fortios_system_global – Настройка глобальных атрибутов в FortiOS и FortiGate Fortinet

• Описание
• Требования
• Параметры
• Примечания
• Примеры
• Возвращаемые значения
• Статус

Описание

• Этот модуль позволяет настроить устройство FortiGate или FortiOS (FOS), позволяя пользователю устанавливать и изменять системные функции и глобальные категории. Примеры включают все параметры и значения, которые должны быть настроены в источниках данных перед использованием. Тестировано на FOS v6.0.5

Требования

Ниже приведены требования к хосту, на котором выполняется этот модуль.

• fortiosapi>=0.9.8

Параметры

Примечания

Примеры

- hosts: localhost
  vars:
   host: "192.168.122.40"
   username: "admin"
   password: ""
   vdom: "root"
   ssl_verify: "False"
  tasks:
  - name: Configure global attributes.
    fortios_system_global:
      host:  "{{ host }}"
      username: "{{ username }}"
      password: "{{ password }}"
      vdom:  "{{ vdom }}"
      https: "False"
      system_global:
        admin_concurrent: "enable"
        admin_console_timeout: "4"
        admin_https_pki_required: "enable"
        admin_https_ssl_versions: "tlsv1-0"
        admin_lockout_duration: "7"
        admin_lockout_threshold: "8"
        admin_login_max: "9"
        admin_maintainer: "enable"
        admin_port: "11"
        admin_restrict_local: "enable"
        admin_scp: "enable"
        admin_server_cert: "<your_own_value> (source certificate.local.name)"
        admin_sport: "15"
        admin_ssh_grace_time: "16"
        admin_ssh_password: "enable"
        admin_ssh_port: "18"
        admin_ssh_v1: "enable"
        admin_telnet_port: "20"
        admintimeout: "21"
        alias: "<your_own_value>"
        allow_traffic_redirect: "enable"
        anti_replay: "disable"
        arp_max_entry: "25"
        asymroute: "enable"
        auth_cert: "<your_own_value> (source certificate.local.name)"
        auth_http_port: "28"
        auth_https_port: "29"
        auth_keepalive: "enable"
        auth_session_limit: "block-new"
        auto_auth_extension_device: "enable"
        av_affinity: "<your_own_value>"
        av_failopen: "pass"
        av_failopen_session: "enable"
        batch_cmdb: "enable"
        block_session_timer: "37"
        br_fdb_max_entry: "38"
        cert_chain_max: "39"
        cfg_revert_timeout: "40"
        cfg_save: "automatic"
        check_protocol_header: "loose"
        check_reset_range: "strict"
        cli_audit_log: "enable"
        clt_cert_req: "enable"
        compliance_check: "enable"
        compliance_check_time: "<your_own_value>"
        cpu_use_threshold: "48"
        csr_ca_attribute: "enable"
        daily_restart: "enable"
        device_identification_active_scan_delay: "51"
        device_idle_timeout: "52"
        dh_params: "1024"
        dnsproxy_worker_count: "54"
        dst: "enable"
        endpoint_control_fds_access: "enable"
        endpoint_control_portal_port: "57"
        failtime: "58"
        fds_statistics: "enable"
        fds_statistics_period: "60"
        fgd_alert_subscription: "advisory"
        fortiextender: "enable"
        fortiextender_data_port: "63"
        fortiextender_vlan_mode: "enable"
        fortiservice_port: "65"
        gui_certificates: "enable"
        gui_custom_language: "enable"
        gui_date_format: "yyyy/MM/dd"
        gui_device_latitude: "<your_own_value>"
        gui_device_longitude: "<your_own_value>"
        gui_display_hostname: "enable"
        gui_ipv6: "enable"
        gui_lines_per_page: "73"
        gui_theme: "green"
        gui_wireless_opensecurity: "enable"
        honor_df: "enable"
        hostname: "myhostname"
        igmp_state_limit: "78"
        interval: "79"
        ip_src_port_range: "<your_own_value>"
        ips_affinity: "<your_own_value>"
        ipsec_asic_offload: "enable"
        ipsec_hmac_offload: "enable"
        ipsec_soft_dec_async: "enable"
        ipv6_accept_dad: "85"
        ipv6_allow_anycast_probe: "enable"
