Docs Home
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortimanager.SystemInterface
Explore with Pulumi AI
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
Interface configuration.
The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.
ipv6:fortimanager.SystemInterfaceIpv6member:fortimanager.SystemInterfaceMember
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";
const trname = new fortimanager.SystemInterface("trname", {
allowaccesses: [
"https",
"ssh",
],
ips: [
"192.168.21.99",
"255.255.255.0",
],
ipv6: {
ip6Address: "::/0",
ip6Allowaccesses: [],
ip6Autoconf: "enable",
},
mtu: 1500,
ratingServiceIps: [
"0.0.0.0",
"0.0.0.0",
],
serviceaccesses: [],
speed: "auto",
status: "up",
type: "physical",
updateServiceIps: [
"0.0.0.0",
"0.0.0.0",
],
});
import pulumi
import pulumi_fortimanager as fortimanager
trname = fortimanager.SystemInterface("trname",
allowaccesses=[
"https",
"ssh",
],
ips=[
"192.168.21.99",
"255.255.255.0",
],
ipv6={
"ip6_address": "::/0",
"ip6_allowaccesses": [],
"ip6_autoconf": "enable",
},
mtu=1500,
rating_service_ips=[
"0.0.0.0",
"0.0.0.0",
],
serviceaccesses=[],
speed="auto",
status="up",
type="physical",
update_service_ips=[
"0.0.0.0",
"0.0.0.0",
])
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := fortimanager.NewSystemInterface(ctx, "trname", &fortimanager.SystemInterfaceArgs{
Allowaccesses: pulumi.StringArray{
pulumi.String("https"),
pulumi.String("ssh"),
},
Ips: pulumi.StringArray{
pulumi.String("192.168.21.99"),
pulumi.String("255.255.255.0"),
},
Ipv6: &fortimanager.SystemInterfaceIpv6TypeArgs{
Ip6Address: pulumi.String("::/0"),
Ip6Allowaccesses: pulumi.StringArray{},
Ip6Autoconf: pulumi.String("enable"),
},
Mtu: pulumi.Float64(1500),
RatingServiceIps: pulumi.StringArray{
pulumi.String("0.0.0.0"),
pulumi.String("0.0.0.0"),
},
Serviceaccesses: pulumi.StringArray{},
Speed: pulumi.String("auto"),
Status: pulumi.String("up"),
Type: pulumi.String("physical"),
UpdateServiceIps: pulumi.StringArray{
pulumi.String("0.0.0.0"),
pulumi.String("0.0.0.0"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;
return await Deployment.RunAsync(() =>
{
var trname = new Fortimanager.SystemInterface("trname", new()
{
Allowaccesses = new[]
{
"https",
"ssh",
},
Ips = new[]
{
"192.168.21.99",
"255.255.255.0",
},
Ipv6 = new Fortimanager.Inputs.SystemInterfaceIpv6Args
{
Ip6Address = "::/0",
Ip6Allowaccesses = new() { },
Ip6Autoconf = "enable",
},
Mtu = 1500,
RatingServiceIps = new[]
{
"0.0.0.0",
"0.0.0.0",
},
Serviceaccesses = new[] {},
Speed = "auto",
Status = "up",
Type = "physical",
UpdateServiceIps = new[]
{
"0.0.0.0",
"0.0.0.0",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.SystemInterface;
import com.pulumi.fortimanager.SystemInterfaceArgs;
import com.pulumi.fortimanager.inputs.SystemInterfaceIpv6Args;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var trname = new SystemInterface("trname", SystemInterfaceArgs.builder()
.allowaccesses(
"https",
"ssh")
.ips(
"192.168.21.99",
"255.255.255.0")
.ipv6(SystemInterfaceIpv6Args.builder()
.ip6Address("::/0")
.ip6Allowaccesses()
.ip6Autoconf("enable")
.build())
.mtu(1500)
.ratingServiceIps(
"0.0.0.0",
"0.0.0.0")
.serviceaccesses()
.speed("auto")
.status("up")
.type("physical")
.updateServiceIps(
"0.0.0.0",
"0.0.0.0")
.build());
}
}
resources:
trname:
type: fortimanager:SystemInterface
properties:
allowaccesses:
- https
- ssh
ips:
- 192.168.21.99
- 255.255.255.0
ipv6:
ip6Address: ::/0
ip6Allowaccesses: []
ip6Autoconf: enable
mtu: 1500
ratingServiceIps:
- 0.0.0.0
- 0.0.0.0
serviceaccesses: []
speed: auto
status: up
type: physical
updateServiceIps:
- 0.0.0.0
- 0.0.0.0
Create SystemInterface Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new SystemInterface(name: string, args?: SystemInterfaceArgs, opts?: CustomResourceOptions);@overload
def SystemInterface(resource_name: str,
args: Optional[SystemInterfaceArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def SystemInterface(resource_name: str,
opts: Optional[ResourceOptions] = None,
aggregate: Optional[str] = None,
alias: Optional[str] = None,
allowaccesses: Optional[Sequence[str]] = None,
