Docs Home
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortimanager.ObjectFspVlanInterface
Explore with Pulumi AI
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
Configure interfaces.
This resource is a sub resource for variable
interfaceof resourcefortimanager.ObjectFspVlan. Conflict and overwrite may occur if use both of them. The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.
ipv6:fortimanager.ObjectFspVlanInterfaceIpv6secondaryip:fortimanager.ObjectFspVlanInterfaceSecondaryipvrrp:fortimanager.ObjectFspVlanInterfaceVrrp
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";
const trnameObjectFspVlan = new fortimanager.ObjectFspVlan("trnameObjectFspVlan", {vlanid: 101});
const trnameObjectFspVlanInterface = new fortimanager.ObjectFspVlanInterface("trnameObjectFspVlanInterface", {
vlan: trnameObjectFspVlan.name,
vlanOpMode: "tag",
algorithm: "L2",
}, {
dependsOn: [trnameObjectFspVlan],
});
import pulumi
import pulumi_fortimanager as fortimanager
trname_object_fsp_vlan = fortimanager.ObjectFspVlan("trnameObjectFspVlan", vlanid=101)
trname_object_fsp_vlan_interface = fortimanager.ObjectFspVlanInterface("trnameObjectFspVlanInterface",
vlan=trname_object_fsp_vlan.name,
vlan_op_mode="tag",
algorithm="L2",
opts = pulumi.ResourceOptions(depends_on=[trname_object_fsp_vlan]))
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
trnameObjectFspVlan, err := fortimanager.NewObjectFspVlan(ctx, "trnameObjectFspVlan", &fortimanager.ObjectFspVlanArgs{
Vlanid: pulumi.Float64(101),
})
if err != nil {
return err
}
_, err = fortimanager.NewObjectFspVlanInterface(ctx, "trnameObjectFspVlanInterface", &fortimanager.ObjectFspVlanInterfaceArgs{
Vlan: trnameObjectFspVlan.Name,
VlanOpMode: pulumi.String("tag"),
Algorithm: pulumi.String("L2"),
}, pulumi.DependsOn([]pulumi.Resource{
trnameObjectFspVlan,
}))
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;
return await Deployment.RunAsync(() =>
{
var trnameObjectFspVlan = new Fortimanager.ObjectFspVlan("trnameObjectFspVlan", new()
{
Vlanid = 101,
});
var trnameObjectFspVlanInterface = new Fortimanager.ObjectFspVlanInterface("trnameObjectFspVlanInterface", new()
{
Vlan = trnameObjectFspVlan.Name,
VlanOpMode = "tag",
Algorithm = "L2",
}, new CustomResourceOptions
{
DependsOn =
{
trnameObjectFspVlan,
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.ObjectFspVlan;
import com.pulumi.fortimanager.ObjectFspVlanArgs;
import com.pulumi.fortimanager.ObjectFspVlanInterface;
import com.pulumi.fortimanager.ObjectFspVlanInterfaceArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var trnameObjectFspVlan = new ObjectFspVlan("trnameObjectFspVlan", ObjectFspVlanArgs.builder()
.vlanid(101)
.build());
var trnameObjectFspVlanInterface = new ObjectFspVlanInterface("trnameObjectFspVlanInterface", ObjectFspVlanInterfaceArgs.builder()
.vlan(trnameObjectFspVlan.name())
.vlanOpMode("tag")
.algorithm("L2")
.build(), CustomResourceOptions.builder()
.dependsOn(trnameObjectFspVlan)
.build());
}
}
resources:
trnameObjectFspVlanInterface:
type: fortimanager:ObjectFspVlanInterface
properties:
vlan: ${trnameObjectFspVlan.name}
vlanOpMode: tag
algorithm: L2
options:
dependsOn:
- ${trnameObjectFspVlan}
trnameObjectFspVlan:
type: fortimanager:ObjectFspVlan
properties:
vlanid: 101
Create ObjectFspVlanInterface Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ObjectFspVlanInterface(name: string, args: ObjectFspVlanInterfaceArgs, opts?: CustomResourceOptions);@overload
def ObjectFspVlanInterface(resource_name: str,
args: ObjectFspVlanInterfaceInitArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ObjectFspVlanInterface(resource_name: str,
opts: Optional[ResourceOptions] = None,
vlan: Optional[str] = None,
ac_name: Optional[str] = None,
adom: Optional[str] = None,
aggregate: Optional[str] = None,
aggregate_type: Optional[str] = None,
algorithm: Optional[str] = None,
alias: Optional[str] = None,
allowaccesses: Optional[Sequence[str]] = None,
annex: Optional[str] = None,
ap_discover: Optional[str] = None,
arpforward: Optional[str] = None,
atm_protocol: Optional[str] = None,
auth_cert: Optional[str] = None,
auth_portal_addr: Optional[str] = None,
auth_type: Optional[str] = None,
auto_auth_extension_device: Optional[str] = None,
bandwidth_measure_time: Optional[float] = None,
bfd: Optional[str] = None,
bfd_desired_min_tx: Optional[float] = None,
bfd_detect_mult: Optional[float] = None,
bfd_required_min_rx: Optional[float] = None,
broadcast_forticlient_discovery: Optional[str] = None,
broadcast_forward: Optional[str] = None,
captive_portal: Optional[float] = None,
cli_conn_status: Optional[float] = None,
color: Optional[float] = None,
ddns: Optional[str] = None,
ddns_auth: Optional[str] = None,
ddns_domain: Optional[str] = None,
ddns_key: Optional[str] = None,
ddns_keyname: Optional[str] = None,
ddns_passwords: Optional[Sequence[str]] = None,
ddns_server: Optional[str] = None,
ddns_server_ip: Optional[str] = None,
ddns_sn: Optional[str] = None,
ddns_ttl: Optional[float] = None,
ddns_username: Optional[str] = None,
ddns_zone: Optional[str] = None,
dedicated_to: Optional[str] = None,
default_purdue_level: Optional[str] = None,
defaultgw: Optional[str] = None,
description: Optional[str] = None,
detected_peer_mtu: Optional[float] = None,
detectprotocols: Optional[Sequence[str]] = None,
detectserver: Optional[str] = None,
device_access_list: Optional[str] = None,
device_identification: Optional[str] = None,
device_identification_active_scan: Optional[str] = None,
device_netscan: Optional[str] = None,
device_user_identification: Optional[str] = None,
devindex: Optional[float] = None,
dhcp_broadcast_flag: Optional[str] = None,
dhcp_classless_route_addition: Optional[str] = None,
dhcp_client_identifier: Optional[str] = None,
dhcp_relay_agent_option: Optional[str] = None,
dhcp_relay_circuit_id: Optional[str] = None,
dhcp_relay_interface: Optional[str] = None,
dhcp_relay_interface_select_method: Optional[str] = None,
dhcp_relay_ips: Optional[Sequence[str]] = None,
dhcp_relay_link_selection: Optional[str] = None,
dhcp_relay_request_all_server: Optional[str] = None,
dhcp_relay_service: Optional[str] = None,
dhcp_relay_source_ip: Optional[str] = None,
dhcp_relay_type: Optional[str] = None,
dhcp_renew_time: Optional[float] = None,
dhcp_smart_relay: Optional[str] = None,
disc_retry_timeout: Optional[float] = None,
disconnect_threshold: Optional[float] = None,
distance: Optional[float] = None,
dns_query: Optional[str] = None,
dns_server_override: Optional[str] = None,
dns_server_protocols: Optional[Sequence[str]] = None,
drop_fragment: Optional[str] = None,
drop_overlapped_fragment: Optional[str] = None,
dynamic_sort_subtable: Optional[str] = None,
eap_ca_certs: Optional[Sequence[str]] = None,
eap_identity: Optional[str] = None,
eap_method: Optional[str] = None,
eap_passwords: Optional[Sequence[str]] = None,
eap_supplicant: Optional[str] = None,
eap_user_certs: Optional[Sequence[str]] = None,
egress_cos: Optional[str] = None,
egress_shaping_profile: Optional[str] = None,
eip: Optional[str] = None,
endpoint_compliance: Optional[str] = None,
estimated_downstream_bandwidth: Optional[float] = None,
estimated_upstream_bandwidth: Optional[float] = None,
explicit_ftp_proxy: Optional[str] = None,
explicit_web_proxy: Optional[str] = None,
external: Optional[str] = None,
fail_action_on_extender: Optional[str] = None,
fail_alert_interfaces: Optional[str] = None,
fail_alert_method: Optional[str] = None,
fail_detect: Optional[str] = None,
fail_detect_options: Optional[Sequence[str]] = None,
fdp: Optional[str] = None,
fortiheartbeat: Optional[str] = None,
fortilink: Optional[str] = None,
fortilink_backup_link: Optional[float] = None,
fortilink_neighbor_detect: Optional[str] = None,
fortilink_split_interface: Optional[str] = None,
fortilink_stacking: Optional[str] = None,
forward_domain: Optional[float] = None,
forward_error_correction: Optional[str] = None,
fp_anomalies: Optional[Sequence[str]] = None,
fp_disables: Optional[Sequence[str]] = None,
gateway_address: Optional[str] = None,
generic_receive_offload: Optional[str] = None,
gi_gk: Optional[str] = None,
gwaddr: Optional[str] = None,
gwdetect: Optional[str] = None,
ha_priority: Optional[float] = None,
icmp_accept_redirect: Optional[str] = None,
icmp_redirect: Optional[str] = None,
icmp_send_redirect: Optional[str] = None,
ident_accept: Optional[str] = None,
idle_timeout: Optional[float] = None,
if_mdix: Optional[str] = None,
if_media: Optional[str] = None,
ike_saml_servers: Optional[Sequence[str]] = None,
in_force_vlan_cos: Optional[float] = None,
inbandwidth: Optional[float] = None,
ingress_cos: Optional[str] = None,
ingress_shaping_profile: Optional[str] = None,
ingress_spillover_threshold: Optional[float] = None,
interconnect_profile: Optional[str] = None,
internal: Optional[float] = None,
ip: Optional[str] = None,
ip_managed_by_fortiipam: Optional[str] = None,
ipmac: Optional[str] = None,
ips_sniffer_mode: Optional[str] = None,
ipunnumbered: Optional[str] = None,
ipv6: Optional[ObjectFspVlanInterfaceIpv6Args] = None,
l2forward: Optional[str] = None,
l2tp_client: Optional[str] = None,
lacp_ha_secondary: Optional[str] = None,
lacp_ha_slave: Optional[str] = None,
lacp_mode: Optional[str] = None,
lacp_speed: Optional[str] = None,
large_receive_offload: Optional[str] = None,
lcp_echo_interval: Optional[float] = None,
lcp_max_echo_fails: Optional[float] = None,
link_up_delay: Optional[float] = None,
listen_forticlient_connection: Optional[str] = None,
lldp_network_policy: Optional[str] = None,
lldp_reception: Optional[str] = None,
lldp_transmission: Optional[str] = None,
log: Optional[str] = None,
macaddr: Optional[str] = None,
managed_subnetwork_size: Optional[str] = None,
management_ip: Optional[str] = None,
max_egress_burst_rate: Optional[float] = None,
max_egress_rate: Optional[float] = None,
measured_downstream_bandwidth: Optional[float] = None,
measured_upstream_bandwidth: Optional[float] = None,
mediatype: Optional[str] = None,
member: Optional[str] = None,
min_links: Optional[float] = None,
min_links_down: Optional[str] = None,
mirroring_direction: Optional[str] = None,
mirroring_port: Optional[str] = None,
mode: Optional[str] = None,
monitor_bandwidth: Optional[str] = None,
mtu: Optional[float] = None,
mtu_override: Optional[str] = None,
mux_type: Optional[str] = None,
name: Optional[str] = None,
ndiscforward: Optional[str] = None,
netbios_forward: Optional[str] = None,
netflow_sampler: Optional[str] = None,
np_qos_profile: Optional[float] = None,
npu_fastpath: Optional[str] = None,
nst: Optional[str] = None,
object_fsp_vlan_interface_id: Optional[str] = None,
out_force_vlan_cos: Optional[float] = None,
outbandwidth: Optional[float] = None,
padt_retry_timeout: Optional[float] = None,
passwords: Optional[Sequence[str]] = None,
peer_interface: Optional[str] = None,
phy_mode: Optional[str] = None,
ping_serv_status: Optional[float] = None,
poe: Optional[str] = None,
polling_interval: Optional[float] = None,
port_mirroring: Optional[str] = None,
pppoe_unnumbered_negotiate: Optional[str] = None,
pptp_auth_type: Optional[str] = None,
pptp_client: Optional[str] = None,
pptp_passwords: Optional[Sequence[str]] = None,
pptp_server_ip: Optional[str] = None,
pptp_timeout: Optional[float] = None,
pptp_user: Optional[str] = None,
preserve_session_route: Optional[str] = None,
priority: Optional[float] = None,
priority_override: Optional[str] = None,
proxy_captive_portal: Optional[str] = None,
pvc_atm_qos: Optional[str] = None,
pvc_chan: Optional[float] = None,
pvc_crc: Optional[float] = None,
pvc_pcr: Optional[float] = None,
pvc_scr: Optional[float] = None,
pvc_vlan_id: Optional[float] = None,
pvc_vlan_rx_id: Optional[float] = None,
pvc_vlan_rx_op: Optional[str] = None,
pvc_vlan_tx_id: Optional[float] = None,
pvc_vlan_tx_op: Optional[str] = None,
reachable_time: Optional[float] = None,
redundant_interface: Optional[str] = None,
remote_ip: Optional[str] = None,
replacemsg_override_group: Optional[str] = None,
retransmission: Optional[str] = None,
ring_rx: Optional[float] = None,
ring_tx: Optional[float] = None,
role: Optional[str] = None,
sample_direction: Optional[str] = None,
sample_rate: Optional[float] = None,
scan_botnet_connections: Optional[str] = None,
scopetype: Optional[str] = None,
secondary_ip: Optional[str] = None,
secondaryips: Optional[Sequence[ObjectFspVlanInterfaceSecondaryipArgs]] = None,
security8021x_dynamic_vlan_id: Optional[float] = None,
security8021x_master: Optional[str] = None,
security8021x_member_mode: Optional[str] = None,
security8021x_mode: Optional[str] = None,
security_exempt_list: Optional[str] = None,
security_external_logout: Optional[str] = None,
security_external_web: Optional[str] = None,
security_groups: Optional[str] = None,
security_mac_auth_bypass: Optional[str] = None,
security_mode: Optional[str] = None,
security_redirect_url: Optional[str] = None,
select_profile30a35b: Optional[str] = None,
service_name: Optional[str] = None,
sflow_sampler: Optional[str] = None,
sfp_dsl: Optional[str] = None,
sfp_dsl_adsl_fallback: Optional[str] = None,
sfp_dsl_autodetect: Optional[str] = None,
sfp_dsl_mac: Optional[str] = None,
speed: Optional[str] = None,
spillover_threshold: Optional[float] = None,
src_check: Optional[str] = None,
status: Optional[str] = None,
stp: Optional[str] = None,
stp_edge: Optional[str] = None,
stp_ha_secondary: Optional[str] = None,
stp_ha_slave: Optional[str] = None,
stpforward: Optional[str] = None,
stpforward_mode: Optional[str] = None,
strip_priority_vlan_tag: Optional[str] = None,
subst: Optional[str] = None,
substitute_dst_mac: Optional[str] = None,
sw_algorithm: Optional[str] = None,
swc_first_create: Optional[float] = None,
swc_vlan: Optional[float] = None,
switch: Optional[str] = None,
switch_controller_access_vlan: Optional[str] = None,
switch_controller_arp_inspection: Optional[str] = None,
switch_controller_auth: Optional[str] = None,
switch_controller_dhcp_snooping: Optional[str] = None,
switch_controller_dhcp_snooping_option82: Optional[str] = None,
switch_controller_dhcp_snooping_verify_mac: Optional[str] = None,
switch_controller_dynamic: Optional[str] = None,
switch_controller_feature: Optional[str] = None,
switch_controller_igmp_snooping: Optional[str] = None,
switch_controller_igmp_snooping_fast_leave: Optional[str] = None,
switch_controller_igmp_snooping_proxy: Optional[str] = None,
switch_controller_iot_scanning: Optional[str] = None,
switch_controller_learning_limit: Optional[float] = None,
switch_controller_mgmt_vlan: Optional[float] = None,
switch_controller_nac: Optional[str] = None,
switch_controller_netflow_collect: Optional[str] = None,
switch_controller_offload: Optional[str] = None,
switch_controller_offload_gw: Optional[str] = None,
switch_controller_offload_ip: Optional[str] = None,
switch_controller_offloading: Optional[str] = None,
switch_controller_offloading_gw: Optional[str] = None,
switch_controller_offloading_ip: Optional[str] = None,
switch_controller_radius_server: Optional[str] = None,
switch_controller_rspan_mode: Optional[str] = None,
switch_controller_source_ip: Optional[str] = None,
switch_controller_traffic_policy: Optional[str] = None,
system_id: Optional[str] = None,
system_id_type: Optional[str] = None,
tc_mode: Optional[str] = None,
tcp_mss: Optional[float] = None,
trunk: Optional[str] = None,
trust_ip1: Optional[str] = None,
trust_ip2: Optional[str] = None,
trust_ip3: Optional[str] = None,
trust_ip61: Optional[str] = None,
trust_ip62: Optional[str] = None,
trust_ip63: Optional[str] = None,
type: Optional[str] = None,
username: Optional[str] = None,
vci: Optional[float] = None,
vectoring: Optional[str] = None,
vindex: Optional[float] = None,
vlan_op_mode: Optional[str] = None,
vlan_protocol: Optional[str] = None,
vlanforward: Optional[str] = None,
vlanid: Optional[float] = None,
vpi: Optional[float] = None,
vrf: Optional[float] = None,
vrrp_virtual_mac: Optional[str] = None,
vrrps: Optional[Sequence[ObjectFspVlanInterfaceVrrpArgs]] = None,
wccp: Optional[str] = None,
weight: Optional[float] = None,
wifi5g_threshold: Optional[str] = None,
wifi_acl: Optional[str] = None,
wifi_ap_band: Optional[str] = None,
wifi_auth: Optional[str] = None,
wifi_auto_connect: Optional[str] = None,
wifi_auto_save: Optional[str] = None,
wifi_broadcast_ssid: Optional[str] = None,
wifi_dns_server1: Optional[str] = None,
wifi_dns_server2: Optional[str] = None,
wifi_encrypt: Optional[str] = None,
wifi_fragment_threshold: Optional[float] = None,
wifi_gateway: Optional[str] = None,
wifi_keyindex: Optional[float] = None,
wifi_keys: Optional[Sequence[str]] = None,
wifi_mac_filter: Optional[str] = None,
wifi_passphrases: Optional[Sequence[str]] = None,
wifi_radius_server: Optional[str] = None,
wifi_rts_threshold: Optional[float] = None,
wifi_security: Optional[str] = None,
wifi_ssid: Optional[str] = None,
wifi_usergroup: Optional[str] = None,
wins_ip: Optional[str] = None)func NewObjectFspVlanInterface(ctx *Context, name string, args ObjectFspVlanInterfaceArgs, opts ...ResourceOption) (*ObjectFspVlanInterface, error)public ObjectFspVlanInterface(string name, ObjectFspVlanInterfaceArgs args, CustomResourceOptions? opts = null)
public ObjectFspVlanInterface(String name, ObjectFspVlanInterfaceArgs args)
public ObjectFspVlanInterface(String name, ObjectFspVlanInterfaceArgs args, CustomResourceOptions options)
type: fortimanager:ObjectFspVlanInterface
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ObjectFspVlanInterfaceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ObjectFspVlanInterfaceInitArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ObjectFspVlanInterfaceArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ObjectFspVlanInterfaceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ObjectFspVlanInterfaceArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var objectFspVlanInterfaceResource = new Fortimanager.ObjectFspVlanInterface("objectFspVlanInterfaceResource", new()
{
Vlan = "string",
AcName = "string",
Adom = "string",
Aggregate = "string",
AggregateType = "string",
Algorithm = "string",
Alias = "string",
Allowaccesses = new[]
{
"string",
},
Annex = "string",
ApDiscover = "string",
Arpforward = "string",
AtmProtocol = "string",
AuthCert = "string",
AuthPortalAddr = "string",
AuthType = "string",
AutoAuthExtensionDevice = "string",
BandwidthMeasureTime = 0,
Bfd = "string",
BfdDesiredMinTx = 0,
BfdDetectMult = 0,
BfdRequiredMinRx = 0,
BroadcastForticlientDiscovery = "string",
BroadcastForward = "string",
CaptivePortal = 0,
CliConnStatus = 0,
Color = 0,
Ddns = "string",
DdnsAuth = "string",
DdnsDomain = "string",
DdnsKey = "string",
DdnsKeyname = "string",
DdnsPasswords = new[]
{
"string",
},
DdnsServer = "string",
DdnsServerIp = "string",
DdnsSn = "string",
DdnsTtl = 0,
DdnsUsername = "string",
DdnsZone = "string",
DedicatedTo = "string",
DefaultPurdueLevel = "string",
Defaultgw = "string",
Description = "string",
DetectedPeerMtu = 0,
Detectprotocols = new[]
{
"string",
},
Detectserver = "string",
DeviceAccessList = "string",
DeviceIdentification = "string",
DeviceIdentificationActiveScan = "string",
DeviceNetscan = "string",
DeviceUserIdentification = "string",
Devindex = 0,
DhcpBroadcastFlag = "string",
DhcpClasslessRouteAddition = "string",
DhcpClientIdentifier = "string",
DhcpRelayAgentOption = "string",
DhcpRelayCircuitId = "string",
DhcpRelayInterface = "string",
DhcpRelayInterfaceSelectMethod = "string",
DhcpRelayIps = new[]
{
"string",
},
DhcpRelayLinkSelection = "string",
DhcpRelayRequestAllServer = "string",
DhcpRelayService = "string",
DhcpRelaySourceIp = "string",
DhcpRelayType = "string",
DhcpRenewTime = 0,
DhcpSmartRelay = "string",
DiscRetryTimeout = 0,
DisconnectThreshold = 0,
Distance = 0,
DnsQuery = "string",
DnsServerOverride = "string",
DnsServerProtocols = new[]
{
"string",
},
DropFragment = "string",
DropOverlappedFragment = "string",
DynamicSortSubtable = "string",
EapCaCerts = new[]
{
"string",
},
EapIdentity = "string",
EapMethod = "string",
EapPasswords = new[]
{
"string",
},
EapSupplicant = "string",
EapUserCerts = new[]
{
"string",
},
EgressCos = "string",
EgressShapingProfile = "string",
Eip = "string",
EndpointCompliance = "string",
EstimatedDownstreamBandwidth = 0,
EstimatedUpstreamBandwidth = 0,
ExplicitFtpProxy = "string",
ExplicitWebProxy = "string",
External = "string",
FailActionOnExtender = "string",
FailAlertInterfaces = "string",
FailAlertMethod = "string",
FailDetect = "string",
FailDetectOptions = new[]
{
"string",
},
Fdp = "string",
Fortiheartbeat = "string",
Fortilink = "string",
FortilinkBackupLink = 0,
FortilinkNeighborDetect = "string",
FortilinkSplitInterface = "string",
FortilinkStacking = "string",
ForwardDomain = 0,
ForwardErrorCorrection = "string",
FpAnomalies = new[]
{
"string",
},
FpDisables = new[]
{
"string",
},
GatewayAddress = "string",
GenericReceiveOffload = "string",
GiGk = "string",
Gwaddr = "string",
Gwdetect = "string",
HaPriority = 0,
IcmpAcceptRedirect = "string",
IcmpRedirect = "string",
IcmpSendRedirect = "string",
IdentAccept = "string",
IdleTimeout = 0,
IfMdix = "string",
IfMedia = "string",
IkeSamlServers = new[]
{
"string",
},
InForceVlanCos = 0,
Inbandwidth = 0,
IngressCos = "string",
IngressShapingProfile = "string",
IngressSpilloverThreshold = 0,
InterconnectProfile = "string",
Internal = 0,
Ip = "string",
IpManagedByFortiipam = "string",
Ipmac = "string",
IpsSnifferMode = "string",
Ipunnumbered = "string",
Ipv6 = new Fortimanager.Inputs.ObjectFspVlanInterfaceIpv6Args
{
Autoconf = "string",
CliConn6Status = 0,
Dhcp6ClientOptions = new[]
{
"string",
},
Dhcp6InformationRequest = "string",
Dhcp6PrefixDelegation = "string",
Dhcp6PrefixHint = "string",
Dhcp6PrefixHintPlt = 0,
Dhcp6PrefixHintVlt = 0,
Dhcp6RelayInterfaceId = "string",
Dhcp6RelayIp = "string",
Dhcp6RelayService = "string",
Dhcp6RelaySourceInterface = "string",
Dhcp6RelaySourceIp = "string",
Dhcp6RelayType = "string",
Icmp6SendRedirect = "string",
InterfaceIdentifier = "string",
Ip6Address = "string",
Ip6Allowaccesses = new[]
{
"string",
},
Ip6DefaultLife = 0,
Ip6DelegatedPrefixIaid = 0,
Ip6DelegatedPrefixLists = new[]
{
new Fortimanager.Inputs.ObjectFspVlanInterfaceIpv6Ip6DelegatedPrefixListArgs
{
AutonomousFlag = "string",
DelegatedPrefixIaid = 0,
OnlinkFlag = "string",
PrefixId = 0,
RdnssService = "string",
Rdnsses = new[]
{
"string",
},
Subnet = "string",
UpstreamInterface = "string",
},
},
Ip6DnsServerOverride = "string",
Ip6ExtraAddrs = new[]
{
new Fortimanager.Inputs.ObjectFspVlanInterfaceIpv6Ip6ExtraAddrArgs
{
Prefix = "string",
},
},
Ip6HopLimit = 0,
Ip6LinkMtu = 0,
Ip6ManageFlag = "string",
Ip6MaxInterval = 0,
Ip6MinInterval = 0,
Ip6Mode = "string",
Ip6OtherFlag = "string",
Ip6PrefixLists = new[]
{
new Fortimanager.Inputs.ObjectFspVlanInterfaceIpv6Ip6PrefixListArgs
{
AutonomousFlag = "string",
Dnssls = new[]
{
"string",
},
OnlinkFlag = "string",
PreferredLifeTime = 0,
Prefix = "string",
Rdnsses = new[]
{
"string",
},
ValidLifeTime = 0,
},
},
Ip6PrefixMode = "string",
Ip6ReachableTime = 0,
Ip6RetransTime = 0,
Ip6SendAdv = "string",
Ip6Subnet = "string",
Ip6UpstreamInterface = "string",
NdCert = "string",
NdCgaModifier = "string",
NdMode = "string",
NdSecurityLevel = 0,
NdTimestampDelta = 0,
NdTimestampFuzz = 0,
RaSendMtu = "string",
UniqueAutoconfAddr = "string",
Vrip6LinkLocal = "string",
Vrrp6s = new[]
{
new Fortimanager.Inputs.ObjectFspVlanInterfaceIpv6Vrrp6Args
{
AcceptMode = "string",
AdvInterval = 0,
IgnoreDefaultRoute = "string",
Preempt = "string",
Priority = 0,
StartTime = 0,
Status = "string",
Vrdst6 = "string",
Vrgrp = 0,
Vrid = 0,
Vrip6 = "string",
},
},
VrrpVirtualMac6 = "string",
},
L2forward = "string",
L2tpClient = "string",
LacpHaSecondary = "string",
LacpHaSlave = "string",
LacpMode = "string",
LacpSpeed = "string",
LargeReceiveOffload = "string",
LcpEchoInterval = 0,
LcpMaxEchoFails = 0,
LinkUpDelay = 0,
ListenForticlientConnection = "string",
LldpNetworkPolicy = "string",
LldpReception = "string",
LldpTransmission = "string",
Log = "string",
Macaddr = "string",
ManagedSubnetworkSize = "string",
ManagementIp = "string",
MaxEgressBurstRate = 0,
MaxEgressRate = 0,
MeasuredDownstreamBandwidth = 0,
MeasuredUpstreamBandwidth = 0,
Mediatype = "string",
Member = "string",
MinLinks = 0,
MinLinksDown = "string",
MirroringDirection = "string",
MirroringPort = "string",
Mode = "string",
MonitorBandwidth = "string",
Mtu = 0,
MtuOverride = "string",
MuxType = "string",
Name = "string",
Ndiscforward = "string",
NetbiosForward = "string",
NetflowSampler = "string",
NpQosProfile = 0,
NpuFastpath = "string",
Nst = "string",
ObjectFspVlanInterfaceId = "string",
OutForceVlanCos = 0,
Outbandwidth = 0,
PadtRetryTimeout = 0,
Passwords = new[]
{
"string",
},
PeerInterface = "string",
PhyMode = "string",
PingServStatus = 0,
Poe = "string",
PollingInterval = 0,
PortMirroring = "string",
PppoeUnnumberedNegotiate = "string",
PptpAuthType = "string",
PptpClient = "string",
PptpPasswords = new[]
{
"string",
},
PptpServerIp = "string",
PptpTimeout = 0,
PptpUser = "string",
PreserveSessionRoute = "string",
Priority = 0,
PriorityOverride = "string",
ProxyCaptivePortal = "string",
PvcAtmQos = "string",
PvcChan = 0,
PvcCrc = 0,
PvcPcr = 0,
PvcScr = 0,
PvcVlanId = 0,
PvcVlanRxId = 0,
PvcVlanRxOp = "string",
PvcVlanTxId = 0,
PvcVlanTxOp = "string",
ReachableTime = 0,
RedundantInterface = "string",
RemoteIp = "string",
ReplacemsgOverrideGroup = "string",
Retransmission = "string",
RingRx = 0,
RingTx = 0,
Role = "string",
SampleDirection = "string",
SampleRate = 0,
ScanBotnetConnections = "string",
Scopetype = "string",
SecondaryIp = "string",
Secondaryips = new[]
{
new Fortimanager.Inputs.ObjectFspVlanInterfaceSecondaryipArgs
{
Allowaccesses = new[]
{
"string",
},
Detectprotocols = new[]
{
"string",
},
Detectserver = "string",
Gwdetect = "string",
HaPriority = 0,
Id = 0,
Ip = "string",
PingServStatus = 0,
SecipRelayIp = "string",
Seq = 0,
},
},
Security8021xDynamicVlanId = 0,
Security8021xMaster = "string",
Security8021xMemberMode = "string",
Security8021xMode = "string",
SecurityExemptList = "string",
SecurityExternalLogout = "string",
SecurityExternalWeb = "string",
SecurityGroups = "string",
SecurityMacAuthBypass = "string",
SecurityMode = "string",
SecurityRedirectUrl = "string",
SelectProfile30a35b = "string",
ServiceName = "string",
SflowSampler = "string",
SfpDsl = "string",
SfpDslAdslFallback = "string",
SfpDslAutodetect = "string",
SfpDslMac = "string",
Speed = "string",
SpilloverThreshold = 0,
SrcCheck = "string",
Status = "string",
Stp = "string",
StpEdge = "string",
StpHaSecondary = "string",
StpHaSlave = "string",
Stpforward = "string",
StpforwardMode = "string",
StripPriorityVlanTag = "string",
Subst = "string",
SubstituteDstMac = "string",
SwAlgorithm = "string",
SwcFirstCreate = 0,
SwcVlan = 0,
Switch = "string",
SwitchControllerAccessVlan = "string",
SwitchControllerArpInspection = "string",
SwitchControllerAuth = "string",
SwitchControllerDhcpSnooping = "string",
SwitchControllerDhcpSnoopingOption82 = "string",
SwitchControllerDhcpSnoopingVerifyMac = "string",
SwitchControllerDynamic = "string",
SwitchControllerFeature = "string",
SwitchControllerIgmpSnooping = "string",
SwitchControllerIgmpSnoopingFastLeave = "string",
SwitchControllerIgmpSnoopingProxy = "string",
SwitchControllerIotScanning = "string",
SwitchControllerLearningLimit = 0,
SwitchControllerMgmtVlan = 0,
SwitchControllerNac = "string",
SwitchControllerNetflowCollect = "string",
SwitchControllerOffload = "string",
SwitchControllerOffloadGw = "string",
SwitchControllerOffloadIp = "string",
SwitchControllerOffloading = "string",
SwitchControllerOffloadingGw = "string",
SwitchControllerOffloadingIp = "string",
SwitchControllerRadiusServer = "string",
SwitchControllerRspanMode = "string",
SwitchControllerSourceIp = "string",
SwitchControllerTrafficPolicy = "string",
SystemId = "string",
SystemIdType = "string",
TcMode = "string",
TcpMss = 0,
Trunk = "string",
TrustIp1 = "string",
TrustIp2 = "string",
TrustIp3 = "string",
TrustIp61 = "string",
TrustIp62 = "string",
TrustIp63 = "string",
Type = "string",
Username = "string",
Vci = 0,
Vectoring = "string",
Vindex = 0,
VlanOpMode = "string",
VlanProtocol = "string",
Vlanforward = "string",
Vlanid = 0,
Vpi = 0,
Vrf = 0,
VrrpVirtualMac = "string",
Vrrps = new[]
{
new Fortimanager.Inputs.ObjectFspVlanInterfaceVrrpArgs
{
AcceptMode = "string",
AdvInterval = 0,
IgnoreDefaultRoute = "string",
Preempt = "string",
Priority = 0,
ProxyArps = new[]
{
new Fortimanager.Inputs.ObjectFspVlanInterfaceVrrpProxyArpArgs
{
Id = 0,
Ip = "string",
},
},
StartTime = 0,
Status = "string",
Version = "string",
VrdstPriority = 0,
Vrdsts = new[]
{
"string",
},
Vrgrp = 0,
Vrid = 0,
Vrip = "string",
},
},
Wccp = "string",
Weight = 0,
Wifi5gThreshold = "string",
WifiAcl = "string",
WifiApBand = "string",
WifiAuth = "string",
WifiAutoConnect = "string",
WifiAutoSave = "string",
WifiBroadcastSsid = "string",
WifiDnsServer1 = "string",
WifiDnsServer2 = "string",
WifiEncrypt = "string",
WifiFragmentThreshold = 0,
WifiGateway = "string",
WifiKeyindex = 0,
WifiKeys = new[]
{
"string",
},
WifiMacFilter = "string",
WifiPassphrases = new[]
{
"string",
},
WifiRadiusServer = "string",
WifiRtsThreshold = 0,
WifiSecurity = "string",
WifiSsid = "string",
WifiUsergroup = "string",
WinsIp = "string",
});
example, err := fortimanager.NewObjectFspVlanInterface(ctx, "objectFspVlanInterfaceResource", &fortimanager.ObjectFspVlanInterfaceArgs{
Vlan: pulumi.String("string"),
AcName: pulumi.String("string"),
Adom: pulumi.String("string"),
Aggregate: pulumi.String("string"),
AggregateType: pulumi.String("string"),
Algorithm: pulumi.String("string"),
Alias: pulumi.String("string"),
Allowaccesses: pulumi.StringArray{
pulumi.String("string"),
},
Annex: pulumi.String("string"),
ApDiscover: pulumi.String("string"),
Arpforward: pulumi.String("string"),
AtmProtocol: pulumi.String("string"),
AuthCert: pulumi.String("string"),
AuthPortalAddr: pulumi.String("string"),
AuthType: pulumi.String("string"),
AutoAuthExtensionDevice: pulumi.String("string"),
BandwidthMeasureTime: pulumi.Float64(0),
Bfd: pulumi.String("string"),
BfdDesiredMinTx: pulumi.Float64(0),
BfdDetectMult: pulumi.Float64(0),
BfdRequiredMinRx: pulumi.Float64(0),
BroadcastForticlientDiscovery: pulumi.String("string"),
BroadcastForward: pulumi.String("string"),
CaptivePortal: pulumi.Float64(0),
CliConnStatus: pulumi.Float64(0),
Color: pulumi.Float64(0),
Ddns: pulumi.String("string"),
DdnsAuth: pulumi.String("string"),
DdnsDomain: pulumi.String("string"),
DdnsKey: pulumi.String("string"),
DdnsKeyname: pulumi.String("string"),
DdnsPasswords: pulumi.StringArray{
pulumi.String("string"),
},
DdnsServer: pulumi.String("string"),
DdnsServerIp: pulumi.String("string"),
DdnsSn: pulumi.String("string"),
DdnsTtl: pulumi.Float64(0),
DdnsUsername: pulumi.String("string"),
DdnsZone: pulumi.String("string"),
DedicatedTo: pulumi.String("string"),
DefaultPurdueLevel: pulumi.String("string"),
Defaultgw: pulumi.String("string"),
Description: pulumi.String("string"),
DetectedPeerMtu: pulumi.Float64(0),
Detectprotocols: pulumi.StringArray{
pulumi.String("string"),
},
Detectserver: pulumi.String("string"),
DeviceAccessList: pulumi.String("string"),
DeviceIdentification: pulumi.String("string"),
DeviceIdentificationActiveScan: pulumi.String("string"),
DeviceNetscan: pulumi.String("string"),
DeviceUserIdentification: pulumi.String("string"),
Devindex: pulumi.Float64(0),
DhcpBroadcastFlag: pulumi.String("string"),
DhcpClasslessRouteAddition: pulumi.String("string"),
DhcpClientIdentifier: pulumi.String("string"),
DhcpRelayAgentOption: pulumi.String("string"),
DhcpRelayCircuitId: pulumi.String("string"),
DhcpRelayInterface: pulumi.String("string"),
DhcpRelayInterfaceSelectMethod: pulumi.String("string"),
DhcpRelayIps: pulumi.StringArray{
pulumi.String("string"),
},
DhcpRelayLinkSelection: pulumi.String("string"),
DhcpRelayRequestAllServer: pulumi.String("string"),
DhcpRelayService: pulumi.String("string"),
DhcpRelaySourceIp: pulumi.String("string"),
DhcpRelayType: pulumi.String("string"),
DhcpRenewTime: pulumi.Float64(0),
DhcpSmartRelay: pulumi.String("string"),
DiscRetryTimeout: pulumi.Float64(0),
DisconnectThreshold: pulumi.Float64(0),
Distance: pulumi.Float64(0),
DnsQuery: pulumi.String("string"),
DnsServerOverride: pulumi.String("string"),
DnsServerProtocols: pulumi.StringArray{
pulumi.String("string"),
},
DropFragment: pulumi.String("string"),
DropOverlappedFragment: pulumi.String("string"),
DynamicSortSubtable: pulumi.String("string"),
EapCaCerts: pulumi.StringArray{
pulumi.String("string"),
},
EapIdentity: pulumi.String("string"),
EapMethod: pulumi.String("string"),
EapPasswords: pulumi.StringArray{
pulumi.String("string"),
},
EapSupplicant: pulumi.String("string"),
EapUserCerts: pulumi.StringArray{
pulumi.String("string"),
},
EgressCos: pulumi.String("string"),
EgressShapingProfile: pulumi.String("string"),
Eip: pulumi.String("string"),
EndpointCompliance: pulumi.String("string"),
EstimatedDownstreamBandwidth: pulumi.Float64(0),
EstimatedUpstreamBandwidth: pulumi.Float64(0),
ExplicitFtpProxy: pulumi.String("string"),
ExplicitWebProxy: pulumi.String("string"),
External: pulumi.String("string"),
FailActionOnExtender: pulumi.String("string"),
FailAlertInterfaces: pulumi.String("string"),
FailAlertMethod: pulumi.String("string"),
FailDetect: pulumi.String("string"),
FailDetectOptions: pulumi.StringArray{
pulumi.String("string"),
},
Fdp: pulumi.String("string"),
Fortiheartbeat: pulumi.String("string"),
Fortilink: pulumi.String("string"),
FortilinkBackupLink: pulumi.Float64(0),
FortilinkNeighborDetect: pulumi.String("string"),
FortilinkSplitInterface: pulumi.String("string"),
FortilinkStacking: pulumi.String("string"),
ForwardDomain: pulumi.Float64(0),
ForwardErrorCorrection: pulumi.String("string"),
FpAnomalies: pulumi.StringArray{
pulumi.String("string"),
},
FpDisables: pulumi.StringArray{
pulumi.String("string"),
},
GatewayAddress: pulumi.String("string"),
GenericReceiveOffload: pulumi.String("string"),
GiGk: pulumi.String("string"),
Gwaddr: pulumi.String("string"),
Gwdetect: pulumi.String("string"),
HaPriority: pulumi.Float64(0),
IcmpAcceptRedirect: pulumi.String("string"),
IcmpRedirect: pulumi.String("string"),
IcmpSendRedirect: pulumi.String("string"),
IdentAccept: pulumi.String("string"),
IdleTimeout: pulumi.Float64(0),
IfMdix: pulumi.String("string"),
IfMedia: pulumi.String("string"),
IkeSamlServers: pulumi.StringArray{
pulumi.String("string"),
},
InForceVlanCos: pulumi.Float64(0),
Inbandwidth: pulumi.Float64(0),
IngressCos: pulumi.String("string"),
IngressShapingProfile: pulumi.String("string"),
IngressSpilloverThreshold: pulumi.Float64(0),
InterconnectProfile: pulumi.String("string"),
Internal: pulumi.Float64(0),
Ip: pulumi.String("string"),
IpManagedByFortiipam: pulumi.String("string"),
Ipmac: pulumi.String("string"),
IpsSnifferMode: pulumi.String("string"),
Ipunnumbered: pulumi.String("string"),
Ipv6: &.ObjectFspVlanInterfaceIpv6TypeArgs{
Autoconf: pulumi.String("string"),
CliConn6Status: pulumi.Float64(0),
Dhcp6ClientOptions: pulumi.StringArray{
pulumi.String("string"),
},
Dhcp6InformationRequest: pulumi.String("string"),
Dhcp6PrefixDelegation: pulumi.String("string"),
Dhcp6PrefixHint: pulumi.String("string"),
Dhcp6PrefixHintPlt: pulumi.Float64(0),
Dhcp6PrefixHintVlt: pulumi.Float64(0),
Dhcp6RelayInterfaceId: pulumi.String("string"),
Dhcp6RelayIp: pulumi.String("string"),
Dhcp6RelayService: pulumi.String("string"),
Dhcp6RelaySourceInterface: pulumi.String("string"),
Dhcp6RelaySourceIp: pulumi.String("string"),
Dhcp6RelayType: pulumi.String("string"),
Icmp6SendRedirect: pulumi.String("string"),
InterfaceIdentifier: pulumi.String("string"),
Ip6Address: pulumi.String("string"),
Ip6Allowaccesses: pulumi.StringArray{
pulumi.String("string"),
},
Ip6DefaultLife: pulumi.Float64(0),
Ip6DelegatedPrefixIaid: pulumi.Float64(0),
Ip6DelegatedPrefixLists: .ObjectFspVlanInterfaceIpv6Ip6DelegatedPrefixListTypeArray{
&.ObjectFspVlanInterfaceIpv6Ip6DelegatedPrefixListTypeArgs{
AutonomousFlag: pulumi.String("string"),
DelegatedPrefixIaid: pulumi.Float64(0),
OnlinkFlag: pulumi.String("string"),
PrefixId: pulumi.Float64(0),
RdnssService: pulumi.String("string"),
Rdnsses: pulumi.StringArray{
pulumi.String("string"),
},
Subnet: pulumi.String("string"),
UpstreamInterface: pulumi.String("string"),
},
},
Ip6DnsServerOverride: pulumi.String("string"),
Ip6ExtraAddrs: .ObjectFspVlanInterfaceIpv6Ip6ExtraAddrTypeArray{
&.ObjectFspVlanInterfaceIpv6Ip6ExtraAddrTypeArgs{
Prefix: pulumi.String("string"),
},
},
Ip6HopLimit: pulumi.Float64(0),
Ip6LinkMtu: pulumi.Float64(0),
Ip6ManageFlag: pulumi.String("string"),
Ip6MaxInterval: pulumi.Float64(0),
Ip6MinInterval: pulumi.Float64(0),
Ip6Mode: pulumi.String("string"),
Ip6OtherFlag: pulumi.String("string"),
Ip6PrefixLists: .ObjectFspVlanInterfaceIpv6Ip6PrefixListArray{
&.ObjectFspVlanInterfaceIpv6Ip6PrefixListArgs{
AutonomousFlag: pulumi.String("string"),
Dnssls: pulumi.StringArray{
pulumi.String("string"),
},
OnlinkFlag: pulumi.String("string"),
PreferredLifeTime: pulumi.Float64(0),
Prefix: pulumi.String("string"),
Rdnsses: pulumi.StringArray{
pulumi.String("string"),
},
ValidLifeTime: pulumi.Float64(0),
},
},
Ip6PrefixMode: pulumi.String("string"),
Ip6ReachableTime: pulumi.Float64(0),
Ip6RetransTime: pulumi.Float64(0),
Ip6SendAdv: pulumi.String("string"),
Ip6Subnet: pulumi.String("string"),
Ip6UpstreamInterface: pulumi.String("string"),
NdCert: pulumi.String("string"),
NdCgaModifier: pulumi.String("string"),
NdMode: pulumi.String("string"),
NdSecurityLevel: pulumi.Float64(0),
NdTimestampDelta: pulumi.Float64(0),
NdTimestampFuzz: pulumi.Float64(0),
RaSendMtu: pulumi.String("string"),
UniqueAutoconfAddr: pulumi.String("string"),
Vrip6LinkLocal: pulumi.String("string"),
Vrrp6s: .ObjectFspVlanInterfaceIpv6Vrrp6TypeArray{
&.ObjectFspVlanInterfaceIpv6Vrrp6TypeArgs{
AcceptMode: pulumi.String("string"),
AdvInterval: pulumi.Float64(0),
IgnoreDefaultRoute: pulumi.String("string"),
Preempt: pulumi.String("string"),
Priority: pulumi.Float64(0),
StartTime: pulumi.Float64(0),
Status: pulumi.String("string"),
Vrdst6: pulumi.String("string"),
Vrgrp: pulumi.Float64(0),
Vrid: pulumi.Float64(0),
Vrip6: pulumi.String("string"),
},
},
VrrpVirtualMac6: pulumi.String("string"),
},
L2forward: pulumi.String("string"),
L2tpClient: pulumi.String("string"),
LacpHaSecondary: pulumi.String("string"),
LacpHaSlave: pulumi.String("string"),
LacpMode: pulumi.String("string"),
LacpSpeed: pulumi.String("string"),
LargeReceiveOffload: pulumi.String("string"),
LcpEchoInterval: pulumi.Float64(0),
LcpMaxEchoFails: pulumi.Float64(0),
LinkUpDelay: pulumi.Float64(0),
ListenForticlientConnection: pulumi.String("string"),
LldpNetworkPolicy: pulumi.String("string"),
LldpReception: pulumi.String("string"),
LldpTransmission: pulumi.String("string"),
Log: pulumi.String("string"),
Macaddr: pulumi.String("string"),
ManagedSubnetworkSize: pulumi.String("string"),
ManagementIp: pulumi.String("string"),
MaxEgressBurstRate: pulumi.Float64(0),
MaxEgressRate: pulumi.Float64(0),
MeasuredDownstreamBandwidth: pulumi.Float64(0),
MeasuredUpstreamBandwidth: pulumi.Float64(0),
Mediatype: pulumi.String("string"),
Member: pulumi.String("string"),
MinLinks: pulumi.Float64(0),
MinLinksDown: pulumi.String("string"),
MirroringDirection: pulumi.String("string"),
MirroringPort: pulumi.String("string"),
Mode: pulumi.String("string"),
MonitorBandwidth: pulumi.String("string"),
Mtu: pulumi.Float64(0),
MtuOverride: pulumi.String("string"),
MuxType: pulumi.String("string"),
Name: pulumi.String("string"),
Ndiscforward: pulumi.String("string"),
NetbiosForward: pulumi.String("string"),
NetflowSampler: pulumi.String("string"),
NpQosProfile: pulumi.Float64(0),
NpuFastpath: pulumi.String("string"),
Nst: pulumi.String("string"),
ObjectFspVlanInterfaceId: pulumi.String("string"),
OutForceVlanCos: pulumi.Float64(0),
Outbandwidth: pulumi.Float64(0),
PadtRetryTimeout: pulumi.Float64(0),
Passwords: pulumi.StringArray{
pulumi.String("string"),
},
PeerInterface: pulumi.String("string"),
PhyMode: pulumi.String("string"),
PingServStatus: pulumi.Float64(0),
Poe: pulumi.String("string"),
PollingInterval: pulumi.Float64(0),
PortMirroring: pulumi.String("string"),
PppoeUnnumberedNegotiate: pulumi.String("string"),
PptpAuthType: pulumi.String("string"),
PptpClient: pulumi.String("string"),
PptpPasswords: pulumi.StringArray{
pulumi.String("string"),
},
PptpServerIp: pulumi.String("string"),
PptpTimeout: pulumi.Float64(0),
PptpUser: pulumi.String("string"),
PreserveSessionRoute: pulumi.String("string"),
Priority: pulumi.Float64(0),
PriorityOverride: pulumi.String("string"),
ProxyCaptivePortal: pulumi.String("string"),
PvcAtmQos: pulumi.String("string"),
PvcChan: pulumi.Float64(0),
PvcCrc: pulumi.Float64(0),
PvcPcr: pulumi.Float64(0),
PvcScr: pulumi.Float64(0),
PvcVlanId: pulumi.Float64(0),
PvcVlanRxId: pulumi.Float64(0),
PvcVlanRxOp: pulumi.String("string"),
PvcVlanTxId: pulumi.Float64(0),
PvcVlanTxOp: pulumi.String("string"),
ReachableTime: pulumi.Float64(0),
RedundantInterface: pulumi.String("string"),
RemoteIp: pulumi.String("string"),
ReplacemsgOverrideGroup: pulumi.String("string"),
Retransmission: pulumi.String("string"),
RingRx: pulumi.Float64(0),
RingTx: pulumi.Float64(0),
Role: pulumi.String("string"),
SampleDirection: pulumi.String("string"),
SampleRate: pulumi.Float64(0),
ScanBotnetConnections: pulumi.String("string"),
Scopetype: pulumi.String("string"),
SecondaryIp: pulumi.String("string"),
Secondaryips: .ObjectFspVlanInterfaceSecondaryipTypeArray{
&.ObjectFspVlanInterfaceSecondaryipTypeArgs{
Allowaccesses: pulumi.StringArray{
pulumi.String("string"),
},
Detectprotocols: pulumi.StringArray{
pulumi.String("string"),
},
Detectserver: pulumi.String("string"),
Gwdetect: pulumi.String("string"),
HaPriority: pulumi.Float64(0),
Id: pulumi.Float64(0),
Ip: pulumi.String("string"),
PingServStatus: pulumi.Float64(0),
SecipRelayIp: pulumi.String("string"),
Seq: pulumi.Float64(0),
},
},
Security8021xDynamicVlanId: pulumi.Float64(0),
Security8021xMaster: pulumi.String("string"),
Security8021xMemberMode: pulumi.String("string"),
Security8021xMode: pulumi.String("string"),
SecurityExemptList: pulumi.String("string"),
SecurityExternalLogout: pulumi.String("string"),
SecurityExternalWeb: pulumi.String("string"),
SecurityGroups: pulumi.String("string"),
SecurityMacAuthBypass: pulumi.String("string"),
SecurityMode: pulumi.String("string"),
SecurityRedirectUrl: pulumi.String("string"),
SelectProfile30a35b: pulumi.String("string"),
ServiceName: pulumi.String("string"),
SflowSampler: pulumi.String("string"),
SfpDsl: pulumi.String("string"),
SfpDslAdslFallback: pulumi.String("string"),
SfpDslAutodetect: pulumi.String("string"),
SfpDslMac: pulumi.String("string"),
Speed: pulumi.String("string"),
SpilloverThreshold: pulumi.Float64(0),
SrcCheck: pulumi.String("string"),
Status: pulumi.String("string"),
Stp: pulumi.String("string"),
StpEdge: pulumi.String("string"),
StpHaSecondary: pulumi.String("string"),
StpHaSlave: pulumi.String("string"),
Stpforward: pulumi.String("string"),
StpforwardMode: pulumi.String("string"),
StripPriorityVlanTag: pulumi.String("string"),
Subst: pulumi.String("string"),
SubstituteDstMac: pulumi.String("string"),
SwAlgorithm: pulumi.String("string"),
SwcFirstCreate: pulumi.Float64(0),
SwcVlan: pulumi.Float64(0),
Switch: pulumi.String("string"),
SwitchControllerAccessVlan: pulumi.String("string"),
SwitchControllerArpInspection: pulumi.String("string"),
SwitchControllerAuth: pulumi.String("string"),
SwitchControllerDhcpSnooping: pulumi.String("string"),
SwitchControllerDhcpSnoopingOption82: pulumi.String("string"),
SwitchControllerDhcpSnoopingVerifyMac: pulumi.String("string"),
SwitchControllerDynamic: pulumi.String("string"),
SwitchControllerFeature: pulumi.String("string"),
SwitchControllerIgmpSnooping: pulumi.String("string"),
SwitchControllerIgmpSnoopingFastLeave: pulumi.String("string"),
SwitchControllerIgmpSnoopingProxy: pulumi.String("string"),
SwitchControllerIotScanning: pulumi.String("string"),
