:source: fortios_firewall_shaping_policy.py :orphan: .. fortios_firewall_shaping_policy: fortios_firewall_shaping_policy -- Configure shaping policies in Fortinet's FortiOS and FortiGate. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ .. versionadded:: 2.0.0 .. contents:: :local: :depth: 1 Synopsis -------- - This module is able to configure a FortiGate or FortiOS (FOS) device by allowing the user to set and modify firewall feature and shaping_policy category. Examples include all parameters and values need to be adjusted to datasources before usage. Tested with FOS v6.0.0 Requirements ------------ The below requirements are needed on the host that executes this module. - ansible>=2.15 Tips ---- Using member operation to add an element to an existing object. FortiOS Version Compatibility ----------------------------- Supported Version Ranges: v6.0.0 -> v7.6.6 Parameters ---------- .. raw:: html Notes ----- .. note:: - We highly recommend using your own value as the id instead of 0, while '0' is a special placeholder that allows the backend to assign the latest available number for the object, it does have limitations. Please find more details in Q&A. - Legacy fortiosapi has been deprecated, httpapi is the preferred way to run playbooks - Adjust object order by moving self after(before) another. - Only one of [after, before] must be specified when action is moving an object. - The module supports check_mode. Examples -------- .. code-block:: yaml+jinja - name: Configure shaping policies. fortinet.fortios.fortios_firewall_shaping_policy: vdom: "{{ vdom }}" state: "present" access_token: "" firewall_shaping_policy: app_category: - id: "4" app_group: - name: "default_name_6 (source application.group.name)" application: - id: "8" class_id: "0" comment: "Comments." cos: "" cos_mask: "" diffserv_forward: "enable" diffserv_reverse: "enable" diffservcode_forward: "" diffservcode_rev: "" dstaddr: - name: "default_name_18 (source firewall.address.name firewall.addrgrp.name)" dstaddr6: - name: "default_name_20 (source firewall.address6.name firewall.addrgrp6.name)" dstintf: - name: "default_name_22 (source system.interface.name system.zone.name system.sdwan.zone.name)" groups: - name: "default_name_24 (source user.group.name)" id: "25" internet_service: "enable" internet_service_custom: - name: "default_name_28 (source firewall.internet-service-custom.name)" internet_service_custom_group: - name: "default_name_30 (source firewall.internet-service-custom-group.name)" internet_service_fortiguard: - name: "default_name_32 (source firewall.internet-service-fortiguard.name)" internet_service_group: - name: "default_name_34 (source firewall.internet-service-group.name)" internet_service_id: - id: "36 (source firewall.internet-service.id)" internet_service_name: - name: "default_name_38 (source firewall.internet-service-name.name)" internet_service_src: "enable" internet_service_src_custom: - name: "default_name_41 (source firewall.internet-service-custom.name)" internet_service_src_custom_group: - name: "default_name_43 (source firewall.internet-service-custom-group.name)" internet_service_src_fortiguard: - name: "default_name_45 (source firewall.internet-service-fortiguard.name)" internet_service_src_group: - name: "default_name_47 (source firewall.internet-service-group.name)" internet_service_src_id: - id: "49 (source firewall.internet-service.id)" internet_service_src_name: - name: "default_name_51 (source firewall.internet-service-name.name)" ip_version: "4" name: "default_name_53" per_ip_shaper: " (source firewall.shaper.per-ip-shaper.name)" schedule: " (source firewall.schedule.onetime.name firewall.schedule.recurring.name firewall.schedule.group.name)" service: - name: "default_name_57 (source firewall.service.custom.name firewall.service.group.name)" srcaddr: - name: "default_name_59 (source firewall.address.name firewall.addrgrp.name)" srcaddr6: - name: "default_name_61 (source firewall.address6.name firewall.addrgrp6.name)" srcintf: - name: "default_name_63 (source system.interface.name system.zone.name system.sdwan.zone.name)" status: "enable" tos: "" tos_mask: "" tos_negate: "enable" traffic_shaper: " (source firewall.shaper.traffic-shaper.name)" traffic_shaper_reverse: " (source firewall.shaper.traffic-shaper.name)" traffic_type: "forwarding" url_category: - id: "72" users: - name: "default_name_74 (source user.local.name)" uuid: "" Return Values ------------- Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module: .. raw:: html
  • build - Build number of the fortigate image returned: always type: str sample: 1547
  • http_method - Last method used to provision the content into FortiGate returned: always type: str sample: PUT
  • http_status - Last result given by FortiGate on last operation applied returned: always type: str sample: 200
  • mkey - Master key (id) used in the last call to FortiGate returned: success type: str sample: id
  • name - Name of the table used to fulfill the request returned: always type: str sample: urlfilter
  • path - Path of the table used to fulfill the request returned: always type: str sample: webfilter
  • revision - Internal revision number returned: always type: str sample: 17.0.2.10658
  • serial - Serial number of the unit returned: always type: str sample: FGVMEVYYQT3AB5352
  • status - Indication of the operation's result returned: always type: str sample: success
  • vdom - Virtual domain used returned: always type: str sample: root
  • version - Version of the FortiGate returned: always type: str sample: v5.6.3
Status ------ - This module is not guaranteed to have a backwards compatible interface. Authors ------- - Link Zheng (@chillancezen) - Jie Xue (@JieX19) - Hongbin Lu (@fgtdev-hblu) - Frank Shen (@frankshen01) - Miguel Angel Munoz (@mamunozgonzalez) - Nicolas Thomas (@thomnico) .. hint:: If you notice any issues in this documentation, you can create a pull request to improve it.