fortios.system.Standalonecluster
Explore with Pulumi AI
Configure FortiGate Session Life Support Protocol (FGSP) cluster attributes. Applies to FortiOS Version >= 6.4.0
.
Create Standalonecluster Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Standalonecluster(name: string, args?: StandaloneclusterArgs, opts?: CustomResourceOptions);
@overload
def Standalonecluster(resource_name: str,
args: Optional[StandaloneclusterArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def Standalonecluster(resource_name: str,
opts: Optional[ResourceOptions] = None,
asymmetric_traffic_control: Optional[str] = None,
cluster_peers: Optional[Sequence[StandaloneclusterClusterPeerArgs]] = None,
dynamic_sort_subtable: Optional[str] = None,
encryption: Optional[str] = None,
get_all_tables: Optional[str] = None,
group_member_id: Optional[int] = None,
layer2_connection: Optional[str] = None,
psksecret: Optional[str] = None,
session_sync_dev: Optional[str] = None,
standalone_group_id: Optional[int] = None,
vdomparam: Optional[str] = None)
func NewStandalonecluster(ctx *Context, name string, args *StandaloneclusterArgs, opts ...ResourceOption) (*Standalonecluster, error)
public Standalonecluster(string name, StandaloneclusterArgs? args = null, CustomResourceOptions? opts = null)
public Standalonecluster(String name, StandaloneclusterArgs args)
public Standalonecluster(String name, StandaloneclusterArgs args, CustomResourceOptions options)
type: fortios:system:Standalonecluster
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args StandaloneclusterArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args StandaloneclusterArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args StandaloneclusterArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args StandaloneclusterArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args StandaloneclusterArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var standaloneclusterResource = new Fortios.System.Standalonecluster("standaloneclusterResource", new()
{
AsymmetricTrafficControl = "string",
ClusterPeers = new[]
{
new Fortios.System.Inputs.StandaloneclusterClusterPeerArgs
{
DownIntfsBeforeSessSyncs = new[]
{
new Fortios.System.Inputs.StandaloneclusterClusterPeerDownIntfsBeforeSessSyncArgs
{
Name = "string",
},
},
HbInterval = 0,
HbLostThreshold = 0,
IpsecTunnelSync = "string",
Peerip = "string",
Peervd = "string",
SecondaryAddIpsecRoutes = "string",
SessionSyncFilter = new Fortios.System.Inputs.StandaloneclusterClusterPeerSessionSyncFilterArgs
{
CustomServices = new[]
{
new Fortios.System.Inputs.StandaloneclusterClusterPeerSessionSyncFilterCustomServiceArgs
{
DstPortRange = "string",
Id = 0,
SrcPortRange = "string",
},
},
Dstaddr = "string",
Dstaddr6 = "string",
Dstintf = "string",
Srcaddr = "string",
Srcaddr6 = "string",
Srcintf = "string",
},
SyncId = 0,
Syncvds = new[]
{
new Fortios.System.Inputs.StandaloneclusterClusterPeerSyncvdArgs
{
Name = "string",
},
},
},
},
DynamicSortSubtable = "string",
Encryption = "string",
GetAllTables = "string",
GroupMemberId = 0,
Layer2Connection = "string",
Psksecret = "string",
SessionSyncDev = "string",
StandaloneGroupId = 0,
Vdomparam = "string",
});
example, err := system.NewStandalonecluster(ctx, "standaloneclusterResource", &system.StandaloneclusterArgs{
AsymmetricTrafficControl: pulumi.String("string"),
ClusterPeers: system.StandaloneclusterClusterPeerArray{
&system.StandaloneclusterClusterPeerArgs{
DownIntfsBeforeSessSyncs: system.StandaloneclusterClusterPeerDownIntfsBeforeSessSyncArray{
&system.StandaloneclusterClusterPeerDownIntfsBeforeSessSyncArgs{
Name: pulumi.String("string"),
},
},
HbInterval: pulumi.Int(0),
HbLostThreshold: pulumi.Int(0),
IpsecTunnelSync: pulumi.String("string"),
Peerip: pulumi.String("string"),
Peervd: pulumi.String("string"),
SecondaryAddIpsecRoutes: pulumi.String("string"),
SessionSyncFilter: &system.StandaloneclusterClusterPeerSessionSyncFilterArgs{
CustomServices: system.StandaloneclusterClusterPeerSessionSyncFilterCustomServiceArray{
&system.StandaloneclusterClusterPeerSessionSyncFilterCustomServiceArgs{
DstPortRange: pulumi.String("string"),
Id: pulumi.Int(0),
SrcPortRange: pulumi.String("string"),
},
},
Dstaddr: pulumi.String("string"),
Dstaddr6: pulumi.String("string"),
Dstintf: pulumi.String("string"),
Srcaddr: pulumi.String("string"),
Srcaddr6: pulumi.String("string"),
Srcintf: pulumi.String("string"),
},
SyncId: pulumi.Int(0),
Syncvds: system.StandaloneclusterClusterPeerSyncvdArray{
&system.StandaloneclusterClusterPeerSyncvdArgs{
Name: pulumi.String("string"),
},
},
},
},
DynamicSortSubtable: pulumi.String("string"),
Encryption: pulumi.String("string"),
GetAllTables: pulumi.String("string"),
GroupMemberId: pulumi.Int(0),
Layer2Connection: pulumi.String("string"),
Psksecret: pulumi.String("string"),
SessionSyncDev: pulumi.String("string"),
StandaloneGroupId: pulumi.Int(0),
Vdomparam: pulumi.String("string"),
})
var standaloneclusterResource = new Standalonecluster("standaloneclusterResource", StandaloneclusterArgs.builder()
.asymmetricTrafficControl("string")
.clusterPeers(StandaloneclusterClusterPeerArgs.builder()
.downIntfsBeforeSessSyncs(StandaloneclusterClusterPeerDownIntfsBeforeSessSyncArgs.builder()
.name("string")
.build())
.hbInterval(0)
.hbLostThreshold(0)
.ipsecTunnelSync("string")
.peerip("string")
.peervd("string")
.secondaryAddIpsecRoutes("string")
.sessionSyncFilter(StandaloneclusterClusterPeerSessionSyncFilterArgs.builder()
.customServices(StandaloneclusterClusterPeerSessionSyncFilterCustomServiceArgs.builder()
.dstPortRange("string")
.id(0)
.srcPortRange("string")
.build())
.dstaddr("string")
.dstaddr6("string")
.dstintf("string")
.srcaddr("string")
.srcaddr6("string")
.srcintf("string")
.build())
.syncId(0)
.syncvds(StandaloneclusterClusterPeerSyncvdArgs.builder()
.name("string")
.build())
.build())
.dynamicSortSubtable("string")
.encryption("string")
.getAllTables("string")
.groupMemberId(0)
.layer2Connection("string")
.psksecret("string")
.sessionSyncDev("string")
.standaloneGroupId(0)
.vdomparam("string")
.build());
standalonecluster_resource = fortios.system.Standalonecluster("standaloneclusterResource",
asymmetric_traffic_control="string",
cluster_peers=[fortios.system.StandaloneclusterClusterPeerArgs(
down_intfs_before_sess_syncs=[fortios.system.StandaloneclusterClusterPeerDownIntfsBeforeSessSyncArgs(
name="string",
)],
hb_interval=0,
hb_lost_threshold=0,
ipsec_tunnel_sync="string",
peerip="string",
peervd="string",
secondary_add_ipsec_routes="string",
session_sync_filter=fortios.system.StandaloneclusterClusterPeerSessionSyncFilterArgs(
custom_services=[fortios.system.StandaloneclusterClusterPeerSessionSyncFilterCustomServiceArgs(
dst_port_range="string",
id=0,
src_port_range="string",
)],
dstaddr="string",
dstaddr6="string",
dstintf="string",
srcaddr="string",
srcaddr6="string",
srcintf="string",
),
sync_id=0,
syncvds=[fortios.system.StandaloneclusterClusterPeerSyncvdArgs(
name="string",
)],
)],
dynamic_sort_subtable="string",
encryption="string",
get_all_tables="string",
group_member_id=0,
layer2_connection="string",
psksecret="string",
session_sync_dev="string",
standalone_group_id=0,
vdomparam="string")
const standaloneclusterResource = new fortios.system.Standalonecluster("standaloneclusterResource", {
asymmetricTrafficControl: "string",
clusterPeers: [{
downIntfsBeforeSessSyncs: [{
name: "string",
}],
hbInterval: 0,
hbLostThreshold: 0,
ipsecTunnelSync: "string",
peerip: "string",
peervd: "string",
secondaryAddIpsecRoutes: "string",
sessionSyncFilter: {
customServices: [{
dstPortRange: "string",
id: 0,
srcPortRange: "string",
}],
dstaddr: "string",
dstaddr6: "string",
dstintf: "string",
srcaddr: "string",
srcaddr6: "string",
srcintf: "string",
},
syncId: 0,
syncvds: [{
name: "string",
}],
}],
dynamicSortSubtable: "string",
encryption: "string",
getAllTables: "string",
groupMemberId: 0,
layer2Connection: "string",
psksecret: "string",
sessionSyncDev: "string",
standaloneGroupId: 0,
vdomparam: "string",
});
type: fortios:system:Standalonecluster
properties:
asymmetricTrafficControl: string
clusterPeers:
- downIntfsBeforeSessSyncs:
- name: string
hbInterval: 0
hbLostThreshold: 0
ipsecTunnelSync: string
peerip: string
peervd: string
secondaryAddIpsecRoutes: string
sessionSyncFilter:
customServices:
- dstPortRange: string
id: 0
srcPortRange: string
dstaddr: string
dstaddr6: string
dstintf: string
srcaddr: string
srcaddr6: string
srcintf: string
syncId: 0
syncvds:
- name: string
dynamicSortSubtable: string
encryption: string
getAllTables: string
groupMemberId: 0
layer2Connection: string
psksecret: string
sessionSyncDev: string
standaloneGroupId: 0
vdomparam: string
Standalonecluster Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The Standalonecluster resource accepts the following input properties:
- Asymmetric
Traffic stringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - Cluster
Peers List<Pulumiverse.Fortios. System. Inputs. Standalonecluster Cluster Peer> - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Encryption string
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Group
Member intId - Cluster member ID (0 - 3).
- Layer2Connection string
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - Psksecret string
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- Session
Sync stringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- Standalone
Group intId - Cluster group ID (0 - 255). Must be the same for all members.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Asymmetric
Traffic stringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - Cluster
Peers []StandaloneclusterCluster Peer Args - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Encryption string
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Group
Member intId - Cluster member ID (0 - 3).
- Layer2Connection string
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - Psksecret string
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- Session
Sync stringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- Standalone
Group intId - Cluster group ID (0 - 255). Must be the same for all members.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- asymmetric
Traffic StringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - cluster
Peers List<StandaloneclusterCluster Peer> - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- encryption String
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- group
Member IntegerId - Cluster member ID (0 - 3).
- layer2Connection String
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - psksecret String
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- session
Sync StringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- standalone
Group IntegerId - Cluster group ID (0 - 255). Must be the same for all members.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- asymmetric
Traffic stringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - cluster
Peers StandaloneclusterCluster Peer[] - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- encryption string
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- group
Member numberId - Cluster member ID (0 - 3).
- layer2Connection string
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - psksecret string
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- session
Sync stringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- standalone
Group numberId - Cluster group ID (0 - 255). Must be the same for all members.
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- asymmetric_
traffic_ strcontrol - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - cluster_
peers Sequence[StandaloneclusterCluster Peer Args] - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- encryption str
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- group_
member_ intid - Cluster member ID (0 - 3).
- layer2_
connection str - Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - psksecret str
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- session_
sync_ strdev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- standalone_
group_ intid - Cluster group ID (0 - 255). Must be the same for all members.
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- asymmetric
Traffic StringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - cluster
Peers List<Property Map> - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- encryption String
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- group
Member NumberId - Cluster member ID (0 - 3).
- layer2Connection String
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - psksecret String
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- session
Sync StringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- standalone
Group NumberId - Cluster group ID (0 - 255). Must be the same for all members.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
Outputs
All input properties are implicitly available as output properties. Additionally, the Standalonecluster resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Standalonecluster Resource
Get an existing Standalonecluster resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: StandaloneclusterState, opts?: CustomResourceOptions): Standalonecluster
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
asymmetric_traffic_control: Optional[str] = None,
cluster_peers: Optional[Sequence[StandaloneclusterClusterPeerArgs]] = None,
dynamic_sort_subtable: Optional[str] = None,
encryption: Optional[str] = None,
get_all_tables: Optional[str] = None,
group_member_id: Optional[int] = None,
layer2_connection: Optional[str] = None,
psksecret: Optional[str] = None,
session_sync_dev: Optional[str] = None,
standalone_group_id: Optional[int] = None,
vdomparam: Optional[str] = None) -> Standalonecluster
func GetStandalonecluster(ctx *Context, name string, id IDInput, state *StandaloneclusterState, opts ...ResourceOption) (*Standalonecluster, error)
public static Standalonecluster Get(string name, Input<string> id, StandaloneclusterState? state, CustomResourceOptions? opts = null)
public static Standalonecluster get(String name, Output<String> id, StandaloneclusterState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Asymmetric
Traffic stringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - Cluster
Peers List<Pulumiverse.Fortios. System. Inputs. Standalonecluster Cluster Peer> - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Encryption string
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Group
Member intId - Cluster member ID (0 - 3).
- Layer2Connection string
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - Psksecret string
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- Session
Sync stringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- Standalone
Group intId - Cluster group ID (0 - 255). Must be the same for all members.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Asymmetric
Traffic stringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - Cluster
Peers []StandaloneclusterCluster Peer Args - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - Dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- Encryption string
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - Get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Group
Member intId - Cluster member ID (0 - 3).
- Layer2Connection string
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - Psksecret string
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- Session
Sync stringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- Standalone
Group intId - Cluster group ID (0 - 255). Must be the same for all members.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- asymmetric
Traffic StringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - cluster
Peers List<StandaloneclusterCluster Peer> - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- encryption String
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- group
Member IntegerId - Cluster member ID (0 - 3).
- layer2Connection String
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - psksecret String
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- session
Sync StringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- standalone
Group IntegerId - Cluster group ID (0 - 255). Must be the same for all members.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- asymmetric
Traffic stringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - cluster
Peers StandaloneclusterCluster Peer[] - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - dynamic
Sort stringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- encryption string
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - get
All stringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- group
Member numberId - Cluster member ID (0 - 3).
- layer2Connection string
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - psksecret string
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- session
Sync stringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- standalone
Group numberId - Cluster group ID (0 - 255). Must be the same for all members.
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- asymmetric_
traffic_ strcontrol - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - cluster_
peers Sequence[StandaloneclusterCluster Peer Args] - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - dynamic_
sort_ strsubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- encryption str
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - get_
all_ strtables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- group_
member_ intid - Cluster member ID (0 - 3).
- layer2_
connection str - Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - psksecret str
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- session_
sync_ strdev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- standalone_
group_ intid - Cluster group ID (0 - 255). Must be the same for all members.
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- asymmetric
Traffic StringControl - Asymmetric traffic control mode. Valid values:
cps-preferred
,strict-anti-replay
. - cluster
Peers List<Property Map> - Configure FortiGate Session Life Support Protocol (FGSP) session synchronization. The structure of
cluster_peer
block is documented below. - dynamic
Sort StringSubtable - Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- encryption String
- Enable/disable encryption when synchronizing sessions. Valid values:
enable
,disable
. - get
All StringTables - Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- group
Member NumberId - Cluster member ID (0 - 3).
- layer2Connection String
- Indicate whether layer 2 connections are present among FGSP members. Valid values:
available
,unavailable
. - psksecret String
- Pre-shared secret for session synchronization (ASCII string or hexadecimal encoded with a leading 0x).
- session
Sync StringDev - Offload session-sync process to kernel and sync sessions using connected interface(s) directly.
- standalone
Group NumberId - Cluster group ID (0 - 255). Must be the same for all members.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
Supporting Types
StandaloneclusterClusterPeer, StandaloneclusterClusterPeerArgs
- Down
Intfs List<Pulumiverse.Before Sess Syncs Fortios. System. Inputs. Standalonecluster Cluster Peer Down Intfs Before Sess Sync> - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - Hb
Interval int - Heartbeat interval (1 - 20 (100*ms). Increase to reduce false positives.
- Hb
Lost intThreshold - Lost heartbeat threshold (1 - 60). Increase to reduce false positives.
- Ipsec
Tunnel stringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - Peerip string
- IP address of the interface on the peer unit that is used for the session synchronization link.
- Peervd string
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- Secondary
Add stringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Session
Sync Pulumiverse.Filter Fortios. System. Inputs. Standalonecluster Cluster Peer Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - Sync
Id int - Sync ID.
- Syncvds
List<Pulumiverse.
Fortios. System. Inputs. Standalonecluster Cluster Peer Syncvd> - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below.
- Down
Intfs []StandaloneclusterBefore Sess Syncs Cluster Peer Down Intfs Before Sess Sync - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - Hb
Interval int - Heartbeat interval (1 - 20 (100*ms). Increase to reduce false positives.
- Hb
Lost intThreshold - Lost heartbeat threshold (1 - 60). Increase to reduce false positives.
- Ipsec
Tunnel stringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - Peerip string
- IP address of the interface on the peer unit that is used for the session synchronization link.
- Peervd string
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- Secondary
Add stringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - Session
Sync StandaloneclusterFilter Cluster Peer Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - Sync
Id int - Sync ID.
- Syncvds
[]Standalonecluster
Cluster Peer Syncvd - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below.
- down
Intfs List<StandaloneclusterBefore Sess Syncs Cluster Peer Down Intfs Before Sess Sync> - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - hb
Interval Integer - Heartbeat interval (1 - 20 (100*ms). Increase to reduce false positives.
- hb
Lost IntegerThreshold - Lost heartbeat threshold (1 - 60). Increase to reduce false positives.
- ipsec
Tunnel StringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip String
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd String
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary
Add StringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session
Sync StandaloneclusterFilter Cluster Peer Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - sync
Id Integer - Sync ID.
- syncvds
List<Standalonecluster
Cluster Peer Syncvd> - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below.
- down
Intfs StandaloneclusterBefore Sess Syncs Cluster Peer Down Intfs Before Sess Sync[] - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - hb
Interval number - Heartbeat interval (1 - 20 (100*ms). Increase to reduce false positives.
- hb
Lost numberThreshold - Lost heartbeat threshold (1 - 60). Increase to reduce false positives.
- ipsec
Tunnel stringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip string
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd string
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary
Add stringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session
Sync StandaloneclusterFilter Cluster Peer Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - sync
Id number - Sync ID.
- syncvds
Standalonecluster
Cluster Peer Syncvd[] - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below.
- down_
intfs_ Sequence[Standaloneclusterbefore_ sess_ syncs Cluster Peer Down Intfs Before Sess Sync] - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - hb_
interval int - Heartbeat interval (1 - 20 (100*ms). Increase to reduce false positives.
- hb_
lost_ intthreshold - Lost heartbeat threshold (1 - 60). Increase to reduce false positives.
- ipsec_
tunnel_ strsync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip str
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd str
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary_
add_ stripsec_ routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session_
sync_ Standaloneclusterfilter Cluster Peer Session Sync Filter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - sync_
id int - Sync ID.
- syncvds
Sequence[Standalonecluster
Cluster Peer Syncvd] - Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below.
- down
Intfs List<Property Map>Before Sess Syncs - List of interfaces to be turned down before session synchronization is complete. The structure of
down_intfs_before_sess_sync
block is documented below. - hb
Interval Number - Heartbeat interval (1 - 20 (100*ms). Increase to reduce false positives.
- hb
Lost NumberThreshold - Lost heartbeat threshold (1 - 60). Increase to reduce false positives.
- ipsec
Tunnel StringSync - Enable/disable IPsec tunnel synchronization. Valid values:
enable
,disable
. - peerip String
- IP address of the interface on the peer unit that is used for the session synchronization link.
- peervd String
- VDOM that contains the session synchronization link interface on the peer unit. Usually both peers would have the same peervd.
- secondary
Add StringIpsec Routes - Enable/disable IKE route announcement on the backup unit. Valid values:
enable
,disable
. - session
Sync Property MapFilter - Add one or more filters if you only want to synchronize some sessions. Use the filter to configure the types of sessions to synchronize. The structure of
session_sync_filter
block is documented below. - sync
Id Number - Sync ID.
- syncvds List<Property Map>
- Sessions from these VDOMs are synchronized using this session synchronization configuration. The structure of
syncvd
block is documented below.
StandaloneclusterClusterPeerDownIntfsBeforeSessSync, StandaloneclusterClusterPeerDownIntfsBeforeSessSyncArgs
- Name string
- Interface name.
- Name string
- Interface name.
- name String
- Interface name.
- name string
- Interface name.
- name str
- Interface name.
- name String
- Interface name.
StandaloneclusterClusterPeerSessionSyncFilter, StandaloneclusterClusterPeerSessionSyncFilterArgs
- Custom
Services List<Pulumiverse.Fortios. System. Inputs. Standalonecluster Cluster Peer Session Sync Filter Custom Service> - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custom services. The structure of
custom_service
block is documented below. - Dstaddr string
- Only sessions to this IPv4 address are synchronized.
- Dstaddr6 string
- Only sessions to this IPv6 address are synchronized.
- Dstintf string
- Only sessions to this interface are synchronized.
- Srcaddr string
- Only sessions from this IPv4 address are synchronized.
- Srcaddr6 string
- Only sessions from this IPv6 address are synchronized.
- Srcintf string
- Only sessions from this interface are synchronized.
- Custom
Services []StandaloneclusterCluster Peer Session Sync Filter Custom Service - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custom services. The structure of
custom_service
block is documented below. - Dstaddr string
- Only sessions to this IPv4 address are synchronized.
- Dstaddr6 string
- Only sessions to this IPv6 address are synchronized.
- Dstintf string
- Only sessions to this interface are synchronized.
- Srcaddr string
- Only sessions from this IPv4 address are synchronized.
- Srcaddr6 string
- Only sessions from this IPv6 address are synchronized.
- Srcintf string
- Only sessions from this interface are synchronized.
- custom
Services List<StandaloneclusterCluster Peer Session Sync Filter Custom Service> - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custom services. The structure of
custom_service
block is documented below. - dstaddr String
- Only sessions to this IPv4 address are synchronized.
- dstaddr6 String
- Only sessions to this IPv6 address are synchronized.
- dstintf String
- Only sessions to this interface are synchronized.
- srcaddr String
- Only sessions from this IPv4 address are synchronized.
- srcaddr6 String
- Only sessions from this IPv6 address are synchronized.
- srcintf String
- Only sessions from this interface are synchronized.
- custom
Services StandaloneclusterCluster Peer Session Sync Filter Custom Service[] - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custom services. The structure of
custom_service
block is documented below. - dstaddr string
- Only sessions to this IPv4 address are synchronized.
- dstaddr6 string
- Only sessions to this IPv6 address are synchronized.
- dstintf string
- Only sessions to this interface are synchronized.
- srcaddr string
- Only sessions from this IPv4 address are synchronized.
- srcaddr6 string
- Only sessions from this IPv6 address are synchronized.
- srcintf string
- Only sessions from this interface are synchronized.
- custom_
services Sequence[StandaloneclusterCluster Peer Session Sync Filter Custom Service] - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custom services. The structure of
custom_service
block is documented below. - dstaddr str
- Only sessions to this IPv4 address are synchronized.
- dstaddr6 str
- Only sessions to this IPv6 address are synchronized.
- dstintf str
- Only sessions to this interface are synchronized.
- srcaddr str
- Only sessions from this IPv4 address are synchronized.
- srcaddr6 str
- Only sessions from this IPv6 address are synchronized.
- srcintf str
- Only sessions from this interface are synchronized.
- custom
Services List<Property Map> - Only sessions using these custom services are synchronized. Use source and destination port ranges to define these custom services. The structure of
custom_service
block is documented below. - dstaddr String
- Only sessions to this IPv4 address are synchronized.
- dstaddr6 String
- Only sessions to this IPv6 address are synchronized.
- dstintf String
- Only sessions to this interface are synchronized.
- srcaddr String
- Only sessions from this IPv4 address are synchronized.
- srcaddr6 String
- Only sessions from this IPv6 address are synchronized.
- srcintf String
- Only sessions from this interface are synchronized.
StandaloneclusterClusterPeerSessionSyncFilterCustomService, StandaloneclusterClusterPeerSessionSyncFilterCustomServiceArgs
- Dst
Port stringRange - Custom service destination port range.
- Id int
- Custom service ID.
- Src
Port stringRange - Custom service source port range.
- Dst
Port stringRange - Custom service destination port range.
- Id int
- Custom service ID.
- Src
Port stringRange - Custom service source port range.
- dst
Port StringRange - Custom service destination port range.
- id Integer
- Custom service ID.
- src
Port StringRange - Custom service source port range.
- dst
Port stringRange - Custom service destination port range.
- id number
- Custom service ID.
- src
Port stringRange - Custom service source port range.
- dst_
port_ strrange - Custom service destination port range.
- id int
- Custom service ID.
- src_
port_ strrange - Custom service source port range.
- dst
Port StringRange - Custom service destination port range.
- id Number
- Custom service ID.
- src
Port StringRange - Custom service source port range.
StandaloneclusterClusterPeerSyncvd, StandaloneclusterClusterPeerSyncvdArgs
- Name string
- VDOM name.
- Name string
- VDOM name.
- name String
- VDOM name.
- name string
- VDOM name.
- name str
- VDOM name.
- name String
- VDOM name.
Import
System StandaloneCluster can be imported using any of these accepted formats:
$ pulumi import fortios:system/standalonecluster:Standalonecluster labelname SystemStandaloneCluster
If you do not want to import arguments of block:
$ export “FORTIOS_IMPORT_TABLE”=“false”
$ pulumi import fortios:system/standalonecluster:Standalonecluster labelname SystemStandaloneCluster
$ unset “FORTIOS_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
fortios
Terraform Provider.