SwitchControllerLearningLimit: pulumi.Float64(0),
SwitchControllerMgmtVlan: pulumi.Float64(0),
SwitchControllerNac: pulumi.String("string"),
SwitchControllerNetflowCollect: pulumi.String("string"),
SwitchControllerOffload: pulumi.String("string"),
SwitchControllerOffloadGw: pulumi.String("string"),
SwitchControllerOffloadIp: pulumi.String("string"),
SwitchControllerOffloading: pulumi.String("string"),
SwitchControllerOffloadingGw: pulumi.String("string"),
SwitchControllerOffloadingIp: pulumi.String("string"),
SwitchControllerRadiusServer: pulumi.String("string"),
SwitchControllerRspanMode: pulumi.String("string"),
SwitchControllerSourceIp: pulumi.String("string"),
SwitchControllerTrafficPolicy: pulumi.String("string"),
SystemId: pulumi.String("string"),
SystemIdType: pulumi.String("string"),
TcMode: pulumi.String("string"),
TcpMss: pulumi.Float64(0),
Trunk: pulumi.String("string"),
TrustIp1: pulumi.String("string"),
TrustIp2: pulumi.String("string"),
TrustIp3: pulumi.String("string"),
TrustIp61: pulumi.String("string"),
TrustIp62: pulumi.String("string"),
TrustIp63: pulumi.String("string"),
Type: pulumi.String("string"),
Username: pulumi.String("string"),
Vci: pulumi.Float64(0),
Vectoring: pulumi.String("string"),
Vindex: pulumi.Float64(0),
VlanOpMode: pulumi.String("string"),
VlanProtocol: pulumi.String("string"),
Vlanforward: pulumi.String("string"),
Vlanid: pulumi.Float64(0),
Vpi: pulumi.Float64(0),
Vrf: pulumi.Float64(0),
VrrpVirtualMac: pulumi.String("string"),
Vrrps: .ObjectFspVlanInterfaceVrrpTypeArray{
&.ObjectFspVlanInterfaceVrrpTypeArgs{
AcceptMode: pulumi.String("string"),
AdvInterval: pulumi.Float64(0),
IgnoreDefaultRoute: pulumi.String("string"),
Preempt: pulumi.String("string"),
Priority: pulumi.Float64(0),
ProxyArps: .ObjectFspVlanInterfaceVrrpProxyArpTypeArray{
&.ObjectFspVlanInterfaceVrrpProxyArpTypeArgs{
Id: pulumi.Float64(0),
Ip: pulumi.String("string"),
},
},
StartTime: pulumi.Float64(0),
Status: pulumi.String("string"),
Version: pulumi.String("string"),
VrdstPriority: pulumi.Float64(0),
Vrdsts: pulumi.StringArray{
pulumi.String("string"),
},
Vrgrp: pulumi.Float64(0),
Vrid: pulumi.Float64(0),
Vrip: pulumi.String("string"),
},
},
Wccp: pulumi.String("string"),
Weight: pulumi.Float64(0),
Wifi5gThreshold: pulumi.String("string"),
WifiAcl: pulumi.String("string"),
WifiApBand: pulumi.String("string"),
WifiAuth: pulumi.String("string"),
WifiAutoConnect: pulumi.String("string"),
WifiAutoSave: pulumi.String("string"),
WifiBroadcastSsid: pulumi.String("string"),
WifiDnsServer1: pulumi.String("string"),
WifiDnsServer2: pulumi.String("string"),
WifiEncrypt: pulumi.String("string"),
WifiFragmentThreshold: pulumi.Float64(0),
WifiGateway: pulumi.String("string"),
WifiKeyindex: pulumi.Float64(0),
WifiKeys: pulumi.StringArray{
pulumi.String("string"),
},
WifiMacFilter: pulumi.String("string"),
WifiPassphrases: pulumi.StringArray{
pulumi.String("string"),
},
WifiRadiusServer: pulumi.String("string"),
WifiRtsThreshold: pulumi.Float64(0),
WifiSecurity: pulumi.String("string"),
WifiSsid: pulumi.String("string"),
WifiUsergroup: pulumi.String("string"),
WinsIp: pulumi.String("string"),
})
var objectFspVlanInterfaceResource = new ObjectFspVlanInterface("objectFspVlanInterfaceResource", ObjectFspVlanInterfaceArgs.builder()
.vlan("string")
.acName("string")
.adom("string")
.aggregate("string")
.aggregateType("string")
.algorithm("string")
.alias("string")
.allowaccesses("string")
.annex("string")
.apDiscover("string")
.arpforward("string")
.atmProtocol("string")
.authCert("string")
.authPortalAddr("string")
.authType("string")
.autoAuthExtensionDevice("string")
.bandwidthMeasureTime(0)
.bfd("string")
.bfdDesiredMinTx(0)
.bfdDetectMult(0)
.bfdRequiredMinRx(0)
.broadcastForticlientDiscovery("string")
.broadcastForward("string")
.captivePortal(0)
.cliConnStatus(0)
.color(0)
.ddns("string")
.ddnsAuth("string")
.ddnsDomain("string")
.ddnsKey("string")
.ddnsKeyname("string")
.ddnsPasswords("string")
.ddnsServer("string")
.ddnsServerIp("string")
.ddnsSn("string")
.ddnsTtl(0)
.ddnsUsername("string")
.ddnsZone("string")
.dedicatedTo("string")
.defaultPurdueLevel("string")
.defaultgw("string")
.description("string")
.detectedPeerMtu(0)
.detectprotocols("string")
.detectserver("string")
.deviceAccessList("string")
.deviceIdentification("string")
.deviceIdentificationActiveScan("string")
.deviceNetscan("string")
.deviceUserIdentification("string")
.devindex(0)
.dhcpBroadcastFlag("string")
.dhcpClasslessRouteAddition("string")
.dhcpClientIdentifier("string")
.dhcpRelayAgentOption("string")
.dhcpRelayCircuitId("string")
.dhcpRelayInterface("string")
.dhcpRelayInterfaceSelectMethod("string")
.dhcpRelayIps("string")
.dhcpRelayLinkSelection("string")
.dhcpRelayRequestAllServer("string")
.dhcpRelayService("string")
.dhcpRelaySourceIp("string")
.dhcpRelayType("string")
.dhcpRenewTime(0)
.dhcpSmartRelay("string")
.discRetryTimeout(0)
.disconnectThreshold(0)
.distance(0)
.dnsQuery("string")
.dnsServerOverride("string")
.dnsServerProtocols("string")
.dropFragment("string")
.dropOverlappedFragment("string")
.dynamicSortSubtable("string")
.eapCaCerts("string")
.eapIdentity("string")
.eapMethod("string")
.eapPasswords("string")
.eapSupplicant("string")
.eapUserCerts("string")
.egressCos("string")
.egressShapingProfile("string")
.eip("string")
.endpointCompliance("string")
.estimatedDownstreamBandwidth(0)
.estimatedUpstreamBandwidth(0)
.explicitFtpProxy("string")
.explicitWebProxy("string")
.external("string")
.failActionOnExtender("string")
.failAlertInterfaces("string")
.failAlertMethod("string")
.failDetect("string")
.failDetectOptions("string")
.fdp("string")
.fortiheartbeat("string")
.fortilink("string")
.fortilinkBackupLink(0)
.fortilinkNeighborDetect("string")
.fortilinkSplitInterface("string")
.fortilinkStacking("string")
.forwardDomain(0)
.forwardErrorCorrection("string")
.fpAnomalies("string")
.fpDisables("string")
.gatewayAddress("string")
.genericReceiveOffload("string")
.giGk("string")
.gwaddr("string")
.gwdetect("string")
.haPriority(0)
.icmpAcceptRedirect("string")
.icmpRedirect("string")
.icmpSendRedirect("string")
.identAccept("string")
.idleTimeout(0)
.ifMdix("string")
.ifMedia("string")
.ikeSamlServers("string")
.inForceVlanCos(0)
.inbandwidth(0)
.ingressCos("string")
.ingressShapingProfile("string")
.ingressSpilloverThreshold(0)
.interconnectProfile("string")
.internal(0)
.ip("string")
.ipManagedByFortiipam("string")
.ipmac("string")
.ipsSnifferMode("string")
.ipunnumbered("string")
.ipv6(ObjectFspVlanInterfaceIpv6Args.builder()
.autoconf("string")
.cliConn6Status(0)
.dhcp6ClientOptions("string")
.dhcp6InformationRequest("string")
.dhcp6PrefixDelegation("string")
.dhcp6PrefixHint("string")
.dhcp6PrefixHintPlt(0)
.dhcp6PrefixHintVlt(0)
.dhcp6RelayInterfaceId("string")
.dhcp6RelayIp("string")
.dhcp6RelayService("string")
.dhcp6RelaySourceInterface("string")
.dhcp6RelaySourceIp("string")
.dhcp6RelayType("string")
.icmp6SendRedirect("string")
.interfaceIdentifier("string")
.ip6Address("string")
.ip6Allowaccesses("string")
.ip6DefaultLife(0)
.ip6DelegatedPrefixIaid(0)
.ip6DelegatedPrefixLists(ObjectFspVlanInterfaceIpv6Ip6DelegatedPrefixListArgs.builder()
.autonomousFlag("string")
.delegatedPrefixIaid(0)
.onlinkFlag("string")
.prefixId(0)
.rdnssService("string")
.rdnsses("string")
.subnet("string")
.upstreamInterface("string")
.build())
.ip6DnsServerOverride("string")
.ip6ExtraAddrs(ObjectFspVlanInterfaceIpv6Ip6ExtraAddrArgs.builder()
.prefix("string")
.build())
.ip6HopLimit(0)
.ip6LinkMtu(0)
.ip6ManageFlag("string")
.ip6MaxInterval(0)
.ip6MinInterval(0)
.ip6Mode("string")
.ip6OtherFlag("string")
.ip6PrefixLists(ObjectFspVlanInterfaceIpv6Ip6PrefixListArgs.builder()
.autonomousFlag("string")
.dnssls("string")
.onlinkFlag("string")
.preferredLifeTime(0)
.prefix("string")
.rdnsses("string")
.validLifeTime(0)
.build())
.ip6PrefixMode("string")
.ip6ReachableTime(0)
.ip6RetransTime(0)
.ip6SendAdv("string")
.ip6Subnet("string")
.ip6UpstreamInterface("string")
.ndCert("string")
.ndCgaModifier("string")
.ndMode("string")
.ndSecurityLevel(0)
.ndTimestampDelta(0)
.ndTimestampFuzz(0)
.raSendMtu("string")
.uniqueAutoconfAddr("string")
.vrip6LinkLocal("string")
.vrrp6s(ObjectFspVlanInterfaceIpv6Vrrp6Args.builder()
.acceptMode("string")
.advInterval(0)
.ignoreDefaultRoute("string")
.preempt("string")
.priority(0)
.startTime(0)
.status("string")
.vrdst6("string")
.vrgrp(0)
.vrid(0)
.vrip6("string")
.build())
.vrrpVirtualMac6("string")
.build())
.l2forward("string")
.l2tpClient("string")
.lacpHaSecondary("string")
.lacpHaSlave("string")
.lacpMode("string")
.lacpSpeed("string")
.largeReceiveOffload("string")
.lcpEchoInterval(0)
.lcpMaxEchoFails(0)
.linkUpDelay(0)
.listenForticlientConnection("string")
.lldpNetworkPolicy("string")
.lldpReception("string")
.lldpTransmission("string")
.log("string")
.macaddr("string")
.managedSubnetworkSize("string")
.managementIp("string")
.maxEgressBurstRate(0)
.maxEgressRate(0)
.measuredDownstreamBandwidth(0)
.measuredUpstreamBandwidth(0)
.mediatype("string")
.member("string")
.minLinks(0)
.minLinksDown("string")
.mirroringDirection("string")
.mirroringPort("string")
.mode("string")
.monitorBandwidth("string")
.mtu(0)
.mtuOverride("string")
.muxType("string")
.name("string")
.ndiscforward("string")
.netbiosForward("string")
.netflowSampler("string")
.npQosProfile(0)
.npuFastpath("string")
.nst("string")
.objectFspVlanInterfaceId("string")
.outForceVlanCos(0)
.outbandwidth(0)
.padtRetryTimeout(0)
.passwords("string")
.peerInterface("string")
.phyMode("string")
.pingServStatus(0)
.poe("string")
.pollingInterval(0)
.portMirroring("string")
.pppoeUnnumberedNegotiate("string")
.pptpAuthType("string")
.pptpClient("string")
.pptpPasswords("string")
.pptpServerIp("string")
.pptpTimeout(0)
.pptpUser("string")
.preserveSessionRoute("string")
.priority(0)
.priorityOverride("string")
.proxyCaptivePortal("string")
.pvcAtmQos("string")
.pvcChan(0)
.pvcCrc(0)
.pvcPcr(0)
.pvcScr(0)
.pvcVlanId(0)
.pvcVlanRxId(0)
.pvcVlanRxOp("string")
.pvcVlanTxId(0)
.pvcVlanTxOp("string")
.reachableTime(0)
.redundantInterface("string")
.remoteIp("string")
.replacemsgOverrideGroup("string")
.retransmission("string")
.ringRx(0)
.ringTx(0)
.role("string")
.sampleDirection("string")
.sampleRate(0)
.scanBotnetConnections("string")
.scopetype("string")
.secondaryIp("string")
.secondaryips(ObjectFspVlanInterfaceSecondaryipArgs.builder()
.allowaccesses("string")
.detectprotocols("string")
.detectserver("string")
.gwdetect("string")
.haPriority(0)
.id(0)
.ip("string")
.pingServStatus(0)
.secipRelayIp("string")
.seq(0)
.build())
.security8021xDynamicVlanId(0)
.security8021xMaster("string")
.security8021xMemberMode("string")
.security8021xMode("string")
.securityExemptList("string")
.securityExternalLogout("string")
.securityExternalWeb("string")
.securityGroups("string")
.securityMacAuthBypass("string")
.securityMode("string")
.securityRedirectUrl("string")
.selectProfile30a35b("string")
.serviceName("string")
.sflowSampler("string")
.sfpDsl("string")
.sfpDslAdslFallback("string")
.sfpDslAutodetect("string")
.sfpDslMac("string")
.speed("string")
.spilloverThreshold(0)
.srcCheck("string")
.status("string")
.stp("string")
.stpEdge("string")
.stpHaSecondary("string")
.stpHaSlave("string")
.stpforward("string")
.stpforwardMode("string")
.stripPriorityVlanTag("string")
.subst("string")
.substituteDstMac("string")
.swAlgorithm("string")
.swcFirstCreate(0)
.swcVlan(0)
.switch_("string")
.switchControllerAccessVlan("string")
.switchControllerArpInspection("string")
.switchControllerAuth("string")
.switchControllerDhcpSnooping("string")
.switchControllerDhcpSnoopingOption82("string")
.switchControllerDhcpSnoopingVerifyMac("string")
.switchControllerDynamic("string")
.switchControllerFeature("string")
.switchControllerIgmpSnooping("string")
.switchControllerIgmpSnoopingFastLeave("string")
.switchControllerIgmpSnoopingProxy("string")
.switchControllerIotScanning("string")
.switchControllerLearningLimit(0)
.switchControllerMgmtVlan(0)
.switchControllerNac("string")
.switchControllerNetflowCollect("string")
.switchControllerOffload("string")
.switchControllerOffloadGw("string")
.switchControllerOffloadIp("string")
.switchControllerOffloading("string")
.switchControllerOffloadingGw("string")
.switchControllerOffloadingIp("string")
.switchControllerRadiusServer("string")
.switchControllerRspanMode("string")
.switchControllerSourceIp("string")
.switchControllerTrafficPolicy("string")
.systemId("string")
.systemIdType("string")
.tcMode("string")
.tcpMss(0)
.trunk("string")
.trustIp1("string")
.trustIp2("string")
.trustIp3("string")
.trustIp61("string")
.trustIp62("string")
.trustIp63("string")
.type("string")
.username("string")
.vci(0)
.vectoring("string")
.vindex(0)
.vlanOpMode("string")
.vlanProtocol("string")
.vlanforward("string")
.vlanid(0)
.vpi(0)
.vrf(0)
.vrrpVirtualMac("string")
.vrrps(ObjectFspVlanInterfaceVrrpArgs.builder()
.acceptMode("string")
.advInterval(0)
.ignoreDefaultRoute("string")
.preempt("string")
.priority(0)
.proxyArps(ObjectFspVlanInterfaceVrrpProxyArpArgs.builder()
.id(0)
.ip("string")
.build())
.startTime(0)
.status("string")
.version("string")
.vrdstPriority(0)
.vrdsts("string")
.vrgrp(0)
.vrid(0)
.vrip("string")
.build())
.wccp("string")
.weight(0)
.wifi5gThreshold("string")
.wifiAcl("string")
.wifiApBand("string")
.wifiAuth("string")
.wifiAutoConnect("string")
.wifiAutoSave("string")
.wifiBroadcastSsid("string")
.wifiDnsServer1("string")
.wifiDnsServer2("string")
.wifiEncrypt("string")
.wifiFragmentThreshold(0)
.wifiGateway("string")
.wifiKeyindex(0)
.wifiKeys("string")
.wifiMacFilter("string")
.wifiPassphrases("string")
.wifiRadiusServer("string")
.wifiRtsThreshold(0)
.wifiSecurity("string")
.wifiSsid("string")
.wifiUsergroup("string")
.winsIp("string")
.build());
object_fsp_vlan_interface_resource = fortimanager.ObjectFspVlanInterface("objectFspVlanInterfaceResource",
vlan="string",
ac_name="string",
adom="string",
aggregate="string",
aggregate_type="string",
algorithm="string",
alias="string",
allowaccesses=["string"],
annex="string",
ap_discover="string",
arpforward="string",
atm_protocol="string",
auth_cert="string",
auth_portal_addr="string",
auth_type="string",
auto_auth_extension_device="string",
bandwidth_measure_time=0,
bfd="string",
bfd_desired_min_tx=0,
bfd_detect_mult=0,
bfd_required_min_rx=0,
broadcast_forticlient_discovery="string",
broadcast_forward="string",
captive_portal=0,
cli_conn_status=0,
color=0,
ddns="string",
ddns_auth="string",
ddns_domain="string",
ddns_key="string",
ddns_keyname="string",
ddns_passwords=["string"],
ddns_server="string",
ddns_server_ip="string",
ddns_sn="string",
ddns_ttl=0,
ddns_username="string",
ddns_zone="string",
dedicated_to="string",
default_purdue_level="string",
defaultgw="string",
description="string",
detected_peer_mtu=0,
detectprotocols=["string"],
detectserver="string",
device_access_list="string",
device_identification="string",
device_identification_active_scan="string",
device_netscan="string",
device_user_identification="string",
devindex=0,
dhcp_broadcast_flag="string",
dhcp_classless_route_addition="string",
dhcp_client_identifier="string",
dhcp_relay_agent_option="string",
dhcp_relay_circuit_id="string",
dhcp_relay_interface="string",
dhcp_relay_interface_select_method="string",
dhcp_relay_ips=["string"],
dhcp_relay_link_selection="string",
dhcp_relay_request_all_server="string",
dhcp_relay_service="string",
dhcp_relay_source_ip="string",
dhcp_relay_type="string",
dhcp_renew_time=0,
dhcp_smart_relay="string",
disc_retry_timeout=0,
disconnect_threshold=0,
distance=0,
dns_query="string",
dns_server_override="string",
dns_server_protocols=["string"],
drop_fragment="string",
drop_overlapped_fragment="string",
dynamic_sort_subtable="string",
eap_ca_certs=["string"],
eap_identity="string",
eap_method="string",
eap_passwords=["string"],
eap_supplicant="string",
eap_user_certs=["string"],
egress_cos="string",
egress_shaping_profile="string",
eip="string",
endpoint_compliance="string",
estimated_downstream_bandwidth=0,
estimated_upstream_bandwidth=0,
explicit_ftp_proxy="string",
explicit_web_proxy="string",
external="string",
fail_action_on_extender="string",
fail_alert_interfaces="string",
fail_alert_method="string",
fail_detect="string",
fail_detect_options=["string"],
fdp="string",
fortiheartbeat="string",
fortilink="string",
fortilink_backup_link=0,
fortilink_neighbor_detect="string",
fortilink_split_interface="string",
fortilink_stacking="string",
forward_domain=0,
forward_error_correction="string",
fp_anomalies=["string"],
fp_disables=["string"],
gateway_address="string",
generic_receive_offload="string",
gi_gk="string",
gwaddr="string",
gwdetect="string",
ha_priority=0,
icmp_accept_redirect="string",
icmp_redirect="string",
icmp_send_redirect="string",
ident_accept="string",
idle_timeout=0,
if_mdix="string",
if_media="string",
ike_saml_servers=["string"],
in_force_vlan_cos=0,
inbandwidth=0,
ingress_cos="string",
ingress_shaping_profile="string",
ingress_spillover_threshold=0,
interconnect_profile="string",
internal=0,
ip="string",
ip_managed_by_fortiipam="string",
ipmac="string",
ips_sniffer_mode="string",
ipunnumbered="string",
ipv6={
"autoconf": "string",
"cli_conn6_status": 0,
"dhcp6_client_options": ["string"],
"dhcp6_information_request": "string",
"dhcp6_prefix_delegation": "string",
"dhcp6_prefix_hint": "string",
"dhcp6_prefix_hint_plt": 0,
"dhcp6_prefix_hint_vlt": 0,
"dhcp6_relay_interface_id": "string",
"dhcp6_relay_ip": "string",
"dhcp6_relay_service": "string",
"dhcp6_relay_source_interface": "string",
"dhcp6_relay_source_ip": "string",
"dhcp6_relay_type": "string",
"icmp6_send_redirect": "string",
"interface_identifier": "string",
"ip6_address": "string",
"ip6_allowaccesses": ["string"],
"ip6_default_life": 0,
"ip6_delegated_prefix_iaid": 0,
"ip6_delegated_prefix_lists": [{
"autonomous_flag": "string",
"delegated_prefix_iaid": 0,
"onlink_flag": "string",
"prefix_id": 0,
"rdnss_service": "string",
"rdnsses": ["string"],
"subnet": "string",
"upstream_interface": "string",
}],
"ip6_dns_server_override": "string",
"ip6_extra_addrs": [{
"prefix": "string",
}],
"ip6_hop_limit": 0,
"ip6_link_mtu": 0,
"ip6_manage_flag": "string",
"ip6_max_interval": 0,
"ip6_min_interval": 0,
"ip6_mode": "string",
"ip6_other_flag": "string",
"ip6_prefix_lists": [{
"autonomous_flag": "string",
"dnssls": ["string"],
"onlink_flag": "string",
"preferred_life_time": 0,
"prefix": "string",
"rdnsses": ["string"],
"valid_life_time": 0,
}],
"ip6_prefix_mode": "string",
"ip6_reachable_time": 0,
"ip6_retrans_time": 0,
"ip6_send_adv": "string",
"ip6_subnet": "string",
"ip6_upstream_interface": "string",
"nd_cert": "string",
"nd_cga_modifier": "string",
"nd_mode": "string",
"nd_security_level": 0,
"nd_timestamp_delta": 0,
"nd_timestamp_fuzz": 0,
"ra_send_mtu": "string",
"unique_autoconf_addr": "string",
"vrip6_link_local": "string",
"vrrp6s": [{
"accept_mode": "string",
"adv_interval": 0,
"ignore_default_route": "string",
"preempt": "string",
"priority": 0,
"start_time": 0,
"status": "string",
"vrdst6": "string",
"vrgrp": 0,
"vrid": 0,
"vrip6": "string",
}],
"vrrp_virtual_mac6": "string",
},
l2forward="string",
l2tp_client="string",
lacp_ha_secondary="string",
lacp_ha_slave="string",
lacp_mode="string",
lacp_speed="string",
large_receive_offload="string",
lcp_echo_interval=0,
lcp_max_echo_fails=0,
link_up_delay=0,
listen_forticlient_connection="string",
lldp_network_policy="string",
lldp_reception="string",
lldp_transmission="string",
log="string",
macaddr="string",
managed_subnetwork_size="string",
management_ip="string",
max_egress_burst_rate=0,
max_egress_rate=0,
measured_downstream_bandwidth=0,
measured_upstream_bandwidth=0,
mediatype="string",
member="string",
min_links=0,
min_links_down="string",
mirroring_direction="string",
mirroring_port="string",
mode="string",
monitor_bandwidth="string",
mtu=0,
mtu_override="string",
mux_type="string",
name="string",
ndiscforward="string",
netbios_forward="string",
netflow_sampler="string",
np_qos_profile=0,
npu_fastpath="string",
nst="string",
object_fsp_vlan_interface_id="string",
out_force_vlan_cos=0,
outbandwidth=0,
padt_retry_timeout=0,
passwords=["string"],
peer_interface="string",
phy_mode="string",
ping_serv_status=0,
poe="string",
polling_interval=0,
port_mirroring="string",
pppoe_unnumbered_negotiate="string",
pptp_auth_type="string",
pptp_client="string",
pptp_passwords=["string"],
pptp_server_ip="string",
pptp_timeout=0,
pptp_user="string",
preserve_session_route="string",
priority=0,
priority_override="string",
proxy_captive_portal="string",
pvc_atm_qos="string",
pvc_chan=0,
pvc_crc=0,
pvc_pcr=0,
pvc_scr=0,
pvc_vlan_id=0,
pvc_vlan_rx_id=0,
pvc_vlan_rx_op="string",
pvc_vlan_tx_id=0,
pvc_vlan_tx_op="string",
reachable_time=0,
redundant_interface="string",
remote_ip="string",
replacemsg_override_group="string",
retransmission="string",
ring_rx=0,
ring_tx=0,
role="string",
sample_direction="string",
sample_rate=0,
scan_botnet_connections="string",
scopetype="string",
secondary_ip="string",
secondaryips=[{
"allowaccesses": ["string"],
"detectprotocols": ["string"],
"detectserver": "string",
"gwdetect": "string",
"ha_priority": 0,
"id": 0,
"ip": "string",
"ping_serv_status": 0,
"secip_relay_ip": "string",
"seq": 0,
}],
security8021x_dynamic_vlan_id=0,
security8021x_master="string",
security8021x_member_mode="string",
security8021x_mode="string",
security_exempt_list="string",
security_external_logout="string",
security_external_web="string",
security_groups="string",
security_mac_auth_bypass="string",
security_mode="string",
security_redirect_url="string",
select_profile30a35b="string",
service_name="string",
sflow_sampler="string",
sfp_dsl="string",
sfp_dsl_adsl_fallback="string",
sfp_dsl_autodetect="string",
sfp_dsl_mac="string",
speed="string",
spillover_threshold=0,
src_check="string",
status="string",
stp="string",
stp_edge="string",
stp_ha_secondary="string",
stp_ha_slave="string",
stpforward="string",
stpforward_mode="string",
strip_priority_vlan_tag="string",
subst="string",
substitute_dst_mac="string",
sw_algorithm="string",
swc_first_create=0,
swc_vlan=0,
switch="string",
switch_controller_access_vlan="string",
switch_controller_arp_inspection="string",
switch_controller_auth="string",
switch_controller_dhcp_snooping="string",
switch_controller_dhcp_snooping_option82="string",
switch_controller_dhcp_snooping_verify_mac="string",
switch_controller_dynamic="string",
switch_controller_feature="string",
switch_controller_igmp_snooping="string",
switch_controller_igmp_snooping_fast_leave="string",
switch_controller_igmp_snooping_proxy="string",
switch_controller_iot_scanning="string",
switch_controller_learning_limit=0,
switch_controller_mgmt_vlan=0,
switch_controller_nac="string",
switch_controller_netflow_collect="string",
switch_controller_offload="string",
switch_controller_offload_gw="string",
switch_controller_offload_ip="string",
switch_controller_offloading="string",
switch_controller_offloading_gw="string",
switch_controller_offloading_ip="string",
switch_controller_radius_server="string",
switch_controller_rspan_mode="string",
switch_controller_source_ip="string",
switch_controller_traffic_policy="string",
system_id="string",
system_id_type="string",
tc_mode="string",
tcp_mss=0,
trunk="string",
trust_ip1="string",
trust_ip2="string",
trust_ip3="string",
trust_ip61="string",
trust_ip62="string",
trust_ip63="string",
type="string",
username="string",
vci=0,
vectoring="string",
vindex=0,
vlan_op_mode="string",
vlan_protocol="string",
vlanforward="string",
vlanid=0,
vpi=0,
vrf=0,
vrrp_virtual_mac="string",
vrrps=[{
"accept_mode": "string",
"adv_interval": 0,
"ignore_default_route": "string",
"preempt": "string",
"priority": 0,
"proxy_arps": [{
"id": 0,
"ip": "string",
}],
"start_time": 0,
"status": "string",
"version": "string",
"vrdst_priority": 0,
"vrdsts": ["string"],
"vrgrp": 0,
"vrid": 0,
"vrip": "string",
}],
wccp="string",
weight=0,
wifi5g_threshold="string",
wifi_acl="string",
wifi_ap_band="string",
wifi_auth="string",
wifi_auto_connect="string",
wifi_auto_save="string",
wifi_broadcast_ssid="string",
wifi_dns_server1="string",
wifi_dns_server2="string",
wifi_encrypt="string",
wifi_fragment_threshold=0,
wifi_gateway="string",
wifi_keyindex=0,
wifi_keys=["string"],
wifi_mac_filter="string",
wifi_passphrases=["string"],
wifi_radius_server="string",
wifi_rts_threshold=0,
wifi_security="string",
wifi_ssid="string",
wifi_usergroup="string",
wins_ip="string")
const objectFspVlanInterfaceResource = new fortimanager.ObjectFspVlanInterface("objectFspVlanInterfaceResource", {
vlan: "string",
acName: "string",
adom: "string",
aggregate: "string",
aggregateType: "string",
algorithm: "string",
alias: "string",
allowaccesses: ["string"],
annex: "string",
apDiscover: "string",
arpforward: "string",
atmProtocol: "string",
authCert: "string",
authPortalAddr: "string",
authType: "string",
autoAuthExtensionDevice: "string",
bandwidthMeasureTime: 0,
bfd: "string",
bfdDesiredMinTx: 0,
bfdDetectMult: 0,
bfdRequiredMinRx: 0,
broadcastForticlientDiscovery: "string",
broadcastForward: "string",
captivePortal: 0,
cliConnStatus: 0,
color: 0,
ddns: "string",
ddnsAuth: "string",
ddnsDomain: "string",
ddnsKey: "string",
ddnsKeyname: "string",
ddnsPasswords: ["string"],
ddnsServer: "string",
ddnsServerIp: "string",
ddnsSn: "string",
ddnsTtl: 0,
ddnsUsername: "string",
ddnsZone: "string",
dedicatedTo: "string",
defaultPurdueLevel: "string",
defaultgw: "string",
description: "string",
detectedPeerMtu: 0,
detectprotocols: ["string"],
detectserver: "string",
deviceAccessList: "string",
deviceIdentification: "string",
deviceIdentificationActiveScan: "string",
deviceNetscan: "string",
deviceUserIdentification: "string",
devindex: 0,
dhcpBroadcastFlag: "string",
dhcpClasslessRouteAddition: "string",
dhcpClientIdentifier: "string",
dhcpRelayAgentOption: "string",
dhcpRelayCircuitId: "string",
dhcpRelayInterface: "string",
dhcpRelayInterfaceSelectMethod: "string",
dhcpRelayIps: ["string"],
dhcpRelayLinkSelection: "string",
dhcpRelayRequestAllServer: "string",
dhcpRelayService: "string",
dhcpRelaySourceIp: "string",
dhcpRelayType: "string",
dhcpRenewTime: 0,
dhcpSmartRelay: "string",
discRetryTimeout: 0,
disconnectThreshold: 0,
distance: 0,
dnsQuery: "string",
dnsServerOverride: "string",
dnsServerProtocols: ["string"],
dropFragment: "string",
dropOverlappedFragment: "string",
dynamicSortSubtable: "string",
eapCaCerts: ["string"],
eapIdentity: "string",
eapMethod: "string",
eapPasswords: ["string"],
eapSupplicant: "string",
eapUserCerts: ["string"],
egressCos: "string",
egressShapingProfile: "string",
eip: "string",
endpointCompliance: "string",
estimatedDownstreamBandwidth: 0,
estimatedUpstreamBandwidth: 0,
explicitFtpProxy: "string",
explicitWebProxy: "string",
external: "string",
failActionOnExtender: "string",
failAlertInterfaces: "string",
failAlertMethod: "string",
failDetect: "string",
failDetectOptions: ["string"],
fdp: "string",
fortiheartbeat: "string",
fortilink: "string",
fortilinkBackupLink: 0,
fortilinkNeighborDetect: "string",
fortilinkSplitInterface: "string",
fortilinkStacking: "string",
forwardDomain: 0,
forwardErrorCorrection: "string",
fpAnomalies: ["string"],
fpDisables: ["string"],
gatewayAddress: "string",
genericReceiveOffload: "string",
giGk: "string",
gwaddr: "string",
gwdetect: "string",
haPriority: 0,
icmpAcceptRedirect: "string",
icmpRedirect: "string",
icmpSendRedirect: "string",
identAccept: "string",
idleTimeout: 0,
ifMdix: "string",
ifMedia: "string",
ikeSamlServers: ["string"],
inForceVlanCos: 0,
inbandwidth: 0,
ingressCos: "string",
ingressShapingProfile: "string",
ingressSpilloverThreshold: 0,
interconnectProfile: "string",
internal: 0,
ip: "string",
ipManagedByFortiipam: "string",
ipmac: "string",
ipsSnifferMode: "string",
ipunnumbered: "string",
ipv6: {
autoconf: "string",
cliConn6Status: 0,
dhcp6ClientOptions: ["string"],
dhcp6InformationRequest: "string",
dhcp6PrefixDelegation: "string",
dhcp6PrefixHint: "string",
dhcp6PrefixHintPlt: 0,
dhcp6PrefixHintVlt: 0,
dhcp6RelayInterfaceId: "string",
dhcp6RelayIp: "string",
dhcp6RelayService: "string",
dhcp6RelaySourceInterface: "string",
dhcp6RelaySourceIp: "string",
dhcp6RelayType: "string",
icmp6SendRedirect: "string",
interfaceIdentifier: "string",
ip6Address: "string",
ip6Allowaccesses: ["string"],
ip6DefaultLife: 0,
ip6DelegatedPrefixIaid: 0,
ip6DelegatedPrefixLists: [{
autonomousFlag: "string",
delegatedPrefixIaid: 0,
onlinkFlag: "string",
prefixId: 0,
rdnssService: "string",
rdnsses: ["string"],
subnet: "string",
upstreamInterface: "string",
}],
ip6DnsServerOverride: "string",
ip6ExtraAddrs: [{
prefix: "string",
}],
ip6HopLimit: 0,
ip6LinkMtu: 0,
ip6ManageFlag: "string",
ip6MaxInterval: 0,
ip6MinInterval: 0,
ip6Mode: "string",
ip6OtherFlag: "string",
ip6PrefixLists: [{
autonomousFlag: "string",
dnssls: ["string"],
onlinkFlag: "string",
preferredLifeTime: 0,
prefix: "string",
rdnsses: ["string"],
validLifeTime: 0,
}],
ip6PrefixMode: "string",
ip6ReachableTime: 0,
ip6RetransTime: 0,
ip6SendAdv: "string",
ip6Subnet: "string",
ip6UpstreamInterface: "string",
ndCert: "string",
ndCgaModifier: "string",
ndMode: "string",
ndSecurityLevel: 0,
ndTimestampDelta: 0,
ndTimestampFuzz: 0,
raSendMtu: "string",
uniqueAutoconfAddr: "string",
vrip6LinkLocal: "string",
vrrp6s: [{
acceptMode: "string",
advInterval: 0,
ignoreDefaultRoute: "string",
preempt: "string",
priority: 0,
startTime: 0,
status: "string",
vrdst6: "string",
vrgrp: 0,
vrid: 0,
vrip6: "string",
}],
vrrpVirtualMac6: "string",
},
l2forward: "string",
l2tpClient: "string",
lacpHaSecondary: "string",
lacpHaSlave: "string",
lacpMode: "string",
lacpSpeed: "string",
largeReceiveOffload: "string",
lcpEchoInterval: 0,
lcpMaxEchoFails: 0,
linkUpDelay: 0,
listenForticlientConnection: "string",
lldpNetworkPolicy: "string",
lldpReception: "string",
lldpTransmission: "string",
log: "string",
macaddr: "string",
managedSubnetworkSize: "string",
managementIp: "string",
maxEgressBurstRate: 0,
maxEgressRate: 0,
measuredDownstreamBandwidth: 0,
measuredUpstreamBandwidth: 0,
mediatype: "string",
member: "string",
minLinks: 0,
minLinksDown: "string",
mirroringDirection: "string",
mirroringPort: "string",
mode: "string",
monitorBandwidth: "string",
mtu: 0,
mtuOverride: "string",
muxType: "string",
name: "string",
ndiscforward: "string",
netbiosForward: "string",
netflowSampler: "string",
npQosProfile: 0,
npuFastpath: "string",
nst: "string",
objectFspVlanInterfaceId: "string",
outForceVlanCos: 0,
outbandwidth: 0,
padtRetryTimeout: 0,
passwords: ["string"],
peerInterface: "string",
phyMode: "string",
pingServStatus: 0,
poe: "string",
pollingInterval: 0,
portMirroring: "string",
pppoeUnnumberedNegotiate: "string",
pptpAuthType: "string",
pptpClient: "string",
pptpPasswords: ["string"],
pptpServerIp: "string",
pptpTimeout: 0,
pptpUser: "string",
preserveSessionRoute: "string",
priority: 0,
priorityOverride: "string",
proxyCaptivePortal: "string",
pvcAtmQos: "string",
pvcChan: 0,
pvcCrc: 0,
pvcPcr: 0,
pvcScr: 0,
pvcVlanId: 0,
pvcVlanRxId: 0,
pvcVlanRxOp: "string",
pvcVlanTxId: 0,
pvcVlanTxOp: "string",
reachableTime: 0,
redundantInterface: "string",
remoteIp: "string",
replacemsgOverrideGroup: "string",
retransmission: "string",
ringRx: 0,
ringTx: 0,
role: "string",
sampleDirection: "string",
sampleRate: 0,
scanBotnetConnections: "string",
scopetype: "string",
secondaryIp: "string",
secondaryips: [{
allowaccesses: ["string"],
detectprotocols: ["string"],
detectserver: "string",
gwdetect: "string",
haPriority: 0,
id: 0,
ip: "string",
pingServStatus: 0,
secipRelayIp: "string",
seq: 0,
}],
security8021xDynamicVlanId: 0,
security8021xMaster: "string",
security8021xMemberMode: "string",
security8021xMode: "string",
securityExemptList: "string",
securityExternalLogout: "string",
securityExternalWeb: "string",
securityGroups: "string",
securityMacAuthBypass: "string",
securityMode: "string",
securityRedirectUrl: "string",
selectProfile30a35b: "string",
serviceName: "string",
sflowSampler: "string",
sfpDsl: "string",
sfpDslAdslFallback: "string",
sfpDslAutodetect: "string",
sfpDslMac: "string",
speed: "string",
spilloverThreshold: 0,
srcCheck: "string",
status: "string",
stp: "string",
stpEdge: "string",
stpHaSecondary: "string",
stpHaSlave: "string",
stpforward: "string",
stpforwardMode: "string",
stripPriorityVlanTag: "string",
subst: "string",
substituteDstMac: "string",
swAlgorithm: "string",
swcFirstCreate: 0,
swcVlan: 0,
"switch": "string",
switchControllerAccessVlan: "string",
switchControllerArpInspection: "string",
switchControllerAuth: "string",
switchControllerDhcpSnooping: "string",
switchControllerDhcpSnoopingOption82: "string",
switchControllerDhcpSnoopingVerifyMac: "string",
switchControllerDynamic: "string",
switchControllerFeature: "string",
switchControllerIgmpSnooping: "string",
switchControllerIgmpSnoopingFastLeave: "string",
switchControllerIgmpSnoopingProxy: "string",
switchControllerIotScanning: "string",
switchControllerLearningLimit: 0,
switchControllerMgmtVlan: 0,
switchControllerNac: "string",
switchControllerNetflowCollect: "string",
switchControllerOffload: "string",
switchControllerOffloadGw: "string",
switchControllerOffloadIp: "string",
switchControllerOffloading: "string",
switchControllerOffloadingGw: "string",
switchControllerOffloadingIp: "string",
switchControllerRadiusServer: "string",
switchControllerRspanMode: "string",
switchControllerSourceIp: "string",
switchControllerTrafficPolicy: "string",
systemId: "string",
systemIdType: "string",
tcMode: "string",
tcpMss: 0,
trunk: "string",
trustIp1: "string",
trustIp2: "string",
trustIp3: "string",
trustIp61: "string",
trustIp62: "string",
trustIp63: "string",
type: "string",
username: "string",
vci: 0,
vectoring: "string",
vindex: 0,
vlanOpMode: "string",
vlanProtocol: "string",
vlanforward: "string",
vlanid: 0,
vpi: 0,
vrf: 0,
vrrpVirtualMac: "string",
vrrps: [{
acceptMode: "string",
advInterval: 0,
ignoreDefaultRoute: "string",
preempt: "string",
priority: 0,
proxyArps: [{
id: 0,
ip: "string",
}],
startTime: 0,
status: "string",
version: "string",
vrdstPriority: 0,
vrdsts: ["string"],
vrgrp: 0,
vrid: 0,
vrip: "string",
}],
wccp: "string",
weight: 0,
wifi5gThreshold: "string",
wifiAcl: "string",
wifiApBand: "string",
wifiAuth: "string",
wifiAutoConnect: "string",
wifiAutoSave: "string",
wifiBroadcastSsid: "string",
wifiDnsServer1: "string",
wifiDnsServer2: "string",
wifiEncrypt: "string",
wifiFragmentThreshold: 0,
wifiGateway: "string",
wifiKeyindex: 0,
wifiKeys: ["string"],
wifiMacFilter: "string",
wifiPassphrases: ["string"],
wifiRadiusServer: "string",
wifiRtsThreshold: 0,
wifiSecurity: "string",
wifiSsid: "string",
wifiUsergroup: "string",
winsIp: "string",
});
type: fortimanager:ObjectFspVlanInterface
properties:
acName: string
adom: string
aggregate: string
aggregateType: string
algorithm: string
alias: string
allowaccesses:
- string
annex: string
apDiscover: string
arpforward: string
atmProtocol: string
authCert: string
authPortalAddr: string
authType: string
autoAuthExtensionDevice: string
bandwidthMeasureTime: 0
bfd: string
bfdDesiredMinTx: 0
bfdDetectMult: 0
bfdRequiredMinRx: 0
broadcastForticlientDiscovery: string
broadcastForward: string
captivePortal: 0
cliConnStatus: 0
color: 0
ddns: string
ddnsAuth: string
ddnsDomain: string
ddnsKey: string
ddnsKeyname: string
ddnsPasswords:
- string
ddnsServer: string
ddnsServerIp: string
ddnsSn: string
ddnsTtl: 0
ddnsUsername: string
ddnsZone: string
dedicatedTo: string
defaultPurdueLevel: string
defaultgw: string
description: string
detectedPeerMtu: 0
detectprotocols:
- string
detectserver: string
deviceAccessList: string
deviceIdentification: string
deviceIdentificationActiveScan: string
deviceNetscan: string
deviceUserIdentification: string
devindex: 0
dhcpBroadcastFlag: string
dhcpClasslessRouteAddition: string
dhcpClientIdentifier: string
dhcpRelayAgentOption: string
dhcpRelayCircuitId: string
dhcpRelayInterface: string
dhcpRelayInterfaceSelectMethod: string
dhcpRelayIps:
- string
dhcpRelayLinkSelection: string
dhcpRelayRequestAllServer: string
dhcpRelayService: string
dhcpRelaySourceIp: string
dhcpRelayType: string
dhcpRenewTime: 0
dhcpSmartRelay: string
discRetryTimeout: 0
disconnectThreshold: 0
distance: 0
dnsQuery: string
dnsServerOverride: string
dnsServerProtocols:
- string
dropFragment: string
dropOverlappedFragment: string
dynamicSortSubtable: string
eapCaCerts:
- string
eapIdentity: string
eapMethod: string
eapPasswords:
- string
eapSupplicant: string
eapUserCerts:
- string
egressCos: string
egressShapingProfile: string
eip: string
endpointCompliance: string
estimatedDownstreamBandwidth: 0
estimatedUpstreamBandwidth: 0
explicitFtpProxy: string
explicitWebProxy: string
external: string
failActionOnExtender: string
failAlertInterfaces: string
failAlertMethod: string
failDetect: string
failDetectOptions:
- string
fdp: string
fortiheartbeat: string
fortilink: string
fortilinkBackupLink: 0
fortilinkNeighborDetect: string
fortilinkSplitInterface: string
fortilinkStacking: string
forwardDomain: 0
forwardErrorCorrection: string
fpAnomalies:
- string
fpDisables:
- string
gatewayAddress: string
genericReceiveOffload: string
giGk: string
gwaddr: string
gwdetect: string
haPriority: 0
icmpAcceptRedirect: string
icmpRedirect: string
icmpSendRedirect: string
identAccept: string
idleTimeout: 0
ifMdix: string
ifMedia: string
ikeSamlServers:
- string
inForceVlanCos: 0
inbandwidth: 0
ingressCos: string
ingressShapingProfile: string
ingressSpilloverThreshold: 0
interconnectProfile: string
internal: 0
ip: string
ipManagedByFortiipam: string
ipmac: string
ipsSnifferMode: string
ipunnumbered: string
ipv6:
autoconf: string
cliConn6Status: 0
dhcp6ClientOptions:
- string
dhcp6InformationRequest: string
dhcp6PrefixDelegation: string
dhcp6PrefixHint: string
dhcp6PrefixHintPlt: 0
dhcp6PrefixHintVlt: 0
dhcp6RelayInterfaceId: string
dhcp6RelayIp: string
dhcp6RelayService: string
dhcp6RelaySourceInterface: string
dhcp6RelaySourceIp: string
dhcp6RelayType: string
icmp6SendRedirect: string
interfaceIdentifier: string
ip6Address: string
ip6Allowaccesses:
- string
ip6DefaultLife: 0
ip6DelegatedPrefixIaid: 0
ip6DelegatedPrefixLists:
- autonomousFlag: string
delegatedPrefixIaid: 0
onlinkFlag: string
prefixId: 0
rdnssService: string
rdnsses:
- string
subnet: string
upstreamInterface: string
ip6DnsServerOverride: string
ip6ExtraAddrs:
- prefix: string
ip6HopLimit: 0
ip6LinkMtu: 0
ip6ManageFlag: string
ip6MaxInterval: 0
ip6MinInterval: 0
ip6Mode: string
ip6OtherFlag: string
ip6PrefixLists:
- autonomousFlag: string
dnssls:
- string
onlinkFlag: string
preferredLifeTime: 0
prefix: string
rdnsses:
- string
validLifeTime: 0
ip6PrefixMode: string
ip6ReachableTime: 0
ip6RetransTime: 0
ip6SendAdv: string
ip6Subnet: string
ip6UpstreamInterface: string
ndCert: string
ndCgaModifier: string
ndMode: string
ndSecurityLevel: 0
ndTimestampDelta: 0
ndTimestampFuzz: 0
raSendMtu: string
uniqueAutoconfAddr: string
vrip6LinkLocal: string
vrrp6s:
- acceptMode: string
advInterval: 0
ignoreDefaultRoute: string
preempt: string
priority: 0
startTime: 0
status: string
vrdst6: string
vrgrp: 0
vrid: 0
vrip6: string
vrrpVirtualMac6: string
l2forward: string
l2tpClient: string
lacpHaSecondary: string
lacpHaSlave: string
lacpMode: string
lacpSpeed: string
largeReceiveOffload: string
lcpEchoInterval: 0
lcpMaxEchoFails: 0
linkUpDelay: 0
listenForticlientConnection: string
lldpNetworkPolicy: string
lldpReception: string
lldpTransmission: string
log: string
macaddr: string
managedSubnetworkSize: string
managementIp: string
maxEgressBurstRate: 0
maxEgressRate: 0
measuredDownstreamBandwidth: 0
measuredUpstreamBandwidth: 0
mediatype: string
member: string
minLinks: 0
minLinksDown: string
mirroringDirection: string
mirroringPort: string
mode: string
monitorBandwidth: string
mtu: 0
mtuOverride: string
muxType: string
name: string
ndiscforward: string
netbiosForward: string
netflowSampler: string
npQosProfile: 0
npuFastpath: string
nst: string
objectFspVlanInterfaceId: string
outForceVlanCos: 0
outbandwidth: 0
padtRetryTimeout: 0
passwords:
- string
peerInterface: string
phyMode: string
pingServStatus: 0
poe: string
pollingInterval: 0
portMirroring: string
pppoeUnnumberedNegotiate: string
pptpAuthType: string
pptpClient: string
pptpPasswords:
- string
pptpServerIp: string
pptpTimeout: 0
pptpUser: string
preserveSessionRoute: string
priority: 0
priorityOverride: string
proxyCaptivePortal: string
pvcAtmQos: string
pvcChan: 0
pvcCrc: 0
pvcPcr: 0
pvcScr: 0
pvcVlanId: 0
pvcVlanRxId: 0
pvcVlanRxOp: string
pvcVlanTxId: 0
pvcVlanTxOp: string
reachableTime: 0
redundantInterface: string
remoteIp: string
replacemsgOverrideGroup: string
retransmission: string
ringRx: 0
ringTx: 0
role: string
sampleDirection: string
sampleRate: 0
scanBotnetConnections: string
scopetype: string
secondaryIp: string
secondaryips:
- allowaccesses:
- string
detectprotocols:
- string
detectserver: string
gwdetect: string
haPriority: 0
id: 0
ip: string
pingServStatus: 0
secipRelayIp: string
seq: 0
security8021xDynamicVlanId: 0
security8021xMaster: string
security8021xMemberMode: string
security8021xMode: string
securityExemptList: string
securityExternalLogout: string
securityExternalWeb: string
securityGroups: string
securityMacAuthBypass: string
securityMode: string
securityRedirectUrl: string
selectProfile30a35b: string
serviceName: string
sflowSampler: string
sfpDsl: string
sfpDslAdslFallback: string
sfpDslAutodetect: string
sfpDslMac: string
speed: string
spilloverThreshold: 0
srcCheck: string
status: string
stp: string
stpEdge: string
stpHaSecondary: string
stpHaSlave: string
stpforward: string
stpforwardMode: string
stripPriorityVlanTag: string
subst: string
substituteDstMac: string
swAlgorithm: string
swcFirstCreate: 0
swcVlan: 0
switch: string
switchControllerAccessVlan: string
switchControllerArpInspection: string
switchControllerAuth: string
switchControllerDhcpSnooping: string
switchControllerDhcpSnoopingOption82: string
switchControllerDhcpSnoopingVerifyMac: string
switchControllerDynamic: string
switchControllerFeature: string
switchControllerIgmpSnooping: string
switchControllerIgmpSnoopingFastLeave: string
switchControllerIgmpSnoopingProxy: string
switchControllerIotScanning: string
switchControllerLearningLimit: 0
switchControllerMgmtVlan: 0
switchControllerNac: string
switchControllerNetflowCollect: string
switchControllerOffload: string
switchControllerOffloadGw: string
switchControllerOffloadIp: string
switchControllerOffloading: string
switchControllerOffloadingGw: string
switchControllerOffloadingIp: string
switchControllerRadiusServer: string
switchControllerRspanMode: string
switchControllerSourceIp: string
switchControllerTrafficPolicy: string
systemId: string
systemIdType: string
tcMode: string
tcpMss: 0
trunk: string
trustIp1: string
trustIp2: string
trustIp3: string
trustIp61: string
trustIp62: string
trustIp63: string
type: string
username: string
vci: 0
vectoring: string
vindex: 0
vlan: string
vlanOpMode: string
vlanProtocol: string
vlanforward: string
vlanid: 0
vpi: 0
vrf: 0
vrrpVirtualMac: string
vrrps:
- acceptMode: string
advInterval: 0
ignoreDefaultRoute: string
preempt: string
priority: 0
proxyArps:
- id: 0
ip: string
startTime: 0
status: string
version: string
vrdstPriority: 0
vrdsts:
- string
vrgrp: 0
vrid: 0
vrip: string
wccp: string
weight: 0
wifi5gThreshold: string
wifiAcl: string
wifiApBand: string
wifiAuth: string
wifiAutoConnect: string
wifiAutoSave: string
wifiBroadcastSsid: string
wifiDnsServer1: string
wifiDnsServer2: string
wifiEncrypt: string
wifiFragmentThreshold: 0
wifiGateway: string
wifiKeyindex: 0
wifiKeys:
- string
wifiMacFilter: string
wifiPassphrases:
- string
wifiRadiusServer: string
wifiRtsThreshold: 0
wifiSecurity: string
wifiSsid: string
wifiUsergroup: string
winsIp: string
ObjectFspVlanInterface Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ObjectFspVlanInterface resource accepts the following input properties:
- Vlan string
- Vlan.
