This allows privileges to be raised for the specific tasks that need them. If enabled, the IPv4 default route from wireguard.peer-routes will be placed to a dedicated routing-table and two policy routing rules will be added. For example, a value of FE:FF:FF:00:00:00 68:F7:28:00:00:00 will set the OUI of the MAC address to 68:F7:28, while the lower bits are randomized. If specified, directs the device to only associate with the given access point. This is only used with VXLAN - VXLAN destination IP address. But network modules are different from Linux/Unix and Windows modules, and you must understand some network-specific concepts to succeed. If not specified, the port will be chosen randomly when the interface comes up. If non-zero, only transmit packets of the specified size or smaller, breaking larger packets up into multiple Ethernet frames. If defined and method6 is not specified, automatically set ipv6.method to manual. Configuration management REQUEST MORE INFO Automation for reliable, consistent, compliant operations Now more than ever, your IT enterprise teams are managing a complex array of applications and systems, including clouds, networks, storage, servers, and edge devices. The device unique identifier (as given by the WWAN management service) which this connection applies to. Ansible Network Border Gateway Protocol (BGP) validated content collection focuses on platform-agnostic network automation and enhances BGP management. But if a password is required, it is specified here. When using Cisco LEAP (that is, if key-mgmt=ieee8021x and auth-alg=leap) the leap-username and leap-password properties must be specified. Ansible Lightspeed with IBM Watson Code Assistant, the Red Hat Developer Hub and Red Hat . This is the type of device or network connection that you wish to create for a team. This guide introduces basic Ansible concepts and guides you through your first Ansible commands, playbooks and inventory entries. Ignore suboptions which are invalid or unsupported by the version of NetworkManager/nmcli installed on the host. Ansible is an agent-less IT-automation engine that works over secure shell (SSH). Although these tasks are not needed to write data to disk, they are used in this example to demonstrate some methods of accessing facts about the given devices or a named host. Keyword parameters. Can run in check_mode and return changed status prediction without modifying target. yes aws_region: "ap-south-1" network: assign_public_ip: true image_id: "{{ ami }}" . Ansible supports become when using connection: ansible.netcommon.network_cli. Otherwise they will be sent every 30 seconds. Repository (Sources) Which type of become should be used, for network_cli the only valid choice is enable. Permanently configuring a device as unmanaged in NetworkManager It provides everything needed to create, execute, and manage automation in a single subscription. Connections to roaming networks will not be made. In AP mode, the created network does not broadcast its SSID. Ansible collections support a wide range of vendors, device types, and actions, so you can manage your entire network with a single automation tool. Additionally, there are various eBooks available to help you explore the capabilities of Ansible Automation Platform such as: Automation at the edge; Choosing an automation tool; An IT executive's guide to automation; There is also a cheat sheet for WiFi automation with Ansible and SD that provides a quick reference for network automation tasks. To check whether it is installed, run ansible-galaxy collection list. Ansible Networking ships with a number of network-specific facts modules. Ansible 2.10 (or higher) installed. You need further requirements to be able to use this module, Informs Ansible which Network platform this hosts corresponds to. Ansible Network modules can configure your network stack, test and validate existing network state, and discover and correct network configuration drift. This is only used when ipsec-enabled=true. Note that if the peers AllowedIPs is 0.0.0.0/0 or ::/0 and the profiles ipv4.never-default or ipv6.never-default setting is enabled, the peer route for this peer wont be added automatically. (This example originally appeared in the Deep Dive on cli_command for Network Automation blog post by Sean Cavanaugh -@IPvSean). Network modules for various hardware are supported by different teams including the hardware vendors themselves, volunteers from the Ansible community, and the Ansible Network Team. In 2017, I emailed several colleagues about a new discovery: Ansible modules. (D): This marks a module as deprecated, which means a module is kept for backwards compatibility but usage is discouraged. disabled was added in community.general 3.3.0. If you want to control non-ethernet connection attached to bond, bridge or team consider using slave_type option. Units are in Kb/s, so for example 5500 = 5.5 Mbit/s. A MCC/MNC string like 310260 or 21601I identifying the specific mobile network operator which this connection applies to. The set bits of the mask are to be filled with the current MAC address of the device, while the unset bits are subject to randomization. If you use ssh-agent, you do not need the ansible_password lines. Configuration of a VPN connection (PPTP and L2TP). If false, no such routes are added automatically. One of 2 (disable Wi-Fi power saving), 3 (enable Wi-Fi power saving), 1 (dont touch currently configure setting) or 0 (use the globally configured value). See Templating (Jinja2) for more information. By passing this exam you become a Red Hat Certified Specialist in Ansible Network Automation and can apply your credential toward . Index 0 WEP key. One of 0 (never randomize unless the user has set a global default to randomize and the supplicant supports randomization), 1 (never randomize the MAC address), or 2 (always randomize the MAC address). 10 best Ansible modules for infrastructure as code 10 (plus a bonus) Ansible automation modules that anyonefrom a beginner to a power usercan leverage to transform their network infrastructure to code. Many providers do not require a password, or accept any password. You can encode using this Ansible jinja2 expression: "0s{{ '[YOUR PRE-SHARED KEY]' | ansible.builtin.b64encode }}". An up-to-date list of supported attributes can be found here: https://networkmanager.dev/docs/api/latest/settings-802-11-wireless.html. With Ansible, you can: Automate repetitive tasks to speed routine network changes and free up your time for more strategic work. * connection options. Type of the device of this slaves master connection (for example bond). Copyright Ansible project contributors. Valid values are 0 (default key) through 3. 4.6 / 5 Score. The APN may only be composed of the characters a-z, 0-9, ., and - per GSM 03.60 Section 14.9. If blank, infrastructure is assumed. With Ansible, you can: Automate repetitive tasks to speed routine network changes and free up your time for more strategic work, Leverage the same simple, powerful, and agentless automation tool for network tasks that operations and development use, Separate the data model (in a playbook or role) from the execution layer (through Ansible modules) to manage heterogeneous network devices, Benefit from community and vendor-generated sample playbooks and roles to help accelerate network automation projects, Communicate securely with network hardware over SSH or HTTPS. This module is part of the community.general collection (version 7.0.1). Network Getting Started. If you have two or more network platforms in your environment, you can use the platform-independent modules to simplify your playbooks. This role is designed to provide a network platform agnostic approach to managing the active (running) configuration file on a remote device. The corresponding password for ansible_user to log in as. In this example, we will create an inventory file containing some network switches, then run a playbook to connect to the network devices and return some information about them. Setting it to 0 disables it. If non-zero, directs the device to use the specified transmit power. This is only used with VLAN - VLAN egress priority mapping. When working with Ansible Networking, set this to an appropriate network connection option, such as``ansible.netcommon.network_cli``, so Ansible treats the remote node as a network device with a limited execution environment. Ansible collections support a wide range of vendors, device types, and actions, so you can manage your entire network with a single automation tool. This parameter defaults to conn_name when left unset for all connection types except vpn that removes it. Note that some consumer access points (like the Linksys WRT54G) number the keys 1 - 4. This capability is highly driver dependent and not supported by all devices. This WEP index is not used by most networks. Note that when using variables from tasks in this way we use double quotes (") and double curly-brackets ({{}} to tell Ansible that this is a variable. We recommend using the [my_group:vars] capability in your inventory file. Index 2 WEP key. The nmcli module can also be used to configure network teaming and bonding. Ansible uses the ansible-connection setting to determine how to connect to a remote device. This property does not change the MAC address of the device (for example for MAC spoofing). Look up secrets stored in AWS Secrets Manager provided the caller has the appropriate permissions to read the secret. In the Project section, click on the project name you previously created and select the AWS/create_ec2instance.yml file. ), net_banner Manage multiline banners on network devices, net_logging Manage logging on network devices, net_system Manage the system attributes on network devices, net_user Manage the aggregate of local users on network device, vyos_interface Manage Interface on VyOS network devices, vyos_l3_interface Manage L3 interfaces on VyOS network devices, vyos_linkagg Manage link aggregation groups on VyOS network devices, vyos_lldp Manage LLDP configuration on VyOS network devices, vyos_lldp_interface Manage LLDP interfaces configuration on VyOS network devices, Understanding privilege escalation: become, Virtualization and Containerization Guides, Controlling how Ansible behaves: precedence rules, the latest Ansible community documentation. Whether the connection profile can be automatically activated. This is only used with VXLAN - VXLAN local IP address. Entry point main - Role to configure the iDRAC attribute . Day 1 - Push network configurations to maintain consistency across the infrastructure Day 2 - Optimizes network compliance and operation Solution Benefits The combined Ansible and Cisco solution provides: Speed IT Transformation Leverage Open Ecosystem Efficient Operational Model Faster Adoption Improve Speed and Agility Get Started This property is deprecated for cloned-mac-address. The data collected by these modules is documented in the Return Values section of the module docs, in this case arista.eos.eos_facts and vyos.vyos.vyos_facts. If the Ansible Controller does not have a direct route to the remote device and you need to use a Jump Host, please see the Ansible Network Proxy Command guide for details on how to achieve this. WPS can be disabled by setting this property to a value of 1. This document describes some examples of using Ansible to manage your network infrastructure. Certain network platforms, such as Arista EOS and Cisco IOS, have the concept of different privilege modes. If ip4 is set, ipv4.method is automatically set to manual and this parameter is not needed. There is little point in changing the default setting as NetworkManager will automatically determine whether it is feasible to start WPS enrollment from the Access Point capabilities. When set to -1, the global default is used; in case the global default is unspecified it is assumed to be 0. List of IPv4 addresses to this interface. If package-path is not provided server will try to get the latest package from the User Center, cp_mgmt_run_script Executes the script on a given list of targets, cp_mgmt_security_zone Manages security-zone objects on Check Point over Web Services API, cp_mgmt_security_zone_facts Get security-zone objects facts on Check Point over Web Services API, cp_mgmt_service_dce_rpc Manages service-dce-rpc objects on Check Point over Web Services API, cp_mgmt_service_dce_rpc_facts Get service-dce-rpc objects facts on Check Point over Web Services API, cp_mgmt_service_group Manages service-group objects on Check Point over Web Services API, cp_mgmt_service_group_facts Get service-group objects facts on Check Point over Web Services API, cp_mgmt_service_icmp Manages service-icmp objects on Check Point over Web Services API, cp_mgmt_service_icmp6 Manages service-icmp6 objects on Check Point over Web Services API, cp_mgmt_service_icmp6_facts Get service-icmp6 objects facts on Check Point over Web Services API, cp_mgmt_service_icmp_facts Get service-icmp objects facts on Check Point over Web Services API, cp_mgmt_service_other Manages service-other objects on Check Point over Web Services API, cp_mgmt_service_other_facts Get service-other objects facts on Check Point over Web Services API, cp_mgmt_service_rpc Manages service-rpc objects on Check Point over Web Services API, cp_mgmt_service_rpc_facts Get service-rpc objects facts on Check Point over Web Services API, cp_mgmt_service_sctp Manages service-sctp objects on Check Point over Web Services API, cp_mgmt_service_sctp_facts Get service-sctp objects facts on Check Point over Web Services API, cp_mgmt_service_tcp Manages service-tcp objects on Check Point over Web Services API, cp_mgmt_service_tcp_facts Get service-tcp objects facts on Check Point over Web Services API, cp_mgmt_service_udp Manages service-udp objects on Check Point over Web Services API, cp_mgmt_service_udp_facts Get service-udp objects facts on Check Point over Web Services API, cp_mgmt_session_facts Get session objects facts on Check Point over Web Services API, cp_mgmt_simple_gateway Manages simple-gateway objects on Check Point over Web Services API, cp_mgmt_simple_gateway_facts Get simple-gateway objects facts on Check Point over Web Services API, cp_mgmt_tag Manages tag objects on Check Point over Web Services API, cp_mgmt_tag_facts Get tag objects facts on Check Point over Web Services API, cp_mgmt_threat_exception Manages threat-exception objects on Check Point over Web Services API, cp_mgmt_threat_exception_facts Get threat-exception objects facts on Check Point over Web Services API, cp_mgmt_threat_indicator Manages threat-indicator objects on Check Point over Web Services API, cp_mgmt_threat_indicator_facts Get threat-indicator objects facts on Check Point over Web Services API, cp_mgmt_threat_layer Manages threat-layer objects on Check Point over Web Services API, cp_mgmt_threat_layer_facts Get threat-layer objects facts on Check Point over Web Services API, cp_mgmt_threat_profile Manages threat-profile objects on Check Point over Web Services API, cp_mgmt_threat_profile_facts Get threat-profile objects facts on Check Point over Web Services API, cp_mgmt_threat_protection_override Edit existing object using object name or uid, cp_mgmt_threat_rule Manages threat-rule objects on Check Point over Web Services API, cp_mgmt_threat_rule_facts Get threat-rule objects facts on Check Point over Web Services API, cp_mgmt_time Manages time objects on Check Point over Web Services API, cp_mgmt_time_facts Get time objects facts on Check Point over Web Services API, cp_mgmt_verify_policy Verifies the policy of the selected package, cp_mgmt_vpn_community_meshed Manages vpn-community-meshed objects on Check Point over Web Services API, cp_mgmt_vpn_community_meshed_facts Get vpn-community-meshed objects facts on Check Point over Web Services API, cp_mgmt_vpn_community_star Manages vpn-community-star objects on Check Point over Web Services API, cp_mgmt_vpn_community_star_facts Get vpn-community-star objects facts on Check Point over Web Services API, cp_mgmt_wildcard Manages wildcard objects on Check Point over Web Services API, cp_mgmt_wildcard_facts Get wildcard objects facts on Check Point over Web Services API, cp_publish All the changes done by this user will be seen by all users only after publish is called, cli_command Run a cli command on cli-based network devices, cli_config Push text based configuration to network devices over network_cli, ce_aaa_server Manages AAA server global configuration on HUAWEI CloudEngine switches, ce_aaa_server_host Manages AAA server host configuration on HUAWEI CloudEngine switches, ce_acl Manages base ACL configuration on HUAWEI CloudEngine switches, ce_acl_advance Manages advanced ACL configuration on HUAWEI CloudEngine switches, ce_acl_interface Manages applying ACLs to interfaces on HUAWEI CloudEngine switches, ce_bfd_global Manages BFD global configuration on HUAWEI CloudEngine devices, ce_bfd_session Manages BFD session configuration on HUAWEI CloudEngine devices, ce_bfd_view Manages BFD session view configuration on HUAWEI CloudEngine devices, ce_bgp Manages BGP configuration on HUAWEI CloudEngine switches, ce_bgp_af Manages BGP Address-family configuration on HUAWEI CloudEngine switches, ce_bgp_neighbor Manages BGP peer configuration on HUAWEI CloudEngine switches, ce_bgp_neighbor_af Manages BGP neighbor Address-family configuration on HUAWEI CloudEngine switches, ce_command Run arbitrary command on HUAWEI CloudEngine devices, ce_config Manage Huawei CloudEngine configuration sections, ce_dldp Manages global DLDP configuration on HUAWEI CloudEngine switches, ce_dldp_interface Manages interface DLDP configuration on HUAWEI CloudEngine switches, ce_eth_trunk Manages Eth-Trunk interfaces on HUAWEI CloudEngine switches, ce_evpn_bd_vni Manages EVPN VXLAN Network Identifier (VNI) on HUAWEI CloudEngine switches, ce_evpn_bgp Manages BGP EVPN configuration on HUAWEI CloudEngine switches, ce_evpn_bgp_rr Manages RR for the VXLAN Network on HUAWEI CloudEngine switches, ce_evpn_global Manages global configuration of EVPN on HUAWEI CloudEngine switches, ce_facts Gets facts about HUAWEI CloudEngine switches, ce_file_copy Copy a file to a remote cloudengine device over SCP on HUAWEI CloudEngine switches, ce_info_center_debug Manages information center debug configuration on HUAWEI CloudEngine switches, ce_info_center_global Manages outputting logs on HUAWEI CloudEngine switches, ce_info_center_log Manages information center log configuration on HUAWEI CloudEngine switches, ce_info_center_trap Manages information center trap configuration on HUAWEI CloudEngine switches, ce_interface Manages physical attributes of interfaces on HUAWEI CloudEngine switches, ce_interface_ospf Manages configuration of an OSPF interface instanceon HUAWEI CloudEngine switches, ce_ip_interface Manages L3 attributes for IPv4 and IPv6 interfaces on HUAWEI CloudEngine switches, ce_link_status Get interface link status on HUAWEI CloudEngine switches, ce_mlag_config Manages MLAG configuration on HUAWEI CloudEngine switches, ce_mlag_interface Manages MLAG interfaces on HUAWEI CloudEngine switches, ce_mtu Manages MTU settings on HUAWEI CloudEngine switches, ce_netconf Run an arbitrary netconf command on HUAWEI CloudEngine switches, ce_netstream_aging Manages timeout mode of NetStream on HUAWEI CloudEngine switches, ce_netstream_export Manages netstream export on HUAWEI CloudEngine switches, ce_netstream_global Manages global parameters of NetStream on HUAWEI CloudEngine switches, ce_netstream_template Manages NetStream template configuration on HUAWEI CloudEngine switches, ce_ntp Manages core NTP configuration on HUAWEI CloudEngine switches, ce_ntp_auth Manages NTP authentication configuration on HUAWEI CloudEngine switches, ce_ospf Manages configuration of an OSPF instance on HUAWEI CloudEngine switches, ce_ospf_vrf Manages configuration of an OSPF VPN instance on HUAWEI CloudEngine switches, ce_reboot Reboot a HUAWEI CloudEngine switches, ce_rollback Set a checkpoint or rollback to a checkpoint on HUAWEI CloudEngine switches, ce_sflow Manages sFlow configuration on HUAWEI CloudEngine switches, ce_snmp_community Manages SNMP community configuration on HUAWEI CloudEngine switches, ce_snmp_contact Manages SNMP contact configuration on HUAWEI CloudEngine switches, ce_snmp_location Manages SNMP location configuration on HUAWEI CloudEngine switches, ce_snmp_target_host Manages SNMP target host configuration on HUAWEI CloudEngine switches, ce_snmp_traps Manages SNMP traps configuration on HUAWEI CloudEngine switches, ce_snmp_user Manages SNMP user configuration on HUAWEI CloudEngine switches, ce_startup Manages a system startup information on HUAWEI CloudEngine switches, ce_static_route Manages static route configuration on HUAWEI CloudEngine switches, ce_stp Manages STP configuration on HUAWEI CloudEngine switches, ce_switchport Manages Layer 2 switchport interfaces on HUAWEI CloudEngine switches, ce_vlan Manages VLAN resources and attributes on Huawei CloudEngine switches, ce_vrf Manages VPN instance on HUAWEI CloudEngine switches, ce_vrf_af Manages VPN instance address family on HUAWEI CloudEngine switches, ce_vrf_interface Manages interface specific VPN configuration on HUAWEI CloudEngine switches, ce_vrrp Manages VRRP interfaces on HUAWEI CloudEngine devices, ce_vxlan_arp Manages ARP attributes of VXLAN on HUAWEI CloudEngine devices, ce_vxlan_gateway Manages gateway for the VXLAN network on HUAWEI CloudEngine devices, ce_vxlan_global Manages global attributes of VXLAN and bridge domain on HUAWEI CloudEngine devices, ce_vxlan_tunnel Manages VXLAN tunnel configuration on HUAWEI CloudEngine devices, ce_vxlan_vap Manages VXLAN virtual access point on HUAWEI CloudEngine Devices, cv_server_provision Provision server port by applying or removing template configuration to an Arista CloudVision Portal configlet that is applied to a switch, cnos_backup Backup the current running or startup configuration to a remote server on devices running Lenovo CNOS, cnos_banner Manage multiline banners on Lenovo CNOS devices, cnos_bgp Manage BGP resources and attributes on devices running CNOS, cnos_command Run arbitrary commands on Lenovo CNOS devices, cnos_conditional_command Execute a single command based on condition on devices running Lenovo CNOS, cnos_conditional_template Manage switch configuration using templates based on condition on devices running Lenovo CNOS, cnos_config Manage Lenovo CNOS configuration sections, cnos_factory Reset the switch startup configuration to default (factory) on devices running Lenovo CNOS, cnos_facts Collect facts from remote devices running Lenovo CNOS, cnos_image Perform firmware upgrade/download from a remote server on devices running Lenovo CNOS, cnos_interface Manage Interface on Lenovo CNOS network devices, cnos_l2_interface Manage Layer-2 interface on Lenovo CNOS devices, cnos_l3_interface Manage Layer-3 interfaces on Lenovo CNOS network devices, cnos_linkagg Manage link aggregation groups on Lenovo CNOS devices, cnos_lldp Manage LLDP configuration on Lenovo CNOS network devices, cnos_logging Manage logging on network devices, cnos_reload Perform switch restart on devices running Lenovo CNOS, cnos_rollback Roll back the running or startup configuration from a remote server on devices running Lenovo CNOS, cnos_save Save the running configuration as the startup configuration on devices running Lenovo CNOS, cnos_showrun Collect the current running configuration on devices running on CNOS, cnos_static_route Manage static IP routes on Lenovo CNOS network devices, cnos_system Manage the system attributes on Lenovo CNOS devices, cnos_template Manage switch configuration using templates on devices running Lenovo CNOS, cnos_user Manage the collection of local users on Lenovo CNOS devices, cnos_vlag Manage VLAG resources and attributes on devices running Lenovo CNOS, cnos_vlan Manage VLANs on CNOS network devices, cnos_vrf Manage VRFs on Lenovo CNOS network devices, nclu Configure network interfaces using NCLU, dellos10_command Run commands on remote devices running Dell OS10, dellos10_config Manage Dell EMC Networking OS10 configuration sections, dellos10_facts Collect facts from remote devices running Dell EMC Networking OS10, dellos6_command Run commands on remote devices running Dell OS6, dellos6_config Manage Dell EMC Networking OS6 configuration sections, dellos6_facts Collect facts from remote devices running Dell EMC Networking OS6, dellos9_command Run commands on remote devices running Dell OS9, dellos9_config Manage Dell EMC Networking OS9 configuration sections, dellos9_facts Collect facts from remote devices running Dell EMC Networking OS9, edgeos_command Run one or more commands on EdgeOS devices, edgeos_config Manage EdgeOS configuration on remote device, edgeos_facts Collect facts from remote devices running EdgeOS, edgeswitch_facts Collect facts from remote devices running Edgeswitch, edgeswitch_vlan Manage VLANs on Ubiquiti Edgeswitch network devices, enos_command Run arbitrary commands on Lenovo ENOS devices, enos_config Manage Lenovo ENOS configuration sections, enos_facts Collect facts from remote devices running Lenovo ENOS, eos_banner Manage multiline banners on Arista EOS devices, eos_bgp Configure global BGP protocol settings on Arista EOS, eos_command Run arbitrary commands on an Arista EOS device, eos_config Manage Arista EOS configuration sections, eos_eapi Manage and configure Arista EOS eAPI, eos_facts Collect facts from remote devices running Arista EOS, eos_interface Manage Interface on Arista EOS network devices (D), eos_interfaces Manages interface attributes of Arista EOS interfaces, eos_l2_interface Manage L2 interfaces on Arista EOS network devices (D), eos_l2_interfaces Manages Layer-2 interface attributes of Arista EOS devices, eos_l3_interface Manage L3 interfaces on Arista EOS network devices (D), eos_l3_interfaces Manages L3 interface attributes of Arista EOS devices, eos_lacp Manage Global Link Aggregation Control Protocol (LACP) on Arista EOS devices, eos_lacp_interfaces Manage Link Aggregation Control Protocol (LACP) attributes of interfaces on Arista EOS devices, eos_lag_interfaces Manages link aggregation groups on Arista EOS devices, eos_linkagg Manage link aggregation groups on Arista EOS network devices (D), eos_lldp Manage LLDP configuration on Arista EOS network devices, eos_lldp_global Manage Global Link Layer Discovery Protocol (LLDP) settings on Arista EOS devices, eos_lldp_interfaces Manage Link Layer Discovery Protocol (LLDP) attributes of interfaces on Arista EOS devices, eos_logging Manage logging on network devices, eos_static_route Manage static IP routes on Arista EOS network devices, eos_system Manage the system attributes on Arista EOS devices, eos_user Manage the collection of local users on EOS devices, eos_vlan Manage VLANs on Arista EOS network devices (D), eos_vlans Manage VLANs on Arista EOS devices, eos_vrf Manage VRFs on Arista EOS network devices, eric_eccli_command Run commands on remote devices running ERICSSON ECCLI, exos_command Run commands on remote devices running Extreme EXOS, exos_config Manage Extreme Networks EXOS configuration sections, exos_facts Collect facts from devices running Extreme EXOS, exos_lldp_global Configure and manage Link Layer Discovery Protocol(LLDP) attributes on EXOS platforms, bigip_apm_acl Manage user-defined APM ACLs, bigip_apm_network_access Manage APM Network Access resource, bigip_apm_policy_fetch Exports the APM policy or APM access profile from remote nodes, bigip_apm_policy_import Manage BIG-IP APM policy or APM access profile imports, bigip_appsvcs_extension Manage application service deployments, bigip_asm_dos_application Manage application settings for DOS profile, bigip_asm_policy Manage BIG-IP ASM policies (D), bigip_asm_policy_fetch Exports the asm policy from remote nodes, bigip_asm_policy_import Manage BIG-IP ASM policy imports, bigip_asm_policy_manage Manage BIG-IP ASM policies, bigip_asm_policy_server_technology Manages Server Technology on ASM policy, bigip_asm_policy_signature_set Manages Signature Sets on ASM policy, bigip_cli_alias Manage CLI aliases on a BIG-IP, bigip_cli_script Manage CLI scripts on a BIG-IP, bigip_command Run TMSH and BASH commands on F5 devices, bigip_config Manage BIG-IP configuration sections, bigip_configsync_action Perform different actions related to config-sync, bigip_data_group Manage data groups on a BIG-IP, bigip_device_auth Manage system authentication on a BIG-IP, bigip_device_auth_ldap Manage LDAP device authentication settings on BIG-IP, bigip_device_certificate Manage self-signed device certificates, bigip_device_connectivity Manages device IP configuration settings for HA on a BIG-IP, bigip_device_dns Manage BIG-IP device DNS settings, bigip_device_group Manage device groups on a BIG-IP, bigip_device_group_member Manages members in a device group, bigip_device_ha_group Manage HA group settings on a BIG-IP system, bigip_device_httpd Manage HTTPD related settings on BIG-IP, bigip_device_info Collect information from F5 BIG-IP devices, bigip_device_license Manage license installation and activation on BIG-IP devices, bigip_device_ntp Manage NTP servers on a BIG-IP, bigip_device_sshd Manage the SSHD settings of a BIG-IP, bigip_device_syslog Manage system-level syslog settings on BIG-IP, bigip_device_traffic_group Manages traffic groups on BIG-IP, bigip_device_trust Manage the trust relationships between BIG-IPs, bigip_dns_cache_resolver Manage DNS resolver cache configurations on BIG-IP, bigip_dns_nameserver Manage LTM DNS nameservers on a BIG-IP, bigip_dns_resolver Manage DNS resolvers on a BIG-IP, bigip_dns_zone Manage DNS zones on BIG-IP, bigip_facts Collect facts from F5 BIG-IP devices (D), bigip_file_copy Manage files in datastores on a BIG-IP, bigip_firewall_address_list Manage address lists on BIG-IP AFM, bigip_firewall_dos_profile Manage AFM DoS profiles on a BIG-IP, bigip_firewall_dos_vector Manage attack vector configuration in an AFM DoS profile, bigip_firewall_global_rules Manage AFM global rule settings on BIG-IP, bigip_firewall_log_profile Manages AFM logging profiles configured in the system, bigip_firewall_log_profile_network Configures Network Firewall related settings of the log profile, bigip_firewall_policy Manage AFM security firewall policies on a BIG-IP, bigip_firewall_port_list Manage port lists on BIG-IP AFM, bigip_firewall_rule Manage AFM Firewall rules, bigip_firewall_rule_list Manage AFM security firewall policies on a BIG-IP, bigip_firewall_schedule Manage BIG-IP AFM schedule configurations, bigip_gtm_datacenter Manage Datacenter configuration in BIG-IP, bigip_gtm_facts Collect facts from F5 BIG-IP GTM devices (D), bigip_gtm_global Manages global GTM settings, bigip_gtm_monitor_bigip Manages F5 BIG-IP GTM BIG-IP monitors, bigip_gtm_monitor_external Manages external GTM monitors on a BIG-IP, bigip_gtm_monitor_firepass Manages F5 BIG-IP GTM FirePass monitors, bigip_gtm_monitor_http Manages F5 BIG-IP GTM http monitors, bigip_gtm_monitor_https Manages F5 BIG-IP GTM https monitors, bigip_gtm_monitor_tcp Manages F5 BIG-IP GTM tcp monitors, bigip_gtm_monitor_tcp_half_open Manages F5 BIG-IP GTM tcp half-open monitors, bigip_gtm_pool Manages F5 BIG-IP GTM pools, bigip_gtm_pool_member Manage GTM pool member settings, bigip_gtm_server Manages F5 BIG-IP GTM servers, bigip_gtm_topology_record Manages GTM Topology Records, bigip_gtm_topology_region Manages GTM Topology Regions, bigip_gtm_virtual_server Manages F5 BIG-IP GTM virtual servers, bigip_gtm_wide_ip Manages F5 BIG-IP GTM wide ip, bigip_hostname Manage the hostname of a BIG-IP, bigip_iapp_service Manages TCL iApp services on a BIG-IP, bigip_iapp_template Manages TCL iApp templates on a BIG-IP, bigip_ike_peer Manage IPSec IKE Peer configuration on BIG-IP, bigip_imish_config Manage BIG-IP advanced routing configuration sections, bigip_ipsec_policy Manage IPSec policies on a BIG-IP, bigip_irule Manage iRules across different modules on a BIG-IP, bigip_log_destination Manages log destinations on a BIG-IP, bigip_log_publisher Manages log publishers on a BIG-IP, bigip_lx_package Manages Javascript LX packages on a BIG-IP, bigip_management_route Manage system management routes on a BIG-IP, bigip_message_routing_peer Manage peers for routing generic message protocol messages, bigip_message_routing_protocol Manage generic message parser profile, bigip_message_routing_route Manages static routes for routing message protocol messages, bigip_message_routing_router Manages router profiles for message-routing protocols, bigip_message_routing_transport_config Manages configuration for an outgoing connection, bigip_monitor_dns Manage DNS monitors on a BIG-IP, bigip_monitor_external Manages external LTM monitors on a BIG-IP, bigip_monitor_gateway_icmp Manages F5 BIG-IP LTM gateway ICMP monitors, bigip_monitor_http Manages F5 BIG-IP LTM http monitors, bigip_monitor_https Manages F5 BIG-IP LTM https monitors, bigip_monitor_ldap Manages BIG-IP LDAP monitors, bigip_monitor_snmp_dca Manages BIG-IP SNMP data collecting agent (DCA) monitors, bigip_monitor_tcp Manages F5 BIG-IP LTM tcp monitors, bigip_monitor_tcp_echo Manages F5 BIG-IP LTM tcp echo monitors, bigip_monitor_tcp_half_open Manages F5 BIG-IP LTM tcp half-open monitors, bigip_monitor_udp Manages F5 BIG-IP LTM udp monitors, bigip_partition Manage BIG-IP partitions, bigip_password_policy Manages the authentication password policy on a BIG-IP, bigip_policy Manage general policy configuration on a BIG-IP, bigip_policy_rule Manage LTM policy rules on a BIG-IP, bigip_pool_member Manages F5 BIG-IP LTM pool members, bigip_profile_analytics Manage HTTP analytics profiles on a BIG-IP, bigip_profile_client_ssl Manages client SSL profiles on a BIG-IP, bigip_profile_dns Manage DNS profiles on a BIG-IP, bigip_profile_fastl4 Manages Fast L4 profiles, bigip_profile_http Manage HTTP profiles on a BIG-IP, bigip_profile_http2 Manage HTTP2 profiles on a BIG-IP, bigip_profile_http_compression Manage HTTP compression profiles on a BIG-IP, bigip_profile_oneconnect Manage OneConnect profiles on a BIG-IP, bigip_profile_persistence_cookie Manage cookie persistence profiles on BIG-IP, bigip_profile_persistence_src_addr Manage source address persistence profiles, bigip_profile_server_ssl Manages server SSL profiles on a BIG-IP, bigip_profile_tcp Manage TCP profiles on a BIG-IP, bigip_profile_udp Manage UDP profiles on a BIG-IP, bigip_provision Manage BIG-IP module provisioning, bigip_qkview Manage qkviews on the device, bigip_remote_role Manage remote roles on a BIG-IP, bigip_remote_syslog Manipulate remote syslog settings on a BIG-IP, bigip_remote_user Manages default settings for remote user accounts on a BIG-IP, bigip_routedomain Manage route domains on a BIG-IP, bigip_selfip Manage Self-IPs on a BIG-IP system, bigip_service_policy Manages service policies on a BIG-IP, bigip_smtp Manages SMTP settings on the BIG-IP, bigip_snat_pool Manage SNAT pools on a BIG-IP, bigip_snat_translation Manage SNAT Translations on a BIG-IP, bigip_snmp Manipulate general SNMP settings on a BIG-IP, bigip_snmp_community Manages SNMP communities on a BIG-IP, bigip_snmp_trap Manipulate SNMP trap information on a BIG-IP, bigip_software_image Manage software images on a BIG-IP, bigip_software_install Install software images on a BIG-IP, bigip_software_update Manage the software update settings of a BIG-IP, bigip_ssl_certificate Import/Delete certificates from BIG-IP, bigip_ssl_key Import/Delete SSL keys from BIG-IP, bigip_ssl_ocsp Manage OCSP configurations on BIG-IP, bigip_static_route Manipulate static routes on a BIG-IP, bigip_sys_daemon_log_tmm Manage BIG-IP tmm daemon log settings, bigip_sys_db Manage BIG-IP system database variables, bigip_sys_global Manage BIG-IP global settings, bigip_timer_policy Manage timer policies on a BIG-IP, bigip_traffic_selector Manage IPSec Traffic Selectors on BIG-IP, bigip_tunnel Manage tunnels on a BIG-IP, bigip_ucs Manage upload, installation and removal of UCS files, bigip_ucs_fetch Fetches a UCS file from remote nodes, bigip_user Manage user accounts and user attributes on a BIG-IP, bigip_vcmp_guest Manages vCMP guests on a BIG-IP, bigip_virtual_address Manage LTM virtual addresses on a BIG-IP, bigip_virtual_server Manage LTM virtual servers on a BIG-IP, bigip_vlan Manage VLANs on a BIG-IP system, bigip_wait Wait for a BIG-IP condition before continuing, bigiq_application_fasthttp Manages BIG-IQ FastHTTP applications, bigiq_application_fastl4_tcp Manages BIG-IQ FastL4 TCP applications, bigiq_application_fastl4_udp Manages BIG-IQ FastL4 UDP applications, bigiq_application_http Manages BIG-IQ HTTP applications, bigiq_application_https_offload Manages BIG-IQ HTTPS offload applications, bigiq_application_https_waf Manages BIG-IQ HTTPS WAF applications, bigiq_device_discovery Manage BIG-IP devices through BIG-IQ, bigiq_device_info Collect information from F5 BIG-IQ devices, bigiq_regkey_license Manages licenses in a BIG-IQ registration key pool, bigiq_regkey_license_assignment Manage regkey license assignment on BIG-IPs from a BIG-IQ, bigiq_regkey_pool Manages registration key pools on BIG-IQ, bigiq_utility_license Manage utility licenses on a BIG-IQ, bigiq_utility_license_assignment Manage utility license assignment on BIG-IPs from a BIG-IQ, net_get Copy a file from a network device to Ansible Controller, net_put Copy a file from Ansible Controller to a network device, fmgr_device Add or remove device from FortiManager, fmgr_device_config Edit device configurations, fmgr_device_group Alter FortiManager device groups, fmgr_device_provision_template Manages Device Provisioning Templates in FortiManager, fmgr_fwobj_address Allows the management of firewall objects in FortiManager, fmgr_fwobj_ippool Allows the editing of IP Pool Objects within FortiManager, fmgr_fwobj_ippool6 Allows the editing of IP Pool Objects within FortiManager, fmgr_fwobj_service Manages FortiManager Firewall Service Objects, fmgr_fwobj_vip Manages Virtual IPs objects in FortiManager, fmgr_fwpol_ipv4 Allows the add/delete of Firewall Policies on Packages in FortiManager, fmgr_fwpol_package Manages FortiManager Firewall Policies Packages, fmgr_ha Manages the High-Availability State of FortiManager Clusters and Nodes, fmgr_provisioning Provision devices via FortiMananger, fmgr_query Query FortiManager data objects for use in Ansible workflows, fmgr_script Add/Edit/Delete and execute scripts, fmgr_secprof_appctrl Manage application control security profiles, fmgr_secprof_av Manage security profile, fmgr_secprof_dns Manage DNS security profiles in FortiManager, fmgr_secprof_ips Managing IPS security profiles in FortiManager, fmgr_secprof_profile_group Manage security profiles within FortiManager, fmgr_secprof_proxy Manage proxy security profiles in FortiManager, fmgr_secprof_spam spam filter profile for FMG, fmgr_secprof_ssl_ssh Manage SSL and SSH security profiles in FortiManager, fmgr_secprof_voip VOIP security profiles in FMG, fmgr_secprof_waf FortiManager web application firewall security profile, fmgr_secprof_web Manage web filter security profiles in FortiManager, fortios_address Manage fortios firewall address objects, fortios_alertemail_setting Configure alert email settings in Fortinets FortiOS and FortiGate, fortios_antivirus_heuristic Configure global heuristic options in Fortinets FortiOS and FortiGate, fortios_antivirus_profile Configure AntiVirus profiles in Fortinets FortiOS and FortiGate, fortios_antivirus_quarantine Configure quarantine options in Fortinets FortiOS and FortiGate, fortios_antivirus_settings Configure AntiVirus settings in Fortinets FortiOS and FortiGate, fortios_application_custom Configure custom application signatures in Fortinets FortiOS and FortiGate, fortios_application_group Configure firewall application groups in Fortinets FortiOS and FortiGate, fortios_application_list Configure application control lists in Fortinets FortiOS and FortiGate, fortios_application_name Configure application signatures in Fortinets FortiOS and FortiGate, fortios_application_rule_settings Configure application rule settings in Fortinets FortiOS and FortiGate, fortios_authentication_rule Configure Authentication Rules in Fortinets FortiOS and FortiGate, fortios_authentication_scheme Configure Authentication Schemes in Fortinets FortiOS and FortiGate, fortios_authentication_setting Configure authentication setting in Fortinets FortiOS and FortiGate, fortios_config Manage config on Fortinet FortiOS firewall devices, fortios_dlp_filepattern Configure file patterns used by DLP blocking in Fortinets FortiOS and FortiGate, fortios_dlp_fp_doc_source Create a DLP fingerprint database by allowing the FortiGate to access a file server containing files from which to create fingerprints in Fortinets FortiOS and FortiGate, fortios_dlp_fp_sensitivity Create self-explanatory DLP sensitivity levels to be used when setting sensitivity under config fp-doc-source in Fortinets FortiOS and FortiGate, fortios_dlp_sensor Configure DLP sensors in Fortinets FortiOS and FortiGate, fortios_dlp_settings Designate logical storage for DLP fingerprint database in Fortinets FortiOS and FortiGate, fortios_dnsfilter_domain_filter Configure DNS domain filters in Fortinets FortiOS and FortiGate, fortios_dnsfilter_profile Configure DNS domain filter profiles in Fortinets FortiOS and FortiGate, fortios_endpoint_control_client Configure endpoint control client lists in Fortinets FortiOS and FortiGate, fortios_endpoint_control_forticlient_ems Configure FortiClient Enterprise Management Server (EMS) entries in Fortinets FortiOS and FortiGate, fortios_endpoint_control_forticlient_registration_sync Configure FortiClient registration synchronization settings in Fortinets FortiOS and FortiGate, fortios_endpoint_control_profile Configure FortiClient endpoint control profiles in Fortinets FortiOS and FortiGate, fortios_endpoint_control_settings Configure endpoint control settings in Fortinets FortiOS and FortiGate, fortios_extender_controller_extender Extender controller configuration in Fortinets FortiOS and FortiGate, fortios_facts Get facts about fortios devices, fortios_firewall_address Configure IPv4 addresses in Fortinets FortiOS and FortiGate, fortios_firewall_address6 Configure IPv6 firewall addresses in Fortinets FortiOS and FortiGate, fortios_firewall_address6_template Configure IPv6 address templates in Fortinets FortiOS and FortiGate, fortios_firewall_addrgrp Configure IPv4 address groups in Fortinets FortiOS and FortiGate, fortios_firewall_addrgrp6 Configure IPv6 address groups in Fortinets FortiOS and FortiGate, fortios_firewall_auth_portal Configure firewall authentication portals in Fortinets FortiOS and FortiGate, fortios_firewall_central_snat_map Configure central SNAT policies in Fortinets FortiOS and FortiGate, fortios_firewall_dnstranslation Configure DNS translation in Fortinets FortiOS and FortiGate, fortios_firewall_DoS_policy Configure IPv4 DoS policies in Fortinets FortiOS and FortiGate, fortios_firewall_DoS_policy6 Configure IPv6 DoS policies in Fortinets FortiOS and FortiGate, fortios_firewall_identity_based_route Configure identity based routing in Fortinets FortiOS and FortiGate, fortios_firewall_interface_policy Configure IPv4 interface policies in Fortinets FortiOS and FortiGate, fortios_firewall_interface_policy6 Configure IPv6 interface policies in Fortinets FortiOS and FortiGate, fortios_firewall_internet_service Show Internet Service application in Fortinets FortiOS and FortiGate, fortios_firewall_internet_service_custom Configure custom Internet Services in Fortinets FortiOS and FortiGate, fortios_firewall_internet_service_group Configure group of Internet Service in Fortinets FortiOS and FortiGate, fortios_firewall_ip_translation Configure firewall IP-translation in Fortinets FortiOS and FortiGate, fortios_firewall_ipmacbinding_setting Configure IP to MAC binding settings in Fortinets FortiOS and FortiGate, fortios_firewall_ipmacbinding_table Configure IP to MAC address pairs in the IP/MAC binding table in Fortinets FortiOS and FortiGate, fortios_firewall_ippool Configure IPv4 IP pools in Fortinets FortiOS and FortiGate, fortios_firewall_ippool6 Configure IPv6 IP pools in Fortinets FortiOS and FortiGate, fortios_firewall_ipv6_eh_filter Configure IPv6 extension header filter in Fortinets FortiOS and FortiGate, fortios_firewall_ldb_monitor Configure server load balancing health monitors in Fortinets FortiOS and FortiGate, fortios_firewall_local_in_policy Configure user defined IPv4 local-in policies in Fortinets FortiOS and FortiGate, fortios_firewall_local_in_policy6 Configure user defined IPv6 local-in policies in Fortinets FortiOS and FortiGate, fortios_firewall_multicast_address Configure multicast addresses in Fortinets FortiOS and FortiGate, fortios_firewall_multicast_address6 Configure IPv6 multicast address in Fortinets FortiOS and FortiGate, fortios_firewall_multicast_policy Configure multicast NAT policies in Fortinets FortiOS and FortiGate, fortios_firewall_multicast_policy6 Configure IPv6 multicast NAT policies in Fortinets FortiOS and FortiGate, fortios_firewall_policy Configure IPv4 policies in Fortinets FortiOS and FortiGate, fortios_firewall_policy46 Configure IPv4 to IPv6 policies in Fortinets FortiOS and FortiGate, fortios_firewall_policy6 Configure IPv6 policies in Fortinets FortiOS and FortiGate, fortios_firewall_policy64 Configure IPv6 to IPv4 policies in Fortinets FortiOS and FortiGate, fortios_firewall_profile_group Configure profile groups in Fortinets FortiOS and FortiGate, fortios_firewall_profile_protocol_options Configure protocol options in Fortinets FortiOS and FortiGate, fortios_firewall_proxy_address Web proxy address configuration in Fortinets FortiOS and FortiGate, fortios_firewall_proxy_addrgrp Web proxy address group configuration in Fortinets FortiOS and FortiGate, fortios_firewall_proxy_policy Configure proxy policies in Fortinets FortiOS and FortiGate, fortios_firewall_schedule_group Schedule group configuration in Fortinets FortiOS and FortiGate, fortios_firewall_schedule_onetime Onetime schedule configuration in Fortinets FortiOS and FortiGate, fortios_firewall_schedule_recurring Recurring schedule configuration in Fortinets FortiOS and FortiGate, fortios_firewall_service_category Configure service categories in Fortinets FortiOS and FortiGate, fortios_firewall_service_custom Configure custom services in Fortinets FortiOS and FortiGate, fortios_firewall_service_group Configure service groups in Fortinets FortiOS and FortiGate, fortios_firewall_shaper_per_ip_shaper Configure per-IP traffic shaper in Fortinets FortiOS and FortiGate, fortios_firewall_shaper_traffic_shaper Configure shared traffic shaper in Fortinets FortiOS and FortiGate, fortios_firewall_shaping_policy Configure shaping policies in Fortinets FortiOS and FortiGate, fortios_firewall_shaping_profile Configure shaping profiles in Fortinets FortiOS and FortiGate, fortios_firewall_sniffer Configure sniffer in Fortinets FortiOS and FortiGate, fortios_firewall_ssh_host_key SSH proxy host public keys in Fortinets FortiOS and FortiGate, fortios_firewall_ssh_local_ca SSH proxy local CA in Fortinets FortiOS and FortiGate, fortios_firewall_ssh_local_key SSH proxy local keys in Fortinets FortiOS and FortiGate, fortios_firewall_ssh_setting SSH proxy settings in Fortinets FortiOS and FortiGate, fortios_firewall_ssl_server Configure SSL servers in Fortinets FortiOS and FortiGate, fortios_firewall_ssl_setting SSL proxy settings in Fortinets FortiOS and FortiGate, fortios_firewall_ssl_ssh_profile Configure SSL/SSH protocol options in Fortinets FortiOS and FortiGate, fortios_firewall_ttl_policy Configure TTL policies in Fortinets FortiOS and FortiGate, fortios_firewall_vip Configure virtual IP for IPv4 in Fortinets FortiOS and FortiGate, fortios_firewall_vip46 Configure IPv4 to IPv6 virtual IPs in Fortinets FortiOS and FortiGate, fortios_firewall_vip6 Configure virtual IP for IPv6 in Fortinets FortiOS and FortiGate, fortios_firewall_vip64 Configure IPv6 to IPv4 virtual IPs in Fortinets FortiOS and FortiGate, fortios_firewall_vipgrp Configure IPv4 virtual IP groups in Fortinets FortiOS and FortiGate, fortios_firewall_vipgrp46 Configure IPv4 to IPv6 virtual IP groups in Fortinets FortiOS and FortiGate, fortios_firewall_vipgrp6 Configure IPv6 virtual IP groups in Fortinets FortiOS and FortiGate, fortios_firewall_vipgrp64 Configure IPv6 to IPv4 virtual IP groups in Fortinets FortiOS and FortiGate, fortios_firewall_wildcard_fqdn_custom Config global/VDOM Wildcard FQDN address in Fortinets FortiOS and FortiGate, fortios_firewall_wildcard_fqdn_group Config global Wildcard FQDN address groups in Fortinets FortiOS and FortiGate, fortios_ftp_proxy_explicit Configure explicit FTP proxy settings in Fortinets FortiOS and FortiGate, fortios_icap_profile Configure ICAP profiles in Fortinets FortiOS and FortiGate, fortios_icap_server Configure ICAP servers in Fortinets FortiOS and FortiGate, fortios_ips_custom Configure IPS custom signature in Fortinets FortiOS and FortiGate, fortios_ips_decoder Configure IPS decoder in Fortinets FortiOS and FortiGate, fortios_ips_global Configure IPS global parameter in Fortinets FortiOS and FortiGate, fortios_ips_rule Configure IPS rules in Fortinets FortiOS and FortiGate, fortios_ips_rule_settings Configure IPS rule setting in Fortinets FortiOS and FortiGate, fortios_ips_sensor Configure IPS sensor in Fortinets FortiOS and FortiGate, fortios_ips_settings Configure IPS VDOM parameter in Fortinets FortiOS and FortiGate, fortios_ipv4_policy Manage IPv4 policy objects on Fortinet FortiOS firewall devices, fortios_log_custom_field Configure custom log fields in Fortinets FortiOS and FortiGate, fortios_log_disk_filter Configure filters for local disk logging.