fortios_router_bgp – Configure BGP in Fortinet’s FortiOS and FortiGate.

New in version 2.10.

Synopsis

  • This module is able to configure a FortiGate or FortiOS (FOS) device by allowing the user to set and modify router feature and bgp category. Examples include all parameters and values need to be adjusted to datasources before usage. Tested with FOS v6.0.0

Requirements

The below requirements are needed on the host that executes this module.

  • ansible>=2.9.0

FortiOS Version Compatibility


v6.0.0 v6.0.5 v6.0.11 v6.2.0 v6.2.3 v6.2.5 v6.2.7 v6.4.0 v6.4.1 v6.4.4 v7.0.0
fortios_router_bgp yes yes yes yes yes yes yes yes yes yes yes

Parameters

  • access_token - Token-based authentication. Generated from GUI of Fortigate. type: str required: False
  • enable_log - Enable/Disable logging for task. type: bool required: False default: False
  • vdom - Virtual domain, among those defined previously. A vdom is a virtual instance of the FortiGate that can be configured and used as a different unit. type: str default: root
  • router_bgp - Configure BGP. type: dict more...
    • additional_path - Enable/disable selection of BGP IPv4 additional paths. type: str choices: enable, disable more...
    • additional_path_select - Number of additional paths to be selected for each IPv4 NLRI. type: int more...
    • additional_path_select6 - Number of additional paths to be selected for each IPv6 NLRI. type: int more...
    • additional_path6 - Enable/disable selection of BGP IPv6 additional paths. type: str choices: enable, disable more...
    • admin_distance - Administrative distance modifications. type: list more...
      • distance - Administrative distance to apply (1 - 255). type: int more...
      • id - ID. type: int required: True more...
      • neighbour_prefix - Neighbor address prefix. type: str more...
      • route_list - Access list of routes to apply new distance to. Source router.access-list.name. type: str more...
    • aggregate_address - BGP aggregate address table. type: list more...
      • as_set - Enable/disable generate AS set path information. type: str choices: enable, disable more...
      • id - ID. type: int required: True more...
      • prefix - Aggregate prefix. type: str more...
      • summary_only - Enable/disable filter more specific routes from updates. type: str choices: enable, disable more...
    • aggregate_address6 - BGP IPv6 aggregate address table. type: list more...
      • as_set - Enable/disable generate AS set path information. type: str choices: enable, disable more...
      • id - ID. type: int required: True more...
      • prefix6 - Aggregate IPv6 prefix. type: str more...
      • summary_only - Enable/disable filter more specific routes from updates. type: str choices: enable, disable more...
    • always_compare_med - Enable/disable always compare MED. type: str choices: enable, disable more...
    • as - Router AS number, valid from 1 to 4294967295, 0 to disable BGP. type: int more...
    • bestpath_as_path_ignore - Enable/disable ignore AS path. type: str choices: enable, disable more...
    • bestpath_cmp_confed_aspath - Enable/disable compare federation AS path length. type: str choices: enable, disable more...
    • bestpath_cmp_routerid - Enable/disable compare router ID for identical EBGP paths. type: str choices: enable, disable more...
    • bestpath_med_confed - Enable/disable compare MED among confederation paths. type: str choices: enable, disable more...
    • bestpath_med_missing_as_worst - Enable/disable treat missing MED as least preferred. type: str choices: enable, disable more...
    • client_to_client_reflection - Enable/disable client-to-client route reflection. type: str choices: enable, disable more...
    • cluster_id - Route reflector cluster ID. type: str more...
    • confederation_identifier - Confederation identifier. type: int more...
    • confederation_peers - Confederation peers. type: list more...
      • peer - Peer ID. type: str required: True more...
    • dampening - Enable/disable route-flap dampening. type: str choices: enable, disable more...
    • dampening_max_suppress_time - Maximum minutes a route can be suppressed. type: int more...
    • dampening_reachability_half_life - Reachability half-life time for penalty (min). type: int more...
    • dampening_reuse - Threshold to reuse routes. type: int more...
    • dampening_route_map - Criteria for dampening. Source router.route-map.name. type: str more...
    • dampening_suppress - Threshold to suppress routes. type: int more...
    • dampening_unreachability_half_life - Unreachability half-life time for penalty (min). type: int more...
    • default_local_preference - Default local preference. type: int more...
    • deterministic_med - Enable/disable enforce deterministic comparison of MED. type: str choices: enable, disable more...
    • distance_external - Distance for routes external to the AS. type: int more...
    • distance_internal - Distance for routes internal to the AS. type: int more...
    • distance_local - Distance for routes local to the AS. type: int more...
    • ebgp_multipath - Enable/disable EBGP multi-path. type: str choices: enable, disable more...
    • enforce_first_as - Enable/disable enforce first AS for EBGP routes. type: str choices: enable, disable more...
    • fast_external_failover - Enable/disable reset peer BGP session if link goes down. type: str choices: enable, disable more...
    • graceful_end_on_timer - Enable/disable to exit graceful restart on timer only. type: str choices: enable, disable more...
    • graceful_restart - Enable/disable BGP graceful restart capabilities. type: str choices: enable, disable more...
    • graceful_restart_time - Time needed for neighbors to restart (sec). type: int more...
    • graceful_stalepath_time - Time to hold stale paths of restarting neighbor (sec). type: int more...
    • graceful_update_delay - Route advertisement/selection delay after restart (sec). type: int more...
    • holdtime_timer - Number of seconds to mark peer as dead. type: int more...
    • ibgp_multipath - Enable/disable IBGP multi-path. type: str choices: enable, disable more...
    • ignore_optional_capability - Don"t send unknown optional capability notification message type: str choices: enable, disable more...