- Ac
Name string - PPPoE server name.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Aggregate string
- Aggregate.
- Aggregate
Type string - Type of aggregation. Valid values:
physical,vxlan. - Algorithm string
- Frame distribution algorithm. Valid values:
L2,L3,L4. - Alias string
- Alias will be displayed with the interface name to make it easier to distinguish.
- Allowaccesses List<string>
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - Annex string
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - Ap
Discover string - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - Arpforward string
- Enable/disable ARP forwarding. Valid values:
disable,enable. - Atm
Protocol string - ATM protocol. Valid values:
none,ipoa. - Auth
Cert string - HTTPS server certificate.
- Auth
Portal stringAddr - Address of captive portal.
- Auth
Type string - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - Auto
Auth stringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - Bandwidth
Measure doubleTime - Bandwidth-Measure-Time.
- Bfd string
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - Bfd
Desired doubleMin Tx - BFD desired minimal transmit interval.
- Bfd
Detect doubleMult - BFD detection multiplier.
- Bfd
Required doubleMin Rx - BFD required minimal receive interval.
- Broadcast
Forticlient stringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - Broadcast
Forward string - Enable/disable broadcast forwarding. Valid values:
disable,enable. - Captive
Portal double - Enable/disable captive portal.
- Cli
Conn doubleStatus - Cli-Conn-Status.
- Color double
- Color of icon on the GUI.
- Ddns string
- Ddns. Valid values:
disable,enable. - Ddns
Auth string - Ddns-Auth. Valid values:
disable,tsig. - Ddns
Domain string - Ddns-Domain.
- Ddns
Key string - Ddns-Key.
- Ddns
Keyname string - Ddns-Keyname.
- Ddns
Passwords List<string> - Ddns-Password.
- Ddns
Server string - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - Ddns
Server stringIp - Ddns-Server-Ip.
- Ddns
Sn string - Ddns-Sn.
- Ddns
Ttl double - Ddns-Ttl.
- Ddns
Username string - Ddns-Username.
- Ddns
Zone string - Ddns-Zone.
- Dedicated
To string - Configure interface for single purpose. Valid values:
none,management. - Default
Purdue stringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - Defaultgw string
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - Description string
- Description.
- Detected
Peer doubleMtu - Detected-Peer-Mtu.
- Detectprotocols List<string>
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - Detectserver string
- Gateway's ping server for this IP.
- Device
Access stringList - Device access list.
- Device
Identification string - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - Device
Identification stringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - Device
Netscan string - Device-Netscan. Valid values:
disable,enable. - Device
User stringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - Devindex double
- Devindex.
- Dhcp
Broadcast stringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - Dhcp
Classless stringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - Dhcp
Client stringIdentifier - DHCP client identifier.
- Dhcp
Relay stringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - Dhcp
Relay stringCircuit Id - DHCP relay circuit ID.
- Dhcp
Relay stringInterface - Specify outgoing interface to reach server.
- Dhcp
Relay stringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - Dhcp
Relay List<string>Ips - DHCP relay IP address.
- Dhcp
Relay stringLink Selection - DHCP relay link selection.
- Dhcp
Relay stringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - Dhcp
Relay stringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - Dhcp
Relay stringSource Ip - IP address used by the DHCP relay as its source IP.
- Dhcp
Relay stringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - Dhcp
Renew doubleTime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- Dhcp
Smart stringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - Disc
Retry doubleTimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- Disconnect
Threshold double - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- Distance double
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- Dns
Query string - Dns-Query. Valid values:
disable,recursive,non-recursive. - Dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - Dns
Server List<string>Protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - Drop
Fragment string - Enable/disable drop fragment packets. Valid values:
disable,enable. - Drop
Overlapped stringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - Dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- Eap
Ca List<string>Certs - Eap-Ca-Cert.
- Eap
Identity string - Eap-Identity.
- Eap
Method string - Eap-Method. Valid values:
tls,peap. - Eap
Passwords List<string> - Eap-Password.
- Eap
Supplicant string - Eap-Supplicant. Valid values:
disable,enable. - Eap
User List<string>Certs - Eap-User-Cert.
- Egress
Cos string - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - Egress
Shaping stringProfile - Outgoing traffic shaping profile.
- Eip string
- Eip.
- Endpoint
Compliance string - Endpoint-Compliance. Valid values:
disable,enable. - Estimated
Downstream doubleBandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- Estimated
Upstream doubleBandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- Explicit
Ftp stringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - Explicit
Web stringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - External string
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - Fail
Action stringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - Fail
Alert stringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- Fail
Alert stringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - Fail
Detect string - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - Fail
Detect List<string>Options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - Fdp string
- Fdp. Valid values:
disable,enable. - Fortiheartbeat string
- Fortiheartbeat. Valid values:
disable,enable. - Fortilink string
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - Fortilink
Backup doubleLink - Fortilink-Backup-Link.
- Fortilink
Neighbor stringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - Fortilink
Split stringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - Fortilink
Stacking string - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - Forward
Domain double - Transparent mode forward domain.
- Forward
Error stringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - Fp
Anomalies List<string> - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - Fp
Disables List<string> - Fp-Disable. Valid values:
all,ipsec,none. - Gateway
Address string - Gateway address
- Generic
Receive stringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - Gi
Gk string - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - Gwaddr string
- Gateway address
- Gwdetect string
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - Ha
Priority double - HA election priority for the PING server.
- Icmp
Accept stringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - Icmp
Redirect string - Icmp-Redirect. Valid values:
disable,enable. - Icmp
Send stringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - Ident
Accept string - Enable/disable authentication for this interface. Valid values:
disable,enable. - Idle
Timeout double - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- If
Mdix string - If-Mdix. Valid values:
auto,normal,crossover. - If
Media string - If-Media. Valid values:
auto,copper,fiber. - Ike
Saml List<string>Servers - Ike-Saml-Server.
- In
Force doubleVlan Cos - In-Force-Vlan-Cos.
- Inbandwidth double
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- Ingress
Cos string - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - Ingress
Shaping stringProfile - Incoming traffic shaping profile.
- Ingress
Spillover doubleThreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- Interconnect
Profile string - Set interconnect profile. Valid values:
default,profile1,profile2. - Internal double
- Implicitly created.
- Ip string
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- Ip
Managed stringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - Ipmac string
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - Ips
Sniffer stringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - Ipunnumbered string
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- Ipv6
Object
Fsp Vlan Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - L2forward string
- Enable/disable l2 forwarding. Valid values:
disable,enable. - L2tp
Client string - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - Lacp
Ha stringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - Lacp
Ha stringSlave - LACP HA slave. Valid values:
disable,enable. - Lacp
Mode string - LACP mode. Valid values:
static,passive,active. - Lacp
Speed string - How often the interface sends LACP messages. Valid values:
slow,fast. - Large
Receive stringOffload - Large-Receive-Offload. Valid values:
disable,enable. - Lcp
Echo doubleInterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- Lcp
Max doubleEcho Fails - Maximum missed LCP echo messages before disconnect.
- Link
Up doubleDelay - Number of milliseconds to wait before considering a link is up.
- Listen
Forticlient stringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - Lldp
Network stringPolicy - LLDP-MED network policy profile.
- Lldp
Reception string - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - Lldp
Transmission string - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - Log string
- Log. Valid values:
disable,enable. - Macaddr string
- Change the interface's MAC address.
- Managed
Subnetwork stringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - Management
Ip string - High Availability in-band management IP address of this interface.
- Max
Egress doubleBurst Rate - Max egress burst rate (kbits per sec).
- Max
Egress doubleRate - Max egress rate (kbits per sec).
- Measured
Downstream doubleBandwidth - Measured-Downstream-Bandwidth.
- Measured
Upstream doubleBandwidth - Measured-Upstream-Bandwidth.
- Mediatype string
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - Member string
- Physical interfaces that belong to the aggregate or redundant interface.
- Min
Links double - Minimum number of aggregated ports that must be up.
- Min
Links stringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - Mirroring
Direction string - Port mirroring direction. Valid values:
rx,tx,both. - Mirroring
Port string - Mirroring port.
- Mode string
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - Monitor
Bandwidth string - Monitor-Bandwidth. Valid values:
disable,enable. - Mtu double
- MTU value for this interface.
- Mtu
Override string - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - Mux
Type string - Multiplexer type Valid values:
llc-encaps,vc-encaps. - Name string
- Name.
- Ndiscforward string
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - Netbios
Forward string - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - Netflow
Sampler string - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - Np
Qos doubleProfile - NP QoS profile ID.
- Npu
Fastpath string - Npu-Fastpath. Valid values:
disable,enable. - Nst string
- Nst. Valid values:
disable,enable. - Object
Fsp stringVlan Interface Id - an identifier for the resource.
- Out
Force doubleVlan Cos - Out-Force-Vlan-Cos.
- Outbandwidth double
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- Padt
Retry doubleTimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- Passwords List<string>
- PPPoE account's password.
- Peer
Interface string - Peer-Interface.
- Phy
Mode string - DSL physical mode. Valid values:
auto,adsl,vdsl. - Ping
Serv doubleStatus - Ping-Serv-Status.
- Poe string
- Enable/disable PoE status. Valid values:
disable,enable. - Polling
Interval double - sFlow polling interval (1 - 255 sec).
- Port
Mirroring string - Enable/disable NP port mirroring. Valid values:
disable,enable. - Pppoe
Unnumbered stringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - Pptp
Auth stringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - Pptp
Client string - Enable/disable PPTP client. Valid values:
disable,enable. - Pptp
Passwords List<string> - PPTP password.
- Pptp
Server stringIp - PPTP server IP address.
- Pptp
Timeout double - Idle timer in minutes (0 for disabled).
- Pptp
User string - PPTP user name.
- Preserve
Session stringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - Priority double
- Priority of the virtual router (1 - 255).
- Priority
Override string - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - Proxy
Captive stringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - Pvc
Atm stringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - Pvc
Chan double - SFP-DSL ADSL Fallback PVC Channel.
- Pvc
Crc double - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- Pvc
Pcr double - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- Pvc
Scr double - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- Pvc
Vlan doubleId - SFP-DSL ADSL Fallback PVC VLAN ID.
- Pvc
Vlan doubleRx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- Pvc
Vlan stringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - Pvc
Vlan doubleTx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- Pvc
Vlan stringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - Reachable
Time double - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- Redundant
Interface string - Redundant-Interface.
- Remote
Ip string - Remote IP address of tunnel.
- Replacemsg
Override stringGroup - Replacement message override group.
- Retransmission string
- Enable/disable DSL retransmission. Valid values:
disable,enable. - Ring
Rx double - RX ring size.
- Ring
Tx double - TX ring size.
- Role string
- Interface role. Valid values:
lan,wan,dmz,undefined. - Sample
Direction string - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - Sample
Rate double - sFlow sample rate (10 - 99999).
- Scan
Botnet stringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Secondary
Ip string - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - Secondaryips
List<Object
Fsp Vlan Interface Secondaryip> - Secondaryip. The structure of
secondaryipblock is documented below. - Security8021x
Dynamic doubleVlan Id - VLAN ID for virtual switch.
- Security8021x
Master string - 802.1X master virtual-switch.
- Security8021x
Member stringMode - 802.1X member mode. Valid values:
disable,switch. - Security8021x
Mode string - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - Security
Exempt stringList - Name of security-exempt-list.
- Security
External stringLogout - URL of external authentication logout server.
- Security
External stringWeb - URL of external authentication web server.
- Security
Groups string - User groups that can authenticate with the captive portal.
- Security
Mac stringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - Security
Mode string - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - Security
Redirect stringUrl - URL redirection after disclaimer/authentication.
- Select
Profile30a35b string - Select-Profile-30A-35B. Valid values:
30A,35B. - Service
Name string - PPPoE service name.
- Sflow
Sampler string - Enable/disable sFlow on this interface. Valid values:
disable,enable. - Sfp
Dsl string - Enable/disable SFP DSL. Valid values:
disable,enable. - Sfp
Dsl stringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - Sfp
Dsl stringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - Sfp
Dsl stringMac - SFP DSL MAC address.
- Speed string
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - Spillover
Threshold double - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- Src
Check string - Enable/disable source IP check. Valid values:
disable,enable. - Status string
- Enable/disable VRRP. Valid values:
disable,enable. - Stp string
- Enable/disable STP. Valid values:
disable,enable. - Stp
Edge string - Enable/disable as STP edge port. Valid values:
disable,enable. - Stp
Ha stringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - Stp
Ha stringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - Stpforward string
- Enable/disable STP forwarding. Valid values:
disable,enable. - Stpforward
Mode string - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - Strip
Priority stringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - Subst string
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - Substitute
Dst stringMac - Destination MAC address that all packets are sent to from this interface.
- Sw
Algorithm string - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - Swc
First doubleCreate - Swc-First-Create.
- Swc
Vlan double - Swc-Vlan.
- Switch string
- Switch.
- Switch
Controller stringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - Switch
Controller stringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - Switch
Controller stringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - Switch
Controller stringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - Switch
Controller stringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - Switch
Controller stringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - Switch
Controller stringDynamic - Switch-Controller-Dynamic.
- Switch
Controller stringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - Switch
Controller stringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - Switch
Controller stringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - Switch
Controller stringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - Switch
Controller stringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - Switch
Controller doubleLearning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- Switch
Controller doubleMgmt Vlan - Switch-Controller-Mgmt-Vlan.
- Switch
Controller stringNac - Switch-Controller-Nac.
- Switch
Controller stringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - Switch
Controller stringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - Switch
Controller stringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - Switch
Controller stringOffload Ip - IP for routing offload on FortiSwitch.
- Switch
Controller stringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - Switch
Controller stringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - Switch
Controller stringOffloading Ip - Switch-Controller-Offloading-Ip.
- Switch
Controller stringRadius Server - Switch-Controller-Radius-Server.
- Switch
Controller stringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - Switch
Controller stringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - Switch
Controller stringTraffic Policy - Switch controller traffic policy for the VLAN.
- System
Id string - Define a system ID for the aggregate interface.
- System
Id stringType - Method in which system ID is generated. Valid values:
auto,user. - Tc
Mode string - DSL transfer mode. Valid values:
ptm,atm. - Tcp
Mss double - TCP maximum segment size. 0 means do not change segment size.
- Trunk string
- Enable/disable VLAN trunk. Valid values:
disable,enable. - Trust
Ip1 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip2 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip3 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip61 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Trust
Ip62 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Trust
Ip63 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Type string
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - Username string
- Username of the PPPoE account, provided by your ISP.
- Vci double
- Virtual Channel ID
- Vectoring string
- Enable/disable DSL vectoring. Valid values:
disable,enable. - Vindex double
- Vindex.
- Vlan
Op stringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - Vlan
Protocol string - Vlan-Protocol. Valid values:
8021q,8021ad. - Vlanforward string
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - Vlanid double
- VLAN ID (1 - 4094).
- Vpi double
- Virtual Path ID
- Vrf double
- Virtual Routing Forwarding ID.
- Vrrp
Virtual stringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - Vrrps
List<Object
Fsp Vlan Interface Vrrp> - Vrrp. The structure of
vrrpblock is documented below. - Wccp string
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - Weight double
- Default weight for static routes (if route has no weight configured).
- Wifi5g
Threshold string - Minimal signal strength to be considered as a good 5G AP.
- Wifi
Acl string - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - Wifi
Ap stringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - Wifi
Auth string - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - Wifi
Auto stringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - Wifi
Auto stringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - Wifi
Broadcast stringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - Wifi
Dns stringServer1 - DNS server 1.
- Wifi
Dns stringServer2 - DNS server 2.
- Wifi
Encrypt string - Data encryption. Valid values:
TKIP,AES. - Wifi
Fragment doubleThreshold - WiFi fragment threshold (800 - 2346).
- Wifi
Gateway string - IPv4 default gateway IP address.
- Wifi
Keyindex double - WEP key index (1 - 4).
- Wifi
Keys List<string> - WiFi WEP Key.
- Wifi
Mac stringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - Wifi
Passphrases List<string> - WiFi pre-shared key for WPA.
- Wifi
Radius stringServer - WiFi RADIUS server for WPA.
- Wifi
Rts doubleThreshold - WiFi RTS threshold (256 - 2346).
- Wifi
Security string - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - Wifi
Ssid string - IEEE 802.11 Service Set Identifier.
- Wifi
Usergroup string - WiFi user group for WPA.
- Wins
Ip string - WINS server IP.
- Vlan string
- Vlan.
- Ac
Name string - PPPoE server name.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Aggregate string
- Aggregate.
- Aggregate
Type string - Type of aggregation. Valid values:
physical,vxlan. - Algorithm string
- Frame distribution algorithm. Valid values:
L2,L3,L4. - Alias string
- Alias will be displayed with the interface name to make it easier to distinguish.
- Allowaccesses []string
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - Annex string
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - Ap
Discover string - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - Arpforward string
- Enable/disable ARP forwarding. Valid values:
disable,enable. - Atm
Protocol string - ATM protocol. Valid values:
none,ipoa. - Auth
Cert string - HTTPS server certificate.
- Auth
Portal stringAddr - Address of captive portal.
- Auth
Type string - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - Auto
Auth stringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - Bandwidth
Measure float64Time - Bandwidth-Measure-Time.
- Bfd string
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - Bfd
Desired float64Min Tx - BFD desired minimal transmit interval.
- Bfd
Detect float64Mult - BFD detection multiplier.
- Bfd
Required float64Min Rx - BFD required minimal receive interval.
- Broadcast
Forticlient stringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - Broadcast
Forward string - Enable/disable broadcast forwarding. Valid values:
disable,enable. - Captive
Portal float64 - Enable/disable captive portal.
- Cli
Conn float64Status - Cli-Conn-Status.
- Color float64
- Color of icon on the GUI.
- Ddns string
- Ddns. Valid values:
disable,enable. - Ddns
Auth string - Ddns-Auth. Valid values:
disable,tsig. - Ddns
Domain string - Ddns-Domain.
- Ddns
Key string - Ddns-Key.
- Ddns
Keyname string - Ddns-Keyname.
- Ddns
Passwords []string - Ddns-Password.
- Ddns
Server string - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - Ddns
Server stringIp - Ddns-Server-Ip.
- Ddns
Sn string - Ddns-Sn.
- Ddns
Ttl float64 - Ddns-Ttl.
- Ddns
Username string - Ddns-Username.
- Ddns
Zone string - Ddns-Zone.
- Dedicated
To string - Configure interface for single purpose. Valid values:
none,management. - Default
Purdue stringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - Defaultgw string
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - Description string
- Description.
- Detected
Peer float64Mtu - Detected-Peer-Mtu.
- Detectprotocols []string
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - Detectserver string
- Gateway's ping server for this IP.
- Device
Access stringList - Device access list.
- Device
Identification string - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - Device
Identification stringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - Device
Netscan string - Device-Netscan. Valid values:
disable,enable. - Device
User stringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - Devindex float64
- Devindex.
- Dhcp
Broadcast stringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - Dhcp
Classless stringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - Dhcp
Client stringIdentifier - DHCP client identifier.
- Dhcp
Relay stringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - Dhcp
Relay stringCircuit Id - DHCP relay circuit ID.
- Dhcp
Relay stringInterface - Specify outgoing interface to reach server.
- Dhcp
Relay stringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - Dhcp
Relay []stringIps - DHCP relay IP address.
- Dhcp
Relay stringLink Selection - DHCP relay link selection.
- Dhcp
Relay stringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - Dhcp
Relay stringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - Dhcp
Relay stringSource Ip - IP address used by the DHCP relay as its source IP.
- Dhcp
Relay stringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - Dhcp
Renew float64Time - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- Dhcp
Smart stringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - Disc
Retry float64Timeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- Disconnect
Threshold float64 - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- Distance float64
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- Dns
Query string - Dns-Query. Valid values:
disable,recursive,non-recursive. - Dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - Dns
Server []stringProtocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - Drop
Fragment string - Enable/disable drop fragment packets. Valid values:
disable,enable. - Drop
Overlapped stringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - Dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- Eap
Ca []stringCerts - Eap-Ca-Cert.
- Eap
Identity string - Eap-Identity.
- Eap
Method string - Eap-Method. Valid values:
tls,peap. - Eap
Passwords []string - Eap-Password.
- Eap
Supplicant string - Eap-Supplicant. Valid values:
disable,enable. - Eap
User []stringCerts - Eap-User-Cert.
- Egress
Cos string - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - Egress
Shaping stringProfile - Outgoing traffic shaping profile.
- Eip string
- Eip.
- Endpoint
Compliance string - Endpoint-Compliance. Valid values:
disable,enable. - Estimated
Downstream float64Bandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- Estimated
Upstream float64Bandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- Explicit
Ftp stringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - Explicit
Web stringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - External string
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - Fail
Action stringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - Fail
Alert stringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- Fail
Alert stringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - Fail
Detect string - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - Fail
Detect []stringOptions - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - Fdp string
- Fdp. Valid values:
disable,enable. - Fortiheartbeat string
- Fortiheartbeat. Valid values:
disable,enable. - Fortilink string
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - Fortilink
Backup float64Link - Fortilink-Backup-Link.
- Fortilink
Neighbor stringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - Fortilink
Split stringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - Fortilink
Stacking string - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - Forward
Domain float64 - Transparent mode forward domain.
- Forward
Error stringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - Fp
Anomalies []string - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - Fp
Disables []string - Fp-Disable. Valid values:
all,ipsec,none. - Gateway
Address string - Gateway address
- Generic
Receive stringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - Gi
Gk string - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - Gwaddr string
- Gateway address
- Gwdetect string
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - Ha
Priority float64 - HA election priority for the PING server.
- Icmp
Accept stringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - Icmp
Redirect string - Icmp-Redirect. Valid values:
disable,enable. - Icmp
Send stringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - Ident
Accept string - Enable/disable authentication for this interface. Valid values:
disable,enable. - Idle
Timeout float64 - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- If
Mdix string - If-Mdix. Valid values:
auto,normal,crossover. - If
Media string - If-Media. Valid values:
auto,copper,fiber. - Ike
Saml []stringServers - Ike-Saml-Server.
- In
Force float64Vlan Cos - In-Force-Vlan-Cos.
- Inbandwidth float64
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- Ingress
Cos string - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - Ingress
Shaping stringProfile - Incoming traffic shaping profile.
- Ingress
Spillover float64Threshold - Ingress Spillover threshold (0 - 16776000 kbps).
- Interconnect
Profile string - Set interconnect profile. Valid values:
default,profile1,profile2. - Internal float64
- Implicitly created.
- Ip string
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- Ip
Managed stringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - Ipmac string
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - Ips
Sniffer stringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - Ipunnumbered string
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- Ipv6
Object
Fsp Vlan Interface Ipv6Type Args - Ipv6. The structure of
ipv6block is documented below. - L2forward string
- Enable/disable l2 forwarding. Valid values:
disable,enable. - L2tp
Client string - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - Lacp
Ha stringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - Lacp
Ha stringSlave - LACP HA slave. Valid values:
disable,enable. - Lacp
Mode string - LACP mode. Valid values:
static,passive,active. - Lacp
Speed string - How often the interface sends LACP messages. Valid values:
slow,fast. - Large
Receive stringOffload - Large-Receive-Offload. Valid values:
disable,enable. - Lcp
Echo float64Interval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- Lcp
Max float64Echo Fails - Maximum missed LCP echo messages before disconnect.
- Link
Up float64Delay - Number of milliseconds to wait before considering a link is up.
- Listen
Forticlient stringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - Lldp
Network stringPolicy - LLDP-MED network policy profile.
- Lldp
Reception string - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - Lldp
Transmission string - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - Log string
- Log. Valid values:
disable,enable. - Macaddr string
- Change the interface's MAC address.
- Managed
Subnetwork stringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - Management
Ip string - High Availability in-band management IP address of this interface.
- Max
Egress float64Burst Rate - Max egress burst rate (kbits per sec).
- Max
Egress float64Rate - Max egress rate (kbits per sec).
- Measured
Downstream float64Bandwidth - Measured-Downstream-Bandwidth.
- Measured
Upstream float64Bandwidth - Measured-Upstream-Bandwidth.
- Mediatype string
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - Member string
- Physical interfaces that belong to the aggregate or redundant interface.
- Min
Links float64 - Minimum number of aggregated ports that must be up.
- Min
Links stringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - Mirroring
Direction string - Port mirroring direction. Valid values:
rx,tx,both. - Mirroring
Port string - Mirroring port.
- Mode string
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - Monitor
Bandwidth string - Monitor-Bandwidth. Valid values:
disable,enable. - Mtu float64
- MTU value for this interface.
- Mtu
Override string - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - Mux
Type string - Multiplexer type Valid values:
llc-encaps,vc-encaps. - Name string
- Name.
- Ndiscforward string
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - Netbios
Forward string - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - Netflow
Sampler string - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - Np
Qos float64Profile - NP QoS profile ID.
- Npu
Fastpath string - Npu-Fastpath. Valid values:
disable,enable. - Nst string
- Nst. Valid values:
disable,enable. - Object
Fsp stringVlan Interface Id - an identifier for the resource.
- Out
Force float64Vlan Cos - Out-Force-Vlan-Cos.
- Outbandwidth float64
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- Padt
Retry float64Timeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- Passwords []string
- PPPoE account's password.
- Peer
Interface string - Peer-Interface.
- Phy
Mode string - DSL physical mode. Valid values:
auto,adsl,vdsl. - Ping
Serv float64Status - Ping-Serv-Status.
- Poe string
- Enable/disable PoE status. Valid values:
disable,enable. - Polling
Interval float64 - sFlow polling interval (1 - 255 sec).
- Port
Mirroring string - Enable/disable NP port mirroring. Valid values:
disable,enable. - Pppoe
Unnumbered stringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - Pptp
Auth stringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - Pptp
Client string - Enable/disable PPTP client. Valid values:
disable,enable. - Pptp
Passwords []string - PPTP password.
- Pptp
Server stringIp - PPTP server IP address.
- Pptp
Timeout float64 - Idle timer in minutes (0 for disabled).
- Pptp
User string - PPTP user name.
- Preserve
Session stringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - Priority float64
- Priority of the virtual router (1 - 255).
- Priority
Override string - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - Proxy
Captive stringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - Pvc
Atm stringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - Pvc
Chan float64 - SFP-DSL ADSL Fallback PVC Channel.
- Pvc
Crc float64 - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- Pvc
Pcr float64 - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- Pvc
Scr float64 - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- Pvc
Vlan float64Id - SFP-DSL ADSL Fallback PVC VLAN ID.
- Pvc
Vlan float64Rx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- Pvc
Vlan stringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - Pvc
Vlan float64Tx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- Pvc
Vlan stringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - Reachable
Time float64 - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- Redundant
Interface string - Redundant-Interface.
- Remote
Ip string - Remote IP address of tunnel.
- Replacemsg
Override stringGroup - Replacement message override group.
- Retransmission string
- Enable/disable DSL retransmission. Valid values:
disable,enable. - Ring
Rx float64 - RX ring size.
- Ring
Tx float64 - TX ring size.
- Role string
- Interface role. Valid values:
lan,wan,dmz,undefined. - Sample
Direction string - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - Sample
Rate float64 - sFlow sample rate (10 - 99999).
- Scan
Botnet stringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Secondary
Ip string - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - Secondaryips
[]Object
Fsp Vlan Interface Secondaryip Type Args - Secondaryip. The structure of
secondaryipblock is documented below. - Security8021x
Dynamic float64Vlan Id - VLAN ID for virtual switch.
- Security8021x
Master string - 802.1X master virtual-switch.
- Security8021x
Member stringMode - 802.1X member mode. Valid values:
disable,switch. - Security8021x
Mode string - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - Security
Exempt stringList - Name of security-exempt-list.
- Security
External stringLogout - URL of external authentication logout server.
- Security
External stringWeb - URL of external authentication web server.
- Security
Groups string - User groups that can authenticate with the captive portal.
- Security
Mac stringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - Security
Mode string - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - Security
Redirect stringUrl - URL redirection after disclaimer/authentication.
- Select
Profile30a35b string - Select-Profile-30A-35B. Valid values:
30A,35B. - Service
Name string - PPPoE service name.
- Sflow
Sampler string - Enable/disable sFlow on this interface. Valid values:
disable,enable. - Sfp
Dsl string - Enable/disable SFP DSL. Valid values:
disable,enable. - Sfp
Dsl stringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - Sfp
Dsl stringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - Sfp
Dsl stringMac - SFP DSL MAC address.
- Speed string
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - Spillover
Threshold float64 - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- Src
Check string - Enable/disable source IP check. Valid values:
disable,enable. - Status string
- Enable/disable VRRP. Valid values:
disable,enable. - Stp string
- Enable/disable STP. Valid values:
disable,enable. - Stp
Edge string - Enable/disable as STP edge port. Valid values:
disable,enable. - Stp
Ha stringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - Stp
Ha stringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - Stpforward string
- Enable/disable STP forwarding. Valid values:
disable,enable. - Stpforward
Mode string - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - Strip
Priority stringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - Subst string
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - Substitute
Dst stringMac - Destination MAC address that all packets are sent to from this interface.
- Sw
Algorithm string - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - Swc
First float64Create - Swc-First-Create.
- Swc
Vlan float64 - Swc-Vlan.
- Switch string
- Switch.
- Switch
Controller stringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - Switch
Controller stringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - Switch
Controller stringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - Switch
Controller stringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - Switch
Controller stringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - Switch
Controller stringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - Switch
Controller stringDynamic - Switch-Controller-Dynamic.
- Switch
Controller stringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - Switch
Controller stringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - Switch
Controller stringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - Switch
Controller stringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - Switch
Controller stringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - Switch
Controller float64Learning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- Switch
Controller float64Mgmt Vlan - Switch-Controller-Mgmt-Vlan.
- Switch
Controller stringNac - Switch-Controller-Nac.
- Switch
Controller stringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - Switch
Controller stringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - Switch
Controller stringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - Switch
Controller stringOffload Ip - IP for routing offload on FortiSwitch.
- Switch
Controller stringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - Switch
Controller stringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - Switch
Controller stringOffloading Ip - Switch-Controller-Offloading-Ip.
- Switch
Controller stringRadius Server - Switch-Controller-Radius-Server.
- Switch
Controller stringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - Switch
Controller stringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - Switch
Controller stringTraffic Policy - Switch controller traffic policy for the VLAN.
- System
Id string - Define a system ID for the aggregate interface.
- System
Id stringType - Method in which system ID is generated. Valid values:
auto,user. - Tc
Mode string - DSL transfer mode. Valid values:
ptm,atm. - Tcp
Mss float64 - TCP maximum segment size. 0 means do not change segment size.
- Trunk string
- Enable/disable VLAN trunk. Valid values:
disable,enable. - Trust
Ip1 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip2 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip3 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip61 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Trust
Ip62 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Trust
Ip63 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Type string
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - Username string
- Username of the PPPoE account, provided by your ISP.
- Vci float64
- Virtual Channel ID
- Vectoring string
- Enable/disable DSL vectoring. Valid values:
disable,enable. - Vindex float64
- Vindex.
- Vlan
Op stringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - Vlan
Protocol string - Vlan-Protocol. Valid values:
8021q,8021ad. - Vlanforward string
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - Vlanid float64
- VLAN ID (1 - 4094).
- Vpi float64
- Virtual Path ID
- Vrf float64
- Virtual Routing Forwarding ID.
- Vrrp
Virtual stringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - Vrrps
[]Object
Fsp Vlan Interface Vrrp Type Args - Vrrp. The structure of
vrrpblock is documented below. - Wccp string
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - Weight float64
- Default weight for static routes (if route has no weight configured).
- Wifi5g
Threshold string - Minimal signal strength to be considered as a good 5G AP.
- Wifi
Acl string - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - Wifi
Ap stringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - Wifi
Auth string - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - Wifi
Auto stringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - Wifi
Auto stringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - Wifi
Broadcast stringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - Wifi
Dns stringServer1 - DNS server 1.
- Wifi
Dns stringServer2 - DNS server 2.
- Wifi
Encrypt string - Data encryption. Valid values:
TKIP,AES. - Wifi
Fragment float64Threshold - WiFi fragment threshold (800 - 2346).
- Wifi
Gateway string - IPv4 default gateway IP address.
- Wifi
Keyindex float64 - WEP key index (1 - 4).
- Wifi
Keys []string - WiFi WEP Key.
- Wifi
Mac stringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - Wifi
Passphrases []string - WiFi pre-shared key for WPA.
- Wifi
Radius stringServer - WiFi RADIUS server for WPA.
- Wifi
Rts float64Threshold - WiFi RTS threshold (256 - 2346).
- Wifi
Security string - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - Wifi
Ssid string - IEEE 802.11 Service Set Identifier.
- Wifi
Usergroup string - WiFi user group for WPA.
- Wins
Ip string - WINS server IP.
- vlan String
- Vlan.
- ac
Name String - PPPoE server name.
- adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - aggregate String
- Aggregate.
- aggregate
Type String - Type of aggregation. Valid values:
physical,vxlan. - algorithm String
- Frame distribution algorithm. Valid values:
L2,L3,L4. - alias String
- Alias will be displayed with the interface name to make it easier to distinguish.
- allowaccesses List<String>
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - annex String
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - ap
Discover String - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - arpforward String
- Enable/disable ARP forwarding. Valid values:
disable,enable. - atm
Protocol String - ATM protocol. Valid values:
none,ipoa. - auth
Cert String - HTTPS server certificate.
- auth
Portal StringAddr - Address of captive portal.
- auth
Type String - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - auto
Auth StringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - bandwidth
Measure DoubleTime - Bandwidth-Measure-Time.
- bfd String
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - bfd
Desired DoubleMin Tx - BFD desired minimal transmit interval.
- bfd
Detect DoubleMult - BFD detection multiplier.
- bfd
Required DoubleMin Rx - BFD required minimal receive interval.
- broadcast
Forticlient StringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - broadcast
Forward String - Enable/disable broadcast forwarding. Valid values:
disable,enable. - captive
Portal Double - Enable/disable captive portal.
- cli
Conn DoubleStatus - Cli-Conn-Status.
- color Double
- Color of icon on the GUI.
- ddns String
- Ddns. Valid values:
disable,enable. - ddns
Auth String - Ddns-Auth. Valid values:
disable,tsig. - ddns
Domain String - Ddns-Domain.
- ddns
Key String - Ddns-Key.
- ddns
Keyname String - Ddns-Keyname.
- ddns
Passwords List<String> - Ddns-Password.
- ddns
Server String - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - ddns
Server StringIp - Ddns-Server-Ip.
- ddns
Sn String - Ddns-Sn.
- ddns
Ttl Double - Ddns-Ttl.
- ddns
Username String - Ddns-Username.
- ddns
Zone String - Ddns-Zone.
- dedicated
To String - Configure interface for single purpose. Valid values:
none,management. - default
Purdue StringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - defaultgw String
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - description String
- Description.
- detected
Peer DoubleMtu - Detected-Peer-Mtu.
- detectprotocols List<String>
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver String
- Gateway's ping server for this IP.
- device
Access StringList - Device access list.
- device
Identification String - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Identification StringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Netscan String - Device-Netscan. Valid values:
disable,enable. - device
User StringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - devindex Double
- Devindex.
- dhcp
Broadcast StringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - dhcp
Classless StringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - dhcp
Client StringIdentifier - DHCP client identifier.
- dhcp
Relay StringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - dhcp
Relay StringCircuit Id - DHCP relay circuit ID.
- dhcp
Relay StringInterface - Specify outgoing interface to reach server.
