fortios.system.Sdwan
Explore with Pulumi AI
Configure redundant internet connections using SD-WAN (formerly virtual WAN link). Applies to FortiOS Version >= 6.4.1
.
Create Sdwan Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Sdwan(name: string, args?: SdwanArgs, opts?: CustomResourceOptions);
@overload
def Sdwan(resource_name: str,
args: Optional[SdwanArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def Sdwan(resource_name: str,
opts: Optional[ResourceOptions] = None,
app_perf_log_period: Optional[int] = None,
duplication_max_num: Optional[int] = None,
duplications: Optional[Sequence[SdwanDuplicationArgs]] = None,
dynamic_sort_subtable: Optional[str] = None,
fail_alert_interfaces: Optional[Sequence[SdwanFailAlertInterfaceArgs]] = None,
fail_detect: Optional[str] = None,
get_all_tables: Optional[str] = None,
health_checks: Optional[Sequence[SdwanHealthCheckArgs]] = None,
load_balance_mode: Optional[str] = None,
members: Optional[Sequence[SdwanMemberArgs]] = None,
neighbor_hold_boot_time: Optional[int] = None,
neighbor_hold_down: Optional[str] = None,
neighbor_hold_down_time: Optional[int] = None,
neighbors: Optional[Sequence[SdwanNeighborArgs]] = None,
services: Optional[Sequence[SdwanServiceArgs]] = None,
speedtest_bypass_routing: Optional[str] = None,
status: Optional[str] = None,
vdomparam: Optional[str] = None,
zones: Optional[Sequence[SdwanZoneArgs]] = None)
func NewSdwan(ctx *Context, name string, args *SdwanArgs, opts ...ResourceOption) (*Sdwan, error)
public Sdwan(string name, SdwanArgs? args = null, CustomResourceOptions? opts = null)
type: fortios:system:Sdwan
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args SdwanArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SdwanArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SdwanArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SdwanArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SdwanArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var sdwanResource = new Fortios.System.Sdwan("sdwanResource", new()
{
AppPerfLogPeriod = 0,
DuplicationMaxNum = 0,
Duplications = new[]
{
new Fortios.System.Inputs.SdwanDuplicationArgs
{
Dstaddr6s = new[]
{
new Fortios.System.Inputs.SdwanDuplicationDstaddr6Args
{
Name = "string",
},
},
Dstaddrs = new[]
{
new Fortios.System.Inputs.SdwanDuplicationDstaddrArgs
{
Name = "string",
},
},
Dstintfs = new[]
{
new Fortios.System.Inputs.SdwanDuplicationDstintfArgs
{
Name = "string",
},
},
Id = 0,
PacketDeDuplication = "string",
PacketDuplication = "string",
ServiceIds = new[]
{
new Fortios.System.Inputs.SdwanDuplicationServiceIdArgs
{
Id = 0,
},
},
Services = new[]
{
new Fortios.System.Inputs.SdwanDuplicationServiceArgs
{
Name = "string",
},
},
SlaMatchService = "string",
Srcaddr6s = new[]
{
new Fortios.System.Inputs.SdwanDuplicationSrcaddr6Args
{
Name = "string",
},
},
Srcaddrs = new[]
{
new Fortios.System.Inputs.SdwanDuplicationSrcaddrArgs
{
Name = "string",
},
},
Srcintfs = new[]
{
new Fortios.System.Inputs.SdwanDuplicationSrcintfArgs
{
Name = "string",
},
},
},
},
DynamicSortSubtable = "string",
FailAlertInterfaces = new[]
{
new Fortios.System.Inputs.SdwanFailAlertInterfaceArgs
{
Name = "string",
},
},
FailDetect = "string",
GetAllTables = "string",
HealthChecks = new[]
{
new Fortios.System.Inputs.SdwanHealthCheckArgs
{
AddrMode = "string",
ClassId = 0,
DetectMode = "string",
Diffservcode = "string",
DnsMatchIp = "string",
DnsRequestDomain = "string",
EmbedMeasuredHealth = "string",
Failtime = 0,
FtpFile = "string",
FtpMode = "string",
HaPriority = 0,
HttpAgent = "string",
HttpGet = "string",
HttpMatch = "string",
Interval = 0,
Members = new[]
{
new Fortios.System.Inputs.SdwanHealthCheckMemberArgs
{
SeqNum = 0,
},
},
MosCodec = "string",
Name = "string",
PacketSize = 0,
Password = "string",
Port = 0,
ProbeCount = 0,
ProbePackets = "string",
ProbeTimeout = 0,
Protocol = "string",
QualityMeasuredMethod = "string",
Recoverytime = 0,
SecurityMode = "string",
Server = "string",
SlaFailLogPeriod = 0,
SlaIdRedistribute = 0,
SlaPassLogPeriod = 0,
Slas = new[]
{
new Fortios.System.Inputs.SdwanHealthCheckSlaArgs
{
Id = 0,
JitterThreshold = 0,
LatencyThreshold = 0,
LinkCostFactor = "string",
MosThreshold = "string",
PacketlossThreshold = 0,
PriorityInSla = 0,
PriorityOutSla = 0,
},
},
Source = "string",
Source6 = "string",
SystemDns = "string",
ThresholdAlertJitter = 0,
ThresholdAlertLatency = 0,
ThresholdAlertPacketloss = 0,
ThresholdWarningJitter = 0,
ThresholdWarningLatency = 0,
ThresholdWarningPacketloss = 0,
UpdateCascadeInterface = "string",
UpdateStaticRoute = "string",
User = "string",
Vrf = 0,
},
},
LoadBalanceMode = "string",
Members = new[]
{
new Fortios.System.Inputs.SdwanMemberArgs
{
Comment = "string",
Cost = 0,
Gateway = "string",
Gateway6 = "string",
IngressSpilloverThreshold = 0,
Interface = "string",
PreferredSource = "string",
Priority = 0,
Priority6 = 0,
SeqNum = 0,
Source = "string",
Source6 = "string",
SpilloverThreshold = 0,
Status = "string",
TransportGroup = 0,
VolumeRatio = 0,
Weight = 0,
Zone = "string",
},
},
NeighborHoldBootTime = 0,
NeighborHoldDown = "string",
NeighborHoldDownTime = 0,
Neighbors = new[]
{
new Fortios.System.Inputs.SdwanNeighborArgs
{
HealthCheck = "string",
Ip = "string",
Member = 0,
MemberBlocks = new[]
{
new Fortios.System.Inputs.SdwanNeighborMemberBlockArgs
{
SeqNum = 0,
},
},
MinimumSlaMeetMembers = 0,
Mode = "string",
Role = "string",
ServiceId = 0,
SlaId = 0,
},
},
Services = new[]
{
new Fortios.System.Inputs.SdwanServiceArgs
{
AddrMode = "string",
AgentExclusive = "string",
BandwidthWeight = 0,
Default = "string",
DscpForward = "string",
DscpForwardTag = "string",
DscpReverse = "string",
DscpReverseTag = "string",
Dst6s = new[]
{
new Fortios.System.Inputs.SdwanServiceDst6Args
{
Name = "string",
},
},
DstNegate = "string",
Dsts = new[]
{
new Fortios.System.Inputs.SdwanServiceDstArgs
{
Name = "string",
},
},
EndPort = 0,
EndSrcPort = 0,
Gateway = "string",
Groups = new[]
{
new Fortios.System.Inputs.SdwanServiceGroupArgs
{
Name = "string",
},
},
HashMode = "string",
HealthChecks = new[]
{
new Fortios.System.Inputs.SdwanServiceHealthCheckArgs
{
Name = "string",
},
},
HoldDownTime = 0,
Id = 0,
InputDeviceNegate = "string",
InputDevices = new[]
{
new Fortios.System.Inputs.SdwanServiceInputDeviceArgs
{
Name = "string",
},
},
InputZones = new[]
{
new Fortios.System.Inputs.SdwanServiceInputZoneArgs
{
Name = "string",
},
},
InternetService = "string",
InternetServiceAppCtrlCategories = new[]
{
new Fortios.System.Inputs.SdwanServiceInternetServiceAppCtrlCategoryArgs
{
Id = 0,
},
},
InternetServiceAppCtrlGroups = new[]
{
new Fortios.System.Inputs.SdwanServiceInternetServiceAppCtrlGroupArgs
{
Name = "string",
},
},
InternetServiceAppCtrls = new[]
{
new Fortios.System.Inputs.SdwanServiceInternetServiceAppCtrlArgs
{
Id = 0,
},
},
InternetServiceCustomGroups = new[]
{
new Fortios.System.Inputs.SdwanServiceInternetServiceCustomGroupArgs
{
Name = "string",
},
},
InternetServiceCustoms = new[]
{
new Fortios.System.Inputs.SdwanServiceInternetServiceCustomArgs
{
Name = "string",
},
},
InternetServiceGroups = new[]
{
new Fortios.System.Inputs.SdwanServiceInternetServiceGroupArgs
{
Name = "string",
},
},
InternetServiceNames = new[]
{
new Fortios.System.Inputs.SdwanServiceInternetServiceNameArgs
{
Name = "string",
},
},
JitterWeight = 0,
LatencyWeight = 0,
LinkCostFactor = "string",
LinkCostThreshold = 0,
LoadBalance = "string",
MinimumSlaMeetMembers = 0,
Mode = "string",
Name = "string",
PacketLossWeight = 0,
PassiveMeasurement = "string",
PriorityMembers = new[]
{
new Fortios.System.Inputs.SdwanServicePriorityMemberArgs
{
SeqNum = 0,
},
},
PriorityZones = new[]
{
new Fortios.System.Inputs.SdwanServicePriorityZoneArgs
{
Name = "string",
},
},
Protocol = 0,
QualityLink = 0,
Role = "string",
RouteTag = 0,
Shortcut = "string",
ShortcutPriority = "string",
ShortcutStickiness = "string",
SlaCompareMethod = "string",
SlaStickiness = "string",
Slas = new[]
{
new Fortios.System.Inputs.SdwanServiceSlaArgs
{
HealthCheck = "string",
Id = 0,
},
},
Src6s = new[]
{
new Fortios.System.Inputs.SdwanServiceSrc6Args
{
Name = "string",
},
},
SrcNegate = "string",
Srcs = new[]
{
new Fortios.System.Inputs.SdwanServiceSrcArgs
{
Name = "string",
},
},
StandaloneAction = "string",
StartPort = 0,
StartSrcPort = 0,
Status = "string",
TieBreak = "string",
Tos = "string",
TosMask = "string",
UseShortcutSla = "string",
Users = new[]
{
new Fortios.System.Inputs.SdwanServiceUserArgs
{
Name = "string",
},
},
ZoneMode = "string",
},
},
SpeedtestBypassRouting = "string",
Status = "string",
Vdomparam = "string",
Zones = new[]
{
new Fortios.System.Inputs.SdwanZoneArgs
{
AdvpnHealthCheck = "string",
AdvpnSelect = "string",
MinimumSlaMeetMembers = 0,
Name = "string",
ServiceSlaTieBreak = "string",
},
},
});
example, err := system.NewSdwan(ctx, "sdwanResource", &system.SdwanArgs{
AppPerfLogPeriod: pulumi.Int(0),
DuplicationMaxNum: pulumi.Int(0),
Duplications: system.SdwanDuplicationArray{
&system.SdwanDuplicationArgs{
Dstaddr6s: system.SdwanDuplicationDstaddr6Array{
&system.SdwanDuplicationDstaddr6Args{
Name: pulumi.String("string"),
},
},
Dstaddrs: system.SdwanDuplicationDstaddrArray{
&system.SdwanDuplicationDstaddrArgs{
Name: pulumi.String("string"),
},
},
Dstintfs: system.SdwanDuplicationDstintfArray{
&system.SdwanDuplicationDstintfArgs{
Name: pulumi.String("string"),
},
},
Id: pulumi.Int(0),
PacketDeDuplication: pulumi.String("string"),
PacketDuplication: pulumi.String("string"),
ServiceIds: system.SdwanDuplicationServiceIdArray{
&system.SdwanDuplicationServiceIdArgs{
Id: pulumi.Int(0),
},
},
Services: system.SdwanDuplicationServiceArray{
&system.SdwanDuplicationServiceArgs{
Name: pulumi.String("string"),
},
},
SlaMatchService: pulumi.String("string"),
Srcaddr6s: system.SdwanDuplicationSrcaddr6Array{
&system.SdwanDuplicationSrcaddr6Args{
Name: pulumi.String("string"),
},
},
Srcaddrs: system.SdwanDuplicationSrcaddrArray{
&system.SdwanDuplicationSrcaddrArgs{
Name: pulumi.String("string"),
},
},
Srcintfs: system.SdwanDuplicationSrcintfArray{
&system.SdwanDuplicationSrcintfArgs{
Name: pulumi.String("string"),
},
},
},
},
DynamicSortSubtable: pulumi.String("string"),
FailAlertInterfaces: system.SdwanFailAlertInterfaceArray{
&system.SdwanFailAlertInterfaceArgs{
Name: pulumi.String("string"),
},
},
FailDetect: pulumi.String("string"),
GetAllTables: pulumi.String("string"),
HealthChecks: system.SdwanHealthCheckArray{
&system.SdwanHealthCheckArgs{
AddrMode: pulumi.String("string"),
ClassId: pulumi.Int(0),
DetectMode: pulumi.String("string"),
Diffservcode: pulumi.String("string"),
DnsMatchIp: pulumi.String("string"),
DnsRequestDomain: pulumi.String("string"),
EmbedMeasuredHealth: pulumi.String("string"),
Failtime: pulumi.Int(0),
FtpFile: pulumi.String("string"),
FtpMode: pulumi.String("string"),
HaPriority: pulumi.Int(0),
HttpAgent: pulumi.String("string"),
HttpGet: pulumi.String("string"),
HttpMatch: pulumi.String("string"),
Interval: pulumi.Int(0),
Members: system.SdwanHealthCheckMemberArray{
&system.SdwanHealthCheckMemberArgs{
SeqNum: pulumi.Int(0),
},
},
MosCodec: pulumi.String("string"),
Name: pulumi.String("string"),
PacketSize: pulumi.Int(0),
Password: pulumi.String("string"),
Port: pulumi.Int(0),
ProbeCount: pulumi.Int(0),
ProbePackets: pulumi.String("string"),
ProbeTimeout: pulumi.Int(0),
Protocol: pulumi.String("string"),
QualityMeasuredMethod: pulumi.String("string"),
Recoverytime: pulumi.Int(0),
SecurityMode: pulumi.String("string"),
Server: pulumi.String("string"),
SlaFailLogPeriod: pulumi.Int(0),
SlaIdRedistribute: pulumi.Int(0),
SlaPassLogPeriod: pulumi.Int(0),
Slas: system.SdwanHealthCheckSlaArray{
&system.SdwanHealthCheckSlaArgs{
Id: pulumi.Int(0),
JitterThreshold: pulumi.Int(0),
LatencyThreshold: pulumi.Int(0),
LinkCostFactor: pulumi.String("string"),
MosThreshold: pulumi.String("string"),
PacketlossThreshold: pulumi.Int(0),
PriorityInSla: pulumi.Int(0),
PriorityOutSla: pulumi.Int(0),
},
},
Source: pulumi.String("string"),
Source6: pulumi.String("string"),
SystemDns: pulumi.String("string"),
ThresholdAlertJitter: pulumi.Int(0),
ThresholdAlertLatency: pulumi.Int(0),
ThresholdAlertPacketloss: pulumi.Int(0),
ThresholdWarningJitter: pulumi.Int(0),
ThresholdWarningLatency: pulumi.Int(0),
ThresholdWarningPacketloss: pulumi.Int(0),
UpdateCascadeInterface: pulumi.String("string"),
UpdateStaticRoute: pulumi.String("string"),
User: pulumi.String("string"),
Vrf: pulumi.Int(0),
},
},
LoadBalanceMode: pulumi.String("string"),
Members: system.SdwanMemberArray{
&system.SdwanMemberArgs{
Comment: pulumi.String("string"),
Cost: pulumi.Int(0),
Gateway: pulumi.String("string"),
Gateway6: pulumi.String("string"),
IngressSpilloverThreshold: pulumi.Int(0),
Interface: pulumi.String("string"),
PreferredSource: pulumi.String("string"),
Priority: pulumi.Int(0),
Priority6: pulumi.Int(0),
SeqNum: pulumi.Int(0),
Source: pulumi.String("string"),
Source6: pulumi.String("string"),
SpilloverThreshold: pulumi.Int(0),
Status: pulumi.String("string"),
TransportGroup: pulumi.Int(0),
VolumeRatio: pulumi.Int(0),
Weight: pulumi.Int(0),
Zone: pulumi.String("string"),
},
},
NeighborHoldBootTime: pulumi.Int(0),
NeighborHoldDown: pulumi.String("string"),
NeighborHoldDownTime: pulumi.Int(0),
Neighbors: system.SdwanNeighborArray{
&system.SdwanNeighborArgs{
HealthCheck: pulumi.String("string"),
Ip: pulumi.String("string"),
Member: pulumi.Int(0),
MemberBlocks: system.SdwanNeighborMemberBlockArray{
&system.SdwanNeighborMemberBlockArgs{
SeqNum: pulumi.Int(0),
},
},
MinimumSlaMeetMembers: pulumi.Int(0),
Mode: pulumi.String("string"),
Role: pulumi.String("string"),
ServiceId: pulumi.Int(0),
SlaId: pulumi.Int(0),
},
},
Services: system.SdwanServiceArray{
&system.SdwanServiceArgs{
AddrMode: pulumi.String("string"),
AgentExclusive: pulumi.String("string"),
BandwidthWeight: pulumi.Int(0),
Default: pulumi.String("string"),
DscpForward: pulumi.String("string"),
DscpForwardTag: pulumi.String("string"),
DscpReverse: pulumi.String("string"),
DscpReverseTag: pulumi.String("string"),
Dst6s: system.SdwanServiceDst6Array{
&system.SdwanServiceDst6Args{
Name: pulumi.String("string"),
},
},
DstNegate: pulumi.String("string"),
Dsts: system.SdwanServiceDstArray{
&system.SdwanServiceDstArgs{
Name: pulumi.String("string"),
},
},
EndPort: pulumi.Int(0),
EndSrcPort: pulumi.Int(0),
Gateway: pulumi.String("string"),
Groups: system.SdwanServiceGroupArray{
&system.SdwanServiceGroupArgs{
Name: pulumi.String("string"),
},
},
HashMode: pulumi.String("string"),
HealthChecks: system.SdwanServiceHealthCheckArray{
&system.SdwanServiceHealthCheckArgs{
Name: pulumi.String("string"),
},
},
HoldDownTime: pulumi.Int(0),
Id: pulumi.Int(0),
InputDeviceNegate: pulumi.String("string"),
InputDevices: system.SdwanServiceInputDeviceArray{
&system.SdwanServiceInputDeviceArgs{
Name: pulumi.String("string"),
},
},
InputZones: system.SdwanServiceInputZoneArray{
&system.SdwanServiceInputZoneArgs{
Name: pulumi.String("string"),
},
},
InternetService: pulumi.String("string"),
InternetServiceAppCtrlCategories: system.SdwanServiceInternetServiceAppCtrlCategoryArray{
&system.SdwanServiceInternetServiceAppCtrlCategoryArgs{
Id: pulumi.Int(0),
},
},
InternetServiceAppCtrlGroups: system.SdwanServiceInternetServiceAppCtrlGroupArray{
&system.SdwanServiceInternetServiceAppCtrlGroupArgs{
Name: pulumi.String("string"),
},
},
InternetServiceAppCtrls: system.SdwanServiceInternetServiceAppCtrlArray{
&system.SdwanServiceInternetServiceAppCtrlArgs{
Id: pulumi.Int(0),
},
},
InternetServiceCustomGroups: system.SdwanServiceInternetServiceCustomGroupArray{
&system.SdwanServiceInternetServiceCustomGroupArgs{
Name: pulumi.String("string"),
},
},
InternetServiceCustoms: system.SdwanServiceInternetServiceCustomArray{
&system.SdwanServiceInternetServiceCustomArgs{
Name: pulumi.String("string"),
},
},
InternetServiceGroups: system.SdwanServiceInternetServiceGroupArray{
&system.SdwanServiceInternetServiceGroupArgs{
Name: pulumi.String("string"),
},
},
InternetServiceNames: system.SdwanServiceInternetServiceNameArray{
&system.SdwanServiceInternetServiceNameArgs{
Name: pulumi.String("string"),
},
},
JitterWeight: pulumi.Int(0),
LatencyWeight: pulumi.Int(0),
LinkCostFactor: pulumi.String("string"),
LinkCostThreshold: pulumi.Int(0),
LoadBalance: pulumi.String("string"),
MinimumSlaMeetMembers: pulumi.Int(0),
Mode: pulumi.String("string"),
Name: pulumi.String("string"),
PacketLossWeight: pulumi.Int(0),
PassiveMeasurement: pulumi.String("string"),
PriorityMembers: system.SdwanServicePriorityMemberArray{
&system.SdwanServicePriorityMemberArgs{
SeqNum: pulumi.Int(0),
},
},
PriorityZones: system.SdwanServicePriorityZoneArray{
&system.SdwanServicePriorityZoneArgs{
Name: pulumi.String("string"),
},
},
Protocol: pulumi.Int(0),
QualityLink: pulumi.Int(0),
Role: pulumi.String("string"),
RouteTag: pulumi.Int(0),
Shortcut: pulumi.String("string"),
ShortcutPriority: pulumi.String("string"),
ShortcutStickiness: pulumi.String("string"),
SlaCompareMethod: pulumi.String("string"),
SlaStickiness: pulumi.String("string"),
Slas: system.SdwanServiceSlaArray{
&system.SdwanServiceSlaArgs{
HealthCheck: pulumi.String("string"),
Id: pulumi.Int(0),
},
},
Src6s: system.SdwanServiceSrc6Array{
&system.SdwanServiceSrc6Args{
Name: pulumi.String("string"),
},
},
SrcNegate: pulumi.String("string"),
Srcs: system.SdwanServiceSrcArray{
&system.SdwanServiceSrcArgs{
Name: pulumi.String("string"),
},
},
StandaloneAction: pulumi.String("string"),
StartPort: pulumi.Int(0),
StartSrcPort: pulumi.Int(0),
Status: pulumi.String("string"),
TieBreak: pulumi.String("string"),
Tos: pulumi.String("string"),
TosMask: pulumi.String("string"),
UseShortcutSla: pulumi.String("string"),
Users: system.SdwanServiceUserArray{
&system.SdwanServiceUserArgs{
Name: pulumi.String("string"),
},
},
ZoneMode: pulumi.String("string"),
},
},
SpeedtestBypassRouting: pulumi.String("string"),
Status: pulumi.String("string"),
Vdomparam: pulumi.String("string"),
Zones: system.SdwanZoneArray{
&system.SdwanZoneArgs{
AdvpnHealthCheck: pulumi.String("string"),
AdvpnSelect: pulumi.String("string"),
MinimumSlaMeetMembers: pulumi.Int(0),
Name: pulumi.String("string"),
ServiceSlaTieBreak: pulumi.String("string"),
},
},
})
var sdwanResource = new Sdwan("sdwanResource", SdwanArgs.builder()
.appPerfLogPeriod(0)
.duplicationMaxNum(0)
.duplications(SdwanDuplicationArgs.builder()
.dstaddr6s(SdwanDuplicationDstaddr6Args.builder()
.name("string")
.build())
.dstaddrs(SdwanDuplicationDstaddrArgs.builder()
.name("string")
.build())
.dstintfs(SdwanDuplicationDstintfArgs.builder()
.name("string")
.build())
.id(0)
.packetDeDuplication("string")
.packetDuplication("string")
.serviceIds(SdwanDuplicationServiceIdArgs.builder()
.id(0)
.build())
.services(SdwanDuplicationServiceArgs.builder()
.name("string")
.build())
.slaMatchService("string")
.srcaddr6s(SdwanDuplicationSrcaddr6Args.builder()
.name("string")
.build())
.srcaddrs(SdwanDuplicationSrcaddrArgs.builder()
.name("string")
.build())
.srcintfs(SdwanDuplicationSrcintfArgs.builder()
.name("string")
.build())
.build())
.dynamicSortSubtable("string")
.failAlertInterfaces(SdwanFailAlertInterfaceArgs.builder()
.name("string")
.build())
.failDetect("string")
.getAllTables("string")
.healthChecks(SdwanHealthCheckArgs.builder()
.addrMode("string")
.classId(0)
.detectMode("string")
.diffservcode("string")
.dnsMatchIp("string")
.dnsRequestDomain("string")
.embedMeasuredHealth("string")
.failtime(0)