    • keepalive_timer - Frequency to send keep alive requests. type: int more...
    • log_neighbour_changes - Enable logging of BGP neighbour"s changes type: str choices: enable, disable more...
    • multipath_recursive_distance - Enable/disable use of recursive distance to select multipath. type: str choices: enable, disable more...
    • neighbor - BGP neighbor table. type: list more...
      • activate - Enable/disable address family IPv4 for this neighbor. type: str choices: enable, disable more...
      • activate6 - Enable/disable address family IPv6 for this neighbor. type: str choices: enable, disable more...
      • additional_path - Enable/disable IPv4 additional-path capability. type: str choices: send, receive, both, disable more...
      • additional_path6 - Enable/disable IPv6 additional-path capability. type: str choices: send, receive, both, disable more...
      • adv_additional_path - Number of IPv4 additional paths that can be advertised to this neighbor. type: int more...
      • adv_additional_path6 - Number of IPv6 additional paths that can be advertised to this neighbor. type: int more...
      • advertisement_interval - Minimum interval (sec) between sending updates. type: int more...
      • allowas_in - IPv4 The maximum number of occurrence of my AS number allowed. type: int more...
      • allowas_in_enable - Enable/disable IPv4 Enable to allow my AS in AS path. type: str choices: enable, disable more...
      • allowas_in_enable6 - Enable/disable IPv6 Enable to allow my AS in AS path. type: str choices: enable, disable more...
      • allowas_in6 - IPv6 The maximum number of occurrence of my AS number allowed. type: int more...
      • as_override - Enable/disable replace peer AS with own AS for IPv4. type: str choices: enable, disable more...
      • as_override6 - Enable/disable replace peer AS with own AS for IPv6. type: str choices: enable, disable more...
      • attribute_unchanged - IPv4 List of attributes that should be unchanged. type: list choices: as-path, med, next-hop more...
      • attribute_unchanged6 - IPv6 List of attributes that should be unchanged. type: list choices: as-path, med, next-hop more...
      • bfd - Enable/disable BFD for this neighbor. type: str choices: enable, disable more...
      • capability_default_originate - Enable/disable advertise default IPv4 route to this neighbor. type: str choices: enable, disable more...
      • capability_default_originate6 - Enable/disable advertise default IPv6 route to this neighbor. type: str choices: enable, disable more...
      • capability_dynamic - Enable/disable advertise dynamic capability to this neighbor. type: str choices: enable, disable more...
      • capability_graceful_restart - Enable/disable advertise IPv4 graceful restart capability to this neighbor. type: str choices: enable, disable more...
      • capability_graceful_restart6 - Enable/disable advertise IPv6 graceful restart capability to this neighbor. type: str choices: enable, disable more...
      • capability_orf - Accept/Send IPv4 ORF lists to/from this neighbor. type: str choices: none, receive, send, both more...
      • capability_orf6 - Accept/Send IPv6 ORF lists to/from this neighbor. type: str choices: none, receive, send, both more...
      • capability_route_refresh - Enable/disable advertise route refresh capability to this neighbor. type: str choices: enable, disable more...
      • conditional_advertise - Conditional advertisement. type: list more...
        • advertise_routemap - Name of advertising route map. Source router.route-map.name. type: str more...
        • condition_routemap - Name of condition route map. Source router.route-map.name. type: str more...
        • condition_type - Type of condition. type: str choices: exist, non-exist more...
      • connect_timer - Interval (sec) for connect timer. type: int more...
      • default_originate_routemap - Route map to specify criteria to originate IPv4 default. Source router.route-map.name. type: str more...
      • default_originate_routemap6 - Route map to specify criteria to originate IPv6 default. Source router.route-map.name. type: str more...
      • description - Description. type: str more...
      • distribute_list_in - Filter for IPv4 updates from this neighbor. Source router.access-list.name. type: str more...
      • distribute_list_in6 - Filter for IPv6 updates from this neighbor. Source router.access-list6.name. type: str more...
      • distribute_list_out - Filter for IPv4 updates to this neighbor. Source router.access-list.name. type: str more...
      • distribute_list_out6 - Filter for IPv6 updates to this neighbor. Source router.access-list6.name. type: str more...
      • dont_capability_negotiate - Don"t negotiate capabilities with this neighbor type: str choices: enable, disable more...
      • ebgp_enforce_multihop - Enable/disable allow multi-hop EBGP neighbors. type: str choices: enable, disable more...
      • ebgp_multihop_ttl - EBGP multihop TTL for this peer. type: int more...
      • filter_list_in - BGP filter for IPv4 inbound routes. Source router.aspath-list.name. type: str more...
      • filter_list_in6 - BGP filter for IPv6 inbound routes. Source router.aspath-list.name. type: str more...
      • filter_list_out - BGP filter for IPv4 outbound routes. Source router.aspath-list.name. type: str more...
      • filter_list_out6 - BGP filter for IPv6 outbound routes. Source router.aspath-list.name. type: str more...
      • holdtime_timer - Interval (sec) before peer considered dead. type: int more...
      • interface - Interface Source system.interface.name. type: str more...
      • ip - IP/IPv6 address of neighbor. type: str required: True more...
      • keep_alive_timer - Keep alive timer interval (sec). type: int more...
      • link_down_failover - Enable/disable failover upon link down. type: str choices: enable, disable more...
      • local_as - Local AS number of neighbor. type: int more...
      • local_as_no_prepend - Do not prepend local-as to incoming updates. type: str choices: enable, disable more...
      • local_as_replace_as - Replace real AS with local-as in outgoing updates. type: str choices: enable, disable more...
      • maximum_prefix - Maximum number of IPv4 prefixes to accept from this peer. type: int more...
      • maximum_prefix_threshold - Maximum IPv4 prefix threshold value (1 - 100 percent). type: int more...
      • maximum_prefix_threshold6 - Maximum IPv6 prefix threshold value (1 - 100 percent). type: int more...
      • maximum_prefix_warning_only - Enable/disable IPv4 Only give warning message when limit is exceeded. type: str choices: enable, disable more...
      • maximum_prefix_warning_only6 - Enable/disable IPv6 Only give warning message when limit is exceeded. type: str choices: enable, disable more...
      • maximum_prefix6 - Maximum number of IPv6 prefixes to accept from this peer. type: int more...
      • next_hop_self - Enable/disable IPv4 next-hop calculation for this neighbor. type: str choices: enable, disable more...
      • next_hop_self_rr - Enable/disable setting nexthop"s address to interface"s IPv4 address for route-reflector routes. type: str choices: enable, disable more...
      • next_hop_self_rr6 - Enable/disable setting nexthop"s address to interface"s IPv6 address for route-reflector routes. type: str choices: enable, disable more...
      • next_hop_self6 - Enable/disable IPv6 next-hop calculation for this neighbor. type: str choices: enable, disable more...
      • override_capability - Enable/disable override result of capability negotiation. type: str choices: enable, disable more...
      • passive - Enable/disable sending of open messages to this neighbor. type: str choices: enable, disable more...
      • password - Password used in MD5 authentication. type: str more...
      • prefix_list_in - IPv4 Inbound filter for updates from this neighbor. Source router.prefix-list.name. type: str more...
      • prefix_list_in6 - IPv6 Inbound filter for updates from this neighbor. Source router.prefix-list6.name. type: str more...
      • prefix_list_out - IPv4 Outbound filter for updates to this neighbor. Source router.prefix-list.name. type: str more...
      • prefix_list_out6 - IPv6 Outbound filter for updates to this neighbor. Source router.prefix-list6.name. type: str more...
      • remote_as - AS number of neighbor. type: int more...
      • remove_private_as - Enable/disable remove private AS number from IPv4 outbound updates. type: str choices: enable, disable more...
      • remove_private_as6 - Enable/disable remove private AS number from IPv6 outbound updates. type: str choices: enable, disable more...
      • restart_time - Graceful restart delay time (sec, 0 = global default). type: int more...
      • retain_stale_time - Time to retain stale routes. type: int more...
      • route_map_in - IPv4 Inbound route map filter. Source router.route-map.name. type: str more...
      • route_map_in6 - IPv6 Inbound route map filter. Source router.route-map.name. type: str more...
      • route_map_out - IPv4 Outbound route map filter. Source router.route-map.name. type: str more...
      • route_map_out_preferable - IPv4 outbound route map filter if the peer is preferred. Source router.route-map.name. type: str more...
      • route_map_out6 - IPv6 Outbound route map filter. Source router.route-map.name. type: str more...
      • route_map_out6_preferable - IPv6 outbound route map filter if the peer is preferred. Source router.route-map.name. type: str more...
      • route_reflector_client - Enable/disable IPv4 AS route reflector client. type: str choices: enable, disable more...
      • route_reflector_client6 - Enable/disable IPv6 AS route reflector client. type: str choices: enable, disable more...
      • route_server_client - Enable/disable IPv4 AS route server client. type: str choices: enable, disable more...
      • route_server_client6 - Enable/disable IPv6 AS route server client. type: str choices: enable, disable more...
      • send_community - IPv4 Send community attribute to neighbor. type: str choices: standard, extended, both, disable more...
      • send_community6 - IPv6 Send community attribute to neighbor. type: str choices: standard, extended, both, disable more...
      • shutdown - Enable/disable shutdown this neighbor. type: str choices: enable, disable more...
      • soft_reconfiguration - Enable/disable allow IPv4 inbound soft reconfiguration. type: str choices: enable, disable more...
      • soft_reconfiguration6 - Enable/disable allow IPv6 inbound soft reconfiguration. type: str choices: enable, disable more...
      • stale_route - Enable/disable stale route after neighbor down. type: str choices: enable, disable more...
      • strict_capability_match - Enable/disable strict capability matching. type: str choices: enable, disable more...
      • unsuppress_map - IPv4 Route map to selectively unsuppress suppressed routes. Source router.route-map.name. type: str more...
      • unsuppress_map6 - IPv6 Route map to selectively unsuppress suppressed routes. Source router.route-map.name. type: str more...
      • update_source - Interface to use as source IP/IPv6 address of TCP connections. Source system.interface.name. type: str more...
      • weight - Neighbor weight. type: int more...
    • neighbor_group - BGP neighbor group table. type: list more...
      • activate - Enable/disable address family IPv4 for this neighbor. type: str choices: enable, disable more...
      • activate6 - Enable/disable address family IPv6 for this neighbor. type: str choices: enable, disable more...
      • additional_path - Enable/disable IPv4 additional-path capability. type: str choices: send, receive, both, disable more...
      • additional_path6 - Enable/disable IPv6 additional-path capability. type: str choices: send, receive, both, disable more...
      • adv_additional_path - Number of IPv4 additional paths that can be advertised to this neighbor. type: int more...
      • adv_additional_path6 - Number of IPv6 additional paths that can be advertised to this neighbor. type: int more...
      • advertisement_interval - Minimum interval (sec) between sending updates. type: int more...
      • allowas_in - IPv4 The maximum number of occurrence of my AS number allowed. type: int more...
      • allowas_in_enable - Enable/disable IPv4 Enable to allow my AS in AS path. type: str choices: enable, disable more...
      • allowas_in_enable6 - Enable/disable IPv6 Enable to allow my AS in AS path. type: str choices: enable, disable more...
      • allowas_in6 - IPv6 The maximum number of occurrence of my AS number allowed. type: int more...
      • as_override - Enable/disable replace peer AS with own AS for IPv4. type: str choices: enable, disable more...
      • as_override6 - Enable/disable replace peer AS with own AS for IPv6. type: str choices: enable, disable more...
      • attribute_unchanged - IPv4 List of attributes that should be unchanged. type: str choices: as-path, med, next-hop more...
      • attribute_unchanged6 - IPv6 List of attributes that should be unchanged. type: str choices: as-path, med, next-hop more...
      • bfd - Enable/disable BFD for this neighbor. type: str choices: enable, disable more...
      • capability_default_originate - Enable/disable advertise default IPv4 route to this neighbor. type: str choices: enable, disable more...
      • capability_default_originate6 - Enable/disable advertise default IPv6 route to this neighbor. type: str choices: enable, disable more...
      • capability_dynamic - Enable/disable advertise dynamic capability to this neighbor. type: str choices: enable, disable more...
      • capability_graceful_restart - Enable/disable advertise IPv4 graceful restart capability to this neighbor. type: str choices: enable, disable more...
      • capability_graceful_restart6 - Enable/disable advertise IPv6 graceful restart capability to this neighbor. type: str choices: enable, disable more...
      • capability_orf - Accept/Send IPv4 ORF lists to/from this neighbor. type: str choices: none, receive, send, both more...
      • capability_orf6 - Accept/Send IPv6 ORF lists to/from this neighbor. type: str choices: none, receive, send, both more...
      • capability_route_refresh - Enable/disable advertise route refresh capability to this neighbor. type: str choices: enable, disable more...
      • connect_timer - Interval (sec) for connect timer. type: int more...
      • default_originate_routemap - Route map to specify criteria to originate IPv4 default. Source router.route-map.name. type: str more...
      • default_originate_routemap6 - Route map to specify criteria to originate IPv6 default. Source router.route-map.name. type: str more...
      • description - Description. type: str more...
      • distribute_list_in - Filter for IPv4 updates from this neighbor. Source router.access-list.name. type: str more...
      • distribute_list_in6 - Filter for IPv6 updates from this neighbor. Source router.access-list6.name. type: str more...
      • distribute_list_out - Filter for IPv4 updates to this neighbor. Source router.access-list.name. type: str more...
      • distribute_list_out6 - Filter for IPv6 updates to this neighbor. Source router.access-list6.name. type: str more...
      • dont_capability_negotiate - Don"t negotiate capabilities with this neighbor type: str choices: enable, disable more...
      • ebgp_enforce_multihop - Enable/disable allow multi-hop EBGP neighbors. type: str choices: enable, disable more...
      • ebgp_multihop_ttl - EBGP multihop TTL for this peer. type: int more...
      • filter_list_in - BGP filter for IPv4 inbound routes. Source router.aspath-list.name. type: str more...
      • filter_list_in6 - BGP filter for IPv6 inbound routes. Source router.aspath-list.name. type: str more...
      • filter_list_out - BGP filter for IPv4 outbound routes. Source router.aspath-list.name. type: str more...
      • filter_list_out6 - BGP filter for IPv6 outbound routes. Source router.aspath-list.name. type: str more...
      • holdtime_timer - Interval (sec) before peer considered dead. type: int more...
      • interface - Interface Source system.interface.name. type: str more...
      • keep_alive_timer - Keep alive timer interval (sec). type: int more...
      • link_down_failover - Enable/disable failover upon link down. type: str choices: enable, disable more...
      • local_as - Local AS number of neighbor. type: int more...
      • local_as_no_prepend - Do not prepend local-as to incoming updates. type: str choices: enable, disable more...
      • local_as_replace_as - Replace real AS with local-as in outgoing updates. type: str choices: enable, disable more...
      • maximum_prefix - Maximum number of IPv4 prefixes to accept from this peer. type: int more...
      • maximum_prefix_threshold - Maximum IPv4 prefix threshold value (1 - 100 percent). type: int more...
      • maximum_prefix_threshold6 - Maximum IPv6 prefix threshold value (1 - 100 percent). type: int more...
      • maximum_prefix_warning_only - Enable/disable IPv4 Only give warning message when limit is exceeded. type: str choices: enable, disable more...
      • maximum_prefix_warning_only6 - Enable/disable IPv6 Only give warning message when limit is exceeded. type: str choices: enable, disable more...
      • maximum_prefix6 - Maximum number of IPv6 prefixes to accept from this peer. type: int more...
      • name - Neighbor group name. type: str required: True more...
      • next_hop_self - Enable/disable IPv4 next-hop calculation for this neighbor. type: str choices: enable, disable more...
      • next_hop_self_rr - Enable/disable setting nexthop"s address to interface"s IPv4 address for route-reflector routes. type: str choices: enable, disable more...
      • next_hop_self_rr6 - Enable/disable setting nexthop"s address to interface"s IPv6 address for route-reflector routes. type: str choices: enable, disable more...
      • next_hop_self6 - Enable/disable IPv6 next-hop calculation for this neighbor. type: str choices: enable, disable more...
      • override_capability - Enable/disable override result of capability negotiation. type: str choices: enable, disable more...
      • passive - Enable/disable sending of open messages to this neighbor. type: str choices: enable, disable more...
      • prefix_list_in - IPv4 Inbound filter for updates from this neighbor. Source router.prefix-list.name. type: str more...
      • prefix_list_in6 - IPv6 Inbound filter for updates from this neighbor. Source router.prefix-list6.name. type: str more...