- dhcp
Relay StringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - dhcp
Relay List<String>Ips - DHCP relay IP address.
- dhcp
Relay StringLink Selection - DHCP relay link selection.
- dhcp
Relay StringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - dhcp
Relay StringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - dhcp
Relay StringSource Ip - IP address used by the DHCP relay as its source IP.
- dhcp
Relay StringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - dhcp
Renew DoubleTime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- dhcp
Smart StringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - disc
Retry DoubleTimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- disconnect
Threshold Double - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- distance Double
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- dns
Query String - Dns-Query. Valid values:
disable,recursive,non-recursive. - dns
Server StringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - dns
Server List<String>Protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - drop
Fragment String - Enable/disable drop fragment packets. Valid values:
disable,enable. - drop
Overlapped StringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - dynamic
Sort StringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- eap
Ca List<String>Certs - Eap-Ca-Cert.
- eap
Identity String - Eap-Identity.
- eap
Method String - Eap-Method. Valid values:
tls,peap. - eap
Passwords List<String> - Eap-Password.
- eap
Supplicant String - Eap-Supplicant. Valid values:
disable,enable. - eap
User List<String>Certs - Eap-User-Cert.
- egress
Cos String - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - egress
Shaping StringProfile - Outgoing traffic shaping profile.
- eip String
- Eip.
- endpoint
Compliance String - Endpoint-Compliance. Valid values:
disable,enable. - estimated
Downstream DoubleBandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- estimated
Upstream DoubleBandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- explicit
Ftp StringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - explicit
Web StringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - external String
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - fail
Action StringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - fail
Alert StringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- fail
Alert StringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - fail
Detect String - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - fail
Detect List<String>Options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - fdp String
- Fdp. Valid values:
disable,enable. - fortiheartbeat String
- Fortiheartbeat. Valid values:
disable,enable. - fortilink String
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - fortilink
Backup DoubleLink - Fortilink-Backup-Link.
- fortilink
Neighbor StringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - fortilink
Split StringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - fortilink
Stacking String - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - forward
Domain Double - Transparent mode forward domain.
- forward
Error StringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - fp
Anomalies List<String> - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - fp
Disables List<String> - Fp-Disable. Valid values:
all,ipsec,none. - gateway
Address String - Gateway address
- generic
Receive StringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - gi
Gk String - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - gwaddr String
- Gateway address
- gwdetect String
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha
Priority Double - HA election priority for the PING server.
- icmp
Accept StringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - icmp
Redirect String - Icmp-Redirect. Valid values:
disable,enable. - icmp
Send StringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - ident
Accept String - Enable/disable authentication for this interface. Valid values:
disable,enable. - idle
Timeout Double - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- if
Mdix String - If-Mdix. Valid values:
auto,normal,crossover. - if
Media String - If-Media. Valid values:
auto,copper,fiber. - ike
Saml List<String>Servers - Ike-Saml-Server.
- in
Force DoubleVlan Cos - In-Force-Vlan-Cos.
- inbandwidth Double
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- ingress
Cos String - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - ingress
Shaping StringProfile - Incoming traffic shaping profile.
- ingress
Spillover DoubleThreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- interconnect
Profile String - Set interconnect profile. Valid values:
default,profile1,profile2. - internal Double
- Implicitly created.
- ip String
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- ip
Managed StringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - ipmac String
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - ips
Sniffer StringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - ipunnumbered String
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- ipv6
Object
Fsp Vlan Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - l2forward String
- Enable/disable l2 forwarding. Valid values:
disable,enable. - l2tp
Client String - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - lacp
Ha StringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - lacp
Ha StringSlave - LACP HA slave. Valid values:
disable,enable. - lacp
Mode String - LACP mode. Valid values:
static,passive,active. - lacp
Speed String - How often the interface sends LACP messages. Valid values:
slow,fast. - large
Receive StringOffload - Large-Receive-Offload. Valid values:
disable,enable. - lcp
Echo DoubleInterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- lcp
Max DoubleEcho Fails - Maximum missed LCP echo messages before disconnect.
- link
Up DoubleDelay - Number of milliseconds to wait before considering a link is up.
- listen
Forticlient StringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - lldp
Network StringPolicy - LLDP-MED network policy profile.
- lldp
Reception String - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - lldp
Transmission String - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - log String
- Log. Valid values:
disable,enable. - macaddr String
- Change the interface's MAC address.
- managed
Subnetwork StringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - management
Ip String - High Availability in-band management IP address of this interface.
- max
Egress DoubleBurst Rate - Max egress burst rate (kbits per sec).
- max
Egress DoubleRate - Max egress rate (kbits per sec).
- measured
Downstream DoubleBandwidth - Measured-Downstream-Bandwidth.
- measured
Upstream DoubleBandwidth - Measured-Upstream-Bandwidth.
- mediatype String
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - member String
- Physical interfaces that belong to the aggregate or redundant interface.
- min
Links Double - Minimum number of aggregated ports that must be up.
- min
Links StringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - mirroring
Direction String - Port mirroring direction. Valid values:
rx,tx,both. - mirroring
Port String - Mirroring port.
- mode String
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - monitor
Bandwidth String - Monitor-Bandwidth. Valid values:
disable,enable. - mtu Double
- MTU value for this interface.
- mtu
Override String - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - mux
Type String - Multiplexer type Valid values:
llc-encaps,vc-encaps. - name String
- Name.
- ndiscforward String
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - netbios
Forward String - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - netflow
Sampler String - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - np
Qos DoubleProfile - NP QoS profile ID.
- npu
Fastpath String - Npu-Fastpath. Valid values:
disable,enable. - nst String
- Nst. Valid values:
disable,enable. - object
Fsp StringVlan Interface Id - an identifier for the resource.
- out
Force DoubleVlan Cos - Out-Force-Vlan-Cos.
- outbandwidth Double
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- padt
Retry DoubleTimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- passwords List<String>
- PPPoE account's password.
- peer
Interface String - Peer-Interface.
- phy
Mode String - DSL physical mode. Valid values:
auto,adsl,vdsl. - ping
Serv DoubleStatus - Ping-Serv-Status.
- poe String
- Enable/disable PoE status. Valid values:
disable,enable. - polling
Interval Double - sFlow polling interval (1 - 255 sec).
- port
Mirroring String - Enable/disable NP port mirroring. Valid values:
disable,enable. - pppoe
Unnumbered StringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - pptp
Auth StringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - pptp
Client String - Enable/disable PPTP client. Valid values:
disable,enable. - pptp
Passwords List<String> - PPTP password.
- pptp
Server StringIp - PPTP server IP address.
- pptp
Timeout Double - Idle timer in minutes (0 for disabled).
- pptp
User String - PPTP user name.
- preserve
Session StringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - priority Double
- Priority of the virtual router (1 - 255).
- priority
Override String - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - proxy
Captive StringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - pvc
Atm StringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - pvc
Chan Double - SFP-DSL ADSL Fallback PVC Channel.
- pvc
Crc Double - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- pvc
Pcr Double - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- pvc
Scr Double - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- pvc
Vlan DoubleId - SFP-DSL ADSL Fallback PVC VLAN ID.
- pvc
Vlan DoubleRx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- pvc
Vlan StringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - pvc
Vlan DoubleTx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- pvc
Vlan StringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - reachable
Time Double - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- redundant
Interface String - Redundant-Interface.
- remote
Ip String - Remote IP address of tunnel.
- replacemsg
Override StringGroup - Replacement message override group.
- retransmission String
- Enable/disable DSL retransmission. Valid values:
disable,enable. - ring
Rx Double - RX ring size.
- ring
Tx Double - TX ring size.
- role String
- Interface role. Valid values:
lan,wan,dmz,undefined. - sample
Direction String - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - sample
Rate Double - sFlow sample rate (10 - 99999).
- scan
Botnet StringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - scopetype String
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary
Ip String - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - secondaryips
List<Object
Fsp Vlan Interface Secondaryip> - Secondaryip. The structure of
secondaryipblock is documented below. - security8021x
Dynamic DoubleVlan Id - VLAN ID for virtual switch.
- security8021x
Master String - 802.1X master virtual-switch.
- security8021x
Member StringMode - 802.1X member mode. Valid values:
disable,switch. - security8021x
Mode String - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - security
Exempt StringList - Name of security-exempt-list.
- security
External StringLogout - URL of external authentication logout server.
- security
External StringWeb - URL of external authentication web server.
- security
Groups String - User groups that can authenticate with the captive portal.
- security
Mac StringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - security
Mode String - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - security
Redirect StringUrl - URL redirection after disclaimer/authentication.
- select
Profile30a35b String - Select-Profile-30A-35B. Valid values:
30A,35B. - service
Name String - PPPoE service name.
- sflow
Sampler String - Enable/disable sFlow on this interface. Valid values:
disable,enable. - sfp
Dsl String - Enable/disable SFP DSL. Valid values:
disable,enable. - sfp
Dsl StringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - sfp
Dsl StringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - sfp
Dsl StringMac - SFP DSL MAC address.
- speed String
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - spillover
Threshold Double - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- src
Check String - Enable/disable source IP check. Valid values:
disable,enable. - status String
- Enable/disable VRRP. Valid values:
disable,enable. - stp String
- Enable/disable STP. Valid values:
disable,enable. - stp
Edge String - Enable/disable as STP edge port. Valid values:
disable,enable. - stp
Ha StringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - stp
Ha StringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - stpforward String
- Enable/disable STP forwarding. Valid values:
disable,enable. - stpforward
Mode String - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - strip
Priority StringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - subst String
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - substitute
Dst StringMac - Destination MAC address that all packets are sent to from this interface.
- sw
Algorithm String - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - swc
First DoubleCreate - Swc-First-Create.
- swc
Vlan Double - Swc-Vlan.
- switch
Controller StringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - switch
Controller StringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - switch
Controller StringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - switch
Controller StringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - switch
Controller StringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - switch
Controller StringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - switch
Controller StringDynamic - Switch-Controller-Dynamic.
- switch
Controller StringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - switch
Controller StringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - switch
Controller StringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - switch
Controller StringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - switch
Controller StringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - switch
Controller DoubleLearning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- switch
Controller DoubleMgmt Vlan - Switch-Controller-Mgmt-Vlan.
- switch
Controller StringNac - Switch-Controller-Nac.
- switch
Controller StringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - switch
Controller StringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - switch
Controller StringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - switch
Controller StringOffload Ip - IP for routing offload on FortiSwitch.
- switch
Controller StringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - switch
Controller StringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - switch
Controller StringOffloading Ip - Switch-Controller-Offloading-Ip.
- switch
Controller StringRadius Server - Switch-Controller-Radius-Server.
- switch
Controller StringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - switch
Controller StringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - switch
Controller StringTraffic Policy - Switch controller traffic policy for the VLAN.
- switch_ String
- Switch.
- system
Id String - Define a system ID for the aggregate interface.
- system
Id StringType - Method in which system ID is generated. Valid values:
auto,user. - tc
Mode String - DSL transfer mode. Valid values:
ptm,atm. - tcp
Mss Double - TCP maximum segment size. 0 means do not change segment size.
- trunk String
- Enable/disable VLAN trunk. Valid values:
disable,enable. - trust
Ip1 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip2 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip3 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip61 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip62 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip63 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- type String
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - username String
- Username of the PPPoE account, provided by your ISP.
- vci Double
- Virtual Channel ID
- vectoring String
- Enable/disable DSL vectoring. Valid values:
disable,enable. - vindex Double
- Vindex.
- vlan
Op StringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - vlan
Protocol String - Vlan-Protocol. Valid values:
8021q,8021ad. - vlanforward String
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - vlanid Double
- VLAN ID (1 - 4094).
- vpi Double
- Virtual Path ID
- vrf Double
- Virtual Routing Forwarding ID.
- vrrp
Virtual StringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - vrrps
List<Object
Fsp Vlan Interface Vrrp> - Vrrp. The structure of
vrrpblock is documented below. - wccp String
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - weight Double
- Default weight for static routes (if route has no weight configured).
- wifi5g
Threshold String - Minimal signal strength to be considered as a good 5G AP.
- wifi
Acl String - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - wifi
Ap StringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - wifi
Auth String - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - wifi
Auto StringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - wifi
Auto StringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - wifi
Broadcast StringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - wifi
Dns StringServer1 - DNS server 1.
- wifi
Dns StringServer2 - DNS server 2.
- wifi
Encrypt String - Data encryption. Valid values:
TKIP,AES. - wifi
Fragment DoubleThreshold - WiFi fragment threshold (800 - 2346).
- wifi
Gateway String - IPv4 default gateway IP address.
- wifi
Keyindex Double - WEP key index (1 - 4).
- wifi
Keys List<String> - WiFi WEP Key.
- wifi
Mac StringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - wifi
Passphrases List<String> - WiFi pre-shared key for WPA.
- wifi
Radius StringServer - WiFi RADIUS server for WPA.
- wifi
Rts DoubleThreshold - WiFi RTS threshold (256 - 2346).
- wifi
Security String - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - wifi
Ssid String - IEEE 802.11 Service Set Identifier.
- wifi
Usergroup String - WiFi user group for WPA.
- wins
Ip String - WINS server IP.
- vlan string
- Vlan.
- ac
Name string - PPPoE server name.
- adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - aggregate string
- Aggregate.
- aggregate
Type string - Type of aggregation. Valid values:
physical,vxlan. - algorithm string
- Frame distribution algorithm. Valid values:
L2,L3,L4. - alias string
- Alias will be displayed with the interface name to make it easier to distinguish.
- allowaccesses string[]
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - annex string
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - ap
Discover string - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - arpforward string
- Enable/disable ARP forwarding. Valid values:
disable,enable. - atm
Protocol string - ATM protocol. Valid values:
none,ipoa. - auth
Cert string - HTTPS server certificate.
- auth
Portal stringAddr - Address of captive portal.
- auth
Type string - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - auto
Auth stringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - bandwidth
Measure numberTime - Bandwidth-Measure-Time.
- bfd string
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - bfd
Desired numberMin Tx - BFD desired minimal transmit interval.
- bfd
Detect numberMult - BFD detection multiplier.
- bfd
Required numberMin Rx - BFD required minimal receive interval.
- broadcast
Forticlient stringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - broadcast
Forward string - Enable/disable broadcast forwarding. Valid values:
disable,enable. - captive
Portal number - Enable/disable captive portal.
- cli
Conn numberStatus - Cli-Conn-Status.
- color number
- Color of icon on the GUI.
- ddns string
- Ddns. Valid values:
disable,enable. - ddns
Auth string - Ddns-Auth. Valid values:
disable,tsig. - ddns
Domain string - Ddns-Domain.
- ddns
Key string - Ddns-Key.
- ddns
Keyname string - Ddns-Keyname.
- ddns
Passwords string[] - Ddns-Password.
- ddns
Server string - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - ddns
Server stringIp - Ddns-Server-Ip.
- ddns
Sn string - Ddns-Sn.
- ddns
Ttl number - Ddns-Ttl.
- ddns
Username string - Ddns-Username.
- ddns
Zone string - Ddns-Zone.
- dedicated
To string - Configure interface for single purpose. Valid values:
none,management. - default
Purdue stringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - defaultgw string
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - description string
- Description.
- detected
Peer numberMtu - Detected-Peer-Mtu.
- detectprotocols string[]
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver string
- Gateway's ping server for this IP.
- device
Access stringList - Device access list.
- device
Identification string - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Identification stringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Netscan string - Device-Netscan. Valid values:
disable,enable. - device
User stringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - devindex number
- Devindex.
- dhcp
Broadcast stringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - dhcp
Classless stringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - dhcp
Client stringIdentifier - DHCP client identifier.
- dhcp
Relay stringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - dhcp
Relay stringCircuit Id - DHCP relay circuit ID.
- dhcp
Relay stringInterface - Specify outgoing interface to reach server.
- dhcp
Relay stringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - dhcp
Relay string[]Ips - DHCP relay IP address.
- dhcp
Relay stringLink Selection - DHCP relay link selection.
- dhcp
Relay stringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - dhcp
Relay stringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - dhcp
Relay stringSource Ip - IP address used by the DHCP relay as its source IP.
- dhcp
Relay stringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - dhcp
Renew numberTime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- dhcp
Smart stringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - disc
Retry numberTimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- disconnect
Threshold number - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- distance number
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- dns
Query string - Dns-Query. Valid values:
disable,recursive,non-recursive. - dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - dns
Server string[]Protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - drop
Fragment string - Enable/disable drop fragment packets. Valid values:
disable,enable. - drop
Overlapped stringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- eap
Ca string[]Certs - Eap-Ca-Cert.
- eap
Identity string - Eap-Identity.
- eap
Method string - Eap-Method. Valid values:
tls,peap. - eap
Passwords string[] - Eap-Password.
- eap
Supplicant string - Eap-Supplicant. Valid values:
disable,enable. - eap
User string[]Certs - Eap-User-Cert.
- egress
Cos string - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - egress
Shaping stringProfile - Outgoing traffic shaping profile.
- eip string
- Eip.
- endpoint
Compliance string - Endpoint-Compliance. Valid values:
disable,enable. - estimated
Downstream numberBandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- estimated
Upstream numberBandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- explicit
Ftp stringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - explicit
Web stringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - external string
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - fail
Action stringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - fail
Alert stringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- fail
Alert stringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - fail
Detect string - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - fail
Detect string[]Options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - fdp string
- Fdp. Valid values:
disable,enable. - fortiheartbeat string
- Fortiheartbeat. Valid values:
disable,enable. - fortilink string
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - fortilink
Backup numberLink - Fortilink-Backup-Link.
- fortilink
Neighbor stringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - fortilink
Split stringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - fortilink
Stacking string - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - forward
Domain number - Transparent mode forward domain.
- forward
Error stringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - fp
Anomalies string[] - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - fp
Disables string[] - Fp-Disable. Valid values:
all,ipsec,none. - gateway
Address string - Gateway address
- generic
Receive stringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - gi
Gk string - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - gwaddr string
- Gateway address
- gwdetect string
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha
Priority number - HA election priority for the PING server.
- icmp
Accept stringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - icmp
Redirect string - Icmp-Redirect. Valid values:
disable,enable. - icmp
Send stringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - ident
Accept string - Enable/disable authentication for this interface. Valid values:
disable,enable. - idle
Timeout number - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- if
Mdix string - If-Mdix. Valid values:
auto,normal,crossover. - if
Media string - If-Media. Valid values:
auto,copper,fiber. - ike
Saml string[]Servers - Ike-Saml-Server.
- in
Force numberVlan Cos - In-Force-Vlan-Cos.
- inbandwidth number
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- ingress
Cos string - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - ingress
Shaping stringProfile - Incoming traffic shaping profile.
- ingress
Spillover numberThreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- interconnect
Profile string - Set interconnect profile. Valid values:
default,profile1,profile2. - internal number
- Implicitly created.
- ip string
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- ip
Managed stringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - ipmac string
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - ips
Sniffer stringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - ipunnumbered string
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- ipv6
Object
Fsp Vlan Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - l2forward string
- Enable/disable l2 forwarding. Valid values:
disable,enable. - l2tp
Client string - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - lacp
Ha stringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - lacp
Ha stringSlave - LACP HA slave. Valid values:
disable,enable. - lacp
Mode string - LACP mode. Valid values:
static,passive,active. - lacp
Speed string - How often the interface sends LACP messages. Valid values:
slow,fast. - large
Receive stringOffload - Large-Receive-Offload. Valid values:
disable,enable. - lcp
Echo numberInterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- lcp
Max numberEcho Fails - Maximum missed LCP echo messages before disconnect.
- link
Up numberDelay - Number of milliseconds to wait before considering a link is up.
- listen
Forticlient stringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - lldp
Network stringPolicy - LLDP-MED network policy profile.
- lldp
Reception string - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - lldp
Transmission string - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - log string
- Log. Valid values:
disable,enable. - macaddr string
- Change the interface's MAC address.
- managed
Subnetwork stringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - management
Ip string - High Availability in-band management IP address of this interface.
- max
Egress numberBurst Rate - Max egress burst rate (kbits per sec).
- max
Egress numberRate - Max egress rate (kbits per sec).
- measured
Downstream numberBandwidth - Measured-Downstream-Bandwidth.
- measured
Upstream numberBandwidth - Measured-Upstream-Bandwidth.
- mediatype string
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - member string
- Physical interfaces that belong to the aggregate or redundant interface.
- min
Links number - Minimum number of aggregated ports that must be up.
- min
Links stringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - mirroring
Direction string - Port mirroring direction. Valid values:
rx,tx,both. - mirroring
Port string - Mirroring port.
- mode string
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - monitor
Bandwidth string - Monitor-Bandwidth. Valid values:
disable,enable. - mtu number
- MTU value for this interface.
- mtu
Override string - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - mux
Type string - Multiplexer type Valid values:
llc-encaps,vc-encaps. - name string
- Name.
- ndiscforward string
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - netbios
Forward string - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - netflow
Sampler string - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - np
Qos numberProfile - NP QoS profile ID.
- npu
Fastpath string - Npu-Fastpath. Valid values:
disable,enable. - nst string
- Nst. Valid values:
disable,enable. - object
Fsp stringVlan Interface Id - an identifier for the resource.
- out
Force numberVlan Cos - Out-Force-Vlan-Cos.
- outbandwidth number
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- padt
Retry numberTimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- passwords string[]
- PPPoE account's password.
- peer
Interface string - Peer-Interface.
- phy
Mode string - DSL physical mode. Valid values:
auto,adsl,vdsl. - ping
Serv numberStatus - Ping-Serv-Status.
- poe string
- Enable/disable PoE status. Valid values:
disable,enable. - polling
Interval number - sFlow polling interval (1 - 255 sec).
- port
Mirroring string - Enable/disable NP port mirroring. Valid values:
disable,enable. - pppoe
Unnumbered stringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - pptp
Auth stringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - pptp
Client string - Enable/disable PPTP client. Valid values:
disable,enable. - pptp
Passwords string[] - PPTP password.
- pptp
Server stringIp - PPTP server IP address.
- pptp
Timeout number - Idle timer in minutes (0 for disabled).
- pptp
User string - PPTP user name.
- preserve
Session stringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - priority number
- Priority of the virtual router (1 - 255).
- priority
Override string - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - proxy
Captive stringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - pvc
Atm stringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - pvc
Chan number - SFP-DSL ADSL Fallback PVC Channel.
- pvc
Crc number - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- pvc
Pcr number - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- pvc
Scr number - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- pvc
Vlan numberId - SFP-DSL ADSL Fallback PVC VLAN ID.
- pvc
Vlan numberRx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- pvc
Vlan stringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - pvc
Vlan numberTx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- pvc
Vlan stringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - reachable
Time number - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- redundant
Interface string - Redundant-Interface.
- remote
Ip string - Remote IP address of tunnel.
- replacemsg
Override stringGroup - Replacement message override group.
- retransmission string
- Enable/disable DSL retransmission. Valid values:
disable,enable. - ring
Rx number - RX ring size.
- ring
Tx number - TX ring size.
- role string
- Interface role. Valid values:
lan,wan,dmz,undefined. - sample
Direction string - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - sample
Rate number - sFlow sample rate (10 - 99999).
- scan
Botnet stringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary
Ip string - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - secondaryips
Object
Fsp Vlan Interface Secondaryip[] - Secondaryip. The structure of
secondaryipblock is documented below. - security8021x
Dynamic numberVlan Id - VLAN ID for virtual switch.
- security8021x
Master string - 802.1X master virtual-switch.
- security8021x
Member stringMode - 802.1X member mode. Valid values:
disable,switch. - security8021x
Mode string - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - security
Exempt stringList - Name of security-exempt-list.
- security
External stringLogout - URL of external authentication logout server.
- security
External stringWeb - URL of external authentication web server.
- security
Groups string - User groups that can authenticate with the captive portal.
- security
Mac stringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - security
Mode string - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - security
Redirect stringUrl - URL redirection after disclaimer/authentication.
- select
Profile30a35b string - Select-Profile-30A-35B. Valid values:
30A,35B. - service
Name string - PPPoE service name.
- sflow
Sampler string - Enable/disable sFlow on this interface. Valid values:
disable,enable. - sfp
Dsl string - Enable/disable SFP DSL. Valid values:
disable,enable. - sfp
Dsl stringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - sfp
Dsl stringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - sfp
Dsl stringMac - SFP DSL MAC address.
- speed string
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - spillover
Threshold number - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- src
Check string - Enable/disable source IP check. Valid values:
disable,enable. - status string
- Enable/disable VRRP. Valid values:
disable,enable. - stp string
- Enable/disable STP. Valid values:
disable,enable. - stp
Edge string - Enable/disable as STP edge port. Valid values:
disable,enable. - stp
Ha stringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - stp
Ha stringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - stpforward string
- Enable/disable STP forwarding. Valid values:
disable,enable. - stpforward
Mode string - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - strip
Priority stringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - subst string
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - substitute
Dst stringMac - Destination MAC address that all packets are sent to from this interface.
- sw
Algorithm string - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - swc
First numberCreate - Swc-First-Create.
- swc
Vlan number - Swc-Vlan.
- switch string
- Switch.
- switch
Controller stringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - switch
Controller stringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - switch
Controller stringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - switch
Controller stringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - switch
Controller stringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - switch
Controller stringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - switch
Controller stringDynamic - Switch-Controller-Dynamic.
- switch
Controller stringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - switch
Controller stringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - switch
Controller stringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - switch
Controller stringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - switch
Controller stringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - switch
Controller numberLearning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- switch
Controller numberMgmt Vlan - Switch-Controller-Mgmt-Vlan.
- switch
Controller stringNac - Switch-Controller-Nac.
- switch
Controller stringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - switch
Controller stringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - switch
Controller stringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - switch
Controller stringOffload Ip - IP for routing offload on FortiSwitch.
- switch
Controller stringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - switch
Controller stringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - switch
Controller stringOffloading Ip - Switch-Controller-Offloading-Ip.
- switch
Controller stringRadius Server - Switch-Controller-Radius-Server.
- switch
Controller stringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - switch
Controller stringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - switch
Controller stringTraffic Policy - Switch controller traffic policy for the VLAN.
- system
Id string - Define a system ID for the aggregate interface.
- system
Id stringType - Method in which system ID is generated. Valid values:
auto,user. - tc
Mode string - DSL transfer mode. Valid values:
ptm,atm. - tcp
Mss number - TCP maximum segment size. 0 means do not change segment size.
- trunk string
- Enable/disable VLAN trunk. Valid values:
disable,enable. - trust
Ip1 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip2 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip3 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip61 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip62 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip63 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- type string
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - username string
- Username of the PPPoE account, provided by your ISP.
- vci number
- Virtual Channel ID
- vectoring string
- Enable/disable DSL vectoring. Valid values:
disable,enable. - vindex number
- Vindex.
- vlan
Op stringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - vlan
Protocol string - Vlan-Protocol. Valid values:
8021q,8021ad. - vlanforward string
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - vlanid number
- VLAN ID (1 - 4094).
- vpi number
- Virtual Path ID
- vrf number
- Virtual Routing Forwarding ID.
- vrrp
Virtual stringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - vrrps
Object
Fsp Vlan Interface Vrrp[] - Vrrp. The structure of
vrrpblock is documented below. - wccp string
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - weight number
- Default weight for static routes (if route has no weight configured).
- wifi5g
Threshold string - Minimal signal strength to be considered as a good 5G AP.
- wifi
Acl string - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - wifi
Ap stringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - wifi
Auth string - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - wifi
Auto stringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - wifi
Auto stringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - wifi
Broadcast stringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - wifi
Dns stringServer1 - DNS server 1.
- wifi
Dns stringServer2 - DNS server 2.
- wifi
Encrypt string - Data encryption. Valid values:
TKIP,AES. - wifi
Fragment numberThreshold - WiFi fragment threshold (800 - 2346).
- wifi
Gateway string - IPv4 default gateway IP address.
- wifi
Keyindex number - WEP key index (1 - 4).
- wifi
Keys string[] - WiFi WEP Key.
- wifi
Mac stringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - wifi
Passphrases string[] - WiFi pre-shared key for WPA.
- wifi
Radius stringServer - WiFi RADIUS server for WPA.
- wifi
Rts numberThreshold - WiFi RTS threshold (256 - 2346).
- wifi
Security string - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - wifi
Ssid string - IEEE 802.11 Service Set Identifier.
- wifi
Usergroup string - WiFi user group for WPA.
- wins
Ip string - WINS server IP.
- vlan str
- Vlan.
- ac_
name str - PPPoE server name.
- adom str
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - aggregate str
- Aggregate.
- aggregate_
type str - Type of aggregation. Valid values:
physical,vxlan. - algorithm str
- Frame distribution algorithm. Valid values:
L2,L3,L4. - alias str
- Alias will be displayed with the interface name to make it easier to distinguish.
- allowaccesses Sequence[str]
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - annex str
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - ap_
discover str - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - arpforward str
- Enable/disable ARP forwarding. Valid values:
disable,enable. - atm_
protocol str - ATM protocol. Valid values:
none,ipoa. - auth_
cert str - HTTPS server certificate.
- auth_
portal_ straddr - Address of captive portal.
- auth_
type str - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - auto_
auth_ strextension_ device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - bandwidth_
measure_ floattime - Bandwidth-Measure-Time.
- bfd str
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - bfd_
desired_ floatmin_ tx - BFD desired minimal transmit interval.
- bfd_
detect_ floatmult - BFD detection multiplier.
- bfd_
required_ floatmin_ rx - BFD required minimal receive interval.
- broadcast_
forticlient_ strdiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - broadcast_
forward str - Enable/disable broadcast forwarding. Valid values:
disable,enable. - captive_
portal float - Enable/disable captive portal.
- cli_
conn_ floatstatus - Cli-Conn-Status.
- color float
- Color of icon on the GUI.
- ddns str
- Ddns. Valid values:
disable,enable. - ddns_
auth str - Ddns-Auth. Valid values:
disable,tsig. - ddns_
domain str - Ddns-Domain.
- ddns_
key str - Ddns-Key.
- ddns_
keyname str - Ddns-Keyname.
- ddns_
passwords Sequence[str] - Ddns-Password.
- ddns_
server str - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - ddns_
server_ strip - Ddns-Server-Ip.
- ddns_
sn str - Ddns-Sn.
- ddns_
ttl float - Ddns-Ttl.
- ddns_
username str - Ddns-Username.
- ddns_
zone str - Ddns-Zone.
- dedicated_
to str - Configure interface for single purpose. Valid values:
none,management. - default_
purdue_ strlevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - defaultgw str
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - description str
- Description.
- detected_
peer_ floatmtu - Detected-Peer-Mtu.
- detectprotocols Sequence[str]
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver str
- Gateway's ping server for this IP.
- device_
access_ strlist - Device access list.
- device_
identification str - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device_
identification_ stractive_ scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device_
netscan str - Device-Netscan. Valid values:
disable,enable. - device_
user_ stridentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - devindex float
- Devindex.
- dhcp_
broadcast_ strflag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - dhcp_
classless_ strroute_ addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - dhcp_
client_ stridentifier - DHCP client identifier.
- dhcp_
relay_ stragent_ option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - dhcp_
relay_ strcircuit_ id - DHCP relay circuit ID.
- dhcp_
relay_ strinterface - Specify outgoing interface to reach server.
- dhcp_
relay_ strinterface_ select_ method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - dhcp_
relay_ Sequence[str]ips - DHCP relay IP address.
- dhcp_
relay_ strlink_ selection - DHCP relay link selection.
- dhcp_
relay_ strrequest_ all_ server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - dhcp_
relay_ strservice - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - dhcp_
relay_ strsource_ ip - IP address used by the DHCP relay as its source IP.
- dhcp_
relay_ strtype - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - dhcp_
renew_ floattime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- dhcp_
smart_ strrelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - disc_
retry_ floattimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- disconnect_
threshold float - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- distance float
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- dns_
query str - Dns-Query. Valid values:
disable,recursive,non-recursive. - dns_
server_ stroverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - dns_
server_ Sequence[str]protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - drop_
fragment str - Enable/disable drop fragment packets. Valid values:
disable,enable. - drop_
overlapped_ strfragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - dynamic_
sort_ strsubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- eap_
ca_ Sequence[str]certs - Eap-Ca-Cert.
- eap_
identity str - Eap-Identity.
- eap_
method str - Eap-Method. Valid values:
tls,peap. - eap_
passwords Sequence[str] - Eap-Password.
- eap_
supplicant str - Eap-Supplicant. Valid values:
disable,enable. - eap_
user_ Sequence[str]certs - Eap-User-Cert.
- egress_
cos str - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - egress_
shaping_ strprofile - Outgoing traffic shaping profile.
- eip str
- Eip.
- endpoint_
compliance str - Endpoint-Compliance. Valid values:
disable,enable. - estimated_
downstream_ floatbandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- estimated_
upstream_ floatbandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- explicit_
ftp_ strproxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - explicit_
web_ strproxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - external str
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - fail_
action_ stron_ extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - fail_
alert_ strinterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- fail_
alert_ strmethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - fail_
detect str - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - fail_
detect_ Sequence[str]options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - fdp str
- Fdp. Valid values:
disable,enable. - fortiheartbeat str
- Fortiheartbeat. Valid values:
disable,enable. - fortilink str
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - fortilink_
backup_ floatlink - Fortilink-Backup-Link.
- fortilink_
neighbor_ strdetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - fortilink_
split_ strinterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - fortilink_
stacking str - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - forward_
domain float - Transparent mode forward domain.
- forward_
error_ strcorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - fp_
anomalies Sequence[str] - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - fp_
disables Sequence[str] - Fp-Disable. Valid values:
all,ipsec,none. - gateway_
address str - Gateway address
- generic_
receive_ stroffload - Generic-Receive-Offload. Valid values:
disable,enable. - gi_
gk str - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - gwaddr str
- Gateway address
- gwdetect str
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha_
priority float - HA election priority for the PING server.
- icmp_
accept_ strredirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - icmp_
redirect str - Icmp-Redirect. Valid values:
disable,enable. - icmp_
send_ strredirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - ident_
accept str - Enable/disable authentication for this interface. Valid values:
disable,enable. - idle_
timeout float - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- if_
mdix str - If-Mdix. Valid values:
auto,normal,crossover. - if_
media str - If-Media. Valid values:
auto,copper,fiber. - ike_
saml_ Sequence[str]servers - Ike-Saml-Server.
- in_
force_ floatvlan_ cos - In-Force-Vlan-Cos.
- inbandwidth float
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- ingress_
cos str - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - ingress_
shaping_ strprofile - Incoming traffic shaping profile.
- ingress_
spillover_ floatthreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- interconnect_
profile str - Set interconnect profile. Valid values:
default,profile1,profile2. - internal float
- Implicitly created.
- ip str
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- ip_
managed_ strby_ fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - ipmac str
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - ips_
sniffer_ strmode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - ipunnumbered str
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- ipv6
Object
Fsp Vlan Interface Ipv6Args - Ipv6. The structure of
ipv6block is documented below. - l2forward str
- Enable/disable l2 forwarding. Valid values:
disable,enable. - l2tp_
client str - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - lacp_
ha_ strsecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - lacp_
ha_ strslave - LACP HA slave. Valid values:
disable,enable. - lacp_
mode str - LACP mode. Valid values:
static,passive,active. - lacp_
speed str - How often the interface sends LACP messages. Valid values:
slow,fast. - large_
receive_ stroffload - Large-Receive-Offload. Valid values:
disable,enable. - lcp_
echo_ floatinterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- lcp_
max_ floatecho_ fails - Maximum missed LCP echo messages before disconnect.
- link_
up_ floatdelay - Number of milliseconds to wait before considering a link is up.
- listen_
forticlient_ strconnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - lldp_
network_ strpolicy - LLDP-MED network policy profile.
- lldp_
reception str - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - lldp_
transmission str - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - log str
- Log. Valid values:
disable,enable. - macaddr str
- Change the interface's MAC address.
- managed_
subnetwork_ strsize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - management_
ip str - High Availability in-band management IP address of this interface.
- max_
egress_ floatburst_ rate - Max egress burst rate (kbits per sec).
- max_
egress_ floatrate - Max egress rate (kbits per sec).
- measured_
downstream_ floatbandwidth - Measured-Downstream-Bandwidth.
- measured_
upstream_ floatbandwidth - Measured-Upstream-Bandwidth.
- mediatype str
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - member str
- Physical interfaces that belong to the aggregate or redundant interface.
- min_
links float - Minimum number of aggregated ports that must be up.
- min_
links_ strdown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - mirroring_
direction str - Port mirroring direction. Valid values:
rx,tx,both. - mirroring_
port str - Mirroring port.
- mode str
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - monitor_
bandwidth str - Monitor-Bandwidth. Valid values:
disable,enable. - mtu float
- MTU value for this interface.
- mtu_
override str - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - mux_
type str - Multiplexer type Valid values:
llc-encaps,vc-encaps. - name str
- Name.
- ndiscforward str
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - netbios_
forward str - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - netflow_
sampler str - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - np_
qos_ floatprofile - NP QoS profile ID.
- npu_
fastpath str - Npu-Fastpath. Valid values:
disable,enable. - nst str
- Nst. Valid values:
disable,enable. - object_
fsp_ strvlan_ interface_ id - an identifier for the resource.
- out_
force_ floatvlan_ cos - Out-Force-Vlan-Cos.
- outbandwidth float
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- padt_
retry_ floattimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- passwords Sequence[str]
- PPPoE account's password.
- peer_
interface str - Peer-Interface.
- phy_
mode str - DSL physical mode. Valid values:
auto,adsl,vdsl. - ping_
serv_ floatstatus - Ping-Serv-Status.
- poe str
- Enable/disable PoE status. Valid values:
disable,enable. - polling_
interval float - sFlow polling interval (1 - 255 sec).
- port_
mirroring str - Enable/disable NP port mirroring. Valid values:
disable,enable. - pppoe_
unnumbered_ strnegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - pptp_
auth_ strtype - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - pptp_
client str - Enable/disable PPTP client. Valid values:
disable,enable. - pptp_
passwords Sequence[str] - PPTP password.
- pptp_
server_ strip - PPTP server IP address.
- pptp_
timeout float - Idle timer in minutes (0 for disabled).
- pptp_
user str - PPTP user name.
- preserve_
session_ strroute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - priority float
- Priority of the virtual router (1 - 255).
- priority_
override str - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - proxy_
captive_ strportal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - pvc_
atm_ strqos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - pvc_
chan float - SFP-DSL ADSL Fallback PVC Channel.
- pvc_
crc float - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- pvc_
pcr float - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- pvc_
scr float - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- pvc_
vlan_ floatid - SFP-DSL ADSL Fallback PVC VLAN ID.
- pvc_
vlan_ floatrx_ id - SFP-DSL ADSL Fallback PVC VLANID RX.
- pvc_
vlan_ strrx_ op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - pvc_
vlan_ floattx_ id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- pvc_
vlan_ strtx_ op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - reachable_
time float - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- redundant_
interface str - Redundant-Interface.
- remote_
ip str - Remote IP address of tunnel.
- replacemsg_
override_ strgroup - Replacement message override group.
- retransmission str
- Enable/disable DSL retransmission. Valid values:
disable,enable. - ring_
rx float - RX ring size.
- ring_
tx float - TX ring size.
- role str
- Interface role. Valid values:
lan,wan,dmz,undefined. - sample_
direction str - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - sample_
rate float - sFlow sample rate (10 - 99999).
- scan_
botnet_ strconnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - scopetype str
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary_
ip str - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - secondaryips
Sequence[Object
Fsp Vlan Interface Secondaryip Args] - Secondaryip. The structure of
secondaryipblock is documented below. - security8021x_
dynamic_ floatvlan_ id - VLAN ID for virtual switch.
- security8021x_
master str - 802.1X master virtual-switch.
- security8021x_
member_ strmode - 802.1X member mode. Valid values:
disable,switch. - security8021x_
mode str - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - security_
exempt_ strlist - Name of security-exempt-list.
- security_
external_ strlogout - URL of external authentication logout server.
- security_
external_ strweb - URL of external authentication web server.
- security_
groups str - User groups that can authenticate with the captive portal.
- security_
mac_ strauth_ bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - security_
mode str - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - security_
redirect_ strurl - URL redirection after disclaimer/authentication.
- select_
profile30a35b str - Select-Profile-30A-35B. Valid values:
30A,35B. - service_
name str - PPPoE service name.
- sflow_
sampler str - Enable/disable sFlow on this interface. Valid values:
disable,enable. - sfp_
dsl str - Enable/disable SFP DSL. Valid values:
disable,enable. - sfp_
dsl_ stradsl_ fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - sfp_
dsl_ strautodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - sfp_
dsl_ strmac - SFP DSL MAC address.
- speed str
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - spillover_
threshold float - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- src_
check str - Enable/disable source IP check. Valid values:
disable,enable. - status str
- Enable/disable VRRP. Valid values:
disable,enable. - stp str
- Enable/disable STP. Valid values:
disable,enable. - stp_
edge str - Enable/disable as STP edge port. Valid values:
disable,enable. - stp_
ha_ strsecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - stp_
ha_ strslave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - stpforward str
- Enable/disable STP forwarding. Valid values:
disable,enable. - stpforward_
mode str - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - strip_
priority_ strvlan_ tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - subst str
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - substitute_
dst_ strmac - Destination MAC address that all packets are sent to from this interface.
- sw_
algorithm str - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - swc_
first_ floatcreate - Swc-First-Create.
- swc_
vlan float - Swc-Vlan.
- switch str
- Switch.
- switch_
controller_ straccess_ vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - switch_
controller_ strarp_ inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - switch_
controller_ strauth - Switch-Controller-Auth. Valid values:
radius,usergroup. - switch_
controller_ strdhcp_ snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - switch_
controller_ strdhcp_ snooping_ option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - switch_
controller_ strdhcp_ snooping_ verify_ mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - switch_
controller_ strdynamic - Switch-Controller-Dynamic.
- switch_
controller_ strfeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - switch_
controller_ strigmp_ snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - switch_
controller_ strigmp_ snooping_ fast_ leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - switch_
controller_ strigmp_ snooping_ proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - switch_
controller_ striot_ scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - switch_
controller_ floatlearning_ limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- switch_
controller_ floatmgmt_ vlan - Switch-Controller-Mgmt-Vlan.
- switch_
controller_ strnac - Switch-Controller-Nac.
- switch_
controller_ strnetflow_ collect - NetFlow collection and processing. Valid values:
disable,enable. - switch_
controller_ stroffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - switch_
controller_ stroffload_ gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - switch_
controller_ stroffload_ ip - IP for routing offload on FortiSwitch.
- switch_
controller_ stroffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - switch_
controller_ stroffloading_ gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - switch_
controller_ stroffloading_ ip - Switch-Controller-Offloading-Ip.
- switch_
controller_ strradius_ server - Switch-Controller-Radius-Server.
- switch_
controller_ strrspan_ mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - switch_
controller_ strsource_ ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - switch_
controller_ strtraffic_ policy - Switch controller traffic policy for the VLAN.
- system_
id str - Define a system ID for the aggregate interface.
- system_
id_ strtype - Method in which system ID is generated. Valid values:
auto,user. - tc_
mode str - DSL transfer mode. Valid values:
ptm,atm. - tcp_
mss float - TCP maximum segment size. 0 means do not change segment size.
- trunk str
- Enable/disable VLAN trunk. Valid values:
disable,enable. - trust_
ip1 str - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust_
ip2 str - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust_
ip3 str - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust_
ip61 str - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust_
ip62 str - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust_
ip63 str - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- type str
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - username str
- Username of the PPPoE account, provided by your ISP.
- vci float
- Virtual Channel ID
- vectoring str
- Enable/disable DSL vectoring. Valid values:
disable,enable. - vindex float
- Vindex.
- vlan_
op_ strmode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - vlan_
protocol str - Vlan-Protocol. Valid values:
8021q,8021ad. - vlanforward str
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - vlanid float
- VLAN ID (1 - 4094).
- vpi float
- Virtual Path ID
- vrf float
- Virtual Routing Forwarding ID.
- vrrp_
virtual_ strmac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - vrrps
Sequence[Object
Fsp Vlan Interface Vrrp Args] - Vrrp. The structure of
vrrpblock is documented below. - wccp str
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - weight float
- Default weight for static routes (if route has no weight configured).
- wifi5g_
threshold str - Minimal signal strength to be considered as a good 5G AP.
- wifi_
acl str - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - wifi_
ap_ strband - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - wifi_
auth str - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - wifi_
auto_ strconnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - wifi_
auto_ strsave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - wifi_
broadcast_ strssid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - wifi_
dns_ strserver1 - DNS server 1.
- wifi_
dns_ strserver2 - DNS server 2.
- wifi_
encrypt str - Data encryption. Valid values:
TKIP,AES. - wifi_
fragment_ floatthreshold - WiFi fragment threshold (800 - 2346).
- wifi_
gateway str - IPv4 default gateway IP address.
- wifi_
keyindex float - WEP key index (1 - 4).
- wifi_
keys Sequence[str] - WiFi WEP Key.
- wifi_
mac_ strfilter - Enable/disable MAC filter status. Valid values:
disable,enable. - wifi_
passphrases Sequence[str] - WiFi pre-shared key for WPA.
- wifi_
radius_ strserver - WiFi RADIUS server for WPA.
- wifi_
rts_ floatthreshold - WiFi RTS threshold (256 - 2346).
- wifi_
security str - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - wifi_
ssid str - IEEE 802.11 Service Set Identifier.
- wifi_
usergroup str - WiFi user group for WPA.
- wins_
ip str - WINS server IP.
- vlan String
- Vlan.
- ac
Name String - PPPoE server name.
- adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - aggregate String
- Aggregate.
- aggregate
Type String - Type of aggregation. Valid values:
physical,vxlan. - algorithm String
- Frame distribution algorithm. Valid values:
L2,L3,L4. - alias String
- Alias will be displayed with the interface name to make it easier to distinguish.
- allowaccesses List<String>
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - annex String
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - ap
Discover String - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - arpforward String
- Enable/disable ARP forwarding. Valid values:
disable,enable. - atm
Protocol String - ATM protocol. Valid values:
none,ipoa. - auth
Cert String - HTTPS server certificate.
- auth
Portal StringAddr - Address of captive portal.
- auth
Type String - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - auto
Auth StringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - bandwidth
Measure NumberTime - Bandwidth-Measure-Time.
- bfd String
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - bfd
Desired NumberMin Tx - BFD desired minimal transmit interval.
- bfd
Detect NumberMult - BFD detection multiplier.
- bfd
Required NumberMin Rx - BFD required minimal receive interval.
- broadcast
Forticlient StringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - broadcast
Forward String - Enable/disable broadcast forwarding. Valid values:
disable,enable. - captive
Portal Number - Enable/disable captive portal.
- cli
Conn NumberStatus - Cli-Conn-Status.
- color Number
- Color of icon on the GUI.
- ddns String
- Ddns. Valid values:
disable,enable. - ddns
Auth String - Ddns-Auth. Valid values:
disable,tsig. - ddns
Domain String - Ddns-Domain.
- ddns
Key String - Ddns-Key.
- ddns
Keyname String - Ddns-Keyname.
- ddns
Passwords List<String> - Ddns-Password.
- ddns
Server String - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - ddns
Server StringIp - Ddns-Server-Ip.
- ddns
Sn String - Ddns-Sn.
- ddns
Ttl Number - Ddns-Ttl.
- ddns
Username String - Ddns-Username.
- ddns
Zone String - Ddns-Zone.
