Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortios
  3. API Docs
  4. firewall
  5. Localinpolicy6
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

fortios.firewall.Localinpolicy6

Explore with Pulumi AI

Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

Configure user defined IPv6 local-in policies.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";

const trname = new fortios.firewall.Localinpolicy6("trname", {
    action: "accept",
    dstaddrs: [{
        name: "all",
    }],
    intf: "port4",
    policyid: 1,
    schedule: "always",
    services: [{
        name: "ALL",
    }],
    srcaddrs: [{
        name: "all",
    }],
    status: "enable",
});
Copy
import pulumi
import pulumiverse_fortios as fortios

trname = fortios.firewall.Localinpolicy6("trname",
    action="accept",
    dstaddrs=[fortios.firewall.Localinpolicy6DstaddrArgs(
        name="all",
    )],
    intf="port4",
    policyid=1,
    schedule="always",
    services=[fortios.firewall.Localinpolicy6ServiceArgs(
        name="ALL",
    )],
    srcaddrs=[fortios.firewall.Localinpolicy6SrcaddrArgs(
        name="all",
    )],
    status="enable")
Copy
package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/firewall"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := firewall.NewLocalinpolicy6(ctx, "trname", &firewall.Localinpolicy6Args{
			Action: pulumi.String("accept"),
			Dstaddrs: firewall.Localinpolicy6DstaddrArray{
				&firewall.Localinpolicy6DstaddrArgs{
					Name: pulumi.String("all"),
				},
			},
			Intf:     pulumi.String("port4"),
			Policyid: pulumi.Int(1),
			Schedule: pulumi.String("always"),
			Services: firewall.Localinpolicy6ServiceArray{
				&firewall.Localinpolicy6ServiceArgs{
					Name: pulumi.String("ALL"),
				},
			},
			Srcaddrs: firewall.Localinpolicy6SrcaddrArray{
				&firewall.Localinpolicy6SrcaddrArgs{
					Name: pulumi.String("all"),
				},
			},
			Status: pulumi.String("enable"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;

return await Deployment.RunAsync(() => 
{
    var trname = new Fortios.Firewall.Localinpolicy6("trname", new()
    {
        Action = "accept",
        Dstaddrs = new[]
        {
            new Fortios.Firewall.Inputs.Localinpolicy6DstaddrArgs
            {
                Name = "all",
            },
        },
        Intf = "port4",
        Policyid = 1,
        Schedule = "always",
        Services = new[]
        {
            new Fortios.Firewall.Inputs.Localinpolicy6ServiceArgs
            {
                Name = "ALL",
            },
        },
        Srcaddrs = new[]
        {
            new Fortios.Firewall.Inputs.Localinpolicy6SrcaddrArgs
            {
                Name = "all",
            },
        },
        Status = "enable",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.firewall.Localinpolicy6;
import com.pulumi.fortios.firewall.Localinpolicy6Args;
import com.pulumi.fortios.firewall.inputs.Localinpolicy6DstaddrArgs;
import com.pulumi.fortios.firewall.inputs.Localinpolicy6ServiceArgs;
import com.pulumi.fortios.firewall.inputs.Localinpolicy6SrcaddrArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trname = new Localinpolicy6("trname", Localinpolicy6Args.builder()
            .action("accept")
            .dstaddrs(Localinpolicy6DstaddrArgs.builder()
                .name("all")
                .build())
            .intf("port4")
            .policyid(1)
            .schedule("always")
            .services(Localinpolicy6ServiceArgs.builder()
                .name("ALL")
                .build())
            .srcaddrs(Localinpolicy6SrcaddrArgs.builder()
                .name("all")
                .build())
            .status("enable")
            .build());

    }
}
Copy
resources:
  trname:
    type: fortios:firewall:Localinpolicy6
    properties:
      action: accept
      dstaddrs:
        - name: all
      intf: port4
      policyid: 1
      schedule: always
      services:
        - name: ALL
      srcaddrs:
        - name: all
      status: enable
Copy

Create Localinpolicy6 Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Localinpolicy6(name: string, args: Localinpolicy6Args, opts?: CustomResourceOptions);
@overload
def Localinpolicy6(resource_name: str,
                   args: Localinpolicy6Args,
                   opts: Optional[ResourceOptions] = None)