        language: "english"
        ldapconntimeout: "88"
        lldp_transmission: "enable"
        log_ssl_connection: "enable"
        log_uuid: "disable"
        login_timestamp: "enable"
        long_vdom_name: "enable"
        management_vdom: "<your_own_value> (source system.vdom.name)"
        max_dlpstat_memory: "95"
        max_route_cache_size: "96"
        mc_ttl_notchange: "enable"
        memory_use_threshold_extreme: "98"
        memory_use_threshold_green: "99"
        memory_use_threshold_red: "100"
        miglog_affinity: "<your_own_value>"
        miglogd_children: "102"
        multi_factor_authentication: "optional"
        multicast_forward: "enable"
        ndp_max_entry: "105"
        per_user_bwl: "enable"
        policy_auth_concurrent: "107"
        post_login_banner: "disable"
        pre_login_banner: "enable"
        private_data_encryption: "disable"
        proxy_auth_lifetime: "enable"
        proxy_auth_lifetime_timeout: "112"
        proxy_auth_timeout: "113"
        proxy_cipher_hardware_acceleration: "disable"
        proxy_kxp_hardware_acceleration: "disable"
        proxy_re_authentication_mode: "session"
        proxy_worker_count: "117"
        radius_port: "118"
        reboot_upon_config_restore: "enable"
        refresh: "120"
        remoteauthtimeout: "121"
        reset_sessionless_tcp: "enable"
        restart_time: "<your_own_value>"
        revision_backup_on_logout: "enable"
        revision_image_auto_backup: "enable"
        scanunit_count: "126"
        security_rating_result_submission: "enable"
        security_rating_run_on_schedule: "enable"
        send_pmtu_icmp: "enable"
        snat_route_change: "enable"
        special_file_23_support: "disable"
        ssd_trim_date: "132"
        ssd_trim_freq: "never"
        ssd_trim_hour: "134"
        ssd_trim_min: "135"
        ssd_trim_weekday: "sunday"
        ssh_cbc_cipher: "enable"
        ssh_hmac_md5: "enable"
        ssh_kex_sha1: "enable"
        ssl_min_proto_version: "SSLv3"
        ssl_static_key_ciphers: "enable"
        sslvpn_cipher_hardware_acceleration: "enable"
        sslvpn_kxp_hardware_acceleration: "enable"
        sslvpn_max_worker_count: "144"
        sslvpn_plugin_version_check: "enable"
        strict_dirty_session_check: "enable"
        strong_crypto: "enable"
        switch_controller: "disable"
        switch_controller_reserved_network: "<your_own_value>"
        sys_perf_log_interval: "150"
        tcp_halfclose_timer: "151"
        tcp_halfopen_timer: "152"
        tcp_option: "enable"
        tcp_timewait_timer: "154"
        tftp: "enable"
        timezone: "01"
        tp_mc_skip_policy: "enable"
        traffic_priority: "tos"
        traffic_priority_level: "low"
        two_factor_email_expiry: "160"
        two_factor_fac_expiry: "161"
        two_factor_ftk_expiry: "162"
        two_factor_ftm_expiry: "163"
        two_factor_sms_expiry: "164"
        udp_idle_timer: "165"
        user_server_cert: "<your_own_value> (source certificate.local.name)"
        vdom_admin: "enable"
        vip_arp_range: "unlimited"
        virtual_server_count: "169"
        virtual_server_hardware_acceleration: "disable"
        wad_affinity: "<your_own_value>"
        wad_csvc_cs_count: "172"
        wad_csvc_db_count: "173"
        wad_source_affinity: "disable"
        wad_worker_count: "175"
        wifi_ca_certificate: "<your_own_value> (source certificate.ca.name)"
        wifi_certificate: "<your_own_value> (source certificate.local.name)"
        wimax_4g_usb: "enable"
        wireless_controller: "enable"
        wireless_controller_port: "180"

Значения возврата

Общие значения возврата документированы здесь, следующие являются полями, уникальными для этого модуля:

Статус

• Этот модуль не гарантирует обратной совместимости интерфейса. [превью]
• Этот модуль поддерживается сообществом Ansible. [сообщество]

Авторы

• Miguel Angel Munoz (@mamunozgonzalez)
• Nicolas Thomas (@thomnico)