autogenerated: Optional[str] = None,
defaultgw: Optional[str] = None,
description: Optional[str] = None,
dhcp_client_identifier: Optional[str] = None,
dns_server_override: Optional[str] = None,
dynamic_sort_subtable: Optional[str] = None,
interface: Optional[str] = None,
ips: Optional[Sequence[str]] = None,
ipv6: Optional[SystemInterfaceIpv6Args] = None,
lacp_mode: Optional[str] = None,
lacp_speed: Optional[str] = None,
link_up_delay: Optional[float] = None,
lldp: Optional[str] = None,
members: Optional[Sequence[SystemInterfaceMemberArgs]] = None,
min_links: Optional[float] = None,
min_links_down: Optional[str] = None,
mode: Optional[str] = None,
mtu: Optional[float] = None,
mtu_override: Optional[str] = None,
name: Optional[str] = None,
rating_service_ips: Optional[Sequence[str]] = None,
serviceaccesses: Optional[Sequence[str]] = None,
speed: Optional[str] = None,
status: Optional[str] = None,
system_interface_id: Optional[str] = None,
type: Optional[str] = None,
update_service_ips: Optional[Sequence[str]] = None,
vlan_protocol: Optional[str] = None,
vlanid: Optional[float] = None)func NewSystemInterface(ctx *Context, name string, args *SystemInterfaceArgs, opts ...ResourceOption) (*SystemInterface, error)public SystemInterface(string name, SystemInterfaceArgs? args = null, CustomResourceOptions? opts = null)
public SystemInterface(String name, SystemInterfaceArgs args)
public SystemInterface(String name, SystemInterfaceArgs args, CustomResourceOptions options)
type: fortimanager:SystemInterface
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args SystemInterfaceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SystemInterfaceArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SystemInterfaceArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SystemInterfaceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SystemInterfaceArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var systemInterfaceResource = new Fortimanager.SystemInterface("systemInterfaceResource", new()
{
Aggregate = "string",
Alias = "string",
Allowaccesses = new[]
{
"string",
},
Autogenerated = "string",
Defaultgw = "string",
Description = "string",
DhcpClientIdentifier = "string",
DnsServerOverride = "string",
DynamicSortSubtable = "string",
Interface = "string",
Ips = new[]
{
"string",
},
Ipv6 = new Fortimanager.Inputs.SystemInterfaceIpv6Args
{
Ip6Address = "string",
Ip6Allowaccesses = new[]
{
"string",
},
Ip6Autoconf = "string",
},
LacpMode = "string",
LacpSpeed = "string",
LinkUpDelay = 0,
Lldp = "string",
Members = new[]
{
new Fortimanager.Inputs.SystemInterfaceMemberArgs
{
InterfaceName = "string",
},
},
MinLinks = 0,
MinLinksDown = "string",
Mode = "string",
Mtu = 0,
MtuOverride = "string",
Name = "string",
RatingServiceIps = new[]
{
"string",
},
Serviceaccesses = new[]
{
"string",
},
Speed = "string",
Status = "string",
SystemInterfaceId = "string",
Type = "string",
UpdateServiceIps = new[]
{
"string",
},
VlanProtocol = "string",
Vlanid = 0,
});
example, err := fortimanager.NewSystemInterface(ctx, "systemInterfaceResource", &fortimanager.SystemInterfaceArgs{
Aggregate: pulumi.String("string"),
Alias: pulumi.String("string"),
Allowaccesses: pulumi.StringArray{
pulumi.String("string"),
},
Autogenerated: pulumi.String("string"),
Defaultgw: pulumi.String("string"),
Description: pulumi.String("string"),
DhcpClientIdentifier: pulumi.String("string"),
DnsServerOverride: pulumi.String("string"),
DynamicSortSubtable: pulumi.String("string"),
Interface: pulumi.String("string"),
Ips: pulumi.StringArray{
pulumi.String("string"),
},
Ipv6: &.SystemInterfaceIpv6TypeArgs{
Ip6Address: pulumi.String("string"),
Ip6Allowaccesses: pulumi.StringArray{
pulumi.String("string"),
},
Ip6Autoconf: pulumi.String("string"),
},
LacpMode: pulumi.String("string"),
LacpSpeed: pulumi.String("string"),
LinkUpDelay: pulumi.Float64(0),
Lldp: pulumi.String("string"),
Members: .SystemInterfaceMemberTypeArray{
&.SystemInterfaceMemberTypeArgs{
InterfaceName: pulumi.String("string"),
},
},
MinLinks: pulumi.Float64(0),
MinLinksDown: pulumi.String("string"),