      • prefix_list_out - IPv4 Outbound filter for updates to this neighbor. Source router.prefix-list.name. type: str more...
      • prefix_list_out6 - IPv6 Outbound filter for updates to this neighbor. Source router.prefix-list6.name. type: str more...
      • remote_as - AS number of neighbor. type: int more...
      • remove_private_as - Enable/disable remove private AS number from IPv4 outbound updates. type: str choices: enable, disable more...
      • remove_private_as6 - Enable/disable remove private AS number from IPv6 outbound updates. type: str choices: enable, disable more...
      • restart_time - Graceful restart delay time (sec, 0 = global default). type: int more...
      • retain_stale_time - Time to retain stale routes. type: int more...
      • route_map_in - IPv4 Inbound route map filter. Source router.route-map.name. type: str more...
      • route_map_in6 - IPv6 Inbound route map filter. Source router.route-map.name. type: str more...
      • route_map_out - IPv4 Outbound route map filter. Source router.route-map.name. type: str more...
      • route_map_out_preferable - IPv4 outbound route map filter if the peer is preferred. Source router.route-map.name. type: str more...
      • route_map_out6 - IPv6 Outbound route map filter. Source router.route-map.name. type: str more...
      • route_map_out6_preferable - IPv6 outbound route map filter if the peer is preferred. Source router.route-map.name. type: str more...
      • route_reflector_client - Enable/disable IPv4 AS route reflector client. type: str choices: enable, disable more...
      • route_reflector_client6 - Enable/disable IPv6 AS route reflector client. type: str choices: enable, disable more...
      • route_server_client - Enable/disable IPv4 AS route server client. type: str choices: enable, disable more...
      • route_server_client6 - Enable/disable IPv6 AS route server client. type: str choices: enable, disable more...
      • send_community - IPv4 Send community attribute to neighbor. type: str choices: standard, extended, both, disable more...
      • send_community6 - IPv6 Send community attribute to neighbor. type: str choices: standard, extended, both, disable more...
      • shutdown - Enable/disable shutdown this neighbor. type: str choices: enable, disable more...
      • soft_reconfiguration - Enable/disable allow IPv4 inbound soft reconfiguration. type: str choices: enable, disable more...
      • soft_reconfiguration6 - Enable/disable allow IPv6 inbound soft reconfiguration. type: str choices: enable, disable more...
      • stale_route - Enable/disable stale route after neighbor down. type: str choices: enable, disable more...
      • strict_capability_match - Enable/disable strict capability matching. type: str choices: enable, disable more...
      • unsuppress_map - IPv4 Route map to selectively unsuppress suppressed routes. Source router.route-map.name. type: str more...
      • unsuppress_map6 - IPv6 Route map to selectively unsuppress suppressed routes. Source router.route-map.name. type: str more...
      • update_source - Interface to use as source IP/IPv6 address of TCP connections. Source system.interface.name. type: str more...
      • weight - Neighbor weight. type: int more...
    • neighbor_range - BGP neighbor range table. type: list more...
      • id - Neighbor range ID. type: int required: True more...
      • max_neighbor_num - Maximum number of neighbors. type: int more...
      • neighbor_group - Neighbor group name. Source router.bgp.neighbor-group.name. type: str more...
      • prefix - Neighbor range prefix. type: str more...
    • neighbor_range6 - BGP IPv6 neighbor range table. type: list more...
      • id - IPv6 neighbor range ID. type: int required: True more...
      • max_neighbor_num - Maximum number of neighbors. type: int more...
      • neighbor_group - Neighbor group name. Source router.bgp.neighbor-group.name. type: str more...
      • prefix6 - IPv6 prefix. type: str more...
    • network - BGP network table. type: list more...
      • backdoor - Enable/disable route as backdoor. type: str choices: enable, disable more...
      • id - ID. type: int required: True more...
      • prefix - Network prefix. type: str more...
      • route_map - Route map to modify generated route. Source router.route-map.name. type: str more...
    • network_import_check - Enable/disable ensure BGP network route exists in IGP. type: str choices: enable, disable more...
    • network6 - BGP IPv6 network table. type: list more...
      • backdoor - Enable/disable route as backdoor. type: str choices: enable, disable more...
      • id - ID. type: int required: True more...
      • prefix6 - Network IPv6 prefix. type: str more...
      • route_map - Route map to modify generated route. Source router.route-map.name. type: str more...
    • recursive_next_hop - Enable/disable recursive resolution of next-hop using BGP route. type: str choices: enable, disable more...
    • redistribute - BGP IPv4 redistribute table. type: list more...
      • name - Distribute list entry name. type: str required: True more...
      • route_map - Route map name. Source router.route-map.name. type: str more...
      • status - Status type: str choices: enable, disable more...
    • redistribute6 - BGP IPv6 redistribute table. type: list more...
      • name - Distribute list entry name. type: str required: True more...
      • route_map - Route map name. Source router.route-map.name. type: str more...
      • status - Status type: str choices: enable, disable more...
    • router_id - Router ID. type: str more...
    • scan_time - Background scanner interval (sec), 0 to disable it. type: int more...
    • synchronization - Enable/disable only advertise routes from iBGP if routes present in an IGP. type: str choices: enable, disable more...
    • vrf_leak - BGP VRF leaking table. type: list more...
      • target - Target VRF table. type: list more...
        • interface - Interface which is used to leak routes to target VRF. Source system.interface.name. type: str more...
        • route_map - Route map of VRF leaking. Source router.route-map.name. type: str more...
        • vrf - Target VRF ID <0 - 31>. type: str required: True more...
      • vrf - Origin VRF ID <0 - 31>. type: str required: True more...

Notes

Note

  • Legacy fortiosapi has been deprecated, httpapi is the preferred way to run playbooks

Examples

- hosts: fortigates
  collections:
    - fortinet.fortios
  connection: httpapi
  vars:
   vdom: "root"
   ansible_httpapi_use_ssl: yes
   ansible_httpapi_validate_certs: no
   ansible_httpapi_port: 443
  tasks:
  - name: Configure BGP.
    fortios_router_bgp:
      vdom:  "{{ vdom }}"
      router_bgp:
        additional_path: "enable"
        additional_path_select: "4"
        additional_path_select6: "5"
        additional_path6: "enable"
        admin_distance:
         -
            distance: "8"
            id:  "9"
            neighbour_prefix: "<your_own_value>"
            route_list: "<your_own_value> (source router.access-list.name)"
        aggregate_address:
         -
            as_set: "enable"
            id:  "14"
            prefix: "<your_own_value>"
            summary_only: "enable"
        aggregate_address6:
         -
            as_set: "enable"
            id:  "19"
            prefix6: "<your_own_value>"
            summary_only: "enable"
        always_compare_med: "enable"
        as: "23"
        bestpath_as_path_ignore: "enable"
        bestpath_cmp_confed_aspath: "enable"
        bestpath_cmp_routerid: "enable"
        bestpath_med_confed: "enable"
        bestpath_med_missing_as_worst: "enable"
        client_to_client_reflection: "enable"
        cluster_id: "<your_own_value>"
        confederation_identifier: "31"
        confederation_peers:
         -
            peer: "<your_own_value>"
        dampening: "enable"
        dampening_max_suppress_time: "35"
        dampening_reachability_half_life: "36"
        dampening_reuse: "37"
        dampening_route_map: "<your_own_value> (source router.route-map.name)"
        dampening_suppress: "39"
        dampening_unreachability_half_life: "40"
        default_local_preference: "41"
        deterministic_med: "enable"
        distance_external: "43"
        distance_internal: "44"
        distance_local: "45"
        ebgp_multipath: "enable"
        enforce_first_as: "enable"
        fast_external_failover: "enable"
        graceful_end_on_timer: "enable"
        graceful_restart: "enable"
        graceful_restart_time: "51"
        graceful_stalepath_time: "52"
        graceful_update_delay: "53"
        holdtime_timer: "54"
        ibgp_multipath: "enable"
        ignore_optional_capability: "enable"
        keepalive_timer: "57"
        log_neighbour_changes: "enable"
        multipath_recursive_distance: "enable"
        neighbor:
         -
            activate: "enable"
            activate6: "enable"
            additional_path: "send"
            additional_path6: "send"
            adv_additional_path: "65"
            adv_additional_path6: "66"
            advertisement_interval: "67"
            allowas_in: "68"
            allowas_in_enable: "enable"
            allowas_in_enable6: "enable"
            allowas_in6: "71"
            as_override: "enable"
            as_override6: "enable"
            attribute_unchanged: "as-path"
            attribute_unchanged6: "as-path"
            bfd: "enable"
            capability_default_originate: "enable"
            capability_default_originate6: "enable"
            capability_dynamic: "enable"
            capability_graceful_restart: "enable"
            capability_graceful_restart6: "enable"
            capability_orf: "none"
            capability_orf6: "none"
            capability_route_refresh: "enable"
            conditional_advertise:
             -
                advertise_routemap: "<your_own_value> (source router.route-map.name)"
                condition_routemap: "<your_own_value> (source router.route-map.name)"
                condition_type: "exist"
            connect_timer: "89"
            default_originate_routemap: "<your_own_value> (source router.route-map.name)"
            default_originate_routemap6: "<your_own_value> (source router.route-map.name)"
            description: "<your_own_value>"
            distribute_list_in: "<your_own_value> (source router.access-list.name)"
            distribute_list_in6: "<your_own_value> (source router.access-list6.name)"
            distribute_list_out: "<your_own_value> (source router.access-list.name)"
            distribute_list_out6: "<your_own_value> (source router.access-list6.name)"
            dont_capability_negotiate: "enable"
            ebgp_enforce_multihop: "enable"
            ebgp_multihop_ttl: "99"
            filter_list_in: "<your_own_value> (source router.aspath-list.name)"
            filter_list_in6: "<your_own_value> (source router.aspath-list.name)"
            filter_list_out: "<your_own_value> (source router.aspath-list.name)"
            filter_list_out6: "<your_own_value> (source router.aspath-list.name)"
            holdtime_timer: "104"
            interface: "<your_own_value> (source system.interface.name)"
            ip: "<your_own_value>"
            keep_alive_timer: "107"
            link_down_failover: "enable"
            local_as: "109"
            local_as_no_prepend: "enable"
            local_as_replace_as: "enable"
            maximum_prefix: "112"
            maximum_prefix_threshold: "113"
            maximum_prefix_threshold6: "114"
            maximum_prefix_warning_only: "enable"
            maximum_prefix_warning_only6: "enable"
            maximum_prefix6: "117"
            next_hop_self: "enable"
            next_hop_self_rr: "enable"
            next_hop_self_rr6: "enable"
            next_hop_self6: "enable"
            override_capability: "enable"
            passive: "enable"
            password: "<your_own_value>"
            prefix_list_in: "<your_own_value> (source router.prefix-list.name)"
            prefix_list_in6: "<your_own_value> (source router.prefix-list6.name)"
            prefix_list_out: "<your_own_value> (source router.prefix-list.name)"
            prefix_list_out6: "<your_own_value> (source router.prefix-list6.name)"
            remote_as: "129"
            remove_private_as: "enable"
            remove_private_as6: "enable"
            restart_time: "132"
            retain_stale_time: "133"
            route_map_in: "<your_own_value> (source router.route-map.name)"
            route_map_in6: "<your_own_value> (source router.route-map.name)"
            route_map_out: "<your_own_value> (source router.route-map.name)"
            route_map_out_preferable: "<your_own_value> (source router.route-map.name)"
            route_map_out6: "<your_own_value> (source router.route-map.name)"
            route_map_out6_preferable: "<your_own_value> (source router.route-map.name)"
            route_reflector_client: "enable"
            route_reflector_client6: "enable"
            route_server_client: "enable"
            route_server_client6: "enable"
            send_community: "standard"
            send_community6: "standard"
            shutdown: "enable"
            soft_reconfiguration: "enable"
            soft_reconfiguration6: "enable"
            stale_route: "enable"
            strict_capability_match: "enable"
            unsuppress_map: "<your_own_value> (source router.route-map.name)"
            unsuppress_map6: "<your_own_value> (source router.route-map.name)"
            update_source: "<your_own_value> (source system.interface.name)"
            weight: "154"
        neighbor_group:
         -
            activate: "enable"
            activate6: "enable"
            additional_path: "send"
            additional_path6: "send"
            adv_additional_path: "160"
            adv_additional_path6: "161"
            advertisement_interval: "162"
            allowas_in: "163"
            allowas_in_enable: "enable"
            allowas_in_enable6: "enable"
            allowas_in6: "166"
            as_override: "enable"
            as_override6: "enable"
            attribute_unchanged: "as-path"
            attribute_unchanged6: "as-path"
            bfd: "enable"
            capability_default_originate: "enable"
            capability_default_originate6: "enable"
            capability_dynamic: "enable"
            capability_graceful_restart: "enable"
            capability_graceful_restart6: "enable"
            capability_orf: "none"
            capability_orf6: "none"
            capability_route_refresh: "enable"
            connect_timer: "180"
            default_originate_routemap: "<your_own_value> (source router.route-map.name)"
            default_originate_routemap6: "<your_own_value> (source router.route-map.name)"
            description: "<your_own_value>"
            distribute_list_in: "<your_own_value> (source router.access-list.name)"
            distribute_list_in6: "<your_own_value> (source router.access-list6.name)"
            distribute_list_out: "<your_own_value> (source router.access-list.name)"
            distribute_list_out6: "<your_own_value> (source router.access-list6.name)"
            dont_capability_negotiate: "enable"
            ebgp_enforce_multihop: "enable"
            ebgp_multihop_ttl: "190"
            filter_list_in: "<your_own_value> (source router.aspath-list.name)"
            filter_list_in6: "<your_own_value> (source router.aspath-list.name)"
            filter_list_out: "<your_own_value> (source router.aspath-list.name)"
            filter_list_out6: "<your_own_value> (source router.aspath-list.name)"
            holdtime_timer: "195"
            interface: "<your_own_value> (source system.interface.name)"
            keep_alive_timer: "197"
            link_down_failover: "enable"
            local_as: "199"
            local_as_no_prepend: "enable"
            local_as_replace_as: "enable"
            maximum_prefix: "202"
            maximum_prefix_threshold: "203"
            maximum_prefix_threshold6: "204"
            maximum_prefix_warning_only: "enable"
            maximum_prefix_warning_only6: "enable"
            maximum_prefix6: "207"
            name: "default_name_208"
            next_hop_self: "enable"
            next_hop_self_rr: "enable"
            next_hop_self_rr6: "enable"
            next_hop_self6: "enable"
            override_capability: "enable"
            passive: "enable"
            prefix_list_in: "<your_own_value> (source router.prefix-list.name)"
            prefix_list_in6: "<your_own_value> (source router.prefix-list6.name)"
            prefix_list_out: "<your_own_value> (source router.prefix-list.name)"
            prefix_list_out6: "<your_own_value> (source router.prefix-list6.name)"
            remote_as: "219"
            remove_private_as: "enable"
            remove_private_as6: "enable"
            restart_time: "222"
            retain_stale_time: "223"
            route_map_in: "<your_own_value> (source router.route-map.name)"
            route_map_in6: "<your_own_value> (source router.route-map.name)"
            route_map_out: "<your_own_value> (source router.route-map.name)"
            route_map_out_preferable: "<your_own_value> (source router.route-map.name)"
            route_map_out6: "<your_own_value> (source router.route-map.name)"
            route_map_out6_preferable: "<your_own_value> (source router.route-map.name)"
            route_reflector_client: "enable"
            route_reflector_client6: "enable"
            route_server_client: "enable"
            route_server_client6: "enable"
            send_community: "standard"
            send_community6: "standard"
            shutdown: "enable"
            soft_reconfiguration: "enable"
            soft_reconfiguration6: "enable"
            stale_route: "enable"
            strict_capability_match: "enable"
            unsuppress_map: "<your_own_value> (source router.route-map.name)"
            unsuppress_map6: "<your_own_value> (source router.route-map.name)"
            update_source: "<your_own_value> (source system.interface.name)"
            weight: "244"
        neighbor_range:
         -
            id:  "246"
            max_neighbor_num: "247"
            neighbor_group: "<your_own_value> (source router.bgp.neighbor-group.name)"
            prefix: "<your_own_value>"
        neighbor_range6:
         -
            id:  "251"
            max_neighbor_num: "252"
            neighbor_group: "<your_own_value> (source router.bgp.neighbor-group.name)"
            prefix6: "<your_own_value>"
        network:
         -
            backdoor: "enable"
            id:  "257"
            prefix: "<your_own_value>"
            route_map: "<your_own_value> (source router.route-map.name)"
        network_import_check: "enable"
        network6:
         -
            backdoor: "enable"
            id:  "263"
            prefix6: "<your_own_value>"
            route_map: "<your_own_value> (source router.route-map.name)"
        recursive_next_hop: "enable"
        redistribute:
         -
            name: "default_name_268"
            route_map: "<your_own_value> (source router.route-map.name)"
            status: "enable"
        redistribute6:
         -
            name: "default_name_272"
            route_map: "<your_own_value> (source router.route-map.name)"
            status: "enable"
        router_id: "<your_own_value>"
        scan_time: "276"
        synchronization: "enable"
        vrf_leak:
         -
            target:
             -
                interface: "<your_own_value> (source system.interface.name)"
                route_map: "<your_own_value> (source router.route-map.name)"
                vrf: "<your_own_value>"
            vrf: "<your_own_value>"

Return Values

Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module:

  • build - Build number of the fortigate image returned: always type: str sample: 1547
  • http_method - Last method used to provision the content into FortiGate returned: always type: str sample: PUT
  • http_status - Last result given by FortiGate on last operation applied returned: always type: str sample: 200
  • mkey - Master key (id) used in the last call to FortiGate returned: success type: str sample: id
  • name - Name of the table used to fulfill the request returned: always type: str sample: urlfilter
  • path - Path of the table used to fulfill the request returned: always type: str sample: webfilter
  • revision - Internal revision number returned: always type: str sample: 17.0.2.10658
  • serial - Serial number of the unit returned: always type: str sample: FGVMEVYYQT3AB5352
  • status - Indication of the operation's result returned: always type: str sample: success
  • vdom - Virtual domain used returned: always type: str sample: root
  • version - Version of the FortiGate returned: always type: str sample: v5.6.3

Status

  • This module is not guaranteed to have a backwards compatible interface.

Authors

  • Link Zheng (@chillancezen)
  • Jie Xue (@JieX19)
  • Hongbin Lu (@fgtdev-hblu)
  • Frank Shen (@frankshen01)
  • Miguel Angel Munoz (@mamunozgonzalez)
  • Nicolas Thomas (@thomnico)

Hint

If you notice any issues in this documentation, you can create a pull request to improve it.