fortios.system.Clustersync
Explore with Pulumi AI
Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. Applies to FortiOS Version <= 7.2.0
.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";
const trname = new fortios.system.Clustersync("trname", {
hbInterval: 3,
hbLostThreshold: 3,
peerip: "1.1.1.1",
peervd: "root",
slaveAddIkeRoutes: "enable",
syncId: 1,
});
import pulumi
import pulumiverse_fortios as fortios
trname = fortios.system.Clustersync("trname",
hb_interval=3,
hb_lost_threshold=3,
peerip="1.1.1.1",
peervd="root",
slave_add_ike_routes="enable",
sync_id=1)
package main
import (
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/system"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := system.NewClustersync(ctx, "trname", &system.ClustersyncArgs{
HbInterval: pulumi.Int(3),
HbLostThreshold: pulumi.Int(3),
Peerip: pulumi.String("1.1.1.1"),
Peervd: pulumi.String("root"),
SlaveAddIkeRoutes: pulumi.String("enable"),
SyncId: pulumi.Int(1),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;
return await Deployment.RunAsync(() =>
{
var trname = new Fortios.System.Clustersync("trname", new()
{
HbInterval = 3,
HbLostThreshold = 3,
Peerip = "1.1.1.1",
Peervd = "root",
SlaveAddIkeRoutes = "enable",
SyncId = 1,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.system.Clustersync;
import com.pulumi.fortios.system.ClustersyncArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var trname = new Clustersync("trname", ClustersyncArgs.builder()
.hbInterval(3)
.hbLostThreshold(3)
.peerip("1.1.1.1")
.peervd("root")
.slaveAddIkeRoutes("enable")
.syncId(1)
.build());
}
}
resources:
trname:
type: fortios:system:Clustersync
properties:
hbInterval: 3
hbLostThreshold: 3
peerip: 1.1.1.1
peervd: root
slaveAddIkeRoutes: enable
syncId: 1
Create Clustersync Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Clustersync(name: string, args?: ClustersyncArgs, opts?: CustomResourceOptions);
@overload
def Clustersync(resource_name: str,
args: Optional[ClustersyncArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def Clustersync(resource_name: str,
opts: Optional[ResourceOptions] = None,
down_intfs_before_sess_syncs: Optional[Sequence[ClustersyncDownIntfsBeforeSessSyncArgs]] = None,
dynamic_sort_subtable: Optional[str] = None,
get_all_tables: Optional[str] = None,
hb_interval: Optional[int] = None,
hb_lost_threshold: Optional[int] = None,
ike_heartbeat_interval: Optional[int] = None,
ike_monitor: Optional[str] = None,
ike_monitor_interval: Optional[int] = None,
ipsec_tunnel_sync: Optional[str] = None,
peerip: Optional[str] = None,
peervd: Optional[str] = None,
secondary_add_ipsec_routes: Optional[str] = None,
session_sync_filter: Optional[ClustersyncSessionSyncFilterArgs] = None,
slave_add_ike_routes: Optional[str] = None,
sync_id: Optional[int] = None,
syncvds: Optional[Sequence[ClustersyncSyncvdArgs]] = None,
vdomparam: Optional[str] = None)
func NewClustersync(ctx *Context, name string, args *ClustersyncArgs, opts ...ResourceOption) (*Clustersync, error)
public Clustersync(string name, ClustersyncArgs? args = null, CustomResourceOptions? opts = null)
public Clustersync(String name, ClustersyncArgs args)
public Clustersync(String name, ClustersyncArgs args, CustomResourceOptions options)
type: fortios:system:Clustersync
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ClustersyncArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ClustersyncArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ClustersyncArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ClustersyncArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ClustersyncArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var clustersyncResource = new Fortios.System.Clustersync("clustersyncResource", new()
{
DownIntfsBeforeSessSyncs = new[]
{
new Fortios.System.Inputs.ClustersyncDownIntfsBeforeSessSyncArgs
{
Name = "string",
},
},
DynamicSortSubtable = "string",
GetAllTables = "string",
HbInterval = 0,
HbLostThreshold = 0,
IkeHeartbeatInterval = 0,
IkeMonitor = "string",
IkeMonitorInterval = 0,
IpsecTunnelSync = "string",
Peerip = "string",
Peervd = "string",
SecondaryAddIpsecRoutes = "string",
SessionSyncFilter = new Fortios.System.Inputs.ClustersyncSessionSyncFilterArgs
{
CustomServices = new[]
{
new Fortios.System.Inputs.ClustersyncSessionSyncFilterCustomServiceArgs
{
DstPortRange = "string",
Id = 0,
SrcPortRange = "string",
},
},
Dstaddr = "string",
Dstaddr6 = "string",
Dstintf = "string",
Srcaddr = "string",
Srcaddr6 = "string",
Srcintf = "string",
},
SlaveAddIkeRoutes = "string",
SyncId = 0,
Syncvds = new[]
{
new Fortios.System.Inputs.ClustersyncSyncvdArgs
{
Name = "string",
},
},
Vdomparam = "string",
});
example, err := system.NewClustersync(ctx, "clustersyncResource", &system.ClustersyncArgs{
DownIntfsBeforeSessSyncs: system.ClustersyncDownIntfsBeforeSessSyncArray{
&system.ClustersyncDownIntfsBeforeSessSyncArgs{
Name: pulumi.String("string"),
},
},
DynamicSortSubtable: pulumi.String("string"),
GetAllTables: pulumi.String("string"),
HbInterval: pulumi.Int(0),
HbLostThreshold: pulumi.Int(0),
IkeHeartbeatInterval: pulumi.Int(0),
IkeMonitor: pulumi.String("string"),
IkeMonitorInterval: pulumi.Int(0),
IpsecTunnelSync: pulumi.String("string"),
Peerip: pulumi.String("string"),
Peervd: pulumi.String("string"),
SecondaryAddIpsecRoutes: pulumi.String("string"),
SessionSyncFilter: &system.ClustersyncSessionSyncFilterArgs{
CustomServices: system.ClustersyncSessionSyncFilterCustomServiceArray{
&system.ClustersyncSessionSyncFilterCustomServiceArgs{
DstPortRange: pulumi.String("string"),
Id: pulumi.Int(0),
SrcPortRange: pulumi.String("string"),
},
},
Dstaddr: pulumi.String("string"),
Dstaddr6: pulumi.String("string"),
Dstintf: pulumi.String("string"),
Srcaddr: pulumi.String("string"),
Srcaddr6: pulumi.String("string"),
Srcintf: pulumi.String("string"),
},
SlaveAddIkeRoutes: pulumi.String("string"),
SyncId: pulumi.Int(0),
Syncvds: system.ClustersyncSyncvdArray{
&system.ClustersyncSyncvdArgs{
Name: pulumi.String("string"),
},
},
Vdomparam: pulumi.String("string"),
})
var clustersyncResource = new Clustersync("clustersyncResource", ClustersyncArgs.builder()
.downIntfsBeforeSessSyncs(ClustersyncDownIntfsBeforeSessSyncArgs.builder()
.name("string")
.build())
.dynamicSortSubtable("string")
.getAllTables("string")
.hbInterval(0)
.hbLostThreshold(0)
.ikeHeartbeatInterval(0)
.ikeMonitor("string")
.ikeMonitorInterval(0)
.ipsecTunnelSync("string")
.peerip("string")
.peervd("string")
.secondaryAddIpsecRoutes("string")
.sessionSyncFilter(ClustersyncSessionSyncFilterArgs.builder()
.customServices(ClustersyncSessionSyncFilterCustomServiceArgs.builder()
.dstPortRange("string")
.id(0)
.srcPortRange("string")
.build())
.dstaddr("string")
.dstaddr6("string")
.dstintf("string")
.srcaddr("string")
.srcaddr6("string")
.srcintf("string")
.build())
.slaveAddIkeRoutes("string")
.syncId(0)
.syncvds(ClustersyncSyncvdArgs.builder()
.name("string")
.build())
.vdomparam("string")
.build());
clustersync_resource = fortios.system.Clustersync("clustersyncResource",
down_intfs_before_sess_syncs=[{
"name": "string",
}],
dynamic_sort_subtable="string",
get_all_tables="string",
hb_interval=0,
hb_lost_threshold=0,
ike_heartbeat_interval=0,
ike_monitor="string",
ike_monitor_interval=0,
ipsec_tunnel_sync="string",
peerip="string",
peervd="string",
secondary_add_ipsec_routes="string",
session_sync_filter={
"custom_services": [{
"dst_port_range": "string",
"id": 0,
"src_port_range": "string",
}],
"dstaddr": "string",
"dstaddr6": "string",
"dstintf": "string",
"srcaddr": "string",
"srcaddr6": "string",
"srcintf": "string",
},
slave_add_ike_routes="string",
sync_id=0,
syncvds=[{
"name": "string",
}],
vdomparam="string")
const clustersyncResource = new fortios.system.Clustersync("clustersyncResource", {
downIntfsBeforeSessSyncs: [{
name: "string",
}],
dynamicSortSubtable: "string",
getAllTables: "string",
hbInterval: 0,
hbLostThreshold: 0,
ikeHeartbeatInterval: 0,
ikeMonitor: "string",
ikeMonitorInterval: 0,
ipsecTunnelSync: "string",
peerip: "string",
peervd: "string",
secondaryAddIpsecRoutes: "string",
sessionSyncFilter: {
customServices: [{
dstPortRange: "string",
id: 0,
srcPortRange: "string",
}],
dstaddr: "string",
dstaddr6: "string",
dstintf: "string",
srcaddr: "string",
srcaddr6: "string",
srcintf: "string",
},
slaveAddIkeRoutes: "string",
syncId: 0,
syncvds: [{
name: "string",
}],
vdomparam: "string",
});
type: fortios:system:Clustersync
properties:
downIntfsBeforeSessSyncs:
- name: string
dynamicSortSubtable: string
getAllTables: string
hbInterval: 0
hbLostThreshold: 0
ikeHeartbeatInterval: 0
ikeMonitor: string
ikeMonitorInterval: 0
ipsecTunnelSync: string
peerip: string
peervd: string
secondaryAddIpsecRoutes: string
sessionSyncFilter:
customServices:
- dstPortRange: string
id: 0
srcPortRange: string
dstaddr: string
dstaddr6: string
dstintf: string
srcaddr: string
srcaddr6: string
srcintf: string
slaveAddIkeRoutes: string
syncId: 0
syncvds:
- name: string
vdomparam: string
Clustersync Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Clustersync resource accepts the following input properties:
- Down
Intfs List<Pulumiverse.Before Sess Syncs Fortios. System. Inputs. Clustersync Down Intfs Before Sess Sync> - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Hb
Interval int - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- Hb
Lost intThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- Ike
Heartbeat intInterval - IKE heartbeat interval (1 - 60 secs).
- Ike
Monitor string - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - Ike
Monitor intInterval - IKE HA monitor interval (10 - 300 secs).
- Ipsec
Tunnel stringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - Peerip string
- IP address of the interface on the peer unit that is used for the session synchronization link.
- Peervd string
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- Secondary
Add stringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Session
Sync Pulumiverse.Filter Fortios. System. Inputs. Clustersync Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - Slave
Add stringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Sync
Id int - Sync ID.
- Syncvds
List<Pulumiverse.
Fortios. System. Inputs. Clustersync Syncvd> - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Down
Intfs []ClustersyncBefore Sess Syncs Down Intfs Before Sess Sync Args - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Hb
Interval int - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- Hb
Lost intThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- Ike
Heartbeat intInterval - IKE heartbeat interval (1 - 60 secs).
- Ike
Monitor string - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - Ike
Monitor intInterval - IKE HA monitor interval (10 - 300 secs).
- Ipsec
Tunnel stringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - Peerip string
- IP address of the interface on the peer unit that is used for the session synchronization link.
- Peervd string
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- Secondary
Add stringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Session
Sync ClustersyncFilter Session Sync Filter Args - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - Slave
Add stringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Sync
Id int - Sync ID.
- Syncvds
[]Clustersync
Syncvd Args - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- down
Intfs List<ClustersyncBefore Sess Syncs Down Intfs Before Sess Sync> - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- hb
Interval Integer - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- hb
Lost IntegerThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- ike
Heartbeat IntegerInterval - IKE heartbeat interval (1 - 60 secs).
- ike
Monitor String - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - ike
Monitor IntegerInterval - IKE HA monitor interval (10 - 300 secs).
- ipsec
Tunnel StringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip String
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd String
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary
Add StringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session
Sync ClustersyncFilter Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - slave
Add StringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - sync
Id Integer - Sync ID.
- syncvds
List<Clustersync
Syncvd> - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- down
Intfs ClustersyncBefore Sess Syncs Down Intfs Before Sess Sync[] - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- hb
Interval number - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- hb
Lost numberThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- ike
Heartbeat numberInterval - IKE heartbeat interval (1 - 60 secs).
- ike
Monitor string - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - ike
Monitor numberInterval - IKE HA monitor interval (10 - 300 secs).
- ipsec
Tunnel stringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip string
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd string
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary
Add stringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session
Sync ClustersyncFilter Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - slave
Add stringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - sync
Id number - Sync ID.
- syncvds
Clustersync
Syncvd[] - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- down_
intfs_ Sequence[Clustersyncbefore_ sess_ syncs Down Intfs Before Sess Sync Args] - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- hb_
interval int - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- hb_
lost_ intthreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- ike_
heartbeat_ intinterval - IKE heartbeat interval (1 - 60 secs).
- ike_
monitor str - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - ike_
monitor_ intinterval - IKE HA monitor interval (10 - 300 secs).
- ipsec_
tunnel_ strsync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip str
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd str
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary_
add_ stripsec_ routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session_
sync_ Clustersyncfilter Session Sync Filter Args - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - slave_
add_ strike_ routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - sync_
id int - Sync ID.
- syncvds
Sequence[Clustersync
Syncvd Args] - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- down
Intfs List<Property Map>Before Sess Syncs - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- hb
Interval Number - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- hb
Lost NumberThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- ike
Heartbeat NumberInterval - IKE heartbeat interval (1 - 60 secs).
- ike
Monitor String - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - ike
Monitor NumberInterval - IKE HA monitor interval (10 - 300 secs).
- ipsec
Tunnel StringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip String
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd String
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary
Add StringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session
Sync Property MapFilter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - slave
Add StringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - sync
Id Number - Sync ID.
- syncvds List<Property Map>
- Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
Outputs
All input properties are implicitly available as output properties. Additionally, the Clustersync resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Clustersync Resource
Get an existing Clustersync resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ClustersyncState, opts?: CustomResourceOptions): Clustersync
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
down_intfs_before_sess_syncs: Optional[Sequence[ClustersyncDownIntfsBeforeSessSyncArgs]] = None,
dynamic_sort_subtable: Optional[str] = None,
get_all_tables: Optional[str] = None,
hb_interval: Optional[int] = None,
hb_lost_threshold: Optional[int] = None,
ike_heartbeat_interval: Optional[int] = None,
ike_monitor: Optional[str] = None,
ike_monitor_interval: Optional[int] = None,
ipsec_tunnel_sync: Optional[str] = None,
peerip: Optional[str] = None,
peervd: Optional[str] = None,
secondary_add_ipsec_routes: Optional[str] = None,
session_sync_filter: Optional[ClustersyncSessionSyncFilterArgs] = None,
slave_add_ike_routes: Optional[str] = None,
sync_id: Optional[int] = None,
syncvds: Optional[Sequence[ClustersyncSyncvdArgs]] = None,
vdomparam: Optional[str] = None) -> Clustersync
func GetClustersync(ctx *Context, name string, id IDInput, state *ClustersyncState, opts ...ResourceOption) (*Clustersync, error)
public static Clustersync Get(string name, Input<string> id, ClustersyncState? state, CustomResourceOptions? opts = null)
public static Clustersync get(String name, Output<String> id, ClustersyncState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Down
Intfs List<Pulumiverse.Before Sess Syncs Fortios. System. Inputs. Clustersync Down Intfs Before Sess Sync> - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Hb
Interval int - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- Hb
Lost intThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- Ike
Heartbeat intInterval - IKE heartbeat interval (1 - 60 secs).
- Ike
Monitor string - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - Ike
Monitor intInterval - IKE HA monitor interval (10 - 300 secs).
- Ipsec
Tunnel stringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - Peerip string
- IP address of the interface on the peer unit that is used for the session synchronization link.
- Peervd string
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- Secondary
Add stringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Session
Sync Pulumiverse.Filter Fortios. System. Inputs. Clustersync Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - Slave
Add stringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Sync
Id int - Sync ID.
- Syncvds
List<Pulumiverse.
Fortios. System. Inputs. Clustersync Syncvd> - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Down
Intfs []ClustersyncBefore Sess Syncs Down Intfs Before Sess Sync Args - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Hb
Interval int - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- Hb
Lost intThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- Ike
Heartbeat intInterval - IKE heartbeat interval (1 - 60 secs).
- Ike
Monitor string - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - Ike
Monitor intInterval - IKE HA monitor interval (10 - 300 secs).
- Ipsec
Tunnel stringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - Peerip string
- IP address of the interface on the peer unit that is used for the session synchronization link.
- Peervd string
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- Secondary
Add stringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Session
Sync ClustersyncFilter Session Sync Filter Args - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - Slave
Add stringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Sync
Id int - Sync ID.
- Syncvds
[]Clustersync
Syncvd Args - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- down
Intfs List<ClustersyncBefore Sess Syncs Down Intfs Before Sess Sync> - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- hb
Interval Integer - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- hb
Lost IntegerThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- ike
Heartbeat IntegerInterval - IKE heartbeat interval (1 - 60 secs).
- ike
Monitor String - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - ike
Monitor IntegerInterval - IKE HA monitor interval (10 - 300 secs).
- ipsec
Tunnel StringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip String
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd String
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary
Add StringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session
Sync ClustersyncFilter Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - slave
Add StringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - sync
Id Integer - Sync ID.
- syncvds
List<Clustersync
Syncvd> - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- down
Intfs ClustersyncBefore Sess Syncs Down Intfs Before Sess Sync[] - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- hb
Interval number - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- hb
Lost numberThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- ike
Heartbeat numberInterval - IKE heartbeat interval (1 - 60 secs).
- ike
Monitor string - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - ike
Monitor numberInterval - IKE HA monitor interval (10 - 300 secs).
- ipsec
Tunnel stringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip string
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd string
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary
Add stringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session
Sync ClustersyncFilter Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - slave
Add stringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - sync
Id number - Sync ID.
- syncvds
Clustersync
Syncvd[] - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- down_
intfs_ Sequence[Clustersyncbefore_ sess_ syncs Down Intfs Before Sess Sync Args] - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- hb_
interval int - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- hb_
lost_ intthreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- ike_
heartbeat_ intinterval - IKE heartbeat interval (1 - 60 secs).
- ike_
monitor str - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - ike_
monitor_ intinterval - IKE HA monitor interval (10 - 300 secs).
- ipsec_
tunnel_ strsync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip str
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd str
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary_
add_ stripsec_ routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session_
sync_ Clustersyncfilter Session Sync Filter Args - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - slave_
add_ strike_ routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - sync_
id int - Sync ID.
- syncvds
Sequence[Clustersync
Syncvd Args] - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- down
Intfs List<Property Map>Before Sess Syncs - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- hb
Interval Number - Heartbeat interval. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10 sec. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 20 (100*ms).
- hb
Lost NumberThreshold - Lost heartbeat threshold. Increase to reduce false positives. On FortiOS versions 6.2.0-6.4.2, 7.0.0-7.0.5, 7.2.0: 1 - 10. On FortiOS versions 6.4.10-6.4.15, 7.0.6-7.0.15: 1 - 60.
- ike
Heartbeat NumberInterval - IKE heartbeat interval (1 - 60 secs).
- ike
Monitor String - Enable/disable IKE HA monitor. Valid values:
enable
,disable
. - ike
Monitor NumberInterval - IKE HA monitor interval (10 - 300 secs).
- ipsec
Tunnel StringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip String
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd String
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary
Add StringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session
Sync Property MapFilter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - slave
Add StringIke Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - sync
Id Number - Sync ID.
- syncvds List<Property Map>
- Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
Supporting Types
ClustersyncDownIntfsBeforeSessSync, ClustersyncDownIntfsBeforeSessSyncArgs
- Name string
- Interface name.
- Name string
- Interface name.
- name String
- Interface name.
- name string
- Interface name.
- name str
- Interface name.
- name String
- Interface name.
ClustersyncSessionSyncFilter, ClustersyncSessionSyncFilterArgs
- Custom
Services List<Pulumiverse.Fortios. System. Inputs. Clustersync Session Sync Filter Custom Service> - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custome services. The structure of
custom_service
block is documented below. - Dstaddr string
- Only sessions to this IPv4 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- Dstaddr6 string
- Only sessions to this IPv6 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- Dstintf string
- Only sessions to this interface are synchronized. You can only enter one interface name. To synchronize sessions to multiple destination interfaces, add multiple filters.
- Srcaddr string
- Only sessions from this IPv4 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- Srcaddr6 string
- Only sessions from this IPv6 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- Srcintf string
- Only sessions from this interface are synchronized. You can only enter one interface name. To synchronize sessions for multiple source interfaces, add multiple filters.
- Custom
Services []ClustersyncSession Sync Filter Custom Service - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custome services. The structure of
custom_service
block is documented below. - Dstaddr string
- Only sessions to this IPv4 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- Dstaddr6 string
- Only sessions to this IPv6 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- Dstintf string
- Only sessions to this interface are synchronized. You can only enter one interface name. To synchronize sessions to multiple destination interfaces, add multiple filters.
- Srcaddr string
- Only sessions from this IPv4 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- Srcaddr6 string
- Only sessions from this IPv6 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- Srcintf string
- Only sessions from this interface are synchronized. You can only enter one interface name. To synchronize sessions for multiple source interfaces, add multiple filters.
- custom
Services List<ClustersyncSession Sync Filter Custom Service> - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custome services. The structure of
custom_service
block is documented below. - dstaddr String
- Only sessions to this IPv4 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- dstaddr6 String
- Only sessions to this IPv6 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- dstintf String
- Only sessions to this interface are synchronized. You can only enter one interface name. To synchronize sessions to multiple destination interfaces, add multiple filters.
- srcaddr String
- Only sessions from this IPv4 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- srcaddr6 String
- Only sessions from this IPv6 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- srcintf String
- Only sessions from this interface are synchronized. You can only enter one interface name. To synchronize sessions for multiple source interfaces, add multiple filters.
- custom
Services ClustersyncSession Sync Filter Custom Service[] - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custome services. The structure of
custom_service
block is documented below. - dstaddr string
- Only sessions to this IPv4 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- dstaddr6 string
- Only sessions to this IPv6 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- dstintf string
- Only sessions to this interface are synchronized. You can only enter one interface name. To synchronize sessions to multiple destination interfaces, add multiple filters.
- srcaddr string
- Only sessions from this IPv4 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- srcaddr6 string
- Only sessions from this IPv6 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- srcintf string
- Only sessions from this interface are synchronized. You can only enter one interface name. To synchronize sessions for multiple source interfaces, add multiple filters.
- custom_
services Sequence[ClustersyncSession Sync Filter Custom Service] - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custome services. The structure of
custom_service
block is documented below. - dstaddr str
- Only sessions to this IPv4 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- dstaddr6 str
- Only sessions to this IPv6 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- dstintf str
- Only sessions to this interface are synchronized. You can only enter one interface name. To synchronize sessions to multiple destination interfaces, add multiple filters.
- srcaddr str
- Only sessions from this IPv4 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- srcaddr6 str
- Only sessions from this IPv6 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- srcintf str
- Only sessions from this interface are synchronized. You can only enter one interface name. To synchronize sessions for multiple source interfaces, add multiple filters.
- custom
Services List<Property Map> - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custome services. The structure of
custom_service
block is documented below. - dstaddr String
- Only sessions to this IPv4 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- dstaddr6 String
- Only sessions to this IPv6 address are synchronized. You can only enter one address. To synchronize sessions for multiple destination addresses, add multiple filters.
- dstintf String
- Only sessions to this interface are synchronized. You can only enter one interface name. To synchronize sessions to multiple destination interfaces, add multiple filters.
- srcaddr String
- Only sessions from this IPv4 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- srcaddr6 String
- Only sessions from this IPv6 address are synchronized. You can only enter one address. To synchronize sessions from multiple source addresses, add multiple filters.
- srcintf String
- Only sessions from this interface are synchronized. You can only enter one interface name. To synchronize sessions for multiple source interfaces, add multiple filters.
ClustersyncSessionSyncFilterCustomService, ClustersyncSessionSyncFilterCustomServiceArgs
- Dst
Port stringRange - Custom service destination port range.
- Id int
- Custom service ID.
- Src
Port stringRange - Custom service source port range.
- Dst
Port stringRange - Custom service destination port range.
- Id int
- Custom service ID.
- Src
Port stringRange - Custom service source port range.
- dst
Port StringRange - Custom service destination port range.
- id Integer
- Custom service ID.
- src
Port StringRange - Custom service source port range.
- dst
Port stringRange - Custom service destination port range.
- id number
- Custom service ID.
- src
Port stringRange - Custom service source port range.
- dst_
port_ strrange - Custom service destination port range.
- id int
- Custom service ID.
- src_
port_ strrange - Custom service source port range.
- dst
Port StringRange - Custom service destination port range.
- id Number
- Custom service ID.
- src
Port StringRange - Custom service source port range.
ClustersyncSyncvd, ClustersyncSyncvdArgs
- Name string
- VDOM name.
- Name string
- VDOM name.
- name String
- VDOM name.
- name string
- VDOM name.
- name str
- VDOM name.
- name String
- VDOM name.
Import
System ClusterSync can be imported using any of these accepted formats:
$ pulumi import fortios:system/clustersync:Clustersync labelname {{sync_id}}
If you do not want to import arguments of block:
$ export “FORTIOS_IMPORT_TABLE”=“false”
$ pulumi import fortios:system/clustersync:Clustersync labelname {{sync_id}}
$ unset “FORTIOS_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
fortios
Terraform Provider.