Mode: pulumi.String("string"),
Mtu: pulumi.Float64(0),
MtuOverride: pulumi.String("string"),
Name: pulumi.String("string"),
RatingServiceIps: pulumi.StringArray{
pulumi.String("string"),
},
Serviceaccesses: pulumi.StringArray{
pulumi.String("string"),
},
Speed: pulumi.String("string"),
Status: pulumi.String("string"),
SystemInterfaceId: pulumi.String("string"),
Type: pulumi.String("string"),
UpdateServiceIps: pulumi.StringArray{
pulumi.String("string"),
},
VlanProtocol: pulumi.String("string"),
Vlanid: pulumi.Float64(0),
})
var systemInterfaceResource = new SystemInterface("systemInterfaceResource", SystemInterfaceArgs.builder()
.aggregate("string")
.alias("string")
.allowaccesses("string")
.autogenerated("string")
.defaultgw("string")
.description("string")
.dhcpClientIdentifier("string")
.dnsServerOverride("string")
.dynamicSortSubtable("string")
.interface_("string")
.ips("string")
.ipv6(SystemInterfaceIpv6Args.builder()
.ip6Address("string")
.ip6Allowaccesses("string")
.ip6Autoconf("string")
.build())
.lacpMode("string")
.lacpSpeed("string")
.linkUpDelay(0)
.lldp("string")
.members(SystemInterfaceMemberArgs.builder()
.interfaceName("string")
.build())
.minLinks(0)
.minLinksDown("string")
.mode("string")
.mtu(0)
.mtuOverride("string")
.name("string")
.ratingServiceIps("string")
.serviceaccesses("string")
.speed("string")
.status("string")
.systemInterfaceId("string")
.type("string")
.updateServiceIps("string")
.vlanProtocol("string")
.vlanid(0)
.build());
system_interface_resource = fortimanager.SystemInterface("systemInterfaceResource",
aggregate="string",
alias="string",
allowaccesses=["string"],
autogenerated="string",
defaultgw="string",
description="string",
dhcp_client_identifier="string",
dns_server_override="string",
dynamic_sort_subtable="string",
interface="string",
ips=["string"],
ipv6={
"ip6_address": "string",
"ip6_allowaccesses": ["string"],
"ip6_autoconf": "string",
},
lacp_mode="string",
lacp_speed="string",
link_up_delay=0,
lldp="string",
members=[{
"interface_name": "string",
}],
min_links=0,
min_links_down="string",
mode="string",
mtu=0,
mtu_override="string",
name="string",
rating_service_ips=["string"],
serviceaccesses=["string"],
speed="string",
status="string",
system_interface_id="string",
type="string",
update_service_ips=["string"],
vlan_protocol="string",
vlanid=0)
const systemInterfaceResource = new fortimanager.SystemInterface("systemInterfaceResource", {
aggregate: "string",
alias: "string",
allowaccesses: ["string"],
autogenerated: "string",
defaultgw: "string",
description: "string",
dhcpClientIdentifier: "string",
dnsServerOverride: "string",
dynamicSortSubtable: "string",
"interface": "string",
ips: ["string"],
ipv6: {
ip6Address: "string",
ip6Allowaccesses: ["string"],
ip6Autoconf: "string",
},
lacpMode: "string",
lacpSpeed: "string",
linkUpDelay: 0,
lldp: "string",
members: [{
interfaceName: "string",
}],
minLinks: 0,
minLinksDown: "string",
mode: "string",
mtu: 0,
mtuOverride: "string",
name: "string",
ratingServiceIps: ["string"],
serviceaccesses: ["string"],
speed: "string",
status: "string",
systemInterfaceId: "string",
type: "string",
updateServiceIps: ["string"],
vlanProtocol: "string",
vlanid: 0,
});
type: fortimanager:SystemInterface
properties:
aggregate: string
alias: string
allowaccesses:
- string
autogenerated: string
defaultgw: string
description: string
dhcpClientIdentifier: string
dnsServerOverride: string
dynamicSortSubtable: string
interface: string
ips:
- string
ipv6:
ip6Address: string
ip6Allowaccesses:
- string
ip6Autoconf: string
lacpMode: string
lacpSpeed: string
linkUpDelay: 0
lldp: string
members:
- interfaceName: string
minLinks: 0
minLinksDown: string
mode: string
mtu: 0
mtuOverride: string
name: string
ratingServiceIps:
- string
serviceaccesses:
- string
speed: string
status: string
systemInterfaceId: string
type: string
updateServiceIps:
- string
vlanProtocol: string
vlanid: 0
SystemInterface Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The SystemInterface resource accepts the following input properties:
- Aggregate string
- Aggregate interface.
