fortios.firewall.Localinpolicy6
Explore with Pulumi AI
Configure user defined IPv6 local-in policies.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";
const trname = new fortios.firewall.Localinpolicy6("trname", {
action: "accept",
dstaddrs: [{
name: "all",
}],
intf: "port4",
policyid: 1,
schedule: "always",
services: [{
name: "ALL",
}],
srcaddrs: [{
name: "all",
}],
status: "enable",
});
import pulumi
import pulumiverse_fortios as fortios
trname = fortios.firewall.Localinpolicy6("trname",
action="accept",
dstaddrs=[fortios.firewall.Localinpolicy6DstaddrArgs(
name="all",
)],
intf="port4",
policyid=1,
schedule="always",
services=[fortios.firewall.Localinpolicy6ServiceArgs(
name="ALL",
)],
srcaddrs=[fortios.firewall.Localinpolicy6SrcaddrArgs(
name="all",
)],
status="enable")
package main
import (
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/firewall"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := firewall.NewLocalinpolicy6(ctx, "trname", &firewall.Localinpolicy6Args{
Action: pulumi.String("accept"),
Dstaddrs: firewall.Localinpolicy6DstaddrArray{
&firewall.Localinpolicy6DstaddrArgs{
Name: pulumi.String("all"),
},
},
Intf: pulumi.String("port4"),
Policyid: pulumi.Int(1),
Schedule: pulumi.String("always"),
Services: firewall.Localinpolicy6ServiceArray{
&firewall.Localinpolicy6ServiceArgs{
Name: pulumi.String("ALL"),
},
},
Srcaddrs: firewall.Localinpolicy6SrcaddrArray{
&firewall.Localinpolicy6SrcaddrArgs{
Name: pulumi.String("all"),
},
},
Status: pulumi.String("enable"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;
return await Deployment.RunAsync(() =>
{
var trname = new Fortios.Firewall.Localinpolicy6("trname", new()
{
Action = "accept",
Dstaddrs = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6DstaddrArgs
{
Name = "all",
},
},
Intf = "port4",
Policyid = 1,
Schedule = "always",
Services = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6ServiceArgs
{
Name = "ALL",
},
},
Srcaddrs = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6SrcaddrArgs
{
Name = "all",
},
},
Status = "enable",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.firewall.Localinpolicy6;
import com.pulumi.fortios.firewall.Localinpolicy6Args;
import com.pulumi.fortios.firewall.inputs.Localinpolicy6DstaddrArgs;
import com.pulumi.fortios.firewall.inputs.Localinpolicy6ServiceArgs;
import com.pulumi.fortios.firewall.inputs.Localinpolicy6SrcaddrArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var trname = new Localinpolicy6("trname", Localinpolicy6Args.builder()
.action("accept")
.dstaddrs(Localinpolicy6DstaddrArgs.builder()
.name("all")
.build())
.intf("port4")
.policyid(1)
.schedule("always")
.services(Localinpolicy6ServiceArgs.builder()
.name("ALL")
.build())
.srcaddrs(Localinpolicy6SrcaddrArgs.builder()
.name("all")
.build())
.status("enable")
.build());
}
}
resources:
trname:
type: fortios:firewall:Localinpolicy6
properties:
action: accept
dstaddrs:
- name: all
intf: port4
policyid: 1
schedule: always
services:
- name: ALL
srcaddrs:
- name: all
status: enable
Create Localinpolicy6 Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Localinpolicy6(name: string, args: Localinpolicy6Args, opts?: CustomResourceOptions);
@overload
def Localinpolicy6(resource_name: str,
args: Localinpolicy6Args,
opts: Optional[ResourceOptions] = None)
@overload
def Localinpolicy6(resource_name: str,
opts: Optional[ResourceOptions] = None,
schedule: Optional[str] = None,
srcaddrs: Optional[Sequence[Localinpolicy6SrcaddrArgs]] = None,
services: Optional[Sequence[Localinpolicy6ServiceArgs]] = None,
dstaddrs: Optional[Sequence[Localinpolicy6DstaddrArgs]] = None,
intf: Optional[str] = None,
intf_blocks: Optional[Sequence[Localinpolicy6IntfBlockArgs]] = None,
internet_service6_src: Optional[str] = None,
internet_service6_src_custom_groups: Optional[Sequence[Localinpolicy6InternetService6SrcCustomGroupArgs]] = None,
internet_service6_src_customs: Optional[Sequence[Localinpolicy6InternetService6SrcCustomArgs]] = None,
internet_service6_src_groups: Optional[Sequence[Localinpolicy6InternetService6SrcGroupArgs]] = None,
internet_service6_src_names: Optional[Sequence[Localinpolicy6InternetService6SrcNameArgs]] = None,
