New in version 2.9.
The below requirements are needed on the host that executes this module.
| Parameter | Choices/Defaults | Comments | ||
|---|---|---|---|---|
| host string | FortiOS or FortiGate IP address. | |||
| https boolean |
| Indicates if the requests towards FortiGate must use HTTPS protocol. | ||
| password string | Default: "" | FortiOS or FortiGate password. | ||
| ssl_verify boolean |
| Ensures FortiGate certificate must be verified by a proper CA. | ||
| state string / required |
| Indicates whether to create or remove the object. | ||
| switch_controller_security_policy_802_1X dictionary | Default: null | Configure 802.1x MAC Authentication Bypass (MAB) policies. | ||
| auth_fail_vlan string |
| Enable to allow limited access to clients that cannot authenticate. | ||
| auth_fail_vlan_id string | VLAN ID on which authentication failed. Source system.interface.name. | |||
| auth_fail_vlanid integer | VLAN ID on which authentication failed. | |||
| eap_passthru string |
| Enable/disable EAP pass-through mode, allowing protocols (such as LLDP) to pass through ports for more flexible authentication. | ||
| guest_auth_delay integer | Guest authentication delay (1 - 900 sec). | |||
| guest_vlan string |
| Enable the guest VLAN feature to allow limited access to non-802.1X-compliant clients. | ||
| guest_vlan_id string | Guest VLAN name. Source system.interface.name. | |||
| guest_vlanid integer | Guest VLAN ID. | |||
| mac_auth_bypass string |
| Enable/disable MAB for this policy. | ||
| name string / required | Policy name. | |||
| open_auth string |
| Enable/disable open authentication for this policy. | ||
| policy_type string |
| Policy type. | ||
| radius_timeout_overwrite string |
| Enable to override the global RADIUS session timeout. | ||
| security_mode string |
| Port or MAC based 802.1X security mode. | ||
| user_group list | Name of user-group to assign to this MAC Authentication Bypass (MAB) policy. | |||
| name string / required | Group name. Source user.group.name. | |||
| username string | FortiOS or FortiGate username. | |||
| vdom string | Default: "root" | Virtual domain, among those defined previously. A vdom is a virtual instance of the FortiGate that can be configured and used as a different unit. | ||
Note
- hosts: localhost
vars:
host: "192.168.122.40"
username: "admin"
password: ""
vdom: "root"
ssl_verify: "False"
tasks:
- name: Configure 802.1x MAC Authentication Bypass (MAB) policies.
fortios_switch_controller_security_policy_802_1X:
host: "{{ host }}"
username: "{{ username }}"
password: "{{ password }}"
vdom: "{{ vdom }}"
https: "False"
state: "present"
switch_controller_security_policy_802_1X:
auth_fail_vlan: "disable"
auth_fail_vlan_id: "<your_own_value> (source system.interface.name)"
auth_fail_vlanid: "5"
eap_passthru: "disable"
guest_auth_delay: "7"
guest_vlan: "disable"
guest_vlan_id: "<your_own_value> (source system.interface.name)"
guest_vlanid: "10"
mac_auth_bypass: "disable"
name: "default_name_12"
open_auth: "disable"
policy_type: "802.1X"
radius_timeout_overwrite: "disable"
security_mode: "802.1X"
user_group:
-
name: "default_name_18 (source user.group.name)"
Common return values are documented here, the following are the fields unique to this module:
| Key | Returned | Description |
|---|---|---|
| build string | always | Build number of the fortigate image Sample: 1547 |
| http_method string | always | Last method used to provision the content into FortiGate Sample: PUT |
| http_status string | always | Last result given by FortiGate on last operation applied Sample: 200 |
| mkey string | success | Master key (id) used in the last call to FortiGate Sample: id |
| name string | always | Name of the table used to fulfill the request Sample: urlfilter |
| path string | always | Path of the table used to fulfill the request Sample: webfilter |
| revision string | always | Internal revision number Sample: 17.0.2.10658 |
| serial string | always | Serial number of the unit Sample: FGVMEVYYQT3AB5352 |
| status string | always | Indication of the operation's result Sample: success |
| vdom string | always | Virtual domain used Sample: root |
| version string | always | Version of the FortiGate Sample: v5.6.3 |
Hint
If you notice any issues in this documentation, you can edit this document to improve it.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.9/modules/fortios_switch_controller_security_policy_802_1X_module.html