.ftpFile("string")
.ftpMode("string")
.haPriority(0)
.httpAgent("string")
.httpGet("string")
.httpMatch("string")
.interval(0)
.members(SdwanHealthCheckMemberArgs.builder()
.seqNum(0)
.build())
.mosCodec("string")
.name("string")
.packetSize(0)
.password("string")
.port(0)
.probeCount(0)
.probePackets("string")
.probeTimeout(0)
.protocol("string")
.qualityMeasuredMethod("string")
.recoverytime(0)
.securityMode("string")
.server("string")
.slaFailLogPeriod(0)
.slaIdRedistribute(0)
.slaPassLogPeriod(0)
.slas(SdwanHealthCheckSlaArgs.builder()
.id(0)
.jitterThreshold(0)
.latencyThreshold(0)
.linkCostFactor("string")
.mosThreshold("string")
.packetlossThreshold(0)
.priorityInSla(0)
.priorityOutSla(0)
.build())
.source("string")
.source6("string")
.systemDns("string")
.thresholdAlertJitter(0)
.thresholdAlertLatency(0)
.thresholdAlertPacketloss(0)
.thresholdWarningJitter(0)
.thresholdWarningLatency(0)
.thresholdWarningPacketloss(0)
.updateCascadeInterface("string")
.updateStaticRoute("string")
.user("string")
.vrf(0)
.build())
.loadBalanceMode("string")
.members(SdwanMemberArgs.builder()
.comment("string")
.cost(0)
.gateway("string")
.gateway6("string")
.ingressSpilloverThreshold(0)
.interface_("string")
.preferredSource("string")
.priority(0)
.priority6(0)
.seqNum(0)
.source("string")
.source6("string")
.spilloverThreshold(0)
.status("string")
.transportGroup(0)
.volumeRatio(0)
.weight(0)
.zone("string")
.build())
.neighborHoldBootTime(0)
.neighborHoldDown("string")
.neighborHoldDownTime(0)
.neighbors(SdwanNeighborArgs.builder()
.healthCheck("string")
.ip("string")
.member(0)
.memberBlocks(SdwanNeighborMemberBlockArgs.builder()
.seqNum(0)
.build())
.minimumSlaMeetMembers(0)
.mode("string")
.role("string")
.serviceId(0)
.slaId(0)
.build())
.services(SdwanServiceArgs.builder()
.addrMode("string")
.agentExclusive("string")
.bandwidthWeight(0)
.default_("string")
.dscpForward("string")
.dscpForwardTag("string")
.dscpReverse("string")
.dscpReverseTag("string")
.dst6s(SdwanServiceDst6Args.builder()
.name("string")
.build())
.dstNegate("string")
.dsts(SdwanServiceDstArgs.builder()
.name("string")
.build())
.endPort(0)
.endSrcPort(0)
.gateway("string")
.groups(SdwanServiceGroupArgs.builder()
.name("string")
.build())
.hashMode("string")
.healthChecks(SdwanServiceHealthCheckArgs.builder()
.name("string")
.build())
.holdDownTime(0)
.id(0)
.inputDeviceNegate("string")
.inputDevices(SdwanServiceInputDeviceArgs.builder()
.name("string")
.build())
.inputZones(SdwanServiceInputZoneArgs.builder()
.name("string")
.build())
.internetService("string")
.internetServiceAppCtrlCategories(SdwanServiceInternetServiceAppCtrlCategoryArgs.builder()
.id(0)
.build())
.internetServiceAppCtrlGroups(SdwanServiceInternetServiceAppCtrlGroupArgs.builder()
.name("string")
.build())
.internetServiceAppCtrls(SdwanServiceInternetServiceAppCtrlArgs.builder()
.id(0)
.build())
.internetServiceCustomGroups(SdwanServiceInternetServiceCustomGroupArgs.builder()
.name("string")
.build())
.internetServiceCustoms(SdwanServiceInternetServiceCustomArgs.builder()
.name("string")
.build())
.internetServiceGroups(SdwanServiceInternetServiceGroupArgs.builder()
.name("string")
.build())
.internetServiceNames(SdwanServiceInternetServiceNameArgs.builder()
.name("string")
.build())
.jitterWeight(0)
.latencyWeight(0)
.linkCostFactor("string")
.linkCostThreshold(0)
.loadBalance("string")
.minimumSlaMeetMembers(0)
.mode("string")
.name("string")
.packetLossWeight(0)
.passiveMeasurement("string")
.priorityMembers(SdwanServicePriorityMemberArgs.builder()
.seqNum(0)
.build())
.priorityZones(SdwanServicePriorityZoneArgs.builder()
.name("string")
.build())
.protocol(0)
.qualityLink(0)
.role("string")
.routeTag(0)
.shortcut("string")
.shortcutPriority("string")
.shortcutStickiness("string")
.slaCompareMethod("string")
.slaStickiness("string")
.slas(SdwanServiceSlaArgs.builder()
.healthCheck("string")
.id(0)
.build())
.src6s(SdwanServiceSrc6Args.builder()
.name("string")
.build())
.srcNegate("string")
.srcs(SdwanServiceSrcArgs.builder()
.name("string")
.build())
.standaloneAction("string")
.startPort(0)
.startSrcPort(0)
.status("string")
.tieBreak("string")
.tos("string")
.tosMask("string")
.useShortcutSla("string")
.users(SdwanServiceUserArgs.builder()
.name("string")
.build())
.zoneMode("string")
.build())
.speedtestBypassRouting("string")
.status("string")
.vdomparam("string")
.zones(SdwanZoneArgs.builder()
.advpnHealthCheck("string")
.advpnSelect("string")
.minimumSlaMeetMembers(0)
.name("string")
.serviceSlaTieBreak("string")
.build())
.build());
sdwan_resource = fortios.system.Sdwan("sdwanResource",
app_perf_log_period=0,
duplication_max_num=0,
duplications=[{
"dstaddr6s": [{
"name": "string",
}],
"dstaddrs": [{
"name": "string",
}],
"dstintfs": [{
"name": "string",
}],
"id": 0,
"packet_de_duplication": "string",
"packet_duplication": "string",
"service_ids": [{
"id": 0,
}],
"services": [{
"name": "string",
}],
"sla_match_service": "string",
"srcaddr6s": [{
"name": "string",
}],
"srcaddrs": [{
"name": "string",
}],
"srcintfs": [{
"name": "string",
}],
}],
dynamic_sort_subtable="string",
fail_alert_interfaces=[{
"name": "string",
}],
fail_detect="string",
get_all_tables="string",
health_checks=[{
"addr_mode": "string",
"class_id": 0,
"detect_mode": "string",
"diffservcode": "string",
"dns_match_ip": "string",
"dns_request_domain": "string",
"embed_measured_health": "string",
"failtime": 0,
"ftp_file": "string",
"ftp_mode": "string",
"ha_priority": 0,
"http_agent": "string",
"http_get": "string",
"http_match": "string",
"interval": 0,
"members": [{
"seq_num": 0,
}],
"mos_codec": "string",
"name": "string",
"packet_size": 0,
"password": "string",
"port": 0,
"probe_count": 0,
"probe_packets": "string",
"probe_timeout": 0,
"protocol": "string",
"quality_measured_method": "string",
"recoverytime": 0,
"security_mode": "string",
"server": "string",
"sla_fail_log_period": 0,
"sla_id_redistribute": 0,
"sla_pass_log_period": 0,
"slas": [{
"id": 0,
"jitter_threshold": 0,
"latency_threshold": 0,
"link_cost_factor": "string",
"mos_threshold": "string",
"packetloss_threshold": 0,
"priority_in_sla": 0,
"priority_out_sla": 0,
}],
"source": "string",
"source6": "string",
"system_dns": "string",
"threshold_alert_jitter": 0,
"threshold_alert_latency": 0,
"threshold_alert_packetloss": 0,
"threshold_warning_jitter": 0,
"threshold_warning_latency": 0,
"threshold_warning_packetloss": 0,
"update_cascade_interface": "string",
"update_static_route": "string",
"user": "string",
"vrf": 0,
}],
load_balance_mode="string",
members=[{
"comment": "string",
"cost": 0,
"gateway": "string",
"gateway6": "string",
"ingress_spillover_threshold": 0,
"interface": "string",
"preferred_source": "string",
"priority": 0,
"priority6": 0,
"seq_num": 0,
"source": "string",
"source6": "string",
"spillover_threshold": 0,
"status": "string",
"transport_group": 0,
"volume_ratio": 0,
"weight": 0,
"zone": "string",
}],
neighbor_hold_boot_time=0,
neighbor_hold_down="string",
neighbor_hold_down_time=0,
neighbors=[{
"health_check": "string",
"ip": "string",
"member": 0,
"member_blocks": [{
"seq_num": 0,
}],
"minimum_sla_meet_members": 0,
"mode": "string",
"role": "string",
"service_id": 0,
"sla_id": 0,
}],
services=[{
"addr_mode": "string",
"agent_exclusive": "string",
"bandwidth_weight": 0,
"default": "string",
"dscp_forward": "string",
"dscp_forward_tag": "string",
"dscp_reverse": "string",
"dscp_reverse_tag": "string",
"dst6s": [{
"name": "string",
}],
"dst_negate": "string",
"dsts": [{
"name": "string",
}],
"end_port": 0,
"end_src_port": 0,
"gateway": "string",
"groups": [{
"name": "string",
}],
"hash_mode": "string",
"health_checks": [{
"name": "string",
}],
"hold_down_time": 0,
"id": 0,
"input_device_negate": "string",
"input_devices": [{
"name": "string",
}],
"input_zones": [{
"name": "string",
}],
"internet_service": "string",
"internet_service_app_ctrl_categories": [{
"id": 0,
}],
"internet_service_app_ctrl_groups": [{
"name": "string",
}],
"internet_service_app_ctrls": [{
"id": 0,
}],
"internet_service_custom_groups": [{
"name": "string",
}],
"internet_service_customs": [{
"name": "string",
}],
"internet_service_groups": [{
"name": "string",
}],
"internet_service_names": [{
"name": "string",
}],
"jitter_weight": 0,
"latency_weight": 0,
"link_cost_factor": "string",
"link_cost_threshold": 0,
"load_balance": "string",
"minimum_sla_meet_members": 0,
"mode": "string",
"name": "string",
"packet_loss_weight": 0,
"passive_measurement": "string",
"priority_members": [{
"seq_num": 0,
}],
"priority_zones": [{
"name": "string",
}],
"protocol": 0,
"quality_link": 0,
"role": "string",
"route_tag": 0,
"shortcut": "string",
"shortcut_priority": "string",
"shortcut_stickiness": "string",
"sla_compare_method": "string",
"sla_stickiness": "string",
"slas": [{
"health_check": "string",
"id": 0,
}],
"src6s": [{
"name": "string",
}],
"src_negate": "string",
"srcs": [{
"name": "string",
}],
"standalone_action": "string",
"start_port": 0,
"start_src_port": 0,
"status": "string",
"tie_break": "string",
"tos": "string",
"tos_mask": "string",
"use_shortcut_sla": "string",
"users": [{
"name": "string",
}],
"zone_mode": "string",
}],
speedtest_bypass_routing="string",
status="string",
vdomparam="string",
zones=[{
"advpn_health_check": "string",
"advpn_select": "string",
"minimum_sla_meet_members": 0,
"name": "string",
"service_sla_tie_break": "string",
}])
const sdwanResource = new fortios.system.Sdwan("sdwanResource", {
appPerfLogPeriod: 0,
duplicationMaxNum: 0,
duplications: [{
dstaddr6s: [{
name: "string",
}],
dstaddrs: [{
name: "string",
}],
dstintfs: [{
name: "string",
}],
id: 0,
packetDeDuplication: "string",
packetDuplication: "string",
serviceIds: [{
id: 0,
}],
services: [{
name: "string",
}],
slaMatchService: "string",
srcaddr6s: [{
name: "string",
}],
srcaddrs: [{
name: "string",
}],
srcintfs: [{
name: "string",
}],
}],
dynamicSortSubtable: "string",
failAlertInterfaces: [{
name: "string",
}],
failDetect: "string",
getAllTables: "string",
healthChecks: [{
addrMode: "string",
classId: 0,
detectMode: "string",
diffservcode: "string",
dnsMatchIp: "string",
dnsRequestDomain: "string",
embedMeasuredHealth: "string",
failtime: 0,
ftpFile: "string",
ftpMode: "string",
haPriority: 0,
httpAgent: "string",
httpGet: "string",
httpMatch: "string",
interval: 0,
members: [{
seqNum: 0,
}],
mosCodec: "string",
name: "string",
packetSize: 0,
password: "string",
port: 0,
probeCount: 0,
probePackets: "string",
probeTimeout: 0,
protocol: "string",
qualityMeasuredMethod: "string",
recoverytime: 0,
securityMode: "string",
server: "string",
slaFailLogPeriod: 0,
slaIdRedistribute: 0,
slaPassLogPeriod: 0,
slas: [{
id: 0,
jitterThreshold: 0,
latencyThreshold: 0,
linkCostFactor: "string",
mosThreshold: "string",
packetlossThreshold: 0,
priorityInSla: 0,
priorityOutSla: 0,
}],
source: "string",
source6: "string",
systemDns: "string",
thresholdAlertJitter: 0,
thresholdAlertLatency: 0,
thresholdAlertPacketloss: 0,
thresholdWarningJitter: 0,
thresholdWarningLatency: 0,
thresholdWarningPacketloss: 0,
updateCascadeInterface: "string",
updateStaticRoute: "string",
user: "string",
vrf: 0,
}],
loadBalanceMode: "string",
members: [{
comment: "string",
cost: 0,
gateway: "string",
gateway6: "string",
ingressSpilloverThreshold: 0,
"interface": "string",
preferredSource: "string",
priority: 0,
priority6: 0,
seqNum: 0,
source: "string",
source6: "string",
spilloverThreshold: 0,
status: "string",
transportGroup: 0,
volumeRatio: 0,
weight: 0,
zone: "string",
}],
neighborHoldBootTime: 0,
neighborHoldDown: "string",
neighborHoldDownTime: 0,
neighbors: [{
healthCheck: "string",
ip: "string",
member: 0,
memberBlocks: [{
seqNum: 0,
}],
minimumSlaMeetMembers: 0,
mode: "string",
role: "string",
serviceId: 0,
slaId: 0,
}],
services: [{
addrMode: "string",
agentExclusive: "string",
bandwidthWeight: 0,
"default": "string",
dscpForward: "string",
dscpForwardTag: "string",
dscpReverse: "string",
dscpReverseTag: "string",
dst6s: [{
name: "string",
}],
dstNegate: "string",
dsts: [{
name: "string",
}],
endPort: 0,
endSrcPort: 0,
gateway: "string",
groups: [{
name: "string",
}],
hashMode: "string",
healthChecks: [{
name: "string",
}],
holdDownTime: 0,
id: 0,
inputDeviceNegate: "string",
inputDevices: [{
name: "string",
}],
inputZones: [{
name: "string",
}],
internetService: "string",
internetServiceAppCtrlCategories: [{
id: 0,
}],
internetServiceAppCtrlGroups: [{
name: "string",
}],
internetServiceAppCtrls: [{
id: 0,
}],
internetServiceCustomGroups: [{
name: "string",
}],
internetServiceCustoms: [{
name: "string",
}],
internetServiceGroups: [{
name: "string",
}],
internetServiceNames: [{
name: "string",
}],
jitterWeight: 0,
latencyWeight: 0,
linkCostFactor: "string",
linkCostThreshold: 0,
loadBalance: "string",
minimumSlaMeetMembers: 0,
mode: "string",
name: "string",
packetLossWeight: 0,
passiveMeasurement: "string",
priorityMembers: [{
seqNum: 0,
}],
priorityZones: [{
name: "string",
}],
protocol: 0,
qualityLink: 0,
role: "string",
routeTag: 0,
shortcut: "string",
shortcutPriority: "string",
shortcutStickiness: "string",
slaCompareMethod: "string",
slaStickiness: "string",
slas: [{
healthCheck: "string",
id: 0,
}],
src6s: [{
name: "string",
}],
srcNegate: "string",
srcs: [{
name: "string",
}],
standaloneAction: "string",
startPort: 0,
startSrcPort: 0,
status: "string",
tieBreak: "string",
tos: "string",
tosMask: "string",
useShortcutSla: "string",
users: [{
name: "string",
}],
zoneMode: "string",
}],
speedtestBypassRouting: "string",
status: "string",
vdomparam: "string",
zones: [{
advpnHealthCheck: "string",
advpnSelect: "string",
minimumSlaMeetMembers: 0,
name: "string",
serviceSlaTieBreak: "string",
}],
});
type: fortios:system:Sdwan
properties:
appPerfLogPeriod: 0
duplicationMaxNum: 0
duplications:
- dstaddr6s:
- name: string
dstaddrs:
- name: string
dstintfs:
- name: string
id: 0
packetDeDuplication: string
packetDuplication: string
serviceIds:
- id: 0
services:
- name: string
slaMatchService: string
srcaddr6s:
- name: string
srcaddrs:
- name: string
srcintfs:
- name: string
dynamicSortSubtable: string
failAlertInterfaces:
- name: string
failDetect: string
getAllTables: string
healthChecks:
- addrMode: string
classId: 0
detectMode: string
diffservcode: string
dnsMatchIp: string
dnsRequestDomain: string
embedMeasuredHealth: string
failtime: 0
ftpFile: string
ftpMode: string
haPriority: 0
httpAgent: string
httpGet: string
httpMatch: string
interval: 0
members:
- seqNum: 0
mosCodec: string
name: string
packetSize: 0
password: string
port: 0
probeCount: 0
probePackets: string
probeTimeout: 0
protocol: string
qualityMeasuredMethod: string
recoverytime: 0
securityMode: string
server: string
slaFailLogPeriod: 0
slaIdRedistribute: 0
slaPassLogPeriod: 0
slas:
- id: 0
jitterThreshold: 0
latencyThreshold: 0
linkCostFactor: string
mosThreshold: string
packetlossThreshold: 0
priorityInSla: 0
priorityOutSla: 0
source: string
source6: string
systemDns: string
thresholdAlertJitter: 0
thresholdAlertLatency: 0
thresholdAlertPacketloss: 0
thresholdWarningJitter: 0
thresholdWarningLatency: 0
thresholdWarningPacketloss: 0
updateCascadeInterface: string
updateStaticRoute: string
user: string
vrf: 0
loadBalanceMode: string
members:
- comment: string
cost: 0
gateway: string
gateway6: string
ingressSpilloverThreshold: 0
interface: string
preferredSource: string
priority: 0
priority6: 0
seqNum: 0
source: string
source6: string
spilloverThreshold: 0
status: string
transportGroup: 0
volumeRatio: 0
weight: 0
zone: string
neighborHoldBootTime: 0
neighborHoldDown: string
neighborHoldDownTime: 0
neighbors:
- healthCheck: string
ip: string
member: 0
memberBlocks:
- seqNum: 0
minimumSlaMeetMembers: 0
mode: string
role: string
serviceId: 0
slaId: 0
services:
- addrMode: string
agentExclusive: string
bandwidthWeight: 0
default: string
dscpForward: string
dscpForwardTag: string
dscpReverse: string
dscpReverseTag: string
dst6s:
- name: string
dstNegate: string
dsts:
- name: string
endPort: 0
endSrcPort: 0
gateway: string
groups:
- name: string
hashMode: string
healthChecks:
- name: string
holdDownTime: 0
id: 0
inputDeviceNegate: string
inputDevices:
- name: string
inputZones:
- name: string
internetService: string
internetServiceAppCtrlCategories:
- id: 0
internetServiceAppCtrlGroups:
- name: string
internetServiceAppCtrls:
- id: 0
internetServiceCustomGroups:
- name: string
internetServiceCustoms:
- name: string
internetServiceGroups:
- name: string
internetServiceNames:
- name: string
jitterWeight: 0
latencyWeight: 0
linkCostFactor: string
linkCostThreshold: 0
loadBalance: string
minimumSlaMeetMembers: 0
mode: string
name: string
packetLossWeight: 0
passiveMeasurement: string
priorityMembers:
- seqNum: 0
priorityZones:
- name: string
protocol: 0
qualityLink: 0
role: string
routeTag: 0
shortcut: string
shortcutPriority: string
shortcutStickiness: string
slaCompareMethod: string
slaStickiness: string
slas:
- healthCheck: string
id: 0
src6s:
- name: string
srcNegate: string
srcs:
- name: string
standaloneAction: string
startPort: 0
startSrcPort: 0
status: string
tieBreak: string
tos: string
tosMask: string
useShortcutSla: string
users:
- name: string
zoneMode: string
speedtestBypassRouting: string
status: string
vdomparam: string
zones:
- advpnHealthCheck: string
advpnSelect: string
minimumSlaMeetMembers: 0
name: string
serviceSlaTieBreak: string
Sdwan Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Sdwan resource accepts the following input properties:
- App
Perf intLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- Duplication
Max intNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- Duplications
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Duplication> - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Fail
Alert List<Pulumiverse.Interfaces Fortios. System. Inputs. Sdwan Fail Alert Interface> - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - Fail
Detect string - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Health
Checks List<Pulumiverse.Fortios. System. Inputs. Sdwan Health Check> - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - Load
Balance stringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - Members
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Member> - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - Neighbor
Hold intBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- Neighbor
Hold stringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - Neighbor
Hold intDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- Neighbors
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Neighbor> - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - Services
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Service> - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - Speedtest
Bypass stringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - Status string
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Zones
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Zone> - Configure SD-WAN zones. The structure of
zone
block is documented below.
- App
Perf intLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- Duplication
Max intNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- Duplications
[]Sdwan
Duplication Args - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Fail
Alert []SdwanInterfaces Fail Alert Interface Args - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - Fail
Detect string - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Health
Checks []SdwanHealth Check Args - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - Load
Balance stringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - Members
[]Sdwan
Member Args - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - Neighbor
Hold intBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- Neighbor
Hold stringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - Neighbor
Hold intDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- Neighbors
[]Sdwan
Neighbor Args - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - Services
[]Sdwan
Service Args - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - Speedtest
Bypass stringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - Status string
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Zones
[]Sdwan
Zone Args - Configure SD-WAN zones. The structure of
zone
block is documented below.
- app
Perf IntegerLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- duplication
Max IntegerNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- duplications
List<Sdwan
Duplication> - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fail
Alert List<SdwanInterfaces Fail Alert Interface> - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - fail
Detect String - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- health
Checks List<SdwanHealth Check> - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - load
Balance StringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - members
List<Sdwan
Member> - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - neighbor
Hold IntegerBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- neighbor
Hold StringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - neighbor
Hold IntegerDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- neighbors
List<Sdwan
Neighbor> - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - services
List<Sdwan
Service> - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - speedtest
Bypass StringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - status String
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- zones
List<Sdwan
Zone> - Configure SD-WAN zones. The structure of
zone
block is documented below.
- app
Perf numberLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- duplication
Max numberNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- duplications
Sdwan
Duplication[] - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fail
Alert SdwanInterfaces Fail Alert Interface[] - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - fail
Detect string - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- health
Checks SdwanHealth Check[] - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - load
Balance stringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - members
Sdwan
Member[] - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - neighbor
Hold numberBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- neighbor
Hold stringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - neighbor
Hold numberDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- neighbors
Sdwan
Neighbor[] - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - services
Sdwan
Service[] - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - speedtest
Bypass stringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - status string
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- zones
Sdwan
Zone[] - Configure SD-WAN zones. The structure of
zone
block is documented below.
- app_
perf_ intlog_ period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- duplication_
max_ intnum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- duplications
Sequence[Sdwan
Duplication Args] - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fail_
alert_ Sequence[Sdwaninterfaces Fail Alert Interface Args] - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - fail_
detect str - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- health_
checks Sequence[SdwanHealth Check Args] - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - load_
balance_ strmode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - members
Sequence[Sdwan
Member Args] - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - neighbor_
hold_ intboot_ time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- neighbor_
hold_ strdown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - neighbor_
hold_ intdown_ time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- neighbors
Sequence[Sdwan
Neighbor Args] - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - services
Sequence[Sdwan
Service Args] - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - speedtest_
bypass_ strrouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - status str
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- zones
Sequence[Sdwan
Zone Args] - Configure SD-WAN zones. The structure of
zone
block is documented below.
- app
Perf NumberLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- duplication
Max NumberNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- duplications List<Property Map>
- Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fail
Alert List<Property Map>Interfaces - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - fail
Detect String - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- health
Checks List<Property Map> - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - load
Balance StringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - members List<Property Map>
- FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - neighbor
Hold NumberBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- neighbor
Hold StringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - neighbor
Hold NumberDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- neighbors List<Property Map>
- Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - services List<Property Map>
- Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - speedtest
Bypass StringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - status String
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- zones List<Property Map>
- Configure SD-WAN zones. The structure of
zone
block is documented below.
Outputs
All input properties are implicitly available as output properties. Additionally, the Sdwan resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Sdwan Resource
Get an existing Sdwan resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SdwanState, opts?: CustomResourceOptions): Sdwan
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
app_perf_log_period: Optional[int] = None,
duplication_max_num: Optional[int] = None,
duplications: Optional[Sequence[SdwanDuplicationArgs]] = None,
dynamic_sort_subtable: Optional[str] = None,
fail_alert_interfaces: Optional[Sequence[SdwanFailAlertInterfaceArgs]] = None,
fail_detect: Optional[str] = None,
get_all_tables: Optional[str] = None,
health_checks: Optional[Sequence[SdwanHealthCheckArgs]] = None,
load_balance_mode: Optional[str] = None,
members: Optional[Sequence[SdwanMemberArgs]] = None,
neighbor_hold_boot_time: Optional[int] = None,
neighbor_hold_down: Optional[str] = None,
neighbor_hold_down_time: Optional[int] = None,
neighbors: Optional[Sequence[SdwanNeighborArgs]] = None,
services: Optional[Sequence[SdwanServiceArgs]] = None,
speedtest_bypass_routing: Optional[str] = None,
status: Optional[str] = None,
vdomparam: Optional[str] = None,
zones: Optional[Sequence[SdwanZoneArgs]] = None) -> Sdwan
func GetSdwan(ctx *Context, name string, id IDInput, state *SdwanState, opts ...ResourceOption) (*Sdwan, error)
public static Sdwan Get(string name, Input<string> id, SdwanState? state, CustomResourceOptions? opts = null)
public static Sdwan get(String name, Output<String> id, SdwanState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- App
Perf intLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- Duplication
Max intNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- Duplications
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Duplication> - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Fail
Alert List<Pulumiverse.Interfaces Fortios. System. Inputs. Sdwan Fail Alert Interface> - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - Fail
Detect string - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Health
Checks List<Pulumiverse.Fortios. System. Inputs. Sdwan Health Check> - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - Load
Balance stringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - Members
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Member> - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - Neighbor
Hold intBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- Neighbor
Hold stringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - Neighbor
Hold intDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- Neighbors
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Neighbor> - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - Services
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Service> - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - Speedtest
Bypass stringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - Status string
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Zones
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Zone> - Configure SD-WAN zones. The structure of
zone
block is documented below.
- App
Perf intLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- Duplication
Max intNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- Duplications
[]Sdwan
Duplication Args - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Fail
Alert []SdwanInterfaces Fail Alert Interface Args - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - Fail
Detect string - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Health
Checks []SdwanHealth Check Args - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - Load
Balance stringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - Members
[]Sdwan
Member Args - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - Neighbor
Hold intBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- Neighbor
Hold stringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - Neighbor
Hold intDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- Neighbors
[]Sdwan
Neighbor Args - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - Services
[]Sdwan
Service Args - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - Speedtest
Bypass stringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - Status string
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Zones
[]Sdwan
Zone Args - Configure SD-WAN zones. The structure of
zone
block is documented below.
- app
Perf IntegerLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- duplication
Max IntegerNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- duplications
List<Sdwan
Duplication> - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fail
Alert List<SdwanInterfaces Fail Alert Interface> - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - fail
Detect String - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- health
Checks List<SdwanHealth Check> - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - load
Balance StringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - members
List<Sdwan
Member> - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - neighbor
Hold IntegerBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- neighbor
Hold StringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - neighbor
Hold IntegerDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- neighbors
List<Sdwan
Neighbor> - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - services
List<Sdwan
Service> - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - speedtest
Bypass StringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - status String
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- zones
List<Sdwan
Zone> - Configure SD-WAN zones. The structure of
zone
block is documented below.
- app
Perf numberLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- duplication
Max numberNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- duplications
Sdwan
Duplication[] - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fail
Alert SdwanInterfaces Fail Alert Interface[] - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - fail
Detect string - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- health
Checks SdwanHealth Check[] - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - load
Balance stringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - members
Sdwan
Member[] - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - neighbor
Hold numberBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- neighbor
Hold stringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - neighbor
Hold numberDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- neighbors
Sdwan
Neighbor[] - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - services
Sdwan
Service[] - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - speedtest
Bypass stringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - status string
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- zones
Sdwan
Zone[] - Configure SD-WAN zones. The structure of
zone
block is documented below.
- app_
perf_ intlog_ period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- duplication_
max_ intnum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- duplications
Sequence[Sdwan
Duplication Args] - Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fail_
alert_ Sequence[Sdwaninterfaces Fail Alert Interface Args] - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - fail_
detect str - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- health_
checks Sequence[SdwanHealth Check Args] - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - load_
balance_ strmode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - members
Sequence[Sdwan
Member Args] - FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - neighbor_
hold_ intboot_ time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- neighbor_
hold_ strdown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - neighbor_
hold_ intdown_ time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- neighbors
Sequence[Sdwan
Neighbor Args] - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - services
Sequence[Sdwan
Service Args] - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - speedtest_
bypass_ strrouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - status str
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- zones
Sequence[Sdwan
Zone Args] - Configure SD-WAN zones. The structure of
zone
block is documented below.
- app
Perf NumberLog Period - Time interval in seconds that applicationperformance logs are generated (0 - 3600, default = 0).
- duplication
Max NumberNum - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4, default = 2; if set to 3, the original packet plus 2 more copies are created).
- duplications List<Property Map>
- Create SD-WAN duplication rule. The structure of
duplication
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- fail
Alert List<Property Map>Interfaces - Physical interfaces that will be alerted. The structure of
fail_alert_interfaces
block is documented below. - fail
Detect String - Enable/disable SD-WAN Internet connection status checking (failure detection). Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- health
Checks List<Property Map> - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. The structure of
health_check
block is documented below. - load
Balance StringMode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. Valid values:
source-ip-based
,weight-based
,usage-based
,source-dest-ip-based
,measured-volume-based
. - members List<Property Map>
- FortiGate interfaces added to the SD-WAN. The structure of
members
block is documented below. - neighbor
Hold NumberBoot Time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000, default = 0).
- neighbor
Hold StringDown - Enable/disable hold switching from the secondary neighbor to the primary neighbor. Valid values:
enable
,disable
. - neighbor
Hold NumberDown Time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000, default = 0).
- neighbors List<Property Map>
- Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. The structure of
neighbor
block is documented below. - services List<Property Map>
- Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. The structure of
service
block is documented below. - speedtest
Bypass StringRouting - Enable/disable bypass routing when speedtest on a SD-WAN member. Valid values:
disable
,enable
. - status String
- Enable/disable SD-WAN. Valid values:
disable
,enable
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- zones List<Property Map>
- Configure SD-WAN zones. The structure of
zone
block is documented below.
Supporting Types
SdwanDuplication, SdwanDuplicationArgs
- Dstaddr6s
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Duplication Dstaddr6> - Destination address6 or address6 group names. The structure of
dstaddr6
block is documented below. - Dstaddrs
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Duplication Dstaddr> - Destination address or address group names. The structure of
dstaddr
block is documented below. - Dstintfs
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Duplication Dstintf> - Outgoing (egress) interfaces or zones. The structure of
dstintf
block is documented below. - Id int
- Duplication rule ID (1 - 255).
- Packet
De stringDuplication - Enable/disable discarding of packets that have been duplicated. Valid values:
enable
,disable
. - Packet
Duplication string - Configure packet duplication method. Valid values:
disable
,force
,on-demand
. - Service
Ids List<Pulumiverse.Fortios. System. Inputs. Sdwan Duplication Service Id> - SD-WAN service rule ID list. The structure of
service_id
block is documented below. - Services
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Duplication Service> - Service and service group name. The structure of
service
block is documented below. - Sla
Match stringService - Enable/disable packet duplication matching health-check SLAs in service rule. Valid values:
enable
,disable
. - Srcaddr6s
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Duplication Srcaddr6> - Source address6 or address6 group names. The structure of
srcaddr6
block is documented below. - Srcaddrs
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Duplication Srcaddr> - Source address or address group names. The structure of
srcaddr
block is documented below. - Srcintfs
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Duplication Srcintf> - Incoming (ingress) interfaces or zones. The structure of
srcintf
block is documented below.
- Dstaddr6s
[]Sdwan
Duplication Dstaddr6 - Destination address6 or address6 group names. The structure of
dstaddr6
block is documented below. - Dstaddrs
[]Sdwan
Duplication Dstaddr - Destination address or address group names. The structure of
dstaddr
block is documented below. - Dstintfs
[]Sdwan
Duplication Dstintf - Outgoing (egress) interfaces or zones. The structure of
dstintf
block is documented below. - Id int
- Duplication rule ID (1 - 255).
- Packet
De stringDuplication - Enable/disable discarding of packets that have been duplicated. Valid values:
enable
,disable
. - Packet
Duplication string - Configure packet duplication method. Valid values:
disable
,force
,on-demand
. - Service
Ids []SdwanDuplication Service Id - SD-WAN service rule ID list. The structure of
service_id
block is documented below. - Services
[]Sdwan
Duplication Service - Service and service group name. The structure of
service
block is documented below. - Sla
Match stringService - Enable/disable packet duplication matching health-check SLAs in service rule. Valid values:
enable
,disable
. - Srcaddr6s
[]Sdwan
Duplication Srcaddr6 - Source address6 or address6 group names. The structure of
srcaddr6
block is documented below. - Srcaddrs
[]Sdwan
Duplication Srcaddr - Source address or address group names. The structure of
srcaddr
block is documented below. - Srcintfs
[]Sdwan
Duplication Srcintf - Incoming (ingress) interfaces or zones. The structure of
srcintf
block is documented below.
- dstaddr6s
List<Sdwan
Duplication Dstaddr6> - Destination address6 or address6 group names. The structure of
dstaddr6
block is documented below. - dstaddrs
List<Sdwan
Duplication Dstaddr> - Destination address or address group names. The structure of
dstaddr
block is documented below. - dstintfs
List<Sdwan
Duplication Dstintf> - Outgoing (egress) interfaces or zones. The structure of
dstintf
block is documented below. - id Integer
- Duplication rule ID (1 - 255).
- packet
De StringDuplication - Enable/disable discarding of packets that have been duplicated. Valid values:
enable
,disable
. - packet
Duplication String - Configure packet duplication method. Valid values:
disable
,force
,on-demand
. - service
Ids List<SdwanDuplication Service Id> - SD-WAN service rule ID list. The structure of
service_id
block is documented below. - services
List<Sdwan
Duplication Service> - Service and service group name. The structure of
service
block is documented below. - sla
Match StringService - Enable/disable packet duplication matching health-check SLAs in service rule. Valid values:
enable
,disable
. - srcaddr6s
List<Sdwan
Duplication Srcaddr6> - Source address6 or address6 group names. The structure of
srcaddr6
block is documented below. - srcaddrs
List<Sdwan
Duplication Srcaddr> - Source address or address group names. The structure of
srcaddr
block is documented below. - srcintfs
List<Sdwan
Duplication Srcintf> - Incoming (ingress) interfaces or zones. The structure of
srcintf
block is documented below.
- dstaddr6s
Sdwan
Duplication Dstaddr6[] - Destination address6 or address6 group names. The structure of
dstaddr6
block is documented below. - dstaddrs
Sdwan
Duplication Dstaddr[] - Destination address or address group names. The structure of
dstaddr
block is documented below. - dstintfs
Sdwan
Duplication Dstintf[] - Outgoing (egress) interfaces or zones. The structure of
dstintf
block is documented below. - id number
- Duplication rule ID (1 - 255).
- packet
De stringDuplication - Enable/disable discarding of packets that have been duplicated. Valid values:
enable
,disable
. - packet
Duplication string - Configure packet duplication method. Valid values:
disable
,force
,on-demand
. - service
Ids SdwanDuplication Service Id[] - SD-WAN service rule ID list. The structure of
service_id
block is documented below. - services
Sdwan
Duplication Service[] - Service and service group name. The structure of
service
block is documented below. - sla
Match stringService - Enable/disable packet duplication matching health-check SLAs in service rule. Valid values:
enable
,disable
. - srcaddr6s
Sdwan
Duplication Srcaddr6[] - Source address6 or address6 group names. The structure of
srcaddr6
block is documented below. - srcaddrs
Sdwan
Duplication Srcaddr[] - Source address or address group names. The structure of
srcaddr
block is documented below. - srcintfs
Sdwan
Duplication Srcintf[] - Incoming (ingress) interfaces or zones. The structure of
srcintf
block is documented below.
- dstaddr6s
Sequence[Sdwan
Duplication Dstaddr6] - Destination address6 or address6 group names. The structure of
dstaddr6
block is documented below. - dstaddrs
Sequence[Sdwan
Duplication Dstaddr] - Destination address or address group names. The structure of
dstaddr
block is documented below. - dstintfs
Sequence[Sdwan
Duplication Dstintf] - Outgoing (egress) interfaces or zones. The structure of
dstintf
block is documented below. - id int
- Duplication rule ID (1 - 255).
- packet_
de_ strduplication - Enable/disable discarding of packets that have been duplicated. Valid values:
enable
,disable
. - packet_
duplication str - Configure packet duplication method. Valid values:
disable
,force
,on-demand
. - service_
ids Sequence[SdwanDuplication Service Id] - SD-WAN service rule ID list. The structure of
service_id
block is documented below. - services
Sequence[Sdwan
Duplication Service] - Service and service group name. The structure of
service
block is documented below. - sla_
match_ strservice - Enable/disable packet duplication matching health-check SLAs in service rule. Valid values:
enable
,disable
. - srcaddr6s
Sequence[Sdwan
Duplication Srcaddr6] - Source address6 or address6 group names. The structure of
srcaddr6
block is documented below. - srcaddrs
Sequence[Sdwan
Duplication Srcaddr] - Source address or address group names. The structure of
srcaddr
block is documented below. - srcintfs
Sequence[Sdwan
Duplication Srcintf] - Incoming (ingress) interfaces or zones. The structure of
srcintf
block is documented below.
- dstaddr6s List<Property Map>
- Destination address6 or address6 group names. The structure of
dstaddr6
block is documented below. - dstaddrs List<Property Map>
- Destination address or address group names. The structure of
dstaddr
block is documented below. - dstintfs List<Property Map>
- Outgoing (egress) interfaces or zones. The structure of
dstintf
block is documented below. - id Number
- Duplication rule ID (1 - 255).
- packet
De StringDuplication - Enable/disable discarding of packets that have been duplicated. Valid values:
enable
,disable
. - packet
Duplication String - Configure packet duplication method. Valid values:
disable
,force
,on-demand
. - service
Ids List<Property Map> - SD-WAN service rule ID list. The structure of
service_id
block is documented below. - services List<Property Map>
- Service and service group name. The structure of
service
block is documented below. - sla
Match StringService - Enable/disable packet duplication matching health-check SLAs in service rule. Valid values:
enable
,disable
. - srcaddr6s List<Property Map>
- Source address6 or address6 group names. The structure of
srcaddr6
block is documented below. - srcaddrs List<Property Map>
- Source address or address group names. The structure of
srcaddr
block is documented below. - srcintfs List<Property Map>
- Incoming (ingress) interfaces or zones. The structure of
srcintf
block is documented below.
SdwanDuplicationDstaddr, SdwanDuplicationDstaddrArgs
- Name string
- Address6 or address6 group name.
- Name string
- Address6 or address6 group name.
- name String
- Address6 or address6 group name.
- name string
- Address6 or address6 group name.
- name str
- Address6 or address6 group name.
- name String
- Address6 or address6 group name.
SdwanDuplicationDstaddr6, SdwanDuplicationDstaddr6Args
- Name string
- Name string
- name String
- name string
- name str
- name String
SdwanDuplicationDstintf, SdwanDuplicationDstintfArgs
- Name string
- Interface, zone or SDWAN zone name.
- Name string
- Interface, zone or SDWAN zone name.
- name String
- Interface, zone or SDWAN zone name.
- name string
- Interface, zone or SDWAN zone name.
- name str
- Interface, zone or SDWAN zone name.
- name String
- Interface, zone or SDWAN zone name.
SdwanDuplicationService, SdwanDuplicationServiceArgs
- Name string
- Service and service group name.
- Name string
- Service and service group name.
- name String
- Service and service group name.
- name string
- Service and service group name.
- name str
- Service and service group name.
- name String
- Service and service group name.
SdwanDuplicationServiceId, SdwanDuplicationServiceIdArgs
- Id int
- SD-WAN service rule ID.
- Id int
- SD-WAN service rule ID.
- id Integer
- SD-WAN service rule ID.
- id number
- SD-WAN service rule ID.
- id int
- SD-WAN service rule ID.
- id Number
- SD-WAN service rule ID.
SdwanDuplicationSrcaddr, SdwanDuplicationSrcaddrArgs
- Name string
- Address or address group name.
- Name string
- Address or address group name.
- name String
- Address or address group name.
- name string
- Address or address group name.
- name str
- Address or address group name.
- name String
- Address or address group name.
SdwanDuplicationSrcaddr6, SdwanDuplicationSrcaddr6Args
- Name string
- Name string
- name String
- name string
- name str
- name String
SdwanDuplicationSrcintf, SdwanDuplicationSrcintfArgs
- Name string
- Interface, zone or SDWAN zone name.
- Name string
- Interface, zone or SDWAN zone name.
- name String
- Interface, zone or SDWAN zone name.
- name string
- Interface, zone or SDWAN zone name.
- name str
- Interface, zone or SDWAN zone name.
- name String
- Interface, zone or SDWAN zone name.
SdwanFailAlertInterface, SdwanFailAlertInterfaceArgs
- Name string
- Physical interface name.
- Name string
- Physical interface name.
- name String
- Physical interface name.
- name string
- Physical interface name.
- name str
- Physical interface name.
- name String
- Physical interface name.
SdwanHealthCheck, SdwanHealthCheckArgs
- Addr
Mode string - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - Class
Id int - Traffic class ID.
- Detect
Mode string - The mode determining how to detect the server.
- Diffservcode string
- Differentiated services code point (DSCP) in the IP header of the probe packet.
- Dns
Match stringIp - Response IP expected from DNS server if the protocol is DNS.
- Dns
Request stringDomain - Fully qualified domain name to resolve for the DNS probe.
- Embed
Measured stringHealth - Enable/disable embedding measured health information. Valid values:
enable
,disable
. - Failtime int
- Number of failures before server is considered lost (1 - 3600, default = 5).
- Ftp
File string - Full path and file name on the FTP server to download for FTP health-check to probe.
- Ftp
Mode string - FTP mode. Valid values:
passive
,port
. - Ha
Priority int - HA election priority (1 - 50).
- Http
Agent string - String in the http-agent field in the HTTP header.
- Http
Get string - URL used to communicate with the server if the protocol if the protocol is HTTP.
- Http
Match string - Response string expected from the server if the protocol is HTTP.
- Interval int
- Status check interval in milliseconds, or the time between attempting to connect to the server (default = 500). On FortiOS versions 6.4.1-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- Members
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Health Check Member> - Member sequence number list. The structure of
members
block is documented below. - Mos
Codec string - Codec to use for MOS calculation (default = g711). Valid values:
g711
,g722
,g729
. - Name string
- Health check name.
- Packet
Size int - Packet size of a TWAMP test session. (124/158 - 1024)
- Password string
- Twamp controller password in authentication mode
- Port int
- Port number used to communicate with the server over the selected protocol (0 - 65535, default = 0, auto select. http, tcp-connect: 80, udp-echo, tcp-echo: 7, dns: 53, ftp: 21, twamp: 862).
- Probe
Count int - Number of most recent probes that should be used to calculate latency and jitter (5 - 30, default = 30).
- Probe
Packets string - Enable/disable transmission of probe packets. Valid values:
disable
,enable
. - Probe
Timeout int - Time to wait before a probe packet is considered lost (default = 500). On FortiOS versions 6.4.2-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 6.4.1: 500 - 5000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- Protocol string
- Protocol used to determine if the FortiGate can communicate with the server.
- Quality
Measured stringMethod - Method to measure the quality of tcp-connect. Valid values:
half-open
,half-close
. - Recoverytime int
- Number of successful responses received before server is considered recovered (1 - 3600, default = 5).
- Security
Mode string - Twamp controller security mode. Valid values:
none
,authentication
. - Server string
- IP address or FQDN name of the server.
- Sla
Fail intLog Period - Time interval in seconds that SLA fail log messages will be generated (0 - 3600, default = 0).
- Sla
Id intRedistribute - Select the ID from the SLA sub-table. The selected SLA's priority value will be distributed into the routing table (0 - 32, default = 0).
- Sla
Pass intLog Period - Time interval in seconds that SLA pass log messages will be generated (0 - 3600, default = 0).
- Slas
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Health Check Sla> - Service level agreement (SLA). The structure of
sla
block is documented below. - Source string
- Source IP address used in the health-check packet to the server.
- Source6 string
- Source IPv6 addressused in the health-check packet to server.
- System
Dns string - Enable/disable system DNS as the probe server. Valid values:
disable
,enable
. - Threshold
Alert intJitter - Alert threshold for jitter (ms, default = 0).
- Threshold
Alert intLatency - Alert threshold for latency (ms, default = 0).
- Threshold
Alert intPacketloss - Alert threshold for packet loss (percentage, default = 0).
- Threshold
Warning intJitter - Warning threshold for jitter (ms, default = 0).
- Threshold
Warning intLatency - Warning threshold for latency (ms, default = 0).
- Threshold
Warning intPacketloss - Warning threshold for packet loss (percentage, default = 0).
- Update
Cascade stringInterface - Enable/disable update cascade interface. Valid values:
enable
,disable
. - Update
Static stringRoute - Enable/disable updating the static route. Valid values:
enable
,disable
. - User string
- The user name to access probe server.
- Vrf int
- Virtual Routing Forwarding ID.
- Addr
Mode string - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - Class
Id int - Traffic class ID.
- Detect
Mode string - The mode determining how to detect the server.
- Diffservcode string
- Differentiated services code point (DSCP) in the IP header of the probe packet.
- Dns
Match stringIp - Response IP expected from DNS server if the protocol is DNS.
- Dns
Request stringDomain - Fully qualified domain name to resolve for the DNS probe.
- Embed
Measured stringHealth - Enable/disable embedding measured health information. Valid values:
enable
,disable
. - Failtime int
- Number of failures before server is considered lost (1 - 3600, default = 5).
- Ftp
File string - Full path and file name on the FTP server to download for FTP health-check to probe.
- Ftp
Mode string - FTP mode. Valid values:
passive
,port
. - Ha
Priority int - HA election priority (1 - 50).
- Http
Agent string - String in the http-agent field in the HTTP header.
- Http
Get string - URL used to communicate with the server if the protocol if the protocol is HTTP.
- Http
Match string - Response string expected from the server if the protocol is HTTP.
- Interval int
- Status check interval in milliseconds, or the time between attempting to connect to the server (default = 500). On FortiOS versions 6.4.1-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- Members
[]Sdwan
Health Check Member - Member sequence number list. The structure of
members
block is documented below. - Mos
Codec string - Codec to use for MOS calculation (default = g711). Valid values:
g711
,g722
,g729
. - Name string
- Health check name.
- Packet
Size int - Packet size of a TWAMP test session. (124/158 - 1024)
- Password string
- Twamp controller password in authentication mode
- Port int
- Port number used to communicate with the server over the selected protocol (0 - 65535, default = 0, auto select. http, tcp-connect: 80, udp-echo, tcp-echo: 7, dns: 53, ftp: 21, twamp: 862).
- Probe
Count int - Number of most recent probes that should be used to calculate latency and jitter (5 - 30, default = 30).
- Probe
Packets string - Enable/disable transmission of probe packets. Valid values:
disable
,enable
. - Probe
Timeout int - Time to wait before a probe packet is considered lost (default = 500). On FortiOS versions 6.4.2-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 6.4.1: 500 - 5000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- Protocol string
- Protocol used to determine if the FortiGate can communicate with the server.
- Quality
Measured stringMethod - Method to measure the quality of tcp-connect. Valid values:
half-open
,half-close
. - Recoverytime int
- Number of successful responses received before server is considered recovered (1 - 3600, default = 5).
- Security
Mode string - Twamp controller security mode. Valid values:
none
,authentication
. - Server string
- IP address or FQDN name of the server.
- Sla
Fail intLog Period - Time interval in seconds that SLA fail log messages will be generated (0 - 3600, default = 0).
- Sla
Id intRedistribute - Select the ID from the SLA sub-table. The selected SLA's priority value will be distributed into the routing table (0 - 32, default = 0).
- Sla
Pass intLog Period - Time interval in seconds that SLA pass log messages will be generated (0 - 3600, default = 0).
- Slas
[]Sdwan
Health Check Sla - Service level agreement (SLA). The structure of
sla
block is documented below. - Source string
- Source IP address used in the health-check packet to the server.
- Source6 string
- Source IPv6 addressused in the health-check packet to server.
- System
Dns string - Enable/disable system DNS as the probe server. Valid values:
disable
,enable
. - Threshold
Alert intJitter - Alert threshold for jitter (ms, default = 0).
- Threshold
Alert intLatency - Alert threshold for latency (ms, default = 0).
- Threshold
Alert intPacketloss - Alert threshold for packet loss (percentage, default = 0).
- Threshold
Warning intJitter - Warning threshold for jitter (ms, default = 0).
- Threshold
Warning intLatency - Warning threshold for latency (ms, default = 0).
- Threshold
Warning intPacketloss - Warning threshold for packet loss (percentage, default = 0).
- Update
Cascade stringInterface - Enable/disable update cascade interface. Valid values:
enable
,disable
. - Update
Static stringRoute - Enable/disable updating the static route. Valid values:
enable
,disable
. - User string
- The user name to access probe server.
- Vrf int
- Virtual Routing Forwarding ID.
- addr
Mode String - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - class
Id Integer - Traffic class ID.
- detect
Mode String - The mode determining how to detect the server.
- diffservcode String
- Differentiated services code point (DSCP) in the IP header of the probe packet.
- dns
Match StringIp - Response IP expected from DNS server if the protocol is DNS.
- dns
Request StringDomain - Fully qualified domain name to resolve for the DNS probe.
- embed
Measured StringHealth - Enable/disable embedding measured health information. Valid values:
enable
,disable
. - failtime Integer
- Number of failures before server is considered lost (1 - 3600, default = 5).
- ftp
File String - Full path and file name on the FTP server to download for FTP health-check to probe.
- ftp
Mode String - FTP mode. Valid values:
passive
,port
. - ha
Priority Integer - HA election priority (1 - 50).
- http
Agent String - String in the http-agent field in the HTTP header.
- http
Get String - URL used to communicate with the server if the protocol if the protocol is HTTP.
- http
Match String - Response string expected from the server if the protocol is HTTP.
- interval Integer
- Status check interval in milliseconds, or the time between attempting to connect to the server (default = 500). On FortiOS versions 6.4.1-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- members
List<Sdwan
Health Check Member> - Member sequence number list. The structure of
members
block is documented below. - mos
Codec String - Codec to use for MOS calculation (default = g711). Valid values:
g711
,g722
,g729
. - name String
- Health check name.
- packet
Size Integer - Packet size of a TWAMP test session. (124/158 - 1024)
- password String
- Twamp controller password in authentication mode
- port Integer
- Port number used to communicate with the server over the selected protocol (0 - 65535, default = 0, auto select. http, tcp-connect: 80, udp-echo, tcp-echo: 7, dns: 53, ftp: 21, twamp: 862).
- probe
Count Integer - Number of most recent probes that should be used to calculate latency and jitter (5 - 30, default = 30).
- probe
Packets String - Enable/disable transmission of probe packets. Valid values:
disable
,enable
. - probe
Timeout Integer - Time to wait before a probe packet is considered lost (default = 500). On FortiOS versions 6.4.2-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 6.4.1: 500 - 5000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- protocol String
- Protocol used to determine if the FortiGate can communicate with the server.
- quality
Measured StringMethod - Method to measure the quality of tcp-connect. Valid values:
half-open
,half-close
. - recoverytime Integer
- Number of successful responses received before server is considered recovered (1 - 3600, default = 5).
- security
Mode String - Twamp controller security mode. Valid values:
none
,authentication
. - server String
- IP address or FQDN name of the server.
- sla
Fail IntegerLog Period - Time interval in seconds that SLA fail log messages will be generated (0 - 3600, default = 0).
- sla
Id IntegerRedistribute - Select the ID from the SLA sub-table. The selected SLA's priority value will be distributed into the routing table (0 - 32, default = 0).
- sla
Pass IntegerLog Period - Time interval in seconds that SLA pass log messages will be generated (0 - 3600, default = 0).
- slas
List<Sdwan
Health Check Sla> - Service level agreement (SLA). The structure of
sla
block is documented below. - source String
- Source IP address used in the health-check packet to the server.
- source6 String
- Source IPv6 addressused in the health-check packet to server.
- system
Dns String - Enable/disable system DNS as the probe server. Valid values:
disable
,enable
. - threshold
Alert IntegerJitter - Alert threshold for jitter (ms, default = 0).
- threshold
Alert IntegerLatency - Alert threshold for latency (ms, default = 0).
- threshold
Alert IntegerPacketloss - Alert threshold for packet loss (percentage, default = 0).
- threshold
Warning IntegerJitter - Warning threshold for jitter (ms, default = 0).
- threshold
Warning IntegerLatency - Warning threshold for latency (ms, default = 0).
- threshold
Warning IntegerPacketloss - Warning threshold for packet loss (percentage, default = 0).
- update
Cascade StringInterface - Enable/disable update cascade interface. Valid values:
enable
,disable
. - update
Static StringRoute - Enable/disable updating the static route. Valid values:
enable
,disable
. - user String
- The user name to access probe server.
- vrf Integer
- Virtual Routing Forwarding ID.
- addr
Mode string - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - class
Id number - Traffic class ID.
- detect
Mode string - The mode determining how to detect the server.
- diffservcode string
- Differentiated services code point (DSCP) in the IP header of the probe packet.
- dns
Match stringIp - Response IP expected from DNS server if the protocol is DNS.
- dns
Request stringDomain - Fully qualified domain name to resolve for the DNS probe.
- embed
Measured stringHealth - Enable/disable embedding measured health information. Valid values:
enable
,disable
. - failtime number
- Number of failures before server is considered lost (1 - 3600, default = 5).
- ftp
File string - Full path and file name on the FTP server to download for FTP health-check to probe.
- ftp
Mode string - FTP mode. Valid values:
passive
,port
. - ha
Priority number - HA election priority (1 - 50).
- http
Agent string - String in the http-agent field in the HTTP header.
- http
Get string - URL used to communicate with the server if the protocol if the protocol is HTTP.
- http
Match string - Response string expected from the server if the protocol is HTTP.
- interval number
- Status check interval in milliseconds, or the time between attempting to connect to the server (default = 500). On FortiOS versions 6.4.1-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- members
Sdwan
Health Check Member[] - Member sequence number list. The structure of
members
block is documented below. - mos
Codec string - Codec to use for MOS calculation (default = g711). Valid values:
g711
,g722
,g729
. - name string
- Health check name.
- packet
Size number - Packet size of a TWAMP test session. (124/158 - 1024)
- password string
- Twamp controller password in authentication mode
- port number
- Port number used to communicate with the server over the selected protocol (0 - 65535, default = 0, auto select. http, tcp-connect: 80, udp-echo, tcp-echo: 7, dns: 53, ftp: 21, twamp: 862).
- probe
Count number - Number of most recent probes that should be used to calculate latency and jitter (5 - 30, default = 30).
- probe
Packets string - Enable/disable transmission of probe packets. Valid values:
disable
,enable
. - probe
Timeout number - Time to wait before a probe packet is considered lost (default = 500). On FortiOS versions 6.4.2-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 6.4.1: 500 - 5000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- protocol string
- Protocol used to determine if the FortiGate can communicate with the server.
- quality
Measured stringMethod - Method to measure the quality of tcp-connect. Valid values:
half-open
,half-close
. - recoverytime number
- Number of successful responses received before server is considered recovered (1 - 3600, default = 5).
- security
Mode string - Twamp controller security mode. Valid values:
none
,authentication
. - server string
- IP address or FQDN name of the server.
- sla
Fail numberLog Period - Time interval in seconds that SLA fail log messages will be generated (0 - 3600, default = 0).
- sla
Id numberRedistribute - Select the ID from the SLA sub-table. The selected SLA's priority value will be distributed into the routing table (0 - 32, default = 0).
- sla
Pass numberLog Period - Time interval in seconds that SLA pass log messages will be generated (0 - 3600, default = 0).
- slas
Sdwan
Health Check Sla[] - Service level agreement (SLA). The structure of
sla
block is documented below. - source string
- Source IP address used in the health-check packet to the server.
- source6 string
- Source IPv6 addressused in the health-check packet to server.
- system
Dns string - Enable/disable system DNS as the probe server. Valid values:
disable
,enable
. - threshold
Alert numberJitter - Alert threshold for jitter (ms, default = 0).
- threshold
Alert numberLatency - Alert threshold for latency (ms, default = 0).
- threshold
Alert numberPacketloss - Alert threshold for packet loss (percentage, default = 0).
- threshold
Warning numberJitter - Warning threshold for jitter (ms, default = 0).
- threshold
Warning numberLatency - Warning threshold for latency (ms, default = 0).
- threshold
Warning numberPacketloss - Warning threshold for packet loss (percentage, default = 0).
- update
Cascade stringInterface - Enable/disable update cascade interface. Valid values:
enable
,disable
. - update
Static stringRoute - Enable/disable updating the static route. Valid values:
enable
,disable
. - user string
- The user name to access probe server.
- vrf number
- Virtual Routing Forwarding ID.
- addr_
mode str - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - class_
id int - Traffic class ID.
- detect_
mode str - The mode determining how to detect the server.
- diffservcode str
- Differentiated services code point (DSCP) in the IP header of the probe packet.
- dns_
match_ strip - Response IP expected from DNS server if the protocol is DNS.
- dns_
request_ strdomain - Fully qualified domain name to resolve for the DNS probe.
- embed_
measured_ strhealth - Enable/disable embedding measured health information. Valid values:
enable
,disable
. - failtime int
- Number of failures before server is considered lost (1 - 3600, default = 5).
- ftp_
file str - Full path and file name on the FTP server to download for FTP health-check to probe.
- ftp_
mode str - FTP mode. Valid values:
passive
,port
. - ha_
priority int - HA election priority (1 - 50).
- http_
agent str - String in the http-agent field in the HTTP header.
- http_
get str - URL used to communicate with the server if the protocol if the protocol is HTTP.
- http_
match str - Response string expected from the server if the protocol is HTTP.
- interval int
- Status check interval in milliseconds, or the time between attempting to connect to the server (default = 500). On FortiOS versions 6.4.1-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- members
Sequence[Sdwan
Health Check Member] - Member sequence number list. The structure of
members
block is documented below. - mos_
codec str - Codec to use for MOS calculation (default = g711). Valid values:
g711
,g722
,g729
. - name str
- Health check name.
- packet_
size int - Packet size of a TWAMP test session. (124/158 - 1024)
- password str
- Twamp controller password in authentication mode
- port int
- Port number used to communicate with the server over the selected protocol (0 - 65535, default = 0, auto select. http, tcp-connect: 80, udp-echo, tcp-echo: 7, dns: 53, ftp: 21, twamp: 862).
- probe_
count int - Number of most recent probes that should be used to calculate latency and jitter (5 - 30, default = 30).
- probe_
packets str - Enable/disable transmission of probe packets. Valid values:
disable
,enable
. - probe_
timeout int - Time to wait before a probe packet is considered lost (default = 500). On FortiOS versions 6.4.2-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 6.4.1: 500 - 5000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- protocol str
- Protocol used to determine if the FortiGate can communicate with the server.
- quality_
measured_ strmethod - Method to measure the quality of tcp-connect. Valid values:
half-open
,half-close
. - recoverytime int
- Number of successful responses received before server is considered recovered (1 - 3600, default = 5).
- security_
mode str - Twamp controller security mode. Valid values:
none
,authentication
. - server str
- IP address or FQDN name of the server.
- sla_
fail_ intlog_ period - Time interval in seconds that SLA fail log messages will be generated (0 - 3600, default = 0).
- sla_
id_ intredistribute - Select the ID from the SLA sub-table. The selected SLA's priority value will be distributed into the routing table (0 - 32, default = 0).
- sla_
pass_ intlog_ period - Time interval in seconds that SLA pass log messages will be generated (0 - 3600, default = 0).
- slas
Sequence[Sdwan
Health Check Sla] - Service level agreement (SLA). The structure of
sla
block is documented below. - source str
- Source IP address used in the health-check packet to the server.
- source6 str
- Source IPv6 addressused in the health-check packet to server.
- system_
dns str - Enable/disable system DNS as the probe server. Valid values:
disable
,enable
. - threshold_
alert_ intjitter - Alert threshold for jitter (ms, default = 0).
- threshold_
alert_ intlatency - Alert threshold for latency (ms, default = 0).
- threshold_
alert_ intpacketloss - Alert threshold for packet loss (percentage, default = 0).
- threshold_
warning_ intjitter - Warning threshold for jitter (ms, default = 0).
- threshold_
warning_ intlatency - Warning threshold for latency (ms, default = 0).
- threshold_
warning_ intpacketloss - Warning threshold for packet loss (percentage, default = 0).
- update_
cascade_ strinterface - Enable/disable update cascade interface. Valid values:
enable
,disable
. - update_
static_ strroute - Enable/disable updating the static route. Valid values:
enable
,disable
. - user str
- The user name to access probe server.
- vrf int
- Virtual Routing Forwarding ID.
- addr
Mode String - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - class
Id Number - Traffic class ID.
- detect
Mode String - The mode determining how to detect the server.
- diffservcode String
- Differentiated services code point (DSCP) in the IP header of the probe packet.
- dns
Match StringIp - Response IP expected from DNS server if the protocol is DNS.
- dns
Request StringDomain - Fully qualified domain name to resolve for the DNS probe.
- embed
Measured StringHealth - Enable/disable embedding measured health information. Valid values:
enable
,disable
. - failtime Number
- Number of failures before server is considered lost (1 - 3600, default = 5).
- ftp
File String - Full path and file name on the FTP server to download for FTP health-check to probe.
- ftp
Mode String - FTP mode. Valid values:
passive
,port
. - ha
Priority Number - HA election priority (1 - 50).
- http
Agent String - String in the http-agent field in the HTTP header.
- http
Get String - URL used to communicate with the server if the protocol if the protocol is HTTP.
- http
Match String - Response string expected from the server if the protocol is HTTP.
- interval Number
- Status check interval in milliseconds, or the time between attempting to connect to the server (default = 500). On FortiOS versions 6.4.1-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- members List<Property Map>
- Member sequence number list. The structure of
members
block is documented below. - mos
Codec String - Codec to use for MOS calculation (default = g711). Valid values:
g711
,g722
,g729
. - name String
- Health check name.
- packet
Size Number - Packet size of a TWAMP test session. (124/158 - 1024)
- password String
- Twamp controller password in authentication mode
- port Number
- Port number used to communicate with the server over the selected protocol (0 - 65535, default = 0, auto select. http, tcp-connect: 80, udp-echo, tcp-echo: 7, dns: 53, ftp: 21, twamp: 862).
- probe
Count Number - Number of most recent probes that should be used to calculate latency and jitter (5 - 30, default = 30).
- probe
Packets String - Enable/disable transmission of probe packets. Valid values:
disable
,enable
. - probe
Timeout Number - Time to wait before a probe packet is considered lost (default = 500). On FortiOS versions 6.4.2-7.0.10, 7.2.0-7.2.4: 500 - 36001000 msec. On FortiOS versions 6.4.1: 500 - 5000 msec. On FortiOS versions 7.0.11-7.0.15, >= 7.2.6: 20 - 36001000 msec.
- protocol String
- Protocol used to determine if the FortiGate can communicate with the server.
- quality
Measured StringMethod - Method to measure the quality of tcp-connect. Valid values:
half-open
,half-close
. - recoverytime Number
- Number of successful responses received before server is considered recovered (1 - 3600, default = 5).
- security
Mode String - Twamp controller security mode. Valid values:
none
,authentication
. - server String
- IP address or FQDN name of the server.
- sla
Fail NumberLog Period - Time interval in seconds that SLA fail log messages will be generated (0 - 3600, default = 0).
- sla
Id NumberRedistribute - Select the ID from the SLA sub-table. The selected SLA's priority value will be distributed into the routing table (0 - 32, default = 0).
- sla
Pass NumberLog Period - Time interval in seconds that SLA pass log messages will be generated (0 - 3600, default = 0).
- slas List<Property Map>
- Service level agreement (SLA). The structure of
sla
block is documented below. - source String
- Source IP address used in the health-check packet to the server.
- source6 String
- Source IPv6 addressused in the health-check packet to server.
- system
Dns String - Enable/disable system DNS as the probe server. Valid values:
disable
,enable
. - threshold
Alert NumberJitter - Alert threshold for jitter (ms, default = 0).
- threshold
Alert NumberLatency - Alert threshold for latency (ms, default = 0).
- threshold
Alert NumberPacketloss - Alert threshold for packet loss (percentage, default = 0).
- threshold
Warning NumberJitter - Warning threshold for jitter (ms, default = 0).
- threshold
Warning NumberLatency - Warning threshold for latency (ms, default = 0).
- threshold
Warning NumberPacketloss - Warning threshold for packet loss (percentage, default = 0).
- update
Cascade StringInterface - Enable/disable update cascade interface. Valid values:
enable
,disable
. - update
Static StringRoute - Enable/disable updating the static route. Valid values:
enable
,disable
. - user String
- The user name to access probe server.
- vrf Number
- Virtual Routing Forwarding ID.
SdwanHealthCheckMember, SdwanHealthCheckMemberArgs
- Seq
Num int - Member sequence number.
- Seq
Num int - Member sequence number.
- seq
Num Integer - Member sequence number.
- seq
Num number - Member sequence number.
- seq_
num int - Member sequence number.
- seq
Num Number - Member sequence number.
SdwanHealthCheckSla, SdwanHealthCheckSlaArgs
- Id int
- SLA ID.
- Jitter
Threshold int - Jitter for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- Latency
Threshold int - Latency for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- Link
Cost stringFactor - Criteria on which to base link selection.
- Mos
Threshold string - Minimum Mean Opinion Score for SLA to be marked as pass. (1.0 - 5.0, default = 3.6).
- Packetloss
Threshold int - Packet loss for SLA to make decision in percentage. (0 - 100, default = 0).
- Priority
In intSla - Value to be distributed into routing table when in-sla (0 - 65535, default = 0).
- Priority
Out intSla - Value to be distributed into routing table when out-sla (0 - 65535, default = 0).
- Id int
- SLA ID.
- Jitter
Threshold int - Jitter for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- Latency
Threshold int - Latency for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- Link
Cost stringFactor - Criteria on which to base link selection.
- Mos
Threshold string - Minimum Mean Opinion Score for SLA to be marked as pass. (1.0 - 5.0, default = 3.6).
- Packetloss
Threshold int - Packet loss for SLA to make decision in percentage. (0 - 100, default = 0).
- Priority
In intSla - Value to be distributed into routing table when in-sla (0 - 65535, default = 0).
- Priority
Out intSla - Value to be distributed into routing table when out-sla (0 - 65535, default = 0).
- id Integer
- SLA ID.
- jitter
Threshold Integer - Jitter for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- latency
Threshold Integer - Latency for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- link
Cost StringFactor - Criteria on which to base link selection.
- mos
Threshold String - Minimum Mean Opinion Score for SLA to be marked as pass. (1.0 - 5.0, default = 3.6).
- packetloss
Threshold Integer - Packet loss for SLA to make decision in percentage. (0 - 100, default = 0).
- priority
In IntegerSla - Value to be distributed into routing table when in-sla (0 - 65535, default = 0).
- priority
Out IntegerSla - Value to be distributed into routing table when out-sla (0 - 65535, default = 0).
- id number
- SLA ID.
- jitter
Threshold number - Jitter for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- latency
Threshold number - Latency for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- link
Cost stringFactor - Criteria on which to base link selection.
- mos
Threshold string - Minimum Mean Opinion Score for SLA to be marked as pass. (1.0 - 5.0, default = 3.6).
- packetloss
Threshold number - Packet loss for SLA to make decision in percentage. (0 - 100, default = 0).
- priority
In numberSla - Value to be distributed into routing table when in-sla (0 - 65535, default = 0).
- priority
Out numberSla - Value to be distributed into routing table when out-sla (0 - 65535, default = 0).
- id int
- SLA ID.
- jitter_
threshold int - Jitter for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- latency_
threshold int - Latency for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- link_
cost_ strfactor - Criteria on which to base link selection.
- mos_
threshold str - Minimum Mean Opinion Score for SLA to be marked as pass. (1.0 - 5.0, default = 3.6).
- packetloss_
threshold int - Packet loss for SLA to make decision in percentage. (0 - 100, default = 0).
- priority_
in_ intsla - Value to be distributed into routing table when in-sla (0 - 65535, default = 0).
- priority_
out_ intsla - Value to be distributed into routing table when out-sla (0 - 65535, default = 0).
- id Number
- SLA ID.
- jitter
Threshold Number - Jitter for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- latency
Threshold Number - Latency for SLA to make decision in milliseconds. (0 - 10000000, default = 5).
- link
Cost StringFactor - Criteria on which to base link selection.
- mos
Threshold String - Minimum Mean Opinion Score for SLA to be marked as pass. (1.0 - 5.0, default = 3.6).
- packetloss
Threshold Number - Packet loss for SLA to make decision in percentage. (0 - 100, default = 0).
- priority
In NumberSla - Value to be distributed into routing table when in-sla (0 - 65535, default = 0).
- priority
Out NumberSla - Value to be distributed into routing table when out-sla (0 - 65535, default = 0).
SdwanMember, SdwanMemberArgs
- Comment string
- Comments.
- Cost int
- Cost of this interface for services in SLA mode (0 - 4294967295, default = 0).
- Gateway string
- The default gateway for this interface. Usually the default gateway of the Internet service provider that this interface is connected to.
- Gateway6 string
- IPv6 gateway.
- Ingress
Spillover intThreshold - Ingress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- Interface string
- Interface name.
- Preferred
Source string - Preferred source of route for this member.
- Priority int
- Priority of the interface for IPv4 . Used for SD-WAN rules or priority rules. On FortiOS versions 6.4.1: 0 - 65535. On FortiOS versions >= 7.0.4: 1 - 65535, default = 1.
- Priority6 int
- Priority of the interface for IPv6 (1 - 65535, default = 1024). Used for SD-WAN rules or priority rules.
- Seq
Num int - Member sequence number.
- Source string
- Source IP address used in the health-check packet to the server.
- Source6 string
- Source IPv6 address used in the health-check packet to the server.
- Spillover
Threshold int - Egress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- Status string
- Enable/disable this interface in the SD-WAN. Valid values:
disable
,enable
. - Transport
Group int - Measured transport group (0 - 255).
- Volume
Ratio int - Measured volume ratio (this value / sum of all values = percentage of link volume, 1 - 255).
- Weight int
- Weight of this interface for weighted load balancing. (1 - 255) More traffic is directed to interfaces with higher weights.
- Zone string
- Zone name.
- Comment string
- Comments.
- Cost int
- Cost of this interface for services in SLA mode (0 - 4294967295, default = 0).
- Gateway string
- The default gateway for this interface. Usually the default gateway of the Internet service provider that this interface is connected to.
- Gateway6 string
- IPv6 gateway.
- Ingress
Spillover intThreshold - Ingress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- Interface string
- Interface name.
- Preferred
Source string - Preferred source of route for this member.
- Priority int
- Priority of the interface for IPv4 . Used for SD-WAN rules or priority rules. On FortiOS versions 6.4.1: 0 - 65535. On FortiOS versions >= 7.0.4: 1 - 65535, default = 1.
- Priority6 int
- Priority of the interface for IPv6 (1 - 65535, default = 1024). Used for SD-WAN rules or priority rules.
- Seq
Num int - Member sequence number.
- Source string
- Source IP address used in the health-check packet to the server.
- Source6 string
- Source IPv6 address used in the health-check packet to the server.
- Spillover
Threshold int - Egress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- Status string
- Enable/disable this interface in the SD-WAN. Valid values:
disable
,enable
. - Transport
Group int - Measured transport group (0 - 255).
- Volume
Ratio int - Measured volume ratio (this value / sum of all values = percentage of link volume, 1 - 255).
- Weight int
- Weight of this interface for weighted load balancing. (1 - 255) More traffic is directed to interfaces with higher weights.
- Zone string
- Zone name.
- comment String
- Comments.
- cost Integer
- Cost of this interface for services in SLA mode (0 - 4294967295, default = 0).
- gateway String
- The default gateway for this interface. Usually the default gateway of the Internet service provider that this interface is connected to.
- gateway6 String
- IPv6 gateway.
- ingress
Spillover IntegerThreshold - Ingress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- interface_ String
- Interface name.
- preferred
Source String - Preferred source of route for this member.
- priority Integer
- Priority of the interface for IPv4 . Used for SD-WAN rules or priority rules. On FortiOS versions 6.4.1: 0 - 65535. On FortiOS versions >= 7.0.4: 1 - 65535, default = 1.
- priority6 Integer
- Priority of the interface for IPv6 (1 - 65535, default = 1024). Used for SD-WAN rules or priority rules.
- seq
Num Integer - Member sequence number.
- source String
- Source IP address used in the health-check packet to the server.
- source6 String
- Source IPv6 address used in the health-check packet to the server.
- spillover
Threshold Integer - Egress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- status String
- Enable/disable this interface in the SD-WAN. Valid values:
disable
,enable
. - transport
Group Integer - Measured transport group (0 - 255).
- volume
Ratio Integer - Measured volume ratio (this value / sum of all values = percentage of link volume, 1 - 255).
- weight Integer
- Weight of this interface for weighted load balancing. (1 - 255) More traffic is directed to interfaces with higher weights.
- zone String
- Zone name.
- comment string
- Comments.
- cost number
- Cost of this interface for services in SLA mode (0 - 4294967295, default = 0).
- gateway string
- The default gateway for this interface. Usually the default gateway of the Internet service provider that this interface is connected to.
- gateway6 string
- IPv6 gateway.
- ingress
Spillover numberThreshold - Ingress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- interface string
- Interface name.
- preferred
Source string - Preferred source of route for this member.
- priority number
- Priority of the interface for IPv4 . Used for SD-WAN rules or priority rules. On FortiOS versions 6.4.1: 0 - 65535. On FortiOS versions >= 7.0.4: 1 - 65535, default = 1.
- priority6 number
- Priority of the interface for IPv6 (1 - 65535, default = 1024). Used for SD-WAN rules or priority rules.
- seq
Num number - Member sequence number.
- source string
- Source IP address used in the health-check packet to the server.
- source6 string
- Source IPv6 address used in the health-check packet to the server.
- spillover
Threshold number - Egress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- status string
- Enable/disable this interface in the SD-WAN. Valid values:
disable
,enable
. - transport
Group number - Measured transport group (0 - 255).
- volume
Ratio number - Measured volume ratio (this value / sum of all values = percentage of link volume, 1 - 255).
- weight number
- Weight of this interface for weighted load balancing. (1 - 255) More traffic is directed to interfaces with higher weights.
- zone string
- Zone name.
- comment str
- Comments.
- cost int
- Cost of this interface for services in SLA mode (0 - 4294967295, default = 0).
- gateway str
- The default gateway for this interface. Usually the default gateway of the Internet service provider that this interface is connected to.
- gateway6 str
- IPv6 gateway.
- ingress_
spillover_ intthreshold - Ingress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- interface str
- Interface name.
- preferred_
source str - Preferred source of route for this member.
- priority int
- Priority of the interface for IPv4 . Used for SD-WAN rules or priority rules. On FortiOS versions 6.4.1: 0 - 65535. On FortiOS versions >= 7.0.4: 1 - 65535, default = 1.
- priority6 int
- Priority of the interface for IPv6 (1 - 65535, default = 1024). Used for SD-WAN rules or priority rules.
- seq_
num int - Member sequence number.
- source str
- Source IP address used in the health-check packet to the server.
- source6 str
- Source IPv6 address used in the health-check packet to the server.
- spillover_
threshold int - Egress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- status str
- Enable/disable this interface in the SD-WAN. Valid values:
disable
,enable
. - transport_
group int - Measured transport group (0 - 255).
- volume_
ratio int - Measured volume ratio (this value / sum of all values = percentage of link volume, 1 - 255).
- weight int
- Weight of this interface for weighted load balancing. (1 - 255) More traffic is directed to interfaces with higher weights.
- zone str
- Zone name.
- comment String
- Comments.
- cost Number
- Cost of this interface for services in SLA mode (0 - 4294967295, default = 0).
- gateway String
- The default gateway for this interface. Usually the default gateway of the Internet service provider that this interface is connected to.
- gateway6 String
- IPv6 gateway.
- ingress
Spillover NumberThreshold - Ingress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- interface String
- Interface name.
- preferred
Source String - Preferred source of route for this member.
- priority Number
- Priority of the interface for IPv4 . Used for SD-WAN rules or priority rules. On FortiOS versions 6.4.1: 0 - 65535. On FortiOS versions >= 7.0.4: 1 - 65535, default = 1.
- priority6 Number
- Priority of the interface for IPv6 (1 - 65535, default = 1024). Used for SD-WAN rules or priority rules.
- seq
Num Number - Member sequence number.
- source String
- Source IP address used in the health-check packet to the server.
- source6 String
- Source IPv6 address used in the health-check packet to the server.
- spillover
Threshold Number - Egress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN.
- status String
- Enable/disable this interface in the SD-WAN. Valid values:
disable
,enable
. - transport
Group Number - Measured transport group (0 - 255).
- volume
Ratio Number - Measured volume ratio (this value / sum of all values = percentage of link volume, 1 - 255).
- weight Number
- Weight of this interface for weighted load balancing. (1 - 255) More traffic is directed to interfaces with higher weights.
- zone String
- Zone name.
SdwanNeighbor, SdwanNeighborArgs
- Health
Check string - SD-WAN health-check name.
- Ip string
- IP/IPv6 address of neighbor.
- Member int
- Member sequence number. Due to the data type change of API, for other versions of FortiOS, please check variable
member_block
. - Member
Blocks List<Pulumiverse.Fortios. System. Inputs. Sdwan Neighbor Member Block> - Member sequence number list. Due to the data type change of API, for other versions of FortiOS, please check variable
member
. The structure ofmember_block
block is documented below. - Minimum
Sla intMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- Mode string
- What metric to select the neighbor. Valid values:
sla
,speedtest
. - Role string
- Role of neighbor. Valid values:
standalone
,primary
,secondary
. - Service
Id int - SD-WAN service ID to work with the neighbor.
- Sla
Id int - SLA ID.
- Health
Check string - SD-WAN health-check name.
- Ip string
- IP/IPv6 address of neighbor.
- Member int
- Member sequence number. Due to the data type change of API, for other versions of FortiOS, please check variable
member_block
. - Member
Blocks []SdwanNeighbor Member Block - Member sequence number list. Due to the data type change of API, for other versions of FortiOS, please check variable
member
. The structure ofmember_block
block is documented below. - Minimum
Sla intMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- Mode string
- What metric to select the neighbor. Valid values:
sla
,speedtest
. - Role string
- Role of neighbor. Valid values:
standalone
,primary
,secondary
. - Service
Id int - SD-WAN service ID to work with the neighbor.
- Sla
Id int - SLA ID.
- health
Check String - SD-WAN health-check name.
- ip String
- IP/IPv6 address of neighbor.
- member Integer
- Member sequence number. Due to the data type change of API, for other versions of FortiOS, please check variable
member_block
. - member
Blocks List<SdwanNeighbor Member Block> - Member sequence number list. Due to the data type change of API, for other versions of FortiOS, please check variable
member
. The structure ofmember_block
block is documented below. - minimum
Sla IntegerMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- mode String
- What metric to select the neighbor. Valid values:
sla
,speedtest
. - role String
- Role of neighbor. Valid values:
standalone
,primary
,secondary
. - service
Id Integer - SD-WAN service ID to work with the neighbor.
- sla
Id Integer - SLA ID.
- health
Check string - SD-WAN health-check name.
- ip string
- IP/IPv6 address of neighbor.
- member number
- Member sequence number. Due to the data type change of API, for other versions of FortiOS, please check variable
member_block
. - member
Blocks SdwanNeighbor Member Block[] - Member sequence number list. Due to the data type change of API, for other versions of FortiOS, please check variable
member
. The structure ofmember_block
block is documented below. - minimum
Sla numberMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- mode string
- What metric to select the neighbor. Valid values:
sla
,speedtest
. - role string
- Role of neighbor. Valid values:
standalone
,primary
,secondary
. - service
Id number - SD-WAN service ID to work with the neighbor.
- sla
Id number - SLA ID.
- health_
check str - SD-WAN health-check name.
- ip str
- IP/IPv6 address of neighbor.
- member int
- Member sequence number. Due to the data type change of API, for other versions of FortiOS, please check variable
member_block
. - member_
blocks Sequence[SdwanNeighbor Member Block] - Member sequence number list. Due to the data type change of API, for other versions of FortiOS, please check variable
member
. The structure ofmember_block
block is documented below. - minimum_
sla_ intmeet_ members - Minimum number of members which meet SLA when the neighbor is preferred.
- mode str
- What metric to select the neighbor. Valid values:
sla
,speedtest
. - role str
- Role of neighbor. Valid values:
standalone
,primary
,secondary
. - service_
id int - SD-WAN service ID to work with the neighbor.
- sla_
id int - SLA ID.
- health
Check String - SD-WAN health-check name.
- ip String
- IP/IPv6 address of neighbor.
- member Number
- Member sequence number. Due to the data type change of API, for other versions of FortiOS, please check variable
member_block
. - member
Blocks List<Property Map> - Member sequence number list. Due to the data type change of API, for other versions of FortiOS, please check variable
member
. The structure ofmember_block
block is documented below. - minimum
Sla NumberMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- mode String
- What metric to select the neighbor. Valid values:
sla
,speedtest
. - role String
- Role of neighbor. Valid values:
standalone
,primary
,secondary
. - service
Id Number - SD-WAN service ID to work with the neighbor.
- sla
Id Number - SLA ID.
SdwanNeighborMemberBlock, SdwanNeighborMemberBlockArgs
- Seq
Num int - Member sequence number.
- Seq
Num int - Member sequence number.
- seq
Num Integer - Member sequence number.
- seq
Num number - Member sequence number.
- seq_
num int - Member sequence number.
- seq
Num Number - Member sequence number.
SdwanService, SdwanServiceArgs
- Addr
Mode string - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - Agent
Exclusive string - Set/unset the service as agent use exclusively. Valid values:
enable
,disable
. - Bandwidth
Weight int - Coefficient of reciprocal of available bidirectional bandwidth in the formula of custom-profile-1.
- Default string
- Enable/disable use of SD-WAN as default service. Valid values:
enable
,disable
. - Dscp
Forward string - Enable/disable forward traffic DSCP tag. Valid values:
enable
,disable
. - Dscp
Forward stringTag - Forward traffic DSCP tag.
- Dscp
Reverse string - Enable/disable reverse traffic DSCP tag. Valid values:
enable
,disable
. - Dscp
Reverse stringTag - Reverse traffic DSCP tag.
- Dst6s
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Service Dst6> - Destination address6 name. The structure of
dst6
block is documented below. - Dst
Negate string - Enable/disable negation of destination address match. Valid values:
enable
,disable
. - Dsts
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Service Dst> - Destination address name. The structure of
dst
block is documented below. - End
Port int - End destination port number.
- End
Src intPort - End source port number.
- Gateway string
- Enable/disable SD-WAN service gateway. Valid values:
enable
,disable
. - Groups
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Service Group> - User groups. The structure of
groups
block is documented below. - Hash
Mode string - Hash algorithm for selected priority members for load balance mode. Valid values:
round-robin
,source-ip-based
,source-dest-ip-based
,inbandwidth
,outbandwidth
,bibandwidth
. - Health
Checks List<Pulumiverse.Fortios. System. Inputs. Sdwan Service Health Check> - Health check list. The structure of
health_check
block is documented below. - Hold
Down intTime - Waiting period in seconds when switching from the back-up member to the primary member (0 - 10000000, default = 0).
- Id int
- SD-WAN rule ID (1 - 4000).
- Input
Device stringNegate - Enable/disable negation of input device match. Valid values:
enable
,disable
. - Input
Devices List<Pulumiverse.Fortios. System. Inputs. Sdwan Service Input Device> - Source interface name. The structure of
input_device
block is documented below. - Input
Zones List<Pulumiverse.Fortios. System. Inputs. Sdwan Service Input Zone> - Source input-zone name. The structure of
input_zone
block is documented below. - Internet
Service string - Enable/disable use of Internet service for application-based load balancing. Valid values:
enable
,disable
. - Internet
Service List<Pulumiverse.App Ctrl Categories Fortios. System. Inputs. Sdwan Service Internet Service App Ctrl Category> - IDs of one or more application control categories. The structure of
internet_service_app_ctrl_category
block is documented below. - Internet
Service List<Pulumiverse.App Ctrl Groups Fortios. System. Inputs. Sdwan Service Internet Service App Ctrl Group> - Application control based Internet Service group list. The structure of
internet_service_app_ctrl_group
block is documented below. - Internet
Service List<Pulumiverse.App Ctrls Fortios. System. Inputs. Sdwan Service Internet Service App Ctrl> - Application control based Internet Service ID list. The structure of
internet_service_app_ctrl
block is documented below. - Internet
Service List<Pulumiverse.Custom Groups Fortios. System. Inputs. Sdwan Service Internet Service Custom Group> - Custom Internet Service group list. The structure of
internet_service_custom_group
block is documented below. - Internet
Service List<Pulumiverse.Customs Fortios. System. Inputs. Sdwan Service Internet Service Custom> - Custom Internet service name list. The structure of
internet_service_custom
block is documented below. - Internet
Service List<Pulumiverse.Groups Fortios. System. Inputs. Sdwan Service Internet Service Group> - Internet Service group list. The structure of
internet_service_group
block is documented below. - Internet
Service List<Pulumiverse.Names Fortios. System. Inputs. Sdwan Service Internet Service Name> - Internet service name list. The structure of
internet_service_name
block is documented below. - Jitter
Weight int - Coefficient of jitter in the formula of custom-profile-1.
- Latency
Weight int - Coefficient of latency in the formula of custom-profile-1.
- Link
Cost stringFactor - Link cost factor. Valid values:
latency
,jitter
,packet-loss
,inbandwidth
,outbandwidth
,bibandwidth
,custom-profile-1
. - Link
Cost intThreshold - Percentage threshold change of link cost values that will result in policy route regeneration (0 - 10000000, default = 10).
- Load
Balance string - Enable/disable load-balance. Valid values:
enable
,disable
. - Minimum
Sla intMeet Members - Minimum number of members which meet SLA.
- Mode string
- Control how the SD-WAN rule sets the priority of interfaces in the SD-WAN.
- Name string
- Service and service group name.
- Packet
Loss intWeight - Coefficient of packet-loss in the formula of custom-profile-1.
- Passive
Measurement string - Enable/disable passive measurement based on the service criteria. Valid values:
enable
,disable
. - Priority
Members List<Pulumiverse.Fortios. System. Inputs. Sdwan Service Priority Member> - Member sequence number list. The structure of
priority_members
block is documented below. - Priority
Zones List<Pulumiverse.Fortios. System. Inputs. Sdwan Service Priority Zone> - Priority zone name list. The structure of
priority_zone
block is documented below. - Protocol int
- Protocol number.
- Quality
Link int - Quality grade.
- Role string
- Service role to work with neighbor. Valid values:
standalone
,primary
,secondary
. - Route
Tag int - IPv4 route map route-tag.
- Shortcut string
- Enable/disable shortcut for this service. Valid values:
enable
,disable
. - Shortcut
Priority string - High priority of ADVPN shortcut for this service. Valid values:
enable
,disable
,auto
. - Shortcut
Stickiness string - Enable/disable shortcut-stickiness of ADVPN. Valid values:
enable
,disable
. - Sla
Compare stringMethod - Method to compare SLA value for SLA mode. Valid values:
order
,number
. - Sla
Stickiness string - Enable/disable SLA stickiness (default = disable). Valid values:
enable
,disable
. - Slas
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Service Sla> - Service level agreement (SLA). The structure of
sla
block is documented below. - Src6s
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Service Src6> - Source address6 name. The structure of
src6
block is documented below. - Src
Negate string - Enable/disable negation of source address match. Valid values:
enable
,disable
. - Srcs
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Service Src> - Source address name. The structure of
src
block is documented below. - Standalone
Action string - Enable/disable service when selected neighbor role is standalone while service role is not standalone. Valid values:
enable
,disable
. - Start
Port int - Start destination port number.
- Start
Src intPort - Start source port number.
- Status string
- Enable/disable SD-WAN service. Valid values:
enable
,disable
. - Tie
Break string - Method of selecting member if more than one meets the SLA.
- Tos string
- Type of service bit pattern.
- Tos
Mask string - Type of service evaluated bits.
- Use
Shortcut stringSla - Enable/disable use of ADVPN shortcut for quality comparison. Valid values:
enable
,disable
. - Users
List<Pulumiverse.
Fortios. System. Inputs. Sdwan Service User> - User name. The structure of
users
block is documented below. - Zone
Mode string - Enable/disable zone mode. Valid values:
enable
,disable
.
- Addr
Mode string - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - Agent
Exclusive string - Set/unset the service as agent use exclusively. Valid values:
enable
,disable
. - Bandwidth
Weight int - Coefficient of reciprocal of available bidirectional bandwidth in the formula of custom-profile-1.
- Default string
- Enable/disable use of SD-WAN as default service. Valid values:
enable
,disable
. - Dscp
Forward string - Enable/disable forward traffic DSCP tag. Valid values:
enable
,disable
. - Dscp
Forward stringTag - Forward traffic DSCP tag.
- Dscp
Reverse string - Enable/disable reverse traffic DSCP tag. Valid values:
enable
,disable
. - Dscp
Reverse stringTag - Reverse traffic DSCP tag.
- Dst6s
[]Sdwan
Service Dst6 - Destination address6 name. The structure of
dst6
block is documented below. - Dst
Negate string - Enable/disable negation of destination address match. Valid values:
enable
,disable
. - Dsts
[]Sdwan
Service Dst - Destination address name. The structure of
dst
block is documented below. - End
Port int - End destination port number.
- End
Src intPort - End source port number.
- Gateway string
- Enable/disable SD-WAN service gateway. Valid values:
enable
,disable
. - Groups
[]Sdwan
Service Group - User groups. The structure of
groups
block is documented below. - Hash
Mode string - Hash algorithm for selected priority members for load balance mode. Valid values:
round-robin
,source-ip-based
,source-dest-ip-based
,inbandwidth
,outbandwidth
,bibandwidth
. - Health
Checks []SdwanService Health Check - Health check list. The structure of
health_check
block is documented below. - Hold
Down intTime - Waiting period in seconds when switching from the back-up member to the primary member (0 - 10000000, default = 0).
- Id int
- SD-WAN rule ID (1 - 4000).
- Input
Device stringNegate - Enable/disable negation of input device match. Valid values:
enable
,disable
. - Input
Devices []SdwanService Input Device - Source interface name. The structure of
input_device
block is documented below. - Input
Zones []SdwanService Input Zone - Source input-zone name. The structure of
input_zone
block is documented below. - Internet
Service string - Enable/disable use of Internet service for application-based load balancing. Valid values:
enable
,disable
. - Internet
Service []SdwanApp Ctrl Categories Service Internet Service App Ctrl Category - IDs of one or more application control categories. The structure of
internet_service_app_ctrl_category
block is documented below. - Internet
Service []SdwanApp Ctrl Groups Service Internet Service App Ctrl Group - Application control based Internet Service group list. The structure of
internet_service_app_ctrl_group
block is documented below. - Internet
Service []SdwanApp Ctrls Service Internet Service App Ctrl - Application control based Internet Service ID list. The structure of
internet_service_app_ctrl
block is documented below. - Internet
Service []SdwanCustom Groups Service Internet Service Custom Group - Custom Internet Service group list. The structure of
internet_service_custom_group
block is documented below. - Internet
Service []SdwanCustoms Service Internet Service Custom - Custom Internet service name list. The structure of
internet_service_custom
block is documented below. - Internet
Service []SdwanGroups Service Internet Service Group - Internet Service group list. The structure of
internet_service_group
block is documented below. - Internet
Service []SdwanNames Service Internet Service Name - Internet service name list. The structure of
internet_service_name
block is documented below. - Jitter
Weight int - Coefficient of jitter in the formula of custom-profile-1.
- Latency
Weight int - Coefficient of latency in the formula of custom-profile-1.
- Link
Cost stringFactor - Link cost factor. Valid values:
latency
,jitter
,packet-loss
,inbandwidth
,outbandwidth
,bibandwidth
,custom-profile-1
. - Link
Cost intThreshold - Percentage threshold change of link cost values that will result in policy route regeneration (0 - 10000000, default = 10).
- Load
Balance string - Enable/disable load-balance. Valid values:
enable
,disable
. - Minimum
Sla intMeet Members - Minimum number of members which meet SLA.
- Mode string
- Control how the SD-WAN rule sets the priority of interfaces in the SD-WAN.
- Name string
- Service and service group name.
- Packet
Loss intWeight - Coefficient of packet-loss in the formula of custom-profile-1.
- Passive
Measurement string - Enable/disable passive measurement based on the service criteria. Valid values:
enable
,disable
. - Priority
Members []SdwanService Priority Member - Member sequence number list. The structure of
priority_members
block is documented below. - Priority
Zones []SdwanService Priority Zone - Priority zone name list. The structure of
priority_zone
block is documented below. - Protocol int
- Protocol number.
- Quality
Link int - Quality grade.
- Role string
- Service role to work with neighbor. Valid values:
standalone
,primary
,secondary
. - Route
Tag int - IPv4 route map route-tag.
- Shortcut string
- Enable/disable shortcut for this service. Valid values:
enable
,disable
. - Shortcut
Priority string - High priority of ADVPN shortcut for this service. Valid values:
enable
,disable
,auto
. - Shortcut
Stickiness string - Enable/disable shortcut-stickiness of ADVPN. Valid values:
enable
,disable
. - Sla
Compare stringMethod - Method to compare SLA value for SLA mode. Valid values:
order
,number
. - Sla
Stickiness string - Enable/disable SLA stickiness (default = disable). Valid values:
enable
,disable
. - Slas
[]Sdwan
Service Sla - Service level agreement (SLA). The structure of
sla
block is documented below. - Src6s
[]Sdwan
Service Src6 - Source address6 name. The structure of
src6
block is documented below. - Src
Negate string - Enable/disable negation of source address match. Valid values:
enable
,disable
. - Srcs
[]Sdwan
Service Src - Source address name. The structure of
src
block is documented below. - Standalone
Action string - Enable/disable service when selected neighbor role is standalone while service role is not standalone. Valid values:
enable
,disable
. - Start
Port int - Start destination port number.
- Start
Src intPort - Start source port number.
- Status string
- Enable/disable SD-WAN service. Valid values:
enable
,disable
. - Tie
Break string - Method of selecting member if more than one meets the SLA.
- Tos string
- Type of service bit pattern.
- Tos
Mask string - Type of service evaluated bits.
- Use
Shortcut stringSla - Enable/disable use of ADVPN shortcut for quality comparison. Valid values:
enable
,disable
. - Users
[]Sdwan
Service User - User name. The structure of
users
block is documented below. - Zone
Mode string - Enable/disable zone mode. Valid values:
enable
,disable
.
- addr
Mode String - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - agent
Exclusive String - Set/unset the service as agent use exclusively. Valid values:
enable
,disable
. - bandwidth
Weight Integer - Coefficient of reciprocal of available bidirectional bandwidth in the formula of custom-profile-1.
- default_ String
- Enable/disable use of SD-WAN as default service. Valid values:
enable
,disable
. - dscp
Forward String - Enable/disable forward traffic DSCP tag. Valid values:
enable
,disable
. - dscp
Forward StringTag - Forward traffic DSCP tag.
- dscp
Reverse String - Enable/disable reverse traffic DSCP tag. Valid values:
enable
,disable
. - dscp
Reverse StringTag - Reverse traffic DSCP tag.
- dst6s
List<Sdwan
Service Dst6> - Destination address6 name. The structure of
dst6
block is documented below. - dst
Negate String - Enable/disable negation of destination address match. Valid values:
enable
,disable
. - dsts
List<Sdwan
Service Dst> - Destination address name. The structure of
dst
block is documented below. - end
Port Integer - End destination port number.
- end
Src IntegerPort - End source port number.
- gateway String
- Enable/disable SD-WAN service gateway. Valid values:
enable
,disable
. - groups
List<Sdwan
Service Group> - User groups. The structure of
groups
block is documented below. - hash
Mode String - Hash algorithm for selected priority members for load balance mode. Valid values:
round-robin
,source-ip-based
,source-dest-ip-based
,inbandwidth
,outbandwidth
,bibandwidth
. - health
Checks List<SdwanService Health Check> - Health check list. The structure of
health_check
block is documented below. - hold
Down IntegerTime - Waiting period in seconds when switching from the back-up member to the primary member (0 - 10000000, default = 0).
- id Integer
- SD-WAN rule ID (1 - 4000).
- input
Device StringNegate - Enable/disable negation of input device match. Valid values:
enable
,disable
. - input
Devices List<SdwanService Input Device> - Source interface name. The structure of
input_device
block is documented below. - input
Zones List<SdwanService Input Zone> - Source input-zone name. The structure of
input_zone
block is documented below. - internet
Service String - Enable/disable use of Internet service for application-based load balancing. Valid values:
enable
,disable
. - internet
Service List<SdwanApp Ctrl Categories Service Internet Service App Ctrl Category> - IDs of one or more application control categories. The structure of
internet_service_app_ctrl_category
block is documented below. - internet
Service List<SdwanApp Ctrl Groups Service Internet Service App Ctrl Group> - Application control based Internet Service group list. The structure of
internet_service_app_ctrl_group
block is documented below. - internet
Service List<SdwanApp Ctrls Service Internet Service App Ctrl> - Application control based Internet Service ID list. The structure of
internet_service_app_ctrl
block is documented below. - internet
Service List<SdwanCustom Groups Service Internet Service Custom Group> - Custom Internet Service group list. The structure of
internet_service_custom_group
block is documented below. - internet
Service List<SdwanCustoms Service Internet Service Custom> - Custom Internet service name list. The structure of
internet_service_custom
block is documented below. - internet
Service List<SdwanGroups Service Internet Service Group> - Internet Service group list. The structure of
internet_service_group
block is documented below. - internet
Service List<SdwanNames Service Internet Service Name> - Internet service name list. The structure of
internet_service_name
block is documented below. - jitter
Weight Integer - Coefficient of jitter in the formula of custom-profile-1.
- latency
Weight Integer - Coefficient of latency in the formula of custom-profile-1.
- link
Cost StringFactor - Link cost factor. Valid values:
latency
,jitter
,packet-loss
,inbandwidth
,outbandwidth
,bibandwidth
,custom-profile-1
. - link
Cost IntegerThreshold - Percentage threshold change of link cost values that will result in policy route regeneration (0 - 10000000, default = 10).
- load
Balance String - Enable/disable load-balance. Valid values:
enable
,disable
. - minimum
Sla IntegerMeet Members - Minimum number of members which meet SLA.
- mode String
- Control how the SD-WAN rule sets the priority of interfaces in the SD-WAN.
- name String
- Service and service group name.
- packet
Loss IntegerWeight - Coefficient of packet-loss in the formula of custom-profile-1.
- passive
Measurement String - Enable/disable passive measurement based on the service criteria. Valid values:
enable
,disable
. - priority
Members List<SdwanService Priority Member> - Member sequence number list. The structure of
priority_members
block is documented below. - priority
Zones List<SdwanService Priority Zone> - Priority zone name list. The structure of
priority_zone
block is documented below. - protocol Integer
- Protocol number.
- quality
Link Integer - Quality grade.
- role String
- Service role to work with neighbor. Valid values:
standalone
,primary
,secondary
. - route
Tag Integer - IPv4 route map route-tag.
- shortcut String
- Enable/disable shortcut for this service. Valid values:
enable
,disable
. - shortcut
Priority String - High priority of ADVPN shortcut for this service. Valid values:
enable
,disable
,auto
. - shortcut
Stickiness String - Enable/disable shortcut-stickiness of ADVPN. Valid values:
enable
,disable
. - sla
Compare StringMethod - Method to compare SLA value for SLA mode. Valid values:
order
,number
. - sla
Stickiness String - Enable/disable SLA stickiness (default = disable). Valid values:
enable
,disable
. - slas
List<Sdwan
Service Sla> - Service level agreement (SLA). The structure of
sla
block is documented below. - src6s
List<Sdwan
Service Src6> - Source address6 name. The structure of
src6
block is documented below. - src
Negate String - Enable/disable negation of source address match. Valid values:
enable
,disable
. - srcs
List<Sdwan
Service Src> - Source address name. The structure of
src
block is documented below. - standalone
Action String - Enable/disable service when selected neighbor role is standalone while service role is not standalone. Valid values:
enable
,disable
. - start
Port Integer - Start destination port number.
- start
Src IntegerPort - Start source port number.
- status String
- Enable/disable SD-WAN service. Valid values:
enable
,disable
. - tie
Break String - Method of selecting member if more than one meets the SLA.
- tos String
- Type of service bit pattern.
- tos
Mask String - Type of service evaluated bits.
- use
Shortcut StringSla - Enable/disable use of ADVPN shortcut for quality comparison. Valid values:
enable
,disable
. - users
List<Sdwan
Service User> - User name. The structure of
users
block is documented below. - zone
Mode String - Enable/disable zone mode. Valid values:
enable
,disable
.
- addr
Mode string - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - agent
Exclusive string - Set/unset the service as agent use exclusively. Valid values:
enable
,disable
. - bandwidth
Weight number - Coefficient of reciprocal of available bidirectional bandwidth in the formula of custom-profile-1.
- default string
- Enable/disable use of SD-WAN as default service. Valid values:
enable
,disable
. - dscp
Forward string - Enable/disable forward traffic DSCP tag. Valid values:
enable
,disable
. - dscp
Forward stringTag - Forward traffic DSCP tag.
- dscp
Reverse string - Enable/disable reverse traffic DSCP tag. Valid values:
enable
,disable
. - dscp
Reverse stringTag - Reverse traffic DSCP tag.
- dst6s
Sdwan
Service Dst6[] - Destination address6 name. The structure of
dst6
block is documented below. - dst
Negate string - Enable/disable negation of destination address match. Valid values:
enable
,disable
. - dsts
Sdwan
Service Dst[] - Destination address name. The structure of
dst
block is documented below. - end
Port number - End destination port number.
- end
Src numberPort - End source port number.
- gateway string
- Enable/disable SD-WAN service gateway. Valid values:
enable
,disable
. - groups
Sdwan
Service Group[] - User groups. The structure of
groups
block is documented below. - hash
Mode string - Hash algorithm for selected priority members for load balance mode. Valid values:
round-robin
,source-ip-based
,source-dest-ip-based
,inbandwidth
,outbandwidth
,bibandwidth
. - health
Checks SdwanService Health Check[] - Health check list. The structure of
health_check
block is documented below. - hold
Down numberTime - Waiting period in seconds when switching from the back-up member to the primary member (0 - 10000000, default = 0).
- id number
- SD-WAN rule ID (1 - 4000).
- input
Device stringNegate - Enable/disable negation of input device match. Valid values:
enable
,disable
. - input
Devices SdwanService Input Device[] - Source interface name. The structure of
input_device
block is documented below. - input
Zones SdwanService Input Zone[] - Source input-zone name. The structure of
input_zone
block is documented below. - internet
Service string - Enable/disable use of Internet service for application-based load balancing. Valid values:
enable
,disable
. - internet
Service SdwanApp Ctrl Categories Service Internet Service App Ctrl Category[] - IDs of one or more application control categories. The structure of
internet_service_app_ctrl_category
block is documented below. - internet
Service SdwanApp Ctrl Groups Service Internet Service App Ctrl Group[] - Application control based Internet Service group list. The structure of
internet_service_app_ctrl_group
block is documented below. - internet
Service SdwanApp Ctrls Service Internet Service App Ctrl[] - Application control based Internet Service ID list. The structure of
internet_service_app_ctrl
block is documented below. - internet
Service SdwanCustom Groups Service Internet Service Custom Group[] - Custom Internet Service group list. The structure of
internet_service_custom_group
block is documented below. - internet
Service SdwanCustoms Service Internet Service Custom[] - Custom Internet service name list. The structure of
internet_service_custom
block is documented below. - internet
Service SdwanGroups Service Internet Service Group[] - Internet Service group list. The structure of
internet_service_group
block is documented below. - internet
Service SdwanNames Service Internet Service Name[] - Internet service name list. The structure of
internet_service_name
block is documented below. - jitter
Weight number - Coefficient of jitter in the formula of custom-profile-1.
- latency
Weight number - Coefficient of latency in the formula of custom-profile-1.
- link
Cost stringFactor - Link cost factor. Valid values:
latency
,jitter
,packet-loss
,inbandwidth
,outbandwidth
,bibandwidth
,custom-profile-1
. - link
Cost numberThreshold - Percentage threshold change of link cost values that will result in policy route regeneration (0 - 10000000, default = 10).
- load
Balance string - Enable/disable load-balance. Valid values:
enable
,disable
. - minimum
Sla numberMeet Members - Minimum number of members which meet SLA.
- mode string
- Control how the SD-WAN rule sets the priority of interfaces in the SD-WAN.
- name string
- Service and service group name.
- packet
Loss numberWeight - Coefficient of packet-loss in the formula of custom-profile-1.
- passive
Measurement string - Enable/disable passive measurement based on the service criteria. Valid values:
enable
,disable
. - priority
Members SdwanService Priority Member[] - Member sequence number list. The structure of
priority_members
block is documented below. - priority
Zones SdwanService Priority Zone[] - Priority zone name list. The structure of
priority_zone
block is documented below. - protocol number
- Protocol number.
- quality
Link number - Quality grade.
- role string
- Service role to work with neighbor. Valid values:
standalone
,primary
,secondary
. - route
Tag number - IPv4 route map route-tag.
- shortcut string
- Enable/disable shortcut for this service. Valid values:
enable
,disable
. - shortcut
Priority string - High priority of ADVPN shortcut for this service. Valid values:
enable
,disable
,auto
. - shortcut
Stickiness string - Enable/disable shortcut-stickiness of ADVPN. Valid values:
enable
,disable
. - sla
Compare stringMethod - Method to compare SLA value for SLA mode. Valid values:
order
,number
. - sla
Stickiness string - Enable/disable SLA stickiness (default = disable). Valid values:
enable
,disable
. - slas
Sdwan
Service Sla[] - Service level agreement (SLA). The structure of
sla
block is documented below. - src6s
Sdwan
Service Src6[] - Source address6 name. The structure of
src6
block is documented below. - src
Negate string - Enable/disable negation of source address match. Valid values:
enable
,disable
. - srcs
Sdwan
Service Src[] - Source address name. The structure of
src
block is documented below. - standalone
Action string - Enable/disable service when selected neighbor role is standalone while service role is not standalone. Valid values:
enable
,disable
. - start
Port number - Start destination port number.
- start
Src numberPort - Start source port number.
- status string
- Enable/disable SD-WAN service. Valid values:
enable
,disable
. - tie
Break string - Method of selecting member if more than one meets the SLA.
- tos string
- Type of service bit pattern.
- tos
Mask string - Type of service evaluated bits.
- use
Shortcut stringSla - Enable/disable use of ADVPN shortcut for quality comparison. Valid values:
enable
,disable
. - users
Sdwan
Service User[] - User name. The structure of
users
block is documented below. - zone
Mode string - Enable/disable zone mode. Valid values:
enable
,disable
.
- addr_
mode str - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - agent_
exclusive str - Set/unset the service as agent use exclusively. Valid values:
enable
,disable
. - bandwidth_
weight int - Coefficient of reciprocal of available bidirectional bandwidth in the formula of custom-profile-1.
- default str
- Enable/disable use of SD-WAN as default service. Valid values:
enable
,disable
. - dscp_
forward str - Enable/disable forward traffic DSCP tag. Valid values:
enable
,disable
. - dscp_
forward_ strtag - Forward traffic DSCP tag.
- dscp_
reverse str - Enable/disable reverse traffic DSCP tag. Valid values:
enable
,disable
. - dscp_
reverse_ strtag - Reverse traffic DSCP tag.
- dst6s
Sequence[Sdwan
Service Dst6] - Destination address6 name. The structure of
dst6
block is documented below. - dst_
negate str - Enable/disable negation of destination address match. Valid values:
enable
,disable
. - dsts
Sequence[Sdwan
Service Dst] - Destination address name. The structure of
dst
block is documented below. - end_
port int - End destination port number.
- end_
src_ intport - End source port number.
- gateway str
- Enable/disable SD-WAN service gateway. Valid values:
enable
,disable
. - groups
Sequence[Sdwan
Service Group] - User groups. The structure of
groups
block is documented below. - hash_
mode str - Hash algorithm for selected priority members for load balance mode. Valid values:
round-robin
,source-ip-based
,source-dest-ip-based
,inbandwidth
,outbandwidth
,bibandwidth
. - health_
checks Sequence[SdwanService Health Check] - Health check list. The structure of
health_check
block is documented below. - hold_
down_ inttime - Waiting period in seconds when switching from the back-up member to the primary member (0 - 10000000, default = 0).
- id int
- SD-WAN rule ID (1 - 4000).
- input_
device_ strnegate - Enable/disable negation of input device match. Valid values:
enable
,disable
. - input_
devices Sequence[SdwanService Input Device] - Source interface name. The structure of
input_device
block is documented below. - input_
zones Sequence[SdwanService Input Zone] - Source input-zone name. The structure of
input_zone
block is documented below. - internet_
service str - Enable/disable use of Internet service for application-based load balancing. Valid values:
enable
,disable
. - internet_
service_ Sequence[Sdwanapp_ ctrl_ categories Service Internet Service App Ctrl Category] - IDs of one or more application control categories. The structure of
internet_service_app_ctrl_category
block is documented below. - internet_
service_ Sequence[Sdwanapp_ ctrl_ groups Service Internet Service App Ctrl Group] - Application control based Internet Service group list. The structure of
internet_service_app_ctrl_group
block is documented below. - internet_
service_ Sequence[Sdwanapp_ ctrls Service Internet Service App Ctrl] - Application control based Internet Service ID list. The structure of
internet_service_app_ctrl
block is documented below. - internet_
service_ Sequence[Sdwancustom_ groups Service Internet Service Custom Group] - Custom Internet Service group list. The structure of
internet_service_custom_group
block is documented below. - internet_
service_ Sequence[Sdwancustoms Service Internet Service Custom] - Custom Internet service name list. The structure of
internet_service_custom
block is documented below. - internet_
service_ Sequence[Sdwangroups Service Internet Service Group] - Internet Service group list. The structure of
internet_service_group
block is documented below. - internet_
service_ Sequence[Sdwannames Service Internet Service Name] - Internet service name list. The structure of
internet_service_name
block is documented below. - jitter_
weight int - Coefficient of jitter in the formula of custom-profile-1.
- latency_
weight int - Coefficient of latency in the formula of custom-profile-1.
- link_
cost_ strfactor - Link cost factor. Valid values:
latency
,jitter
,packet-loss
,inbandwidth
,outbandwidth
,bibandwidth
,custom-profile-1
. - link_
cost_ intthreshold - Percentage threshold change of link cost values that will result in policy route regeneration (0 - 10000000, default = 10).
- load_
balance str - Enable/disable load-balance. Valid values:
enable
,disable
. - minimum_
sla_ intmeet_ members - Minimum number of members which meet SLA.
- mode str
- Control how the SD-WAN rule sets the priority of interfaces in the SD-WAN.
- name str
- Service and service group name.
- packet_
loss_ intweight - Coefficient of packet-loss in the formula of custom-profile-1.
- passive_
measurement str - Enable/disable passive measurement based on the service criteria. Valid values:
enable
,disable
. - priority_
members Sequence[SdwanService Priority Member] - Member sequence number list. The structure of
priority_members
block is documented below. - priority_
zones Sequence[SdwanService Priority Zone] - Priority zone name list. The structure of
priority_zone
block is documented below. - protocol int
- Protocol number.
- quality_
link int - Quality grade.
- role str
- Service role to work with neighbor. Valid values:
standalone
,primary
,secondary
. - route_
tag int - IPv4 route map route-tag.
- shortcut str
- Enable/disable shortcut for this service. Valid values:
enable
,disable
. - shortcut_
priority str - High priority of ADVPN shortcut for this service. Valid values:
enable
,disable
,auto
. - shortcut_
stickiness str - Enable/disable shortcut-stickiness of ADVPN. Valid values:
enable
,disable
. - sla_
compare_ strmethod - Method to compare SLA value for SLA mode. Valid values:
order
,number
. - sla_
stickiness str - Enable/disable SLA stickiness (default = disable). Valid values:
enable
,disable
. - slas
Sequence[Sdwan
Service Sla] - Service level agreement (SLA). The structure of
sla
block is documented below. - src6s
Sequence[Sdwan
Service Src6] - Source address6 name. The structure of
src6
block is documented below. - src_
negate str - Enable/disable negation of source address match. Valid values:
enable
,disable
. - srcs
Sequence[Sdwan
Service Src] - Source address name. The structure of
src
block is documented below. - standalone_
action str - Enable/disable service when selected neighbor role is standalone while service role is not standalone. Valid values:
enable
,disable
. - start_
port int - Start destination port number.
- start_
src_ intport - Start source port number.
- status str
- Enable/disable SD-WAN service. Valid values:
enable
,disable
. - tie_
break str - Method of selecting member if more than one meets the SLA.
- tos str
- Type of service bit pattern.
- tos_
mask str - Type of service evaluated bits.
- use_
shortcut_ strsla - Enable/disable use of ADVPN shortcut for quality comparison. Valid values:
enable
,disable
. - users
Sequence[Sdwan
Service User] - User name. The structure of
users
block is documented below. - zone_
mode str - Enable/disable zone mode. Valid values:
enable
,disable
.
- addr
Mode String - Address mode (IPv4 or IPv6). Valid values:
ipv4
,ipv6
. - agent
Exclusive String - Set/unset the service as agent use exclusively. Valid values:
enable
,disable
. - bandwidth
Weight Number - Coefficient of reciprocal of available bidirectional bandwidth in the formula of custom-profile-1.
- default String
- Enable/disable use of SD-WAN as default service. Valid values:
enable
,disable
. - dscp
Forward String - Enable/disable forward traffic DSCP tag. Valid values:
enable
,disable
. - dscp
Forward StringTag - Forward traffic DSCP tag.
- dscp
Reverse String - Enable/disable reverse traffic DSCP tag. Valid values:
enable
,disable
. - dscp
Reverse StringTag - Reverse traffic DSCP tag.
- dst6s List<Property Map>
- Destination address6 name. The structure of
dst6
block is documented below. - dst
Negate String - Enable/disable negation of destination address match. Valid values:
enable
,disable
. - dsts List<Property Map>
- Destination address name. The structure of
dst
block is documented below. - end
Port Number - End destination port number.
- end
Src NumberPort - End source port number.
- gateway String
- Enable/disable SD-WAN service gateway. Valid values:
enable
,disable
. - groups List<Property Map>
- User groups. The structure of
groups
block is documented below. - hash
Mode String - Hash algorithm for selected priority members for load balance mode. Valid values:
round-robin
,source-ip-based
,source-dest-ip-based
,inbandwidth
,outbandwidth
,bibandwidth
. - health
Checks List<Property Map> - Health check list. The structure of
health_check
block is documented below. - hold
Down NumberTime - Waiting period in seconds when switching from the back-up member to the primary member (0 - 10000000, default = 0).
- id Number
- SD-WAN rule ID (1 - 4000).
- input
Device StringNegate - Enable/disable negation of input device match. Valid values:
enable
,disable
. - input
Devices List<Property Map> - Source interface name. The structure of
input_device
block is documented below. - input
Zones List<Property Map> - Source input-zone name. The structure of
input_zone
block is documented below. - internet
Service String - Enable/disable use of Internet service for application-based load balancing. Valid values:
enable
,disable
. - internet
Service List<Property Map>App Ctrl Categories - IDs of one or more application control categories. The structure of
internet_service_app_ctrl_category
block is documented below. - internet
Service List<Property Map>App Ctrl Groups - Application control based Internet Service group list. The structure of
internet_service_app_ctrl_group
block is documented below. - internet
Service List<Property Map>App Ctrls - Application control based Internet Service ID list. The structure of
internet_service_app_ctrl
block is documented below. - internet
Service List<Property Map>Custom Groups - Custom Internet Service group list. The structure of
internet_service_custom_group
block is documented below. - internet
Service List<Property Map>Customs - Custom Internet service name list. The structure of
internet_service_custom
block is documented below. - internet
Service List<Property Map>Groups - Internet Service group list. The structure of
internet_service_group
block is documented below. - internet
Service List<Property Map>Names - Internet service name list. The structure of
internet_service_name
block is documented below. - jitter
Weight Number - Coefficient of jitter in the formula of custom-profile-1.
- latency
Weight Number - Coefficient of latency in the formula of custom-profile-1.
- link
Cost StringFactor - Link cost factor. Valid values:
latency
,jitter
,packet-loss
,inbandwidth
,outbandwidth
,bibandwidth
,custom-profile-1
. - link
Cost NumberThreshold - Percentage threshold change of link cost values that will result in policy route regeneration (0 - 10000000, default = 10).
- load
Balance String - Enable/disable load-balance. Valid values:
enable
,disable
. - minimum
Sla NumberMeet Members - Minimum number of members which meet SLA.
- mode String
- Control how the SD-WAN rule sets the priority of interfaces in the SD-WAN.
- name String
- Service and service group name.
- packet
Loss NumberWeight - Coefficient of packet-loss in the formula of custom-profile-1.
- passive
Measurement String - Enable/disable passive measurement based on the service criteria. Valid values:
enable
,disable
. - priority
Members List<Property Map> - Member sequence number list. The structure of
priority_members
block is documented below. - priority
Zones List<Property Map> - Priority zone name list. The structure of
priority_zone
block is documented below. - protocol Number
- Protocol number.
- quality
Link Number - Quality grade.
- role String
- Service role to work with neighbor. Valid values:
standalone
,primary
,secondary
. - route
Tag Number - IPv4 route map route-tag.
- shortcut String
- Enable/disable shortcut for this service. Valid values:
enable
,disable
. - shortcut
Priority String - High priority of ADVPN shortcut for this service. Valid values:
enable
,disable
,auto
. - shortcut
Stickiness String - Enable/disable shortcut-stickiness of ADVPN. Valid values:
enable
,disable
. - sla
Compare StringMethod - Method to compare SLA value for SLA mode. Valid values:
order
,number
. - sla
Stickiness String - Enable/disable SLA stickiness (default = disable). Valid values:
enable
,disable
. - slas List<Property Map>
- Service level agreement (SLA). The structure of
sla
block is documented below. - src6s List<Property Map>
- Source address6 name. The structure of
src6
block is documented below. - src
Negate String - Enable/disable negation of source address match. Valid values:
enable
,disable
. - srcs List<Property Map>
- Source address name. The structure of
src
block is documented below. - standalone
Action String - Enable/disable service when selected neighbor role is standalone while service role is not standalone. Valid values:
enable
,disable
. - start
Port Number - Start destination port number.
- start
Src NumberPort - Start source port number.
- status String
- Enable/disable SD-WAN service. Valid values:
enable
,disable
. - tie
Break String - Method of selecting member if more than one meets the SLA.
- tos String
- Type of service bit pattern.
- tos
Mask String - Type of service evaluated bits.
- use
Shortcut StringSla - Enable/disable use of ADVPN shortcut for quality comparison. Valid values:
enable
,disable
. - users List<Property Map>
- User name. The structure of
users
block is documented below. - zone
Mode String - Enable/disable zone mode. Valid values:
enable
,disable
.
SdwanServiceDst, SdwanServiceDstArgs
- Name string
- Address or address group name.
- Name string
- Address or address group name.
- name String
- Address or address group name.
- name string
- Address or address group name.
- name str
- Address or address group name.
- name String
- Address or address group name.
SdwanServiceDst6, SdwanServiceDst6Args
- Name string
- Name string
- name String
- name string
- name str
- name String
SdwanServiceGroup, SdwanServiceGroupArgs
- Name string
- Group name.
- Name string
- Group name.
- name String
- Group name.
- name string
- Group name.
- name str
- Group name.
- name String
- Group name.
SdwanServiceHealthCheck, SdwanServiceHealthCheckArgs
- Name string
- Health check name.
- Name string
- Health check name.
- name String
- Health check name.
- name string
- Health check name.
- name str
- Health check name.
- name String
- Health check name.
SdwanServiceInputDevice, SdwanServiceInputDeviceArgs
- Name string
- Interface name.
- Name string
- Interface name.
- name String
- Interface name.
- name string
- Interface name.
- name str
- Interface name.
- name String
- Interface name.
SdwanServiceInputZone, SdwanServiceInputZoneArgs
- Name string
- Zone.
- Name string
- Zone.
- name String
- Zone.
- name string
- Zone.
- name str
- Zone.
- name String
- Zone.
SdwanServiceInternetServiceAppCtrl, SdwanServiceInternetServiceAppCtrlArgs
- Id int
- Application control based Internet Service ID.
- Id int
- Application control based Internet Service ID.
- id Integer
- Application control based Internet Service ID.
- id number
- Application control based Internet Service ID.
- id int
- Application control based Internet Service ID.
- id Number
- Application control based Internet Service ID.
SdwanServiceInternetServiceAppCtrlCategory, SdwanServiceInternetServiceAppCtrlCategoryArgs
- Id int
- Application control category ID.
- Id int
- Application control category ID.
- id Integer
- Application control category ID.
- id number
- Application control category ID.
- id int
- Application control category ID.
- id Number
- Application control category ID.
SdwanServiceInternetServiceAppCtrlGroup, SdwanServiceInternetServiceAppCtrlGroupArgs
- Name string
- Application control based Internet Service group name.
- Name string
- Application control based Internet Service group name.
- name String
- Application control based Internet Service group name.
- name string
- Application control based Internet Service group name.
- name str
- Application control based Internet Service group name.
- name String
- Application control based Internet Service group name.
SdwanServiceInternetServiceCustom, SdwanServiceInternetServiceCustomArgs
- Name string
- Custom Internet service name.
- Name string
- Custom Internet service name.
- name String
- Custom Internet service name.
- name string
- Custom Internet service name.
- name str
- Custom Internet service name.
- name String
- Custom Internet service name.
SdwanServiceInternetServiceCustomGroup, SdwanServiceInternetServiceCustomGroupArgs
- Name string
- Custom Internet Service group name.
- Name string
- Custom Internet Service group name.
- name String
- Custom Internet Service group name.
- name string
- Custom Internet Service group name.
- name str
- Custom Internet Service group name.
- name String
- Custom Internet Service group name.
SdwanServiceInternetServiceGroup, SdwanServiceInternetServiceGroupArgs
- Name string
- Internet Service group name.
- Name string
- Internet Service group name.
- name String
- Internet Service group name.
- name string
- Internet Service group name.
- name str
- Internet Service group name.
- name String
- Internet Service group name.
SdwanServiceInternetServiceName, SdwanServiceInternetServiceNameArgs
- Name string
- Internet service name.
- Name string
- Internet service name.
- name String
- Internet service name.
- name string
- Internet service name.
- name str
- Internet service name.
- name String
- Internet service name.
SdwanServicePriorityMember, SdwanServicePriorityMemberArgs
- Seq
Num int - Member sequence number.
- Seq
Num int - Member sequence number.
- seq
Num Integer - Member sequence number.
- seq
Num number - Member sequence number.
- seq_
num int - Member sequence number.
- seq
Num Number - Member sequence number.
SdwanServicePriorityZone, SdwanServicePriorityZoneArgs
- Name string
- Priority zone name.
- Name string
- Priority zone name.
- name String
- Priority zone name.
- name string
- Priority zone name.
- name str
- Priority zone name.
- name String
- Priority zone name.
SdwanServiceSla, SdwanServiceSlaArgs
- Health
Check string - SD-WAN health-check.
- Id int
- SLA ID.
- Health
Check string - SD-WAN health-check.
- Id int
- SLA ID.
- health
Check String - SD-WAN health-check.
- id Integer
- SLA ID.
- health
Check string - SD-WAN health-check.
- id number
- SLA ID.
- health_
check str - SD-WAN health-check.
- id int
- SLA ID.
- health
Check String - SD-WAN health-check.
- id Number
- SLA ID.
SdwanServiceSrc, SdwanServiceSrcArgs
- Name string
- Address6 or address6 group name.
- Name string
- Address6 or address6 group name.
- name String
- Address6 or address6 group name.
- name string
- Address6 or address6 group name.
- name str
- Address6 or address6 group name.
- name String
- Address6 or address6 group name.
SdwanServiceSrc6, SdwanServiceSrc6Args
- Name string
- Name string
- name String
- name string
- name str
- name String
SdwanServiceUser, SdwanServiceUserArgs
- Name string
- User name.
- Name string
- User name.
- name String
- User name.
- name string
- User name.
- name str
- User name.
- name String
- User name.
SdwanZone, SdwanZoneArgs
- Advpn
Health stringCheck - Health check for ADVPN local overlay link quality.
- Advpn
Select string - Enable/disable selection of ADVPN based on SDWAN information. Valid values:
enable
,disable
. - Minimum
Sla intMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- Name string
- Zone name.
- Service
Sla stringTie Break - Method of selecting member if more than one meets the SLA.
- Advpn
Health stringCheck - Health check for ADVPN local overlay link quality.
- Advpn
Select string - Enable/disable selection of ADVPN based on SDWAN information. Valid values:
enable
,disable
. - Minimum
Sla intMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- Name string
- Zone name.
- Service
Sla stringTie Break - Method of selecting member if more than one meets the SLA.
- advpn
Health StringCheck - Health check for ADVPN local overlay link quality.
- advpn
Select String - Enable/disable selection of ADVPN based on SDWAN information. Valid values:
enable
,disable
. - minimum
Sla IntegerMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- name String
- Zone name.
- service
Sla StringTie Break - Method of selecting member if more than one meets the SLA.
- advpn
Health stringCheck - Health check for ADVPN local overlay link quality.
- advpn
Select string - Enable/disable selection of ADVPN based on SDWAN information. Valid values:
enable
,disable
. - minimum
Sla numberMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- name string
- Zone name.
- service
Sla stringTie Break - Method of selecting member if more than one meets the SLA.
- advpn_
health_ strcheck - Health check for ADVPN local overlay link quality.
- advpn_
select str - Enable/disable selection of ADVPN based on SDWAN information. Valid values:
enable
,disable
. - minimum_
sla_ intmeet_ members - Minimum number of members which meet SLA when the neighbor is preferred.
- name str
- Zone name.
- service_
sla_ strtie_ break - Method of selecting member if more than one meets the SLA.
- advpn
Health StringCheck - Health check for ADVPN local overlay link quality.
- advpn
Select String - Enable/disable selection of ADVPN based on SDWAN information. Valid values:
enable
,disable
. - minimum
Sla NumberMeet Members - Minimum number of members which meet SLA when the neighbor is preferred.
- name String
- Zone name.
- service
Sla StringTie Break - Method of selecting member if more than one meets the SLA.
Import
System Sdwan can be imported using any of these accepted formats:
$ pulumi import fortios:system/sdwan:Sdwan labelname SystemSdwan
If you do not want to import arguments of block:
$ export “FORTIOS_IMPORT_TABLE”=“false”
$ pulumi import fortios:system/sdwan:Sdwan labelname SystemSdwan
$ unset “FORTIOS_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
fortios
Terraform Provider.