internet_service6_src_negate: Optional[str] = None,
action: Optional[str] = None,
get_all_tables: Optional[str] = None,
policyid: Optional[int] = None,
dynamic_sort_subtable: Optional[str] = None,
service_negate: Optional[str] = None,
dstaddr_negate: Optional[str] = None,
srcaddr_negate: Optional[str] = None,
comments: Optional[str] = None,
status: Optional[str] = None,
uuid: Optional[str] = None,
vdomparam: Optional[str] = None,
virtual_patch: Optional[str] = None)
func NewLocalinpolicy6(ctx *Context, name string, args Localinpolicy6Args, opts ...ResourceOption) (*Localinpolicy6, error)
public Localinpolicy6(string name, Localinpolicy6Args args, CustomResourceOptions? opts = null)
public Localinpolicy6(String name, Localinpolicy6Args args)
public Localinpolicy6(String name, Localinpolicy6Args args, CustomResourceOptions options)
type: fortios:firewall:Localinpolicy6
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args Localinpolicy6Args
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args Localinpolicy6Args
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args Localinpolicy6Args
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args Localinpolicy6Args
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args Localinpolicy6Args
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var localinpolicy6Resource = new Fortios.Firewall.Localinpolicy6("localinpolicy6Resource", new()
{
Schedule = "string",
Srcaddrs = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6SrcaddrArgs
{
Name = "string",
},
},
Services = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6ServiceArgs
{
Name = "string",
},
},
Dstaddrs = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6DstaddrArgs
{
Name = "string",
},
},
Intf = "string",
IntfBlocks = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6IntfBlockArgs
{
Name = "string",
},
},
InternetService6Src = "string",
InternetService6SrcCustomGroups = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcCustomGroupArgs
{
Name = "string",
},
},
InternetService6SrcCustoms = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcCustomArgs
{
Name = "string",
},
},
InternetService6SrcGroups = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcGroupArgs
{
Name = "string",
},
},
InternetService6SrcNames = new[]
{
new Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcNameArgs
{
Name = "string",
},
},
InternetService6SrcNegate = "string",
Action = "string",
GetAllTables = "string",
Policyid = 0,
DynamicSortSubtable = "string",
ServiceNegate = "string",
DstaddrNegate = "string",
SrcaddrNegate = "string",
Comments = "string",
Status = "string",
Uuid = "string",
Vdomparam = "string",
VirtualPatch = "string",
});
example, err := firewall.NewLocalinpolicy6(ctx, "localinpolicy6Resource", &firewall.Localinpolicy6Args{
Schedule: pulumi.String("string"),
Srcaddrs: firewall.Localinpolicy6SrcaddrArray{
&firewall.Localinpolicy6SrcaddrArgs{
Name: pulumi.String("string"),
},
},
Services: firewall.Localinpolicy6ServiceArray{
&firewall.Localinpolicy6ServiceArgs{
Name: pulumi.String("string"),
},
},
Dstaddrs: firewall.Localinpolicy6DstaddrArray{
&firewall.Localinpolicy6DstaddrArgs{
Name: pulumi.String("string"),
},
},
Intf: pulumi.String("string"),
IntfBlocks: firewall.Localinpolicy6IntfBlockArray{
&firewall.Localinpolicy6IntfBlockArgs{
Name: pulumi.String("string"),
},
},
InternetService6Src: pulumi.String("string"),
InternetService6SrcCustomGroups: firewall.Localinpolicy6InternetService6SrcCustomGroupArray{
&firewall.Localinpolicy6InternetService6SrcCustomGroupArgs{
Name: pulumi.String("string"),
},
},
InternetService6SrcCustoms: firewall.Localinpolicy6InternetService6SrcCustomArray{
&firewall.Localinpolicy6InternetService6SrcCustomArgs{
Name: pulumi.String("string"),
},
},
InternetService6SrcGroups: firewall.Localinpolicy6InternetService6SrcGroupArray{
&firewall.Localinpolicy6InternetService6SrcGroupArgs{
Name: pulumi.String("string"),
},
},
InternetService6SrcNames: firewall.Localinpolicy6InternetService6SrcNameArray{
&firewall.Localinpolicy6InternetService6SrcNameArgs{
Name: pulumi.String("string"),
},
},
InternetService6SrcNegate: pulumi.String("string"),
Action: pulumi.String("string"),
GetAllTables: pulumi.String("string"),
Policyid: pulumi.Int(0),
DynamicSortSubtable: pulumi.String("string"),
ServiceNegate: pulumi.String("string"),
DstaddrNegate: pulumi.String("string"),
SrcaddrNegate: pulumi.String("string"),
Comments: pulumi.String("string"),
Status: pulumi.String("string"),
Uuid: pulumi.String("string"),
Vdomparam: pulumi.String("string"),
VirtualPatch: pulumi.String("string"),
})
var localinpolicy6Resource = new Localinpolicy6("localinpolicy6Resource", Localinpolicy6Args.builder()
.schedule("string")
.srcaddrs(Localinpolicy6SrcaddrArgs.builder()
.name("string")
.build())
.services(Localinpolicy6ServiceArgs.builder()
.name("string")
.build())
.dstaddrs(Localinpolicy6DstaddrArgs.builder()
.name("string")
.build())
.intf("string")
.intfBlocks(Localinpolicy6IntfBlockArgs.builder()
.name("string")
.build())
.internetService6Src("string")
.internetService6SrcCustomGroups(Localinpolicy6InternetService6SrcCustomGroupArgs.builder()
.name("string")
.build())
.internetService6SrcCustoms(Localinpolicy6InternetService6SrcCustomArgs.builder()
.name("string")
.build())
.internetService6SrcGroups(Localinpolicy6InternetService6SrcGroupArgs.builder()
.name("string")
.build())
.internetService6SrcNames(Localinpolicy6InternetService6SrcNameArgs.builder()
.name("string")
.build())
.internetService6SrcNegate("string")
.action("string")
.getAllTables("string")
.policyid(0)
.dynamicSortSubtable("string")
.serviceNegate("string")
.dstaddrNegate("string")
.srcaddrNegate("string")
.comments("string")
.status("string")
.uuid("string")
.vdomparam("string")
.virtualPatch("string")
.build());
localinpolicy6_resource = fortios.firewall.Localinpolicy6("localinpolicy6Resource",
schedule="string",
srcaddrs=[{
"name": "string",
}],
services=[{
"name": "string",
}],
dstaddrs=[{
"name": "string",
}],
intf="string",
intf_blocks=[{
"name": "string",
}],
internet_service6_src="string",
internet_service6_src_custom_groups=[{
"name": "string",
}],
internet_service6_src_customs=[{
"name": "string",
}],
internet_service6_src_groups=[{
"name": "string",
}],
internet_service6_src_names=[{
"name": "string",
}],
internet_service6_src_negate="string",
action="string",
get_all_tables="string",
policyid=0,
dynamic_sort_subtable="string",
service_negate="string",
dstaddr_negate="string",
srcaddr_negate="string",
comments="string",
status="string",
uuid="string",
vdomparam="string",
virtual_patch="string")
const localinpolicy6Resource = new fortios.firewall.Localinpolicy6("localinpolicy6Resource", {
schedule: "string",
srcaddrs: [{
name: "string",
}],
services: [{
name: "string",
}],
dstaddrs: [{
name: "string",
}],
intf: "string",
intfBlocks: [{
name: "string",
}],
internetService6Src: "string",
internetService6SrcCustomGroups: [{
name: "string",
}],
internetService6SrcCustoms: [{
name: "string",
}],
internetService6SrcGroups: [{
name: "string",
}],
internetService6SrcNames: [{
name: "string",
}],
internetService6SrcNegate: "string",
action: "string",
getAllTables: "string",
policyid: 0,
dynamicSortSubtable: "string",
serviceNegate: "string",
dstaddrNegate: "string",
srcaddrNegate: "string",
comments: "string",
status: "string",
uuid: "string",
vdomparam: "string",
virtualPatch: "string",
});
type: fortios:firewall:Localinpolicy6
properties:
action: string
comments: string
dstaddrNegate: string
dstaddrs:
- name: string
dynamicSortSubtable: string
getAllTables: string
internetService6Src: string
internetService6SrcCustomGroups:
- name: string
internetService6SrcCustoms:
- name: string
internetService6SrcGroups:
- name: string
internetService6SrcNames:
- name: string
internetService6SrcNegate: string
intf: string
intfBlocks:
- name: string
policyid: 0
schedule: string
serviceNegate: string
services:
- name: string
srcaddrNegate: string
srcaddrs:
- name: string
status: string
uuid: string
vdomparam: string
virtualPatch: string
Localinpolicy6 Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Localinpolicy6 resource accepts the following input properties:
- Dstaddrs
List<Pulumiverse.
Fortios. Firewall. Inputs. Localinpolicy6Dstaddr> - Destination address object from available options. The structure of
dstaddr
block is documented below. - Schedule string
- Schedule object from available options.
- Services
List<Pulumiverse.
Fortios. Firewall. Inputs. Localinpolicy6Service> - Service object from available options. Separate names with a space. The structure of
service
block is documented below. - Srcaddrs
List<Pulumiverse.
Fortios. Firewall. Inputs. Localinpolicy6Srcaddr> - Source address object from available options. The structure of
srcaddr
block is documented below. - Action string
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - Comments string
- Comment.
- Dstaddr
Negate string - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Internet
Service6Src string - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - Internet
Service6Src List<Pulumiverse.Custom Groups Fortios. Firewall. Inputs. Localinpolicy6Internet Service6Src Custom Group> - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - Internet
Service6Src List<Pulumiverse.Customs Fortios. Firewall. Inputs. Localinpolicy6Internet Service6Src Custom> - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - Internet
Service6Src List<Pulumiverse.Groups Fortios. Firewall. Inputs. Localinpolicy6Internet Service6Src Group> - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - Internet
Service6Src List<Pulumiverse.Names Fortios. Firewall. Inputs. Localinpolicy6Internet Service6Src Name> - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - Internet
Service6Src stringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - Intf string
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - Intf
Blocks List<Pulumiverse.Fortios. Firewall. Inputs. Localinpolicy6Intf Block> - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - Policyid int
- User defined local in policy ID.
- Service
Negate string - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - Srcaddr
Negate string - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - Status string
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Virtual
Patch string - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- Dstaddrs
[]Localinpolicy6Dstaddr
Args - Destination address object from available options. The structure of
dstaddr
block is documented below. - Schedule string
- Schedule object from available options.
- Services
[]Localinpolicy6Service
Args - Service object from available options. Separate names with a space. The structure of
service
block is documented below. - Srcaddrs
[]Localinpolicy6Srcaddr
Args - Source address object from available options. The structure of
srcaddr
block is documented below. - Action string
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - Comments string
- Comment.
- Dstaddr
Negate string - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Internet
Service6Src string - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - Internet
Service6Src []Localinpolicy6InternetCustom Groups Service6Src Custom Group Args - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - Internet
Service6Src []Localinpolicy6InternetCustoms Service6Src Custom Args - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - Internet
Service6Src []Localinpolicy6InternetGroups Service6Src Group Args - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - Internet
Service6Src []Localinpolicy6InternetNames Service6Src Name Args - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - Internet
Service6Src stringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - Intf string
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - Intf
Blocks []Localinpolicy6IntfBlock Args - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - Policyid int
- User defined local in policy ID.
- Service
Negate string - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - Srcaddr
Negate string - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - Status string
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Virtual
Patch string - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- dstaddrs List<Localinpolicy6Dstaddr>
- Destination address object from available options. The structure of
dstaddr
block is documented below. - schedule String
- Schedule object from available options.
- services List<Localinpolicy6Service>
- Service object from available options. Separate names with a space. The structure of
service
block is documented below. - srcaddrs List<Localinpolicy6Srcaddr>
- Source address object from available options. The structure of
srcaddr
block is documented below. - action String
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - comments String
- Comment.
- dstaddr
Negate String - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- internet
Service6Src String - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - internet
Service6Src List<Localinpolicy6InternetCustom Groups Service6Src Custom Group> - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - internet
Service6Src List<Localinpolicy6InternetCustoms Service6Src Custom> - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - internet
Service6Src List<Localinpolicy6InternetGroups Service6Src Group> - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - internet
Service6Src List<Localinpolicy6InternetNames Service6Src Name> - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - internet
Service6Src StringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - intf String
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - intf
Blocks List<Localinpolicy6IntfBlock> - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - policyid Integer
- User defined local in policy ID.
- service
Negate String - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - srcaddr
Negate String - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - status String
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- virtual
Patch String - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- dstaddrs Localinpolicy6Dstaddr[]
- Destination address object from available options. The structure of
dstaddr
block is documented below. - schedule string
- Schedule object from available options.
- services Localinpolicy6Service[]
- Service object from available options. Separate names with a space. The structure of
service
block is documented below. - srcaddrs Localinpolicy6Srcaddr[]
- Source address object from available options. The structure of
srcaddr
block is documented below. - action string
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - comments string
- Comment.
- dstaddr
Negate string - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- internet
Service6Src string - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - internet
Service6Src Localinpolicy6InternetCustom Groups Service6Src Custom Group[] - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - internet
Service6Src Localinpolicy6InternetCustoms Service6Src Custom[] - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - internet
Service6Src Localinpolicy6InternetGroups Service6Src Group[] - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - internet
Service6Src Localinpolicy6InternetNames Service6Src Name[] - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - internet
Service6Src stringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - intf string
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - intf
Blocks Localinpolicy6IntfBlock[] - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - policyid number
- User defined local in policy ID.
- service
Negate string - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - srcaddr
Negate string - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - status string
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- virtual
Patch string - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- dstaddrs
Sequence[Localinpolicy6Dstaddr
Args] - Destination address object from available options. The structure of
dstaddr
block is documented below. - schedule str
- Schedule object from available options.
- services
Sequence[Localinpolicy6Service
Args] - Service object from available options. Separate names with a space. The structure of
service
block is documented below. - srcaddrs
Sequence[Localinpolicy6Srcaddr
Args] - Source address object from available options. The structure of
srcaddr
block is documented below. - action str
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - comments str
- Comment.
- dstaddr_
negate str - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- internet_
service6_ strsrc - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - internet_
service6_ Sequence[Localinpolicy6Internetsrc_ custom_ groups Service6Src Custom Group Args] - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - internet_
service6_ Sequence[Localinpolicy6Internetsrc_ customs Service6Src Custom Args] - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - internet_
service6_ Sequence[Localinpolicy6Internetsrc_ groups Service6Src Group Args] - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - internet_
service6_ Sequence[Localinpolicy6Internetsrc_ names Service6Src Name Args] - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - internet_
service6_ strsrc_ negate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - intf str
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - intf_
blocks Sequence[Localinpolicy6IntfBlock Args] - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - policyid int
- User defined local in policy ID.
- service_
negate str - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - srcaddr_
negate str - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - status str
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - uuid str
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- virtual_
patch str - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- dstaddrs List<Property Map>
- Destination address object from available options. The structure of
dstaddr
block is documented below. - schedule String
- Schedule object from available options.
- services List<Property Map>
- Service object from available options. Separate names with a space. The structure of
service
block is documented below. - srcaddrs List<Property Map>
- Source address object from available options. The structure of
srcaddr
block is documented below. - action String
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - comments String
- Comment.
- dstaddr
Negate String - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- internet
Service6Src String - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - internet
Service6Src List<Property Map>Custom Groups - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - internet
Service6Src List<Property Map>Customs - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - internet
Service6Src List<Property Map>Groups - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - internet
Service6Src List<Property Map>Names - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - internet
Service6Src StringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - intf String
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - intf
Blocks List<Property Map> - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - policyid Number
- User defined local in policy ID.
- service
Negate String - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - srcaddr
Negate String - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - status String
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- virtual
Patch String - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
Outputs
All input properties are implicitly available as output properties. Additionally, the Localinpolicy6 resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Localinpolicy6 Resource
Get an existing Localinpolicy6 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: Localinpolicy6State, opts?: CustomResourceOptions): Localinpolicy6
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
action: Optional[str] = None,
comments: Optional[str] = None,
dstaddr_negate: Optional[str] = None,
dstaddrs: Optional[Sequence[Localinpolicy6DstaddrArgs]] = None,
dynamic_sort_subtable: Optional[str] = None,
get_all_tables: Optional[str] = None,
internet_service6_src: Optional[str] = None,
internet_service6_src_custom_groups: Optional[Sequence[Localinpolicy6InternetService6SrcCustomGroupArgs]] = None,
internet_service6_src_customs: Optional[Sequence[Localinpolicy6InternetService6SrcCustomArgs]] = None,
internet_service6_src_groups: Optional[Sequence[Localinpolicy6InternetService6SrcGroupArgs]] = None,
internet_service6_src_names: Optional[Sequence[Localinpolicy6InternetService6SrcNameArgs]] = None,
internet_service6_src_negate: Optional[str] = None,
intf: Optional[str] = None,
intf_blocks: Optional[Sequence[Localinpolicy6IntfBlockArgs]] = None,
policyid: Optional[int] = None,
schedule: Optional[str] = None,
service_negate: Optional[str] = None,
services: Optional[Sequence[Localinpolicy6ServiceArgs]] = None,
srcaddr_negate: Optional[str] = None,
srcaddrs: Optional[Sequence[Localinpolicy6SrcaddrArgs]] = None,
status: Optional[str] = None,
uuid: Optional[str] = None,
vdomparam: Optional[str] = None,
virtual_patch: Optional[str] = None) -> Localinpolicy6
func GetLocalinpolicy6(ctx *Context, name string, id IDInput, state *Localinpolicy6State, opts ...ResourceOption) (*Localinpolicy6, error)
public static Localinpolicy6 Get(string name, Input<string> id, Localinpolicy6State? state, CustomResourceOptions? opts = null)
public static Localinpolicy6 get(String name, Output<String> id, Localinpolicy6State state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Action string
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - Comments string
- Comment.
- Dstaddr
Negate string - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - Dstaddrs
List<Pulumiverse.
Fortios. Firewall. Inputs. Localinpolicy6Dstaddr> - Destination address object from available options. The structure of
dstaddr
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Internet
Service6Src string - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - Internet
Service6Src List<Pulumiverse.Custom Groups Fortios. Firewall. Inputs. Localinpolicy6Internet Service6Src Custom Group> - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - Internet
Service6Src List<Pulumiverse.Customs Fortios. Firewall. Inputs. Localinpolicy6Internet Service6Src Custom> - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - Internet
Service6Src List<Pulumiverse.Groups Fortios. Firewall. Inputs. Localinpolicy6Internet Service6Src Group> - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - Internet
Service6Src List<Pulumiverse.Names Fortios. Firewall. Inputs. Localinpolicy6Internet Service6Src Name> - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - Internet
Service6Src stringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - Intf string
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - Intf
Blocks List<Pulumiverse.Fortios. Firewall. Inputs. Localinpolicy6Intf Block> - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - Policyid int
- User defined local in policy ID.
- Schedule string
- Schedule object from available options.
- Service
Negate string - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - Services
List<Pulumiverse.
Fortios. Firewall. Inputs. Localinpolicy6Service> - Service object from available options. Separate names with a space. The structure of
service
block is documented below. - Srcaddr
Negate string - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - Srcaddrs
List<Pulumiverse.
Fortios. Firewall. Inputs. Localinpolicy6Srcaddr> - Source address object from available options. The structure of
srcaddr
block is documented below. - Status string
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Virtual
Patch string - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- Action string
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - Comments string
- Comment.
- Dstaddr
Negate string - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - Dstaddrs
[]Localinpolicy6Dstaddr
Args - Destination address object from available options. The structure of
dstaddr
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Internet
Service6Src string - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - Internet
Service6Src []Localinpolicy6InternetCustom Groups Service6Src Custom Group Args - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - Internet
Service6Src []Localinpolicy6InternetCustoms Service6Src Custom Args - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - Internet
Service6Src []Localinpolicy6InternetGroups Service6Src Group Args - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - Internet
Service6Src []Localinpolicy6InternetNames Service6Src Name Args - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - Internet
Service6Src stringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - Intf string
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - Intf
Blocks []Localinpolicy6IntfBlock Args - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - Policyid int
- User defined local in policy ID.
- Schedule string
- Schedule object from available options.
- Service
Negate string - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - Services
[]Localinpolicy6Service
Args - Service object from available options. Separate names with a space. The structure of
service
block is documented below. - Srcaddr
Negate string - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - Srcaddrs
[]Localinpolicy6Srcaddr
Args - Source address object from available options. The structure of
srcaddr
block is documented below. - Status string
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Virtual
Patch string - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- action String
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - comments String
- Comment.
- dstaddr
Negate String - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - dstaddrs List<Localinpolicy6Dstaddr>
- Destination address object from available options. The structure of
dstaddr
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- internet
Service6Src String - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - internet
Service6Src List<Localinpolicy6InternetCustom Groups Service6Src Custom Group> - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - internet
Service6Src List<Localinpolicy6InternetCustoms Service6Src Custom> - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - internet
Service6Src List<Localinpolicy6InternetGroups Service6Src Group> - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - internet
Service6Src List<Localinpolicy6InternetNames Service6Src Name> - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - internet
Service6Src StringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - intf String
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - intf
Blocks List<Localinpolicy6IntfBlock> - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - policyid Integer
- User defined local in policy ID.
- schedule String
- Schedule object from available options.
- service
Negate String - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - services List<Localinpolicy6Service>
- Service object from available options. Separate names with a space. The structure of
service
block is documented below. - srcaddr
Negate String - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - srcaddrs List<Localinpolicy6Srcaddr>
- Source address object from available options. The structure of
srcaddr
block is documented below. - status String
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- virtual
Patch String - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- action string
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - comments string
- Comment.
- dstaddr
Negate string - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - dstaddrs Localinpolicy6Dstaddr[]
- Destination address object from available options. The structure of
dstaddr
block is documented below. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- internet
Service6Src string - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - internet
Service6Src Localinpolicy6InternetCustom Groups Service6Src Custom Group[] - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - internet
Service6Src Localinpolicy6InternetCustoms Service6Src Custom[] - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - internet
Service6Src Localinpolicy6InternetGroups Service6Src Group[] - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - internet
Service6Src Localinpolicy6InternetNames Service6Src Name[] - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - internet
Service6Src stringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - intf string
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - intf
Blocks Localinpolicy6IntfBlock[] - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - policyid number
- User defined local in policy ID.
- schedule string
- Schedule object from available options.
- service
Negate string - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - services Localinpolicy6Service[]
- Service object from available options. Separate names with a space. The structure of
service
block is documented below. - srcaddr
Negate string - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - srcaddrs Localinpolicy6Srcaddr[]
- Source address object from available options. The structure of
srcaddr
block is documented below. - status string
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- virtual
Patch string - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- action str
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - comments str
- Comment.
- dstaddr_
negate str - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - dstaddrs
Sequence[Localinpolicy6Dstaddr
Args] - Destination address object from available options. The structure of
dstaddr
block is documented below. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- internet_
service6_ strsrc - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - internet_
service6_ Sequence[Localinpolicy6Internetsrc_ custom_ groups Service6Src Custom Group Args] - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - internet_
service6_ Sequence[Localinpolicy6Internetsrc_ customs Service6Src Custom Args] - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - internet_
service6_ Sequence[Localinpolicy6Internetsrc_ groups Service6Src Group Args] - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - internet_
service6_ Sequence[Localinpolicy6Internetsrc_ names Service6Src Name Args] - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - internet_
service6_ strsrc_ negate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - intf str
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - intf_
blocks Sequence[Localinpolicy6IntfBlock Args] - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - policyid int
- User defined local in policy ID.
- schedule str
- Schedule object from available options.
- service_
negate str - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - services
Sequence[Localinpolicy6Service
Args] - Service object from available options. Separate names with a space. The structure of
service
block is documented below. - srcaddr_
negate str - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - srcaddrs
Sequence[Localinpolicy6Srcaddr
Args] - Source address object from available options. The structure of
srcaddr
block is documented below. - status str
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - uuid str
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- virtual_
patch str - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
- action String
- Action performed on traffic matching the policy (default = deny). Valid values:
accept
,deny
. - comments String
- Comment.
- dstaddr
Negate String - When enabled dstaddr specifies what the destination address must NOT be. Valid values:
enable
,disable
. - dstaddrs List<Property Map>
- Destination address object from available options. The structure of
dstaddr
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- internet
Service6Src String - Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values:
enable
,disable
. - internet
Service6Src List<Property Map>Custom Groups - Custom Internet Service6 source group name. The structure of
internet_service6_src_custom_group
block is documented below. - internet
Service6Src List<Property Map>Customs - Custom IPv6 Internet Service source name. The structure of
internet_service6_src_custom
block is documented below. - internet
Service6Src List<Property Map>Groups - Internet Service6 source group name. The structure of
internet_service6_src_group
block is documented below. - internet
Service6Src List<Property Map>Names - IPv6 Internet Service source name. The structure of
internet_service6_src_name
block is documented below. - internet
Service6Src StringNegate - When enabled internet-service6-src specifies what the service must NOT be. Valid values:
enable
,disable
. - intf String
- Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf_block
. - intf
Blocks List<Property Map> - Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable
intf
. The structure ofintf_block
block is documented below. - policyid Number
- User defined local in policy ID.
- schedule String
- Schedule object from available options.
- service
Negate String - When enabled service specifies what the service must NOT be. Valid values:
enable
,disable
. - services List<Property Map>
- Service object from available options. Separate names with a space. The structure of
service
block is documented below. - srcaddr
Negate String - When enabled srcaddr specifies what the source address must NOT be. Valid values:
enable
,disable
. - srcaddrs List<Property Map>
- Source address object from available options. The structure of
srcaddr
block is documented below. - status String
- Enable/disable this local-in policy. Valid values:
enable
,disable
. - uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- virtual
Patch String - Enable/disable the virtual patching feature. Valid values:
enable
,disable
.
Supporting Types
Localinpolicy6Dstaddr, Localinpolicy6DstaddrArgs
- Name string
- Custom Internet Service6 group name.
- Name string
- Custom Internet Service6 group name.
- name String
- Custom Internet Service6 group name.
- name string
- Custom Internet Service6 group name.
- name str
- Custom Internet Service6 group name.
- name String
- Custom Internet Service6 group name.
Localinpolicy6InternetService6SrcCustom, Localinpolicy6InternetService6SrcCustomArgs
- Name string
- Name string
- name String
- name string
- name str
- name String
Localinpolicy6InternetService6SrcCustomGroup, Localinpolicy6InternetService6SrcCustomGroupArgs
- Name string
- Name string
- name String
- name string
- name str
- name String
Localinpolicy6InternetService6SrcGroup, Localinpolicy6InternetService6SrcGroupArgs
- Name string
- Name string
- name String
- name string
- name str
- name String
Localinpolicy6InternetService6SrcName, Localinpolicy6InternetService6SrcNameArgs
- Name string
- Name string
- name String
- name string
- name str
- name String
Localinpolicy6IntfBlock, Localinpolicy6IntfBlockArgs
- Name string
- Address name.
- Name string
- Address name.
- name String
- Address name.
- name string
- Address name.
- name str
- Address name.
- name String
- Address name.
Localinpolicy6Service, Localinpolicy6ServiceArgs
- Name string
- Service name.
- Name string
- Service name.
- name String
- Service name.
- name string
- Service name.
- name str
- Service name.
- name String
- Service name.
Localinpolicy6Srcaddr, Localinpolicy6SrcaddrArgs
- Name string
- Address name.
- Name string
- Address name.
- name String
- Address name.
- name string
- Address name.
- name str
- Address name.
- name String
- Address name.
Import
Firewall LocalInPolicy6 can be imported using any of these accepted formats:
$ pulumi import fortios:firewall/localinpolicy6:Localinpolicy6 labelname {{policyid}}
If you do not want to import arguments of block:
$ export “FORTIOS_IMPORT_TABLE”=“false”
$ pulumi import fortios:firewall/localinpolicy6:Localinpolicy6 labelname {{policyid}}
$ unset “FORTIOS_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
fortios
Terraform Provider.