- Alias string
- Alias.
- Allowaccesses List<string>
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - Autogenerated string
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- Defaultgw string
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Description string
- Description.
- Dhcp
Client stringIdentifier - DHCP client identifier.
- Dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- Interface string
- Underlying interface name.
- Ips List<string>
- IP address of interface.
- Ipv6
System
Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - Lacp
Mode string - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - Lacp
Speed string - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - Link
Up doubleDelay - Number of milliseconds to wait before considering a link is up.
- Lldp string
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Members
List<System
Interface Member> - Member. The structure of
memberblock is documented below. - Min
Links double - Minimum number of aggregated ports that must be up.
- Min
Links stringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - Mode string
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - Mtu double
- Maximum transportation unit(68 - 9000).
- Mtu
Override string - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Name string
- Interface name.
- Rating
Service List<string>Ips - IP address for fgt rating service, must be same subnet with interface ip.
- Serviceaccesses List<string>
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - Speed string
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - Status string
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - System
Interface stringId - an identifier for the resource with format {{name}}.
- Type string
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- Update
Service List<string>Ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- Vlan
Protocol string - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - Vlanid double
- VLAN ID (1 - 4094).
- Aggregate string
- Aggregate interface.
- Alias string
- Alias.
- Allowaccesses []string
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - Autogenerated string
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- Defaultgw string
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Description string
- Description.
- Dhcp
Client stringIdentifier - DHCP client identifier.
- Dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- Interface string
- Underlying interface name.
- Ips []string
- IP address of interface.
- Ipv6
System
Interface Ipv6Type Args - Ipv6. The structure of
ipv6block is documented below. - Lacp
Mode string - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - Lacp
Speed string - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - Link
Up float64Delay - Number of milliseconds to wait before considering a link is up.
- Lldp string
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Members
[]System
Interface Member Type Args - Member. The structure of
memberblock is documented below. - Min
Links float64 - Minimum number of aggregated ports that must be up.
- Min
Links stringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - Mode string
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - Mtu float64
- Maximum transportation unit(68 - 9000).
- Mtu
Override string - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Name string
- Interface name.
- Rating
Service []stringIps - IP address for fgt rating service, must be same subnet with interface ip.
- Serviceaccesses []string
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - Speed string
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - Status string
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - System
Interface stringId - an identifier for the resource with format {{name}}.
- Type string
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- Update
Service []stringIps - IP address for fgt/fct update service, must be same subnet with interface ip.
- Vlan
Protocol string - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - Vlanid float64
- VLAN ID (1 - 4094).
- aggregate String
- Aggregate interface.
- alias String
- Alias.
- allowaccesses List<String>
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - autogenerated String
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- defaultgw String
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - description String
- Description.
- dhcp
Client StringIdentifier - DHCP client identifier.
- dns
Server StringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - dynamic
Sort StringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- interface_ String
- Underlying interface name.
- ips List<String>
- IP address of interface.
- ipv6
System
Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - lacp
Mode String - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - lacp
Speed String - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - link
Up DoubleDelay - Number of milliseconds to wait before considering a link is up.
- lldp String
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - members
List<System
Interface Member> - Member. The structure of
memberblock is documented below. - min
Links Double - Minimum number of aggregated ports that must be up.
- min
Links StringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - mode String
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - mtu Double
- Maximum transportation unit(68 - 9000).
- mtu
Override String - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - name String
- Interface name.
- rating
Service List<String>Ips - IP address for fgt rating service, must be same subnet with interface ip.
- serviceaccesses List<String>
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - speed String
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - status String
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - system
Interface StringId - an identifier for the resource with format {{name}}.
- type String
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- update
Service List<String>Ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- vlan
Protocol String - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - vlanid Double
- VLAN ID (1 - 4094).
- aggregate string
- Aggregate interface.
- alias string
- Alias.
- allowaccesses string[]
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - autogenerated string
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- defaultgw string
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - description string
- Description.
- dhcp
Client stringIdentifier - DHCP client identifier.
- dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- interface string
- Underlying interface name.
- ips string[]
- IP address of interface.
- ipv6
System
Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - lacp
Mode string - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - lacp
Speed string - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - link
Up numberDelay - Number of milliseconds to wait before considering a link is up.
- lldp string
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - members
System
Interface Member[] - Member. The structure of
memberblock is documented below. - min
Links number - Minimum number of aggregated ports that must be up.
- min
Links stringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - mode string
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - mtu number
- Maximum transportation unit(68 - 9000).
- mtu
Override string - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - name string
- Interface name.
- rating
Service string[]Ips - IP address for fgt rating service, must be same subnet with interface ip.
- serviceaccesses string[]
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - speed string
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - status string
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - system
Interface stringId - an identifier for the resource with format {{name}}.
- type string
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- update
Service string[]Ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- vlan
Protocol string - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - vlanid number
- VLAN ID (1 - 4094).
- aggregate str
- Aggregate interface.
- alias str
- Alias.
- allowaccesses Sequence[str]
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - autogenerated str
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- defaultgw str
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - description str
- Description.
- dhcp_
client_ stridentifier - DHCP client identifier.
- dns_
server_ stroverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - dynamic_
sort_ strsubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- interface str
- Underlying interface name.
- ips Sequence[str]
- IP address of interface.
- ipv6
System
Interface Ipv6Args - Ipv6. The structure of
ipv6block is documented below. - lacp_
mode str - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - lacp_
speed str - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - link_
up_ floatdelay - Number of milliseconds to wait before considering a link is up.
- lldp str
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - members
Sequence[System
Interface Member Args] - Member. The structure of
memberblock is documented below. - min_
links float - Minimum number of aggregated ports that must be up.
- min_
links_ strdown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - mode str
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - mtu float
- Maximum transportation unit(68 - 9000).
- mtu_
override str - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - name str
- Interface name.
- rating_
service_ Sequence[str]ips - IP address for fgt rating service, must be same subnet with interface ip.
- serviceaccesses Sequence[str]
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - speed str
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - status str
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - system_
interface_ strid - an identifier for the resource with format {{name}}.
- type str
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- update_
service_ Sequence[str]ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- vlan_
protocol str - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - vlanid float
- VLAN ID (1 - 4094).
- aggregate String
- Aggregate interface.
- alias String
- Alias.
- allowaccesses List<String>
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - autogenerated String
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- defaultgw String
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - description String
- Description.
- dhcp
Client StringIdentifier - DHCP client identifier.
- dns
Server StringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - dynamic
Sort StringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- interface String
- Underlying interface name.
- ips List<String>
- IP address of interface.
- ipv6 Property Map
- Ipv6. The structure of
ipv6block is documented below. - lacp
Mode String - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - lacp
Speed String - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - link
Up NumberDelay - Number of milliseconds to wait before considering a link is up.
- lldp String
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - members List<Property Map>
- Member. The structure of
memberblock is documented below. - min
Links Number - Minimum number of aggregated ports that must be up.
- min
Links StringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - mode String
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - mtu Number
- Maximum transportation unit(68 - 9000).
- mtu
Override String - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - name String
- Interface name.
- rating
Service List<String>Ips - IP address for fgt rating service, must be same subnet with interface ip.
- serviceaccesses List<String>
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - speed String
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - status String
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - system
Interface StringId - an identifier for the resource with format {{name}}.
- type String
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- update
Service List<String>Ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- vlan
Protocol String - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - vlanid Number
- VLAN ID (1 - 4094).
Outputs
All input properties are implicitly available as output properties. Additionally, the SystemInterface resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing SystemInterface Resource
Get an existing SystemInterface resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SystemInterfaceState, opts?: CustomResourceOptions): SystemInterface@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
aggregate: Optional[str] = None,
alias: Optional[str] = None,
allowaccesses: Optional[Sequence[str]] = None,
autogenerated: Optional[str] = None,
defaultgw: Optional[str] = None,
description: Optional[str] = None,
dhcp_client_identifier: Optional[str] = None,
dns_server_override: Optional[str] = None,
dynamic_sort_subtable: Optional[str] = None,
interface: Optional[str] = None,
ips: Optional[Sequence[str]] = None,
ipv6: Optional[SystemInterfaceIpv6Args] = None,
lacp_mode: Optional[str] = None,
lacp_speed: Optional[str] = None,
link_up_delay: Optional[float] = None,
lldp: Optional[str] = None,
members: Optional[Sequence[SystemInterfaceMemberArgs]] = None,
min_links: Optional[float] = None,
min_links_down: Optional[str] = None,
mode: Optional[str] = None,
mtu: Optional[float] = None,
mtu_override: Optional[str] = None,
name: Optional[str] = None,
rating_service_ips: Optional[Sequence[str]] = None,
serviceaccesses: Optional[Sequence[str]] = None,
speed: Optional[str] = None,
status: Optional[str] = None,
system_interface_id: Optional[str] = None,
type: Optional[str] = None,
update_service_ips: Optional[Sequence[str]] = None,
vlan_protocol: Optional[str] = None,
vlanid: Optional[float] = None) -> SystemInterfacefunc GetSystemInterface(ctx *Context, name string, id IDInput, state *SystemInterfaceState, opts ...ResourceOption) (*SystemInterface, error)public static SystemInterface Get(string name, Input<string> id, SystemInterfaceState? state, CustomResourceOptions? opts = null)public static SystemInterface get(String name, Output<String> id, SystemInterfaceState state, CustomResourceOptions options)resources: _: type: fortimanager:SystemInterface get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Aggregate string
- Aggregate interface.