- dedicated
To String - Configure interface for single purpose. Valid values:
none,management. - default
Purdue StringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - defaultgw String
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - description String
- Description.
- detected
Peer NumberMtu - Detected-Peer-Mtu.
- detectprotocols List<String>
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver String
- Gateway's ping server for this IP.
- device
Access StringList - Device access list.
- device
Identification String - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Identification StringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Netscan String - Device-Netscan. Valid values:
disable,enable. - device
User StringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - devindex Number
- Devindex.
- dhcp
Broadcast StringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - dhcp
Classless StringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - dhcp
Client StringIdentifier - DHCP client identifier.
- dhcp
Relay StringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - dhcp
Relay StringCircuit Id - DHCP relay circuit ID.
- dhcp
Relay StringInterface - Specify outgoing interface to reach server.
- dhcp
Relay StringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - dhcp
Relay List<String>Ips - DHCP relay IP address.
- dhcp
Relay StringLink Selection - DHCP relay link selection.
- dhcp
Relay StringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - dhcp
Relay StringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - dhcp
Relay StringSource Ip - IP address used by the DHCP relay as its source IP.
- dhcp
Relay StringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - dhcp
Renew NumberTime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- dhcp
Smart StringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - disc
Retry NumberTimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- disconnect
Threshold Number - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- distance Number
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- dns
Query String - Dns-Query. Valid values:
disable,recursive,non-recursive. - dns
Server StringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - dns
Server List<String>Protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - drop
Fragment String - Enable/disable drop fragment packets. Valid values:
disable,enable. - drop
Overlapped StringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - dynamic
Sort StringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- eap
Ca List<String>Certs - Eap-Ca-Cert.
- eap
Identity String - Eap-Identity.
- eap
Method String - Eap-Method. Valid values:
tls,peap. - eap
Passwords List<String> - Eap-Password.
- eap
Supplicant String - Eap-Supplicant. Valid values:
disable,enable. - eap
User List<String>Certs - Eap-User-Cert.
- egress
Cos String - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - egress
Shaping StringProfile - Outgoing traffic shaping profile.
- eip String
- Eip.
- endpoint
Compliance String - Endpoint-Compliance. Valid values:
disable,enable. - estimated
Downstream NumberBandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- estimated
Upstream NumberBandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- explicit
Ftp StringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - explicit
Web StringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - external String
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - fail
Action StringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - fail
Alert StringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- fail
Alert StringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - fail
Detect String - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - fail
Detect List<String>Options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - fdp String
- Fdp. Valid values:
disable,enable. - fortiheartbeat String
- Fortiheartbeat. Valid values:
disable,enable. - fortilink String
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - fortilink
Backup NumberLink - Fortilink-Backup-Link.
- fortilink
Neighbor StringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - fortilink
Split StringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - fortilink
Stacking String - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - forward
Domain Number - Transparent mode forward domain.
- forward
Error StringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - fp
Anomalies List<String> - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - fp
Disables List<String> - Fp-Disable. Valid values:
all,ipsec,none. - gateway
Address String - Gateway address
- generic
Receive StringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - gi
Gk String - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - gwaddr String
- Gateway address
- gwdetect String
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha
Priority Number - HA election priority for the PING server.
- icmp
Accept StringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - icmp
Redirect String - Icmp-Redirect. Valid values:
disable,enable. - icmp
Send StringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - ident
Accept String - Enable/disable authentication for this interface. Valid values:
disable,enable. - idle
Timeout Number - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- if
Mdix String - If-Mdix. Valid values:
auto,normal,crossover. - if
Media String - If-Media. Valid values:
auto,copper,fiber. - ike
Saml List<String>Servers - Ike-Saml-Server.
- in
Force NumberVlan Cos - In-Force-Vlan-Cos.
- inbandwidth Number
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- ingress
Cos String - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - ingress
Shaping StringProfile - Incoming traffic shaping profile.
- ingress
Spillover NumberThreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- interconnect
Profile String - Set interconnect profile. Valid values:
default,profile1,profile2. - internal Number
- Implicitly created.
- ip String
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- ip
Managed StringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - ipmac String
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - ips
Sniffer StringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - ipunnumbered String
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- ipv6 Property Map
- Ipv6. The structure of
ipv6block is documented below. - l2forward String
- Enable/disable l2 forwarding. Valid values:
disable,enable. - l2tp
Client String - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - lacp
Ha StringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - lacp
Ha StringSlave - LACP HA slave. Valid values:
disable,enable. - lacp
Mode String - LACP mode. Valid values:
static,passive,active. - lacp
Speed String - How often the interface sends LACP messages. Valid values:
slow,fast. - large
Receive StringOffload - Large-Receive-Offload. Valid values:
disable,enable. - lcp
Echo NumberInterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- lcp
Max NumberEcho Fails - Maximum missed LCP echo messages before disconnect.
- link
Up NumberDelay - Number of milliseconds to wait before considering a link is up.
- listen
Forticlient StringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - lldp
Network StringPolicy - LLDP-MED network policy profile.
- lldp
Reception String - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - lldp
Transmission String - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - log String
- Log. Valid values:
disable,enable. - macaddr String
- Change the interface's MAC address.
- managed
Subnetwork StringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - management
Ip String - High Availability in-band management IP address of this interface.
- max
Egress NumberBurst Rate - Max egress burst rate (kbits per sec).
- max
Egress NumberRate - Max egress rate (kbits per sec).
- measured
Downstream NumberBandwidth - Measured-Downstream-Bandwidth.
- measured
Upstream NumberBandwidth - Measured-Upstream-Bandwidth.
- mediatype String
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - member String
- Physical interfaces that belong to the aggregate or redundant interface.
- min
Links Number - Minimum number of aggregated ports that must be up.
- min
Links StringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - mirroring
Direction String - Port mirroring direction. Valid values:
rx,tx,both. - mirroring
Port String - Mirroring port.
- mode String
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - monitor
Bandwidth String - Monitor-Bandwidth. Valid values:
disable,enable. - mtu Number
- MTU value for this interface.
- mtu
Override String - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - mux
Type String - Multiplexer type Valid values:
llc-encaps,vc-encaps. - name String
- Name.
- ndiscforward String
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - netbios
Forward String - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - netflow
Sampler String - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - np
Qos NumberProfile - NP QoS profile ID.
- npu
Fastpath String - Npu-Fastpath. Valid values:
disable,enable. - nst String
- Nst. Valid values:
disable,enable. - object
Fsp StringVlan Interface Id - an identifier for the resource.
- out
Force NumberVlan Cos - Out-Force-Vlan-Cos.
- outbandwidth Number
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- padt
Retry NumberTimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- passwords List<String>
- PPPoE account's password.
- peer
Interface String - Peer-Interface.
- phy
Mode String - DSL physical mode. Valid values:
auto,adsl,vdsl. - ping
Serv NumberStatus - Ping-Serv-Status.
- poe String
- Enable/disable PoE status. Valid values:
disable,enable. - polling
Interval Number - sFlow polling interval (1 - 255 sec).
- port
Mirroring String - Enable/disable NP port mirroring. Valid values:
disable,enable. - pppoe
Unnumbered StringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - pptp
Auth StringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - pptp
Client String - Enable/disable PPTP client. Valid values:
disable,enable. - pptp
Passwords List<String> - PPTP password.
- pptp
Server StringIp - PPTP server IP address.
- pptp
Timeout Number - Idle timer in minutes (0 for disabled).
- pptp
User String - PPTP user name.
- preserve
Session StringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - priority Number
- Priority of the virtual router (1 - 255).
- priority
Override String - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - proxy
Captive StringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - pvc
Atm StringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - pvc
Chan Number - SFP-DSL ADSL Fallback PVC Channel.
- pvc
Crc Number - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- pvc
Pcr Number - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- pvc
Scr Number - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- pvc
Vlan NumberId - SFP-DSL ADSL Fallback PVC VLAN ID.
- pvc
Vlan NumberRx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- pvc
Vlan StringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - pvc
Vlan NumberTx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- pvc
Vlan StringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - reachable
Time Number - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- redundant
Interface String - Redundant-Interface.
- remote
Ip String - Remote IP address of tunnel.
- replacemsg
Override StringGroup - Replacement message override group.
- retransmission String
- Enable/disable DSL retransmission. Valid values:
disable,enable. - ring
Rx Number - RX ring size.
- ring
Tx Number - TX ring size.
- role String
- Interface role. Valid values:
lan,wan,dmz,undefined. - sample
Direction String - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - sample
Rate Number - sFlow sample rate (10 - 99999).
- scan
Botnet StringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - scopetype String
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary
Ip String - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - secondaryips List<Property Map>
- Secondaryip. The structure of
secondaryipblock is documented below. - security8021x
Dynamic NumberVlan Id - VLAN ID for virtual switch.
- security8021x
Master String - 802.1X master virtual-switch.
- security8021x
Member StringMode - 802.1X member mode. Valid values:
disable,switch. - security8021x
Mode String - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - security
Exempt StringList - Name of security-exempt-list.
- security
External StringLogout - URL of external authentication logout server.
- security
External StringWeb - URL of external authentication web server.
- security
Groups String - User groups that can authenticate with the captive portal.
- security
Mac StringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - security
Mode String - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - security
Redirect StringUrl - URL redirection after disclaimer/authentication.
- select
Profile30a35b String - Select-Profile-30A-35B. Valid values:
30A,35B. - service
Name String - PPPoE service name.
- sflow
Sampler String - Enable/disable sFlow on this interface. Valid values:
disable,enable. - sfp
Dsl String - Enable/disable SFP DSL. Valid values:
disable,enable. - sfp
Dsl StringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - sfp
Dsl StringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - sfp
Dsl StringMac - SFP DSL MAC address.
- speed String
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - spillover
Threshold Number - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- src
Check String - Enable/disable source IP check. Valid values:
disable,enable. - status String
- Enable/disable VRRP. Valid values:
disable,enable. - stp String
- Enable/disable STP. Valid values:
disable,enable. - stp
Edge String - Enable/disable as STP edge port. Valid values:
disable,enable. - stp
Ha StringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - stp
Ha StringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - stpforward String
- Enable/disable STP forwarding. Valid values:
disable,enable. - stpforward
Mode String - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - strip
Priority StringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - subst String
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - substitute
Dst StringMac - Destination MAC address that all packets are sent to from this interface.
- sw
Algorithm String - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - swc
First NumberCreate - Swc-First-Create.
- swc
Vlan Number - Swc-Vlan.
- switch String
- Switch.
- switch
Controller StringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - switch
Controller StringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - switch
Controller StringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - switch
Controller StringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - switch
Controller StringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - switch
Controller StringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - switch
Controller StringDynamic - Switch-Controller-Dynamic.
- switch
Controller StringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - switch
Controller StringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - switch
Controller StringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - switch
Controller StringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - switch
Controller StringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - switch
Controller NumberLearning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- switch
Controller NumberMgmt Vlan - Switch-Controller-Mgmt-Vlan.
- switch
Controller StringNac - Switch-Controller-Nac.
- switch
Controller StringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - switch
Controller StringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - switch
Controller StringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - switch
Controller StringOffload Ip - IP for routing offload on FortiSwitch.
- switch
Controller StringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - switch
Controller StringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - switch
Controller StringOffloading Ip - Switch-Controller-Offloading-Ip.
- switch
Controller StringRadius Server - Switch-Controller-Radius-Server.
- switch
Controller StringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - switch
Controller StringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - switch
Controller StringTraffic Policy - Switch controller traffic policy for the VLAN.
- system
Id String - Define a system ID for the aggregate interface.
- system
Id StringType - Method in which system ID is generated. Valid values:
auto,user. - tc
Mode String - DSL transfer mode. Valid values:
ptm,atm. - tcp
Mss Number - TCP maximum segment size. 0 means do not change segment size.
- trunk String
- Enable/disable VLAN trunk. Valid values:
disable,enable. - trust
Ip1 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip2 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip3 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip61 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip62 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip63 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- type String
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - username String
- Username of the PPPoE account, provided by your ISP.
- vci Number
- Virtual Channel ID
- vectoring String
- Enable/disable DSL vectoring. Valid values:
disable,enable. - vindex Number
- Vindex.
- vlan
Op StringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - vlan
Protocol String - Vlan-Protocol. Valid values:
8021q,8021ad. - vlanforward String
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - vlanid Number
- VLAN ID (1 - 4094).
- vpi Number
- Virtual Path ID
- vrf Number
- Virtual Routing Forwarding ID.
- vrrp
Virtual StringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - vrrps List<Property Map>
- Vrrp. The structure of
vrrpblock is documented below. - wccp String
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - weight Number
- Default weight for static routes (if route has no weight configured).
- wifi5g
Threshold String - Minimal signal strength to be considered as a good 5G AP.
- wifi
Acl String - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - wifi
Ap StringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - wifi
Auth String - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - wifi
Auto StringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - wifi
Auto StringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - wifi
Broadcast StringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - wifi
Dns StringServer1 - DNS server 1.
- wifi
Dns StringServer2 - DNS server 2.
- wifi
Encrypt String - Data encryption. Valid values:
TKIP,AES. - wifi
Fragment NumberThreshold - WiFi fragment threshold (800 - 2346).
- wifi
Gateway String - IPv4 default gateway IP address.
- wifi
Keyindex Number - WEP key index (1 - 4).
- wifi
Keys List<String> - WiFi WEP Key.
- wifi
Mac StringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - wifi
Passphrases List<String> - WiFi pre-shared key for WPA.
- wifi
Radius StringServer - WiFi RADIUS server for WPA.
- wifi
Rts NumberThreshold - WiFi RTS threshold (256 - 2346).
- wifi
Security String - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - wifi
Ssid String - IEEE 802.11 Service Set Identifier.
- wifi
Usergroup String - WiFi user group for WPA.
- wins
Ip String - WINS server IP.
Outputs
All input properties are implicitly available as output properties. Additionally, the ObjectFspVlanInterface resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing ObjectFspVlanInterface Resource
Get an existing ObjectFspVlanInterface resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ObjectFspVlanInterfaceState, opts?: CustomResourceOptions): ObjectFspVlanInterface@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
ac_name: Optional[str] = None,
adom: Optional[str] = None,
aggregate: Optional[str] = None,
aggregate_type: Optional[str] = None,
algorithm: Optional[str] = None,
alias: Optional[str] = None,
allowaccesses: Optional[Sequence[str]] = None,
annex: Optional[str] = None,
ap_discover: Optional[str] = None,
arpforward: Optional[str] = None,
atm_protocol: Optional[str] = None,
auth_cert: Optional[str] = None,
auth_portal_addr: Optional[str] = None,
auth_type: Optional[str] = None,
auto_auth_extension_device: Optional[str] = None,
bandwidth_measure_time: Optional[float] = None,
bfd: Optional[str] = None,
bfd_desired_min_tx: Optional[float] = None,
bfd_detect_mult: Optional[float] = None,
bfd_required_min_rx: Optional[float] = None,
broadcast_forticlient_discovery: Optional[str] = None,
broadcast_forward: Optional[str] = None,
captive_portal: Optional[float] = None,
cli_conn_status: Optional[float] = None,
color: Optional[float] = None,
ddns: Optional[str] = None,
ddns_auth: Optional[str] = None,
ddns_domain: Optional[str] = None,
ddns_key: Optional[str] = None,
ddns_keyname: Optional[str] = None,
ddns_passwords: Optional[Sequence[str]] = None,
ddns_server: Optional[str] = None,
ddns_server_ip: Optional[str] = None,
ddns_sn: Optional[str] = None,
ddns_ttl: Optional[float] = None,
ddns_username: Optional[str] = None,
ddns_zone: Optional[str] = None,
dedicated_to: Optional[str] = None,
default_purdue_level: Optional[str] = None,
defaultgw: Optional[str] = None,
description: Optional[str] = None,
detected_peer_mtu: Optional[float] = None,
detectprotocols: Optional[Sequence[str]] = None,
detectserver: Optional[str] = None,
device_access_list: Optional[str] = None,
device_identification: Optional[str] = None,
device_identification_active_scan: Optional[str] = None,
device_netscan: Optional[str] = None,
device_user_identification: Optional[str] = None,
devindex: Optional[float] = None,
dhcp_broadcast_flag: Optional[str] = None,
dhcp_classless_route_addition: Optional[str] = None,
dhcp_client_identifier: Optional[str] = None,
dhcp_relay_agent_option: Optional[str] = None,
dhcp_relay_circuit_id: Optional[str] = None,
dhcp_relay_interface: Optional[str] = None,
dhcp_relay_interface_select_method: Optional[str] = None,
dhcp_relay_ips: Optional[Sequence[str]] = None,
dhcp_relay_link_selection: Optional[str] = None,
dhcp_relay_request_all_server: Optional[str] = None,
dhcp_relay_service: Optional[str] = None,
dhcp_relay_source_ip: Optional[str] = None,
dhcp_relay_type: Optional[str] = None,
dhcp_renew_time: Optional[float] = None,
dhcp_smart_relay: Optional[str] = None,
disc_retry_timeout: Optional[float] = None,
disconnect_threshold: Optional[float] = None,
distance: Optional[float] = None,
dns_query: Optional[str] = None,
dns_server_override: Optional[str] = None,
dns_server_protocols: Optional[Sequence[str]] = None,
drop_fragment: Optional[str] = None,
drop_overlapped_fragment: Optional[str] = None,
dynamic_sort_subtable: Optional[str] = None,
eap_ca_certs: Optional[Sequence[str]] = None,
eap_identity: Optional[str] = None,
eap_method: Optional[str] = None,
eap_passwords: Optional[Sequence[str]] = None,
eap_supplicant: Optional[str] = None,
eap_user_certs: Optional[Sequence[str]] = None,
egress_cos: Optional[str] = None,
egress_shaping_profile: Optional[str] = None,
eip: Optional[str] = None,
endpoint_compliance: Optional[str] = None,
estimated_downstream_bandwidth: Optional[float] = None,
estimated_upstream_bandwidth: Optional[float] = None,
explicit_ftp_proxy: Optional[str] = None,
explicit_web_proxy: Optional[str] = None,
external: Optional[str] = None,
fail_action_on_extender: Optional[str] = None,
fail_alert_interfaces: Optional[str] = None,
fail_alert_method: Optional[str] = None,
fail_detect: Optional[str] = None,
fail_detect_options: Optional[Sequence[str]] = None,
fdp: Optional[str] = None,
fortiheartbeat: Optional[str] = None,
fortilink: Optional[str] = None,
fortilink_backup_link: Optional[float] = None,
fortilink_neighbor_detect: Optional[str] = None,
fortilink_split_interface: Optional[str] = None,
fortilink_stacking: Optional[str] = None,
forward_domain: Optional[float] = None,
forward_error_correction: Optional[str] = None,
fp_anomalies: Optional[Sequence[str]] = None,
fp_disables: Optional[Sequence[str]] = None,
gateway_address: Optional[str] = None,
generic_receive_offload: Optional[str] = None,
gi_gk: Optional[str] = None,
gwaddr: Optional[str] = None,
gwdetect: Optional[str] = None,
ha_priority: Optional[float] = None,
icmp_accept_redirect: Optional[str] = None,
icmp_redirect: Optional[str] = None,
icmp_send_redirect: Optional[str] = None,
ident_accept: Optional[str] = None,
idle_timeout: Optional[float] = None,
if_mdix: Optional[str] = None,
if_media: Optional[str] = None,
ike_saml_servers: Optional[Sequence[str]] = None,
in_force_vlan_cos: Optional[float] = None,
inbandwidth: Optional[float] = None,
ingress_cos: Optional[str] = None,
ingress_shaping_profile: Optional[str] = None,
ingress_spillover_threshold: Optional[float] = None,
interconnect_profile: Optional[str] = None,
internal: Optional[float] = None,
ip: Optional[str] = None,
ip_managed_by_fortiipam: Optional[str] = None,
ipmac: Optional[str] = None,
ips_sniffer_mode: Optional[str] = None,
ipunnumbered: Optional[str] = None,
ipv6: Optional[ObjectFspVlanInterfaceIpv6Args] = None,
l2forward: Optional[str] = None,
l2tp_client: Optional[str] = None,
lacp_ha_secondary: Optional[str] = None,
lacp_ha_slave: Optional[str] = None,
lacp_mode: Optional[str] = None,
lacp_speed: Optional[str] = None,
large_receive_offload: Optional[str] = None,
lcp_echo_interval: Optional[float] = None,
lcp_max_echo_fails: Optional[float] = None,
link_up_delay: Optional[float] = None,
listen_forticlient_connection: Optional[str] = None,
lldp_network_policy: Optional[str] = None,
lldp_reception: Optional[str] = None,
lldp_transmission: Optional[str] = None,
log: Optional[str] = None,
macaddr: Optional[str] = None,
managed_subnetwork_size: Optional[str] = None,
management_ip: Optional[str] = None,
max_egress_burst_rate: Optional[float] = None,
max_egress_rate: Optional[float] = None,
measured_downstream_bandwidth: Optional[float] = None,
measured_upstream_bandwidth: Optional[float] = None,
mediatype: Optional[str] = None,
member: Optional[str] = None,
min_links: Optional[float] = None,
min_links_down: Optional[str] = None,
mirroring_direction: Optional[str] = None,
mirroring_port: Optional[str] = None,
mode: Optional[str] = None,
monitor_bandwidth: Optional[str] = None,
mtu: Optional[float] = None,
mtu_override: Optional[str] = None,
mux_type: Optional[str] = None,
name: Optional[str] = None,
ndiscforward: Optional[str] = None,
netbios_forward: Optional[str] = None,
netflow_sampler: Optional[str] = None,
np_qos_profile: Optional[float] = None,
npu_fastpath: Optional[str] = None,
nst: Optional[str] = None,
object_fsp_vlan_interface_id: Optional[str] = None,
out_force_vlan_cos: Optional[float] = None,
outbandwidth: Optional[float] = None,
padt_retry_timeout: Optional[float] = None,
passwords: Optional[Sequence[str]] = None,
peer_interface: Optional[str] = None,
phy_mode: Optional[str] = None,
ping_serv_status: Optional[float] = None,
poe: Optional[str] = None,
polling_interval: Optional[float] = None,
port_mirroring: Optional[str] = None,
pppoe_unnumbered_negotiate: Optional[str] = None,
pptp_auth_type: Optional[str] = None,
pptp_client: Optional[str] = None,
pptp_passwords: Optional[Sequence[str]] = None,
pptp_server_ip: Optional[str] = None,
pptp_timeout: Optional[float] = None,
pptp_user: Optional[str] = None,
preserve_session_route: Optional[str] = None,
priority: Optional[float] = None,
priority_override: Optional[str] = None,
proxy_captive_portal: Optional[str] = None,
pvc_atm_qos: Optional[str] = None,
pvc_chan: Optional[float] = None,
pvc_crc: Optional[float] = None,
pvc_pcr: Optional[float] = None,
pvc_scr: Optional[float] = None,
pvc_vlan_id: Optional[float] = None,
pvc_vlan_rx_id: Optional[float] = None,
pvc_vlan_rx_op: Optional[str] = None,
pvc_vlan_tx_id: Optional[float] = None,
pvc_vlan_tx_op: Optional[str] = None,
reachable_time: Optional[float] = None,
redundant_interface: Optional[str] = None,
remote_ip: Optional[str] = None,
replacemsg_override_group: Optional[str] = None,
retransmission: Optional[str] = None,
ring_rx: Optional[float] = None,
ring_tx: Optional[float] = None,
role: Optional[str] = None,
sample_direction: Optional[str] = None,
sample_rate: Optional[float] = None,
scan_botnet_connections: Optional[str] = None,
scopetype: Optional[str] = None,
secondary_ip: Optional[str] = None,
secondaryips: Optional[Sequence[ObjectFspVlanInterfaceSecondaryipArgs]] = None,
security8021x_dynamic_vlan_id: Optional[float] = None,
security8021x_master: Optional[str] = None,
security8021x_member_mode: Optional[str] = None,
security8021x_mode: Optional[str] = None,
security_exempt_list: Optional[str] = None,
security_external_logout: Optional[str] = None,
security_external_web: Optional[str] = None,
security_groups: Optional[str] = None,
security_mac_auth_bypass: Optional[str] = None,
security_mode: Optional[str] = None,
security_redirect_url: Optional[str] = None,
select_profile30a35b: Optional[str] = None,
service_name: Optional[str] = None,
sflow_sampler: Optional[str] = None,
sfp_dsl: Optional[str] = None,
sfp_dsl_adsl_fallback: Optional[str] = None,
sfp_dsl_autodetect: Optional[str] = None,
sfp_dsl_mac: Optional[str] = None,
speed: Optional[str] = None,
spillover_threshold: Optional[float] = None,
src_check: Optional[str] = None,
status: Optional[str] = None,
stp: Optional[str] = None,
stp_edge: Optional[str] = None,
stp_ha_secondary: Optional[str] = None,
stp_ha_slave: Optional[str] = None,
stpforward: Optional[str] = None,
stpforward_mode: Optional[str] = None,
strip_priority_vlan_tag: Optional[str] = None,
subst: Optional[str] = None,
substitute_dst_mac: Optional[str] = None,
sw_algorithm: Optional[str] = None,
swc_first_create: Optional[float] = None,
swc_vlan: Optional[float] = None,
switch: Optional[str] = None,
switch_controller_access_vlan: Optional[str] = None,
switch_controller_arp_inspection: Optional[str] = None,
switch_controller_auth: Optional[str] = None,
switch_controller_dhcp_snooping: Optional[str] = None,
switch_controller_dhcp_snooping_option82: Optional[str] = None,
switch_controller_dhcp_snooping_verify_mac: Optional[str] = None,
switch_controller_dynamic: Optional[str] = None,
switch_controller_feature: Optional[str] = None,
switch_controller_igmp_snooping: Optional[str] = None,
switch_controller_igmp_snooping_fast_leave: Optional[str] = None,
switch_controller_igmp_snooping_proxy: Optional[str] = None,
switch_controller_iot_scanning: Optional[str] = None,
switch_controller_learning_limit: Optional[float] = None,
switch_controller_mgmt_vlan: Optional[float] = None,
switch_controller_nac: Optional[str] = None,
switch_controller_netflow_collect: Optional[str] = None,
switch_controller_offload: Optional[str] = None,
switch_controller_offload_gw: Optional[str] = None,
switch_controller_offload_ip: Optional[str] = None,
switch_controller_offloading: Optional[str] = None,
switch_controller_offloading_gw: Optional[str] = None,
switch_controller_offloading_ip: Optional[str] = None,
switch_controller_radius_server: Optional[str] = None,
switch_controller_rspan_mode: Optional[str] = None,
switch_controller_source_ip: Optional[str] = None,
switch_controller_traffic_policy: Optional[str] = None,
system_id: Optional[str] = None,
system_id_type: Optional[str] = None,
tc_mode: Optional[str] = None,
tcp_mss: Optional[float] = None,
trunk: Optional[str] = None,
trust_ip1: Optional[str] = None,
trust_ip2: Optional[str] = None,
trust_ip3: Optional[str] = None,
trust_ip61: Optional[str] = None,
trust_ip62: Optional[str] = None,
trust_ip63: Optional[str] = None,
type: Optional[str] = None,
username: Optional[str] = None,
vci: Optional[float] = None,
vectoring: Optional[str] = None,
vindex: Optional[float] = None,
vlan: Optional[str] = None,
vlan_op_mode: Optional[str] = None,
vlan_protocol: Optional[str] = None,
vlanforward: Optional[str] = None,
vlanid: Optional[float] = None,
vpi: Optional[float] = None,
vrf: Optional[float] = None,
vrrp_virtual_mac: Optional[str] = None,
vrrps: Optional[Sequence[ObjectFspVlanInterfaceVrrpArgs]] = None,
wccp: Optional[str] = None,
weight: Optional[float] = None,
wifi5g_threshold: Optional[str] = None,
wifi_acl: Optional[str] = None,
wifi_ap_band: Optional[str] = None,
wifi_auth: Optional[str] = None,
wifi_auto_connect: Optional[str] = None,
wifi_auto_save: Optional[str] = None,
wifi_broadcast_ssid: Optional[str] = None,
wifi_dns_server1: Optional[str] = None,
wifi_dns_server2: Optional[str] = None,
wifi_encrypt: Optional[str] = None,
wifi_fragment_threshold: Optional[float] = None,
wifi_gateway: Optional[str] = None,
wifi_keyindex: Optional[float] = None,
wifi_keys: Optional[Sequence[str]] = None,
wifi_mac_filter: Optional[str] = None,
wifi_passphrases: Optional[Sequence[str]] = None,
wifi_radius_server: Optional[str] = None,
wifi_rts_threshold: Optional[float] = None,
wifi_security: Optional[str] = None,
wifi_ssid: Optional[str] = None,
wifi_usergroup: Optional[str] = None,
wins_ip: Optional[str] = None) -> ObjectFspVlanInterfacefunc GetObjectFspVlanInterface(ctx *Context, name string, id IDInput, state *ObjectFspVlanInterfaceState, opts ...ResourceOption) (*ObjectFspVlanInterface, error)public static ObjectFspVlanInterface Get(string name, Input<string> id, ObjectFspVlanInterfaceState? state, CustomResourceOptions? opts = null)public static ObjectFspVlanInterface get(String name, Output<String> id, ObjectFspVlanInterfaceState state, CustomResourceOptions options)resources: _: type: fortimanager:ObjectFspVlanInterface get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Ac
Name string - PPPoE server name.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Aggregate string
- Aggregate.
- Aggregate
Type string - Type of aggregation. Valid values:
physical,vxlan. - Algorithm string
- Frame distribution algorithm. Valid values:
L2,L3,L4. - Alias string
- Alias will be displayed with the interface name to make it easier to distinguish.
- Allowaccesses List<string>
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - Annex string
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - Ap
Discover string - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - Arpforward string
- Enable/disable ARP forwarding. Valid values:
disable,enable. - Atm
Protocol string - ATM protocol. Valid values:
none,ipoa. - Auth
Cert string - HTTPS server certificate.
- Auth
Portal stringAddr - Address of captive portal.
- Auth
Type string - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - Auto
Auth stringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - Bandwidth
Measure doubleTime - Bandwidth-Measure-Time.
- Bfd string
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - Bfd
Desired doubleMin Tx - BFD desired minimal transmit interval.
- Bfd
Detect doubleMult - BFD detection multiplier.
- Bfd
Required doubleMin Rx - BFD required minimal receive interval.
- Broadcast
Forticlient stringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - Broadcast
Forward string - Enable/disable broadcast forwarding. Valid values:
disable,enable. - Captive
Portal double - Enable/disable captive portal.
- Cli
Conn doubleStatus - Cli-Conn-Status.
- Color double
- Color of icon on the GUI.
- Ddns string
- Ddns. Valid values:
disable,enable. - Ddns
Auth string - Ddns-Auth. Valid values:
disable,tsig. - Ddns
Domain string - Ddns-Domain.
- Ddns
Key string - Ddns-Key.
- Ddns
Keyname string - Ddns-Keyname.
- Ddns
Passwords List<string> - Ddns-Password.
- Ddns
Server string - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - Ddns
Server stringIp - Ddns-Server-Ip.
- Ddns
Sn string - Ddns-Sn.
- Ddns
Ttl double - Ddns-Ttl.
- Ddns
Username string - Ddns-Username.
- Ddns
Zone string - Ddns-Zone.
- Dedicated
To string - Configure interface for single purpose. Valid values:
none,management. - Default
Purdue stringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - Defaultgw string
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - Description string
- Description.
- Detected
Peer doubleMtu - Detected-Peer-Mtu.
- Detectprotocols List<string>
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - Detectserver string
- Gateway's ping server for this IP.
- Device
Access stringList - Device access list.
- Device
Identification string - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - Device
Identification stringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - Device
Netscan string - Device-Netscan. Valid values:
disable,enable. - Device
User stringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - Devindex double
- Devindex.
- Dhcp
Broadcast stringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - Dhcp
Classless stringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - Dhcp
Client stringIdentifier - DHCP client identifier.
- Dhcp
Relay stringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - Dhcp
Relay stringCircuit Id - DHCP relay circuit ID.
- Dhcp
Relay stringInterface - Specify outgoing interface to reach server.
- Dhcp
Relay stringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - Dhcp
Relay List<string>Ips - DHCP relay IP address.
- Dhcp
Relay stringLink Selection - DHCP relay link selection.
- Dhcp
Relay stringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - Dhcp
Relay stringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - Dhcp
Relay stringSource Ip - IP address used by the DHCP relay as its source IP.
- Dhcp
Relay stringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - Dhcp
Renew doubleTime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- Dhcp
Smart stringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - Disc
Retry doubleTimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- Disconnect
Threshold double - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- Distance double
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- Dns
Query string - Dns-Query. Valid values:
disable,recursive,non-recursive. - Dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - Dns
Server List<string>Protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - Drop
Fragment string - Enable/disable drop fragment packets. Valid values:
disable,enable. - Drop
Overlapped stringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - Dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- Eap
Ca List<string>Certs - Eap-Ca-Cert.
- Eap
Identity string - Eap-Identity.
- Eap
Method string - Eap-Method. Valid values:
tls,peap. - Eap
Passwords List<string> - Eap-Password.
- Eap
Supplicant string - Eap-Supplicant. Valid values:
disable,enable. - Eap
User List<string>Certs - Eap-User-Cert.
- Egress
Cos string - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - Egress
Shaping stringProfile - Outgoing traffic shaping profile.
- Eip string
- Eip.
- Endpoint
Compliance string - Endpoint-Compliance. Valid values:
disable,enable. - Estimated
Downstream doubleBandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- Estimated
Upstream doubleBandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- Explicit
Ftp stringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - Explicit
Web stringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - External string
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - Fail
Action stringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - Fail
Alert stringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- Fail
Alert stringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - Fail
Detect string - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - Fail
Detect List<string>Options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - Fdp string
- Fdp. Valid values:
disable,enable. - Fortiheartbeat string
- Fortiheartbeat. Valid values:
disable,enable. - Fortilink string
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - Fortilink
Backup doubleLink - Fortilink-Backup-Link.
- Fortilink
Neighbor stringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - Fortilink
Split stringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - Fortilink
Stacking string - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - Forward
Domain double - Transparent mode forward domain.
- Forward
Error stringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - Fp
Anomalies List<string> - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - Fp
Disables List<string> - Fp-Disable. Valid values:
all,ipsec,none. - Gateway
Address string - Gateway address
- Generic
Receive stringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - Gi
Gk string - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - Gwaddr string
- Gateway address
- Gwdetect string
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - Ha
Priority double - HA election priority for the PING server.
- Icmp
Accept stringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - Icmp
Redirect string - Icmp-Redirect. Valid values:
disable,enable. - Icmp
Send stringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - Ident
Accept string - Enable/disable authentication for this interface. Valid values:
disable,enable. - Idle
Timeout double - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- If
Mdix string - If-Mdix. Valid values:
auto,normal,crossover. - If
Media string - If-Media. Valid values:
auto,copper,fiber. - Ike
Saml List<string>Servers - Ike-Saml-Server.
- In
Force doubleVlan Cos - In-Force-Vlan-Cos.
- Inbandwidth double
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- Ingress
Cos string - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - Ingress
Shaping stringProfile - Incoming traffic shaping profile.
- Ingress
Spillover doubleThreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- Interconnect
Profile string - Set interconnect profile. Valid values:
default,profile1,profile2. - Internal double
- Implicitly created.
- Ip string
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- Ip
Managed stringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - Ipmac string
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - Ips
Sniffer stringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - Ipunnumbered string
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- Ipv6
Object
Fsp Vlan Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - L2forward string
- Enable/disable l2 forwarding. Valid values:
disable,enable. - L2tp
Client string - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - Lacp
Ha stringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - Lacp
Ha stringSlave - LACP HA slave. Valid values:
disable,enable. - Lacp
Mode string - LACP mode. Valid values:
static,passive,active. - Lacp
Speed string - How often the interface sends LACP messages. Valid values:
slow,fast. - Large
Receive stringOffload - Large-Receive-Offload. Valid values:
disable,enable. - Lcp
Echo doubleInterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- Lcp
Max doubleEcho Fails - Maximum missed LCP echo messages before disconnect.
- Link
Up doubleDelay - Number of milliseconds to wait before considering a link is up.
- Listen
Forticlient stringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - Lldp
Network stringPolicy - LLDP-MED network policy profile.
- Lldp
Reception string - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - Lldp
Transmission string - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - Log string
- Log. Valid values:
disable,enable. - Macaddr string
- Change the interface's MAC address.
- Managed
Subnetwork stringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - Management
Ip string - High Availability in-band management IP address of this interface.
- Max
Egress doubleBurst Rate - Max egress burst rate (kbits per sec).
- Max
Egress doubleRate - Max egress rate (kbits per sec).
- Measured
Downstream doubleBandwidth - Measured-Downstream-Bandwidth.
- Measured
Upstream doubleBandwidth - Measured-Upstream-Bandwidth.
- Mediatype string
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - Member string
- Physical interfaces that belong to the aggregate or redundant interface.
- Min
Links double - Minimum number of aggregated ports that must be up.
- Min
Links stringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - Mirroring
Direction string - Port mirroring direction. Valid values:
rx,tx,both. - Mirroring
Port string - Mirroring port.
- Mode string
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - Monitor
Bandwidth string - Monitor-Bandwidth. Valid values:
disable,enable. - Mtu double
- MTU value for this interface.
- Mtu
Override string - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - Mux
Type string - Multiplexer type Valid values:
llc-encaps,vc-encaps. - Name string
- Name.
- Ndiscforward string
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - Netbios
Forward string - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - Netflow
Sampler string - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - Np
Qos doubleProfile - NP QoS profile ID.
- Npu
Fastpath string - Npu-Fastpath. Valid values:
disable,enable. - Nst string
- Nst. Valid values:
disable,enable. - Object
Fsp stringVlan Interface Id - an identifier for the resource.
- Out
Force doubleVlan Cos - Out-Force-Vlan-Cos.
- Outbandwidth double
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- Padt
Retry doubleTimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- Passwords List<string>
- PPPoE account's password.
- Peer
Interface string - Peer-Interface.
- Phy
Mode string - DSL physical mode. Valid values:
auto,adsl,vdsl. - Ping
Serv doubleStatus - Ping-Serv-Status.
- Poe string
- Enable/disable PoE status. Valid values:
disable,enable. - Polling
Interval double - sFlow polling interval (1 - 255 sec).
- Port
Mirroring string - Enable/disable NP port mirroring. Valid values:
disable,enable. - Pppoe
Unnumbered stringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - Pptp
Auth stringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - Pptp
Client string - Enable/disable PPTP client. Valid values:
disable,enable. - Pptp
Passwords List<string> - PPTP password.
- Pptp
Server stringIp - PPTP server IP address.
- Pptp
Timeout double - Idle timer in minutes (0 for disabled).
- Pptp
User string - PPTP user name.
- Preserve
Session stringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - Priority double
- Priority of the virtual router (1 - 255).
- Priority
Override string - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - Proxy
Captive stringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - Pvc
Atm stringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - Pvc
Chan double - SFP-DSL ADSL Fallback PVC Channel.
- Pvc
Crc double - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- Pvc
Pcr double - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- Pvc
Scr double - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- Pvc
Vlan doubleId - SFP-DSL ADSL Fallback PVC VLAN ID.
- Pvc
Vlan doubleRx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- Pvc
Vlan stringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - Pvc
Vlan doubleTx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- Pvc
Vlan stringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - Reachable
Time double - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- Redundant
Interface string - Redundant-Interface.
- Remote
Ip string - Remote IP address of tunnel.
- Replacemsg
Override stringGroup - Replacement message override group.
- Retransmission string
- Enable/disable DSL retransmission. Valid values:
disable,enable. - Ring
Rx double - RX ring size.
- Ring
Tx double - TX ring size.
- Role string
- Interface role. Valid values:
lan,wan,dmz,undefined. - Sample
Direction string - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - Sample
Rate double - sFlow sample rate (10 - 99999).
- Scan
Botnet stringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Secondary
Ip string - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - Secondaryips
List<Object
Fsp Vlan Interface Secondaryip> - Secondaryip. The structure of
secondaryipblock is documented below. - Security8021x
Dynamic doubleVlan Id - VLAN ID for virtual switch.
- Security8021x
Master string - 802.1X master virtual-switch.
- Security8021x
Member stringMode - 802.1X member mode. Valid values:
disable,switch. - Security8021x
Mode string - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - Security
Exempt stringList - Name of security-exempt-list.
- Security
External stringLogout - URL of external authentication logout server.
- Security
External stringWeb - URL of external authentication web server.
- Security
Groups string - User groups that can authenticate with the captive portal.
- Security
Mac stringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - Security
Mode string - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - Security
Redirect stringUrl - URL redirection after disclaimer/authentication.
- Select
Profile30a35b string - Select-Profile-30A-35B. Valid values:
30A,35B. - Service
Name string - PPPoE service name.
- Sflow
Sampler string - Enable/disable sFlow on this interface. Valid values:
disable,enable. - Sfp
Dsl string - Enable/disable SFP DSL. Valid values:
disable,enable. - Sfp
Dsl stringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - Sfp
Dsl stringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - Sfp
Dsl stringMac - SFP DSL MAC address.
- Speed string
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - Spillover
Threshold double - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- Src
Check string - Enable/disable source IP check. Valid values:
disable,enable. - Status string
- Enable/disable VRRP. Valid values:
disable,enable. - Stp string
- Enable/disable STP. Valid values:
disable,enable. - Stp
Edge string - Enable/disable as STP edge port. Valid values:
disable,enable. - Stp
Ha stringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - Stp
Ha stringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - Stpforward string
- Enable/disable STP forwarding. Valid values:
disable,enable. - Stpforward
Mode string - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - Strip
Priority stringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - Subst string
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - Substitute
Dst stringMac - Destination MAC address that all packets are sent to from this interface.
- Sw
Algorithm string - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - Swc
First doubleCreate - Swc-First-Create.
- Swc
Vlan double - Swc-Vlan.
- Switch string
- Switch.
- Switch
Controller stringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - Switch
Controller stringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - Switch
Controller stringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - Switch
Controller stringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - Switch
Controller stringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - Switch
Controller stringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - Switch
Controller stringDynamic - Switch-Controller-Dynamic.
- Switch
Controller stringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - Switch
Controller stringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - Switch
Controller stringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - Switch
Controller stringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - Switch
Controller stringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - Switch
Controller doubleLearning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- Switch
Controller doubleMgmt Vlan - Switch-Controller-Mgmt-Vlan.
- Switch
Controller stringNac - Switch-Controller-Nac.
- Switch
Controller stringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - Switch
Controller stringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - Switch
Controller stringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - Switch
Controller stringOffload Ip - IP for routing offload on FortiSwitch.
- Switch
Controller stringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - Switch
Controller stringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - Switch
Controller stringOffloading Ip - Switch-Controller-Offloading-Ip.
- Switch
Controller stringRadius Server - Switch-Controller-Radius-Server.
- Switch
Controller stringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - Switch
Controller stringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - Switch
Controller stringTraffic Policy - Switch controller traffic policy for the VLAN.
- System
Id string - Define a system ID for the aggregate interface.
- System
Id stringType - Method in which system ID is generated. Valid values:
auto,user. - Tc
Mode string - DSL transfer mode. Valid values:
ptm,atm. - Tcp
Mss double - TCP maximum segment size. 0 means do not change segment size.
- Trunk string
- Enable/disable VLAN trunk. Valid values:
disable,enable. - Trust
Ip1 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip2 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip3 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip61 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Trust
Ip62 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Trust
Ip63 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Type string
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - Username string
- Username of the PPPoE account, provided by your ISP.
- Vci double
- Virtual Channel ID
- Vectoring string
- Enable/disable DSL vectoring. Valid values:
disable,enable. - Vindex double
- Vindex.
- Vlan string
- Vlan.
- Vlan
Op stringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - Vlan
Protocol string - Vlan-Protocol. Valid values:
8021q,8021ad. - Vlanforward string
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - Vlanid double
- VLAN ID (1 - 4094).
- Vpi double
- Virtual Path ID
- Vrf double
- Virtual Routing Forwarding ID.
- Vrrp
Virtual stringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - Vrrps
List<Object
Fsp Vlan Interface Vrrp> - Vrrp. The structure of
vrrpblock is documented below. - Wccp string
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - Weight double
- Default weight for static routes (if route has no weight configured).
- Wifi5g
Threshold string - Minimal signal strength to be considered as a good 5G AP.
- Wifi
Acl string - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - Wifi
Ap stringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - Wifi
Auth string - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - Wifi
Auto stringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - Wifi
Auto stringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - Wifi
Broadcast stringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - Wifi
Dns stringServer1 - DNS server 1.
- Wifi
Dns stringServer2 - DNS server 2.
- Wifi
Encrypt string - Data encryption. Valid values:
TKIP,AES. - Wifi
Fragment doubleThreshold - WiFi fragment threshold (800 - 2346).
- Wifi
Gateway string - IPv4 default gateway IP address.
- Wifi
Keyindex double - WEP key index (1 - 4).
- Wifi
Keys List<string> - WiFi WEP Key.
- Wifi
Mac stringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - Wifi
Passphrases List<string> - WiFi pre-shared key for WPA.
- Wifi
Radius stringServer - WiFi RADIUS server for WPA.
- Wifi
Rts doubleThreshold - WiFi RTS threshold (256 - 2346).
- Wifi
Security string - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - Wifi
Ssid string - IEEE 802.11 Service Set Identifier.
- Wifi
Usergroup string - WiFi user group for WPA.
- Wins
Ip string - WINS server IP.
- Ac
Name string - PPPoE server name.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Aggregate string
- Aggregate.
- Aggregate
Type string - Type of aggregation. Valid values:
physical,vxlan. - Algorithm string
- Frame distribution algorithm. Valid values:
L2,L3,L4. - Alias string
- Alias will be displayed with the interface name to make it easier to distinguish.
- Allowaccesses []string
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - Annex string
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - Ap
Discover string - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - Arpforward string
- Enable/disable ARP forwarding. Valid values:
disable,enable. - Atm
Protocol string - ATM protocol. Valid values:
none,ipoa. - Auth
Cert string - HTTPS server certificate.
- Auth
Portal stringAddr - Address of captive portal.
- Auth
Type string - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - Auto
Auth stringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - Bandwidth
Measure float64Time - Bandwidth-Measure-Time.
- Bfd string
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - Bfd
Desired float64Min Tx - BFD desired minimal transmit interval.
- Bfd
Detect float64Mult - BFD detection multiplier.
- Bfd
Required float64Min Rx - BFD required minimal receive interval.
- Broadcast
Forticlient stringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - Broadcast
Forward string - Enable/disable broadcast forwarding. Valid values:
disable,enable. - Captive
Portal float64 - Enable/disable captive portal.
- Cli
Conn float64Status - Cli-Conn-Status.
- Color float64
- Color of icon on the GUI.
- Ddns string
- Ddns. Valid values:
disable,enable. - Ddns
Auth string - Ddns-Auth. Valid values:
disable,tsig. - Ddns
Domain string - Ddns-Domain.
- Ddns
Key string - Ddns-Key.
- Ddns
Keyname string - Ddns-Keyname.
- Ddns
Passwords []string - Ddns-Password.
- Ddns
Server string - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - Ddns
Server stringIp - Ddns-Server-Ip.
- Ddns
Sn string - Ddns-Sn.
- Ddns
Ttl float64 - Ddns-Ttl.
- Ddns
Username string - Ddns-Username.
- Ddns
Zone string - Ddns-Zone.
