fortinet.fortimanager.fmgr_user_radius_dynamicmapping – Configure RADIUS server entries.

• Synopsis
• Parameters
• Notes
• Examples
• Return Values

Synopsis

• This module is able to configure a FortiManager device.
• Examples include all parameters and values which need to be adjusted to data sources before usage.

Parameters

Notes

Examples

- hosts: fortimanager-inventory
  collections:
    - fortinet.fortimanager
  connection: httpapi
  vars:
     ansible_httpapi_use_ssl: True
     ansible_httpapi_validate_certs: False
     ansible_httpapi_port: 443
  tasks:
   - name: Configure RADIUS server entries.
     fmgr_user_radius_dynamicmapping:
        bypass_validation: False
        workspace_locking_adom: <value in [global, custom adom including root]>
        workspace_locking_timeout: 300
        rc_succeeded: [0, -2, -3, ...]
        rc_failed: [-2, -3, ...]
        adom: <your own value>
        radius: <your own value>
        state: <value in [present, absent]>
        user_radius_dynamicmapping:
           _scope:
             -
                 name: <value of string>
                 vdom: <value of string>
           acct-all-servers: <value in [disable, enable]>
           acct-interim-interval: <value of integer>
           all-usergroup: <value in [disable, enable]>
           auth-type: <value in [pap, chap, ms_chap, ...]>
           class: <value of string>
           dp-carrier-endpoint-attribute: <value in [User-Name, User-Password, CHAP-Password, ...]>
           dp-carrier-endpoint-block-attribute: <value in [User-Name, User-Password, CHAP-Password, ...]>
           dp-context-timeout: <value of integer>
           dp-flush-ip-session: <value in [disable, enable]>
           dp-hold-time: <value of integer>
           dp-http-header: <value of string>
           dp-http-header-fallback: <value in [ip-header-address, default-profile]>
           dp-http-header-status: <value in [disable, enable]>
           dp-http-header-suppress: <value in [disable, enable]>
           dp-log-dyn_flags:
             - none
             - protocol-error
             - profile-missing
             - context-missing
             - accounting-stop-missed
             - accounting-event
             - radiusd-other
             - endpoint-block
           dp-log-period: <value of integer>
           dp-mem-percent: <value of integer>
           dp-profile-attribute: <value in [User-Name, User-Password, CHAP-Password, ...]>
           dp-profile-attribute-key: <value of string>
           dp-radius-response: <value in [disable, enable]>
           dp-radius-server-port: <value of integer>
           dp-secret: <value of string>
           dp-validate-request-secret: <value in [disable, enable]>
           dynamic-profile: <value in [disable, enable]>
           endpoint-translation: <value in [disable, enable]>
           ep-carrier-endpoint-convert-hex: <value in [disable, enable]>
           ep-carrier-endpoint-header: <value of string>
           ep-carrier-endpoint-header-suppress: <value in [disable, enable]>
           ep-carrier-endpoint-prefix: <value in [disable, enable]>
           ep-carrier-endpoint-prefix-range-max: <value of integer>
           ep-carrier-endpoint-prefix-range-min: <value of integer>
           ep-carrier-endpoint-prefix-string: <value of string>
           ep-carrier-endpoint-source: <value in [http-header, cookie]>
           ep-ip-header: <value of string>
           ep-ip-header-suppress: <value in [disable, enable]>
           ep-missing-header-fallback: <value in [session-ip, policy-profile]>
           ep-profile-query-type: <value in [session-ip, extract-ip, extract-carrier-endpoint]>
           h3c-compatibility: <value in [disable, enable]>
           nas-ip: <value of string>
           password-encoding: <value in [ISO-8859-1, auto]>
           password-renewal: <value in [disable, enable]>
           radius-coa: <value in [disable, enable]>
           radius-port: <value of integer>
           rsso: <value in [disable, enable]>
           rsso-context-timeout: <value of integer>
           rsso-endpoint-attribute: <value in [User-Name, User-Password, CHAP-Password, ...]>
           rsso-endpoint-block-attribute: <value in [User-Name, User-Password, CHAP-Password, ...]>
           rsso-ep-one-ip-only: <value in [disable, enable]>
           rsso-flush-ip-session: <value in [disable, enable]>
           rsso-log-flags:
             - none
             - protocol-error
             - profile-missing
             - context-missing
             - accounting-stop-missed
             - accounting-event
             - radiusd-other
             - endpoint-block
           rsso-log-period: <value of integer>
           rsso-radius-response: <value in [disable, enable]>
           rsso-radius-server-port: <value of integer>
           rsso-secret: <value of string>
           rsso-validate-request-secret: <value in [disable, enable]>
           secondary-secret: <value of string>
           secondary-server: <value of string>
           secret: <value of string>
           server: <value of string>
           source-ip: <value of string>
           sso-attribute: <value in [User-Name, User-Password, CHAP-Password, ...]>
           sso-attribute-key: <value of string>
           sso-attribute-value-override: <value in [disable, enable]>
           tertiary-secret: <value of string>
           tertiary-server: <value of string>
           timeout: <value of integer>
           use-group-for-profile: <value in [disable, enable]>
           use-management-vdom: <value in [disable, enable]>
           username-case-sensitive: <value in [disable, enable]>
           interface: <value of string>
           interface-select-method: <value in [auto, sdwan, specify]>
           group-override-attr-type: <value in [filter-Id, class]>
           switch-controller-acct-fast-framedip-detect: <value of integer>
           accounting-server:
             -
                 id: <value of integer>
                 interface: <value of string>
                 interface-select-method: <value in [auto, sdwan, specify]>
                 port: <value of integer>
                 secret: <value of string>
                 server: <value of string>
                 source-ip: <value of string>
                 status: <value in [disable, enable]>
           switch-controller-service-type:
             - login
             - framed
             - callback-login
             - callback-framed
             - outbound
             - administrative
             - nas-prompt
             - authenticate-only
             - callback-nas-prompt
             - call-check
             - callback-administrative

Return Values

Common return values are documented here, the following are the fields unique to this module:

Authors

• Link Zheng (@chillancezen)
• Jie Xue (@JieX19)
• Frank Shen (@fshen01)
• Hongbin Lu (@fgtdev-hblu)