
mac_id_v: <value in [disable, enable]>
mss: <integer>
mss_v: <value in [disable, enable]>
pleen: <integer>
pleen_v: <value in [disable, enable]>
prio_pid: <integer>
prio_pid_v: <value in [disable, enable]>
promis: <integer>
promis_v: <value in [disable, enable]>
rfsh: <integer>
rfsh_v: <value in [disable, enable]>
smac_skip: <integer>
smac_skip_v: <value in [disable, enable]>
tp_smchk_v: <value in [disable, enable]>
tp_smchk: <integer>
tpe_id: <integer>
tpe_id_v: <value in [disable, enable]>
vdm: <integer>
vdm_v: <value in [disable, enable]>
vdom_id: <integer>
vdom_id_v: <value in [disable, enable]>
x_mode: <integer>
x_mode_v: <value in [disable, enable]>
tact:
act: <integer>
act_v: <value in [disable, enable]>
fmtuv4_s: <integer>
fmtuv4_s_v: <value in [disable, enable]>
fmtuv6_s: <integer>
fmtuv6_s_v: <value in [disable, enable]>
lnkid: <integer>
lnkid_v: <value in [disable, enable]>
mac_id: <integer>
mac_id_v: <value in [disable, enable]>
mss_t: <integer>
mss_t_v: <value in [disable, enable]>
mtuv4: <integer>
mtuv4_v: <value in [disable, enable]>
mtuv6: <integer>
mtuv6_v: <value in [disable, enable]>
slif_act: <integer>
slif_act_v: <value in [disable, enable]>
sublnkid: <integer>
sublnkid_v: <value in [disable, enable]>
tgtv_act: <integer>
tgtv_act_v: <value in [disable, enable]>
tlif_act: <integer>
tlif_act_v: <value in [disable, enable]>
tpeid: <integer>
tpeid_v: <value in [disable, enable]>
v6fe: <integer>
v6fe_v: <value in [disable, enable]>
vep_en_v: <value in [disable, enable]>
vep_slid: <integer>
vep_slid_v: <value in [disable, enable]>
vep_en: <integer>
xlt_lif: <integer>
xlt_lif_v: <value in [disable, enable]>
xlt_vid: <integer>
xlt_vid_v: <value in [disable, enable]>
type: <value in [L2_src_tc, L2_tgt_tc, L2_src_mir, ...]>
vid: <integer>
nss_threads_option: <value in [4t-eif, 4t-noeif, 2t]>
pba_port_select_mode: <value in [random, direct]>
spa_port_select_mode: <value in [random, direct]>
split_ipsec_engines: <value in [disable, enable]>
adom:
description: The parameter (adom) in requested url.
required: true
type: str
rc_failed:
description: The rc codes list with which the conditions to fail will be overriden.
elements: int
type: list
enable_log:
default: false
description: Enable/Disable logging for task.
type: bool
system_npu:
description: The top level parameters set.
required: false
suboptions:
background-sse-scan:
description: Deprecated, please rename it to background_sse_scan.
suboptions:
scan:
choices:
- disable
- enable
description: Enable/disable background SSE scan by driver thread
type: str
scan-stale:
description: Deprecated, please rename it to scan_stale. Configure scanning
of active or stale sessions
type: int
scan-vt:
description: Deprecated, please rename it to scan_vt. Select version/type
to scan
type: int
stats-qual-access:
description: Deprecated, please rename it to stats_qual_access. Statistics
update access qualification in seconds
type: int
stats-qual-duration:
description: Deprecated, please rename it to stats_qual_duration. Statistics
update duration qualification in seconds
type: int
stats-update-interval:
description: Deprecated, please rename it to stats_update_interval. Stats
update interval
type: int
udp-keepalive-interval:
description: Deprecated, please rename it to udp_keepalive_interval. UDP keepalive
interval
type: int
udp-qual-access:
description: Deprecated, please rename it to udp_qual_access. UDP keepalive
access qualification in seconds
type: int
udp-qual-duration:
description: Deprecated, please rename it to udp_qual_duration. UDP keepalive
duration qualification in seconds
type: int
type: dict
capwap-offload:
choices:
- disable
- enable
description: Deprecated, please rename it to capwap_offload. Enable/disable offloading
managed FortiAP and FortiLink CAPWAP sessions.
type: str
dedicated-management-affinity:
description: Deprecated, please rename it to dedicated_management_affinity. Affinity
setting for management deamons
type: str
dedicated-management-cpu:
choices:
- disable
- enable
description: Deprecated, please rename it to dedicated_management_cpu. Enable
to dedicate one CPU for GUI and CLI connections when NPs ...
type: str
dedicated-tx-npu:
choices:
- disable
- enable
description: Deprecated, please rename it to dedicated_tx_npu. Enable/disable
dedication of 3rd NPU for slow path TX.
type: str
default-qos-type:
choices:
- policing
- shaping
- policing-enhanced
description: Deprecated, please rename it to default_qos_type. Set default QoS
type.
type: str
default-tcp-refresh-dir:
choices:
- both
- outgoing
- incoming
description: Deprecated, please rename it to default_tcp_refresh_dir. Default
SSE timeout TCP refresh direction.
type: str
default-udp-refresh-dir:
choices:
- both
- outgoing
- incoming
description: Deprecated, please rename it to default_udp_refresh_dir. Default
SSE timeout UDP refresh direction.
type: str
dos-options:
description: Deprecated, please rename it to dos_options.
suboptions:
npu-dos-meter-mode:
choices:
- local
- global
description: Deprecated, please rename it to npu_dos_meter_mode. Set DoS meter
NPU offloading mode.
type: str
npu-dos-synproxy-mode:
choices:
- synack2ack
- pass-synack
description: Deprecated, please rename it to npu_dos_synproxy_mode. Set NPU
DoS SYNPROXY mode.
type: str
npu-dos-tpe-mode:
choices:
- disable
- enable
description: Deprecated, please rename it to npu_dos_tpe_mode. Enable/disable
insertion of DoS meter ID to session table.
type: str
type: dict
double-level-mcast-offload:
choices:
- disable
- enable
description: Deprecated, please rename it to double_level_mcast_offload. Enable
double level mcast offload.
type: str
dse-timeout:
description: Deprecated, please rename it to dse_timeout. DSE timeout in seconds
type: int
dsw-dts-profile:
description: Deprecated, please rename it to dsw_dts_profile.
elements: dict
suboptions:
action:
choices:
- wait
- drop
- drop_tmr_0
- drop_tmr_1
- enque
- enque_0
- enque_1
description: Set NPU DSW DTS profile action.
type: str
min-limit:
description: Deprecated, please rename it to min_limit. Set NPU DSW DTS profile
min-limt.
type: int
profile-id:
description: Deprecated, please rename it to profile_id. Set NPU DSW DTS profile
profile id.
type: int
step:
description: Set NPU DSW DTS profile step.
type: int
type: list
dsw-queue-dts-profile:
description: Deprecated, please rename it to dsw_queue_dts_profile.
elements: dict
suboptions:
iport:
choices:
- EIF0
- eif0
- EIF1
- eif1
- EIF2
- eif2
- EIF3
- eif3
- EIF4
- eif4
- EIF5
- eif5
- EIF6
- eif6
- EIF7
- eif7
- HTX0
- htx0
- HTX1
- htx1
- SSE0
- sse0
- SSE1
- sse1
- SSE2
- sse2
- SSE3
- sse3
- RLT
- rlt
- DFR
- dfr
- IPSECI
- ipseci
- IPSECO
- ipseco
- IPTI
- ipti
- IPTO
- ipto
- VEP0
- vep0
- VEP2
- vep2
- VEP4
- vep4
- VEP6
- vep6
- IVS
- ivs
- L2TI1
- l2ti1
- L2TO
- l2to
- L2TI0
- l2ti0
- PLE
- ple
- SPATH
- spath
- QTM
- qtm
description: Set NPU DSW DTS in port.
type: str
name:
description: Name.
type: str
oport:
choices:
- EIF0
- eif0
- EIF1
- eif1
- EIF2
- eif2
- EIF3
- eif3
- EIF4
- eif4
- EIF5
- eif5
- EIF6
- eif6
- EIF7
- eif7
- HRX
- hrx
- SSE0
- sse0
- SSE1
- sse1
- SSE2
- sse2
- SSE3
- sse3
- RLT
- rlt
- DFR
- dfr
- IPSECI
- ipseci
- IPSECO
- ipseco
- IPTI
- ipti
- IPTO
- ipto
- VEP0
- vep0
- VEP2
- vep2
- VEP4
- vep4
- VEP6
- vep6
- IVS
- ivs
- L2TI1
- l2ti1
- L2TO
- l2to
- L2TI0
- l2ti0
- PLE
- ple
- SYNK
- sync
- NSS
- nss
- TSK
- tsk
- QTM
- qtm
- l2tO
description: Set NPU DSW DTS out port.
type: str
profile-id:
description: Deprecated, please rename it to profile_id. Set NPU DSW DTS profile
ID.
type: int
queue-select:
description: Deprecated, please rename it to queue_select. Set NPU DSW DTS
queue ID select
type: int
type: list
fastpath:
choices:
- disable
- enable
description: Enable/disable NP6 offloading
type: str
fp-anomaly:
description: Deprecated, please rename it to fp_anomaly.
suboptions:
capwap-minlen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to capwap_minlen_err.
type: str
esp-minlen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to esp_minlen_err. Invalid IPv4
ESP short packet anomalies.
type: str
gre-csum-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to gre_csum_err.
type: str
gtpu-plen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to gtpu_plen_err.
type: str
icmp-csum-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to icmp_csum_err. Invalid IPv4 ICMP
packet checksum anomalies.
type: str
icmp-frag:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to icmp_frag. Layer 3 fragmented
packets that could be part of layer 4 ICMP anomalies.
type: str
icmp-land:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to icmp_land. ICMP land anomalies.
type: str
icmp-minlen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to icmp_minlen_err. Invalid IPv4
ICMP short packet anomalies.
type: str
ipv4-csum-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_csum_err. Invalid IPv4 packet
checksum anomalies.
type: str
ipv4-ihl-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_ihl_err. Invalid IPv4 header
length anomalies.
type: str
ipv4-land:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_land. Land anomalies.
type: str
ipv4-len-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_len_err. Invalid IPv4 packet
length anomalies.
type: str
ipv4-opt-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_opt_err. Invalid IPv4 option
parsing anomalies.
type: str
ipv4-optlsrr:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_optlsrr. Loose source record
route option anomalies.
type: str
ipv4-optrr:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_optrr. Record route option
anomalies.
type: str
ipv4-optsecurity:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_optsecurity. Security option
anomalies.
type: str
ipv4-optssrr:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_optssrr. Strict source record
route option anomalies.
type: str
ipv4-optstream:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_optstream. Stream option
anomalies.
type: str
ipv4-opttimestamp:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_opttimestamp. Timestamp
option anomalies.
type: str
ipv4-proto-err:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_proto_err. Invalid layer
4 protocol anomalies.
type: str
ipv4-ttlzero-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_ttlzero_err. Invalid IPv4
TTL field zero anomalies.
type: str
ipv4-unknopt:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_unknopt. Unknown option
anomalies.
type: str
ipv4-ver-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv4_ver_err. Invalid IPv4 header
version anomalies.
type: str
ipv6-daddr-err:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_daddr_err. Destination address
as unspecified or loopback address anomalies.
type: str
ipv6-exthdr-len-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_exthdr_len_err. Invalid
IPv6 packet chain extension header total length anoma...
type: str
ipv6-exthdr-order-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_exthdr_order_err. Invalid
IPv6 packet extension header ordering anomalies.
type: str
ipv6-ihl-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_ihl_err. Invalid IPv6 packet
length anomalies.
type: str
ipv6-land:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_land. Land anomalies.
type: str
ipv6-optendpid:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_optendpid. End point identification
anomalies.
type: str
ipv6-opthomeaddr:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_opthomeaddr. Home address
option anomalies.
type: str
ipv6-optinvld:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_optinvld. Invalid option
anomalies.
type: str
ipv6-optjumbo:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_optjumbo. Jumbo options
anomalies.
type: str
ipv6-optnsap:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_optnsap. Network service
access point address option anomalies.
type: str
ipv6-optralert:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_optralert. Router alert
option anomalies.
type: str
ipv6-opttunnel:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_opttunnel. Tunnel encapsulation
limit option anomalies.
type: str
ipv6-plen-zero:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_plen_zero. Invalid IPv6
packet payload length zero anomalies.
type: str
ipv6-proto-err:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_proto_err. Layer 4 invalid
protocol anomalies.
type: str
ipv6-saddr-err:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_saddr_err. Source address
as multicast anomalies.
type: str
ipv6-unknopt:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_unknopt. Unknown option
anomalies.
type: str
ipv6-ver-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to ipv6_ver_err. Invalid IPv6 packet
version anomalies.
type: str
nvgre-minlen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to nvgre_minlen_err.
type: str
sctp-clen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to sctp_clen_err.
type: str
sctp-crc-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to sctp_crc_err.
type: str
sctp-l4len-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to sctp_l4len_err.
type: str
tcp-csum-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_csum_err. Invalid IPv4 TCP
packet checksum anomalies.
type: str
tcp-fin-noack:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_fin_noack. TCP SYN flood
with FIN flag set without ACK setting anomalies.
type: str
tcp-fin-only:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_fin_only. TCP SYN flood with
only FIN flag set anomalies.
type: str
tcp-hlen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_hlen_err. Invalid IPv4 TCP
header length anomalies.
type: str
tcp-hlenvsl4len-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_hlenvsl4len_err.
type: str
tcp-land:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_land. TCP land anomalies.
type: str
tcp-no-flag:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_no_flag. TCP SYN flood with
no flag set anomalies.
type: str
tcp-plen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_plen_err. Invalid IPv4 TCP
packet length anomalies.
type: str
tcp-syn-data:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_syn_data. TCP SYN flood packets
with data anomalies.
type: str
tcp-syn-fin:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_syn_fin. TCP SYN flood SYN/FIN
flag set anomalies.
type: str
tcp-winnuke:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to tcp_winnuke. TCP WinNuke anomalies.
type: str
udp-csum-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to udp_csum_err. Invalid IPv4 UDP
packet checksum anomalies.
type: str
udp-hlen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to udp_hlen_err. Invalid IPv4 UDP
packet header length anomalies.
type: str
udp-land:
choices:
- allow
- drop
- trap-to-host
description: Deprecated, please rename it to udp_land. UDP land anomalies.
type: str
udp-len-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to udp_len_err. Invalid IPv4 UDP
packet length anomalies.
type: str
udp-plen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to udp_plen_err. Invalid IPv4 UDP
packet minimum length anomalies.
type: str
udplite-cover-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to udplite_cover_err. Invalid IPv4
UDP-Lite packet coverage anomalies.
type: str
udplite-csum-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to udplite_csum_err. Invalid IPv4
UDP-Lite packet checksum anomalies.
type: str
uesp-minlen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to uesp_minlen_err.
type: str
unknproto-minlen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to unknproto_minlen_err. Invalid
IPv4 L4 unknown protocol short packet anomalies.
type: str
vxlan-minlen-err:
choices:
- drop
- trap-to-host
description: Deprecated, please rename it to vxlan_minlen_err.
type: str
type: dict
gtp-enhanced-cpu-range:
choices:
- '0'
- '1'
- '2'
description: Deprecated, please rename it to gtp_enhanced_cpu_range. GTP enhanced
CPU range option.
type: str
gtp-enhanced-mode:
choices:
- disable
- enable
description: Deprecated, please rename it to gtp_enhanced_mode. Enable/disable
GTP enhanced mode.
type: str
gtp-support:
choices:
- disable
- enable
description: Deprecated, please rename it to gtp_support. Enable/Disable NP7 GTP
support
type: str
hash-config:
choices:
- 5-tuple
- src-ip
- src-dst-ip
description: Deprecated, please rename it to hash_config. Configure NPU trunk
hash.
