update

ansible.cfg

@@ -6,4 +6,4 @@ force_handlers = True
 stdout_callback = yaml
 
 [ssh_connection]
-pipelining = True
+#pipelining = True

documentation/importer/fortinet/fortiManager.md

@@ -0,0 +1,143 @@
+# Integrating Fortinet FortiManager 7.x
+
+## Create api user
+```console
+create api user
+config system admin user
+   edit "apiuser"
+       set password xxx
+       set adom "all_adoms"             
+       set rpc-permit read-write
+```
+
+## login
+```console
+curl --request POST \
+  --url https://10.5.1.55/jsonrpc \
+  --header 'Content-Type: application/json' \
+  --data '{
+  "id": 1,
+  "method": "exec",
+  "params": [
+    {
+      "data": [
+        {
+          "passwd": "xxx", 
+          "user": "apiuser"
+        }
+      ], 
+      "url": "sys/login/user"
+    }
+  ]
+}'
+```
+
+gives
+```json
+{
+  "id": 1,
+  "result": [
+    {
+      "status": {
+        "code": 0,
+        "message": "OK"
+      },
+      "url": "sys\/login\/user"
+    }
+  ],
+  "session": "KCOuhqKTFt3ISXKntpIVO2kA5GJ+QcorMoxm8xLGru0HxrwwpgWuTtRcU8P9XCpbIRlDjjSv2+lzTYYIt1bSzw=="
+}
+```
+
+## logout
+
+```console
+curl --request POST \
+  --url https://10.5.1.55/jsonrpc \
+  --header 'Content-Type: application/json' \
+  --data '{
+  "id": 1,
+  "jsonrpc": "1.0", 
+  "method": "exec",
+  "params": [
+    {
+      "url": "sys/logout"
+    }
+  ],
+  "verbose": 1,
+	"session": "BJG0kh4qBopxgjJ+DwEyxJSWCl3MzHdeeympX4GJqw50EoLIjXoLH3+7W3e4N9EqtWb5IhGKBJugGKS6HQrDUg=="
+}'
+```
+
+## get a list of all ADOMs
+
+```console
+curl --request POST \
+  --url https://10.5.1.55/jsonrpc \
+  --header 'Content-Type: application/json' \
+  --data '{
+  "method": "get",
+  "params": [
+    {
+	  "fields": ["name", "oid", "uuid"],
+      "url": "/dvmdb/adom"
+    }
+  ],
+  "session": "lieHUJqiA0VldI45nVh8K2o0kP2XRm7NrrayIL1t977BG78\/wukwCgnFnpClbH9A6rAQbCPVjcGVFOw1VwULLQ=="
+}
+'
+```
+
+## get a list of fw rules
+
+```console
+curl --request POST \
+  --url https://10.5.1.55/jsonrpc \
+  --header 'Content-Type: application/json' \
+  --data '{
+  "method": "get",
+  "params": [
+    {
+      "url": "/pm/config/adom/my_adom/pkg/mypkg/firewall/policy"
+    }
+  ],
+	"verbose": 1,
+  "id": 2,
+  "session": "++7z161rod0cGMaStLUWohDpyUnsyT030tNuLPyVYvIhd0GCLXwp9vCJRKnYV4I0Q\/di1bSL3Wf7o8oNnWu6cw=="
+}'
+```
+
+## get nat rules
+
+### get snat rules
+```console
+{
+  "method": "get",
+  "params": [
+    {
+      "url": "/pm/config/adom/my_adom/pkg/mypkg/firewall/central-snat-map"
+    }
+  ],
+	"verbose": 1,
+  "id": 2,
+  "session": "++7z161rod0cGMaStLUWohDpyUnsyT030tNuLPyVYvIhd0GCLXwp9vCJRKnYV4I0Q\/di1bSL3Wf7o8oNnWu6cw=="
+}'
+```
+### get dnat rules
+
+```console
+curl --request POST \
+  --url https://10.5.1.55/jsonrpc \
+  --header 'Content-Type: application/json' \
+  --data '{
+  "method": "get",
+  "params": [
+    {
+      "url": "/pm/config/adom/my_adom/pkg/mypkg/firewall/central/dnat"
+    }
+  ],
+	"verbose": 1,
+  "id": 2,
+  "session": "++7z161rod0cGMaStLUWohDpyUnsyT030tNuLPyVYvIhd0GCLXwp9vCJRKnYV4I0Q\/di1bSL3Wf7o8oNnWu6cw=="
+}'
+```

documentation/importer/import-via-fw-api.md

@@ -0,0 +1,3 @@
+# Importing firewall configs via API
+
+Use a tool like insomnia for testing.