addSecurityZone

The addSecurityZone operation handles configuration related to SecurityZone model. 

Description

This API call is not allowed on the standby unit in an HA pair.

Data Parameters

Parameter Required Type Description
name True string A string containing the name of the object, up to 48 characters in length
description False string A string containing a description of the object, up to 200 characters in length
Field level constraints: length must be between 0 and 200 (inclusive). (Note: Additional constraints might exist)
interfaces False [object] A list of interfaces used inside this security zone
Allowed types are: [EtherChannelInterface, PhysicalInterface, SubInterface, VirtualTunnelInterface, VlanInterface]
mode True string An enum value that specifies the security zone mode which should correspond to mode of selected Physical Interface
ROUTED - The zone can contain ROUTED mode interfaces only.
PASSIVE - The zone can contain PASSIVE mode interfaces only.
Field level constraints: cannot be null. (Note: Additional constraints might exist)
type True string A UTF8 string, all letters lower-case, that represents the class-type. This corresponds to the class name.

Example

- name: Execute 'addSecurityZone' operation
  ftd_configuration:
    operation: "addSecurityZone"
    data:
        name: "{{ name }}"
        description: "{{ description }}"
        interfaces: "{{ interfaces }}"
        mode: "{{ mode }}"
        type: "{{ type }}"