- Alias string
- Alias.
- Allowaccesses List<string>
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - Autogenerated string
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- Defaultgw string
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Description string
- Description.
- Dhcp
Client stringIdentifier - DHCP client identifier.
- Dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- Interface string
- Underlying interface name.
- Ips List<string>
- IP address of interface.
- Ipv6
System
Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - Lacp
Mode string - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - Lacp
Speed string - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - Link
Up doubleDelay - Number of milliseconds to wait before considering a link is up.
- Lldp string
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Members
List<System
Interface Member> - Member. The structure of
memberblock is documented below. - Min
Links double - Minimum number of aggregated ports that must be up.
- Min
Links stringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - Mode string
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - Mtu double
- Maximum transportation unit(68 - 9000).
- Mtu
Override string - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Name string
- Interface name.
- Rating
Service List<string>Ips - IP address for fgt rating service, must be same subnet with interface ip.
- Serviceaccesses List<string>
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - Speed string
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - Status string
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - System
Interface stringId - an identifier for the resource with format {{name}}.
- Type string
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- Update
Service List<string>Ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- Vlan
Protocol string - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - Vlanid double
- VLAN ID (1 - 4094).
- Aggregate string
- Aggregate interface.
- Alias string
- Alias.
- Allowaccesses []string
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - Autogenerated string
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- Defaultgw string
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Description string
- Description.
- Dhcp
Client stringIdentifier - DHCP client identifier.
- Dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- Interface string
- Underlying interface name.
- Ips []string
- IP address of interface.
- Ipv6
System
Interface Ipv6Type Args - Ipv6. The structure of
ipv6block is documented below. - Lacp
Mode string - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - Lacp
Speed string - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - Link
Up float64Delay - Number of milliseconds to wait before considering a link is up.
- Lldp string
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Members
[]System
Interface Member Type Args - Member. The structure of
memberblock is documented below. - Min
Links float64 - Minimum number of aggregated ports that must be up.
- Min
Links stringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - Mode string
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - Mtu float64
- Maximum transportation unit(68 - 9000).
- Mtu
Override string - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - Name string
- Interface name.
- Rating
Service []stringIps - IP address for fgt rating service, must be same subnet with interface ip.
- Serviceaccesses []string
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - Speed string
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - Status string
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - System
Interface stringId - an identifier for the resource with format {{name}}.
- Type string
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- Update
Service []stringIps - IP address for fgt/fct update service, must be same subnet with interface ip.
- Vlan
Protocol string - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - Vlanid float64
- VLAN ID (1 - 4094).
- aggregate String
- Aggregate interface.
- alias String
- Alias.
- allowaccesses List<String>
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - autogenerated String
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- defaultgw String
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - description String
- Description.
- dhcp
Client StringIdentifier - DHCP client identifier.
- dns
Server StringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - dynamic
Sort StringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- interface_ String
- Underlying interface name.
- ips List<String>
- IP address of interface.
- ipv6
System
Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - lacp
Mode String - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - lacp
Speed String - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - link
Up DoubleDelay - Number of milliseconds to wait before considering a link is up.
- lldp String
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - members
List<System
Interface Member> - Member. The structure of
memberblock is documented below. - min
Links Double - Minimum number of aggregated ports that must be up.
- min
Links StringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - mode String
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - mtu Double
- Maximum transportation unit(68 - 9000).
- mtu
Override String - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - name String
- Interface name.
- rating
Service List<String>Ips - IP address for fgt rating service, must be same subnet with interface ip.