type: str
hash-ipv6-sel:
description: Deprecated, please rename it to hash_ipv6_sel. Select which 4bytes
of the IPv6 address are used for traffic hash
type: int
hash-tbl-spread:
choices:
- disable
- enable
description: Deprecated, please rename it to hash_tbl_spread. Enable/disable hash
table entry spread
type: str
host-shortcut-mode:
choices:
- bi-directional
- host-shortcut
description: Deprecated, please rename it to host_shortcut_mode. Set np6 host
shortcut mode.
type: str
hpe:
description: No description.
suboptions:
all-protocol:
description: Deprecated, please rename it to all_protocol. Maximum packet
rate of each host queue except high priority traffic
type: int
arp-max:
description: Deprecated, please rename it to arp_max. Maximum ARP packet rate
type: int
enable-queue-shaper:
choices:
- disable
- enable
description: Deprecated, please rename it to enable_queue_shaper. Enable/Disable
NPU host protection engine
type: str
enable-shaper:
choices:
- disable
- enable
description: Deprecated, please rename it to enable_shaper. Enable/Disable
NPU Host Protection Engine
type: str
esp-max:
description: Deprecated, please rename it to esp_max. Maximum ESP packet rate
type: int
exception-code:
description: Deprecated, please rename it to exception_code. Maximum exception
code rate of traffic
type: int
fragment-with-sess:
description: Deprecated, please rename it to fragment_with_sess. Maximum fragment
with session rate of traffic
type: int
fragment-without-session:
description: Deprecated, please rename it to fragment_without_session. Maximum
fragment without session rate of traffic
type: int
high-priority:
description: Deprecated, please rename it to high_priority. Maximum packet
rate for high priority traffic packets
type: int
icmp-max:
description: Deprecated, please rename it to icmp_max. Maximum ICMP packet
rate
type: int
ip-frag-max:
description: Deprecated, please rename it to ip_frag_max. Maximum fragmented
IP packet rate
type: int
ip-others-max:
description: Deprecated, please rename it to ip_others_max. Maximum IP packet
rate for other packets
type: int
l2-others-max:
description: Deprecated, please rename it to l2_others_max. Maximum L2 packet
rate for L2 packets that are not ARP packets
type: int
pri-type-max:
description: Deprecated, please rename it to pri_type_max. Maximum overflow
rate of priority type traffic
type: int
queue-shaper-max:
description: Deprecated, please rename it to queue_shaper_max. Maximum per
queue byte rate of traffic
type: int
sctp-max:
description: Deprecated, please rename it to sctp_max. Maximum SCTP packet
rate
type: int
tcp-max:
description: Deprecated, please rename it to tcp_max. Maximum TCP packet rate
type: int
tcpfin-rst-max:
description: Deprecated, please rename it to tcpfin_rst_max. Maximum TCP carries
FIN or RST flags packet rate
type: int
tcpsyn-ack-max:
description: Deprecated, please rename it to tcpsyn_ack_max. Maximum TCP carries
SYN and ACK flags packet rate
type: int
tcpsyn-max:
description: Deprecated, please rename it to tcpsyn_max. Maximum TCP SYN packet
rate
type: int
udp-max:
description: Deprecated, please rename it to udp_max. Maximum UDP packet rate
type: int
type: dict
htab-dedi-queue-nr:
description: Deprecated, please rename it to htab_dedi_queue_nr. Set the number
of dedicate queue for hash table messages.
type: int
htab-msg-queue:
choices:
- idle
- data
- dedicated
description: Deprecated, please rename it to htab_msg_queue. Set hash table message
queue mode.
type: str
htx-gtse-quota:
choices:
- 100Mbps
- 200Mbps
- 300Mbps
- 400Mbps
- 500Mbps
- 600Mbps
- 700Mbps
- 800Mbps
- 900Mbps
- 1Gbps
- 2Gbps
- 4Gbps
- 8Gbps
- 10Gbps
description: Deprecated, please rename it to htx_gtse_quota. Configure HTX GTSE
quota.
type: str
htx-icmp-csum-chk:
choices:
- pass
- drop
description: Deprecated, please rename it to htx_icmp_csum_chk. Set HTX icmp csum
checking mode.
type: str
hw-ha-scan-interval:
description: Deprecated, please rename it to hw_ha_scan_interval. HW HA periodical
scan interval in seconds
type: int
inbound-dscp-copy:
choices:
- disable
- enable
description: Deprecated, please rename it to inbound_dscp_copy. Enable/disable
copying the DSCP field from outer IP header to inner IP ...
type: str
inbound-dscp-copy-port:
description: (list) Deprecated, please rename it to inbound_dscp_copy_port.
type: raw
intf-shaping-offload:
choices:
- disable
- enable
description: Deprecated, please rename it to intf_shaping_offload. Enable/disable
NPU offload when doing interface-based traffic shapin...
type: str
ip-fragment-offload:
choices:
- disable
- enable
description: Deprecated, please rename it to ip_fragment_offload. Enable/disable
NP7 NPU IP fragment offload.
type: str
ip-reassembly:
description: Deprecated, please rename it to ip_reassembly.
suboptions:
max-timeout:
description: Deprecated, please rename it to max_timeout. Maximum timeout
value for IP reassembly
type: int
min-timeout:
description: Deprecated, please rename it to min_timeout. Minimum timeout
value for IP reassembly
type: int
status:
choices:
- disable
- enable
description: Set IP reassembly processing status.
type: str
type: dict
iph-rsvd-re-cksum:
choices:
- disable
- enable
description: Deprecated, please rename it to iph_rsvd_re_cksum. Enable/disable
IP checksum re-calculation for packets with iph.
type: str
ippool-overload-high:
description: Deprecated, please rename it to ippool_overload_high. High threshold
for overload ippool port reuse
type: int
ippool-overload-low:
description: Deprecated, please rename it to ippool_overload_low. Low threshold
for overload ippool port reuse
type: int
ipsec-STS-timeout:
choices:
- '1'
- '2'
- '3'
- '4'
- '5'
- '6'
- '7'
- '8'
- '9'
- '10'
description: Deprecated, please rename it to ipsec_STS_timeout. Set NP7Lite IPsec
STS msg timeout.
type: str
ipsec-dec-subengine-mask:
description: Deprecated, please rename it to ipsec_dec_subengine_mask. IPsec decryption
subengine mask
type: str
ipsec-enc-subengine-mask:
description: Deprecated, please rename it to ipsec_enc_subengine_mask. IPsec encryption
subengine mask
type: str
ipsec-host-dfclr:
choices:
- disable
- enable
description: Deprecated, please rename it to ipsec_host_dfclr. Enable/disable
DF clearing of NP4lite host IPsec offload.
type: str
ipsec-inbound-cache:
choices:
- disable
- enable
description: Deprecated, please rename it to ipsec_inbound_cache. Enable/disable
IPsec inbound cache for anti-replay.
type: str
ipsec-local-uesp-port:
description: Deprecated, please rename it to ipsec_local_uesp_port.
type: int
ipsec-mtu-override:
choices:
- disable
- enable
description: Deprecated, please rename it to ipsec_mtu_override. Enable/disable
NP6 IPsec MTU override.
type: str
ipsec-ob-np-sel:
choices:
- RR
- rr
- Packet
- Hash
description: Deprecated, please rename it to ipsec_ob_np_sel. IPsec NP selection
for OB SA offloading.
type: str
ipsec-over-vlink:
choices:
- disable
- enable
description: Deprecated, please rename it to ipsec_over_vlink. Enable/disable
IPSEC over vlink.
type: str
ipsec-throughput-msg-frequency:
choices:
- disable
- 32KB
- 64KB
- 128KB
- 256KB
- 512KB
- 1MB
- 2MB
- 4MB
- 8MB
- 16MB
- 32MB
- 64MB
- 128MB
- 256MB
- 512MB
- 1GB
description: Deprecated, please rename it to ipsec_throughput_msg_frequency. Set
NP7Lite IPsec throughput msg frequency
type: str
ipt-STS-timeout:
choices:
- '1'
- '2'
- '3'
- '4'
- '5'
- '6'
- '7'
- '8'
- '9'
- '10'
description: Deprecated, please rename it to ipt_STS_timeout. Set NP7Lite IPT
STS msg timeout.
type: str
ipt-throughput-msg-frequency:
choices:
- disable
- 32KB
- 64KB
- 128KB
- 256KB
- 512KB
- 1MB
- 2MB
- 4MB
- 8MB
- 16MB
- 32MB
- 64MB
- 128MB
- 256MB
- 512MB
- 1GB
description: Deprecated, please rename it to ipt_throughput_msg_frequency. Set
NP7Lite IPT throughput msg frequency
type: str
isf-np-queues:
description: Deprecated, please rename it to isf_np_queues.
suboptions:
cos0:
description: CoS profile name for CoS 0.
type: str
cos1:
description: CoS profile name for CoS 1.
type: str
cos2:
description: CoS profile name for CoS 2.
type: str
cos3:
description: CoS profile name for CoS 3.
type: str
cos4:
description: CoS profile name for CoS 4.
type: str
cos5:
description: CoS profile name for CoS 5.
type: str
cos6:
description: CoS profile name for CoS 6.
type: str
cos7:
description: CoS profile name for CoS 7.
type: str
type: dict
isf-np-rx-tr-distr:
choices:
- port-flow
- round-robin
- randomized
description: Deprecated, please rename it to isf_np_rx_tr_distr. Select ISF NP
Rx trunk distribution
type: str
lag-out-port-select:
choices:
- disable
- enable
description: Deprecated, please rename it to lag_out_port_select. Enable/disable
LAG outgoing port selection based on incoming traffic ...
type: str
max-receive-unit:
description: Deprecated, please rename it to max_receive_unit. Set the maximum
packet size for receive, larger packets will be silently...
type: int
max-session-timeout:
description: Deprecated, please rename it to max_session_timeout. Maximum time
interval for refreshing NPU-offloaded sessions
type: int
mcast-session-accounting:
choices:
- disable
- session-based
- tpe-based
description: Deprecated, please rename it to mcast_session_accounting. Enable/disable
traffic accounting for each multicast session thr...
type: str
mcast-session-counting:
choices:
- disable
- enable
- session-based
- tpe-based
description: Deprecated, please rename it to mcast_session_counting.
type: str
mcast-session-counting6:
choices:
- disable
- enable
- session-based
- tpe-based
description: Deprecated, please rename it to mcast_session_counting6. Enable/disable
traffic accounting for each multicast session6 thr...
type: str
napi-break-interval:
description: Deprecated, please rename it to napi_break_interval. NAPI break interval
type: int
nat46-force-ipv4-packet-forwarding:
choices:
- disable
- enable
description: Deprecated, please rename it to nat46_force_ipv4_packet_forwarding.
Enable/disable mandatory IPv4 packet forwarding in nat46.
type: str
np-queues:
description: Deprecated, please rename it to np_queues.
suboptions:
ethernet-type:
description: Deprecated, please rename it to ethernet_type.
elements: dict
suboptions:
name:
description: Ethernet Type Name.
type: str
queue:
description: Queue Number.
type: int
type:
description: Ethernet Type.
type: int
weight:
description: Class Weight.
type: int
type: list
ip-protocol:
description: Deprecated, please rename it to ip_protocol.
elements: dict
suboptions:
name:
description: IP Protocol Name.
type: str
protocol:
description: IP Protocol.
type: int
queue:
description: Queue Number.
type: int
weight:
description: Class Weight.
type: int
type: list
ip-service:
description: Deprecated, please rename it to ip_service.
elements: dict
suboptions:
dport:
description: Destination port.
type: int
name:
description: IP service name.
type: str
protocol:
description: IP protocol.
type: int
queue:
description: Queue number.
type: int
sport:
description: Source port.
type: int
weight:
description: Class weight.
type: int
type: list
profile:
description: No description.
elements: dict
suboptions:
cos0:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of CoS 0.
type: str
cos1:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of CoS 1.
type: str
cos2:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of CoS 2.
type: str
cos3:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of CoS 3.
type: str
cos4:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of CoS 4.
type: str
cos5:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of CoS 5.
type: str
cos6:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of CoS 6.
type: str
cos7:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of CoS 7.
type: str
dscp0:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 0.
type: str
dscp1:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 1.
type: str
dscp10:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 10.
type: str
dscp11:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 11.
type: str
dscp12:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 12.
type: str
dscp13:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 13.
type: str
dscp14:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 14.
type: str
dscp15:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 15.
type: str
dscp16:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 16.
type: str
dscp17:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 17.
type: str
dscp18:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 18.
type: str
dscp19:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 19.
type: str
dscp2:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 2.
type: str
dscp20:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 20.
type: str
dscp21:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 21.
type: str
dscp22:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 22.
type: str
dscp23:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 23.
type: str
dscp24:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 24.
type: str
dscp25:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 25.
type: str
dscp26:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 26.
type: str
dscp27:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 27.
type: str
dscp28:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 28.
type: str
dscp29:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 29.
type: str
dscp3:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 3.
type: str
dscp30:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 30.
type: str
dscp31:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 31.
type: str
dscp32:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 32.
type: str
dscp33:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 33.
type: str
dscp34:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 34.
type: str
dscp35:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 35.
type: str
dscp36:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 36.
type: str
dscp37:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 37.
type: str
dscp38:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 38.
type: str
dscp39:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 39.
type: str
dscp4:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 4.
type: str
dscp40:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 40.
type: str
dscp41:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 41.
type: str
dscp42:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 42.
type: str
dscp43:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 43.
type: str
dscp44:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 44.
type: str
dscp45:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 45.
type: str
dscp46:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 46.
type: str
dscp47:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 47.
type: str
dscp48:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 48.
type: str
dscp49:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 49.
type: str
dscp5:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 5.
type: str
dscp50:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 50.
type: str
dscp51:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 51.
type: str
dscp52:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 52.
type: str
dscp53:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 53.
type: str
dscp54:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 54.
type: str
dscp55:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 55.
type: str
dscp56:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 56.
type: str
dscp57:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 57.
type: str
dscp58:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 58.
type: str
dscp59:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 59.
type: str
dscp6:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 6.
type: str
dscp60:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 60.
type: str
dscp61:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 61.
type: str
dscp62:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 62.
type: str
dscp63:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 63.
type: str
dscp7:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 7.
type: str
dscp8:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 8.
type: str
dscp9:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description: Queue number of DSCP 9.
type: str
id:
description: Profile ID.
type: int
type:
choices:
- cos
- dscp
description: Profile type.
type: str
weight:
description: Class weight.
type: int
type: list
scheduler:
description: No description.
elements: dict
suboptions:
mode:
choices:
- none
- priority
- round-robin
description: Scheduler mode.
type: str
name:
description: Scheduler name.
type: str
type: list
type: dict
np6-cps-optimization-mode:
choices:
- disable
- enable
description: Deprecated, please rename it to np6_cps_optimization_mode. Enable/disable
NP6 connection per second
type: str
npu-group-effective-scope:
description: Deprecated, please rename it to npu_group_effective_scope. Npu-group-effective-scope
defines under which npu-group cmds su...
type: int
npu-tcam:
description: Deprecated, please rename it to npu_tcam.
elements: dict
suboptions:
data:
description: No description.
suboptions:
df:
choices:
- disable
- enable
description: Tcam data ip flag df.
type: str
dstip:
description: Tcam data dst ipv4 address.
type: str
dstipv6:
description: Tcam data dst ipv6 address.
type: str
dstmac:
description: Tcam data dst macaddr.
type: str
dstport:
description: Tcam data L4 dst port.
type: int
ethertype:
description: Tcam data ethertype.
type: str
ext-tag:
choices:
- disable
- enable
description: Deprecated, please rename it to ext_tag. Tcam data extension
tag.
type: str
frag-off:
description: Deprecated, please rename it to frag_off. Tcam data ip flag
fragment offset.
type: int
gen-buf-cnt:
description: Deprecated, please rename it to gen_buf_cnt. Tcam data gen
info buffer count.
type: int
gen-iv:
choices:
- invalid
- valid
description: Deprecated, please rename it to gen_iv. Tcam data gen info
iv.
type: str
gen-l3-flags:
description: Deprecated, please rename it to gen_l3_flags. Tcam data gen
info L3 flags.
type: int
gen-l4-flags:
description: Deprecated, please rename it to gen_l4_flags. Tcam data gen
info L4 flags.
type: int
gen-pkt-ctrl:
description: Deprecated, please rename it to gen_pkt_ctrl. Tcam data gen
info packet control.
type: int
gen-pri:
description: Deprecated, please rename it to gen_pri. Tcam data gen info
priority.
type: int
gen-pri-v:
choices:
- invalid
- valid
description: Deprecated, please rename it to gen_pri_v. Tcam data gen
info priority valid.
type: str
gen-tv:
choices:
- invalid
- valid
description: Deprecated, please rename it to gen_tv. Tcam data gen info
tv.
type: str
ihl:
description: Tcam data ipv4 IHL.
type: int
ip4-id:
description: Deprecated, please rename it to ip4_id. Tcam data ipv4 id.
type: int
ip6-fl:
description: Deprecated, please rename it to ip6_fl. Tcam data ipv6 flow
label.
type: int
ipver:
description: Tcam data ip header version.
type: int
l4-wd10:
description: Deprecated, please rename it to l4_wd10. Tcam data L4 word10.
type: int
l4-wd11:
description: Deprecated, please rename it to l4_wd11. Tcam data L4 word11.
type: int
l4-wd8:
description: Deprecated, please rename it to l4_wd8. Tcam data L4 word8.
type: int
l4-wd9:
description: Deprecated, please rename it to l4_wd9. Tcam data L4 word9.
type: int
mf:
choices:
- disable
- enable
description: Tcam data ip flag mf.
type: str
protocol:
description: Tcam data ip protocol.
type: int
slink:
description: Tcam data sublink.
type: int
smac-change:
choices:
- disable
- enable
description: Deprecated, please rename it to smac_change. Tcam data source
MAC change.
type: str
sp:
description: Tcam data source port.
type: int
src-cfi:
choices:
- disable
- enable
description: Deprecated, please rename it to src_cfi. Tcam data source
cfi.
type: str
src-prio:
description: Deprecated, please rename it to src_prio. Tcam data source
priority.
type: int
src-updt:
choices:
- disable
- enable
description: Deprecated, please rename it to src_updt. Tcam data source
update.
type: str
srcip:
description: Tcam data src ipv4 address.
type: str
srcipv6:
description: Tcam data src ipv6 address.
type: str
srcmac:
description: Tcam data src macaddr.
type: str
srcport:
description: Tcam data L4 src port.
type: int
svid:
description: Tcam data source vid.
type: int
tcp-ack:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_ack. Tcam data tcp flag
ack.
type: str
tcp-cwr:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_cwr. Tcam data tcp flag
cwr.
type: str
tcp-ece:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_ece. Tcam data tcp flag
ece.
type: str
tcp-fin:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_fin. Tcam data tcp flag
fin.
type: str
tcp-push:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_push. Tcam data tcp flag
push.
type: str
tcp-rst:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_rst. Tcam data tcp flag
rst.
type: str
tcp-syn:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_syn. Tcam data tcp flag
syn.
type: str
tcp-urg:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_urg. Tcam data tcp flag
urg.
type: str
tgt-cfi:
choices:
- disable
- enable
description: Deprecated, please rename it to tgt_cfi. Tcam data target
cfi.
type: str
tgt-prio:
description: Deprecated, please rename it to tgt_prio. Tcam data target
priority.
type: int
tgt-updt:
choices:
- disable
- enable
description: Deprecated, please rename it to tgt_updt. Tcam data target
port update.
type: str
tgt-v:
choices:
- invalid
- valid
description: Deprecated, please rename it to tgt_v. Tcam data target valid.
type: str
tos:
description: Tcam data ip tos.
type: int
tp:
description: Tcam data target port.
type: int
ttl:
description: Tcam data ip ttl.
type: int
tvid:
description: Tcam data target vid.
type: int
vdid:
description: Tcam data vdom id.
type: int
type: dict
dbg-dump:
description: Deprecated, please rename it to dbg_dump. Debug driver dump data/mask
pdq.
type: int
mask:
description: No description.
suboptions:
df:
choices:
- disable
- enable
description: Tcam mask ip flag df.
type: str
dstip:
description: Tcam mask dst ipv4 address.
type: str
dstipv6:
description: Tcam mask dst ipv6 address.
type: str
dstmac:
description: Tcam mask dst macaddr.
type: str
dstport:
description: Tcam mask L4 dst port.
type: int
ethertype:
description: Tcam mask ethertype.
type: str
ext-tag:
choices:
- disable
- enable
description: Deprecated, please rename it to ext_tag. Tcam mask extension
tag.
type: str
frag-off:
description: Deprecated, please rename it to frag_off. Tcam data ip flag
fragment offset.
type: int
gen-buf-cnt:
description: Deprecated, please rename it to gen_buf_cnt. Tcam mask gen
info buffer count.
type: int
gen-iv:
choices:
- invalid
- valid
description: Deprecated, please rename it to gen_iv. Tcam mask gen info
iv.
type: str
gen-l3-flags:
description: Deprecated, please rename it to gen_l3_flags. Tcam mask gen
info L3 flags.
type: int
gen-l4-flags:
description: Deprecated, please rename it to gen_l4_flags. Tcam mask gen
info L4 flags.
type: int
gen-pkt-ctrl:
description: Deprecated, please rename it to gen_pkt_ctrl. Tcam mask gen
info packet control.
type: int
gen-pri:
description: Deprecated, please rename it to gen_pri. Tcam mask gen info
priority.
type: int
gen-pri-v:
choices:
- invalid
- valid
description: Deprecated, please rename it to gen_pri_v. Tcam mask gen
info priority valid.
type: str
gen-tv:
choices:
- invalid
- valid
description: Deprecated, please rename it to gen_tv. Tcam mask gen info
tv.
type: str
ihl:
description: Tcam mask ipv4 IHL.
type: int
ip4-id:
description: Deprecated, please rename it to ip4_id. Tcam mask ipv4 id.
type: int
ip6-fl:
description: Deprecated, please rename it to ip6_fl. Tcam mask ipv6 flow
label.
type: int
ipver:
description: Tcam mask ip header version.
type: int
l4-wd10:
description: Deprecated, please rename it to l4_wd10. Tcam mask L4 word10.
type: int
l4-wd11:
description: Deprecated, please rename it to l4_wd11. Tcam mask L4 word11.
type: int
l4-wd8:
description: Deprecated, please rename it to l4_wd8. Tcam mask L4 word8.
type: int
l4-wd9:
description: Deprecated, please rename it to l4_wd9. Tcam mask L4 word9.
type: int
mf:
choices:
- disable
- enable
description: Tcam mask ip flag mf.
type: str
protocol:
description: Tcam mask ip protocol.
type: int
slink:
description: Tcam mask sublink.
type: int
smac-change:
choices:
- disable
- enable
description: Deprecated, please rename it to smac_change. Tcam mask source
MAC change.
type: str
sp:
description: Tcam mask source port.
type: int
src-cfi:
choices:
- disable
- enable
description: Deprecated, please rename it to src_cfi. Tcam mask source
cfi.
type: str
src-prio:
description: Deprecated, please rename it to src_prio. Tcam mask source
priority.
type: int
src-updt:
choices:
- disable
- enable
description: Deprecated, please rename it to src_updt. Tcam mask source
update.
type: str
srcip:
description: Tcam mask src ipv4 address.
type: str
srcipv6:
description: Tcam mask src ipv6 address.
type: str
srcmac:
description: Tcam mask src macaddr.
type: str
srcport:
description: Tcam mask L4 src port.
type: int
svid:
description: Tcam mask source vid.
type: int
tcp-ack:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_ack. Tcam mask tcp flag
ack.
type: str
tcp-cwr:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_cwr. Tcam mask tcp flag
cwr.
type: str
tcp-ece:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_ece. Tcam mask tcp flag
ece.
type: str
tcp-fin:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_fin. Tcam mask tcp flag
fin.
type: str
tcp-push:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_push. Tcam mask tcp flag
push.
type: str
tcp-rst:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_rst. Tcam mask tcp flag
rst.
type: str
tcp-syn:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_syn. Tcam mask tcp flag
syn.
type: str
tcp-urg:
choices:
- disable
- enable
description: Deprecated, please rename it to tcp_urg. Tcam mask tcp flag
urg.
type: str
tgt-cfi:
choices:
- disable
- enable
description: Deprecated, please rename it to tgt_cfi. Tcam mask target
cfi.
type: str
tgt-prio:
description: Deprecated, please rename it to tgt_prio. Tcam mask target
priority.
type: int
tgt-updt:
choices:
- disable
- enable
description: Deprecated, please rename it to tgt_updt. Tcam mask target
port update.
type: str
tgt-v:
choices:
- invalid
- valid
description: Deprecated, please rename it to tgt_v. Tcam mask target valid.
type: str
tos:
description: Tcam mask ip tos.
type: int
tp:
description: Tcam mask target port.
type: int
ttl:
description: Tcam mask ip ttl.
type: int
tvid:
description: Tcam mask target vid.
type: int
vdid:
description: Tcam mask vdom id.
type: int
type: dict
mir-act:
description: Deprecated, please rename it to mir_act.
suboptions:
vlif:
description: Tcam mirror action vlif.
type: int
type: dict
name:
description: NPU TCAM policies name.
type: str
oid:
description: NPU TCAM OID.
type: int
pri-act:
description: Deprecated, please rename it to pri_act.
suboptions:
priority:
description: Tcam priority action priority.
type: int
weight:
description: Tcam priority action weight.
type: int
type: dict
sact:
description: No description.
suboptions:
act:
description: Tcam sact act.
type: int
act-v:
choices:
- disable
- enable
description: Deprecated, please rename it to act_v. Enable to set sact
act.
type: str
bmproc:
description: Tcam sact bmproc.
type: int
bmproc-v:
choices:
- disable
- enable
description: Deprecated, please rename it to bmproc_v. Enable to set sact
bmproc.
type: str
df-lif:
description: Deprecated, please rename it to df_lif. Tcam sact df-lif.
type: int
df-lif-v:
choices:
- disable
- enable
description: Deprecated, please rename it to df_lif_v. Enable to set sact
df-lif.
type: str
dfr:
description: Tcam sact dfr.
type: int
dfr-v:
choices:
- disable
- enable
description: Deprecated, please rename it to dfr_v. Enable to set sact
dfr.
type: str
dmac-skip:
description: Deprecated, please rename it to dmac_skip. Tcam sact dmac-skip.
type: int
dmac-skip-v:
choices:
- disable
- enable
description: Deprecated, please rename it to dmac_skip_v. Enable to set
sact dmac-skip.
type: str
dosen:
description: Tcam sact dosen.
type: int
dosen-v:
choices:
- disable
- enable
description: Deprecated, please rename it to dosen_v. Enable to set sact
dosen.
type: str
espff-proc:
description: Deprecated, please rename it to espff_proc. Tcam sact espff-proc.
type: int
espff-proc-v:
choices:
- disable
- enable
description: Deprecated, please rename it to espff_proc_v. Enable to set
sact espff-proc.
type: str
etype-pid:
description: Deprecated, please rename it to etype_pid. Tcam sact etype-pid.
type: int
etype-pid-v:
choices:
- disable
- enable
description: Deprecated, please rename it to etype_pid_v. Enable to set
sact etype-pid.
type: str
frag-proc:
description: Deprecated, please rename it to frag_proc. Tcam sact frag-proc.
type: int
frag-proc-v:
choices:
- disable
- enable
description: Deprecated, please rename it to frag_proc_v. Enable to set
sact frag-proc.
type: str
fwd:
description: Tcam sact fwd.
type: int
fwd-lif:
description: Deprecated, please rename it to fwd_lif. Tcam sact fwd-lif.
type: int
fwd-lif-v:
choices:
- disable
- enable
description: Deprecated, please rename it to fwd_lif_v. Enable to set
sact fwd-lif.
type: str
fwd-tvid:
description: Deprecated, please rename it to fwd_tvid. Tcam sact fwd-tvid.
type: int
fwd-tvid-v:
choices:
- disable
- enable
description: Deprecated, please rename it to fwd_tvid_v. Enable to set
sact fwd-vid.
type: str
fwd-v:
choices:
- disable
- enable
description: Deprecated, please rename it to fwd_v. Enable to set sact
fwd.
type: str
icpen:
description: Tcam sact icpen.
type: int
icpen-v:
choices:
- disable
- enable
description: Deprecated, please rename it to icpen_v. Enable to set sact
icpen.
type: str
igmp-mld-snp:
description: Deprecated, please rename it to igmp_mld_snp. Tcam sact igmp-mld-snp.
type: int
igmp-mld-snp-v:
choices:
- disable
- enable
description: Deprecated, please rename it to igmp_mld_snp_v. Enable to
set sact igmp-mld-snp.
type: str
learn:
description: Tcam sact learn.
type: int
learn-v:
choices:
- disable
- enable
description: Deprecated, please rename it to learn_v. Enable to set sact
learn.
type: str
m-srh-ctrl:
description: Deprecated, please rename it to m_srh_ctrl. Tcam sact m-srh-ctrl.
type: int
m-srh-ctrl-v:
choices:
- disable
- enable
description: Deprecated, please rename it to m_srh_ctrl_v. Enable to set
sact m-srh-ctrl.
type: str
mac-id:
description: Deprecated, please rename it to mac_id. Tcam sact mac-id.
type: int
mac-id-v:
choices:
- disable
- enable
description: Deprecated, please rename it to mac_id_v. Enable to set sact
mac-id.
type: str
mss:
description: Tcam sact mss.
type: int
mss-v:
choices:
- disable
- enable
description: Deprecated, please rename it to mss_v. Enable to set sact
mss.
type: str
pleen:
description: Tcam sact pleen.
type: int
pleen-v:
choices:
- disable
- enable
description: Deprecated, please rename it to pleen_v. Enable to set sact
pleen.
type: str
prio-pid:
description: Deprecated, please rename it to prio_pid. Tcam sact prio-pid.
type: int
prio-pid-v:
choices:
- disable
- enable
description: Deprecated, please rename it to prio_pid_v. Enable to set
sact prio-pid.
type: str
promis:
description: Tcam sact promis.
type: int
promis-v:
choices:
- disable
- enable
description: Deprecated, please rename it to promis_v. Enable to set sact
promis.
type: str
rfsh:
description: Tcam sact rfsh.
type: int
rfsh-v:
choices:
- disable
- enable
description: Deprecated, please rename it to rfsh_v. Enable to set sact
rfsh.
type: str
smac-skip:
description: Deprecated, please rename it to smac_skip. Tcam sact smac-skip.
type: int
smac-skip-v:
choices:
- disable
- enable
description: Deprecated, please rename it to smac_skip_v. Enable to set
sact smac-skip.
type: str
tp-smchk-v:
choices:
- disable
- enable
description: Deprecated, please rename it to tp_smchk_v. Enable to set
sact tp mode.
type: str
tp_smchk:
description: Tcam sact tp mode.
type: int
tpe-id:
description: Deprecated, please rename it to tpe_id. Tcam sact tpe-id.
type: int
tpe-id-v:
choices:
- disable
- enable
description: Deprecated, please rename it to tpe_id_v. Enable to set sact
tpe-id.
type: str
vdm:
description: Tcam sact vdm.
type: int
vdm-v:
choices:
- disable
- enable
description: Deprecated, please rename it to vdm_v. Enable to set sact
vdm.
type: str
vdom-id:
description: Deprecated, please rename it to vdom_id. Tcam sact vdom-id.
type: int
vdom-id-v:
choices:
- disable
- enable
description: Deprecated, please rename it to vdom_id_v. Enable to set
sact vdom-id.
type: str
x-mode:
description: Deprecated, please rename it to x_mode. Tcam sact x-mode.
type: int
x-mode-v:
choices:
- disable
- enable
description: Deprecated, please rename it to x_mode_v. Enable to set sact
x-mode.
type: str
type: dict
tact:
description: No description.
suboptions:
act:
description: Tcam tact act.
type: int
act-v:
choices:
- disable
- enable
description: Deprecated, please rename it to act_v. Enable to set tact
act.
type: str
fmtuv4-s:
description: Deprecated, please rename it to fmtuv4_s. Tcam tact fmtuv4-s.
type: int
fmtuv4-s-v:
choices:
- disable
- enable
description: Deprecated, please rename it to fmtuv4_s_v. Enable to set
tact fmtuv4-s.
type: str
fmtuv6-s:
description: Deprecated, please rename it to fmtuv6_s. Tcam tact fmtuv6-s.
type: int
fmtuv6-s-v:
choices:
- disable
- enable
description: Deprecated, please rename it to fmtuv6_s_v. Enable to set
tact fmtuv6-s.
type: str
lnkid:
description: Tcam tact lnkid.
type: int
lnkid-v:
choices:
- disable
- enable
description: Deprecated, please rename it to lnkid_v. Enable to set tact
lnkid.
type: str
mac-id:
description: Deprecated, please rename it to mac_id. Tcam tact mac-id.
type: int
mac-id-v:
choices:
- disable
- enable
description: Deprecated, please rename it to mac_id_v. Enable to set tact
mac-id.
type: str
mss-t:
description: Deprecated, please rename it to mss_t. Tcam tact mss.
type: int
mss-t-v:
choices:
- disable
- enable
description: Deprecated, please rename it to mss_t_v. Enable to set tact
mss.
type: str
mtuv4:
description: Tcam tact mtuv4.
type: int
mtuv4-v:
choices:
- disable
- enable
description: Deprecated, please rename it to mtuv4_v. Enable to set tact
mtuv4.
type: str
mtuv6:
description: Tcam tact mtuv6.
type: int
mtuv6-v:
choices:
- disable
- enable
description: Deprecated, please rename it to mtuv6_v. Enable to set tact
mtuv6.
type: str
slif-act:
description: Deprecated, please rename it to slif_act. Tcam tact slif-act.
type: int
slif-act-v:
choices:
- disable
- enable
description: Deprecated, please rename it to slif_act_v. Enable to set
tact slif-act.
type: str
sublnkid:
description: Tcam tact sublnkid.
type: int
sublnkid-v:
choices:
- disable
- enable
description: Deprecated, please rename it to sublnkid_v. Enable to set
tact sublnkid.
type: str
tgtv-act:
description: Deprecated, please rename it to tgtv_act. Tcam tact tgtv-act.
type: int
tgtv-act-v:
choices:
- disable
- enable
description: Deprecated, please rename it to tgtv_act_v. Enable to set
tact tgtv-act.
type: str
tlif-act:
description: Deprecated, please rename it to tlif_act. Tcam tact tlif-act.
type: int
tlif-act-v:
choices:
- disable
- enable
description: Deprecated, please rename it to tlif_act_v. Enable to set
tact tlif-act.
type: str
tpeid:
description: Tcam tact tpeid.
type: int
tpeid-v:
choices:
- disable
- enable
description: Deprecated, please rename it to tpeid_v. Enable to set tact
tpeid.
type: str
v6fe:
description: Tcam tact v6fe.
type: int
v6fe-v:
choices:
- disable
- enable
description: Deprecated, please rename it to v6fe_v. Enable to set tact
v6fe.
type: str
vep-en-v:
choices:
- disable
- enable
description: Deprecated, please rename it to vep_en_v. Enable to set tact
vep-en.
type: str
vep-slid:
description: Deprecated, please rename it to vep_slid. Tcam tact vep_slid.
type: int
vep-slid-v:
choices:
- disable
- enable
description: Deprecated, please rename it to vep_slid_v. Enable to set
tact vep-slid.
type: str
vep_en:
description: Tcam tact vep_en.
type: int
xlt-lif:
description: Deprecated, please rename it to xlt_lif. Tcam tact xlt-lif.
type: int
xlt-lif-v:
choices:
- disable
- enable
description: Deprecated, please rename it to xlt_lif_v. Enable to set
tact xlt-lif.
type: str
xlt-vid:
description: Deprecated, please rename it to xlt_vid. Tcam tact xlt-vid.
type: int
xlt-vid-v:
choices:
- disable
- enable
description: Deprecated, please rename it to xlt_vid_v. Enable to set
tact xlt-vid.
type: str
type: dict
type:
choices:
- L2_src_tc
- L2_tgt_tc
- L2_src_mir
- L2_tgt_mir
- L2_src_act
- L2_tgt_act
- IPv4_src_tc
- IPv4_tgt_tc
- IPv4_src_mir
- IPv4_tgt_mir
- IPv4_src_act
- IPv4_tgt_act
- IPv6_src_tc
- IPv6_tgt_tc
- IPv6_src_mir
- IPv6_tgt_mir
- IPv6_src_act
- IPv6_tgt_act
description: TCAM policy type.
type: str
vid:
description: NPU TCAM VID.
type: int
type: list
nss-threads-option:
choices:
- 4t-eif
- 4t-noeif
- 2t
description: Deprecated, please rename it to nss_threads_option. Configure thread
options for the NP7s NSS module.
type: str
pba-eim:
choices:
- disallow
- allow
description: Deprecated, please rename it to pba_eim. Configure option for PBA
type: str
pba-port-select-mode:
choices:
- random
- direct
description: Deprecated, please rename it to pba_port_select_mode. Port selection
mode for PBA IP pool.
type: str
per-policy-accounting:
choices:
- disable
- enable
description: Deprecated, please rename it to per_policy_accounting. Set per-policy
accounting.
type: str
per-session-accounting:
choices:
- enable
- disable
- enable-by-log
- all-enable
- traffic-log-only
description: Deprecated, please rename it to per_session_accounting. Enable/disable
per-session accounting.
type: str
ple-non-syn-tcp-action:
choices:
- forward
- drop
description: Deprecated, please rename it to ple_non_syn_tcp_action. Configure
action for the PLE to take on TCP packets that have the ...
type: str
policy-offload-level:
choices:
- disable
- dos-offload
- full-offload
description: Deprecated, please rename it to policy_offload_level. Configure firewall
policy offload level
type: str
port-cpu-map:
description: Deprecated, please rename it to port_cpu_map.
elements: dict
suboptions:
cpu-core:
description: Deprecated, please rename it to cpu_core. The CPU core to map
to an interface.
type: str
interface:
description: The interface to map to a CPU core.
type: str
type: list
port-npu-map:
description: Deprecated, please rename it to port_npu_map.
elements: dict
suboptions:
interface:
description: Set npu interface port to NPU group map.
type: str
npu-group-index:
description: Deprecated, please rename it to npu_group_index. Mapping NPU
group index.
type: int
type: list
port-path-option:
description: Deprecated, please rename it to port_path_option.
suboptions:
ports-using-npu:
description: (list) Deprecated, please rename it to ports_using_npu.
type: raw
type: dict
priority-protocol:
description: Deprecated, please rename it to priority_protocol.
suboptions:
bfd:
choices:
- disable
- enable
description: Enable/disable NPU BFD priority protocol.
type: str
bgp:
choices:
- disable
- enable
description: Enable/disable NPU BGP priority protocol.
type: str
slbc:
choices:
- disable
- enable
description: Enable/disable NPU SLBC priority protocol.
type: str
type: dict
process-icmp-by-host:
choices:
- disable
- enable
description: Deprecated, please rename it to process_icmp_by_host. Enable/disable
process ICMP by host when received from IPsec tunnel ...
type: str
prp-port-in:
description: (list or str) Deprecated, please rename it to prp_port_in.
type: raw
prp-port-out:
description: (list or str) Deprecated, please rename it to prp_port_out.
type: raw
prp-session-clear-mode:
choices:
- blocking
- non-blocking
- do-not-clear
description: Deprecated, please rename it to prp_session_clear_mode. PRP session
clear mode for excluded ip sessions.
type: str
qos-mode:
choices:
- disable
- priority
- round-robin
description: Deprecated, please rename it to qos_mode. QoS mode on switch and
NP.
type: str
qtm-buf-mode:
choices:
- 6ch
- 4ch
description: Deprecated, please rename it to qtm_buf_mode. QTM channel configuration
for packet buffer.
type: str
rdp-offload:
choices:
- disable
- enable
description: Deprecated, please rename it to rdp_offload. Enable/disable rdp offload.
type: str
recover-np6-link:
choices:
- disable
- enable
description: Deprecated, please rename it to recover_np6_link. Enable/disable
internal link failure check and recovery after boot up.
type: str
rps-mode:
choices:
- disable
- enable
description: Deprecated, please rename it to rps_mode. Enable/disable receive
packet steering
type: str
session-acct-interval:
description: Deprecated, please rename it to session_acct_interval. Session accounting
update interval
type: int
session-denied-offload:
choices:
- disable
- enable
description: Deprecated, please rename it to session_denied_offload. Enable/disable
offloading of denied sessions.
type: str
shaping-stats:
choices:
- disable
- enable
description: Deprecated, please rename it to shaping_stats. Enable/disable NP7
traffic shaping statistics
type: str
spa-port-select-mode:
choices:
- random
- direct
description: Deprecated, please rename it to spa_port_select_mode. Port selection
mode for SPA IP pool.
type: str
split-ipsec-engines:
choices:
- disable
- enable
description: Deprecated, please rename it to split_ipsec_engines. Enable/disable
Split IPsec Engines.
type: str
sse-backpressure:
choices:
- disable
- enable
description: Deprecated, please rename it to sse_backpressure. Enable/disable
sse backpressure.
type: str
sse-ha-scan:
description: Deprecated, please rename it to sse_ha_scan.
suboptions:
gap:
description: Scanning message gap
type: int
max-session-cnt:
description: Deprecated, please rename it to max_session_cnt. If the session
count
type: int
min-duration:
description: Deprecated, please rename it to min_duration. Scanning filter
for minimum duration of the session.
type: int
type: dict
strip-clear-text-padding:
choices:
- disable
- enable
description: Deprecated, please rename it to strip_clear_text_padding. Enable/disable
stripping clear text padding.
type: str
strip-esp-padding:
choices:
- disable
- enable
description: Deprecated, please rename it to strip_esp_padding. Enable/disable
stripping ESP padding.
type: str
sw-eh-hash:
description: Deprecated, please rename it to sw_eh_hash.
suboptions:
computation:
choices:
- xor16
- xor8
- xor4
- crc16
description: Set hashing computation.
type: str
destination-ip-lower-16:
choices:
- include
- exclude
description: Deprecated, please rename it to destination_ip_lower_16. Include/exclude
destination IP address lower 16 bits.
type: str
destination-ip-upper-16:
choices:
- include
- exclude
description: Deprecated, please rename it to destination_ip_upper_16. Include/exclude
destination IP address upper 16 bits.
type: str
destination-port:
choices:
- include
- exclude
description: Deprecated, please rename it to destination_port. Include/exclude
destination port if TCP/UDP.
type: str
ip-protocol:
choices:
- include
- exclude
description: Deprecated, please rename it to ip_protocol. Include/exclude
IP protocol.
type: str
netmask-length:
description: Deprecated, please rename it to netmask_length. Network mask
length.
type: int
source-ip-lower-16:
choices:
- include
- exclude
description: Deprecated, please rename it to source_ip_lower_16. Include/exclude
source IP address lower 16 bits.
type: str
source-ip-upper-16:
choices:
- include
- exclude
description: Deprecated, please rename it to source_ip_upper_16. Include/exclude
source IP address upper 16 bits.
type: str
source-port:
choices:
- include
- exclude
description: Deprecated, please rename it to source_port. Include/exclude
source port if TCP/UDP.
type: str
type: dict
sw-np-bandwidth:
choices:
- 0G
- 2G
- 4G
- 5G
- 6G
- 7G
- 8G
- 9G
description: Deprecated, please rename it to sw_np_bandwidth. Bandwidth from switch
to NP.
type: str
sw-tr-hash:
description: Deprecated, please rename it to sw_tr_hash.
suboptions:
draco15:
choices:
- disable
- enable
description: Enable/disable DRACO15 hashing.
type: str
tcp-udp-port:
choices:
- include
- exclude
description: Deprecated, please rename it to tcp_udp_port. Include/exclude
TCP/UDP source and destination port for unicast trun...
type: str
type: dict
switch-np-hash:
choices:
- src-ip
- dst-ip
- src-dst-ip
description: Deprecated, please rename it to switch_np_hash. Switch-NP trunk port
selection Criteria.
type: str
tcp-rst-timeout:
description: Deprecated, please rename it to tcp_rst_timeout. TCP RST timeout
in seconds
type: int
tcp-timeout-profile:
description: Deprecated, please rename it to tcp_timeout_profile.
elements: dict
suboptions:
close-wait:
description: Deprecated, please rename it to close_wait. Set close-wait timeout
type: int
fin-wait:
description: Deprecated, please rename it to fin_wait. Set fin-wait timeout
type: int
id:
description: Timeout profile ID
type: int
syn-sent:
description: Deprecated, please rename it to syn_sent. Set syn-sent timeout
type: int
syn-wait:
description: Deprecated, please rename it to syn_wait. Set syn-wait timeout
type: int
tcp-idle:
description: Deprecated, please rename it to tcp_idle. Set TCP establish timeout
type: int
time-wait:
description: Deprecated, please rename it to time_wait. Set time-wait timeout
type: int
type: list
udp-timeout-profile:
description: Deprecated, please rename it to udp_timeout_profile.
elements: dict
suboptions:
id:
description: Timeout profile ID
type: int
udp-idle:
description: Deprecated, please rename it to udp_idle. Set UDP idle timeout
type: int
type: list
uesp-offload:
choices:
- disable
- enable
description: Deprecated, please rename it to uesp_offload. Enable/disable UDP-encapsulated
ESP offload
type: str
ull-port-mode:
choices:
- 10G
- 25G
description: Deprecated, please rename it to ull_port_mode. Set ULL ports speed
to 10G/25G
type: str
vlan-lookup-cache:
choices:
- disable
- enable
description: Deprecated, please rename it to vlan_lookup_cache. Enable/disable
vlan lookup cache
type: str
type: dict
access_token:
description: The token to access FortiManager without using username and password.
type: str
rc_succeeded:
description: The rc codes list with which the conditions to succeed will be overriden.
elements: int
type: list
proposed_method:
choices:
- update
- set
- add
description: The overridden method for the underlying Json RPC request.
type: str
bypass_validation:
default: false
description: Only set to True when module schema diffs with FortiManager API structure,
module continues to execute without validating parameters.
type: bool
workspace_locking_adom:
description: The adom to lock for FortiManager running in workspace mode, the value
can be global and others including root.
type: str
forticloud_access_token:
description: Authenticate Ansible client with forticloud API access token.
type: str
workspace_locking_timeout:
default: 300
description: The maximum time in seconds to wait for other user to release the workspace
lock.
type: int
meta:
contains:
request_url:
description: The full url requested.
returned: always
sample: /sys/login/user
type: str
response_code:
description: The status of api request.
returned: always
sample: 0
type: int
response_data:
description: The api response.
returned: always
type: list
response_message:
description: The descriptive message of the api response.
returned: always
sample: OK.
type: str
system_information:
description: The information of the target system.
returned: always
type: dict
description: The result of the request.
returned: always
type: dict
rc:
description: The status the request.
returned: always
sample: 0
type: int
version_check_warning:
description: Warning if the parameters used in the playbook are not supported by
the current FortiManager version.
returned: complex
type: list