a10_system

Synopsis

Configure System Parameters

Parameters

Parameters

Choices/Defaults

Comment

state

str/required

[‘noop’, ‘present’, ‘absent’]

State of the object to be created.

ansible_host

str/required

Host for AXAPI authentication

ansible_username

str/required

Username for AXAPI authentication

ansible_password

str/required

Password for AXAPI authentication

ansible_port

int/required

Port for AXAPI authentication

a10_device_context_id

int

[‘1-8’]

Device ID for aVCS configuration

a10_partition

str

Destination/target partition for object/command

anomaly_log

bool

log system anomalies

attack

bool

System Attack

attack_log

bool

log attack anomalies

ddos_attack

bool

System DDoS Attack

ddos_log

bool

log DDoS attack anomalies

log_cpu_interval

int

Log high CPU interval (Specify consecutive seconds before logging high CPU)

sockstress_disable

bool

Disable sockstress protection

promiscuous_mode

bool

Run in promiscous mode settings

glid

int

Apply limits to the whole system

module_ctrl_cpu

str

‘high’= high cpu usage; ‘low’= low cpu usage; ‘medium’= medium cpu usage;

src_ip_hash_enable

bool

Enable source ip hash

class_list_hitcount_enable

bool

Enable class list hit count

geo_db_hitcount_enable

bool

Enable Geolocation database hit count

domain_list_hitcount_enable

bool

Enable class list hit count

dynamic_service_dns_socket_pool

bool

Enable socket pool for dynamic-service DNS

uuid

str

uuid of the object

timeout_value

dict

Field timeout_value

ftp

int

set timeout to stop ftp transfer in seconds, 0 is no limit

scp

int

set timeout to stop scp transfer in seconds, 0 is no limit

sftp

int

set timeout to stop sftp transfer in seconds, 0 is no limit

tftp

int

set timeout to stop tftp transfer in seconds, 0 is no limit

http

int

set timeout to stop http transfer in seconds, 0 is no limit

https

int

set timeout to stop https transfer in seconds, 0 is no limit

uuid

str

uuid of the object

bandwidth

dict

Field bandwidth

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

counter_lib_accounting

dict

Field counter_lib_accounting

uuid

str

uuid of the object

control_cpu

dict

Field control_cpu

uuid

str

uuid of the object

data_cpu

dict

Field data_cpu

uuid

str

uuid of the object

mgmt_port

dict

Field mgmt_port

port_index

int

port index to be configured (Specify port index)

mac_address

str

mac-address to be configured as mgmt port

pci_address

str

pci-address to be configured as mgmt port

shared_poll_mode

dict

Field shared_poll_mode

enable

bool

Enable shared poll mode

disable

bool

Disable shared poll mode

probe_network_devices

dict

Field probe_network_devices

management_interface_mode

dict

Field management_interface_mode

dedicated

bool

Set management interface in dedicated mode

non_dedicated

bool

Set management interface in non-dedicated mode

add_port

dict

Field add_port

port_index

int

port index to be configured (Specify port index)

del_port

dict

Field del_port

port_index

int

port index to be configured (Specify port index)

modify_port

dict

Field modify_port

port_index

int

port index to be configured (Specify port index)

port_number

int

port number to be configured (Specify port number)

multi_queue_support

dict

Field multi_queue_support

enable

bool

Enable Multi-Queue-Support

add_cpu_core

dict

Field add_cpu_core

core_index

int

core index to be added (Specify core index)

delete_cpu_core

dict

Field delete_cpu_core

core_index

int

core index to be deleted (Specify core index)

cpu_hyper_thread

dict

Field cpu_hyper_thread

enable

bool

Enable CPU Hyperthreading

disable

bool

Disable CPU Hyperthreading

io_cpu

dict

Field io_cpu

max_cores

int

max number of IO cores (Specify number of cores)

link_monitor

dict

Field link_monitor

enable

bool

Enable Link Monitoring

disable

bool

Disable Link Monitoring

port_list

dict

Field port_list

uuid

str

uuid of the object

port_info

dict

Field port_info

uuid

str

uuid of the object

inuse_port_list

dict

Field inuse_port_list

uuid

str

uuid of the object

cpu_list

dict

Field cpu_list

uuid

str

uuid of the object

cpu_map

dict

Field cpu_map

uuid

str

uuid of the object

inuse_cpu_list

dict

Field inuse_cpu_list

uuid

str

uuid of the object

template

dict

Field template

template_policy

str

Apply policy template to the whole system (Policy template name)

uuid

str

uuid of the object

template_bind

dict

Field template_bind

monitor_list

list

Field monitor_list

mon_template

dict

Field mon_template

monitor_list

list

Field monitor_list

memory

dict

Field memory

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

resource_usage

dict

Field resource_usage

ssl_context_memory

int

Total SSL context memory needed in units of MB. Will be rounded to closest multiple of 2MB

ssl_dma_memory

int

Total SSL DMA memory needed in units of MB. Will be rounded to closest multiple of 2MB

nat_pool_addr_count

int

Total configurable NAT Pool addresses in the System

l4_session_count

int

Total Sessions in the System

auth_portal_html_file_size

int

Specify maximum html file size for each html page in auth portal (in KB)

auth_portal_image_file_size

int

Specify maximum image file size for default portal (in KB)

max_aflex_file_size

int

Set maximum aFleX file size (Maximum file size in KBytes, default is 32K)

aflex_table_entry_count

int

Total aFleX table entry in the system (Total aFlex entry in the system)

class_list_ipv6_addr_count

int

Total IPv6 addresses for class-list

class_list_ac_entry_count

int

Total entries for AC class-list

max_aflex_authz_collection_number

int

Specify the maximum number of collections supported by aFleX authorization

radius_table_size

int

Total configurable CGNV6 RADIUS Table entries

authz_policy_number

int

Specify the maximum number of authorization policies

uuid

str

uuid of the object

visibility

dict

Field visibility

link_capability

dict

Field link_capability

enable

bool

Enable/Disable link capabilities

uuid

str

uuid of the object

resource_accounting

dict

Field resource_accounting

uuid

str

uuid of the object

template_list

list

Field template_list

trunk

dict

Field trunk

load_balance

dict

Field load_balance

ports

dict

Field ports

link_detection_interval

int

Link detection interval in msecs

uuid

str

uuid of the object

table_integrity_check

dict

Field table_integrity_check

action

bool

Enable table integrity check

uuid

str

uuid of the object

ipsec

dict

Field ipsec

packet_round_robin

bool

Enable packet round robin for IPsec packets

crypto_core

int

Crypto cores assigned for IPsec processing

crypto_mem

int

Crypto memory percentage assigned for IPsec processing (rounded to increments of 10)

uuid

str

uuid of the object

fpga_decrypt

dict

Field fpga_decrypt

spe_profile

dict

Field spe_profile

action

str

‘ipv4-only’= Enable IPv4 HW forward entries only; ‘ipv6-only’= Enable IPv6 HW forward entries only; ‘ipv4-ipv6’= Enable Both IPv4/IPv6 HW forward entries (shared);

spe_status

dict

Field spe_status

uuid

str

uuid of the object

deep_hrxq

dict

Field deep_hrxq

enable

bool

Field enable

hrxq_status

dict

Field hrxq_status

uuid

str

uuid of the object

cpu_load_sharing

dict

Field cpu_load_sharing

disable

bool

Disable CPU load sharing in overload situations

packets_per_second

dict

Field packets_per_second

cpu_usage

dict

Field cpu_usage

uuid

str

uuid of the object

per_vlan_limit

dict

Field per_vlan_limit

bcast

int

broadcast packets (per second limit)

ipmcast

int

IP multicast packets (per second limit)

mcast

int

multicast packets (per second limit)

unknown_ucast

int

unknown unicast packets (per second limit)

uuid

str

uuid of the object

all_vlan_limit

dict

Field all_vlan_limit

bcast

int

broadcast packets (per second limit)

ipmcast

int

IP multicast packets (per second limit)

mcast

int

multicast packets (per second limit)

unknown_ucast

int

unknown unicast packets (per second limit)

uuid

str

uuid of the object

ve_mac_scheme

dict

Field ve_mac_scheme

ve_mac_scheme_val

str

‘hash-based’= Hash-based using the VE number; ‘round-robin’= Round Robin scheme; ‘system-mac’= Use system MAC address;

uuid

str

uuid of the object

session_reclaim_limit

dict

Field session_reclaim_limit

nscan_limit

int

smp session scan limit (number of smp sessions per scan)

scan_freq

int

smp session scan frequency (scan per second)

uuid

str

uuid of the object

hardware

dict

Field hardware

uuid

str

uuid of the object

platformtype

dict

Field platformtype

uuid

str

uuid of the object

reboot

dict

Field reboot

uuid

str

uuid of the object

shutdown

dict

Field shutdown

uuid

str

uuid of the object

environment

dict

Field environment

uuid

str

uuid of the object

hardware_forward

dict

Field hardware_forward

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

throughput

dict

Field throughput

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

ipmi

dict

Field ipmi

reset

bool

Reset IPMI Controller

ip

dict

Field ip

ipsrc

dict

Field ipsrc

user

dict

Field user

tool

dict

Field tool

queuing_buffer

dict

Field queuing_buffer

enable

bool

Enable/Disable micro-burst traffic support

uuid

str

uuid of the object

trunk_hw_hash

dict

Field trunk_hw_hash

mode

int

Set HW hash mode, default is 6 (1=dst-mac 2=src-mac 3=src-dst-mac 4=src-ip 5=dst-ip 6=rtag6 7=rtag7)

uuid

str

uuid of the object

trunk_xaui_hw_hash

dict

Field trunk_xaui_hw_hash

mode

int

Set HW hash mode, default is 6 (1=dst-mac 2=src-mac 3=src-dst-mac 4=src-ip 5=dst-ip 6=rtag6 7=rtag7)

uuid

str

uuid of the object

upgrade_status

dict

Field upgrade_status

uuid

str

uuid of the object

guest_file

dict

Field guest_file

uuid

str

uuid of the object

cm_update_file_name_ref

dict

Field cm_update_file_name_ref

source_name

str

bind source name

dest_name

str

bind dest name

id

int

Specify unique Partition id

core

dict

Field core

uuid

str

uuid of the object

apps_global

dict

Field apps_global

log_session_on_established

bool

Send TCP session creation log on completion of 3-way handshake

msl_time

int

Configure maximum session life, default is 2 seconds (1-40 seconds, default is 2 seconds)

uuid

str

uuid of the object

shell_privileges

dict

Field shell_privileges

uuid

str

uuid of the object

cosq_stats

dict

Field cosq_stats

uuid

str

uuid of the object

cosq_show

dict

Field cosq_show

uuid

str

uuid of the object

fw

dict

Field fw

application_mempool

bool

Enable application memory pool

application_flow

int

Number of flows

basic_dpi_enable

bool

Enable basic dpi

uuid

str

uuid of the object

password_policy

dict

Field password_policy

complexity

str

‘Strict’= Strict= Min length=8, Min Lower Case=2, Min Upper Case=2, Min Numbers=2, Min Special Character=1; ‘Medium’= Medium= Min length=6, Min Lower Case=2, Min Upper Case=2, Min Numbers=1, Min Special Character=1; ‘Simple’= Simple= Min length=4, Min Lower Case=1, Min Upper Case=1, Min Numbers=1, Min Special Character=0;

aging

str

‘Strict’= Strict= Max Age-60 Days; ‘Medium’= Medium= Max Age- 90 Days; ‘Simple’= Simple= Max Age-120 Days;

history

str

‘Strict’= Strict= Does not allow upto 5 old passwords; ‘Medium’= Medium= Does not allow upto 4 old passwords; ‘Simple’= Simple= Does not allow upto 3 old passwords;

min_pswd_len

int

Configure custom password length

uuid

str

uuid of the object

radius

dict

Field radius

server

dict

Field server

geoloc_list_list

list

Field geoloc_list_list

name

str

Specify name of Geolocation list

shared

bool

Enable sharing with other partitions

include_geoloc_name_list

list

Field include_geoloc_name_list

exclude_geoloc_name_list

list

Field exclude_geoloc_name_list

uuid

str

uuid of the object

user_tag

str

Customized tag

sampling_enable

list

Field sampling_enable

geoloc_name_helper

dict

Field geoloc_name_helper

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

geolocation_file

dict

Field geolocation_file

uuid

str

uuid of the object

error_info

dict

Field error_info

geoloc

dict

Field geoloc

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

geo_location

dict

Field geo_location

geo_location_iana

bool

Load built-in IANA Database

geo_location_geolite2_city

bool

Load built-in Maxmind GeoLite2-City database. Database available from http=//www.maxmind.com

geolite2_city_include_ipv6

bool

Include IPv6 address

geo_location_geolite2_country

bool

Load built-in Maxmind GeoLite2-Country database. Database available from http=//www.maxmind.com

geolite2_country_include_ipv6

bool

Include IPv6 address

geoloc_load_file_list

list

Field geoloc_load_file_list

uuid

str

uuid of the object

entry_list

list

Field entry_list

fpga_core_crc

dict

Field fpga_core_crc

monitor_disable

bool

Disable FPGA Core CRC error monitoring and act on it

reboot_enable

bool

Enable system reboot if system encounters FPGA Core CRC error

uuid

str

uuid of the object

gui_image_list

dict

Field gui_image_list

uuid

str

uuid of the object

syslog_time_msec

dict

Field syslog_time_msec

enable_flag

bool

Field enable_flag

ipmi_service

dict

Field ipmi_service

disable

bool

Disable IPMI on platform

uuid

str

uuid of the object

app_performance

dict

Field app_performance

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

ssl_req_q

dict

Field ssl_req_q

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

tcp

dict

Field tcp

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

icmp

dict

Field icmp

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

icmp6

dict

Field icmp6

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

ip_stats

dict

Field ip_stats

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

ip6_stats

dict

Field ip6_stats

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

domain_list_info

dict

Field domain_list_info

uuid

str

uuid of the object

ip_dns_cache

dict

Field ip_dns_cache

uuid

str

uuid of the object

bfd

dict

Field bfd

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

icmp_rate

dict

Field icmp_rate

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

dns

dict

Field dns

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

dns_cache

dict

Field dns_cache

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

session

dict

Field session

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

ndisc_ra

dict

Field ndisc_ra

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

tcp_stats

dict

Field tcp_stats

uuid

str

uuid of the object

sampling_enable

list

Field sampling_enable

telemetry_log

dict

Field telemetry_log

top_k_source_list

dict

Field top_k_source_list

top_k_app_svc_list

dict

Field top_k_app_svc_list

device_status

dict

Field device_status

partition_metrics

dict

Field partition_metrics

Status

  • This module is not guaranteed to have a backwards compatible interface. [preview]

  • This module is maintained by community.

Authors

  • A10 Networks 2021