- serviceaccesses List<String>
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - speed String
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - status String
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - system
Interface StringId - an identifier for the resource with format {{name}}.
- type String
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- update
Service List<String>Ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- vlan
Protocol String - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - vlanid Double
- VLAN ID (1 - 4094).
- aggregate string
- Aggregate interface.
- alias string
- Alias.
- allowaccesses string[]
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - autogenerated string
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- defaultgw string
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - description string
- Description.
- dhcp
Client stringIdentifier - DHCP client identifier.
- dns
Server stringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - dynamic
Sort stringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- interface string
- Underlying interface name.
- ips string[]
- IP address of interface.
- ipv6
System
Interface Ipv6 - Ipv6. The structure of
ipv6block is documented below. - lacp
Mode string - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - lacp
Speed string - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - link
Up numberDelay - Number of milliseconds to wait before considering a link is up.
- lldp string
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - members
System
Interface Member[] - Member. The structure of
memberblock is documented below. - min
Links number - Minimum number of aggregated ports that must be up.
- min
Links stringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - mode string
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - mtu number
- Maximum transportation unit(68 - 9000).
- mtu
Override string - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - name string
- Interface name.
- rating
Service string[]Ips - IP address for fgt rating service, must be same subnet with interface ip.
- serviceaccesses string[]
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - speed string
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - status string
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - system
Interface stringId - an identifier for the resource with format {{name}}.
- type string
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- update
Service string[]Ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- vlan
Protocol string - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - vlanid number
- VLAN ID (1 - 4094).
- aggregate str
- Aggregate interface.
- alias str
- Alias.
- allowaccesses Sequence[str]
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - autogenerated str
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- defaultgw str
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - description str
- Description.
- dhcp_
client_ stridentifier - DHCP client identifier.
- dns_
server_ stroverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - dynamic_
sort_ strsubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- interface str
- Underlying interface name.
- ips Sequence[str]
- IP address of interface.
- ipv6
System
Interface Ipv6Args - Ipv6. The structure of
ipv6block is documented below. - lacp_
mode str - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - lacp_
speed str - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - link_
up_ floatdelay - Number of milliseconds to wait before considering a link is up.
- lldp str
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - members
Sequence[System
Interface Member Args] - Member. The structure of
memberblock is documented below. - min_
links float - Minimum number of aggregated ports that must be up.
- min_
links_ strdown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - mode str
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - mtu float
- Maximum transportation unit(68 - 9000).
- mtu_
override str - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - name str
- Interface name.
- rating_
service_ Sequence[str]ips - IP address for fgt rating service, must be same subnet with interface ip.
- serviceaccesses Sequence[str]
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - speed str
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - status str
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - system_
interface_ strid - an identifier for the resource with format {{name}}.
- type str
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- update_
service_ Sequence[str]ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- vlan_
protocol str - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - vlanid float
- VLAN ID (1 - 4094).
- aggregate String
- Aggregate interface.
- alias String
- Alias.
- allowaccesses List<String>
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - autogenerated String
- Indicates whether the interface is automatically created by FortiManager, for example, created during the VPN creation process. If it is, set it to "auto", else keep it empty.
- defaultgw String
- Enable/disable default gateway. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - description String
- Description.
- dhcp
Client StringIdentifier - DHCP client identifier.
- dns
Server StringOverride - Enable/disable use DNS acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - dynamic
Sort StringSubtable true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
The
ipv6block supports:- interface String
- Underlying interface name.
- ips List<String>
- IP address of interface.
- ipv6 Property Map
- Ipv6. The structure of
ipv6block is documented below. - lacp
Mode String - LACP mode. active - Actively use LACP to negotiate 802.3ad aggregation. Valid values:
active. - lacp
Speed String - How often the interface sends LACP messages. slow - Send LACP message every 30 seconds. fast - Send LACP message every second. Valid values:
slow,fast. - link
Up NumberDelay - Number of milliseconds to wait before considering a link is up.
- lldp String
- Enable/disable LLDP (Link Layer Discovery Protocol). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - members List<Property Map>
- Member. The structure of
memberblock is documented below. - min
Links Number - Minimum number of aggregated ports that must be up.
- min
Links StringDown - Action to take when less than the configured minimum number of links are active. operational - Set the aggregate operationally down. administrative - Set the aggregate administratively down. Valid values:
operational,administrative. - mode String
- Addressing mode (static, DHCP). static - Static setting. dhcp - External DHCP client mode. Valid values:
static,dhcp. - mtu Number
- Maximum transportation unit(68 - 9000).
- mtu
Override String - Enable/disable use MTU acquired by DHCP or PPPoE. disable - Disable setting. enable - Enable setting. Valid values:
disable,enable. - name String
- Interface name.