- Dedicated
To string - Configure interface for single purpose. Valid values:
none,management. - Default
Purdue stringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - Defaultgw string
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - Description string
- Description.
- Detected
Peer float64Mtu - Detected-Peer-Mtu.
- Detectprotocols []string
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - Detectserver string
- Gateway's ping server for this IP.
- Device
Access stringList - Device access list.
- Device
Identification string - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - Device
Identification stringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - Device
Netscan string - Device-Netscan. Valid values:
disable,enable. - Device
User stringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - Devindex float64
- Devindex.
- Dhcp
Broadcast stringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - Dhcp
Classless stringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - Dhcp
Client stringIdentifier - DHCP client identifier.
- Dhcp
Relay stringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - Dhcp
Relay stringCircuit Id - DHCP relay circuit ID.
- Dhcp
Relay stringInterface - Specify outgoing interface to reach server.
- Dhcp
Relay stringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - Dhcp
Relay []stringIps - DHCP relay IP address.
- Dhcp
Relay stringLink Selection - DHCP relay link selection.
- Dhcp
Relay stringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - Dhcp
Relay stringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - Dhcp
Relay stringSource Ip - IP address used by the DHCP relay as its source IP.
- Dhcp
Relay stringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - Dhcp
Renew float64Time - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- Dhcp
Smart stringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - Disc
Retry float64Timeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- Disconnect
Threshold float64 - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- Distance float64
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- Dns
Query string - Dns-Query. Valid values:
disable,recursive,non-recursive. - Dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - Dns
Server []stringProtocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - Drop
Fragment string - Enable/disable drop fragment packets. Valid values:
disable,enable. - Drop
Overlapped stringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - Dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- Eap
Ca []stringCerts - Eap-Ca-Cert.
- Eap
Identity string - Eap-Identity.
- Eap
Method string - Eap-Method. Valid values:
tls,peap. - Eap
Passwords []string - Eap-Password.
- Eap
Supplicant string - Eap-Supplicant. Valid values:
disable,enable. - Eap
User []stringCerts - Eap-User-Cert.
- Egress
Cos string - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - Egress
Shaping stringProfile - Outgoing traffic shaping profile.
- Eip string
- Eip.
- Endpoint
Compliance string - Endpoint-Compliance. Valid values:
disable,enable. - Estimated
Downstream float64Bandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- Estimated
Upstream float64Bandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- Explicit
Ftp stringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - Explicit
Web stringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - External string
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - Fail
Action stringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - Fail
Alert stringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- Fail
Alert stringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - Fail
Detect string - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - Fail
Detect []stringOptions - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - Fdp string
- Fdp. Valid values:
disable,enable. - Fortiheartbeat string
- Fortiheartbeat. Valid values:
disable,enable. - Fortilink string
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - Fortilink
Backup float64Link - Fortilink-Backup-Link.
- Fortilink
Neighbor stringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - Fortilink
Split stringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - Fortilink
Stacking string - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - Forward
Domain float64 - Transparent mode forward domain.
- Forward
Error stringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - Fp
Anomalies []string - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - Fp
Disables []string - Fp-Disable. Valid values:
all,ipsec,none. - Gateway
Address string - Gateway address
- Generic
Receive stringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - Gi
Gk string - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - Gwaddr string
- Gateway address
- Gwdetect string
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - Ha
Priority float64 - HA election priority for the PING server.
- Icmp
Accept stringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - Icmp
Redirect string - Icmp-Redirect. Valid values:
disable,enable. - Icmp
Send stringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - Ident
Accept string - Enable/disable authentication for this interface. Valid values:
disable,enable. - Idle
Timeout float64 - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- If
Mdix string - If-Mdix. Valid values:
auto,normal,crossover. - If
Media string - If-Media. Valid values:
auto,copper,fiber. - Ike
Saml []stringServers - Ike-Saml-Server.
- In
Force float64Vlan Cos - In-Force-Vlan-Cos.
- Inbandwidth float64
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- Ingress
Cos string - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - Ingress
Shaping stringProfile - Incoming traffic shaping profile.
- Ingress
Spillover float64Threshold - Ingress Spillover threshold (0 - 16776000 kbps).
- Interconnect
Profile string - Set interconnect profile. Valid values:
default,profile1,profile2. - Internal float64
- Implicitly created.
- Ip string
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- Ip
Managed stringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - Ipmac string
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - Ips
Sniffer stringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - Ipunnumbered string
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- Ipv6
Object
Fsp Vlan Interface Ipv6Type Args - Ipv6. The structure of
ipv6block is documented below. - L2forward string
- Enable/disable l2 forwarding. Valid values:
disable,enable. - L2tp
Client string - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - Lacp
Ha stringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - Lacp
Ha stringSlave - LACP HA slave. Valid values:
disable,enable. - Lacp
Mode string - LACP mode. Valid values:
static,passive,active. - Lacp
Speed string - How often the interface sends LACP messages. Valid values:
slow,fast. - Large
Receive stringOffload - Large-Receive-Offload. Valid values:
disable,enable. - Lcp
Echo float64Interval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- Lcp
Max float64Echo Fails - Maximum missed LCP echo messages before disconnect.
- Link
Up float64Delay - Number of milliseconds to wait before considering a link is up.
- Listen
Forticlient stringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - Lldp
Network stringPolicy - LLDP-MED network policy profile.
- Lldp
Reception string - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - Lldp
Transmission string - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - Log string
- Log. Valid values:
disable,enable. - Macaddr string
- Change the interface's MAC address.
- Managed
Subnetwork stringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - Management
Ip string - High Availability in-band management IP address of this interface.
- Max
Egress float64Burst Rate - Max egress burst rate (kbits per sec).
- Max
Egress float64Rate - Max egress rate (kbits per sec).
- Measured
Downstream float64Bandwidth - Measured-Downstream-Bandwidth.
- Measured
Upstream float64Bandwidth - Measured-Upstream-Bandwidth.
- Mediatype string
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - Member string
- Physical interfaces that belong to the aggregate or redundant interface.
- Min
Links float64 - Minimum number of aggregated ports that must be up.
- Min
Links stringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - Mirroring
Direction string - Port mirroring direction. Valid values:
rx,tx,both. - Mirroring
Port string - Mirroring port.
- Mode string
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - Monitor
Bandwidth string - Monitor-Bandwidth. Valid values:
disable,enable. - Mtu float64
- MTU value for this interface.
- Mtu
Override string - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - Mux
Type string - Multiplexer type Valid values:
llc-encaps,vc-encaps. - Name string
- Name.
- Ndiscforward string
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - Netbios
Forward string - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - Netflow
Sampler string - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - Np
Qos float64Profile - NP QoS profile ID.
- Npu
Fastpath string - Npu-Fastpath. Valid values:
disable,enable. - Nst string
- Nst. Valid values:
disable,enable. - Object
Fsp stringVlan Interface Id - an identifier for the resource.
- Out
Force float64Vlan Cos - Out-Force-Vlan-Cos.
- Outbandwidth float64
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- Padt
Retry float64Timeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- Passwords []string
- PPPoE account's password.
- Peer
Interface string - Peer-Interface.
- Phy
Mode string - DSL physical mode. Valid values:
auto,adsl,vdsl. - Ping
Serv float64Status - Ping-Serv-Status.
- Poe string
- Enable/disable PoE status. Valid values:
disable,enable. - Polling
Interval float64 - sFlow polling interval (1 - 255 sec).
- Port
Mirroring string - Enable/disable NP port mirroring. Valid values:
disable,enable. - Pppoe
Unnumbered stringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - Pptp
Auth stringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - Pptp
Client string - Enable/disable PPTP client. Valid values:
disable,enable. - Pptp
Passwords []string - PPTP password.
- Pptp
Server stringIp - PPTP server IP address.
- Pptp
Timeout float64 - Idle timer in minutes (0 for disabled).
- Pptp
User string - PPTP user name.
- Preserve
Session stringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - Priority float64
- Priority of the virtual router (1 - 255).
- Priority
Override string - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - Proxy
Captive stringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - Pvc
Atm stringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - Pvc
Chan float64 - SFP-DSL ADSL Fallback PVC Channel.
- Pvc
Crc float64 - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- Pvc
Pcr float64 - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- Pvc
Scr float64 - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- Pvc
Vlan float64Id - SFP-DSL ADSL Fallback PVC VLAN ID.
- Pvc
Vlan float64Rx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- Pvc
Vlan stringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - Pvc
Vlan float64Tx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- Pvc
Vlan stringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - Reachable
Time float64 - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- Redundant
Interface string - Redundant-Interface.
- Remote
Ip string - Remote IP address of tunnel.
- Replacemsg
Override stringGroup - Replacement message override group.
- Retransmission string
- Enable/disable DSL retransmission. Valid values:
disable,enable. - Ring
Rx float64 - RX ring size.
- Ring
Tx float64 - TX ring size.
- Role string
- Interface role. Valid values:
lan,wan,dmz,undefined. - Sample
Direction string - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - Sample
Rate float64 - sFlow sample rate (10 - 99999).
- Scan
Botnet stringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Secondary
Ip string - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - Secondaryips
[]Object
Fsp Vlan Interface Secondaryip Type Args - Secondaryip. The structure of
secondaryipblock is documented below. - Security8021x
Dynamic float64Vlan Id - VLAN ID for virtual switch.
- Security8021x
Master string - 802.1X master virtual-switch.
- Security8021x
Member stringMode - 802.1X member mode. Valid values:
disable,switch. - Security8021x
Mode string - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - Security
Exempt stringList - Name of security-exempt-list.
- Security
External stringLogout - URL of external authentication logout server.
- Security
External stringWeb - URL of external authentication web server.
- Security
Groups string - User groups that can authenticate with the captive portal.
- Security
Mac stringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - Security
Mode string - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - Security
Redirect stringUrl - URL redirection after disclaimer/authentication.
- Select
Profile30a35b string - Select-Profile-30A-35B. Valid values:
30A,35B. - Service
Name string - PPPoE service name.
- Sflow
Sampler string - Enable/disable sFlow on this interface. Valid values:
disable,enable. - Sfp
Dsl string - Enable/disable SFP DSL. Valid values:
disable,enable. - Sfp
Dsl stringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - Sfp
Dsl stringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - Sfp
Dsl stringMac - SFP DSL MAC address.
- Speed string
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - Spillover
Threshold float64 - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- Src
Check string - Enable/disable source IP check. Valid values:
disable,enable. - Status string
- Enable/disable VRRP. Valid values:
disable,enable. - Stp string
- Enable/disable STP. Valid values:
disable,enable. - Stp
Edge string - Enable/disable as STP edge port. Valid values:
disable,enable. - Stp
Ha stringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - Stp
Ha stringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - Stpforward string
- Enable/disable STP forwarding. Valid values:
disable,enable. - Stpforward
Mode string - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - Strip
Priority stringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - Subst string
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - Substitute
Dst stringMac - Destination MAC address that all packets are sent to from this interface.
- Sw
Algorithm string - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - Swc
First float64Create - Swc-First-Create.
- Swc
Vlan float64 - Swc-Vlan.
- Switch string
- Switch.
- Switch
Controller stringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - Switch
Controller stringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - Switch
Controller stringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - Switch
Controller stringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - Switch
Controller stringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - Switch
Controller stringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - Switch
Controller stringDynamic - Switch-Controller-Dynamic.
- Switch
Controller stringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - Switch
Controller stringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - Switch
Controller stringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - Switch
Controller stringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - Switch
Controller stringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - Switch
Controller float64Learning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- Switch
Controller float64Mgmt Vlan - Switch-Controller-Mgmt-Vlan.
- Switch
Controller stringNac - Switch-Controller-Nac.
- Switch
Controller stringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - Switch
Controller stringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - Switch
Controller stringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - Switch
Controller stringOffload Ip - IP for routing offload on FortiSwitch.
- Switch
Controller stringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - Switch
Controller stringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - Switch
Controller stringOffloading Ip - Switch-Controller-Offloading-Ip.
- Switch
Controller stringRadius Server - Switch-Controller-Radius-Server.
- Switch
Controller stringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - Switch
Controller stringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - Switch
Controller stringTraffic Policy - Switch controller traffic policy for the VLAN.
- System
Id string - Define a system ID for the aggregate interface.
- System
Id stringType - Method in which system ID is generated. Valid values:
auto,user. - Tc
Mode string - DSL transfer mode. Valid values:
ptm,atm. - Tcp
Mss float64 - TCP maximum segment size. 0 means do not change segment size.
- Trunk string
- Enable/disable VLAN trunk. Valid values:
disable,enable. - Trust
Ip1 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip2 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip3 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- Trust
Ip61 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Trust
Ip62 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Trust
Ip63 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- Type string
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - Username string
- Username of the PPPoE account, provided by your ISP.
- Vci float64
- Virtual Channel ID
- Vectoring string
- Enable/disable DSL vectoring. Valid values:
disable,enable. - Vindex float64
- Vindex.
- Vlan string
- Vlan.
- Vlan
Op stringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - Vlan
Protocol string - Vlan-Protocol. Valid values:
8021q,8021ad. - Vlanforward string
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - Vlanid float64
- VLAN ID (1 - 4094).
- Vpi float64
- Virtual Path ID
- Vrf float64
- Virtual Routing Forwarding ID.
- Vrrp
Virtual stringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - Vrrps
[]Object
Fsp Vlan Interface Vrrp Type Args - Vrrp. The structure of
vrrpblock is documented below. - Wccp string
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - Weight float64
- Default weight for static routes (if route has no weight configured).
- Wifi5g
Threshold string - Minimal signal strength to be considered as a good 5G AP.
- Wifi
Acl string - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - Wifi
Ap stringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - Wifi
Auth string - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - Wifi
Auto stringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - Wifi
Auto stringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - Wifi
Broadcast stringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - Wifi
Dns stringServer1 - DNS server 1.
- Wifi
Dns stringServer2 - DNS server 2.
- Wifi
Encrypt string - Data encryption. Valid values:
TKIP,AES. - Wifi
Fragment float64Threshold - WiFi fragment threshold (800 - 2346).
- Wifi
Gateway string - IPv4 default gateway IP address.
- Wifi
Keyindex float64 - WEP key index (1 - 4).
- Wifi
Keys []string - WiFi WEP Key.
- Wifi
Mac stringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - Wifi
Passphrases []string - WiFi pre-shared key for WPA.
- Wifi
Radius stringServer - WiFi RADIUS server for WPA.
- Wifi
Rts float64Threshold - WiFi RTS threshold (256 - 2346).
- Wifi
Security string - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - Wifi
Ssid string - IEEE 802.11 Service Set Identifier.
- Wifi
Usergroup string - WiFi user group for WPA.
- Wins
Ip string - WINS server IP.
- ac
Name String - PPPoE server name.
- adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - aggregate String
- Aggregate.
- aggregate
Type String - Type of aggregation. Valid values:
physical,vxlan. - algorithm String
- Frame distribution algorithm. Valid values:
L2,L3,L4. - alias String
- Alias will be displayed with the interface name to make it easier to distinguish.
- allowaccesses List<String>
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - annex String
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - ap
Discover String - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - arpforward String
- Enable/disable ARP forwarding. Valid values:
disable,enable. - atm
Protocol String - ATM protocol. Valid values:
none,ipoa. - auth
Cert String - HTTPS server certificate.
- auth
Portal StringAddr - Address of captive portal.
- auth
Type String - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - auto
Auth StringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - bandwidth
Measure DoubleTime - Bandwidth-Measure-Time.
- bfd String
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - bfd
Desired DoubleMin Tx - BFD desired minimal transmit interval.
- bfd
Detect DoubleMult - BFD detection multiplier.
- bfd
Required DoubleMin Rx - BFD required minimal receive interval.
- broadcast
Forticlient StringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - broadcast
Forward String - Enable/disable broadcast forwarding. Valid values:
disable,enable. - captive
Portal Double - Enable/disable captive portal.
- cli
Conn DoubleStatus - Cli-Conn-Status.
- color Double
- Color of icon on the GUI.
- ddns String
- Ddns. Valid values:
disable,enable. - ddns
Auth String - Ddns-Auth. Valid values:
disable,tsig. - ddns
Domain String - Ddns-Domain.
- ddns
Key String - Ddns-Key.
- ddns
Keyname String - Ddns-Keyname.
- ddns
Passwords List<String> - Ddns-Password.
- ddns
Server String - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - ddns
Server StringIp - Ddns-Server-Ip.
- ddns
Sn String - Ddns-Sn.
- ddns
Ttl Double - Ddns-Ttl.
- ddns
Username String - Ddns-Username.
- ddns
Zone String - Ddns-Zone.
- dedicated
To String - Configure interface for single purpose. Valid values:
none,management. - default
Purdue StringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - defaultgw String
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - description String
- Description.
- detected
Peer DoubleMtu - Detected-Peer-Mtu.
- detectprotocols List<String>
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver String
- Gateway's ping server for this IP.
- device
Access StringList - Device access list.
- device
Identification String - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Identification StringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Netscan String - Device-Netscan. Valid values:
disable,enable. - device
User StringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - devindex Double
- Devindex.
- dhcp
Broadcast StringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - dhcp
Classless StringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - dhcp
Client StringIdentifier - DHCP client identifier.
- dhcp
Relay StringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - dhcp
Relay StringCircuit Id - DHCP relay circuit ID.
- dhcp
Relay StringInterface - Specify outgoing interface to reach server.
- dhcp
Relay StringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - dhcp
Relay List<String>Ips - DHCP relay IP address.
- dhcp
Relay StringLink Selection - DHCP relay link selection.
- dhcp
Relay StringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - dhcp
Relay StringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - dhcp
Relay StringSource Ip - IP address used by the DHCP relay as its source IP.
- dhcp
Relay StringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - dhcp
Renew DoubleTime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- dhcp
Smart StringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - disc
Retry DoubleTimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- disconnect
Threshold Double - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- distance Double
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- dns
Query String - Dns-Query. Valid values:
disable,recursive,non-recursive. - dns
Server StringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - dns
Server List<String>Protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - drop
Fragment String - Enable/disable drop fragment packets. Valid values:
disable,enable. - drop
Overlapped StringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - dynamic
Sort StringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- eap
Ca List<String>Certs - Eap-Ca-Cert.
- eap
Identity String - Eap-Identity.
- eap
Method String - Eap-Method. Valid values:
tls,peap. - eap
Passwords List<String> - Eap-Password.
- eap
Supplicant String - Eap-Supplicant. Valid values:
disable,enable. - eap
User List<String>Certs - Eap-User-Cert.
- egress
Cos String - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - egress
Shaping StringProfile - Outgoing traffic shaping profile.
- eip String
- Eip.
- endpoint
Compliance String - Endpoint-Compliance. Valid values:
disable,enable. - estimated
Downstream DoubleBandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- estimated
Upstream DoubleBandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- explicit
Ftp StringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - explicit
Web StringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - external String
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - fail
Action StringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - fail
Alert StringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- fail
Alert StringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - fail
Detect String - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - fail
Detect List<String>Options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - fdp String
- Fdp. Valid values:
disable,enable. - fortiheartbeat String
- Fortiheartbeat. Valid values:
disable,enable. - fortilink String
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - fortilink
Backup DoubleLink - Fortilink-Backup-Link.
- fortilink
Neighbor StringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - fortilink
Split StringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - fortilink
Stacking String - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - forward
Domain Double - Transparent mode forward domain.
- forward
Error StringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - fp
Anomalies List<String> - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - fp
Disables List<String> - Fp-Disable. Valid values:
all,ipsec,none. - gateway
Address String - Gateway address
- generic
Receive StringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - gi
Gk String - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - gwaddr String
- Gateway address
- gwdetect String
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha
Priority Double - HA election priority for the PING server.
- icmp
Accept StringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - icmp
Redirect String - Icmp-Redirect. Valid values:
disable,enable. - icmp
Send StringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - ident
Accept String - Enable/disable authentication for this interface. Valid values:
disable,enable. - idle
Timeout Double - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- if
Mdix String - If-Mdix. Valid values:
auto,normal,crossover. - if
Media String - If-Media. Valid values:
auto,copper,fiber. - ike
Saml List<String>Servers - Ike-Saml-Server.
- in
Force DoubleVlan Cos - In-Force-Vlan-Cos.
- inbandwidth Double
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- ingress
Cos String - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - ingress
Shaping StringProfile - Incoming traffic shaping profile.
- ingress
Spillover DoubleThreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- interconnect
Profile String - Set interconnect profile. Valid values:
default,profile1,profile2. - internal Double
- Implicitly created.
- ip String
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- ip
Managed StringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - ipmac String
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - ips
Sniffer StringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - ipunnumbered String
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- ipv6
Object
Fsp Vlan Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - l2forward String
- Enable/disable l2 forwarding. Valid values:
disable,enable. - l2tp
Client String - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - lacp
Ha StringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - lacp
Ha StringSlave - LACP HA slave. Valid values:
disable,enable. - lacp
Mode String - LACP mode. Valid values:
static,passive,active. - lacp
Speed String - How often the interface sends LACP messages. Valid values:
slow,fast. - large
Receive StringOffload - Large-Receive-Offload. Valid values:
disable,enable. - lcp
Echo DoubleInterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- lcp
Max DoubleEcho Fails - Maximum missed LCP echo messages before disconnect.
- link
Up DoubleDelay - Number of milliseconds to wait before considering a link is up.
- listen
Forticlient StringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - lldp
Network StringPolicy - LLDP-MED network policy profile.
- lldp
Reception String - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - lldp
Transmission String - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - log String
- Log. Valid values:
disable,enable. - macaddr String
- Change the interface's MAC address.
- managed
Subnetwork StringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - management
Ip String - High Availability in-band management IP address of this interface.
- max
Egress DoubleBurst Rate - Max egress burst rate (kbits per sec).
- max
Egress DoubleRate - Max egress rate (kbits per sec).
- measured
Downstream DoubleBandwidth - Measured-Downstream-Bandwidth.
- measured
Upstream DoubleBandwidth - Measured-Upstream-Bandwidth.
- mediatype String
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - member String
- Physical interfaces that belong to the aggregate or redundant interface.
- min
Links Double - Minimum number of aggregated ports that must be up.
- min
Links StringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - mirroring
Direction String - Port mirroring direction. Valid values:
rx,tx,both. - mirroring
Port String - Mirroring port.
- mode String
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - monitor
Bandwidth String - Monitor-Bandwidth. Valid values:
disable,enable. - mtu Double
- MTU value for this interface.
- mtu
Override String - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - mux
Type String - Multiplexer type Valid values:
llc-encaps,vc-encaps. - name String
- Name.
- ndiscforward String
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - netbios
Forward String - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - netflow
Sampler String - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - np
Qos DoubleProfile - NP QoS profile ID.
- npu
Fastpath String - Npu-Fastpath. Valid values:
disable,enable. - nst String
- Nst. Valid values:
disable,enable. - object
Fsp StringVlan Interface Id - an identifier for the resource.
- out
Force DoubleVlan Cos - Out-Force-Vlan-Cos.
- outbandwidth Double
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- padt
Retry DoubleTimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- passwords List<String>
- PPPoE account's password.
- peer
Interface String - Peer-Interface.
- phy
Mode String - DSL physical mode. Valid values:
auto,adsl,vdsl. - ping
Serv DoubleStatus - Ping-Serv-Status.
- poe String
- Enable/disable PoE status. Valid values:
disable,enable. - polling
Interval Double - sFlow polling interval (1 - 255 sec).
- port
Mirroring String - Enable/disable NP port mirroring. Valid values:
disable,enable. - pppoe
Unnumbered StringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - pptp
Auth StringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - pptp
Client String - Enable/disable PPTP client. Valid values:
disable,enable. - pptp
Passwords List<String> - PPTP password.
- pptp
Server StringIp - PPTP server IP address.
- pptp
Timeout Double - Idle timer in minutes (0 for disabled).
- pptp
User String - PPTP user name.
- preserve
Session StringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - priority Double
- Priority of the virtual router (1 - 255).
- priority
Override String - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - proxy
Captive StringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - pvc
Atm StringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - pvc
Chan Double - SFP-DSL ADSL Fallback PVC Channel.
- pvc
Crc Double - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- pvc
Pcr Double - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- pvc
Scr Double - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- pvc
Vlan DoubleId - SFP-DSL ADSL Fallback PVC VLAN ID.
- pvc
Vlan DoubleRx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- pvc
Vlan StringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - pvc
Vlan DoubleTx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- pvc
Vlan StringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - reachable
Time Double - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- redundant
Interface String - Redundant-Interface.
- remote
Ip String - Remote IP address of tunnel.
- replacemsg
Override StringGroup - Replacement message override group.
- retransmission String
- Enable/disable DSL retransmission. Valid values:
disable,enable. - ring
Rx Double - RX ring size.
- ring
Tx Double - TX ring size.
- role String
- Interface role. Valid values:
lan,wan,dmz,undefined. - sample
Direction String - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - sample
Rate Double - sFlow sample rate (10 - 99999).
- scan
Botnet StringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - scopetype String
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary
Ip String - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - secondaryips
List<Object
Fsp Vlan Interface Secondaryip> - Secondaryip. The structure of
secondaryipblock is documented below. - security8021x
Dynamic DoubleVlan Id - VLAN ID for virtual switch.
- security8021x
Master String - 802.1X master virtual-switch.
- security8021x
Member StringMode - 802.1X member mode. Valid values:
disable,switch. - security8021x
Mode String - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - security
Exempt StringList - Name of security-exempt-list.
- security
External StringLogout - URL of external authentication logout server.
- security
External StringWeb - URL of external authentication web server.
- security
Groups String - User groups that can authenticate with the captive portal.
- security
Mac StringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - security
Mode String - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - security
Redirect StringUrl - URL redirection after disclaimer/authentication.
- select
Profile30a35b String - Select-Profile-30A-35B. Valid values:
30A,35B. - service
Name String - PPPoE service name.
- sflow
Sampler String - Enable/disable sFlow on this interface. Valid values:
disable,enable. - sfp
Dsl String - Enable/disable SFP DSL. Valid values:
disable,enable. - sfp
Dsl StringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - sfp
Dsl StringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - sfp
Dsl StringMac - SFP DSL MAC address.
- speed String
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - spillover
Threshold Double - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- src
Check String - Enable/disable source IP check. Valid values:
disable,enable. - status String
- Enable/disable VRRP. Valid values:
disable,enable. - stp String
- Enable/disable STP. Valid values:
disable,enable. - stp
Edge String - Enable/disable as STP edge port. Valid values:
disable,enable. - stp
Ha StringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - stp
Ha StringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - stpforward String
- Enable/disable STP forwarding. Valid values:
disable,enable. - stpforward
Mode String - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - strip
Priority StringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - subst String
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - substitute
Dst StringMac - Destination MAC address that all packets are sent to from this interface.
- sw
Algorithm String - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - swc
First DoubleCreate - Swc-First-Create.
- swc
Vlan Double - Swc-Vlan.
- switch
Controller StringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - switch
Controller StringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - switch
Controller StringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - switch
Controller StringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - switch
Controller StringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - switch
Controller StringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - switch
Controller StringDynamic - Switch-Controller-Dynamic.
- switch
Controller StringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - switch
Controller StringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - switch
Controller StringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - switch
Controller StringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - switch
Controller StringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - switch
Controller DoubleLearning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- switch
Controller DoubleMgmt Vlan - Switch-Controller-Mgmt-Vlan.
- switch
Controller StringNac - Switch-Controller-Nac.
- switch
Controller StringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - switch
Controller StringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - switch
Controller StringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - switch
Controller StringOffload Ip - IP for routing offload on FortiSwitch.
- switch
Controller StringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - switch
Controller StringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - switch
Controller StringOffloading Ip - Switch-Controller-Offloading-Ip.
- switch
Controller StringRadius Server - Switch-Controller-Radius-Server.
- switch
Controller StringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - switch
Controller StringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - switch
Controller StringTraffic Policy - Switch controller traffic policy for the VLAN.
- switch_ String
- Switch.
- system
Id String - Define a system ID for the aggregate interface.
- system
Id StringType - Method in which system ID is generated. Valid values:
auto,user. - tc
Mode String - DSL transfer mode. Valid values:
ptm,atm. - tcp
Mss Double - TCP maximum segment size. 0 means do not change segment size.
- trunk String
- Enable/disable VLAN trunk. Valid values:
disable,enable. - trust
Ip1 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip2 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip3 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip61 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip62 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip63 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- type String
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - username String
- Username of the PPPoE account, provided by your ISP.
- vci Double
- Virtual Channel ID
- vectoring String
- Enable/disable DSL vectoring. Valid values:
disable,enable. - vindex Double
- Vindex.
- vlan String
- Vlan.
- vlan
Op StringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - vlan
Protocol String - Vlan-Protocol. Valid values:
8021q,8021ad. - vlanforward String
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - vlanid Double
- VLAN ID (1 - 4094).
- vpi Double
- Virtual Path ID
- vrf Double
- Virtual Routing Forwarding ID.
- vrrp
Virtual StringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - vrrps
List<Object
Fsp Vlan Interface Vrrp> - Vrrp. The structure of
vrrpblock is documented below. - wccp String
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - weight Double
- Default weight for static routes (if route has no weight configured).
- wifi5g
Threshold String - Minimal signal strength to be considered as a good 5G AP.
- wifi
Acl String - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - wifi
Ap StringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - wifi
Auth String - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - wifi
Auto StringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - wifi
Auto StringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - wifi
Broadcast StringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - wifi
Dns StringServer1 - DNS server 1.
- wifi
Dns StringServer2 - DNS server 2.
- wifi
Encrypt String - Data encryption. Valid values:
TKIP,AES. - wifi
Fragment DoubleThreshold - WiFi fragment threshold (800 - 2346).
- wifi
Gateway String - IPv4 default gateway IP address.
- wifi
Keyindex Double - WEP key index (1 - 4).
- wifi
Keys List<String> - WiFi WEP Key.
- wifi
Mac StringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - wifi
Passphrases List<String> - WiFi pre-shared key for WPA.
- wifi
Radius StringServer - WiFi RADIUS server for WPA.
- wifi
Rts DoubleThreshold - WiFi RTS threshold (256 - 2346).
- wifi
Security String - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - wifi
Ssid String - IEEE 802.11 Service Set Identifier.
- wifi
Usergroup String - WiFi user group for WPA.
- wins
Ip String - WINS server IP.
- ac
Name string - PPPoE server name.
- adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - aggregate string
- Aggregate.
- aggregate
Type string - Type of aggregation. Valid values:
physical,vxlan. - algorithm string
- Frame distribution algorithm. Valid values:
L2,L3,L4. - alias string
- Alias will be displayed with the interface name to make it easier to distinguish.
- allowaccesses string[]
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - annex string
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - ap
Discover string - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - arpforward string
- Enable/disable ARP forwarding. Valid values:
disable,enable. - atm
Protocol string - ATM protocol. Valid values:
none,ipoa. - auth
Cert string - HTTPS server certificate.
- auth
Portal stringAddr - Address of captive portal.
- auth
Type string - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - auto
Auth stringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - bandwidth
Measure numberTime - Bandwidth-Measure-Time.
- bfd string
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - bfd
Desired numberMin Tx - BFD desired minimal transmit interval.
- bfd
Detect numberMult - BFD detection multiplier.
- bfd
Required numberMin Rx - BFD required minimal receive interval.
- broadcast
Forticlient stringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - broadcast
Forward string - Enable/disable broadcast forwarding. Valid values:
disable,enable. - captive
Portal number - Enable/disable captive portal.
- cli
Conn numberStatus - Cli-Conn-Status.
- color number
- Color of icon on the GUI.
- ddns string
- Ddns. Valid values:
disable,enable. - ddns
Auth string - Ddns-Auth. Valid values:
disable,tsig. - ddns
Domain string - Ddns-Domain.
- ddns
Key string - Ddns-Key.
- ddns
Keyname string - Ddns-Keyname.
- ddns
Passwords string[] - Ddns-Password.
- ddns
Server string - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - ddns
Server stringIp - Ddns-Server-Ip.
- ddns
Sn string - Ddns-Sn.
- ddns
Ttl number - Ddns-Ttl.
- ddns
Username string - Ddns-Username.
- ddns
Zone string - Ddns-Zone.
- dedicated
To string - Configure interface for single purpose. Valid values:
none,management. - default
Purdue stringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - defaultgw string
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - description string
- Description.
- detected
Peer numberMtu - Detected-Peer-Mtu.
- detectprotocols string[]
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver string
- Gateway's ping server for this IP.
- device
Access stringList - Device access list.
- device
Identification string - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Identification stringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Netscan string - Device-Netscan. Valid values:
disable,enable. - device
User stringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - devindex number
- Devindex.
- dhcp
Broadcast stringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - dhcp
Classless stringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - dhcp
Client stringIdentifier - DHCP client identifier.
- dhcp
Relay stringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - dhcp
Relay stringCircuit Id - DHCP relay circuit ID.
- dhcp
Relay stringInterface - Specify outgoing interface to reach server.
- dhcp
Relay stringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - dhcp
Relay string[]Ips - DHCP relay IP address.
- dhcp
Relay stringLink Selection - DHCP relay link selection.
- dhcp
Relay stringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - dhcp
Relay stringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - dhcp
Relay stringSource Ip - IP address used by the DHCP relay as its source IP.
- dhcp
Relay stringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - dhcp
Renew numberTime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- dhcp
Smart stringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - disc
Retry numberTimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- disconnect
Threshold number - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- distance number
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- dns
Query string - Dns-Query. Valid values:
disable,recursive,non-recursive. - dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - dns
Server string[]Protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - drop
Fragment string - Enable/disable drop fragment packets. Valid values:
disable,enable. - drop
Overlapped stringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- eap
Ca string[]Certs - Eap-Ca-Cert.
- eap
Identity string - Eap-Identity.
- eap
Method string - Eap-Method. Valid values:
tls,peap. - eap
Passwords string[] - Eap-Password.
- eap
Supplicant string - Eap-Supplicant. Valid values:
disable,enable. - eap
User string[]Certs - Eap-User-Cert.
- egress
Cos string - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - egress
Shaping stringProfile - Outgoing traffic shaping profile.
- eip string
- Eip.
- endpoint
Compliance string - Endpoint-Compliance. Valid values:
disable,enable. - estimated
Downstream numberBandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- estimated
Upstream numberBandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- explicit
Ftp stringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - explicit
Web stringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - external string
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - fail
Action stringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - fail
Alert stringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- fail
Alert stringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - fail
Detect string - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - fail
Detect string[]Options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - fdp string
- Fdp. Valid values:
disable,enable. - fortiheartbeat string
- Fortiheartbeat. Valid values:
disable,enable. - fortilink string
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - fortilink
Backup numberLink - Fortilink-Backup-Link.
- fortilink
Neighbor stringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - fortilink
Split stringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - fortilink
Stacking string - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - forward
Domain number - Transparent mode forward domain.
- forward
Error stringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - fp
Anomalies string[] - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - fp
Disables string[] - Fp-Disable. Valid values:
all,ipsec,none. - gateway
Address string - Gateway address
- generic
Receive stringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - gi
Gk string - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - gwaddr string
- Gateway address
- gwdetect string
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha
Priority number - HA election priority for the PING server.
- icmp
Accept stringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - icmp
Redirect string - Icmp-Redirect. Valid values:
disable,enable. - icmp
Send stringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - ident
Accept string - Enable/disable authentication for this interface. Valid values:
disable,enable. - idle
Timeout number - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- if
Mdix string - If-Mdix. Valid values:
auto,normal,crossover. - if
Media string - If-Media. Valid values:
auto,copper,fiber. - ike
Saml string[]Servers - Ike-Saml-Server.
- in
Force numberVlan Cos - In-Force-Vlan-Cos.
- inbandwidth number
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- ingress
Cos string - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - ingress
Shaping stringProfile - Incoming traffic shaping profile.
- ingress
Spillover numberThreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- interconnect
Profile string - Set interconnect profile. Valid values:
default,profile1,profile2. - internal number
- Implicitly created.
- ip string
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- ip
Managed stringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - ipmac string
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - ips
Sniffer stringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - ipunnumbered string
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- ipv6
Object
Fsp Vlan Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - l2forward string
- Enable/disable l2 forwarding. Valid values:
disable,enable. - l2tp
Client string - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - lacp
Ha stringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - lacp
Ha stringSlave - LACP HA slave. Valid values:
disable,enable. - lacp
Mode string - LACP mode. Valid values:
static,passive,active. - lacp
Speed string - How often the interface sends LACP messages. Valid values:
slow,fast. - large
Receive stringOffload - Large-Receive-Offload. Valid values:
disable,enable. - lcp
Echo numberInterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- lcp
Max numberEcho Fails - Maximum missed LCP echo messages before disconnect.
- link
Up numberDelay - Number of milliseconds to wait before considering a link is up.
- listen
Forticlient stringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - lldp
Network stringPolicy - LLDP-MED network policy profile.
- lldp
Reception string - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - lldp
Transmission string - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - log string
- Log. Valid values:
disable,enable. - macaddr string
- Change the interface's MAC address.
- managed
Subnetwork stringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - management
Ip string - High Availability in-band management IP address of this interface.
- max
Egress numberBurst Rate - Max egress burst rate (kbits per sec).
- max
Egress numberRate - Max egress rate (kbits per sec).
- measured
Downstream numberBandwidth - Measured-Downstream-Bandwidth.
- measured
Upstream numberBandwidth - Measured-Upstream-Bandwidth.
- mediatype string
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - member string
- Physical interfaces that belong to the aggregate or redundant interface.
- min
Links number - Minimum number of aggregated ports that must be up.
- min
Links stringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - mirroring
Direction string - Port mirroring direction. Valid values:
rx,tx,both. - mirroring
Port string - Mirroring port.
- mode string
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - monitor
Bandwidth string - Monitor-Bandwidth. Valid values:
disable,enable. - mtu number
- MTU value for this interface.
- mtu
Override string - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - mux
Type string - Multiplexer type Valid values:
llc-encaps,vc-encaps. - name string
- Name.
- ndiscforward string
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - netbios
Forward string - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - netflow
Sampler string - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - np
Qos numberProfile - NP QoS profile ID.
- npu
Fastpath string - Npu-Fastpath. Valid values:
disable,enable. - nst string
- Nst. Valid values:
disable,enable. - object
Fsp stringVlan Interface Id - an identifier for the resource.
- out
Force numberVlan Cos - Out-Force-Vlan-Cos.
- outbandwidth number
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- padt
Retry numberTimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- passwords string[]
- PPPoE account's password.
- peer
Interface string - Peer-Interface.
- phy
Mode string - DSL physical mode. Valid values:
auto,adsl,vdsl. - ping
Serv numberStatus - Ping-Serv-Status.
- poe string
- Enable/disable PoE status. Valid values:
disable,enable. - polling
Interval number - sFlow polling interval (1 - 255 sec).
- port
Mirroring string - Enable/disable NP port mirroring. Valid values:
disable,enable. - pppoe
Unnumbered stringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - pptp
Auth stringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - pptp
Client string - Enable/disable PPTP client. Valid values:
disable,enable. - pptp
Passwords string[] - PPTP password.
- pptp
Server stringIp - PPTP server IP address.
- pptp
Timeout number - Idle timer in minutes (0 for disabled).
- pptp
User string - PPTP user name.
- preserve
Session stringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - priority number
- Priority of the virtual router (1 - 255).
- priority
Override string - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - proxy
Captive stringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - pvc
Atm stringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - pvc
Chan number - SFP-DSL ADSL Fallback PVC Channel.
- pvc
Crc number - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- pvc
Pcr number - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- pvc
Scr number - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- pvc
Vlan numberId - SFP-DSL ADSL Fallback PVC VLAN ID.
- pvc
Vlan numberRx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- pvc
Vlan stringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - pvc
Vlan numberTx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- pvc
Vlan stringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - reachable
Time number - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- redundant
Interface string - Redundant-Interface.
- remote
Ip string - Remote IP address of tunnel.
- replacemsg
Override stringGroup - Replacement message override group.
- retransmission string
- Enable/disable DSL retransmission. Valid values:
disable,enable. - ring
Rx number - RX ring size.
- ring
Tx number - TX ring size.
- role string
- Interface role. Valid values:
lan,wan,dmz,undefined. - sample
Direction string - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - sample
Rate number - sFlow sample rate (10 - 99999).
- scan
Botnet stringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary
Ip string - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - secondaryips
Object
Fsp Vlan Interface Secondaryip[] - Secondaryip. The structure of
secondaryipblock is documented below. - security8021x
Dynamic numberVlan Id - VLAN ID for virtual switch.
- security8021x
Master string - 802.1X master virtual-switch.
- security8021x
Member stringMode - 802.1X member mode. Valid values:
disable,switch. - security8021x
Mode string - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - security
Exempt stringList - Name of security-exempt-list.
- security
External stringLogout - URL of external authentication logout server.
- security
External stringWeb - URL of external authentication web server.
- security
Groups string - User groups that can authenticate with the captive portal.
- security
Mac stringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - security
Mode string - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - security
Redirect stringUrl - URL redirection after disclaimer/authentication.
- select
Profile30a35b string - Select-Profile-30A-35B. Valid values:
30A,35B. - service
Name string - PPPoE service name.
- sflow
Sampler string - Enable/disable sFlow on this interface. Valid values:
disable,enable. - sfp
Dsl string - Enable/disable SFP DSL. Valid values:
disable,enable. - sfp
Dsl stringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - sfp
Dsl stringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - sfp
Dsl stringMac - SFP DSL MAC address.
- speed string
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - spillover
Threshold number - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- src
Check string - Enable/disable source IP check. Valid values:
disable,enable. - status string
- Enable/disable VRRP. Valid values:
disable,enable. - stp string
- Enable/disable STP. Valid values:
disable,enable. - stp
Edge string - Enable/disable as STP edge port. Valid values:
disable,enable. - stp
Ha stringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - stp
Ha stringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - stpforward string
- Enable/disable STP forwarding. Valid values:
disable,enable. - stpforward
Mode string - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - strip
Priority stringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - subst string
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - substitute
Dst stringMac - Destination MAC address that all packets are sent to from this interface.
- sw
Algorithm string - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - swc
First numberCreate - Swc-First-Create.
- swc
Vlan number - Swc-Vlan.
- switch string
- Switch.
- switch
Controller stringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - switch
Controller stringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - switch
Controller stringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - switch
Controller stringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - switch
Controller stringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - switch
Controller stringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - switch
Controller stringDynamic - Switch-Controller-Dynamic.
- switch
Controller stringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - switch
Controller stringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - switch
Controller stringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - switch
Controller stringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - switch
Controller stringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - switch
Controller numberLearning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- switch
Controller numberMgmt Vlan - Switch-Controller-Mgmt-Vlan.
- switch
Controller stringNac - Switch-Controller-Nac.
- switch
Controller stringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - switch
Controller stringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - switch
Controller stringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - switch
Controller stringOffload Ip - IP for routing offload on FortiSwitch.
- switch
Controller stringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - switch
Controller stringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - switch
Controller stringOffloading Ip - Switch-Controller-Offloading-Ip.
- switch
Controller stringRadius Server - Switch-Controller-Radius-Server.
- switch
Controller stringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - switch
Controller stringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - switch
Controller stringTraffic Policy - Switch controller traffic policy for the VLAN.
- system
Id string - Define a system ID for the aggregate interface.
- system
Id stringType - Method in which system ID is generated. Valid values:
auto,user. - tc
Mode string - DSL transfer mode. Valid values:
ptm,atm. - tcp
Mss number - TCP maximum segment size. 0 means do not change segment size.
- trunk string
- Enable/disable VLAN trunk. Valid values:
disable,enable. - trust
Ip1 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip2 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip3 string - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip61 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip62 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip63 string - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- type string
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - username string
- Username of the PPPoE account, provided by your ISP.
- vci number
- Virtual Channel ID
- vectoring string
- Enable/disable DSL vectoring. Valid values:
disable,enable. - vindex number
- Vindex.
- vlan string
- Vlan.
- vlan
Op stringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - vlan
Protocol string - Vlan-Protocol. Valid values:
8021q,8021ad. - vlanforward string
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - vlanid number
- VLAN ID (1 - 4094).
- vpi number
- Virtual Path ID
- vrf number
- Virtual Routing Forwarding ID.
- vrrp
Virtual stringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - vrrps
Object
Fsp Vlan Interface Vrrp[] - Vrrp. The structure of
vrrpblock is documented below. - wccp string
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - weight number
- Default weight for static routes (if route has no weight configured).
- wifi5g
Threshold string - Minimal signal strength to be considered as a good 5G AP.
- wifi
Acl string - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - wifi
Ap stringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - wifi
Auth string - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - wifi
Auto stringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - wifi
Auto stringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - wifi
Broadcast stringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - wifi
Dns stringServer1 - DNS server 1.
- wifi
Dns stringServer2 - DNS server 2.
- wifi
Encrypt string - Data encryption. Valid values:
TKIP,AES. - wifi
Fragment numberThreshold - WiFi fragment threshold (800 - 2346).
- wifi
Gateway string - IPv4 default gateway IP address.
- wifi
Keyindex number - WEP key index (1 - 4).
- wifi
Keys string[] - WiFi WEP Key.
- wifi
Mac stringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - wifi
Passphrases string[] - WiFi pre-shared key for WPA.
- wifi
Radius stringServer - WiFi RADIUS server for WPA.
- wifi
Rts numberThreshold - WiFi RTS threshold (256 - 2346).
- wifi
Security string - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - wifi
Ssid string - IEEE 802.11 Service Set Identifier.
- wifi
Usergroup string - WiFi user group for WPA.
- wins
Ip string - WINS server IP.
- ac_
name str - PPPoE server name.
- adom str
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - aggregate str
- Aggregate.
- aggregate_
type str - Type of aggregation. Valid values:
physical,vxlan. - algorithm str
- Frame distribution algorithm. Valid values:
L2,L3,L4. - alias str
- Alias will be displayed with the interface name to make it easier to distinguish.
- allowaccesses Sequence[str]
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - annex str
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - ap_
discover str - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - arpforward str
- Enable/disable ARP forwarding. Valid values:
disable,enable. - atm_
protocol str - ATM protocol. Valid values:
none,ipoa. - auth_
cert str - HTTPS server certificate.
- auth_
portal_ straddr - Address of captive portal.
- auth_
type str - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - auto_
auth_ strextension_ device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - bandwidth_
measure_ floattime - Bandwidth-Measure-Time.
- bfd str
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - bfd_
desired_ floatmin_ tx - BFD desired minimal transmit interval.
- bfd_
detect_ floatmult - BFD detection multiplier.
- bfd_
required_ floatmin_ rx - BFD required minimal receive interval.
- broadcast_
forticlient_ strdiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - broadcast_
forward str - Enable/disable broadcast forwarding. Valid values:
disable,enable. - captive_
portal float - Enable/disable captive portal.
- cli_
conn_ floatstatus - Cli-Conn-Status.
- color float
- Color of icon on the GUI.
- ddns str
- Ddns. Valid values:
disable,enable. - ddns_
auth str - Ddns-Auth. Valid values:
disable,tsig. - ddns_
domain str - Ddns-Domain.
- ddns_
key str - Ddns-Key.
- ddns_
keyname str - Ddns-Keyname.
- ddns_
passwords Sequence[str] - Ddns-Password.
- ddns_
server str - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - ddns_
server_ strip - Ddns-Server-Ip.
- ddns_
sn str - Ddns-Sn.
- ddns_
ttl float - Ddns-Ttl.
- ddns_
username str - Ddns-Username.
- ddns_
zone str - Ddns-Zone.
- dedicated_
to str - Configure interface for single purpose. Valid values:
none,management. - default_
purdue_ strlevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - defaultgw str
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - description str
- Description.
- detected_
peer_ floatmtu - Detected-Peer-Mtu.
- detectprotocols Sequence[str]
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver str
- Gateway's ping server for this IP.
- device_
access_ strlist - Device access list.
- device_
identification str - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device_
identification_ stractive_ scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device_
netscan str - Device-Netscan. Valid values:
disable,enable. - device_
user_ stridentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - devindex float
- Devindex.
- dhcp_
broadcast_ strflag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - dhcp_
classless_ strroute_ addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - dhcp_
client_ stridentifier - DHCP client identifier.
- dhcp_
relay_ stragent_ option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - dhcp_
relay_ strcircuit_ id - DHCP relay circuit ID.
- dhcp_
relay_ strinterface - Specify outgoing interface to reach server.
- dhcp_
relay_ strinterface_ select_ method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - dhcp_
relay_ Sequence[str]ips - DHCP relay IP address.
- dhcp_
relay_ strlink_ selection - DHCP relay link selection.
- dhcp_
relay_ strrequest_ all_ server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - dhcp_
relay_ strservice - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - dhcp_
relay_ strsource_ ip - IP address used by the DHCP relay as its source IP.
- dhcp_
relay_ strtype - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - dhcp_
renew_ floattime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- dhcp_
smart_ strrelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - disc_
retry_ floattimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- disconnect_
threshold float - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- distance float
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- dns_
query str - Dns-Query. Valid values:
disable,recursive,non-recursive. - dns_
server_ stroverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - dns_
server_ Sequence[str]protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - drop_
fragment str - Enable/disable drop fragment packets. Valid values:
disable,enable. - drop_
overlapped_ strfragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - dynamic_
sort_ strsubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- eap_
ca_ Sequence[str]certs - Eap-Ca-Cert.
- eap_
identity str - Eap-Identity.
- eap_
method str - Eap-Method. Valid values:
tls,peap. - eap_
passwords Sequence[str] - Eap-Password.
- eap_
supplicant str - Eap-Supplicant. Valid values:
disable,enable. - eap_
user_ Sequence[str]certs - Eap-User-Cert.
- egress_
cos str - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - egress_
shaping_ strprofile - Outgoing traffic shaping profile.
- eip str
- Eip.
- endpoint_
compliance str - Endpoint-Compliance. Valid values:
disable,enable. - estimated_
downstream_ floatbandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- estimated_
upstream_ floatbandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- explicit_
ftp_ strproxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - explicit_
web_ strproxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - external str
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - fail_
action_ stron_ extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - fail_
alert_ strinterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- fail_
alert_ strmethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - fail_
detect str - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - fail_
detect_ Sequence[str]options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - fdp str
- Fdp. Valid values:
disable,enable. - fortiheartbeat str
- Fortiheartbeat. Valid values:
disable,enable. - fortilink str
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - fortilink_
backup_ floatlink - Fortilink-Backup-Link.
- fortilink_
neighbor_ strdetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - fortilink_
split_ strinterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - fortilink_
stacking str - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - forward_
domain float - Transparent mode forward domain.
- forward_
error_ strcorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - fp_
anomalies Sequence[str] - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - fp_
disables Sequence[str] - Fp-Disable. Valid values:
all,ipsec,none. - gateway_
address str - Gateway address
- generic_
receive_ stroffload - Generic-Receive-Offload. Valid values:
disable,enable. - gi_
gk str - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - gwaddr str
- Gateway address
- gwdetect str
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha_
priority float - HA election priority for the PING server.
- icmp_
accept_ strredirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - icmp_
redirect str - Icmp-Redirect. Valid values:
disable,enable. - icmp_
send_ strredirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - ident_
accept str - Enable/disable authentication for this interface. Valid values:
disable,enable. - idle_
timeout float - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- if_
mdix str - If-Mdix. Valid values:
auto,normal,crossover. - if_
media str - If-Media. Valid values:
auto,copper,fiber. - ike_
saml_ Sequence[str]servers - Ike-Saml-Server.
- in_
force_ floatvlan_ cos - In-Force-Vlan-Cos.
- inbandwidth float
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- ingress_
cos str - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - ingress_
shaping_ strprofile - Incoming traffic shaping profile.
- ingress_
spillover_ floatthreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- interconnect_
profile str - Set interconnect profile. Valid values:
default,profile1,profile2. - internal float
- Implicitly created.
- ip str
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- ip_
managed_ strby_ fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - ipmac str
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - ips_
sniffer_ strmode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - ipunnumbered str
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- ipv6
Object
Fsp Vlan Interface Ipv6Args - Ipv6. The structure of
ipv6block is documented below. - l2forward str
- Enable/disable l2 forwarding. Valid values:
disable,enable. - l2tp_
client str - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - lacp_
ha_ strsecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - lacp_
ha_ strslave - LACP HA slave. Valid values:
disable,enable. - lacp_
mode str - LACP mode. Valid values:
static,passive,active. - lacp_
speed str - How often the interface sends LACP messages. Valid values:
slow,fast. - large_
receive_ stroffload - Large-Receive-Offload. Valid values:
disable,enable. - lcp_
echo_ floatinterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- lcp_
max_ floatecho_ fails - Maximum missed LCP echo messages before disconnect.
- link_
up_ floatdelay - Number of milliseconds to wait before considering a link is up.
- listen_
forticlient_ strconnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - lldp_
network_ strpolicy - LLDP-MED network policy profile.
- lldp_
reception str - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - lldp_
transmission str - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - log str
- Log. Valid values:
disable,enable. - macaddr str
- Change the interface's MAC address.
- managed_
subnetwork_ strsize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - management_
ip str - High Availability in-band management IP address of this interface.
- max_
egress_ floatburst_ rate - Max egress burst rate (kbits per sec).
- max_
egress_ floatrate - Max egress rate (kbits per sec).
- measured_
downstream_ floatbandwidth - Measured-Downstream-Bandwidth.
- measured_
upstream_ floatbandwidth - Measured-Upstream-Bandwidth.
- mediatype str
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - member str
- Physical interfaces that belong to the aggregate or redundant interface.
- min_
links float - Minimum number of aggregated ports that must be up.
- min_
links_ strdown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - mirroring_
direction str - Port mirroring direction. Valid values:
rx,tx,both. - mirroring_
port str - Mirroring port.
- mode str
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - monitor_
bandwidth str - Monitor-Bandwidth. Valid values:
disable,enable. - mtu float
- MTU value for this interface.
- mtu_
override str - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - mux_
type str - Multiplexer type Valid values:
llc-encaps,vc-encaps. - name str
- Name.
- ndiscforward str
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - netbios_
forward str - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - netflow_
sampler str - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - np_
qos_ floatprofile - NP QoS profile ID.
- npu_
fastpath str - Npu-Fastpath. Valid values:
disable,enable. - nst str
- Nst. Valid values:
disable,enable. - object_
fsp_ strvlan_ interface_ id - an identifier for the resource.
- out_
force_ floatvlan_ cos - Out-Force-Vlan-Cos.
- outbandwidth float
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- padt_
retry_ floattimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- passwords Sequence[str]
- PPPoE account's password.
- peer_
interface str - Peer-Interface.
- phy_
mode str - DSL physical mode. Valid values:
auto,adsl,vdsl. - ping_
serv_ floatstatus - Ping-Serv-Status.
- poe str
- Enable/disable PoE status. Valid values:
disable,enable. - polling_
interval float - sFlow polling interval (1 - 255 sec).
- port_
mirroring str - Enable/disable NP port mirroring. Valid values:
disable,enable. - pppoe_
unnumbered_ strnegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - pptp_
auth_ strtype - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - pptp_
client str - Enable/disable PPTP client. Valid values:
disable,enable. - pptp_
passwords Sequence[str] - PPTP password.
- pptp_
server_ strip - PPTP server IP address.
- pptp_
timeout float - Idle timer in minutes (0 for disabled).
- pptp_
user str - PPTP user name.
- preserve_
session_ strroute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - priority float
- Priority of the virtual router (1 - 255).
- priority_
override str - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - proxy_
captive_ strportal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - pvc_
atm_ strqos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - pvc_
chan float - SFP-DSL ADSL Fallback PVC Channel.
- pvc_
crc float - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- pvc_
pcr float - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- pvc_
scr float - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- pvc_
vlan_ floatid - SFP-DSL ADSL Fallback PVC VLAN ID.
- pvc_
vlan_ floatrx_ id - SFP-DSL ADSL Fallback PVC VLANID RX.
- pvc_
vlan_ strrx_ op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - pvc_
vlan_ floattx_ id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- pvc_
vlan_ strtx_ op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - reachable_
time float - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- redundant_
interface str - Redundant-Interface.
- remote_
ip str - Remote IP address of tunnel.
- replacemsg_
override_ strgroup - Replacement message override group.
- retransmission str
- Enable/disable DSL retransmission. Valid values:
disable,enable. - ring_
rx float - RX ring size.
- ring_
tx float - TX ring size.
- role str
- Interface role. Valid values:
lan,wan,dmz,undefined. - sample_
direction str - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - sample_
rate float - sFlow sample rate (10 - 99999).
- scan_
botnet_ strconnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - scopetype str
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary_
ip str - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - secondaryips
Sequence[Object
Fsp Vlan Interface Secondaryip Args] - Secondaryip. The structure of
secondaryipblock is documented below. - security8021x_
dynamic_ floatvlan_ id - VLAN ID for virtual switch.
- security8021x_
master str - 802.1X master virtual-switch.
- security8021x_
member_ strmode - 802.1X member mode. Valid values:
disable,switch. - security8021x_
mode str - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - security_
exempt_ strlist - Name of security-exempt-list.
- security_
external_ strlogout - URL of external authentication logout server.
- security_
external_ strweb - URL of external authentication web server.
- security_
groups str - User groups that can authenticate with the captive portal.
- security_
mac_ strauth_ bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - security_
mode str - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - security_
redirect_ strurl - URL redirection after disclaimer/authentication.
- select_
profile30a35b str - Select-Profile-30A-35B. Valid values:
30A,35B. - service_
name str - PPPoE service name.
- sflow_
sampler str - Enable/disable sFlow on this interface. Valid values:
disable,enable. - sfp_
dsl str - Enable/disable SFP DSL. Valid values:
disable,enable. - sfp_
dsl_ stradsl_ fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - sfp_
dsl_ strautodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - sfp_
dsl_ strmac - SFP DSL MAC address.
- speed str
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - spillover_
threshold float - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- src_
check str - Enable/disable source IP check. Valid values:
disable,enable. - status str
- Enable/disable VRRP. Valid values:
disable,enable. - stp str
- Enable/disable STP. Valid values:
disable,enable. - stp_
edge str - Enable/disable as STP edge port. Valid values:
disable,enable. - stp_
ha_ strsecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - stp_
ha_ strslave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - stpforward str
- Enable/disable STP forwarding. Valid values:
disable,enable. - stpforward_
mode str - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - strip_
priority_ strvlan_ tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - subst str
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - substitute_
dst_ strmac - Destination MAC address that all packets are sent to from this interface.
- sw_
algorithm str - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - swc_
first_ floatcreate - Swc-First-Create.
- swc_
vlan float - Swc-Vlan.
- switch str
- Switch.
- switch_
controller_ straccess_ vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - switch_
controller_ strarp_ inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - switch_
controller_ strauth - Switch-Controller-Auth. Valid values:
radius,usergroup. - switch_
controller_ strdhcp_ snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - switch_
controller_ strdhcp_ snooping_ option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - switch_
controller_ strdhcp_ snooping_ verify_ mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - switch_
controller_ strdynamic - Switch-Controller-Dynamic.
- switch_
controller_ strfeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - switch_
controller_ strigmp_ snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - switch_
controller_ strigmp_ snooping_ fast_ leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - switch_
controller_ strigmp_ snooping_ proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - switch_
controller_ striot_ scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - switch_
controller_ floatlearning_ limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- switch_
controller_ floatmgmt_ vlan - Switch-Controller-Mgmt-Vlan.
- switch_
controller_ strnac - Switch-Controller-Nac.
- switch_
controller_ strnetflow_ collect - NetFlow collection and processing. Valid values:
disable,enable. - switch_
controller_ stroffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - switch_
controller_ stroffload_ gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - switch_
controller_ stroffload_ ip - IP for routing offload on FortiSwitch.
- switch_
controller_ stroffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - switch_
controller_ stroffloading_ gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - switch_
controller_ stroffloading_ ip - Switch-Controller-Offloading-Ip.
- switch_
controller_ strradius_ server - Switch-Controller-Radius-Server.
- switch_
controller_ strrspan_ mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - switch_
controller_ strsource_ ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - switch_
controller_ strtraffic_ policy - Switch controller traffic policy for the VLAN.
- system_
id str - Define a system ID for the aggregate interface.
- system_
id_ strtype - Method in which system ID is generated. Valid values:
auto,user. - tc_
mode str - DSL transfer mode. Valid values:
ptm,atm. - tcp_
mss float - TCP maximum segment size. 0 means do not change segment size.
- trunk str
- Enable/disable VLAN trunk. Valid values:
disable,enable. - trust_
ip1 str - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust_
ip2 str - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust_
ip3 str - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust_
ip61 str - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust_
ip62 str - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust_
ip63 str - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- type str
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - username str
- Username of the PPPoE account, provided by your ISP.
- vci float
- Virtual Channel ID
- vectoring str
- Enable/disable DSL vectoring. Valid values:
disable,enable. - vindex float
- Vindex.
- vlan str
- Vlan.
- vlan_
op_ strmode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - vlan_
protocol str - Vlan-Protocol. Valid values:
8021q,8021ad. - vlanforward str
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - vlanid float
- VLAN ID (1 - 4094).
- vpi float
- Virtual Path ID
- vrf float
- Virtual Routing Forwarding ID.
- vrrp_
virtual_ strmac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - vrrps
Sequence[Object
Fsp Vlan Interface Vrrp Args] - Vrrp. The structure of
vrrpblock is documented below. - wccp str
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - weight float
- Default weight for static routes (if route has no weight configured).
- wifi5g_
threshold str - Minimal signal strength to be considered as a good 5G AP.
- wifi_
acl str - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - wifi_
ap_ strband - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - wifi_
auth str - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - wifi_
auto_ strconnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - wifi_
auto_ strsave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - wifi_
broadcast_ strssid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - wifi_
dns_ strserver1 - DNS server 1.
- wifi_
dns_ strserver2 - DNS server 2.
- wifi_
encrypt str - Data encryption. Valid values:
TKIP,AES. - wifi_
fragment_ floatthreshold - WiFi fragment threshold (800 - 2346).
- wifi_
gateway str - IPv4 default gateway IP address.
- wifi_
keyindex float - WEP key index (1 - 4).
- wifi_
keys Sequence[str] - WiFi WEP Key.
- wifi_
mac_ strfilter - Enable/disable MAC filter status. Valid values:
disable,enable. - wifi_
passphrases Sequence[str] - WiFi pre-shared key for WPA.
- wifi_
radius_ strserver - WiFi RADIUS server for WPA.
- wifi_
rts_ floatthreshold - WiFi RTS threshold (256 - 2346).
- wifi_
security str - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - wifi_
ssid str - IEEE 802.11 Service Set Identifier.
- wifi_
usergroup str - WiFi user group for WPA.
- wins_
ip str - WINS server IP.
- ac
Name String - PPPoE server name.
- adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - aggregate String
- Aggregate.
- aggregate
Type String - Type of aggregation. Valid values:
physical,vxlan. - algorithm String
- Frame distribution algorithm. Valid values:
L2,L3,L4. - alias String
- Alias will be displayed with the interface name to make it easier to distinguish.
- allowaccesses List<String>
- Permitted types of management access to this interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - annex String
- Set xDSL annex type. Valid values:
a,b,j,bjm,i,al,m,aijlm. - ap
Discover String - Enable/disable automatic registration of unknown FortiAP devices. Valid values:
disable,enable. - arpforward String
- Enable/disable ARP forwarding. Valid values:
disable,enable. - atm
Protocol String - ATM protocol. Valid values:
none,ipoa. - auth
Cert String - HTTPS server certificate.
- auth
Portal StringAddr - Address of captive portal.
- auth
Type String - PPP authentication type to use. Valid values:
auto,pap,chap,mschapv1,mschapv2. - auto
Auth StringExtension Device - Enable/disable automatic authorization of dedicated Fortinet extension device on this interface. Valid values:
disable,enable. - bandwidth
Measure NumberTime - Bandwidth-Measure-Time.
- bfd String
- Bidirectional Forwarding Detection (BFD) settings. Valid values:
global,enable,disable. - bfd
Desired NumberMin Tx - BFD desired minimal transmit interval.
- bfd
Detect NumberMult - BFD detection multiplier.
- bfd
Required NumberMin Rx - BFD required minimal receive interval.
- broadcast
Forticlient StringDiscovery - Enable/disable broadcasting FortiClient discovery messages. Valid values:
disable,enable. - broadcast
Forward String - Enable/disable broadcast forwarding. Valid values:
disable,enable. - captive
Portal Number - Enable/disable captive portal.
- cli
Conn NumberStatus - Cli-Conn-Status.
- color Number
- Color of icon on the GUI.
- ddns String
- Ddns. Valid values:
disable,enable. - ddns
Auth String - Ddns-Auth. Valid values:
disable,tsig. - ddns
Domain String - Ddns-Domain.
- ddns
Key String - Ddns-Key.
- ddns
Keyname String - Ddns-Keyname.
- ddns
Passwords List<String> - Ddns-Password.
- ddns
Server String - Ddns-Server. Valid values:
dhs.org,dyndns.org,dyns.net,tzo.com,ods.org,vavic.com,now.net.cn,dipdns.net,easydns.com,genericDDNS. - ddns
Server StringIp - Ddns-Server-Ip.
- ddns
Sn String - Ddns-Sn.
- ddns
Ttl Number - Ddns-Ttl.
- ddns
Username String - Ddns-Username.
- ddns
Zone String - Ddns-Zone.
- dedicated
To String - Configure interface for single purpose. Valid values:
none,management. - default
Purdue StringLevel - default purdue level of device detected on this interface. Valid values:
1,2,3,4,5,1.5,2.5,3.5,5.5. - defaultgw String
- Enable to get the gateway IP from the DHCP or PPPoE server. Valid values:
disable,enable. - description String
- Description.
- detected
Peer NumberMtu - Detected-Peer-Mtu.
- detectprotocols List<String>
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver String
- Gateway's ping server for this IP.
- device
Access StringList - Device access list.
- device
Identification String - Enable/disable passively gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Identification StringActive Scan - Enable/disable active gathering of device identity information about the devices on the network connected to this interface. Valid values:
disable,enable. - device
Netscan String - Device-Netscan. Valid values:
disable,enable. - device
User StringIdentification - Enable/disable passive gathering of user identity information about users on this interface. Valid values:
disable,enable. - devindex Number
- Devindex.
- dhcp
Broadcast StringFlag - Enable/disable setting of the broadcast flag in messages sent by the DHCP client (default = enable). Valid values:
disable,enable. - dhcp
Classless StringRoute Addition - Enable/disable addition of classless static routes retrieved from DHCP server. Valid values:
disable,enable. - dhcp
Client StringIdentifier - DHCP client identifier.
- dhcp
Relay StringAgent Option - Enable/disable DHCP relay agent option. Valid values:
disable,enable. - dhcp
Relay StringCircuit Id - DHCP relay circuit ID.
- dhcp
Relay StringInterface - Specify outgoing interface to reach server.
- dhcp
Relay StringInterface Select Method - Specify how to select outgoing interface to reach server. Valid values:
auto,sdwan,specify. - dhcp
Relay List<String>Ips - DHCP relay IP address.
- dhcp
Relay StringLink Selection - DHCP relay link selection.
- dhcp
Relay StringRequest All Server - Dhcp-Relay-Request-All-Server. Valid values:
disable,enable. - dhcp
Relay StringService - Enable/disable allowing this interface to act as a DHCP relay. Valid values:
disable,enable. - dhcp
Relay StringSource Ip - IP address used by the DHCP relay as its source IP.
- dhcp
Relay StringType - DHCP relay type (regular or IPsec). Valid values:
regular,ipsec. - dhcp
Renew NumberTime - DHCP renew time in seconds (300-604800), 0 means use the renew time provided by the server.
- dhcp
Smart StringRelay - Enable/disable DHCP smart relay. Valid values:
disable,enable. - disc
Retry NumberTimeout - Time in seconds to wait before retrying to start a PPPoE discovery, 0 means no timeout.
- disconnect
Threshold Number - Time in milliseconds to wait before sending a notification that this interface is down or disconnected.
- distance Number
- Distance for routes learned through PPPoE or DHCP, lower distance indicates preferred route.
- dns
Query String - Dns-Query. Valid values:
disable,recursive,non-recursive. - dns
Server StringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. Valid values:
disable,enable. - dns
Server List<String>Protocols - DNS transport protocols. Valid values:
cleartext,dot,doh. - drop
Fragment String - Enable/disable drop fragment packets. Valid values:
disable,enable. - drop
Overlapped StringFragment - Enable/disable drop overlapped fragment packets. Valid values:
disable,enable. - dynamic
Sort StringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- eap
Ca List<String>Certs - Eap-Ca-Cert.
- eap
Identity String - Eap-Identity.
- eap
Method String - Eap-Method. Valid values:
tls,peap. - eap
Passwords List<String> - Eap-Password.
- eap
Supplicant String - Eap-Supplicant. Valid values:
disable,enable. - eap
User List<String>Certs - Eap-User-Cert.
- egress
Cos String - Override outgoing CoS in user VLAN tag. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - egress
Shaping StringProfile - Outgoing traffic shaping profile.
- eip String
- Eip.
- endpoint
Compliance String - Endpoint-Compliance. Valid values:
disable,enable. - estimated
Downstream NumberBandwidth - Estimated maximum downstream bandwidth (kbps). Used to estimate link utilization.
- estimated
Upstream NumberBandwidth - Estimated maximum upstream bandwidth (kbps). Used to estimate link utilization.
- explicit
Ftp StringProxy - Enable/disable the explicit FTP proxy on this interface. Valid values:
disable,enable. - explicit
Web StringProxy - Enable/disable the explicit web proxy on this interface. Valid values:
disable,enable. - external String
- Enable/disable identifying the interface as an external interface (which usually means it's connected to the Internet). Valid values:
disable,enable. - fail
Action StringOn Extender - Action on extender when interface fail . Valid values:
soft-restart,hard-restart,reboot. - fail
Alert StringInterfaces - Names of the FortiGate interfaces to which the link failure alert is sent.
- fail
Alert StringMethod - Select link-failed-signal or link-down method to alert about a failed link. Valid values:
link-failed-signal,link-down. - fail
Detect String - Enable/disable fail detection features for this interface. Valid values:
disable,enable. - fail
Detect List<String>Options - Options for detecting that this interface has failed. Valid values:
detectserver,link-down. - fdp String
- Fdp. Valid values:
disable,enable. - fortiheartbeat String
- Fortiheartbeat. Valid values:
disable,enable. - fortilink String
- Enable FortiLink to dedicate this interface to manage other Fortinet devices. Valid values:
disable,enable. - fortilink
Backup NumberLink - Fortilink-Backup-Link.
- fortilink
Neighbor StringDetect - Protocol for FortiGate neighbor discovery. Valid values:
lldp,fortilink. - fortilink
Split StringInterface - Enable/disable FortiLink split interface to connect member link to different FortiSwitch in stack for uplink redundancy. Valid values:
disable,enable. - fortilink
Stacking String - Enable/disable FortiLink switch-stacking on this interface. Valid values:
disable,enable. - forward
Domain Number - Transparent mode forward domain.
- forward
Error StringCorrection - Enable/disable forward error correction (FEC Clause 91). Valid values:
disable,enable,rs-fec,base-r-fec,fec-cl91,fec-cl74. - fp
Anomalies List<String> - Fp-Anomaly. Valid values:
drop_tcp_fin_noack,pass_winnuke,pass_tcpland,pass_udpland,pass_icmpland,pass_ipland,pass_iprr,pass_ipssrr,pass_iplsrr,pass_ipstream,pass_ipsecurity,pass_iptimestamp,pass_ipunknown_option,pass_ipunknown_prot,pass_icmp_frag,pass_tcp_no_flag,pass_tcp_fin_noack,drop_winnuke,drop_tcpland,drop_udpland,drop_icmpland,drop_ipland,drop_iprr,drop_ipssrr,drop_iplsrr,drop_ipstream,drop_ipsecurity,drop_iptimestamp,drop_ipunknown_option,drop_ipunknown_prot,drop_icmp_frag,drop_tcp_no_flag. - fp
Disables List<String> - Fp-Disable. Valid values:
all,ipsec,none. - gateway
Address String - Gateway address
- generic
Receive StringOffload - Generic-Receive-Offload. Valid values:
disable,enable. - gi
Gk String - Enable/disable Gi Gatekeeper. Valid values:
disable,enable. - gwaddr String
- Gateway address
- gwdetect String
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha
Priority Number - HA election priority for the PING server.
- icmp
Accept StringRedirect - Enable/disable ICMP accept redirect. Valid values:
disable,enable. - icmp
Redirect String - Icmp-Redirect. Valid values:
disable,enable. - icmp
Send StringRedirect - Enable/disable ICMP send redirect. Valid values:
disable,enable. - ident
Accept String - Enable/disable authentication for this interface. Valid values:
disable,enable. - idle
Timeout Number - PPPoE auto disconnect after idle timeout seconds, 0 means no timeout.
- if
Mdix String - If-Mdix. Valid values:
auto,normal,crossover. - if
Media String - If-Media. Valid values:
auto,copper,fiber. - ike
Saml List<String>Servers - Ike-Saml-Server.
- in
Force NumberVlan Cos - In-Force-Vlan-Cos.
- inbandwidth Number
- Bandwidth limit for incoming traffic (0 - 16776000 kbps), 0 means unlimited.
- ingress
Cos String - Override incoming CoS in user VLAN tag on VLAN interface or assign a priority VLAN tag on physical interface. Valid values:
disable,cos0,cos1,cos2,cos3,cos4,cos5,cos6,cos7. - ingress
Shaping StringProfile - Incoming traffic shaping profile.
- ingress
Spillover NumberThreshold - Ingress Spillover threshold (0 - 16776000 kbps).
- interconnect
Profile String - Set interconnect profile. Valid values:
default,profile1,profile2. - internal Number
- Implicitly created.
- ip String
- Interface IPv4 address and subnet mask, syntax: X.X.X.X/24.
- ip
Managed StringBy Fortiipam - Ip-Managed-By-Fortiipam. Valid values:
disable,enable. - ipmac String
- Enable/disable IP/MAC binding. Valid values:
disable,enable. - ips
Sniffer StringMode - Enable/disable the use of this interface as a one-armed sniffer. Valid values:
disable,enable. - ipunnumbered String
- Unnumbered IP used for PPPoE interfaces for which no unique local address is provided.
- ipv6 Property Map
- Ipv6. The structure of
ipv6block is documented below. - l2forward String
- Enable/disable l2 forwarding. Valid values:
disable,enable. - l2tp
Client String - Enable/disable this interface as a Layer 2 Tunnelling Protocol (L2TP) client. Valid values:
disable,enable. - lacp
Ha StringSecondary - Lacp-Ha-Secondary. Valid values:
disable,enable. - lacp
Ha StringSlave - LACP HA slave. Valid values:
disable,enable. - lacp
Mode String - LACP mode. Valid values:
static,passive,active. - lacp
Speed String - How often the interface sends LACP messages. Valid values:
slow,fast. - large
Receive StringOffload - Large-Receive-Offload. Valid values:
disable,enable. - lcp
Echo NumberInterval - Time in seconds between PPPoE Link Control Protocol (LCP) echo requests.
- lcp
Max NumberEcho Fails - Maximum missed LCP echo messages before disconnect.
- link
Up NumberDelay - Number of milliseconds to wait before considering a link is up.
- listen
Forticlient StringConnection - Listen-Forticlient-Connection. Valid values:
disable,enable. - lldp
Network StringPolicy - LLDP-MED network policy profile.
- lldp
Reception String - Enable/disable Link Layer Discovery Protocol (LLDP) reception. Valid values:
disable,enable,vdom. - lldp
Transmission String - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. Valid values:
enable,disable,vdom. - log String
- Log. Valid values:
disable,enable. - macaddr String
- Change the interface's MAC address.
- managed
Subnetwork StringSize - Managed-Subnetwork-Size. Valid values:
256,512,1024,2048,4096,8192,16384,32768,65536. - management
Ip String - High Availability in-band management IP address of this interface.
- max
Egress NumberBurst Rate - Max egress burst rate (kbits per sec).
- max
Egress NumberRate - Max egress rate (kbits per sec).
- measured
Downstream NumberBandwidth - Measured-Downstream-Bandwidth.
- measured
Upstream NumberBandwidth - Measured-Upstream-Bandwidth.
- mediatype String
- Select SFP media interface type Valid values:
serdes-sfp,sgmii-sfp,cfp2-sr10,cfp2-lr4,serdes-copper-sfp,sr,cr,lr,qsfp28-sr4,qsfp28-lr4,qsfp28-cr4,sr4,cr4,lr4. - member String
- Physical interfaces that belong to the aggregate or redundant interface.
- min
Links Number - Minimum number of aggregated ports that must be up.
- min
Links StringDown - Action to take when less than the configured minimum number of links are active. Valid values:
operational,administrative. - mirroring
Direction String - Port mirroring direction. Valid values:
rx,tx,both. - mirroring
Port String - Mirroring port.
- mode String
- Addressing mode (static, DHCP, PPPoE). Valid values:
static,dhcp,pppoe,pppoa,ipoa,eoa. - monitor
Bandwidth String - Monitor-Bandwidth. Valid values:
disable,enable. - mtu Number
- MTU value for this interface.
- mtu
Override String - Enable to set a custom MTU for this interface. Valid values:
disable,enable. - mux
Type String - Multiplexer type Valid values:
llc-encaps,vc-encaps. - name String
- Name.
- ndiscforward String
- Enable/disable NDISC forwarding. Valid values:
disable,enable. - netbios
Forward String - Enable/disable NETBIOS forwarding. Valid values:
disable,enable. - netflow
Sampler String - Enable/disable NetFlow on this interface and set the data that NetFlow collects (rx, tx, or both). Valid values:
disable,tx,rx,both. - np
Qos NumberProfile - NP QoS profile ID.
- npu
Fastpath String - Npu-Fastpath. Valid values:
disable,enable. - nst String
- Nst. Valid values:
disable,enable. - object
Fsp StringVlan Interface Id - an identifier for the resource.
- out
Force NumberVlan Cos - Out-Force-Vlan-Cos.
- outbandwidth Number
- Bandwidth limit for outgoing traffic (0 - 16776000 kbps).
- padt
Retry NumberTimeout - PPPoE Active Discovery Terminate (PADT) used to terminate sessions after an idle time.
- passwords List<String>
- PPPoE account's password.
- peer
Interface String - Peer-Interface.
- phy
Mode String - DSL physical mode. Valid values:
auto,adsl,vdsl. - ping
Serv NumberStatus - Ping-Serv-Status.
- poe String
- Enable/disable PoE status. Valid values:
disable,enable. - polling
Interval Number - sFlow polling interval (1 - 255 sec).
- port
Mirroring String - Enable/disable NP port mirroring. Valid values:
disable,enable. - pppoe
Unnumbered StringNegotiate - Enable/disable PPPoE unnumbered negotiation. Valid values:
disable,enable. - pptp
Auth StringType - PPTP authentication type. Valid values:
auto,pap,chap,mschapv1,mschapv2. - pptp
Client String - Enable/disable PPTP client. Valid values:
disable,enable. - pptp
Passwords List<String> - PPTP password.
- pptp
Server StringIp - PPTP server IP address.
- pptp
Timeout Number - Idle timer in minutes (0 for disabled).
- pptp
User String - PPTP user name.
- preserve
Session StringRoute - Enable/disable preservation of session route when dirty. Valid values:
disable,enable. - priority Number
- Priority of the virtual router (1 - 255).
- priority
Override String - Enable/disable fail back to higher priority port once recovered. Valid values:
disable,enable. - proxy
Captive StringPortal - Enable/disable proxy captive portal on this interface. Valid values:
disable,enable. - pvc
Atm StringQos - SFP-DSL ADSL Fallback PVC ATM QoS. Valid values:
cbr,rt-vbr,nrt-vbr. - pvc
Chan Number - SFP-DSL ADSL Fallback PVC Channel.
- pvc
Crc Number - SFP-DSL ADSL Fallback PVC CRC Option: bit0: sar LLC preserve, bit1: ream LLC preserve, bit2: ream VC-MUX has crc.
- pvc
Pcr Number - SFP-DSL ADSL Fallback PVC Packet Cell Rate in cells (0 - 5500).
- pvc
Scr Number - SFP-DSL ADSL Fallback PVC Sustainable Cell Rate in cells (0 - 5500).
- pvc
Vlan NumberId - SFP-DSL ADSL Fallback PVC VLAN ID.
- pvc
Vlan NumberRx Id - SFP-DSL ADSL Fallback PVC VLANID RX.
- pvc
Vlan StringRx Op - SFP-DSL ADSL Fallback PVC VLAN RX op. Valid values:
pass-through,replace,remove. - pvc
Vlan NumberTx Id - SFP-DSL ADSL Fallback PVC VLAN ID TX.
- pvc
Vlan StringTx Op - SFP-DSL ADSL Fallback PVC VLAN TX op. Valid values:
pass-through,replace,remove. - reachable
Time Number - IPv4 reachable time in milliseconds (30000 - 3600000, default = 30000).
- redundant
Interface String - Redundant-Interface.
- remote
Ip String - Remote IP address of tunnel.
- replacemsg
Override StringGroup - Replacement message override group.
- retransmission String
- Enable/disable DSL retransmission. Valid values:
disable,enable. - ring
Rx Number - RX ring size.
- ring
Tx Number - TX ring size.
- role String
- Interface role. Valid values:
lan,wan,dmz,undefined. - sample
Direction String - Data that NetFlow collects (rx, tx, or both). Valid values:
rx,tx,both. - sample
Rate Number - sFlow sample rate (10 - 99999).
- scan
Botnet StringConnections - Scan-Botnet-Connections. Valid values:
disable,block,monitor. - scopetype String
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - secondary
Ip String - Enable/disable adding a secondary IP to this interface. Valid values:
disable,enable. - secondaryips List<Property Map>
- Secondaryip. The structure of
secondaryipblock is documented below. - security8021x
Dynamic NumberVlan Id - VLAN ID for virtual switch.
- security8021x
Master String - 802.1X master virtual-switch.
- security8021x
Member StringMode - 802.1X member mode. Valid values:
disable,switch. - security8021x
Mode String - 802.1X mode. Valid values:
default,dynamic-vlan,fallback,slave. - security
Exempt StringList - Name of security-exempt-list.
- security
External StringLogout - URL of external authentication logout server.
- security
External StringWeb - URL of external authentication web server.
- security
Groups String - User groups that can authenticate with the captive portal.
- security
Mac StringAuth Bypass - Enable/disable MAC authentication bypass. Valid values:
disable,enable,mac-auth-only. - security
Mode String - Turn on captive portal authentication for this interface. Valid values:
none,captive-portal,802.1X. - security
Redirect StringUrl - URL redirection after disclaimer/authentication.
- select
Profile30a35b String - Select-Profile-30A-35B. Valid values:
30A,35B. - service
Name String - PPPoE service name.
- sflow
Sampler String - Enable/disable sFlow on this interface. Valid values:
disable,enable. - sfp
Dsl String - Enable/disable SFP DSL. Valid values:
disable,enable. - sfp
Dsl StringAdsl Fallback - Enable/disable SFP DSL ADSL fallback. Valid values:
disable,enable. - sfp
Dsl StringAutodetect - Enable/disable SFP DSL MAC address autodetect. Valid values:
disable,enable. - sfp
Dsl StringMac - SFP DSL MAC address.
- speed String
- Interface speed. The default setting and the options available depend on the interface hardware. Valid values:
auto,10full,10half,100full,100half,1000full,1000half,10000full,1000auto,10000auto,40000full,100Gfull,25000full,40000auto,25000auto,100Gauto. - spillover
Threshold Number - Egress Spillover threshold (0 - 16776000 kbps), 0 means unlimited.
- src
Check String - Enable/disable source IP check. Valid values:
disable,enable. - status String
- Enable/disable VRRP. Valid values:
disable,enable. - stp String
- Enable/disable STP. Valid values:
disable,enable. - stp
Edge String - Enable/disable as STP edge port. Valid values:
disable,enable. - stp
Ha StringSecondary - Stp-Ha-Secondary. Valid values:
disable,enable,priority-adjust. - stp
Ha StringSlave - Control STP behaviour on HA slave. Valid values:
disable,enable,priority-adjust. - stpforward String
- Enable/disable STP forwarding. Valid values:
disable,enable. - stpforward
Mode String - Configure STP forwarding mode. Valid values:
rpl-all-ext-id,rpl-bridge-ext-id,rpl-nothing. - strip
Priority StringVlan Tag - Strip-Priority-Vlan-Tag. Valid values:
disable,enable. - subst String
- Enable to always send packets from this interface to a destination MAC address. Valid values:
disable,enable. - substitute
Dst StringMac - Destination MAC address that all packets are sent to from this interface.
- sw
Algorithm String - Frame distribution algorithm for switch. Valid values:
l2,l3,eh. - swc
First NumberCreate - Swc-First-Create.
- swc
Vlan Number - Swc-Vlan.
- switch String
- Switch.
- switch
Controller StringAccess Vlan - Block FortiSwitch port-to-port traffic. Valid values:
disable,enable. - switch
Controller StringArp Inspection - Enable/disable FortiSwitch ARP inspection. Valid values:
disable,enable. - switch
Controller StringAuth - Switch-Controller-Auth. Valid values:
radius,usergroup. - switch
Controller StringDhcp Snooping - Switch controller DHCP snooping. Valid values:
disable,enable. - switch
Controller StringDhcp Snooping Option82 - Switch controller DHCP snooping option82. Valid values:
disable,enable. - switch
Controller StringDhcp Snooping Verify Mac - Switch controller DHCP snooping verify MAC. Valid values:
disable,enable. - switch
Controller StringDynamic - Switch-Controller-Dynamic.
- switch
Controller StringFeature - Switch-Controller-Feature. Valid values:
none,default-vlan,quarantine,sniffer,voice,camera,rspan,video,nac. - switch
Controller StringIgmp Snooping - Switch controller IGMP snooping. Valid values:
disable,enable. - switch
Controller StringIgmp Snooping Fast Leave - Switch controller IGMP snooping fast-leave. Valid values:
disable,enable. - switch
Controller StringIgmp Snooping Proxy - Switch controller IGMP snooping proxy. Valid values:
disable,enable. - switch
Controller StringIot Scanning - Switch-Controller-Iot-Scanning. Valid values:
disable,enable. - switch
Controller NumberLearning Limit - Limit the number of dynamic MAC addresses on this VLAN (1 - 128, 0 = no limit, default).
- switch
Controller NumberMgmt Vlan - Switch-Controller-Mgmt-Vlan.
- switch
Controller StringNac - Switch-Controller-Nac.
- switch
Controller StringNetflow Collect - NetFlow collection and processing. Valid values:
disable,enable. - switch
Controller StringOffload - Enable/disable managed FortiSwitch routing offload. Valid values:
disable,enable. - switch
Controller StringOffload Gw - Enable/disable managed FortiSwitch routing offload gateway. Valid values:
disable,enable. - switch
Controller StringOffload Ip - IP for routing offload on FortiSwitch.
- switch
Controller StringOffloading - Switch-Controller-Offloading. Valid values:
disable,enable. - switch
Controller StringOffloading Gw - Switch-Controller-Offloading-Gw. Valid values:
disable,enable. - switch
Controller StringOffloading Ip - Switch-Controller-Offloading-Ip.
- switch
Controller StringRadius Server - Switch-Controller-Radius-Server.
- switch
Controller StringRspan Mode - Stop Layer2 MAC learning and interception of BPDUs and other packets on this interface. Valid values:
disable,enable. - switch
Controller StringSource Ip - Switch-Controller-Source-Ip. Valid values:
outbound,fixed. - switch
Controller StringTraffic Policy - Switch controller traffic policy for the VLAN.
- system
Id String - Define a system ID for the aggregate interface.
- system
Id StringType - Method in which system ID is generated. Valid values:
auto,user. - tc
Mode String - DSL transfer mode. Valid values:
ptm,atm. - tcp
Mss Number - TCP maximum segment size. 0 means do not change segment size.
- trunk String
- Enable/disable VLAN trunk. Valid values:
disable,enable. - trust
Ip1 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip2 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip3 String - Trusted host for dedicated management traffic (0.0.0.0/24 for all hosts).
- trust
Ip61 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip62 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- trust
Ip63 String - Trusted IPv6 host for dedicated management traffic (::/0 for all hosts).
- type String
- Interface type. Valid values:
physical,vlan,aggregate,redundant,tunnel,wireless,vdom-link,loopback,switch,hard-switch,hdlc,vap-switch,wl-mesh,fortilink,switch-vlan,fctrl-trunk,tdm,fext-wan,vxlan,emac-vlan,geneve. - username String
- Username of the PPPoE account, provided by your ISP.
- vci Number
- Virtual Channel ID
- vectoring String
- Enable/disable DSL vectoring. Valid values:
disable,enable. - vindex Number
- Vindex.
- vlan String
- Vlan.
- vlan
Op StringMode - Vlan-Op-Mode. Valid values:
tag,untag,passthrough. - vlan
Protocol String - Vlan-Protocol. Valid values:
8021q,8021ad. - vlanforward String
- Enable/disable traffic forwarding between VLANs on this interface. Valid values:
disable,enable. - vlanid Number
- VLAN ID (1 - 4094).
- vpi Number
- Virtual Path ID
- vrf Number
- Virtual Routing Forwarding ID.
- vrrp
Virtual StringMac - Enable/disable use of virtual MAC for VRRP. Valid values:
disable,enable. - vrrps List<Property Map>
- Vrrp. The structure of
vrrpblock is documented below. - wccp String
- Enable/disable WCCP on this interface. Used for encapsulated WCCP communication between WCCP clients and servers. Valid values:
disable,enable. - weight Number
- Default weight for static routes (if route has no weight configured).
- wifi5g
Threshold String - Minimal signal strength to be considered as a good 5G AP.
- wifi
Acl String - Access control for MAC addresses in the MAC list. Valid values:
deny,allow. - wifi
Ap StringBand - How to select the AP to connect. Valid values:
any,5g-preferred,5g-only. - wifi
Auth String - WiFi authentication. Valid values:
PSK,RADIUS,radius,usergroup. - wifi
Auto StringConnect - Enable/disable WiFi network auto connect. Valid values:
disable,enable. - wifi
Auto StringSave - Enable/disable WiFi network automatic save. Valid values:
disable,enable. - wifi
Broadcast StringSsid - Enable/disable SSID broadcast in the beacon. Valid values:
disable,enable. - wifi
Dns StringServer1 - DNS server 1.
- wifi
Dns StringServer2 - DNS server 2.
- wifi
Encrypt String - Data encryption. Valid values:
TKIP,AES. - wifi
Fragment NumberThreshold - WiFi fragment threshold (800 - 2346).
- wifi
Gateway String - IPv4 default gateway IP address.
- wifi
Keyindex Number - WEP key index (1 - 4).
- wifi
Keys List<String> - WiFi WEP Key.
- wifi
Mac StringFilter - Enable/disable MAC filter status. Valid values:
disable,enable. - wifi
Passphrases List<String> - WiFi pre-shared key for WPA.
- wifi
Radius StringServer - WiFi RADIUS server for WPA.
- wifi
Rts NumberThreshold - WiFi RTS threshold (256 - 2346).
- wifi
Security String - Wireless access security of SSID. Valid values:
None,WEP64,wep64,WEP128,wep128,WPA_PSK,WPA_RADIUS,WPA,WPA2,WPA2_AUTO,open,wpa-personal,wpa-enterprise,wpa-only-personal,wpa-only-enterprise,wpa2-only-personal,wpa2-only-enterprise. - wifi
Ssid String - IEEE 802.11 Service Set Identifier.
- wifi
Usergroup String - WiFi user group for WPA.
- wins
Ip String - WINS server IP.
Supporting Types
ObjectFspVlanInterfaceIpv6, ObjectFspVlanInterfaceIpv6Args
- Autoconf string
- Enable/disable address auto config. Valid values:
disable,enable. - Cli
Conn6Status double - Cli-Conn6-Status.
- Dhcp6Client
Options List<string> - Dhcp6-Client-Options. Valid values:
rapid,iapd,iana,dns,dnsname. - Dhcp6Information
Request string - Enable/disable DHCPv6 information request. Valid values:
disable,enable. - Dhcp6Prefix
Delegation string - Enable/disable DHCPv6 prefix delegation. Valid values:
disable,enable. - Dhcp6Prefix
Hint string - DHCPv6 prefix that will be used as a hint to the upstream DHCPv6 server.
- Dhcp6Prefix
Hint doublePlt - DHCPv6 prefix hint preferred life time (sec), 0 means unlimited lease time.
- Dhcp6Prefix
Hint doubleVlt - DHCPv6 prefix hint valid life time (sec).
- Dhcp6Relay
Interface stringId - DHCP6 relay interface ID.
- Dhcp6Relay
Ip string - DHCPv6 relay IP address.
- Dhcp6Relay
Service string - Enable/disable DHCPv6 relay. Valid values:
disable,enable. - Dhcp6Relay
Source stringInterface - Enable/disable use of address on this interface as the source address of the relay message. Valid values:
disable,enable. - Dhcp6Relay
Source stringIp - IPv6 address used by the DHCP6 relay as its source IP.
- Dhcp6Relay
Type string - DHCPv6 relay type. Valid values:
regular. - Icmp6Send
Redirect string - Icmp6-Send-Redirect. Valid values:
disable,enable. - Interface
Identifier string - Interface-Identifier.
- Ip6Address string
- Primary IPv6 address prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- Ip6Allowaccesses List<string>
- Allow management access to the interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,capwap,fabric. - Ip6Default
Life double - Default life (sec).
- Ip6Delegated
Prefix doubleIaid - IAID of obtained delegated-prefix from the upstream interface.
- Ip6Delegated
Prefix List<ObjectLists Fsp Vlan Interface Ipv6Ip6Delegated Prefix List> - Ip6-Delegated-Prefix-List. The structure of
ip6_delegated_prefix_listblock is documented below. - Ip6Dns
Server stringOverride - Enable/disable using the DNS server acquired by DHCP. Valid values:
disable,enable. - Ip6Extra
Addrs List<ObjectFsp Vlan Interface Ipv6Ip6Extra Addr> - Ip6-Extra-Addr. The structure of
ip6_extra_addrblock is documented below. - Ip6Hop
Limit double - Hop limit (0 means unspecified).
- Ip6Link
Mtu double - IPv6 link MTU.
- Ip6Manage
Flag string - Enable/disable the managed flag. Valid values:
disable,enable. - Ip6Max
Interval double - IPv6 maximum interval (4 to 1800 sec).
- Ip6Min
Interval double - IPv6 minimum interval (3 to 1350 sec).