@overload
def Localinpolicy6(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   schedule: Optional[str] = None,
                   srcaddrs: Optional[Sequence[Localinpolicy6SrcaddrArgs]] = None,
                   services: Optional[Sequence[Localinpolicy6ServiceArgs]] = None,
                   dstaddrs: Optional[Sequence[Localinpolicy6DstaddrArgs]] = None,
                   intf: Optional[str] = None,
                   intf_blocks: Optional[Sequence[Localinpolicy6IntfBlockArgs]] = None,
                   internet_service6_src: Optional[str] = None,
                   internet_service6_src_custom_groups: Optional[Sequence[Localinpolicy6InternetService6SrcCustomGroupArgs]] = None,
                   internet_service6_src_customs: Optional[Sequence[Localinpolicy6InternetService6SrcCustomArgs]] = None,
                   internet_service6_src_groups: Optional[Sequence[Localinpolicy6InternetService6SrcGroupArgs]] = None,
                   internet_service6_src_names: Optional[Sequence[Localinpolicy6InternetService6SrcNameArgs]] = None,
                   internet_service6_src_negate: Optional[str] = None,
                   action: Optional[str] = None,
                   get_all_tables: Optional[str] = None,
                   policyid: Optional[int] = None,
                   dynamic_sort_subtable: Optional[str] = None,
                   service_negate: Optional[str] = None,
                   dstaddr_negate: Optional[str] = None,
                   srcaddr_negate: Optional[str] = None,
                   comments: Optional[str] = None,
                   status: Optional[str] = None,
                   uuid: Optional[str] = None,
                   vdomparam: Optional[str] = None,
                   virtual_patch: Optional[str] = None)
func NewLocalinpolicy6(ctx *Context, name string, args Localinpolicy6Args, opts ...ResourceOption) (*Localinpolicy6, error)
public Localinpolicy6(string name, Localinpolicy6Args args, CustomResourceOptions? opts = null)
public Localinpolicy6(String name, Localinpolicy6Args args)
public Localinpolicy6(String name, Localinpolicy6Args args, CustomResourceOptions options)