- rating
Service List<String>Ips - IP address for fgt rating service, must be same subnet with interface ip.
- serviceaccesses List<String>
- Allow service access to interface. fgtupdates - FortiGate updates access. fclupdates - FortiClient updates access. webfilter-antispam - Web filtering and antispam access. Valid values:
fgtupdates,fclupdates,webfilter-antispam. - speed String
- Speed. auto - Auto adjust speed. 10full - 10M full-duplex. 10half - 10M half-duplex. 100full - 100M full-duplex. 100half - 100M half-duplex. 1000full - 1000M full-duplex. 10000full - 10000M full-duplex. Valid values:
auto,10full,10half,100full,100half,1000full,10000full. - status String
- Interface status. down - Interface down. up - Interface up. Valid values:
down,up. - system
Interface StringId - an identifier for the resource with format {{name}}.
- type String
- Indicates whether the type of the interface is physical. If it is, set it to "physical", else keep it empty.
- update
Service List<String>Ips - IP address for fgt/fct update service, must be same subnet with interface ip.
- vlan
Protocol String - Ethernet protocol of VLAN. 8021q - IEEE 802.1Q. 8021ad - IEEE 802.1AD. Valid values:
8021q,8021ad. - vlanid Number
- VLAN ID (1 - 4094).
Supporting Types
SystemInterfaceIpv6, SystemInterfaceIpv6Args
- Ip6Address string
- IPv6 address/prefix of interface.
- Ip6Allowaccesses List<string>
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - Ip6Autoconf string
- Enable/disable address auto config (SLAAC). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable.
- Ip6Address string
- IPv6 address/prefix of interface.
- Ip6Allowaccesses []string
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - Ip6Autoconf string
- Enable/disable address auto config (SLAAC). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable.
- ip6Address String
- IPv6 address/prefix of interface.
- ip6Allowaccesses List<String>
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - ip6Autoconf String
- Enable/disable address auto config (SLAAC). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable.
- ip6Address string
- IPv6 address/prefix of interface.
- ip6Allowaccesses string[]
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - ip6Autoconf string
- Enable/disable address auto config (SLAAC). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable.
- ip6_
address str - IPv6 address/prefix of interface.
- ip6_
allowaccesses Sequence[str] - Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - ip6_
autoconf str - Enable/disable address auto config (SLAAC). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable.
- ip6Address String
- IPv6 address/prefix of interface.
- ip6Allowaccesses List<String>
- Allow management access to interface. ping - PING access. https - HTTPS access. ssh - SSH access. snmp - SNMP access. http - HTTP access. webservice - Web service access. https-logging - Logging over HTTPS access. Valid values:
ping,https,ssh,snmp,http,webservice,https-logging. - ip6Autoconf String
- Enable/disable address auto config (SLAAC). disable - Disable setting. enable - Enable setting. Valid values:
disable,enable.
SystemInterfaceMember, SystemInterfaceMemberArgs
- Interface
Name string Physical interface name.
If you want to modify the configuration of the interface which is automatically created by FortiManager (for example, the interface created during the VPN creation process), please set the
autogeneratedargument to "auto".
- Interface
Name string Physical interface name.
If you want to modify the configuration of the interface which is automatically created by FortiManager (for example, the interface created during the VPN creation process), please set the
autogeneratedargument to "auto".
- interface
Name String Physical interface name.
If you want to modify the configuration of the interface which is automatically created by FortiManager (for example, the interface created during the VPN creation process), please set the
autogeneratedargument to "auto".
- interface
Name string Physical interface name.
If you want to modify the configuration of the interface which is automatically created by FortiManager (for example, the interface created during the VPN creation process), please set the
autogeneratedargument to "auto".
- interface_
name str Physical interface name.
If you want to modify the configuration of the interface which is automatically created by FortiManager (for example, the interface created during the VPN creation process), please set the
autogeneratedargument to "auto".
- interface
Name String Physical interface name.
If you want to modify the configuration of the interface which is automatically created by FortiManager (for example, the interface created during the VPN creation process), please set the
autogeneratedargument to "auto".
Import
System Interface can be imported using any of these accepted formats:
$ export “FORTIMANAGER_IMPORT_TABLE”=“true”
$ pulumi import fortimanager:index/systemInterface:SystemInterface labelname {{name}}
$ unset “FORTIMANAGER_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortimanager fortinetdev/terraform-provider-fortimanager
- License
- Notes
- This Pulumi package is based on the
fortimanagerTerraform Provider.
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev