Try SpotterConfigure NPU attributes in Fortinet's FortiOS and FortiGate.
| "added in version" 2.0.0 of fortinet.fortios"
Authors: Link Zheng (@chillancezen), Jie Xue (@JieX19), Hongbin Lu (@fgtdev-hblu), Frank Shen (@frankshen01), Miguel Angel Munoz (@mamunozgonzalez), Nicolas Thomas (@thomnico)
preview | supported by community
Install with ansible-galaxy collection install fortinet.fortios:==2.3.6
collections:
- name: fortinet.fortios
version: 2.3.6This module is able to configure a FortiGate or FortiOS (FOS) device by allowing the user to set and modify system feature and npu category. Examples include all parameters and values need to be adjusted to datasources before usage. Tested with FOS v6.0.0
- name: Configure NPU attributes.
fortinet.fortios.fortios_system_npu:
vdom: "{{ vdom }}"
system_npu:
capwap_offload: "enable"
dedicated_management_affinity: "<your_own_value>"
dedicated_management_cpu: "enable"
default_qos_type: "policing"
dos_options:
npu_dos_meter_mode: "global"
npu_dos_tpe_mode: "enable"
double_level_mcast_offload: "enable"
dsw_dts_profile:
-
action: "wait"
min_limit: "0"
profile_id: "<you_own_value>"
step: "0"
dsw_queue_dts_profile:
-
iport: "eif0"
name: "default_name_18"
oport: "eif0"
profile_id: "0"
queue_select: "0"
fastpath: "disable"
fp_anomaly:
icmp_csum_err: "drop"
icmp_frag: "allow"
icmp_land: "allow"
ipv4_csum_err: "drop"
ipv4_land: "allow"
ipv4_optlsrr: "allow"
ipv4_optrr: "allow"
ipv4_optsecurity: "allow"
ipv4_optssrr: "allow"
ipv4_optstream: "allow"
ipv4_opttimestamp: "allow"
ipv4_proto_err: "allow"
ipv4_unknopt: "allow"
ipv6_daddr_err: "allow"
ipv6_land: "allow"
ipv6_optendpid: "allow"
ipv6_opthomeaddr: "allow"
ipv6_optinvld: "allow"
ipv6_optjumbo: "allow"
ipv6_optnsap: "allow"
ipv6_optralert: "allow"
ipv6_opttunnel: "allow"
ipv6_proto_err: "allow"
ipv6_saddr_err: "allow"
ipv6_unknopt: "allow"
tcp_csum_err: "drop"
tcp_fin_noack: "allow"
tcp_fin_only: "allow"
tcp_land: "allow"
tcp_no_flag: "allow"
tcp_syn_data: "allow"
tcp_syn_fin: "allow"
tcp_winnuke: "allow"
udp_csum_err: "drop"
udp_land: "allow"
gtp_enhanced_cpu_range: "0"
gtp_enhanced_mode: "enable"
gtp_support: "enable"
hash_tbl_spread: "enable"
hpe:
all_protocol: "400000"
arp_max: "5000"
enable_shaper: "disable"
esp_max: "5000"
high_priority: "400000"
icmp_max: "5000"
ip_frag_max: "5000"
ip_others_max: "5000"
l2_others_max: "5000"
sctp_max: "5000"
tcp_max: "40000"
tcpfin_rst_max: "40000"
tcpsyn_ack_max: "40000"
tcpsyn_max: "40000"
udp_max: "40000"
htab_dedi_queue_nr: "4"
htab_msg_queue: "data"
htx_icmp_csum_chk: "drop"
inbound_dscp_copy_port:
-
interface: "<your_own_value>"
intf_shaping_offload: "enable"
ip_fragment_offload: "disable"
ip_reassembly:
max_timeout: "200000"
min_timeout: "64"
status: "disable"
ipsec_dec_subengine_mask: "<your_own_value>"
ipsec_enc_subengine_mask: "<your_own_value>"
ipsec_inbound_cache: "enable"
ipsec_mtu_override: "disable"
ipsec_ob_np_sel: "rr"
ipsec_over_vlink: "enable"
isf_np_queues:
cos0: "<your_own_value> (source system.isf-queue-profile.name)"
cos1: "<your_own_value> (source system.isf-queue-profile.name)"
cos2: "<your_own_value> (source system.isf-queue-profile.name)"
cos3: "<your_own_value> (source system.isf-queue-profile.name)"
cos4: "<your_own_value> (source system.isf-queue-profile.name)"
cos5: "<your_own_value> (source system.isf-queue-profile.name)"
cos6: "<your_own_value> (source system.isf-queue-profile.name)"
cos7: "<your_own_value> (source system.isf-queue-profile.name)"
lag_out_port_select: "disable"
max_receive_unit: "0"
max_session_timeout: "40"
mcast_session_accounting: "tpe-based"
napi_break_interval: "0"
np_queues:
ethernet_type:
-
name: "default_name_112"
queue: "0"
type: "<your_own_value>"
weight: "15"
ip_protocol:
-
name: "default_name_117"
protocol: "0"
queue: "0"
weight: "14"
ip_service:
-
dport: "0"
name: "default_name_123"
protocol: "0"
queue: "0"
sport: "0"
weight: "13"
profile:
-
cos0: "queue0"
cos1: "queue0"
cos2: "queue0"
cos3: "queue0"
cos4: "queue0"
cos5: "queue0"
cos6: "queue0"
cos7: "queue0"
dscp0: "queue0"
dscp1: "queue0"
dscp10: "queue0"
dscp11: "queue0"
dscp12: "queue0"
dscp13: "queue0"
dscp14: "queue0"
dscp15: "queue0"
dscp16: "queue0"
dscp17: "queue0"
dscp18: "queue0"
dscp19: "queue0"
dscp2: "queue0"
dscp20: "queue0"
dscp21: "queue0"
dscp22: "queue0"
dscp23: "queue0"
dscp24: "queue0"
dscp25: "queue0"
dscp26: "queue0"
dscp27: "queue0"
dscp28: "queue0"
dscp29: "queue0"
dscp3: "queue0"
dscp30: "queue0"
dscp31: "queue0"
dscp32: "queue0"
dscp33: "queue0"
dscp34: "queue0"
dscp35: "queue0"
dscp36: "queue0"
dscp37: "queue0"
dscp38: "queue0"
dscp39: "queue0"
dscp4: "queue0"
dscp40: "queue0"
dscp41: "queue0"
dscp42: "queue0"
dscp43: "queue0"
dscp44: "queue0"
dscp45: "queue0"
dscp46: "queue0"
dscp47: "queue0"
dscp48: "queue0"
dscp49: "queue0"
dscp5: "queue0"
dscp50: "queue0"
dscp51: "queue0"
dscp52: "queue0"
dscp53: "queue0"
dscp54: "queue0"
dscp55: "queue0"
dscp56: "queue0"
dscp57: "queue0"
dscp58: "queue0"
dscp59: "queue0"
dscp6: "queue0"
dscp60: "queue0"
dscp61: "queue0"
dscp62: "queue0"
dscp63: "queue0"
dscp7: "queue0"
dscp8: "queue0"
dscp9: "queue0"
id: "201"
type: "cos"
weight: "6"
scheduler:
-
mode: "none"
name: "default_name_206"
npu_group_effective_scope: "255"
npu_tcam:
-
data:
df: "enable"
dstip: "<your_own_value>"
dstipv6: "<your_own_value>"
dstmac: "<your_own_value>"
dstport: "0"
ethertype: "<your_own_value>"
ext_tag: "enable"
frag_off: "0"
gen_buf_cnt: "0"
gen_iv: "valid"
gen_l3_flags: "0"
gen_l4_flags: "0"
gen_pkt_ctrl: "0"
gen_pri: "0"
gen_pri_v: "valid"
gen_tv: "valid"
ihl: "0"
ip4_id: "0"
ip6_fl: "0"
ipver: "0"
l4_wd10: "0"
l4_wd11: "0"
l4_wd8: "0"
l4_wd9: "0"
mf: "enable"
protocol: "0"
slink: "0"
smac_change: "enable"
sp: "0"
src_cfi: "enable"
src_prio: "0"
src_updt: "enable"
srcip: "<your_own_value>"
srcipv6: "<your_own_value>"
srcmac: "<your_own_value>"
srcport: "0"
svid: "0"
tcp_ack: "enable"
tcp_cwr: "enable"
tcp_ece: "enable"
tcp_fin: "enable"
tcp_push: "enable"
tcp_rst: "enable"
tcp_syn: "enable"
tcp_urg: "enable"
tgt_cfi: "enable"
tgt_prio: "0"
tgt_updt: "enable"
tgt_v: "valid"
tos: "0"
tp: "0"
ttl: "0"
tvid: "0"
vdid: "0"
mask:
df: "enable"
dstip: "<your_own_value>"
dstipv6: "<your_own_value>"
dstmac: "<your_own_value>"
dstport: "0"
ethertype: "<your_own_value>"
ext_tag: "enable"
frag_off: "0"
gen_buf_cnt: "0"
gen_iv: "valid"
gen_l3_flags: "0"
gen_l4_flags: "0"
gen_pkt_ctrl: "0"
gen_pri: "0"
gen_pri_v: "valid"
gen_tv: "valid"
ihl: "0"
ip4_id: "0"
ip6_fl: "0"
ipver: "0"
l4_wd10: "0"
l4_wd11: "0"
l4_wd8: "0"
l4_wd9: "0"
mf: "enable"
protocol: "0"
slink: "0"
smac_change: "enable"
sp: "0"
src_cfi: "enable"
src_prio: "0"
src_updt: "enable"
srcip: "<your_own_value>"
srcipv6: "<your_own_value>"
srcmac: "<your_own_value>"
srcport: "0"
svid: "0"
tcp_ack: "enable"
tcp_cwr: "enable"
tcp_ece: "enable"
tcp_fin: "enable"
tcp_push: "enable"
tcp_rst: "enable"
tcp_syn: "enable"
tcp_urg: "enable"
tgt_cfi: "enable"
tgt_prio: "0"
tgt_updt: "enable"
tgt_v: "valid"
tos: "0"
tp: "0"
ttl: "0"
tvid: "0"
vdid: "0"
mir_act:
vlif: "0"
name: "default_name_321"
oid: "0"
pri_act:
priority: "0"
weight: "0"
sact:
act: "0"
act_v: "enable"
bmproc: "0"
bmproc_v: "enable"
df_lif: "0"
df_lif_v: "enable"
dfr: "0"
dfr_v: "enable"
dmac_skip: "0"
dmac_skip_v: "enable"
dosen: "0"
dosen_v: "enable"
espff_proc: "0"
espff_proc_v: "enable"
etype_pid: "0"
etype_pid_v: "enable"
frag_proc: "0"
frag_proc_v: "enable"
fwd: "0"
fwd_lif: "0"
fwd_lif_v: "enable"
fwd_tvid: "0"
fwd_tvid_v: "enable"
fwd_v: "enable"
icpen: "0"
icpen_v: "enable"
igmp_mld_snp: "0"
igmp_mld_snp_v: "enable"
learn: "0"
learn_v: "enable"
m_srh_ctrl: "0"
m_srh_ctrl_v: "enable"
mac_id: "0"
mac_id_v: "enable"
mss: "0"
mss_v: "enable"
pleen: "0"
pleen_v: "enable"
prio_pid: "0"
prio_pid_v: "enable"
promis: "0"
promis_v: "enable"
rfsh: "0"
rfsh_v: "enable"
smac_skip: "0"
smac_skip_v: "enable"
tp_smchk: "0"
tp_smchk_v: "enable"
tpe_id: "0"
tpe_id_v: "enable"
vdm: "0"
vdm_v: "enable"
vdom_id: "0"
vdom_id_v: "enable"
x_mode: "0"
x_mode_v: "enable"
tact:
act: "0"
act_v: "enable"
fmtuv4_s: "0"
fmtuv4_s_v: "enable"
fmtuv6_s: "0"
fmtuv6_s_v: "enable"
lnkid: "0"
lnkid_v: "enable"
mac_id: "0"
mac_id_v: "enable"
mss_t: "0"
mss_t_v: "enable"
mtuv4: "0"
mtuv4_v: "enable"
mtuv6: "0"
mtuv6_v: "enable"
slif_act: "0"
slif_act_v: "enable"
sublnkid: "0"
sublnkid_v: "enable"
tgtv_act: "0"
tgtv_act_v: "enable"
tlif_act: "0"
tlif_act_v: "enable"
tpeid: "0"
tpeid_v: "enable"
v6fe: "0"
v6fe_v: "enable"
vep_en: "0"
vep_en_v: "enable"
vep_slid: "0"
vep_slid_v: "enable"
xlt_lif: "0"
xlt_lif_v: "enable"
xlt_vid: "0"
xlt_vid_v: "enable"
type: "L2_src_tc"
vid: "0"
per_session_accounting: "traffic-log-only"
port_cpu_map:
-
cpu_core: "<your_own_value>"
interface: "<your_own_value>"
port_npu_map:
-
interface: "<your_own_value>"
npu_group_index: "0"
port_path_option:
ports_using_npu:
-
interface_name: "<your_own_value>"
priority_protocol:
bfd: "enable"
bgp: "enable"
slbc: "enable"
qos_mode: "disable"
qtm_buf_mode: "6ch"
rdp_offload: "enable"
session_acct_interval: "5"
session_denied_offload: "disable"
shaping_stats: "disable"
sse_backpressure: "enable"
strip_clear_text_padding: "enable"
strip_esp_padding: "enable"
sw_eh_hash:
computation: "xor16"
destination_ip_lower_16: "include"
destination_ip_upper_16: "include"
destination_port: "include"
ip_protocol: "include"
netmask_length: "32"
source_ip_lower_16: "include"
source_ip_upper_16: "include"
source_port: "include"
sw_np_bandwidth: "0G"
sw_tr_hash:
draco15: "enable"
tcp_udp_port: "include"
uesp_offload: "enable"
ull_port_mode: "10G"
vlan_lookup_cache: "enable"
vdom:
default: root
description:
- Virtual domain, among those defined previously. A vdom is a virtual instance of
the FortiGate that can be configured and used as a different unit.
type: str
enable_log:
default: false
description:
- Enable/Disable logging for task.
required: false
type: bool
system_npu:
default: null
description:
- Configure NPU attributes.
suboptions:
capwap_offload:
choices:
- enable
- disable
description:
- Enable/disable offloading managed FortiAP and FortiLink CAPWAP sessions.
type: str
dedicated_management_affinity:
description:
- Affinity setting for management daemons (hexadecimal value up to 256 bits in
the format of xxxxxxxxxxxxxxxx).
type: str
dedicated_management_cpu:
choices:
- enable
- disable
description:
- Enable to dedicate one CPU for GUI and CLI connections when NPs are busy.
type: str
default_qos_type:
choices:
- policing
- shaping
- policing-enhanced
description:
- Set default QoS type.
type: str
dos_options:
description:
- NPU DoS configurations.
suboptions:
npu_dos_meter_mode:
choices:
- global
- local
description:
- Set DoS meter NPU offloading mode.
type: str
npu_dos_tpe_mode:
choices:
- enable
- disable
description:
- Enable/disable insertion of DoS meter ID to session table.
type: str
type: dict
double_level_mcast_offload:
choices:
- enable
- disable
description:
- Enable double level mcast offload.
type: str
dsw_dts_profile:
description:
- Configure NPU DSW DTS profile.
elements: dict
suboptions:
action:
choices:
- wait
- drop
- drop_tmr_0
- drop_tmr_1
- enque
- enque_0
- enque_1
description:
- Set NPU DSW DTS profile action.
type: str
min_limit:
description:
- Set NPU DSW DTS profile min-limt.
type: int
profile_id:
description:
- Set NPU DSW DTS profile profile id. see <a href='#notes'>Notes</a>.
required: true
type: int
step:
description:
- Set NPU DSW DTS profile step.
type: int
type: list
dsw_queue_dts_profile:
description:
- Configure NPU DSW Queue DTS profile.
elements: dict
suboptions:
iport:
choices:
- eif0
- eif1
- eif2
- eif3
- eif4
- eif5
- eif6
- eif7
- htx0
- htx1
- sse0
- sse1
- sse2
- sse3
- rlt
- dfr
- ipseci
- ipseco
- ipti
- ipto
- vep0
- vep2
- vep4
- vep6
- ivs
- l2ti1
- l2to
- l2ti0
- ple
- spath
- qtm
description:
- Set NPU DSW DTS in port.
type: str
name:
description:
- Name.
required: true
type: str
oport:
choices:
- eif0
- eif1
- eif2
- eif3
- eif4
- eif5
- eif6
- eif7
- hrx
- sse0
- sse1
- sse2
- sse3
- rlt
- dfr
- ipseci
- ipseco
- ipti
- ipto
- vep0
- vep2
- vep4
- vep6
- ivs
- l2ti1
- l2to
- l2ti0
- ple
- sync
- nss
- tsk
- qtm
description:
- Set NPU DSW DTS out port.
type: str
profile_id:
description:
- Set NPU DSW DTS profile ID.
type: int
queue_select:
description:
- Set NPU DSW DTS queue ID select (0 - reset to default).
type: int
type: list
fastpath:
choices:
- disable
- enable
description:
- Enable/disable NP6 offloading (also called fast path).
type: str
fp_anomaly:
description:
- IPv4/IPv6 anomaly protection.
suboptions:
icmp_csum_err:
choices:
- drop
- trap-to-host
description:
- Invalid IPv4 ICMP checksum anomalies.
type: str
icmp_frag:
choices:
- allow
- drop
- trap-to-host
description:
- Layer 3 fragmented packets that could be part of layer 4 ICMP anomalies.
type: str
icmp_land:
choices:
- allow
- drop
- trap-to-host
description:
- ICMP land anomalies.
type: str
ipv4_csum_err:
choices:
- drop
- trap-to-host
description:
- Invalid IPv4 IP checksum anomalies.
type: str
ipv4_land:
choices:
- allow
- drop
- trap-to-host
description:
- Land anomalies.
type: str
ipv4_optlsrr:
choices:
- allow
- drop
- trap-to-host
description:
- Loose source record route option anomalies.
type: str
ipv4_optrr:
choices:
- allow
- drop
- trap-to-host
description:
- Record route option anomalies.
type: str
ipv4_optsecurity:
choices:
- allow
- drop
- trap-to-host
description:
- Security option anomalies.
type: str
ipv4_optssrr:
choices:
- allow
- drop
- trap-to-host
description:
- Strict source record route option anomalies.
type: str
ipv4_optstream:
choices:
- allow
- drop
- trap-to-host
description:
- Stream option anomalies.
type: str
ipv4_opttimestamp:
choices:
- allow
- drop
- trap-to-host
description:
- Timestamp option anomalies.
type: str
ipv4_proto_err:
choices:
- allow
- drop
- trap-to-host
description:
- Invalid layer 4 protocol anomalies.
type: str
ipv4_unknopt:
choices:
- allow
- drop
- trap-to-host
description:
- Unknown option anomalies.
type: str
ipv6_daddr_err:
choices:
- allow
- drop
- trap-to-host
description:
- Destination address as unspecified or loopback address anomalies.
type: str
ipv6_land:
choices:
- allow
- drop
- trap-to-host
description:
- Land anomalies.
type: str
ipv6_optendpid:
choices:
- allow
- drop
- trap-to-host
description:
- End point identification anomalies.
type: str
ipv6_opthomeaddr:
choices:
- allow
- drop
- trap-to-host
description:
- Home address option anomalies.
type: str
ipv6_optinvld:
choices:
- allow
- drop
- trap-to-host
description:
- Invalid option anomalies.Invalid option anomalies.
type: str
ipv6_optjumbo:
choices:
- allow
- drop
- trap-to-host
description:
- Jumbo options anomalies.
type: str
ipv6_optnsap:
choices:
- allow
- drop
- trap-to-host
description:
- Network service access point address option anomalies.
type: str
ipv6_optralert:
choices:
- allow
- drop
- trap-to-host
description:
- Router alert option anomalies.
type: str
ipv6_opttunnel:
choices:
- allow
- drop
- trap-to-host
description:
- Tunnel encapsulation limit option anomalies.
type: str
ipv6_proto_err:
choices:
- allow
- drop
- trap-to-host
description:
- Layer 4 invalid protocol anomalies.
type: str
ipv6_saddr_err:
choices:
- allow
- drop
- trap-to-host
description:
- Source address as multicast anomalies.
type: str
ipv6_unknopt:
choices:
- allow
- drop
- trap-to-host
description:
- Unknown option anomalies.
type: str
tcp_csum_err:
choices:
- drop
- trap-to-host
description:
- Invalid IPv4 TCP checksum anomalies.