- Ip6Mode string
- Addressing mode (static, DHCP, delegated). Valid values:
static,dhcp,pppoe,delegated. - Ip6Other
Flag string - Enable/disable the other IPv6 flag. Valid values:
disable,enable. - Ip6Prefix
Lists List<ObjectFsp Vlan Interface Ipv6Ip6Prefix List> - Ip6-Prefix-List. The structure of
ip6_prefix_listblock is documented below. - Ip6Prefix
Mode string - Ip6-Prefix-Mode. Valid values:
dhcp6,ra. - Ip6Reachable
Time double - IPv6 reachable time (milliseconds; 0 means unspecified).
- Ip6Retrans
Time double - IPv6 retransmit time (milliseconds; 0 means unspecified).
- Ip6Send
Adv string - Enable/disable sending advertisements about the interface. Valid values:
disable,enable. - Ip6Subnet string
- Subnet to routing prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- Ip6Upstream
Interface string - Interface name providing delegated information.
- Nd
Cert string - Neighbor discovery certificate.
- Nd
Cga stringModifier - Neighbor discovery CGA modifier.
- Nd
Mode string - Neighbor discovery mode. Valid values:
basic,SEND-compatible. - Nd
Security doubleLevel - Neighbor discovery security level (0 - 7; 0 = least secure, default = 0).
- Nd
Timestamp doubleDelta - Neighbor discovery timestamp delta value (1 - 3600 sec; default = 300).
- Nd
Timestamp doubleFuzz - Neighbor discovery timestamp fuzz factor (1 - 60 sec; default = 1).
- Ra
Send stringMtu - Ra-Send-Mtu. Valid values:
disable,enable. - Unique
Autoconf stringAddr - Unique-Autoconf-Addr. Valid values:
disable,enable. - Vrip6Link
Local string - Link-local IPv6 address of virtual router.
- Vrrp6s
List<Object
Fsp Vlan Interface Ipv6Vrrp6> Vrrp6. The structure of
vrrp6block is documented below.The
ip6_delegated_prefix_listblock supports:- Vrrp
Virtual stringMac6 - Enable/disable virtual MAC for VRRP. Valid values:
disable,enable.
- Autoconf string
- Enable/disable address auto config. Valid values:
disable,enable. - Cli
Conn6Status float64 - Cli-Conn6-Status.
- Dhcp6Client
Options []string - Dhcp6-Client-Options. Valid values:
rapid,iapd,iana,dns,dnsname. - Dhcp6Information
Request string - Enable/disable DHCPv6 information request. Valid values:
disable,enable. - Dhcp6Prefix
Delegation string - Enable/disable DHCPv6 prefix delegation. Valid values:
disable,enable. - Dhcp6Prefix
Hint string - DHCPv6 prefix that will be used as a hint to the upstream DHCPv6 server.
- Dhcp6Prefix
Hint float64Plt - DHCPv6 prefix hint preferred life time (sec), 0 means unlimited lease time.
- Dhcp6Prefix
Hint float64Vlt - DHCPv6 prefix hint valid life time (sec).
- Dhcp6Relay
Interface stringId - DHCP6 relay interface ID.
- Dhcp6Relay
Ip string - DHCPv6 relay IP address.
- Dhcp6Relay
Service string - Enable/disable DHCPv6 relay. Valid values:
disable,enable. - Dhcp6Relay
Source stringInterface - Enable/disable use of address on this interface as the source address of the relay message. Valid values:
disable,enable. - Dhcp6Relay
Source stringIp - IPv6 address used by the DHCP6 relay as its source IP.
- Dhcp6Relay
Type string - DHCPv6 relay type. Valid values:
regular. - Icmp6Send
Redirect string - Icmp6-Send-Redirect. Valid values:
disable,enable. - Interface
Identifier string - Interface-Identifier.
- Ip6Address string
- Primary IPv6 address prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- Ip6Allowaccesses []string
- Allow management access to the interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,capwap,fabric. - Ip6Default
Life float64 - Default life (sec).
- Ip6Delegated
Prefix float64Iaid - IAID of obtained delegated-prefix from the upstream interface.
- Ip6Delegated
Prefix []ObjectLists Fsp Vlan Interface Ipv6Ip6Delegated Prefix List Type - Ip6-Delegated-Prefix-List. The structure of
ip6_delegated_prefix_listblock is documented below. - Ip6Dns
Server stringOverride - Enable/disable using the DNS server acquired by DHCP. Valid values:
disable,enable. - Ip6Extra
Addrs []ObjectFsp Vlan Interface Ipv6Ip6Extra Addr Type - Ip6-Extra-Addr. The structure of
ip6_extra_addrblock is documented below. - Ip6Hop
Limit float64 - Hop limit (0 means unspecified).
- Ip6Link
Mtu float64 - IPv6 link MTU.
- Ip6Manage
Flag string - Enable/disable the managed flag. Valid values:
disable,enable. - Ip6Max
Interval float64 - IPv6 maximum interval (4 to 1800 sec).
- Ip6Min
Interval float64 - IPv6 minimum interval (3 to 1350 sec).
- Ip6Mode string
- Addressing mode (static, DHCP, delegated). Valid values:
static,dhcp,pppoe,delegated. - Ip6Other
Flag string - Enable/disable the other IPv6 flag. Valid values:
disable,enable. - Ip6Prefix
Lists []ObjectFsp Vlan Interface Ipv6Ip6Prefix List - Ip6-Prefix-List. The structure of
ip6_prefix_listblock is documented below. - Ip6Prefix
Mode string - Ip6-Prefix-Mode. Valid values:
dhcp6,ra. - Ip6Reachable
Time float64 - IPv6 reachable time (milliseconds; 0 means unspecified).
- Ip6Retrans
Time float64 - IPv6 retransmit time (milliseconds; 0 means unspecified).
- Ip6Send
Adv string - Enable/disable sending advertisements about the interface. Valid values:
disable,enable. - Ip6Subnet string
- Subnet to routing prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- Ip6Upstream
Interface string - Interface name providing delegated information.
- Nd
Cert string - Neighbor discovery certificate.
- Nd
Cga stringModifier - Neighbor discovery CGA modifier.
- Nd
Mode string - Neighbor discovery mode. Valid values:
basic,SEND-compatible. - Nd
Security float64Level - Neighbor discovery security level (0 - 7; 0 = least secure, default = 0).
- Nd
Timestamp float64Delta - Neighbor discovery timestamp delta value (1 - 3600 sec; default = 300).
- Nd
Timestamp float64Fuzz - Neighbor discovery timestamp fuzz factor (1 - 60 sec; default = 1).
- Ra
Send stringMtu - Ra-Send-Mtu. Valid values:
disable,enable. - Unique
Autoconf stringAddr - Unique-Autoconf-Addr. Valid values:
disable,enable. - Vrip6Link
Local string - Link-local IPv6 address of virtual router.
- Vrrp6s
[]Object
Fsp Vlan Interface Ipv6Vrrp6Type Vrrp6. The structure of
vrrp6block is documented below.The
ip6_delegated_prefix_listblock supports:- Vrrp
Virtual stringMac6 - Enable/disable virtual MAC for VRRP. Valid values:
disable,enable.
- autoconf String
- Enable/disable address auto config. Valid values:
disable,enable. - cli
Conn6Status Double - Cli-Conn6-Status.
- dhcp6Client
Options List<String> - Dhcp6-Client-Options. Valid values:
rapid,iapd,iana,dns,dnsname. - dhcp6Information
Request String - Enable/disable DHCPv6 information request. Valid values:
disable,enable. - dhcp6Prefix
Delegation String - Enable/disable DHCPv6 prefix delegation. Valid values:
disable,enable. - dhcp6Prefix
Hint String - DHCPv6 prefix that will be used as a hint to the upstream DHCPv6 server.
- dhcp6Prefix
Hint DoublePlt - DHCPv6 prefix hint preferred life time (sec), 0 means unlimited lease time.
- dhcp6Prefix
Hint DoubleVlt - DHCPv6 prefix hint valid life time (sec).
- dhcp6Relay
Interface StringId - DHCP6 relay interface ID.
- dhcp6Relay
Ip String - DHCPv6 relay IP address.
- dhcp6Relay
Service String - Enable/disable DHCPv6 relay. Valid values:
disable,enable. - dhcp6Relay
Source StringInterface - Enable/disable use of address on this interface as the source address of the relay message. Valid values:
disable,enable. - dhcp6Relay
Source StringIp - IPv6 address used by the DHCP6 relay as its source IP.
- dhcp6Relay
Type String - DHCPv6 relay type. Valid values:
regular. - icmp6Send
Redirect String - Icmp6-Send-Redirect. Valid values:
disable,enable. - interface
Identifier String - Interface-Identifier.
- ip6Address String
- Primary IPv6 address prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- ip6Allowaccesses List<String>
- Allow management access to the interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,capwap,fabric. - ip6Default
Life Double - Default life (sec).
- ip6Delegated
Prefix DoubleIaid - IAID of obtained delegated-prefix from the upstream interface.
- ip6Delegated
Prefix List<ObjectLists Fsp Vlan Interface Ipv6Ip6Delegated Prefix List> - Ip6-Delegated-Prefix-List. The structure of
ip6_delegated_prefix_listblock is documented below. - ip6Dns
Server StringOverride - Enable/disable using the DNS server acquired by DHCP. Valid values:
disable,enable. - ip6Extra
Addrs List<ObjectFsp Vlan Interface Ipv6Ip6Extra Addr> - Ip6-Extra-Addr. The structure of
ip6_extra_addrblock is documented below. - ip6Hop
Limit Double - Hop limit (0 means unspecified).
- ip6Link
Mtu Double - IPv6 link MTU.
- ip6Manage
Flag String - Enable/disable the managed flag. Valid values:
disable,enable. - ip6Max
Interval Double - IPv6 maximum interval (4 to 1800 sec).
- ip6Min
Interval Double - IPv6 minimum interval (3 to 1350 sec).
- ip6Mode String
- Addressing mode (static, DHCP, delegated). Valid values:
static,dhcp,pppoe,delegated. - ip6Other
Flag String - Enable/disable the other IPv6 flag. Valid values:
disable,enable. - ip6Prefix
Lists List<ObjectFsp Vlan Interface Ipv6Ip6Prefix List> - Ip6-Prefix-List. The structure of
ip6_prefix_listblock is documented below. - ip6Prefix
Mode String - Ip6-Prefix-Mode. Valid values:
dhcp6,ra. - ip6Reachable
Time Double - IPv6 reachable time (milliseconds; 0 means unspecified).
- ip6Retrans
Time Double - IPv6 retransmit time (milliseconds; 0 means unspecified).
- ip6Send
Adv String - Enable/disable sending advertisements about the interface. Valid values:
disable,enable. - ip6Subnet String
- Subnet to routing prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- ip6Upstream
Interface String - Interface name providing delegated information.
- nd
Cert String - Neighbor discovery certificate.
- nd
Cga StringModifier - Neighbor discovery CGA modifier.
- nd
Mode String - Neighbor discovery mode. Valid values:
basic,SEND-compatible. - nd
Security DoubleLevel - Neighbor discovery security level (0 - 7; 0 = least secure, default = 0).
- nd
Timestamp DoubleDelta - Neighbor discovery timestamp delta value (1 - 3600 sec; default = 300).
- nd
Timestamp DoubleFuzz - Neighbor discovery timestamp fuzz factor (1 - 60 sec; default = 1).
- ra
Send StringMtu - Ra-Send-Mtu. Valid values:
disable,enable. - unique
Autoconf StringAddr - Unique-Autoconf-Addr. Valid values:
disable,enable. - vrip6Link
Local String - Link-local IPv6 address of virtual router.
- vrrp6s
List<Object
Fsp Vlan Interface Ipv6Vrrp6> Vrrp6. The structure of
vrrp6block is documented below.The
ip6_delegated_prefix_listblock supports:- vrrp
Virtual StringMac6 - Enable/disable virtual MAC for VRRP. Valid values:
disable,enable.
- autoconf string
- Enable/disable address auto config. Valid values:
disable,enable. - cli
Conn6Status number - Cli-Conn6-Status.
- dhcp6Client
Options string[] - Dhcp6-Client-Options. Valid values:
rapid,iapd,iana,dns,dnsname. - dhcp6Information
Request string - Enable/disable DHCPv6 information request. Valid values:
disable,enable. - dhcp6Prefix
Delegation string - Enable/disable DHCPv6 prefix delegation. Valid values:
disable,enable. - dhcp6Prefix
Hint string - DHCPv6 prefix that will be used as a hint to the upstream DHCPv6 server.
- dhcp6Prefix
Hint numberPlt - DHCPv6 prefix hint preferred life time (sec), 0 means unlimited lease time.
- dhcp6Prefix
Hint numberVlt - DHCPv6 prefix hint valid life time (sec).
- dhcp6Relay
Interface stringId - DHCP6 relay interface ID.
- dhcp6Relay
Ip string - DHCPv6 relay IP address.
- dhcp6Relay
Service string - Enable/disable DHCPv6 relay. Valid values:
disable,enable. - dhcp6Relay
Source stringInterface - Enable/disable use of address on this interface as the source address of the relay message. Valid values:
disable,enable. - dhcp6Relay
Source stringIp - IPv6 address used by the DHCP6 relay as its source IP.
- dhcp6Relay
Type string - DHCPv6 relay type. Valid values:
regular. - icmp6Send
Redirect string - Icmp6-Send-Redirect. Valid values:
disable,enable. - interface
Identifier string - Interface-Identifier.
- ip6Address string
- Primary IPv6 address prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- ip6Allowaccesses string[]
- Allow management access to the interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,capwap,fabric. - ip6Default
Life number - Default life (sec).
- ip6Delegated
Prefix numberIaid - IAID of obtained delegated-prefix from the upstream interface.
- ip6Delegated
Prefix ObjectLists Fsp Vlan Interface Ipv6Ip6Delegated Prefix List[] - Ip6-Delegated-Prefix-List. The structure of
ip6_delegated_prefix_listblock is documented below. - ip6Dns
Server stringOverride - Enable/disable using the DNS server acquired by DHCP. Valid values:
disable,enable. - ip6Extra
Addrs ObjectFsp Vlan Interface Ipv6Ip6Extra Addr[] - Ip6-Extra-Addr. The structure of
ip6_extra_addrblock is documented below. - ip6Hop
Limit number - Hop limit (0 means unspecified).
- ip6Link
Mtu number - IPv6 link MTU.
- ip6Manage
Flag string - Enable/disable the managed flag. Valid values:
disable,enable. - ip6Max
Interval number - IPv6 maximum interval (4 to 1800 sec).
- ip6Min
Interval number - IPv6 minimum interval (3 to 1350 sec).
- ip6Mode string
- Addressing mode (static, DHCP, delegated). Valid values:
static,dhcp,pppoe,delegated. - ip6Other
Flag string - Enable/disable the other IPv6 flag. Valid values:
disable,enable. - ip6Prefix
Lists ObjectFsp Vlan Interface Ipv6Ip6Prefix List[] - Ip6-Prefix-List. The structure of
ip6_prefix_listblock is documented below. - ip6Prefix
Mode string - Ip6-Prefix-Mode. Valid values:
dhcp6,ra. - ip6Reachable
Time number - IPv6 reachable time (milliseconds; 0 means unspecified).
- ip6Retrans
Time number - IPv6 retransmit time (milliseconds; 0 means unspecified).
- ip6Send
Adv string - Enable/disable sending advertisements about the interface. Valid values:
disable,enable. - ip6Subnet string
- Subnet to routing prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- ip6Upstream
Interface string - Interface name providing delegated information.
- nd
Cert string - Neighbor discovery certificate.
- nd
Cga stringModifier - Neighbor discovery CGA modifier.
- nd
Mode string - Neighbor discovery mode. Valid values:
basic,SEND-compatible. - nd
Security numberLevel - Neighbor discovery security level (0 - 7; 0 = least secure, default = 0).
- nd
Timestamp numberDelta - Neighbor discovery timestamp delta value (1 - 3600 sec; default = 300).
- nd
Timestamp numberFuzz - Neighbor discovery timestamp fuzz factor (1 - 60 sec; default = 1).
- ra
Send stringMtu - Ra-Send-Mtu. Valid values:
disable,enable. - unique
Autoconf stringAddr - Unique-Autoconf-Addr. Valid values:
disable,enable. - vrip6Link
Local string - Link-local IPv6 address of virtual router.
- vrrp6s
Object
Fsp Vlan Interface Ipv6Vrrp6[] Vrrp6. The structure of
vrrp6block is documented below.The
ip6_delegated_prefix_listblock supports:- vrrp
Virtual stringMac6 - Enable/disable virtual MAC for VRRP. Valid values:
disable,enable.
- autoconf str
- Enable/disable address auto config. Valid values:
disable,enable. - cli_
conn6_ floatstatus - Cli-Conn6-Status.
- dhcp6_
client_ Sequence[str]options - Dhcp6-Client-Options. Valid values:
rapid,iapd,iana,dns,dnsname. - dhcp6_
information_ strrequest - Enable/disable DHCPv6 information request. Valid values:
disable,enable. - dhcp6_
prefix_ strdelegation - Enable/disable DHCPv6 prefix delegation. Valid values:
disable,enable. - dhcp6_
prefix_ strhint - DHCPv6 prefix that will be used as a hint to the upstream DHCPv6 server.
- dhcp6_
prefix_ floathint_ plt - DHCPv6 prefix hint preferred life time (sec), 0 means unlimited lease time.
- dhcp6_
prefix_ floathint_ vlt - DHCPv6 prefix hint valid life time (sec).
- dhcp6_
relay_ strinterface_ id - DHCP6 relay interface ID.
- dhcp6_
relay_ strip - DHCPv6 relay IP address.
- dhcp6_
relay_ strservice - Enable/disable DHCPv6 relay. Valid values:
disable,enable. - dhcp6_
relay_ strsource_ interface - Enable/disable use of address on this interface as the source address of the relay message. Valid values:
disable,enable. - dhcp6_
relay_ strsource_ ip - IPv6 address used by the DHCP6 relay as its source IP.
- dhcp6_
relay_ strtype - DHCPv6 relay type. Valid values:
regular. - icmp6_
send_ strredirect - Icmp6-Send-Redirect. Valid values:
disable,enable. - interface_
identifier str - Interface-Identifier.
- ip6_
address str - Primary IPv6 address prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- ip6_
allowaccesses Sequence[str] - Allow management access to the interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,capwap,fabric. - ip6_
default_ floatlife - Default life (sec).
- ip6_
delegated_ floatprefix_ iaid - IAID of obtained delegated-prefix from the upstream interface.
- ip6_
delegated_ Sequence[Objectprefix_ lists Fsp Vlan Interface Ipv6Ip6Delegated Prefix List] - Ip6-Delegated-Prefix-List. The structure of
ip6_delegated_prefix_listblock is documented below. - ip6_
dns_ strserver_ override - Enable/disable using the DNS server acquired by DHCP. Valid values:
disable,enable. - ip6_
extra_ Sequence[Objectaddrs Fsp Vlan Interface Ipv6Ip6Extra Addr] - Ip6-Extra-Addr. The structure of
ip6_extra_addrblock is documented below. - ip6_
hop_ floatlimit - Hop limit (0 means unspecified).
- ip6_
link_ floatmtu - IPv6 link MTU.
- ip6_
manage_ strflag - Enable/disable the managed flag. Valid values:
disable,enable. - ip6_
max_ floatinterval - IPv6 maximum interval (4 to 1800 sec).
- ip6_
min_ floatinterval - IPv6 minimum interval (3 to 1350 sec).
- ip6_
mode str - Addressing mode (static, DHCP, delegated). Valid values:
static,dhcp,pppoe,delegated. - ip6_
other_ strflag - Enable/disable the other IPv6 flag. Valid values:
disable,enable. - ip6_
prefix_ Sequence[Objectlists Fsp Vlan Interface Ipv6Ip6Prefix List] - Ip6-Prefix-List. The structure of
ip6_prefix_listblock is documented below. - ip6_
prefix_ strmode - Ip6-Prefix-Mode. Valid values:
dhcp6,ra. - ip6_
reachable_ floattime - IPv6 reachable time (milliseconds; 0 means unspecified).
- ip6_
retrans_ floattime - IPv6 retransmit time (milliseconds; 0 means unspecified).
- ip6_
send_ stradv - Enable/disable sending advertisements about the interface. Valid values:
disable,enable. - ip6_
subnet str - Subnet to routing prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- ip6_
upstream_ strinterface - Interface name providing delegated information.
- nd_
cert str - Neighbor discovery certificate.
- nd_
cga_ strmodifier - Neighbor discovery CGA modifier.
- nd_
mode str - Neighbor discovery mode. Valid values:
basic,SEND-compatible. - nd_
security_ floatlevel - Neighbor discovery security level (0 - 7; 0 = least secure, default = 0).
- nd_
timestamp_ floatdelta - Neighbor discovery timestamp delta value (1 - 3600 sec; default = 300).
- nd_
timestamp_ floatfuzz - Neighbor discovery timestamp fuzz factor (1 - 60 sec; default = 1).
- ra_
send_ strmtu - Ra-Send-Mtu. Valid values:
disable,enable. - unique_
autoconf_ straddr - Unique-Autoconf-Addr. Valid values:
disable,enable. - vrip6_
link_ strlocal - Link-local IPv6 address of virtual router.
- vrrp6s
Sequence[Object
Fsp Vlan Interface Ipv6Vrrp6] Vrrp6. The structure of
vrrp6block is documented below.The
ip6_delegated_prefix_listblock supports:- vrrp_
virtual_ strmac6 - Enable/disable virtual MAC for VRRP. Valid values:
disable,enable.
- autoconf String
- Enable/disable address auto config. Valid values:
disable,enable. - cli
Conn6Status Number - Cli-Conn6-Status.
- dhcp6Client
Options List<String> - Dhcp6-Client-Options. Valid values:
rapid,iapd,iana,dns,dnsname. - dhcp6Information
Request String - Enable/disable DHCPv6 information request. Valid values:
disable,enable. - dhcp6Prefix
Delegation String - Enable/disable DHCPv6 prefix delegation. Valid values:
disable,enable. - dhcp6Prefix
Hint String - DHCPv6 prefix that will be used as a hint to the upstream DHCPv6 server.
- dhcp6Prefix
Hint NumberPlt - DHCPv6 prefix hint preferred life time (sec), 0 means unlimited lease time.
- dhcp6Prefix
Hint NumberVlt - DHCPv6 prefix hint valid life time (sec).
- dhcp6Relay
Interface StringId - DHCP6 relay interface ID.
- dhcp6Relay
Ip String - DHCPv6 relay IP address.
- dhcp6Relay
Service String - Enable/disable DHCPv6 relay. Valid values:
disable,enable. - dhcp6Relay
Source StringInterface - Enable/disable use of address on this interface as the source address of the relay message. Valid values:
disable,enable. - dhcp6Relay
Source StringIp - IPv6 address used by the DHCP6 relay as its source IP.
- dhcp6Relay
Type String - DHCPv6 relay type. Valid values:
regular. - icmp6Send
Redirect String - Icmp6-Send-Redirect. Valid values:
disable,enable. - interface
Identifier String - Interface-Identifier.
- ip6Address String
- Primary IPv6 address prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- ip6Allowaccesses List<String>
- Allow management access to the interface. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,capwap,fabric. - ip6Default
Life Number - Default life (sec).
- ip6Delegated
Prefix NumberIaid - IAID of obtained delegated-prefix from the upstream interface.
- ip6Delegated
Prefix List<Property Map>Lists - Ip6-Delegated-Prefix-List. The structure of
ip6_delegated_prefix_listblock is documented below. - ip6Dns
Server StringOverride - Enable/disable using the DNS server acquired by DHCP. Valid values:
disable,enable. - ip6Extra
Addrs List<Property Map> - Ip6-Extra-Addr. The structure of
ip6_extra_addrblock is documented below. - ip6Hop
Limit Number - Hop limit (0 means unspecified).
- ip6Link
Mtu Number - IPv6 link MTU.
- ip6Manage
Flag String - Enable/disable the managed flag. Valid values:
disable,enable. - ip6Max
Interval Number - IPv6 maximum interval (4 to 1800 sec).
- ip6Min
Interval Number - IPv6 minimum interval (3 to 1350 sec).
- ip6Mode String
- Addressing mode (static, DHCP, delegated). Valid values:
static,dhcp,pppoe,delegated. - ip6Other
Flag String - Enable/disable the other IPv6 flag. Valid values:
disable,enable. - ip6Prefix
Lists List<Property Map> - Ip6-Prefix-List. The structure of
ip6_prefix_listblock is documented below. - ip6Prefix
Mode String - Ip6-Prefix-Mode. Valid values:
dhcp6,ra. - ip6Reachable
Time Number - IPv6 reachable time (milliseconds; 0 means unspecified).
- ip6Retrans
Time Number - IPv6 retransmit time (milliseconds; 0 means unspecified).
- ip6Send
Adv String - Enable/disable sending advertisements about the interface. Valid values:
disable,enable. - ip6Subnet String
- Subnet to routing prefix, syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/xxx
- ip6Upstream
Interface String - Interface name providing delegated information.
- nd
Cert String - Neighbor discovery certificate.
- nd
Cga StringModifier - Neighbor discovery CGA modifier.
- nd
Mode String - Neighbor discovery mode. Valid values:
basic,SEND-compatible. - nd
Security NumberLevel - Neighbor discovery security level (0 - 7; 0 = least secure, default = 0).
- nd
Timestamp NumberDelta - Neighbor discovery timestamp delta value (1 - 3600 sec; default = 300).
- nd
Timestamp NumberFuzz - Neighbor discovery timestamp fuzz factor (1 - 60 sec; default = 1).
- ra
Send StringMtu - Ra-Send-Mtu. Valid values:
disable,enable. - unique
Autoconf StringAddr - Unique-Autoconf-Addr. Valid values:
disable,enable. - vrip6Link
Local String - Link-local IPv6 address of virtual router.
- vrrp6s List<Property Map>
Vrrp6. The structure of
vrrp6block is documented below.The
ip6_delegated_prefix_listblock supports:- vrrp
Virtual StringMac6 - Enable/disable virtual MAC for VRRP. Valid values:
disable,enable.
ObjectFspVlanInterfaceIpv6Ip6DelegatedPrefixList, ObjectFspVlanInterfaceIpv6Ip6DelegatedPrefixListArgs
- Autonomous
Flag string - Enable/disable the autonomous flag. Valid values:
disable,enable. - Delegated
Prefix doubleIaid - IAID of obtained delegated-prefix from the upstream interface.
- Onlink
Flag string - Enable/disable the onlink flag. Valid values:
disable,enable. - Prefix
Id double - Prefix ID.
- Rdnss
Service string - Recursive DNS service option. Valid values:
delegated,default,specify. - Rdnsses List<string>
- Recursive DNS server option.
- Subnet string
- Add subnet ID to routing prefix.
- Upstream
Interface string Name of the interface that provides delegated information.
The
ip6_extra_addrblock supports:
- Autonomous
Flag string - Enable/disable the autonomous flag. Valid values:
disable,enable. - Delegated
Prefix float64Iaid - IAID of obtained delegated-prefix from the upstream interface.
- Onlink
Flag string - Enable/disable the onlink flag. Valid values:
disable,enable. - Prefix
Id float64 - Prefix ID.
- Rdnss
Service string - Recursive DNS service option. Valid values:
delegated,default,specify. - Rdnsses []string
- Recursive DNS server option.
- Subnet string
- Add subnet ID to routing prefix.
- Upstream
Interface string Name of the interface that provides delegated information.
The
ip6_extra_addrblock supports:
- autonomous
Flag String - Enable/disable the autonomous flag. Valid values:
disable,enable. - delegated
Prefix DoubleIaid - IAID of obtained delegated-prefix from the upstream interface.
- onlink
Flag String - Enable/disable the onlink flag. Valid values:
disable,enable. - prefix
Id Double - Prefix ID.
- rdnss
Service String - Recursive DNS service option. Valid values:
delegated,default,specify. - rdnsses List<String>
- Recursive DNS server option.
- subnet String
- Add subnet ID to routing prefix.
- upstream
Interface String Name of the interface that provides delegated information.
The
ip6_extra_addrblock supports:
- autonomous
Flag string - Enable/disable the autonomous flag. Valid values:
disable,enable. - delegated
Prefix numberIaid - IAID of obtained delegated-prefix from the upstream interface.
- onlink
Flag string - Enable/disable the onlink flag. Valid values:
disable,enable. - prefix
Id number - Prefix ID.
- rdnss
Service string - Recursive DNS service option. Valid values:
delegated,default,specify. - rdnsses string[]
- Recursive DNS server option.
- subnet string
- Add subnet ID to routing prefix.
- upstream
Interface string Name of the interface that provides delegated information.
The
ip6_extra_addrblock supports:
- autonomous_
flag str - Enable/disable the autonomous flag. Valid values:
disable,enable. - delegated_
prefix_ floatiaid - IAID of obtained delegated-prefix from the upstream interface.
- onlink_
flag str - Enable/disable the onlink flag. Valid values:
disable,enable. - prefix_
id float - Prefix ID.
- rdnss_
service str - Recursive DNS service option. Valid values:
delegated,default,specify. - rdnsses Sequence[str]
- Recursive DNS server option.
- subnet str
- Add subnet ID to routing prefix.
- upstream_
interface str Name of the interface that provides delegated information.
The
ip6_extra_addrblock supports:
- autonomous
Flag String - Enable/disable the autonomous flag. Valid values:
disable,enable. - delegated
Prefix NumberIaid - IAID of obtained delegated-prefix from the upstream interface.
- onlink
Flag String - Enable/disable the onlink flag. Valid values:
disable,enable. - prefix
Id Number - Prefix ID.
- rdnss
Service String - Recursive DNS service option. Valid values:
delegated,default,specify. - rdnsses List<String>
- Recursive DNS server option.
- subnet String
- Add subnet ID to routing prefix.
- upstream
Interface String Name of the interface that provides delegated information.
The
ip6_extra_addrblock supports:
ObjectFspVlanInterfaceIpv6Ip6ExtraAddr, ObjectFspVlanInterfaceIpv6Ip6ExtraAddrArgs
- Prefix string
- IPv6 prefix.
- Prefix string
- IPv6 prefix.
- prefix String
- IPv6 prefix.
- prefix string
- IPv6 prefix.
- prefix str
- IPv6 prefix.
- prefix String
- IPv6 prefix.
ObjectFspVlanInterfaceIpv6Ip6PrefixList, ObjectFspVlanInterfaceIpv6Ip6PrefixListArgs
- Autonomous
Flag string - Enable/disable the autonomous flag. Valid values:
disable,enable. - Dnssls List<string>
- DNS search list option.
- Onlink
Flag string - Enable/disable the onlink flag. Valid values:
disable,enable. - Preferred
Life doubleTime - Preferred life time (sec).
- Prefix string
- IPv6 prefix.
- Rdnsses List<string>
- Recursive DNS server option.
- Valid
Life doubleTime Valid life time (sec).
The
vrrp6block supports:
- Autonomous
Flag string - Enable/disable the autonomous flag. Valid values:
disable,enable. - Dnssls []string
- DNS search list option.
- Onlink
Flag string - Enable/disable the onlink flag. Valid values:
disable,enable. - Preferred
Life float64Time - Preferred life time (sec).
- Prefix string
- IPv6 prefix.
- Rdnsses []string
- Recursive DNS server option.
- Valid
Life float64Time Valid life time (sec).
The
vrrp6block supports:
- autonomous
Flag String - Enable/disable the autonomous flag. Valid values:
disable,enable. - dnssls List<String>
- DNS search list option.
- onlink
Flag String - Enable/disable the onlink flag. Valid values:
disable,enable. - preferred
Life DoubleTime - Preferred life time (sec).
- prefix String
- IPv6 prefix.
- rdnsses List<String>
- Recursive DNS server option.
- valid
Life DoubleTime Valid life time (sec).
The
vrrp6block supports:
- autonomous
Flag string - Enable/disable the autonomous flag. Valid values:
disable,enable. - dnssls string[]
- DNS search list option.
- onlink
Flag string - Enable/disable the onlink flag. Valid values:
disable,enable. - preferred
Life numberTime - Preferred life time (sec).
- prefix string
- IPv6 prefix.
- rdnsses string[]
- Recursive DNS server option.
- valid
Life numberTime Valid life time (sec).
The
vrrp6block supports:
- autonomous_
flag str - Enable/disable the autonomous flag. Valid values:
disable,enable. - dnssls Sequence[str]
- DNS search list option.
- onlink_
flag str - Enable/disable the onlink flag. Valid values:
disable,enable. - preferred_
life_ floattime - Preferred life time (sec).
- prefix str
- IPv6 prefix.
- rdnsses Sequence[str]
- Recursive DNS server option.
- valid_
life_ floattime Valid life time (sec).
The
vrrp6block supports:
- autonomous
Flag String - Enable/disable the autonomous flag. Valid values:
disable,enable. - dnssls List<String>
- DNS search list option.
- onlink
Flag String - Enable/disable the onlink flag. Valid values:
disable,enable. - preferred
Life NumberTime - Preferred life time (sec).
- prefix String
- IPv6 prefix.
- rdnsses List<String>
- Recursive DNS server option.
- valid
Life NumberTime Valid life time (sec).
The
vrrp6block supports:
ObjectFspVlanInterfaceIpv6Vrrp6, ObjectFspVlanInterfaceIpv6Vrrp6Args
- Accept
Mode string - Enable/disable accept mode. Valid values:
disable,enable. - Adv
Interval double - Advertisement interval (1 - 255 seconds).
- Ignore
Default stringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - Preempt string
- Enable/disable preempt mode. Valid values:
disable,enable. - Priority double
- Priority of the virtual router (1 - 255).
- Start
Time double - Startup time (1 - 255 seconds).
- Status string
- Enable/disable VRRP. Valid values:
disable,enable. - Vrdst6 string
- Monitor the route to this destination.
- Vrgrp double
- VRRP group ID (1 - 65535).
- Vrid double
- Virtual router identifier (1 - 255).
- Vrip6 string
- IPv6 address of the virtual router.
- Accept
Mode string - Enable/disable accept mode. Valid values:
disable,enable. - Adv
Interval float64 - Advertisement interval (1 - 255 seconds).
- Ignore
Default stringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - Preempt string
- Enable/disable preempt mode. Valid values:
disable,enable. - Priority float64
- Priority of the virtual router (1 - 255).
- Start
Time float64 - Startup time (1 - 255 seconds).
- Status string
- Enable/disable VRRP. Valid values:
disable,enable. - Vrdst6 string
- Monitor the route to this destination.
- Vrgrp float64
- VRRP group ID (1 - 65535).
- Vrid float64
- Virtual router identifier (1 - 255).
- Vrip6 string
- IPv6 address of the virtual router.
- accept
Mode String - Enable/disable accept mode. Valid values:
disable,enable. - adv
Interval Double - Advertisement interval (1 - 255 seconds).
- ignore
Default StringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - preempt String
- Enable/disable preempt mode. Valid values:
disable,enable. - priority Double
- Priority of the virtual router (1 - 255).
- start
Time Double - Startup time (1 - 255 seconds).
- status String
- Enable/disable VRRP. Valid values:
disable,enable. - vrdst6 String
- Monitor the route to this destination.
- vrgrp Double
- VRRP group ID (1 - 65535).
- vrid Double
- Virtual router identifier (1 - 255).
- vrip6 String
- IPv6 address of the virtual router.
- accept
Mode string - Enable/disable accept mode. Valid values:
disable,enable. - adv
Interval number - Advertisement interval (1 - 255 seconds).
- ignore
Default stringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - preempt string
- Enable/disable preempt mode. Valid values:
disable,enable. - priority number
- Priority of the virtual router (1 - 255).
- start
Time number - Startup time (1 - 255 seconds).
- status string
- Enable/disable VRRP. Valid values:
disable,enable. - vrdst6 string
- Monitor the route to this destination.
- vrgrp number
- VRRP group ID (1 - 65535).
- vrid number
- Virtual router identifier (1 - 255).
- vrip6 string
- IPv6 address of the virtual router.
- accept_
mode str - Enable/disable accept mode. Valid values:
disable,enable. - adv_
interval float - Advertisement interval (1 - 255 seconds).
- ignore_
default_ strroute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - preempt str
- Enable/disable preempt mode. Valid values:
disable,enable. - priority float
- Priority of the virtual router (1 - 255).
- start_
time float - Startup time (1 - 255 seconds).
- status str
- Enable/disable VRRP. Valid values:
disable,enable. - vrdst6 str
- Monitor the route to this destination.
- vrgrp float
- VRRP group ID (1 - 65535).
- vrid float
- Virtual router identifier (1 - 255).
- vrip6 str
- IPv6 address of the virtual router.
- accept
Mode String - Enable/disable accept mode. Valid values:
disable,enable. - adv
Interval Number - Advertisement interval (1 - 255 seconds).
- ignore
Default StringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - preempt String
- Enable/disable preempt mode. Valid values:
disable,enable. - priority Number
- Priority of the virtual router (1 - 255).
- start
Time Number - Startup time (1 - 255 seconds).
- status String
- Enable/disable VRRP. Valid values:
disable,enable. - vrdst6 String
- Monitor the route to this destination.
- vrgrp Number
- VRRP group ID (1 - 65535).
- vrid Number
- Virtual router identifier (1 - 255).
- vrip6 String
- IPv6 address of the virtual router.
ObjectFspVlanInterfaceSecondaryip, ObjectFspVlanInterfaceSecondaryipArgs
- Allowaccesses List<string>
- Management access settings for the secondary IP address. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - Detectprotocols List<string>
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - Detectserver string
- Gateway's ping server for this IP.
- Gwdetect string
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - Ha
Priority double - HA election priority for the PING server.
- Id double
- ID.
- Ip string
- Secondary IP address of the interface.
- Ping
Serv doubleStatus - Ping-Serv-Status.
- Secip
Relay stringIp - DHCP relay IP address.
- Seq double
- Seq.
- Allowaccesses []string
- Management access settings for the secondary IP address. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - Detectprotocols []string
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - Detectserver string
- Gateway's ping server for this IP.
- Gwdetect string
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - Ha
Priority float64 - HA election priority for the PING server.
- Id float64
- ID.
- Ip string
- Secondary IP address of the interface.
- Ping
Serv float64Status - Ping-Serv-Status.
- Secip
Relay stringIp - DHCP relay IP address.
- Seq float64
- Seq.
- allowaccesses List<String>
- Management access settings for the secondary IP address. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - detectprotocols List<String>
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver String
- Gateway's ping server for this IP.
- gwdetect String
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha
Priority Double - HA election priority for the PING server.
- id Double
- ID.
- ip String
- Secondary IP address of the interface.
- ping
Serv DoubleStatus - Ping-Serv-Status.
- secip
Relay StringIp - DHCP relay IP address.
- seq Double
- Seq.
- allowaccesses string[]
- Management access settings for the secondary IP address. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - detectprotocols string[]
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver string
- Gateway's ping server for this IP.
- gwdetect string
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha
Priority number - HA election priority for the PING server.
- id number
- ID.
- ip string
- Secondary IP address of the interface.
- ping
Serv numberStatus - Ping-Serv-Status.
- secip
Relay stringIp - DHCP relay IP address.
- seq number
- Seq.
- allowaccesses Sequence[str]
- Management access settings for the secondary IP address. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - detectprotocols Sequence[str]
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver str
- Gateway's ping server for this IP.
- gwdetect str
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha_
priority float - HA election priority for the PING server.
- id float
- ID.
- ip str
- Secondary IP address of the interface.
- ping_
serv_ floatstatus - Ping-Serv-Status.
- secip_
relay_ strip - DHCP relay IP address.
- seq float
- Seq.
- allowaccesses List<String>
- Management access settings for the secondary IP address. Valid values:
https,ping,ssh,snmp,http,telnet,fgfm,auto-ipsec,radius-acct,probe-response,capwap,dnp,ftm,fabric. - detectprotocols List<String>
- Protocols used to detect the server. Valid values:
ping,tcp-echo,udp-echo. - detectserver String
- Gateway's ping server for this IP.
- gwdetect String
- Enable/disable detect gateway alive for first. Valid values:
disable,enable. - ha
Priority Number - HA election priority for the PING server.
- id Number
- ID.
- ip String
- Secondary IP address of the interface.
- ping
Serv NumberStatus - Ping-Serv-Status.
- secip
Relay StringIp - DHCP relay IP address.
- seq Number
- Seq.
ObjectFspVlanInterfaceVrrp, ObjectFspVlanInterfaceVrrpArgs
- Accept
Mode string - Enable/disable accept mode. Valid values:
disable,enable. - Adv
Interval double - Advertisement interval (1 - 255 seconds).
- Ignore
Default stringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - Preempt string
- Enable/disable preempt mode. Valid values:
disable,enable. - Priority double
- Priority of the virtual router (1 - 255).
- Proxy
Arps List<ObjectFsp Vlan Interface Vrrp Proxy Arp> - Proxy-Arp. The structure of
proxy_arpblock is documented below. - Start
Time double - Startup time (1 - 255 seconds).
- Status string
- Enable/disable this VRRP configuration. Valid values:
disable,enable. - Version string
- VRRP version. Valid values:
2,3. - Vrdst
Priority double - Priority of the virtual router when the virtual router destination becomes unreachable (0 - 254).
- Vrdsts List<string>
- Monitor the route to this destination.
- Vrgrp double
- VRRP group ID (1 - 65535).
- Vrid double
- Virtual router identifier (1 - 255).
- Vrip string
- IP address of the virtual router.
- Accept
Mode string - Enable/disable accept mode. Valid values:
disable,enable. - Adv
Interval float64 - Advertisement interval (1 - 255 seconds).
- Ignore
Default stringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - Preempt string
- Enable/disable preempt mode. Valid values:
disable,enable. - Priority float64
- Priority of the virtual router (1 - 255).
- Proxy
Arps []ObjectFsp Vlan Interface Vrrp Proxy Arp Type - Proxy-Arp. The structure of
proxy_arpblock is documented below. - Start
Time float64 - Startup time (1 - 255 seconds).
- Status string
- Enable/disable this VRRP configuration. Valid values:
disable,enable. - Version string
- VRRP version. Valid values:
2,3. - Vrdst
Priority float64 - Priority of the virtual router when the virtual router destination becomes unreachable (0 - 254).
- Vrdsts []string
- Monitor the route to this destination.
- Vrgrp float64
- VRRP group ID (1 - 65535).
- Vrid float64
- Virtual router identifier (1 - 255).
- Vrip string
- IP address of the virtual router.
- accept
Mode String - Enable/disable accept mode. Valid values:
disable,enable. - adv
Interval Double - Advertisement interval (1 - 255 seconds).
- ignore
Default StringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - preempt String
- Enable/disable preempt mode. Valid values:
disable,enable. - priority Double
- Priority of the virtual router (1 - 255).
- proxy
Arps List<ObjectFsp Vlan Interface Vrrp Proxy Arp> - Proxy-Arp. The structure of
proxy_arpblock is documented below. - start
Time Double - Startup time (1 - 255 seconds).
- status String
- Enable/disable this VRRP configuration. Valid values:
disable,enable. - version String
- VRRP version. Valid values:
2,3. - vrdst
Priority Double - Priority of the virtual router when the virtual router destination becomes unreachable (0 - 254).
- vrdsts List<String>
- Monitor the route to this destination.
- vrgrp Double
- VRRP group ID (1 - 65535).
- vrid Double
- Virtual router identifier (1 - 255).
- vrip String
- IP address of the virtual router.
- accept
Mode string - Enable/disable accept mode. Valid values:
disable,enable. - adv
Interval number - Advertisement interval (1 - 255 seconds).
- ignore
Default stringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - preempt string
- Enable/disable preempt mode. Valid values:
disable,enable. - priority number
- Priority of the virtual router (1 - 255).
- proxy
Arps ObjectFsp Vlan Interface Vrrp Proxy Arp[] - Proxy-Arp. The structure of
proxy_arpblock is documented below. - start
Time number - Startup time (1 - 255 seconds).
- status string
- Enable/disable this VRRP configuration. Valid values:
disable,enable. - version string
- VRRP version. Valid values:
2,3. - vrdst
Priority number - Priority of the virtual router when the virtual router destination becomes unreachable (0 - 254).
- vrdsts string[]
- Monitor the route to this destination.
- vrgrp number
- VRRP group ID (1 - 65535).
- vrid number
- Virtual router identifier (1 - 255).
- vrip string
- IP address of the virtual router.
- accept_
mode str - Enable/disable accept mode. Valid values:
disable,enable. - adv_
interval float - Advertisement interval (1 - 255 seconds).
- ignore_
default_ strroute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - preempt str
- Enable/disable preempt mode. Valid values:
disable,enable. - priority float
- Priority of the virtual router (1 - 255).
- proxy_
arps Sequence[ObjectFsp Vlan Interface Vrrp Proxy Arp] - Proxy-Arp. The structure of
proxy_arpblock is documented below. - start_
time float - Startup time (1 - 255 seconds).
- status str
- Enable/disable this VRRP configuration. Valid values:
disable,enable. - version str
- VRRP version. Valid values:
2,3. - vrdst_
priority float - Priority of the virtual router when the virtual router destination becomes unreachable (0 - 254).
- vrdsts Sequence[str]
- Monitor the route to this destination.
- vrgrp float
- VRRP group ID (1 - 65535).
- vrid float
- Virtual router identifier (1 - 255).
- vrip str
- IP address of the virtual router.
- accept
Mode String - Enable/disable accept mode. Valid values:
disable,enable. - adv
Interval Number - Advertisement interval (1 - 255 seconds).
- ignore
Default StringRoute - Enable/disable ignoring of default route when checking destination. Valid values:
disable,enable. - preempt String
- Enable/disable preempt mode. Valid values:
disable,enable. - priority Number
- Priority of the virtual router (1 - 255).
- proxy
Arps List<Property Map> - Proxy-Arp. The structure of
proxy_arpblock is documented below. - start
Time Number - Startup time (1 - 255 seconds).
- status String
- Enable/disable this VRRP configuration. Valid values:
disable,enable. - version String
- VRRP version. Valid values:
2,3. - vrdst
Priority Number - Priority of the virtual router when the virtual router destination becomes unreachable (0 - 254).
- vrdsts List<String>
- Monitor the route to this destination.
- vrgrp Number
- VRRP group ID (1 - 65535).
- vrid Number
- Virtual router identifier (1 - 255).
- vrip String
- IP address of the virtual router.
ObjectFspVlanInterfaceVrrpProxyArp, ObjectFspVlanInterfaceVrrpProxyArpArgs
Import
ObjectFsp VlanInterface can be imported using any of these accepted formats:
Set import_options = [“vlan=YOUR_VALUE”] in the provider section.
$ export “FORTIMANAGER_IMPORT_TABLE”=“true”
$ pulumi import fortimanager:index/objectFspVlanInterface:ObjectFspVlanInterface labelname ObjectFspVlanInterface
$ unset “FORTIMANAGER_IMPORT_TABLE”
-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortimanager fortinetdev/terraform-provider-fortimanager
- License
- Notes
- This Pulumi package is based on the
fortimanagerTerraform Provider.
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev