fortios.switchcontroller.Global
Explore with Pulumi AI
Configure FortiSwitch global settings.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";
const trname = new fortios.switchcontroller.Global("trname", {
allowMultipleInterfaces: "disable",
httpsImagePush: "disable",
logMacLimitViolations: "disable",
macAgingInterval: 332,
macRetentionPeriod: 24,
macViolationTimer: 0,
});
import pulumi
import pulumiverse_fortios as fortios
trname = fortios.switchcontroller.Global("trname",
allow_multiple_interfaces="disable",
https_image_push="disable",
log_mac_limit_violations="disable",
mac_aging_interval=332,
mac_retention_period=24,
mac_violation_timer=0)
package main
import (
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/switchcontroller"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := switchcontroller.NewGlobal(ctx, "trname", &switchcontroller.GlobalArgs{
AllowMultipleInterfaces: pulumi.String("disable"),
HttpsImagePush: pulumi.String("disable"),
LogMacLimitViolations: pulumi.String("disable"),
MacAgingInterval: pulumi.Int(332),
MacRetentionPeriod: pulumi.Int(24),
MacViolationTimer: pulumi.Int(0),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;
return await Deployment.RunAsync(() =>
{
var trname = new Fortios.Switchcontroller.Global("trname", new()
{
AllowMultipleInterfaces = "disable",
HttpsImagePush = "disable",
LogMacLimitViolations = "disable",
MacAgingInterval = 332,
MacRetentionPeriod = 24,
MacViolationTimer = 0,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.switchcontroller.Global;
import com.pulumi.fortios.switchcontroller.GlobalArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var trname = new Global("trname", GlobalArgs.builder()
.allowMultipleInterfaces("disable")
.httpsImagePush("disable")
.logMacLimitViolations("disable")
.macAgingInterval(332)
.macRetentionPeriod(24)
.macViolationTimer(0)
.build());
}
}
resources:
trname:
type: fortios:switchcontroller:Global
properties:
allowMultipleInterfaces: disable
httpsImagePush: disable
logMacLimitViolations: disable
macAgingInterval: 332
macRetentionPeriod: 24
macViolationTimer: 0
Create Global Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Global(name: string, args?: GlobalArgs, opts?: CustomResourceOptions);
@overload
def Global(resource_name: str,
args: Optional[GlobalArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def Global(resource_name: str,
opts: Optional[ResourceOptions] = None,
allow_multiple_interfaces: Optional[str] = None,
bounce_quarantined_link: Optional[str] = None,
custom_commands: Optional[Sequence[GlobalCustomCommandArgs]] = None,
default_virtual_switch_vlan: Optional[str] = None,
dhcp_option82_circuit_id: Optional[str] = None,
dhcp_option82_format: Optional[str] = None,
dhcp_option82_remote_id: Optional[str] = None,
dhcp_server_access_list: Optional[str] = None,
dhcp_snoop_client_db_exp: Optional[int] = None,
dhcp_snoop_client_req: Optional[str] = None,
dhcp_snoop_db_per_port_learn_limit: Optional[int] = None,
disable_discoveries: Optional[Sequence[GlobalDisableDiscoveryArgs]] = None,
dynamic_sort_subtable: Optional[str] = None,
fips_enforce: Optional[str] = None,
firmware_provision_on_authorization: Optional[str] = None,
get_all_tables: Optional[str] = None,
https_image_push: Optional[str] = None,
log_mac_limit_violations: Optional[str] = None,
mac_aging_interval: Optional[int] = None,
mac_event_logging: Optional[str] = None,
mac_retention_period: Optional[int] = None,
mac_violation_timer: Optional[int] = None,
quarantine_mode: Optional[str] = None,
sn_dns_resolution: Optional[str] = None,
update_user_device: Optional[str] = None,
vdomparam: Optional[str] = None,
vlan_all_mode: Optional[str] = None,
vlan_identity: Optional[str] = None,
vlan_optimization: Optional[str] = None)
func NewGlobal(ctx *Context, name string, args *GlobalArgs, opts ...ResourceOption) (*Global, error)
public Global(string name, GlobalArgs? args = null, CustomResourceOptions? opts = null)
public Global(String name, GlobalArgs args)
public Global(String name, GlobalArgs args, CustomResourceOptions options)
type: fortios:switchcontroller:Global
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args GlobalArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args GlobalArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args GlobalArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args GlobalArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args GlobalArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var exampleglobalResourceResourceFromSwitchcontrollerglobal = new Fortios.Switchcontroller.Global("exampleglobalResourceResourceFromSwitchcontrollerglobal", new()
{
AllowMultipleInterfaces = "string",
BounceQuarantinedLink = "string",
CustomCommands = new[]
{
new Fortios.Switchcontroller.Inputs.GlobalCustomCommandArgs
{
CommandEntry = "string",
CommandName = "string",
},
},
DefaultVirtualSwitchVlan = "string",
DhcpOption82CircuitId = "string",
DhcpOption82Format = "string",
DhcpOption82RemoteId = "string",
DhcpServerAccessList = "string",
DhcpSnoopClientDbExp = 0,
DhcpSnoopClientReq = "string",
DhcpSnoopDbPerPortLearnLimit = 0,
DisableDiscoveries = new[]
{
new Fortios.Switchcontroller.Inputs.GlobalDisableDiscoveryArgs
{
Name = "string",
},
},
DynamicSortSubtable = "string",
FipsEnforce = "string",
FirmwareProvisionOnAuthorization = "string",
GetAllTables = "string",
HttpsImagePush = "string",
LogMacLimitViolations = "string",
MacAgingInterval = 0,
MacEventLogging = "string",
MacRetentionPeriod = 0,
MacViolationTimer = 0,
QuarantineMode = "string",
SnDnsResolution = "string",
UpdateUserDevice = "string",
Vdomparam = "string",
VlanAllMode = "string",
VlanIdentity = "string",
VlanOptimization = "string",
});
example, err := switchcontroller.NewGlobal(ctx, "exampleglobalResourceResourceFromSwitchcontrollerglobal", &switchcontroller.GlobalArgs{
AllowMultipleInterfaces: pulumi.String("string"),
BounceQuarantinedLink: pulumi.String("string"),
CustomCommands: switchcontroller.GlobalCustomCommandArray{
&switchcontroller.GlobalCustomCommandArgs{
CommandEntry: pulumi.String("string"),
CommandName: pulumi.String("string"),
},
},
DefaultVirtualSwitchVlan: pulumi.String("string"),
DhcpOption82CircuitId: pulumi.String("string"),
DhcpOption82Format: pulumi.String("string"),
DhcpOption82RemoteId: pulumi.String("string"),
DhcpServerAccessList: pulumi.String("string"),
DhcpSnoopClientDbExp: pulumi.Int(0),
DhcpSnoopClientReq: pulumi.String("string"),
DhcpSnoopDbPerPortLearnLimit: pulumi.Int(0),
DisableDiscoveries: switchcontroller.GlobalDisableDiscoveryArray{
&switchcontroller.GlobalDisableDiscoveryArgs{
Name: pulumi.String("string"),
},
},
DynamicSortSubtable: pulumi.String("string"),
FipsEnforce: pulumi.String("string"),
FirmwareProvisionOnAuthorization: pulumi.String("string"),
GetAllTables: pulumi.String("string"),
HttpsImagePush: pulumi.String("string"),
LogMacLimitViolations: pulumi.String("string"),
MacAgingInterval: pulumi.Int(0),
MacEventLogging: pulumi.String("string"),
MacRetentionPeriod: pulumi.Int(0),
MacViolationTimer: pulumi.Int(0),
QuarantineMode: pulumi.String("string"),
SnDnsResolution: pulumi.String("string"),
UpdateUserDevice: pulumi.String("string"),
Vdomparam: pulumi.String("string"),
VlanAllMode: pulumi.String("string"),
VlanIdentity: pulumi.String("string"),
VlanOptimization: pulumi.String("string"),
})
var exampleglobalResourceResourceFromSwitchcontrollerglobal = new Global("exampleglobalResourceResourceFromSwitchcontrollerglobal", GlobalArgs.builder()
.allowMultipleInterfaces("string")
.bounceQuarantinedLink("string")
.customCommands(GlobalCustomCommandArgs.builder()
.commandEntry("string")
.commandName("string")
.build())
.defaultVirtualSwitchVlan("string")
.dhcpOption82CircuitId("string")
.dhcpOption82Format("string")
.dhcpOption82RemoteId("string")
.dhcpServerAccessList("string")
.dhcpSnoopClientDbExp(0)
.dhcpSnoopClientReq("string")
.dhcpSnoopDbPerPortLearnLimit(0)
.disableDiscoveries(GlobalDisableDiscoveryArgs.builder()
.name("string")
.build())
.dynamicSortSubtable("string")
.fipsEnforce("string")
.firmwareProvisionOnAuthorization("string")
.getAllTables("string")
.httpsImagePush("string")
.logMacLimitViolations("string")
.macAgingInterval(0)
.macEventLogging("string")
.macRetentionPeriod(0)
.macViolationTimer(0)
.quarantineMode("string")
.snDnsResolution("string")
.updateUserDevice("string")
.vdomparam("string")
.vlanAllMode("string")
.vlanIdentity("string")
.vlanOptimization("string")
.build());
exampleglobal_resource_resource_from_switchcontrollerglobal = fortios.switchcontroller.Global("exampleglobalResourceResourceFromSwitchcontrollerglobal",
allow_multiple_interfaces="string",
bounce_quarantined_link="string",
custom_commands=[{
"command_entry": "string",
"command_name": "string",
}],
default_virtual_switch_vlan="string",
dhcp_option82_circuit_id="string",
dhcp_option82_format="string",
dhcp_option82_remote_id="string",
dhcp_server_access_list="string",
dhcp_snoop_client_db_exp=0,
dhcp_snoop_client_req="string",
dhcp_snoop_db_per_port_learn_limit=0,
disable_discoveries=[{
"name": "string",
}],
dynamic_sort_subtable="string",
fips_enforce="string",
firmware_provision_on_authorization="string",
get_all_tables="string",
https_image_push="string",
log_mac_limit_violations="string",
mac_aging_interval=0,
mac_event_logging="string",
mac_retention_period=0,
mac_violation_timer=0,
quarantine_mode="string",
sn_dns_resolution="string",
update_user_device="string",
vdomparam="string",
vlan_all_mode="string",
vlan_identity="string",
vlan_optimization="string")
const exampleglobalResourceResourceFromSwitchcontrollerglobal = new fortios.switchcontroller.Global("exampleglobalResourceResourceFromSwitchcontrollerglobal", {
allowMultipleInterfaces: "string",
bounceQuarantinedLink: "string",
customCommands: [{
commandEntry: "string",
commandName: "string",
}],
defaultVirtualSwitchVlan: "string",
dhcpOption82CircuitId: "string",
dhcpOption82Format: "string",
dhcpOption82RemoteId: "string",
dhcpServerAccessList: "string",
dhcpSnoopClientDbExp: 0,
dhcpSnoopClientReq: "string",
dhcpSnoopDbPerPortLearnLimit: 0,
disableDiscoveries: [{
name: "string",
}],
dynamicSortSubtable: "string",
fipsEnforce: "string",
firmwareProvisionOnAuthorization: "string",
getAllTables: "string",
httpsImagePush: "string",
logMacLimitViolations: "string",
macAgingInterval: 0,
macEventLogging: "string",
macRetentionPeriod: 0,
macViolationTimer: 0,
quarantineMode: "string",
snDnsResolution: "string",
updateUserDevice: "string",
vdomparam: "string",
vlanAllMode: "string",
vlanIdentity: "string",
vlanOptimization: "string",
});
type: fortios:switchcontroller:Global
properties:
allowMultipleInterfaces: string
bounceQuarantinedLink: string
customCommands:
- commandEntry: string
commandName: string
defaultVirtualSwitchVlan: string
dhcpOption82CircuitId: string
dhcpOption82Format: string
dhcpOption82RemoteId: string
dhcpServerAccessList: string
dhcpSnoopClientDbExp: 0
dhcpSnoopClientReq: string
dhcpSnoopDbPerPortLearnLimit: 0
disableDiscoveries:
- name: string
dynamicSortSubtable: string
fipsEnforce: string
firmwareProvisionOnAuthorization: string
getAllTables: string
httpsImagePush: string
logMacLimitViolations: string
macAgingInterval: 0
macEventLogging: string
macRetentionPeriod: 0
macViolationTimer: 0
quarantineMode: string
snDnsResolution: string
updateUserDevice: string
vdomparam: string
vlanAllMode: string
vlanIdentity: string
vlanOptimization: string
Global Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Global resource accepts the following input properties:
- Allow
Multiple stringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - Bounce
Quarantined stringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - Custom
Commands List<Pulumiverse.Fortios. Switchcontroller. Inputs. Global Custom Command> - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - Default
Virtual stringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- Dhcp
Option82Circuit stringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - Dhcp
Option82Format string - DHCP option-82 format string. Valid values:
ascii
,legacy
. - Dhcp
Option82Remote stringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - Dhcp
Server stringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - Dhcp
Snoop intClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- Dhcp
Snoop stringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - Dhcp
Snoop intDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- Disable
Discoveries List<Pulumiverse.Fortios. Switchcontroller. Inputs. Global Disable Discovery> - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Fips
Enforce string - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - string
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Https
Image stringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - Log
Mac stringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - Mac
Aging intInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- Mac
Event stringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - Mac
Retention intPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- Mac
Violation intTimer - Set timeout for Learning Limit Violations (0 = disabled).
- Quarantine
Mode string - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - Sn
Dns stringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - Update
User stringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Vlan
All stringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - Vlan
Identity string - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - Vlan
Optimization string - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- Allow
Multiple stringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - Bounce
Quarantined stringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - Custom
Commands []GlobalCustom Command Args - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - Default
Virtual stringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- Dhcp
Option82Circuit stringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - Dhcp
Option82Format string - DHCP option-82 format string. Valid values:
ascii
,legacy
. - Dhcp
Option82Remote stringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - Dhcp
Server stringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - Dhcp
Snoop intClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- Dhcp
Snoop stringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - Dhcp
Snoop intDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- Disable
Discoveries []GlobalDisable Discovery Args - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Fips
Enforce string - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - string
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Https
Image stringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - Log
Mac stringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - Mac
Aging intInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- Mac
Event stringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - Mac
Retention intPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- Mac
Violation intTimer - Set timeout for Learning Limit Violations (0 = disabled).
- Quarantine
Mode string - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - Sn
Dns stringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - Update
User stringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Vlan
All stringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - Vlan
Identity string - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - Vlan
Optimization string - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- allow
Multiple StringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - bounce
Quarantined StringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - custom
Commands List<GlobalCustom Command> - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - default
Virtual StringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- dhcp
Option82Circuit StringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - dhcp
Option82Format String - DHCP option-82 format string. Valid values:
ascii
,legacy
. - dhcp
Option82Remote StringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - dhcp
Server StringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - dhcp
Snoop IntegerClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- dhcp
Snoop StringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - dhcp
Snoop IntegerDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- disable
Discoveries List<GlobalDisable Discovery> - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fips
Enforce String - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - String
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- https
Image StringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - log
Mac StringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - mac
Aging IntegerInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- mac
Event StringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - mac
Retention IntegerPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- mac
Violation IntegerTimer - Set timeout for Learning Limit Violations (0 = disabled).
- quarantine
Mode String - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - sn
Dns StringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - update
User StringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- vlan
All StringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - vlan
Identity String - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - vlan
Optimization String - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- allow
Multiple stringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - bounce
Quarantined stringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - custom
Commands GlobalCustom Command[] - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - default
Virtual stringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- dhcp
Option82Circuit stringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - dhcp
Option82Format string - DHCP option-82 format string. Valid values:
ascii
,legacy
. - dhcp
Option82Remote stringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - dhcp
Server stringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - dhcp
Snoop numberClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- dhcp
Snoop stringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - dhcp
Snoop numberDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- disable
Discoveries GlobalDisable Discovery[] - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fips
Enforce string - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - string
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- https
Image stringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - log
Mac stringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - mac
Aging numberInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- mac
Event stringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - mac
Retention numberPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- mac
Violation numberTimer - Set timeout for Learning Limit Violations (0 = disabled).
- quarantine
Mode string - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - sn
Dns stringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - update
User stringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- vlan
All stringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - vlan
Identity string - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - vlan
Optimization string - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- allow_
multiple_ strinterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - bounce_
quarantined_ strlink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - custom_
commands Sequence[GlobalCustom Command Args] - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - default_
virtual_ strswitch_ vlan - Default VLAN for ports when added to the virtual-switch.
- dhcp_
option82_ strcircuit_ id - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - dhcp_
option82_ strformat - DHCP option-82 format string. Valid values:
ascii
,legacy
. - dhcp_
option82_ strremote_ id - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - dhcp_
server_ straccess_ list - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - dhcp_
snoop_ intclient_ db_ exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- dhcp_
snoop_ strclient_ req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - dhcp_
snoop_ intdb_ per_ port_ learn_ limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- disable_
discoveries Sequence[GlobalDisable Discovery Args] - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fips_
enforce str - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - str
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- https_
image_ strpush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - log_
mac_ strlimit_ violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - mac_
aging_ intinterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- mac_
event_ strlogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - mac_
retention_ intperiod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- mac_
violation_ inttimer - Set timeout for Learning Limit Violations (0 = disabled).
- quarantine_
mode str - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - sn_
dns_ strresolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - update_
user_ strdevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- vlan_
all_ strmode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - vlan_
identity str - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - vlan_
optimization str - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- allow
Multiple StringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - bounce
Quarantined StringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - custom
Commands List<Property Map> - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - default
Virtual StringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- dhcp
Option82Circuit StringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - dhcp
Option82Format String - DHCP option-82 format string. Valid values:
ascii
,legacy
. - dhcp
Option82Remote StringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - dhcp
Server StringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - dhcp
Snoop NumberClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- dhcp
Snoop StringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - dhcp
Snoop NumberDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- disable
Discoveries List<Property Map> - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fips
Enforce String - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - String
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- https
Image StringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - log
Mac StringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - mac
Aging NumberInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- mac
Event StringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - mac
Retention NumberPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- mac
Violation NumberTimer - Set timeout for Learning Limit Violations (0 = disabled).
- quarantine
Mode String - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - sn
Dns StringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - update
User StringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- vlan
All StringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - vlan
Identity String - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - vlan
Optimization String - FortiLink VLAN optimization. Valid values:
enable
,disable
.
Outputs
All input properties are implicitly available as output properties. Additionally, the Global resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Global Resource
Get an existing Global resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: GlobalState, opts?: CustomResourceOptions): Global
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
allow_multiple_interfaces: Optional[str] = None,
bounce_quarantined_link: Optional[str] = None,
custom_commands: Optional[Sequence[GlobalCustomCommandArgs]] = None,
default_virtual_switch_vlan: Optional[str] = None,
dhcp_option82_circuit_id: Optional[str] = None,
dhcp_option82_format: Optional[str] = None,
dhcp_option82_remote_id: Optional[str] = None,
dhcp_server_access_list: Optional[str] = None,
dhcp_snoop_client_db_exp: Optional[int] = None,
dhcp_snoop_client_req: Optional[str] = None,
dhcp_snoop_db_per_port_learn_limit: Optional[int] = None,
disable_discoveries: Optional[Sequence[GlobalDisableDiscoveryArgs]] = None,
dynamic_sort_subtable: Optional[str] = None,
fips_enforce: Optional[str] = None,
firmware_provision_on_authorization: Optional[str] = None,
get_all_tables: Optional[str] = None,
https_image_push: Optional[str] = None,
log_mac_limit_violations: Optional[str] = None,
mac_aging_interval: Optional[int] = None,
mac_event_logging: Optional[str] = None,
mac_retention_period: Optional[int] = None,
mac_violation_timer: Optional[int] = None,
quarantine_mode: Optional[str] = None,
sn_dns_resolution: Optional[str] = None,
update_user_device: Optional[str] = None,
vdomparam: Optional[str] = None,
vlan_all_mode: Optional[str] = None,
vlan_identity: Optional[str] = None,
vlan_optimization: Optional[str] = None) -> Global
func GetGlobal(ctx *Context, name string, id IDInput, state *GlobalState, opts ...ResourceOption) (*Global, error)
public static Global Get(string name, Input<string> id, GlobalState? state, CustomResourceOptions? opts = null)
public static Global get(String name, Output<String> id, GlobalState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Allow
Multiple stringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - Bounce
Quarantined stringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - Custom
Commands List<Pulumiverse.Fortios. Switchcontroller. Inputs. Global Custom Command> - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - Default
Virtual stringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- Dhcp
Option82Circuit stringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - Dhcp
Option82Format string - DHCP option-82 format string. Valid values:
ascii
,legacy
. - Dhcp
Option82Remote stringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - Dhcp
Server stringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - Dhcp
Snoop intClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- Dhcp
Snoop stringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - Dhcp
Snoop intDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- Disable
Discoveries List<Pulumiverse.Fortios. Switchcontroller. Inputs. Global Disable Discovery> - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Fips
Enforce string - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - string
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Https
Image stringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - Log
Mac stringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - Mac
Aging intInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- Mac
Event stringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - Mac
Retention intPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- Mac
Violation intTimer - Set timeout for Learning Limit Violations (0 = disabled).
- Quarantine
Mode string - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - Sn
Dns stringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - Update
User stringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Vlan
All stringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - Vlan
Identity string - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - Vlan
Optimization string - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- Allow
Multiple stringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - Bounce
Quarantined stringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - Custom
Commands []GlobalCustom Command Args - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - Default
Virtual stringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- Dhcp
Option82Circuit stringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - Dhcp
Option82Format string - DHCP option-82 format string. Valid values:
ascii
,legacy
. - Dhcp
Option82Remote stringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - Dhcp
Server stringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - Dhcp
Snoop intClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- Dhcp
Snoop stringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - Dhcp
Snoop intDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- Disable
Discoveries []GlobalDisable Discovery Args - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Fips
Enforce string - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - string
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Https
Image stringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - Log
Mac stringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - Mac
Aging intInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- Mac
Event stringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - Mac
Retention intPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- Mac
Violation intTimer - Set timeout for Learning Limit Violations (0 = disabled).
- Quarantine
Mode string - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - Sn
Dns stringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - Update
User stringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Vlan
All stringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - Vlan
Identity string - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - Vlan
Optimization string - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- allow
Multiple StringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - bounce
Quarantined StringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - custom
Commands List<GlobalCustom Command> - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - default
Virtual StringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- dhcp
Option82Circuit StringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - dhcp
Option82Format String - DHCP option-82 format string. Valid values:
ascii
,legacy
. - dhcp
Option82Remote StringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - dhcp
Server StringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - dhcp
Snoop IntegerClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- dhcp
Snoop StringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - dhcp
Snoop IntegerDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- disable
Discoveries List<GlobalDisable Discovery> - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fips
Enforce String - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - String
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- https
Image StringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - log
Mac StringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - mac
Aging IntegerInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- mac
Event StringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - mac
Retention IntegerPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- mac
Violation IntegerTimer - Set timeout for Learning Limit Violations (0 = disabled).
- quarantine
Mode String - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - sn
Dns StringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - update
User StringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- vlan
All StringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - vlan
Identity String - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - vlan
Optimization String - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- allow
Multiple stringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - bounce
Quarantined stringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - custom
Commands GlobalCustom Command[] - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - default
Virtual stringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- dhcp
Option82Circuit stringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - dhcp
Option82Format string - DHCP option-82 format string. Valid values:
ascii
,legacy
. - dhcp
Option82Remote stringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - dhcp
Server stringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - dhcp
Snoop numberClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- dhcp
Snoop stringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - dhcp
Snoop numberDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- disable
Discoveries GlobalDisable Discovery[] - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fips
Enforce string - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - string
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- https
Image stringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - log
Mac stringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - mac
Aging numberInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- mac
Event stringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - mac
Retention numberPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- mac
Violation numberTimer - Set timeout for Learning Limit Violations (0 = disabled).
- quarantine
Mode string - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - sn
Dns stringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - update
User stringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- vlan
All stringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - vlan
Identity string - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - vlan
Optimization string - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- allow_
multiple_ strinterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - bounce_
quarantined_ strlink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - custom_
commands Sequence[GlobalCustom Command Args] - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - default_
virtual_ strswitch_ vlan - Default VLAN for ports when added to the virtual-switch.
- dhcp_
option82_ strcircuit_ id - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - dhcp_
option82_ strformat - DHCP option-82 format string. Valid values:
ascii
,legacy
. - dhcp_
option82_ strremote_ id - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - dhcp_
server_ straccess_ list - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - dhcp_
snoop_ intclient_ db_ exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- dhcp_
snoop_ strclient_ req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - dhcp_
snoop_ intdb_ per_ port_ learn_ limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- disable_
discoveries Sequence[GlobalDisable Discovery Args] - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fips_
enforce str - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - str
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- https_
image_ strpush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - log_
mac_ strlimit_ violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - mac_
aging_ intinterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- mac_
event_ strlogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - mac_
retention_ intperiod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- mac_
violation_ inttimer - Set timeout for Learning Limit Violations (0 = disabled).
- quarantine_
mode str - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - sn_
dns_ strresolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - update_
user_ strdevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- vlan_
all_ strmode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - vlan_
identity str - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - vlan_
optimization str - FortiLink VLAN optimization. Valid values:
enable
,disable
.
- allow
Multiple StringInterfaces - Enable/disable multiple FortiLink interfaces for redundant connections between a managed FortiSwitch and FortiGate. Valid values:
enable
,disable
. - bounce
Quarantined StringLink - Enable/disable bouncing (administratively bring the link down, up) of a switch port where a quarantined device was seen last. Helps to re-initiate the DHCP process for a device. Valid values:
disable
,enable
. - custom
Commands List<Property Map> - List of custom commands to be pushed to all FortiSwitches in the VDOM. The structure of
custom_command
block is documented below. - default
Virtual StringSwitch Vlan - Default VLAN for ports when added to the virtual-switch.
- dhcp
Option82Circuit StringId - List the parameters to be included to inform about client identification. Valid values:
intfname
,vlan
,hostname
,mode
,description
. - dhcp
Option82Format String - DHCP option-82 format string. Valid values:
ascii
,legacy
. - dhcp
Option82Remote StringId - List the parameters to be included to inform about client identification. Valid values:
mac
,hostname
,ip
. - dhcp
Server StringAccess List - Enable/disable DHCP snooping server access list. Valid values:
enable
,disable
. - dhcp
Snoop NumberClient Db Exp - Expiry time for DHCP snooping server database entries (300 - 259200 sec, default = 86400 sec).
- dhcp
Snoop StringClient Req - Client DHCP packet broadcast mode. Valid values:
drop-untrusted
,forward-untrusted
. - dhcp
Snoop NumberDb Per Port Learn Limit - Per Interface dhcp-server entries learn limit (0 - 1024, default = 64).
- disable
Discoveries List<Property Map> - Prevent this FortiSwitch from discovering. The structure of
disable_discovery
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fips
Enforce String - Enable/disable enforcement of FIPS on managed FortiSwitch devices. Valid values:
disable
,enable
. - String
- Enable/disable automatic provisioning of latest firmware on authorization. Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- https
Image StringPush - Enable/disable image push to FortiSwitch using HTTPS. Valid values:
enable
,disable
. - log
Mac StringLimit Violations - Enable/disable logs for Learning Limit Violations. Valid values:
enable
,disable
. - mac
Aging NumberInterval - Time after which an inactive MAC is aged out (10 - 1000000 sec, default = 300, 0 = disable).
- mac
Event StringLogging - Enable/disable MAC address event logging. Valid values:
enable
,disable
. - mac
Retention NumberPeriod - Time in hours after which an inactive MAC is removed from client DB (0 = aged out based on mac-aging-interval).
- mac
Violation NumberTimer - Set timeout for Learning Limit Violations (0 = disabled).
- quarantine
Mode String - Quarantine mode. Valid values:
by-vlan
,by-redirect
. - sn
Dns StringResolution - Enable/disable DNS resolution of the FortiSwitch unit's IP address by use of its serial number. Valid values:
enable
,disable
. - update
User StringDevice - Control which sources update the device user list. Valid values:
mac-cache
,lldp
,dhcp-snooping
,l2-db
,l3-db
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- vlan
All StringMode - VLAN configuration mode, user-defined-vlans or all-possible-vlans. Valid values:
all
,defined
. - vlan
Identity String - Identity of the VLAN. Commonly used for RADIUS Tunnel-Private-Group-Id. Valid values:
description
,name
. - vlan
Optimization String - FortiLink VLAN optimization. Valid values:
enable
,disable
.
Supporting Types
GlobalCustomCommand, GlobalCustomCommandArgs
- Command
Entry string - List of FortiSwitch commands.
- Command
Name string - Name of custom command to push to all FortiSwitches in VDOM.
- Command
Entry string - List of FortiSwitch commands.
- Command
Name string - Name of custom command to push to all FortiSwitches in VDOM.
- command
Entry String - List of FortiSwitch commands.
- command
Name String - Name of custom command to push to all FortiSwitches in VDOM.
- command
Entry string - List of FortiSwitch commands.
- command
Name string - Name of custom command to push to all FortiSwitches in VDOM.
- command_
entry str - List of FortiSwitch commands.
- command_
name str - Name of custom command to push to all FortiSwitches in VDOM.
- command
Entry String - List of FortiSwitch commands.
- command
Name String - Name of custom command to push to all FortiSwitches in VDOM.
GlobalDisableDiscovery, GlobalDisableDiscoveryArgs
- Name string
- Managed device ID.
- Name string
- Managed device ID.
- name String
- Managed device ID.
- name string
- Managed device ID.
- name str
- Managed device ID.
- name String
- Managed device ID.
Import
SwitchController Global can be imported using any of these accepted formats:
$ pulumi import fortios:switchcontroller/global:Global labelname SwitchControllerGlobal
If you do not want to import arguments of block:
$ export “FORTIOS_IMPORT_TABLE”=“false”
$ pulumi import fortios:switchcontroller/global:Global labelname SwitchControllerGlobal
$ unset “FORTIOS_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
fortios
Terraform Provider.