type: str
tcp_fin_noack:
choices:
- allow
- drop
- trap-to-host
description:
- TCP SYN flood with FIN flag set without ACK setting anomalies.
type: str
tcp_fin_only:
choices:
- allow
- drop
- trap-to-host
description:
- TCP SYN flood with only FIN flag set anomalies.
type: str
tcp_land:
choices:
- allow
- drop
- trap-to-host
description:
- TCP land anomalies.
type: str
tcp_no_flag:
choices:
- allow
- drop
- trap-to-host
description:
- TCP SYN flood with no flag set anomalies.
type: str
tcp_syn_data:
choices:
- allow
- drop
- trap-to-host
description:
- TCP SYN flood packets with data anomalies.
type: str
tcp_syn_fin:
choices:
- allow
- drop
- trap-to-host
description:
- TCP SYN flood SYN/FIN flag set anomalies.
type: str
tcp_winnuke:
choices:
- allow
- drop
- trap-to-host
description:
- TCP WinNuke anomalies.
type: str
udp_csum_err:
choices:
- drop
- trap-to-host
description:
- Invalid IPv4 UDP checksum anomalies.
type: str
udp_land:
choices:
- allow
- drop
- trap-to-host
description:
- UDP land anomalies.
type: str
type: dict
gtp_enhanced_cpu_range:
choices:
- '0'
- '1'
- '2'
description:
- GTP enhanced CPU range option.
type: str
gtp_enhanced_mode:
choices:
- enable
- disable
description:
- Enable/disable GTP enhanced mode.
type: str
gtp_support:
choices:
- enable
- disable
description:
- Enable/Disable NP7 GTP support
type: str
hash_tbl_spread:
choices:
- enable
- disable
description:
- Enable/disable hash table entry spread .
type: str
hpe:
description:
- Host protection engine configuration.
suboptions:
all_protocol:
description:
- Maximum packet rate of each host queue except high priority traffic(1K -
32M pps), set 0 to disable.
type: int
arp_max:
description:
- Maximum ARP packet rate (1K - 32M pps). Entry is valid when ARP is removed
from high-priority traffic.
type: int
enable_shaper:
choices:
- disable
- enable
description:
- Enable/Disable NPU Host Protection Engine (HPE) for packet type shaper.
type: str
esp_max:
description:
- Maximum ESP packet rate (1K - 32M pps).
type: int
high_priority:
description:
- Maximum packet rate for high priority traffic packets (1K - 32M pps).
type: int
icmp_max:
description:
- Maximum ICMP packet rate (1K - 32M pps).
type: int
ip_frag_max:
description:
- Maximum fragmented IP packet rate (1K - 32M pps).
type: int
ip_others_max:
description:
- Maximum IP packet rate for other packets (packet types that cannot be set
with other options) (1K - 32G pps).
type: int
l2_others_max:
description:
- Maximum L2 packet rate for L2 packets that are not ARP packets (1K - 32M
pps).
type: int
sctp_max:
description:
- Maximum SCTP packet rate (1K - 32M pps).
type: int
tcp_max:
description:
- Maximum TCP packet rate (1K - 32M pps).
type: int
tcpfin_rst_max:
description:
- Maximum TCP carries FIN or RST flags packet rate (1K - 32M pps).
type: int
tcpsyn_ack_max:
description:
- Maximum TCP carries SYN and ACK flags packet rate (1K - 32M pps).
type: int
tcpsyn_max:
description:
- Maximum TCP SYN packet rate (1K - 40M pps).
type: int
udp_max:
description:
- Maximum UDP packet rate (1K - 32M pps).
type: int
type: dict
htab_dedi_queue_nr:
description:
- Set the number of dedicate queue for hash table messages.
type: int
htab_msg_queue:
choices:
- data
- idle
- dedicated
description:
- Set hash table message queue mode.
type: str
htx_icmp_csum_chk:
choices:
- drop
- pass
description:
- Set HTX icmp csum checking mode.
type: str
inbound_dscp_copy_port:
description:
- Physical interfaces that support inbound-dscp-copy.
elements: dict
suboptions:
interface:
description:
- Physical interface name.
required: true
type: str
type: list
intf_shaping_offload:
choices:
- enable
- disable
description:
- Enable/disable NPU offload when doing interface-based traffic shaping according
to the egress-shaping-profile.
type: str
ip_fragment_offload:
choices:
- disable
- enable
description:
- Enable/disable NP7 NPU IP fragment offload.
type: str
ip_reassembly:
description:
- IP reassebmly engine configuration.
suboptions:
max_timeout:
description:
- Maximum timeout value for IP reassembly (5 us - 600,000,000 us).
type: int
min_timeout:
description:
- Minimum timeout value for IP reassembly (5 us - 600,000,000 us).
type: int
status:
choices:
- disable
- enable
description:
- Set IP reassembly processing status.
type: str
type: dict
ipsec_dec_subengine_mask:
description:
- IPsec decryption subengine mask (0x1 - 0xff).
type: str
ipsec_enc_subengine_mask:
description:
- IPsec encryption subengine mask (0x1 - 0xff).
type: str
ipsec_inbound_cache:
choices:
- enable
- disable
description:
- Enable/disable IPsec inbound cache for anti-replay.
type: str
ipsec_mtu_override:
choices:
- disable
- enable
description:
- Enable/disable NP6 IPsec MTU override.
type: str
ipsec_ob_np_sel:
choices:
- rr
- Packet
- Hash
description:
- IPsec NP selection for OB SA offloading.
type: str
ipsec_over_vlink:
choices:
- enable
- disable
description:
- Enable/disable IPsec over vlink.
type: str
isf_np_queues:
description:
- Configure queues of switch port connected to NP6 XAUI on ingress path.
suboptions:
cos0:
description:
- CoS profile name for CoS 0. Source system.isf-queue-profile.name.
type: str
cos1:
description:
- CoS profile name for CoS 1. Source system.isf-queue-profile.name.
type: str
cos2:
description:
- CoS profile name for CoS 2. Source system.isf-queue-profile.name.
type: str
cos3:
description:
- CoS profile name for CoS 3. Source system.isf-queue-profile.name.
type: str
cos4:
description:
- CoS profile name for CoS 4. Source system.isf-queue-profile.name.
type: str
cos5:
description:
- CoS profile name for CoS 5. Source system.isf-queue-profile.name.
type: str
cos6:
description:
- CoS profile name for CoS 6. Source system.isf-queue-profile.name.
type: str
cos7:
description:
- CoS profile name for CoS 7. Source system.isf-queue-profile.name.
type: str
type: dict
lag_out_port_select:
choices:
- disable
- enable
description:
- Enable/disable LAG outgoing port selection based on incoming traffic port.
type: str
max_receive_unit:
description:
- Set the maximum packet size for receive, larger packets will be silently dropped.
type: int
max_session_timeout:
description:
- Maximum time interval for refreshing NPU-offloaded sessions (10 - 1000 sec).
type: int
mcast_session_accounting:
choices:
- tpe-based
- session-based
- disable
description:
- Enable/disable traffic accounting for each multicast session through TAE counter.
type: str
napi_break_interval:
description:
- NAPI break interval .
type: int
np_queues:
description:
- Configure queue assignment on NP7.
suboptions:
ethernet_type:
description:
- Configure a NP7 QoS Ethernet Type.
elements: dict
suboptions:
name:
description:
- Ethernet Type Name.
required: true
type: str
queue:
description:
- Queue Number.
type: int
type:
description:
- Ethernet Type.
type: str
weight:
description:
- Class Weight.
type: int
type: list
ip_protocol:
description:
- Configure a NP7 QoS IP Protocol.
elements: dict
suboptions:
name:
description:
- IP Protocol Name.
required: true
type: str
protocol:
description:
- IP Protocol.
type: int
queue:
description:
- Queue Number.
type: int
weight:
description:
- Class Weight.
type: int
type: list
ip_service:
description:
- Configure a NP7 QoS IP Service.
elements: dict
suboptions:
dport:
description:
- Destination port.
type: int
name:
description:
- IP service name.
required: true
type: str
protocol:
description:
- IP protocol.
type: int
queue:
description:
- Queue number.
type: int
sport:
description:
- Source port.
type: int
weight:
description:
- Class weight.
type: int
type: list
profile:
description:
- Configure a NP7 class profile.
elements: dict
suboptions:
cos0:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of CoS 0.
type: str
cos1:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of CoS 1.
type: str
cos2:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of CoS 2.
type: str
cos3:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of CoS 3.
type: str
cos4:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of CoS 4.
type: str
cos5:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of CoS 5.
type: str
cos6:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of CoS 6.
type: str
cos7:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of CoS 7.
type: str
dscp0:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 0.
type: str
dscp1:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 1.
type: str
dscp10:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 10.
type: str
dscp11:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 11.
type: str
dscp12:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 12.
type: str
dscp13:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 13.
type: str
dscp14:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 14.
type: str
dscp15:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 15.
type: str
dscp16:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 16.
type: str
dscp17:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 17.
type: str
dscp18:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 18.
type: str
dscp19:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 19.
type: str
dscp2:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 2.
type: str
dscp20:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 20.
type: str
dscp21:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 21.
type: str
dscp22:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 22.
type: str
dscp23:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 23.
type: str
dscp24:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 24.
type: str
dscp25:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 25.
type: str
dscp26:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 26.
type: str
dscp27:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 27.
type: str
dscp28:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 28.
type: str
dscp29:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 29.
type: str
dscp3:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 3.
type: str
dscp30:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 30.
type: str
dscp31:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 31.
type: str
dscp32:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 32.
type: str
dscp33:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 33.
type: str
dscp34:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 34.
type: str
dscp35:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 35.
type: str
dscp36:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 36.
type: str
dscp37:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 37.
type: str
dscp38:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 38.
type: str
dscp39:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 39.
type: str
dscp4:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 4.
type: str
dscp40:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 40.
type: str
dscp41:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 41.
type: str
dscp42:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 42.
type: str
dscp43:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 43.
type: str
dscp44:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 44.
type: str
dscp45:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 45.
type: str
dscp46:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 46.
type: str
dscp47:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 47.
type: str
dscp48:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 48.
type: str
dscp49:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 49.
type: str
dscp5:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 5.
type: str
dscp50:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 50.
type: str
dscp51:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 51.
type: str
dscp52:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 52.
type: str
dscp53:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 53.
type: str
dscp54:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 54.
type: str
dscp55:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 55.
type: str
dscp56:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 56.
type: str
dscp57:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 57.
type: str
dscp58:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 58.
type: str
dscp59:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 59.
type: str
dscp6:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 6.
type: str
dscp60:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 60.
type: str
dscp61:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 61.
type: str
dscp62:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 62.
type: str
dscp63:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 63.
type: str
dscp7:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 7.
type: str
dscp8:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 8.
type: str
dscp9:
choices:
- queue0
- queue1
- queue2
- queue3
- queue4
- queue5
- queue6
- queue7
description:
- Queue number of DSCP 9.
type: str
id:
description:
- Profile ID. see <a href='#notes'>Notes</a>.
required: true
type: int
type:
choices:
- cos
- dscp
description:
- Profile type.
type: str
weight:
description:
- Class weight.
type: int
type: list
scheduler:
description:
- Configure a NP7 QoS Scheduler.
elements: dict
suboptions:
mode:
choices:
- none
- priority
- round-robin
description:
- Scheduler mode.
type: str
name:
description:
- Scheduler name.
required: true
type: str
type: list
type: dict
npu_group_effective_scope:
description:
- npu-group-effective-scope defines under which npu-group cmds such as list/purge
will be excecuted. Default scope is for all four HS-ok groups. (0-3).
type: int
npu_tcam:
description:
- Configure NPU TCAM policies.
elements: dict
suboptions:
data:
description:
- Data fields of TCAM.
suboptions:
df:
choices:
- enable
- disable
description:
- tcam data ip flag df.
type: str
dstip:
description:
- tcam data dst ipv4 address.
type: str
dstipv6:
description:
- tcam data dst ipv6 address.
type: str
dstmac:
description:
- tcam data dst macaddr.
type: str
dstport:
description:
- tcam data L4 dst port.
type: int
ethertype:
description:
- tcam data ethertype.
type: str
ext_tag:
choices:
- enable
- disable
description:
- tcam data extension tag.
type: str
frag_off:
description:
- tcam data ip flag fragment offset.
type: int
gen_buf_cnt:
description:
- tcam data gen info buffer count.
type: int
gen_iv:
choices:
- valid
- invalid
description:
- tcam data gen info iv.
type: str
gen_l3_flags:
description:
- tcam data gen info L3 flags.
type: int
gen_l4_flags:
description:
- tcam data gen info L4 flags.
type: int
gen_pkt_ctrl:
description:
- tcam data gen info packet control.
type: int
gen_pri:
description:
- tcam data gen info priority.
type: int
gen_pri_v:
choices:
- valid
- invalid
description:
- tcam data gen info priority valid.
type: str
gen_tv:
choices:
- valid
- invalid
description:
- tcam data gen info tv.
type: str
ihl:
description:
- tcam data ipv4 IHL.
type: int
ip4_id:
description:
- tcam data ipv4 id.
type: int
ip6_fl:
description:
- tcam data ipv6 flow label.
type: int
ipver:
description:
- tcam data ip header version.
type: int
l4_wd10:
description:
- tcam data L4 word10.
type: int
l4_wd11:
description:
- tcam data L4 word11.
type: int
l4_wd8:
description:
- tcam data L4 word8.
type: int
l4_wd9:
description:
- tcam data L4 word9.
type: int
mf:
choices:
- enable
- disable
description:
- tcam data ip flag mf.
type: str
protocol:
description:
- tcam data ip protocol.
type: int
slink:
description:
- tcam data sublink.
type: int
smac_change:
choices:
- enable
- disable
description:
- tcam data source MAC change.
type: str
sp:
description:
- tcam data source port.
type: int
src_cfi:
choices:
- enable
- disable
description:
- tcam data source cfi.
type: str
src_prio:
description:
- tcam data source priority.
type: int
src_updt:
choices:
- enable
- disable
description:
- tcam data source update.
type: str
srcip:
description:
- tcam data src ipv4 address.
type: str
srcipv6:
description:
- tcam data src ipv6 address.
type: str
srcmac:
description:
- tcam data src macaddr.
type: str
srcport:
description:
- tcam data L4 src port.
type: int
svid:
description:
- tcam data source vid.
type: int
tcp_ack:
choices:
- enable
- disable
description:
- tcam data tcp flag ack.
type: str
tcp_cwr:
choices:
- enable
- disable
description:
- tcam data tcp flag cwr.
type: str
tcp_ece:
choices:
- enable
- disable
description:
- tcam data tcp flag ece.
type: str
tcp_fin:
choices:
- enable
- disable
description:
- tcam data tcp flag fin.
type: str
tcp_push:
choices:
- enable
- disable
description:
- tcam data tcp flag push.
type: str
tcp_rst:
choices:
- enable
- disable
description:
- tcam data tcp flag rst.
type: str
tcp_syn:
choices:
- enable
- disable
description:
- tcam data tcp flag syn.
type: str
tcp_urg:
choices:
- enable
- disable
description:
- tcam data tcp flag urg.
type: str
tgt_cfi:
choices:
- enable
- disable
description:
- tcam data target cfi.
type: str
tgt_prio:
description:
- tcam data target priority.
type: int
tgt_updt:
choices:
- enable
- disable
description:
- tcam data target port update.
type: str
tgt_v:
choices:
- valid
- invalid
description:
- tcam data target valid.
type: str
tos:
description:
- tcam data ip tos.
type: int
tp:
description:
- tcam data target port.
type: int
ttl:
description:
- tcam data ip ttl.
type: int
tvid:
description:
- tcam data target vid.
type: int
vdid:
description:
- tcam data vdom id.
type: int
type: dict
mask:
description:
- Mask fields of TCAM.
suboptions:
df:
choices:
- enable
- disable
description:
- tcam mask ip flag df.
type: str
dstip:
description:
- tcam mask dst ipv4 address.
type: str
dstipv6:
description:
- tcam mask dst ipv6 address.
type: str
dstmac:
description:
- tcam mask dst macaddr.
type: str
dstport:
description:
- tcam mask L4 dst port.
type: int
ethertype:
description:
- tcam mask ethertype.
type: str
ext_tag:
choices:
- enable
- disable
description:
- tcam mask extension tag.
type: str
frag_off:
description:
- tcam data ip flag fragment offset.
type: int
gen_buf_cnt:
description:
- tcam mask gen info buffer count.
type: int
gen_iv:
choices:
- valid
- invalid
description:
- tcam mask gen info iv.
type: str
gen_l3_flags:
description:
- tcam mask gen info L3 flags.
type: int
gen_l4_flags:
description:
- tcam mask gen info L4 flags.
type: int
gen_pkt_ctrl:
description:
- tcam mask gen info packet control.
type: int
gen_pri:
description:
- tcam mask gen info priority.
type: int
gen_pri_v:
choices:
- valid
- invalid
description:
- tcam mask gen info priority valid.
type: str
gen_tv:
choices:
- valid
- invalid
description:
- tcam mask gen info tv.
type: str
ihl:
description:
- tcam mask ipv4 IHL.
type: int
ip4_id:
description:
- tcam mask ipv4 id.
type: int
ip6_fl:
description:
- tcam mask ipv6 flow label.
type: int
ipver:
description:
- tcam mask ip header version.
type: int
l4_wd10:
description:
- tcam mask L4 word10.
type: int
l4_wd11:
description:
- tcam mask L4 word11.
type: int
l4_wd8:
description:
- tcam mask L4 word8.
type: int
l4_wd9:
description:
- tcam mask L4 word9.
type: int
mf:
choices:
- enable
- disable
description:
- tcam mask ip flag mf.
type: str
protocol:
description:
- tcam mask ip protocol.
type: int
slink:
description:
- tcam mask sublink.
type: int
smac_change:
choices:
- enable
- disable
description:
- tcam mask source MAC change.
type: str
sp:
description:
- tcam mask source port.
type: int
src_cfi:
choices:
- enable
- disable
description:
- tcam mask source cfi.
type: str
src_prio:
description:
- tcam mask source priority.
type: int
src_updt:
choices:
- enable
- disable
description:
- tcam mask source update.
type: str
srcip:
description:
- tcam mask src ipv4 address.
type: str
srcipv6:
description:
- tcam mask src ipv6 address.
type: str
srcmac:
description:
- tcam mask src macaddr.
type: str
srcport:
description:
- tcam mask L4 src port.
type: int
svid:
description:
- tcam mask source vid.
type: int
tcp_ack:
choices:
- enable
- disable
description:
- tcam mask tcp flag ack.
type: str
tcp_cwr:
choices:
- enable
- disable
description:
- tcam mask tcp flag cwr.
type: str
tcp_ece:
choices:
- enable
- disable
description:
- tcam mask tcp flag ece.
type: str
tcp_fin:
choices:
- enable
- disable
description:
- tcam mask tcp flag fin.
type: str
tcp_push:
choices:
- enable
- disable
description:
- tcam mask tcp flag push.
type: str
tcp_rst:
choices:
- enable
- disable
description:
- tcam mask tcp flag rst.
type: str
tcp_syn:
choices:
- enable
- disable
description:
- tcam mask tcp flag syn.
type: str
tcp_urg:
choices:
- enable
- disable
description:
- tcam mask tcp flag urg.
type: str
tgt_cfi:
choices:
- enable
- disable
description:
- tcam mask target cfi.
type: str
tgt_prio:
description:
- tcam mask target priority.
type: int
tgt_updt:
choices:
- enable
- disable
description:
- tcam mask target port update.
type: str
tgt_v:
choices:
- valid
- invalid
description:
- tcam mask target valid.
type: str
tos:
description:
- tcam mask ip tos.
type: int
tp:
description:
- tcam mask target port.
type: int
ttl:
description:
- tcam mask ip ttl.
type: int
tvid:
description:
- tcam mask target vid.
type: int
vdid:
description:
- tcam mask vdom id.
type: int
type: dict
mir_act:
description:
- Mirror action of TCAM.
suboptions:
vlif:
description:
- tcam mirror action vlif.
type: int
type: dict
name:
description:
- NPU TCAM policies name.
required: true
type: str
oid:
description:
- NPU TCAM OID.
type: int
pri_act:
description:
- Priority action of TCAM.
suboptions:
priority:
description:
- tcam priority action priority.
type: int
weight:
description:
- tcam priority action weight.
type: int
type: dict
sact:
description:
- Source action of TCAM.
suboptions:
act:
description:
- tcam sact act.
type: int
act_v:
choices:
- enable
- disable
description:
- Enable to set sact act.
type: str
bmproc:
description:
- tcam sact bmproc.
type: int
bmproc_v:
choices:
- enable
- disable
description:
- Enable to set sact bmproc.
type: str
df_lif:
description:
- tcam sact df-lif.
type: int
df_lif_v:
choices:
- enable
- disable
description:
- Enable to set sact df-lif.
type: str
dfr:
description:
- tcam sact dfr.
type: int
dfr_v:
choices:
- enable
- disable
description:
- Enable to set sact dfr.
type: str
dmac_skip:
description:
- tcam sact dmac-skip.
type: int
dmac_skip_v:
choices:
- enable
- disable
description:
- Enable to set sact dmac-skip.
type: str
dosen:
description:
- tcam sact dosen.
type: int
dosen_v:
choices:
- enable
- disable
description:
- Enable to set sact dosen.
type: str
espff_proc:
description:
- tcam sact espff-proc.
type: int
espff_proc_v:
choices:
- enable
- disable
description:
- Enable to set sact espff-proc.
type: str
etype_pid:
description:
- tcam sact etype-pid.
type: int
etype_pid_v:
choices:
- enable
- disable
description:
- Enable to set sact etype-pid.
type: str
frag_proc:
description:
- tcam sact frag-proc.
type: int
frag_proc_v:
choices:
- enable
- disable
description:
- Enable to set sact frag-proc.
type: str
fwd:
description:
- tcam sact fwd.
type: int
fwd_lif:
description:
- tcam sact fwd-lif.
type: int
fwd_lif_v:
choices:
- enable
- disable
description:
- Enable to set sact fwd-lif.
type: str
fwd_tvid:
description:
- tcam sact fwd-tvid.
type: int
fwd_tvid_v:
choices:
- enable
- disable
description:
- Enable to set sact fwd-vid.
type: str
fwd_v:
choices:
- enable
- disable
description:
- Enable to set sact fwd.
type: str
icpen:
description:
- tcam sact icpen.
type: int
icpen_v:
choices:
- enable
- disable
description:
- Enable to set sact icpen.
type: str
igmp_mld_snp:
description:
- tcam sact igmp-mld-snp.
type: int
igmp_mld_snp_v:
choices:
- enable
- disable
description:
- Enable to set sact igmp-mld-snp.
type: str
learn:
description:
- tcam sact learn.
type: int
learn_v:
choices:
- enable
- disable
description:
- Enable to set sact learn.
type: str
m_srh_ctrl:
description:
- tcam sact m-srh-ctrl.
type: int
m_srh_ctrl_v:
choices:
- enable
- disable
description:
- Enable to set sact m-srh-ctrl.
type: str
mac_id:
description:
- tcam sact mac-id.
type: int
mac_id_v:
choices:
- enable
- disable
description:
- Enable to set sact mac-id.
type: str
mss:
description:
- tcam sact mss.
type: int
mss_v:
choices:
- enable
- disable
description:
- Enable to set sact mss.
type: str
pleen:
description:
- tcam sact pleen.
type: int
pleen_v:
choices:
- enable
- disable
description:
- Enable to set sact pleen.
type: str
prio_pid:
description:
- tcam sact prio-pid.
type: int
prio_pid_v:
choices:
- enable
- disable
description:
- Enable to set sact prio-pid.
type: str
promis:
description:
- tcam sact promis.
type: int
promis_v:
choices:
- enable
- disable
description:
- Enable to set sact promis.
type: str
rfsh:
description:
- tcam sact rfsh.
type: int
rfsh_v:
choices:
- enable
- disable
description:
- Enable to set sact rfsh.
type: str
smac_skip:
description:
- tcam sact smac-skip.
type: int
smac_skip_v:
choices:
- enable
- disable
description:
- Enable to set sact smac-skip.
type: str
tp_smchk:
description:
- tcam sact tp mode.
type: int
tp_smchk_v:
choices:
- enable
- disable
description:
- Enable to set sact tp mode.
type: str
tpe_id:
description:
- tcam sact tpe-id.
type: int
tpe_id_v:
choices:
- enable
- disable
description:
- Enable to set sact tpe-id.
type: str
vdm:
description:
- tcam sact vdm.
type: int
vdm_v:
choices:
- enable
- disable
description:
- Enable to set sact vdm.
type: str
vdom_id:
description:
- tcam sact vdom-id.
type: int
vdom_id_v:
choices:
- enable
- disable
description:
- Enable to set sact vdom-id.
type: str
x_mode:
description:
- tcam sact x-mode.
type: int
x_mode_v:
choices:
- enable
- disable
description:
- Enable to set sact x-mode.
type: str
type: dict
tact:
description:
- Target action of TCAM.
suboptions:
act:
description:
- tcam tact act.
type: int
act_v:
choices:
- enable
- disable
description:
- Enable to set tact act.
type: str
fmtuv4_s:
description:
- tcam tact fmtuv4-s.
type: int
fmtuv4_s_v:
choices:
- enable
- disable
description:
- Enable to set tact fmtuv4-s.
type: str
fmtuv6_s:
description:
- tcam tact fmtuv6-s.
type: int
fmtuv6_s_v:
choices:
- enable
- disable
description:
- Enable to set tact fmtuv6-s.
type: str
lnkid:
description:
- tcam tact lnkid.
type: int
lnkid_v:
choices:
- enable
- disable
description:
- Enable to set tact lnkid.
type: str
mac_id:
description:
- tcam tact mac-id.
type: int
mac_id_v:
choices:
- enable
- disable
description:
- Enable to set tact mac-id.
type: str
mss_t:
description:
- tcam tact mss.
type: int
mss_t_v:
choices:
- enable
- disable
description:
- Enable to set tact mss.
type: str
mtuv4:
description:
- tcam tact mtuv4.
type: int
mtuv4_v:
choices:
- enable
- disable
description:
- Enable to set tact mtuv4.
type: str
mtuv6:
description:
- tcam tact mtuv6.
type: int
mtuv6_v:
choices:
- enable
- disable
description:
- Enable to set tact mtuv6.
type: str
slif_act:
description:
- tcam tact slif-act.
type: int
slif_act_v:
choices:
- enable
- disable
description:
- Enable to set tact slif-act.
type: str
sublnkid:
description:
- tcam tact sublnkid.
type: int
sublnkid_v:
choices:
- enable
- disable
description:
- Enable to set tact sublnkid.
type: str
tgtv_act:
description:
- tcam tact tgtv-act.
type: int
tgtv_act_v:
choices:
- enable
- disable
description:
- Enable to set tact tgtv-act.
type: str
tlif_act:
description:
- tcam tact tlif-act.
type: int
tlif_act_v:
choices:
- enable
- disable
description:
- Enable to set tact tlif-act.
type: str
tpeid:
description:
- tcam tact tpeid.
type: int
tpeid_v:
choices:
- enable
- disable
description:
- Enable to set tact tpeid.
type: str
v6fe:
description:
- tcam tact v6fe.
type: int
v6fe_v:
choices:
- enable
- disable
description:
- Enable to set tact v6fe.
type: str
vep_en:
description:
- tcam tact vep_en.
type: int
vep_en_v:
choices:
- enable
- disable
description:
- Enable to set tact vep-en.
type: str
vep_slid:
description:
- tcam tact vep_slid.
type: int
vep_slid_v:
choices:
- enable
- disable
description:
- Enable to set tact vep-slid.
type: str
xlt_lif:
description:
- tcam tact xlt-lif.
type: int
xlt_lif_v:
choices:
- enable
- disable
description:
- Enable to set tact xlt-lif.
type: str
xlt_vid:
description:
- tcam tact xlt-vid.
type: int
xlt_vid_v:
choices:
- enable
- disable
description:
- Enable to set tact xlt-vid.
type: str
type: dict
type:
choices:
- L2_src_tc
- L2_tgt_tc
- L2_src_mir
- L2_tgt_mir
- L2_src_act
- L2_tgt_act
- IPv4_src_tc
- IPv4_tgt_tc
- IPv4_src_mir
- IPv4_tgt_mir
- IPv4_src_act
- IPv4_tgt_act
- IPv6_src_tc
- IPv6_tgt_tc
- IPv6_src_mir
- IPv6_tgt_mir
- IPv6_src_act
- IPv6_tgt_act
description:
- TCAM policy type.
type: str
vid:
description:
- NPU TCAM VID.
type: int
type: list
per_session_accounting:
choices:
- traffic-log-only
- disable
- enable
description:
- Set per-session accounting.
type: str
port_cpu_map:
description:
- Configure NPU interface to CPU core mapping.
elements: dict
suboptions:
cpu_core:
description:
- The CPU core to map to an interface.
type: str
interface:
description:
- The interface to map to a CPU core.
required: true
type: str
type: list
port_npu_map:
description:
- Configure port to NPU group mapping.
elements: dict
suboptions:
interface:
description:
- Set NPU interface port for NPU group mapping.
required: true
type: str
npu_group_index:
description:
- Mapping NPU group index.
type: int
type: list
port_path_option:
description:
- Configure port using NPU or Intel-NIC.
suboptions:
ports_using_npu:
description:
- Set ha/aux ports to handle traffic with NPU (otherwise traffic goes to Intel-NIC
and then CPU).
elements: dict
suboptions:
interface_name:
description:
- Available interfaces for NPU path.
required: true
type: str
type: list
type: dict
priority_protocol:
description:
- Configure NPU priority protocol.
suboptions:
bfd:
choices:
- enable
- disable
description:
- Enable/disable NPU BFD priority protocol.
type: str
bgp:
choices:
- enable
- disable
description:
- Enable/disable NPU BGP priority protocol.
type: str
slbc:
choices:
- enable
- disable
description:
- Enable/disable NPU SLBC priority protocol.
type: str
type: dict
qos_mode:
choices:
- disable
- priority
- round-robin
description:
- QoS mode on switch and NP.
type: str
qtm_buf_mode:
choices:
- 6ch
- 4ch
description:
- QTM channel configuration for packet buffer.
type: str
rdp_offload:
choices:
- enable
- disable
description:
- Enable/disable RDP offload.
type: str
session_acct_interval:
description:
- Session accounting update interval (1 - 10 sec).
type: int
session_denied_offload:
choices:
- disable
- enable
description:
- Enable/disable offloading of denied sessions. Requires ses-denied-traffic to
be set.
type: str
shaping_stats:
choices:
- disable
- enable
description:
- Enable/disable NP7 traffic shaping statistics .
type: str
sse_backpressure:
choices:
- enable
- disable
description:
- Enable/disable SSE backpressure.
type: str
strip_clear_text_padding:
choices:
- enable
- disable
description:
- Enable/disable stripping clear text padding.
type: str
strip_esp_padding:
choices:
- enable
- disable
description:
- Enable/disable stripping ESP padding.
type: str
sw_eh_hash:
description:
- Configure switch enhanced hashing.
suboptions:
computation:
choices:
- xor16
- xor8
- xor4
- crc16
description:
- Set hashing computation.
type: str
destination_ip_lower_16:
choices:
- include
- exclude
description:
- Include/exclude destination IP address lower 16 bits.
type: str
destination_ip_upper_16:
choices:
- include
- exclude
description:
- Include/exclude destination IP address upper 16 bits.
type: str
destination_port:
choices:
- include
- exclude
description:
- Include/exclude destination port if TCP/UDP.
type: str
ip_protocol:
choices:
- include
- exclude
description:
- Include/exclude IP protocol.
type: str
netmask_length:
description:
- Network mask length.
type: int
source_ip_lower_16:
choices:
- include
- exclude
description:
- Include/exclude source IP address lower 16 bits.
type: str
source_ip_upper_16:
choices:
- include
- exclude
description:
- Include/exclude source IP address upper 16 bits.
type: str
source_port:
choices:
- include
- exclude
description:
- Include/exclude source port if TCP/UDP.
type: str
type: dict
sw_np_bandwidth:
choices:
- 0G
- 2G
- 4G
- 5G
- 6G
- 7G
- 8G
- 9G
description:
- Bandwidth from switch to NP.
type: str
sw_tr_hash:
description:
- Configure switch traditional hashing.
suboptions:
draco15:
choices:
- enable
- disable
description:
- Enable/disable DRACO15 hashing.
type: str
tcp_udp_port:
choices:
- include
- exclude
description:
- Include/exclude TCP/UDP source and destination port for unicast trunk traffic.
type: str
type: dict
uesp_offload:
choices:
- enable
- disable
description:
- Enable/disable UDP-encapsulated ESP offload .
type: str
ull_port_mode:
choices:
- 10G
- 25G
description:
- Set ULL port"s speed to 10G/25G .
type: str
vlan_lookup_cache:
choices:
- enable
- disable
description:
- Enable/disable vlan lookup cache .
type: str
type: dict
member_path:
description:
- Member attribute path to operate on.
- Delimited by a slash character if there are more than one attribute.
- Parameter marked with member_path is legitimate for doing member operation.
type: str
access_token:
description:
- Token-based authentication. Generated from GUI of Fortigate.
required: false
type: str
member_state:
choices:
- present
- absent
description:
- Add or delete a member under specified attribute path.
- When member_state is specified, the state option is ignored.
type: str
build: description: Build number of the fortigate image returned: always sample: '1547' type: str http_method: description: Last method used to provision the content into FortiGate returned: always sample: PUT type: str http_status: description: Last result given by FortiGate on last operation applied returned: always sample: '200' type: str mkey: description: Master key (id) used in the last call to FortiGate returned: success sample: id type: str name: description: Name of the table used to fulfill the request returned: always sample: urlfilter type: str path: description: Path of the table used to fulfill the request returned: always sample: webfilter type: str revision: description: Internal revision number returned: always sample: 17.0.2.10658 type: str serial: description: Serial number of the unit returned: always sample: FGVMEVYYQT3AB5352 type: str status: description: Indication of the operation's result returned: always sample: success type: str vdom: description: Virtual domain used returned: always sample: root type: str version: description: Version of the FortiGate returned: always sample: v5.6.3 type: str