a10_rule_set

Synopsis

Configure Security policy Rule Set

Parameters

Parameters		Choices/Defaults	Comment
state str/required		[‘noop’, ‘present’, ‘absent’]	State of the object to be created.
ansible_host str/required			Host for AXAPI authentication
ansible_username str/required			Username for AXAPI authentication
ansible_password str/required			Password for AXAPI authentication
ansible_port int/required			Port for AXAPI authentication
a10_device_context_id int		[‘1-8’]	Device ID for aVCS configuration
a10_partition str			Destination/target partition for object/command
name str/required			Rule set name
session_statistic str			‘enable’= Enable session based statistic (Default); ‘disable’= Disable session based statistic;
remark str			Rule set entry comment (Notes for this rule set)
uuid str			uuid of the object
user_tag str			Customized tag
sampling_enable list			Field sampling_enable
	counters1 str		‘all’= all; ‘unmatched-drops’= Unmatched drops counter; ‘permit’= Permitted counter; ‘deny’= Denied counter; ‘reset’= Reset counter;
rule_list list			Field rule_list
	name str		Rule name
	remark str		Rule entry comment (Notes for this rule)
	status str		‘enable’= Enable rule; ‘disable’= Disable rule;
	action str		‘permit’= permit; ‘deny’= deny; ‘reset’= reset;
	log bool		Enable logging
	reset_lid int		Apply a Template LID
	listen_on_port bool		Listen on port
	policy str		‘cgnv6’= Apply CGNv6 policy; ‘forward’= Forward packet;
	forward_listen_on_port bool		Listen on port
	lid int		Apply a Template LID
	listen_on_port_lid int		Apply a Template LID
	fw_log bool		Enable logging
	fwlog bool		Enable logging
	cgnv6_log bool		Enable logging
	forward_log bool		Enable logging
	lidlog bool		Enable logging
	reset_lidlog bool		Enable logging
	listen_on_port_lidlog bool		Enable logging
	cgnv6_policy str		‘lsn-lid’= Apply specified CGNv6 LSN LID; ‘fixed-nat’= Apply CGNv6 Fixed NAT;
	cgnv6_fixed_nat_log bool		Enable logging
	cgnv6_lsn_lid int		LSN LID
	cgnv6_lsn_log bool		Enable logging
	ip_version str		‘v4’= IPv4 rule; ‘v6’= IPv6 rule;
	src_class_list str		Match source IP against class-list
	src_geoloc_name str		Single geolocation name
	src_geoloc_list str		Geolocation name list
	src_geoloc_list_shared bool		Use Geolocation list from shared partition
	src_ipv4_any str		‘any’= Any IPv4 address;
	src_ipv6_any str		‘any’= Any IPv6 address;
	source_list list		Field source_list
	src_zone str		Zone name
	src_zone_any str		‘any’= any;
	src_threat_list str		Bind threat-list for source IP based filtering
	dst_class_list str		Match destination IP against class-list
	dst_geoloc_name str		Single geolocation name
	dst_geoloc_list str		Geolocation name list
	dst_geoloc_list_shared bool		Use Geolocation list from shared partition
	dst_ipv4_any str		‘any’= Any IPv4 address;
	dst_ipv6_any str		‘any’= Any IPv6 address;
	dest_list list		Field dest_list
	dst_domain_list str		Match destination IP against domain-list
	dst_zone str		Zone name
	dst_zone_any str		‘any’= any;
	dst_threat_list str		Bind threat-list for destination IP based filtering
	service_any str		‘any’= any;
	service_list list		Field service_list
	idle_timeout int		TCP/UDP idle-timeout
	application_any str		‘any’= any;
	app_list list		Field app_list
	track_application bool		Enable application statistic
	uuid str		uuid of the object
	user_tag str		Customized tag
	sampling_enable list		Field sampling_enable
	move_rule dict		Field move_rule
rules_by_zone dict			Field rules_by_zone
	uuid str		uuid of the object
	sampling_enable list		Field sampling_enable
application dict			Field application
	uuid str		uuid of the object
track_app_rule_list dict			Field track_app_rule_list
	uuid str		uuid of the object
app dict			Field app
	uuid str		uuid of the object
tag dict			Field tag
	uuid str		uuid of the object
oper dict			Field oper
	policy_status str		Field policy_status
	policy_unmatched_drop int		Field policy_unmatched_drop
	policy_permit int		Field policy_permit
	policy_deny int		Field policy_deny
	policy_reset int		Field policy_reset
	policy_rule_count int		Field policy_rule_count
	rule_stats list		Field rule_stats
	total_hit int		Field total_hit
	total_permit_bytes int		Field total_permit_bytes
	total_deny_bytes int		Field total_deny_bytes
	total_reset_bytes int		Field total_reset_bytes
	total_bytes int		Field total_bytes
	total_permit_packets int		Field total_permit_packets
	total_deny_packets int		Field total_deny_packets
	total_reset_packets int		Field total_reset_packets
	total_packets int		Field total_packets
	total_active_tcp int		Field total_active_tcp
	total_active_udp int		Field total_active_udp
	total_active_icmp int		Field total_active_icmp
	total_active_others int		Field total_active_others
	show_total_stats str		Field show_total_stats
	topn_rules str		Field topn_rules
	name str		Rule set name
	rule_list list		Field rule_list
	rules_by_zone dict		Field rules_by_zone
	application dict		Field application
	track_app_rule_list dict		Field track_app_rule_list
stats dict			Field stats
	unmatched_drops str		Unmatched drops counter
	permit str		Permitted counter
	deny str		Denied counter
	reset str		Reset counter
	name str		Rule set name
	rule_list list		Field rule_list
	rules_by_zone dict		Field rules_by_zone
	track_app_rule_list dict		Field track_app_rule_list
	app dict		Field app
	tag dict		Field tag

Examples

Status

• This module is not guaranteed to have a backwards compatible interface. [preview]

• This module is maintained by community.

Authors

• A10 Networks 2021