type: fortios:firewall:Localinpolicy6
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. Localinpolicy6Args
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. Localinpolicy6Args
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. Localinpolicy6Args
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. Localinpolicy6Args
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. Localinpolicy6Args
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var localinpolicy6Resource = new Fortios.Firewall.Localinpolicy6("localinpolicy6Resource", new()
{
    Schedule = "string",
    Srcaddrs = new[]
    {
        new Fortios.Firewall.Inputs.Localinpolicy6SrcaddrArgs
        {
            Name = "string",
        },
    },
    Services = new[]
    {
        new Fortios.Firewall.Inputs.Localinpolicy6ServiceArgs
        {
            Name = "string",
        },
    },
    Dstaddrs = new[]
    {
        new Fortios.Firewall.Inputs.Localinpolicy6DstaddrArgs
        {
            Name = "string",
        },
    },
    Intf = "string",
    IntfBlocks = new[]
    {
        new Fortios.Firewall.Inputs.Localinpolicy6IntfBlockArgs
        {
            Name = "string",
        },
    },
    InternetService6Src = "string",
    InternetService6SrcCustomGroups = new[]
    {
        new Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcCustomGroupArgs
        {
            Name = "string",
        },
    },
    InternetService6SrcCustoms = new[]
    {
        new Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcCustomArgs
        {
            Name = "string",
        },
    },
    InternetService6SrcGroups = new[]
    {
        new Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcGroupArgs
        {
            Name = "string",
        },
    },
    InternetService6SrcNames = new[]
    {
        new Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcNameArgs
        {
            Name = "string",
        },
    },
    InternetService6SrcNegate = "string",
    Action = "string",
    GetAllTables = "string",
    Policyid = 0,
    DynamicSortSubtable = "string",
    ServiceNegate = "string",
    DstaddrNegate = "string",
    SrcaddrNegate = "string",
    Comments = "string",
    Status = "string",
    Uuid = "string",
    Vdomparam = "string",
    VirtualPatch = "string",
});
Copy
example, err := firewall.NewLocalinpolicy6(ctx, "localinpolicy6Resource", &firewall.Localinpolicy6Args{
	Schedule: pulumi.String("string"),
	Srcaddrs: firewall.Localinpolicy6SrcaddrArray{
		&firewall.Localinpolicy6SrcaddrArgs{
			Name: pulumi.String("string"),
		},
	},
	Services: firewall.Localinpolicy6ServiceArray{
		&firewall.Localinpolicy6ServiceArgs{
			Name: pulumi.String("string"),
		},
	},
	Dstaddrs: firewall.Localinpolicy6DstaddrArray{
		&firewall.Localinpolicy6DstaddrArgs{
			Name: pulumi.String("string"),
		},
	},
	Intf: pulumi.String("string"),
	IntfBlocks: firewall.Localinpolicy6IntfBlockArray{
		&firewall.Localinpolicy6IntfBlockArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetService6Src: pulumi.String("string"),
	InternetService6SrcCustomGroups: firewall.Localinpolicy6InternetService6SrcCustomGroupArray{
		&firewall.Localinpolicy6InternetService6SrcCustomGroupArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetService6SrcCustoms: firewall.Localinpolicy6InternetService6SrcCustomArray{
		&firewall.Localinpolicy6InternetService6SrcCustomArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetService6SrcGroups: firewall.Localinpolicy6InternetService6SrcGroupArray{
		&firewall.Localinpolicy6InternetService6SrcGroupArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetService6SrcNames: firewall.Localinpolicy6InternetService6SrcNameArray{
		&firewall.Localinpolicy6InternetService6SrcNameArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetService6SrcNegate: pulumi.String("string"),
	Action:                    pulumi.String("string"),
	GetAllTables:              pulumi.String("string"),
	Policyid:                  pulumi.Int(0),
	DynamicSortSubtable:       pulumi.String("string"),
	ServiceNegate:             pulumi.String("string"),
	DstaddrNegate:             pulumi.String("string"),
	SrcaddrNegate:             pulumi.String("string"),
	Comments:                  pulumi.String("string"),
	Status:                    pulumi.String("string"),
	Uuid:                      pulumi.String("string"),
	Vdomparam:                 pulumi.String("string"),
	VirtualPatch:              pulumi.String("string"),
})
Copy
var localinpolicy6Resource = new Localinpolicy6("localinpolicy6Resource", Localinpolicy6Args.builder()
    .schedule("string")
    .srcaddrs(Localinpolicy6SrcaddrArgs.builder()
        .name("string")
        .build())
    .services(Localinpolicy6ServiceArgs.builder()
        .name("string")
        .build())
    .dstaddrs(Localinpolicy6DstaddrArgs.builder()
        .name("string")
        .build())
    .intf("string")
    .intfBlocks(Localinpolicy6IntfBlockArgs.builder()
        .name("string")
        .build())
    .internetService6Src("string")
    .internetService6SrcCustomGroups(Localinpolicy6InternetService6SrcCustomGroupArgs.builder()
        .name("string")
        .build())
    .internetService6SrcCustoms(Localinpolicy6InternetService6SrcCustomArgs.builder()
        .name("string")
        .build())
    .internetService6SrcGroups(Localinpolicy6InternetService6SrcGroupArgs.builder()
        .name("string")
        .build())
    .internetService6SrcNames(Localinpolicy6InternetService6SrcNameArgs.builder()
        .name("string")
        .build())
    .internetService6SrcNegate("string")
    .action("string")
    .getAllTables("string")
    .policyid(0)
    .dynamicSortSubtable("string")
    .serviceNegate("string")
    .dstaddrNegate("string")
    .srcaddrNegate("string")
    .comments("string")
    .status("string")
    .uuid("string")
    .vdomparam("string")
    .virtualPatch("string")
    .build());
Copy
localinpolicy6_resource = fortios.firewall.Localinpolicy6("localinpolicy6Resource",
    schedule="string",
    srcaddrs=[{
        "name": "string",
    }],
    services=[{
        "name": "string",
    }],
    dstaddrs=[{
        "name": "string",
    }],
    intf="string",
    intf_blocks=[{
        "name": "string",
    }],
    internet_service6_src="string",
    internet_service6_src_custom_groups=[{
        "name": "string",
    }],
    internet_service6_src_customs=[{
        "name": "string",
    }],
    internet_service6_src_groups=[{
        "name": "string",
    }],
    internet_service6_src_names=[{
        "name": "string",
    }],
    internet_service6_src_negate="string",
    action="string",
    get_all_tables="string",
    policyid=0,
    dynamic_sort_subtable="string",
    service_negate="string",
    dstaddr_negate="string",
    srcaddr_negate="string",
    comments="string",
    status="string",
    uuid="string",
    vdomparam="string",
    virtual_patch="string")
Copy
const localinpolicy6Resource = new fortios.firewall.Localinpolicy6("localinpolicy6Resource", {
    schedule: "string",
    srcaddrs: [{
        name: "string",
    }],
    services: [{
        name: "string",
    }],
    dstaddrs: [{
        name: "string",
    }],
    intf: "string",
    intfBlocks: [{
        name: "string",
    }],
    internetService6Src: "string",
    internetService6SrcCustomGroups: [{
        name: "string",
    }],
    internetService6SrcCustoms: [{
        name: "string",
    }],
    internetService6SrcGroups: [{
        name: "string",
    }],
    internetService6SrcNames: [{
        name: "string",
    }],
    internetService6SrcNegate: "string",
    action: "string",
    getAllTables: "string",
    policyid: 0,
    dynamicSortSubtable: "string",
    serviceNegate: "string",
    dstaddrNegate: "string",
    srcaddrNegate: "string",
    comments: "string",
    status: "string",
    uuid: "string",
    vdomparam: "string",
    virtualPatch: "string",
});
Copy
type: fortios:firewall:Localinpolicy6
properties:
    action: string
    comments: string
    dstaddrNegate: string
    dstaddrs:
        - name: string
    dynamicSortSubtable: string
    getAllTables: string
    internetService6Src: string
    internetService6SrcCustomGroups:
        - name: string
    internetService6SrcCustoms:
        - name: string
    internetService6SrcGroups:
        - name: string
    internetService6SrcNames:
        - name: string
    internetService6SrcNegate: string
    intf: string
    intfBlocks:
        - name: string
    policyid: 0
    schedule: string
    serviceNegate: string
    services:
        - name: string
    srcaddrNegate: string
    srcaddrs:
        - name: string
    status: string
    uuid: string
    vdomparam: string
    virtualPatch: string
Copy

Localinpolicy6 Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Localinpolicy6 resource accepts the following input properties:

Dstaddrs This property is required. List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6Dstaddr>
Destination address object from available options. The structure of dstaddr block is documented below.
Schedule This property is required. string
Schedule object from available options.
Services This property is required. List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6Service>
Service object from available options. Separate names with a space. The structure of service block is documented below.
Srcaddrs This property is required. List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6Srcaddr>
Source address object from available options. The structure of srcaddr block is documented below.
Action string
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
Comments string
Comment.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
InternetService6Src string
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
InternetService6SrcCustomGroups List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcCustomGroup>
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
InternetService6SrcCustoms List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcCustom>
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
InternetService6SrcGroups List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcGroup>
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
InternetService6SrcNames List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcName>
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
InternetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
Intf string
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
IntfBlocks List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6IntfBlock>
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
Policyid Changes to this property will trigger replacement. int
User defined local in policy ID.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
Status string
Enable/disable this local-in policy. Valid values: enable, disable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
Vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
VirtualPatch string
Enable/disable the virtual patching feature. Valid values: enable, disable.
Dstaddrs This property is required. []Localinpolicy6DstaddrArgs
Destination address object from available options. The structure of dstaddr block is documented below.
Schedule This property is required. string
Schedule object from available options.
Services This property is required. []Localinpolicy6ServiceArgs
Service object from available options. Separate names with a space. The structure of service block is documented below.
Srcaddrs This property is required. []Localinpolicy6SrcaddrArgs
Source address object from available options. The structure of srcaddr block is documented below.
Action string
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
Comments string
Comment.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
InternetService6Src string
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
InternetService6SrcCustomGroups []Localinpolicy6InternetService6SrcCustomGroupArgs
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
InternetService6SrcCustoms []Localinpolicy6InternetService6SrcCustomArgs
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
InternetService6SrcGroups []Localinpolicy6InternetService6SrcGroupArgs
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
InternetService6SrcNames []Localinpolicy6InternetService6SrcNameArgs
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
InternetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
Intf string
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
IntfBlocks []Localinpolicy6IntfBlockArgs
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
Policyid Changes to this property will trigger replacement. int
User defined local in policy ID.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
Status string
Enable/disable this local-in policy. Valid values: enable, disable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
Vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
VirtualPatch string
Enable/disable the virtual patching feature. Valid values: enable, disable.
dstaddrs This property is required. List<Localinpolicy6Dstaddr>
Destination address object from available options. The structure of dstaddr block is documented below.
schedule This property is required. String
Schedule object from available options.
services This property is required. List<Localinpolicy6Service>
Service object from available options. Separate names with a space. The structure of service block is documented below.
srcaddrs This property is required. List<Localinpolicy6Srcaddr>
Source address object from available options. The structure of srcaddr block is documented below.
action String
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
comments String
Comment.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
internetService6Src String
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
internetService6SrcCustomGroups List<Localinpolicy6InternetService6SrcCustomGroup>
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
internetService6SrcCustoms List<Localinpolicy6InternetService6SrcCustom>
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
internetService6SrcGroups List<Localinpolicy6InternetService6SrcGroup>
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
internetService6SrcNames List<Localinpolicy6InternetService6SrcName>
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
internetService6SrcNegate String
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
intf String
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
intfBlocks List<Localinpolicy6IntfBlock>
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
policyid Changes to this property will trigger replacement. Integer
User defined local in policy ID.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
status String
Enable/disable this local-in policy. Valid values: enable, disable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vdomparam Changes to this property will trigger replacement. String
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
virtualPatch String
Enable/disable the virtual patching feature. Valid values: enable, disable.
dstaddrs This property is required. Localinpolicy6Dstaddr[]
Destination address object from available options. The structure of dstaddr block is documented below.
schedule This property is required. string
Schedule object from available options.
services This property is required. Localinpolicy6Service[]
Service object from available options. Separate names with a space. The structure of service block is documented below.
srcaddrs This property is required. Localinpolicy6Srcaddr[]
Source address object from available options. The structure of srcaddr block is documented below.
action string
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
comments string
Comment.
dstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
dynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
getAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
internetService6Src string
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
internetService6SrcCustomGroups Localinpolicy6InternetService6SrcCustomGroup[]
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
internetService6SrcCustoms Localinpolicy6InternetService6SrcCustom[]
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
internetService6SrcGroups Localinpolicy6InternetService6SrcGroup[]
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
internetService6SrcNames Localinpolicy6InternetService6SrcName[]
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
internetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
intf string
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
intfBlocks Localinpolicy6IntfBlock[]
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
policyid Changes to this property will trigger replacement. number
User defined local in policy ID.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
srcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
status string
Enable/disable this local-in policy. Valid values: enable, disable.
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
virtualPatch string
Enable/disable the virtual patching feature. Valid values: enable, disable.
dstaddrs This property is required. Sequence[Localinpolicy6DstaddrArgs]
Destination address object from available options. The structure of dstaddr block is documented below.
schedule This property is required. str
Schedule object from available options.
services This property is required. Sequence[Localinpolicy6ServiceArgs]
Service object from available options. Separate names with a space. The structure of service block is documented below.
srcaddrs This property is required. Sequence[Localinpolicy6SrcaddrArgs]
Source address object from available options. The structure of srcaddr block is documented below.
action str
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
comments str
Comment.
dstaddr_negate str
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
dynamic_sort_subtable str
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
get_all_tables str
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
internet_service6_src str
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
internet_service6_src_custom_groups Sequence[Localinpolicy6InternetService6SrcCustomGroupArgs]
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
internet_service6_src_customs Sequence[Localinpolicy6InternetService6SrcCustomArgs]
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
internet_service6_src_groups Sequence[Localinpolicy6InternetService6SrcGroupArgs]
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
internet_service6_src_names Sequence[Localinpolicy6InternetService6SrcNameArgs]
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
internet_service6_src_negate str
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
intf str
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
intf_blocks Sequence[Localinpolicy6IntfBlockArgs]
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
policyid Changes to this property will trigger replacement. int
User defined local in policy ID.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
srcaddr_negate str
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
status str
Enable/disable this local-in policy. Valid values: enable, disable.
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vdomparam Changes to this property will trigger replacement. str
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
virtual_patch str
Enable/disable the virtual patching feature. Valid values: enable, disable.
dstaddrs This property is required. List<Property Map>
Destination address object from available options. The structure of dstaddr block is documented below.
schedule This property is required. String
Schedule object from available options.
services This property is required. List<Property Map>
Service object from available options. Separate names with a space. The structure of service block is documented below.
srcaddrs This property is required. List<Property Map>
Source address object from available options. The structure of srcaddr block is documented below.
action String
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
comments String
Comment.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
internetService6Src String
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
internetService6SrcCustomGroups List<Property Map>
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
internetService6SrcCustoms List<Property Map>
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
internetService6SrcGroups List<Property Map>
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
internetService6SrcNames List<Property Map>
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
internetService6SrcNegate String
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
intf String
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
intfBlocks List<Property Map>
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
policyid Changes to this property will trigger replacement. Number
User defined local in policy ID.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
status String
Enable/disable this local-in policy. Valid values: enable, disable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vdomparam Changes to this property will trigger replacement. String
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
virtualPatch String
Enable/disable the virtual patching feature. Valid values: enable, disable.

Outputs

All input properties are implicitly available as output properties. Additionally, the Localinpolicy6 resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing Localinpolicy6 Resource

Get an existing Localinpolicy6 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: Localinpolicy6State, opts?: CustomResourceOptions): Localinpolicy6
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        comments: Optional[str] = None,
        dstaddr_negate: Optional[str] = None,
        dstaddrs: Optional[Sequence[Localinpolicy6DstaddrArgs]] = None,
        dynamic_sort_subtable: Optional[str] = None,
        get_all_tables: Optional[str] = None,
        internet_service6_src: Optional[str] = None,
        internet_service6_src_custom_groups: Optional[Sequence[Localinpolicy6InternetService6SrcCustomGroupArgs]] = None,
        internet_service6_src_customs: Optional[Sequence[Localinpolicy6InternetService6SrcCustomArgs]] = None,
        internet_service6_src_groups: Optional[Sequence[Localinpolicy6InternetService6SrcGroupArgs]] = None,
        internet_service6_src_names: Optional[Sequence[Localinpolicy6InternetService6SrcNameArgs]] = None,
        internet_service6_src_negate: Optional[str] = None,
        intf: Optional[str] = None,
        intf_blocks: Optional[Sequence[Localinpolicy6IntfBlockArgs]] = None,
        policyid: Optional[int] = None,
        schedule: Optional[str] = None,
        service_negate: Optional[str] = None,
        services: Optional[Sequence[Localinpolicy6ServiceArgs]] = None,
        srcaddr_negate: Optional[str] = None,
        srcaddrs: Optional[Sequence[Localinpolicy6SrcaddrArgs]] = None,
        status: Optional[str] = None,
        uuid: Optional[str] = None,
        vdomparam: Optional[str] = None,
        virtual_patch: Optional[str] = None) -> Localinpolicy6
func GetLocalinpolicy6(ctx *Context, name string, id IDInput, state *Localinpolicy6State, opts ...ResourceOption) (*Localinpolicy6, error)
public static Localinpolicy6 Get(string name, Input<string> id, Localinpolicy6State? state, CustomResourceOptions? opts = null)
public static Localinpolicy6 get(String name, Output<String> id, Localinpolicy6State state, CustomResourceOptions options)
resources:  _:    type: fortios:firewall:Localinpolicy6    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Action string
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
Comments string
Comment.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
Dstaddrs List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6Dstaddr>
Destination address object from available options. The structure of dstaddr block is documented below.
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
InternetService6Src string
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
InternetService6SrcCustomGroups List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcCustomGroup>
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
InternetService6SrcCustoms List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcCustom>
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
InternetService6SrcGroups List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcGroup>
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
InternetService6SrcNames List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6InternetService6SrcName>
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
InternetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
Intf string
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
IntfBlocks List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6IntfBlock>
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
Policyid Changes to this property will trigger replacement. int
User defined local in policy ID.
Schedule string
Schedule object from available options.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
Services List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6Service>
Service object from available options. Separate names with a space. The structure of service block is documented below.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
Srcaddrs List<Pulumiverse.Fortios.Firewall.Inputs.Localinpolicy6Srcaddr>
Source address object from available options. The structure of srcaddr block is documented below.
Status string
Enable/disable this local-in policy. Valid values: enable, disable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
Vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
VirtualPatch string
Enable/disable the virtual patching feature. Valid values: enable, disable.
Action string
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
Comments string
Comment.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
Dstaddrs []Localinpolicy6DstaddrArgs
Destination address object from available options. The structure of dstaddr block is documented below.
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
InternetService6Src string
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
InternetService6SrcCustomGroups []Localinpolicy6InternetService6SrcCustomGroupArgs
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
InternetService6SrcCustoms []Localinpolicy6InternetService6SrcCustomArgs
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
InternetService6SrcGroups []Localinpolicy6InternetService6SrcGroupArgs
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
InternetService6SrcNames []Localinpolicy6InternetService6SrcNameArgs
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
InternetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
Intf string
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
IntfBlocks []Localinpolicy6IntfBlockArgs
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
Policyid Changes to this property will trigger replacement. int
User defined local in policy ID.
Schedule string
Schedule object from available options.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
Services []Localinpolicy6ServiceArgs
Service object from available options. Separate names with a space. The structure of service block is documented below.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
Srcaddrs []Localinpolicy6SrcaddrArgs
Source address object from available options. The structure of srcaddr block is documented below.
Status string
Enable/disable this local-in policy. Valid values: enable, disable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
Vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
VirtualPatch string
Enable/disable the virtual patching feature. Valid values: enable, disable.
action String
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
comments String
Comment.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
dstaddrs List<Localinpolicy6Dstaddr>
Destination address object from available options. The structure of dstaddr block is documented below.
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
internetService6Src String
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
internetService6SrcCustomGroups List<Localinpolicy6InternetService6SrcCustomGroup>
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
internetService6SrcCustoms List<Localinpolicy6InternetService6SrcCustom>
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
internetService6SrcGroups List<Localinpolicy6InternetService6SrcGroup>
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
internetService6SrcNames List<Localinpolicy6InternetService6SrcName>
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
internetService6SrcNegate String
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
intf String
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
intfBlocks List<Localinpolicy6IntfBlock>
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
policyid Changes to this property will trigger replacement. Integer
User defined local in policy ID.
schedule String
Schedule object from available options.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
services List<Localinpolicy6Service>
Service object from available options. Separate names with a space. The structure of service block is documented below.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
srcaddrs List<Localinpolicy6Srcaddr>
Source address object from available options. The structure of srcaddr block is documented below.
status String
Enable/disable this local-in policy. Valid values: enable, disable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vdomparam Changes to this property will trigger replacement. String
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
virtualPatch String
Enable/disable the virtual patching feature. Valid values: enable, disable.
action string
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
comments string
Comment.
dstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
dstaddrs Localinpolicy6Dstaddr[]
Destination address object from available options. The structure of dstaddr block is documented below.
dynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
getAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
internetService6Src string
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
internetService6SrcCustomGroups Localinpolicy6InternetService6SrcCustomGroup[]
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
internetService6SrcCustoms Localinpolicy6InternetService6SrcCustom[]
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
internetService6SrcGroups Localinpolicy6InternetService6SrcGroup[]
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
internetService6SrcNames Localinpolicy6InternetService6SrcName[]
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
internetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
intf string
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
intfBlocks Localinpolicy6IntfBlock[]
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
policyid Changes to this property will trigger replacement. number
User defined local in policy ID.
schedule string
Schedule object from available options.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
services Localinpolicy6Service[]
Service object from available options. Separate names with a space. The structure of service block is documented below.
srcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
srcaddrs Localinpolicy6Srcaddr[]
Source address object from available options. The structure of srcaddr block is documented below.
status string
Enable/disable this local-in policy. Valid values: enable, disable.
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
virtualPatch string
Enable/disable the virtual patching feature. Valid values: enable, disable.
action str
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
comments str
Comment.
dstaddr_negate str
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
dstaddrs Sequence[Localinpolicy6DstaddrArgs]
Destination address object from available options. The structure of dstaddr block is documented below.
dynamic_sort_subtable str
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
get_all_tables str
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
internet_service6_src str
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
internet_service6_src_custom_groups Sequence[Localinpolicy6InternetService6SrcCustomGroupArgs]
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
internet_service6_src_customs Sequence[Localinpolicy6InternetService6SrcCustomArgs]
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
internet_service6_src_groups Sequence[Localinpolicy6InternetService6SrcGroupArgs]
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
internet_service6_src_names Sequence[Localinpolicy6InternetService6SrcNameArgs]
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
internet_service6_src_negate str
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
intf str
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
intf_blocks Sequence[Localinpolicy6IntfBlockArgs]
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
policyid Changes to this property will trigger replacement. int
User defined local in policy ID.
schedule str
Schedule object from available options.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
services Sequence[Localinpolicy6ServiceArgs]
Service object from available options. Separate names with a space. The structure of service block is documented below.
srcaddr_negate str
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
srcaddrs Sequence[Localinpolicy6SrcaddrArgs]
Source address object from available options. The structure of srcaddr block is documented below.
status str
Enable/disable this local-in policy. Valid values: enable, disable.
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vdomparam Changes to this property will trigger replacement. str
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
virtual_patch str
Enable/disable the virtual patching feature. Valid values: enable, disable.
action String
Action performed on traffic matching the policy (default = deny). Valid values: accept, deny.
comments String
Comment.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: enable, disable.
dstaddrs List<Property Map>
Destination address object from available options. The structure of dstaddr block is documented below.
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
internetService6Src String
Enable/disable use of IPv6 Internet Services in source for this local-in policy.If enabled, source address is not used. Valid values: enable, disable.
internetService6SrcCustomGroups List<Property Map>
Custom Internet Service6 source group name. The structure of internet_service6_src_custom_group block is documented below.
internetService6SrcCustoms List<Property Map>
Custom IPv6 Internet Service source name. The structure of internet_service6_src_custom block is documented below.
internetService6SrcGroups List<Property Map>
Internet Service6 source group name. The structure of internet_service6_src_group block is documented below.
internetService6SrcNames List<Property Map>
IPv6 Internet Service source name. The structure of internet_service6_src_name block is documented below.
internetService6SrcNegate String
When enabled internet-service6-src specifies what the service must NOT be. Valid values: enable, disable.
intf String
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf_block.
intfBlocks List<Property Map>
Incoming interface name from available options. Due to the data type change of API, for other versions of FortiOS, please check variable intf. The structure of intf_block block is documented below.
policyid Changes to this property will trigger replacement. Number
User defined local in policy ID.
schedule String
Schedule object from available options.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: enable, disable.
services List<Property Map>
Service object from available options. Separate names with a space. The structure of service block is documented below.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: enable, disable.
srcaddrs List<Property Map>
Source address object from available options. The structure of srcaddr block is documented below.
status String
Enable/disable this local-in policy. Valid values: enable, disable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vdomparam Changes to this property will trigger replacement. String
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
virtualPatch String
Enable/disable the virtual patching feature. Valid values: enable, disable.

Supporting Types

Localinpolicy6Dstaddr
, Localinpolicy6DstaddrArgs

Name string
Custom Internet Service6 group name.
Name string
Custom Internet Service6 group name.
name String
Custom Internet Service6 group name.
name string
Custom Internet Service6 group name.
name str
Custom Internet Service6 group name.
name String
Custom Internet Service6 group name.

Localinpolicy6InternetService6SrcCustom
, Localinpolicy6InternetService6SrcCustomArgs

Name string
Name string
name String
name string
name str
name String

Localinpolicy6InternetService6SrcCustomGroup
, Localinpolicy6InternetService6SrcCustomGroupArgs

Name string
Name string
name String
name string
name str
name String

Localinpolicy6InternetService6SrcGroup
, Localinpolicy6InternetService6SrcGroupArgs

Name string
Name string
name String
name string
name str
name String

Localinpolicy6InternetService6SrcName
, Localinpolicy6InternetService6SrcNameArgs

Name string
Name string
name String
name string
name str
name String

Localinpolicy6IntfBlock
, Localinpolicy6IntfBlockArgs

Name string
Address name.
Name string
Address name.
name String
Address name.
name string
Address name.
name str
Address name.
name String
Address name.

Localinpolicy6Service
, Localinpolicy6ServiceArgs

Name string
Service name.
Name string
Service name.
name String
Service name.
name string
Service name.
name str
Service name.
name String
Service name.

Localinpolicy6Srcaddr
, Localinpolicy6SrcaddrArgs

Name string
Address name.
Name string
Address name.
name String
Address name.
name string
Address name.
name str
Address name.
name String
Address name.

Import

Firewall LocalInPolicy6 can be imported using any of these accepted formats:

$ pulumi import fortios:firewall/localinpolicy6:Localinpolicy6 labelname {{policyid}}
Copy

If you do not want to import arguments of block:

$ export “FORTIOS_IMPORT_TABLE”=“false”

$ pulumi import fortios:firewall/localinpolicy6:Localinpolicy6 labelname {{policyid}}
Copy

$ unset “FORTIOS_IMPORT_TABLE”

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortios pulumiverse/pulumi-fortios
License
Apache-2.0
Notes
This Pulumi package is based on the fortios Terraform Provider.
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios