Resource Type: f5_selfip

Defined in:

lib/puppet/type/f5_selfip.rb

Providers:

rest

Overview

A self IP address is an IP address on the BIG-IP system that you associate with a VLAN, to access hosts in that VLAN. By virtue of its netmask, a self IP address represents an address space, that is, a range of IP addresses spanning the hosts in the VLAN, rather than a single host address. You can associate self IP addresses not only with VLANs, but also with VLAN groups.

Properties

• ensure (defaults to: present)

  The basic property that the resource should be in.

  Supported values:

  • present
  • absent
• inherit_traffic_group

  Inherit traffic group from current partition / path

  Supported values:

  • true
  • false
• port_lockdown

  Specifies the protocols and services from which this self IP can accept traffic. Note that fewer active protocols enhances the security level of the self IP and its associated VLANs.

  • [protocol]:[port]: Expands the Custom List option, where you can specify the protocols and services to activate on this self IP.
  • default: Activates only the default protocols and services. You can determine the supported protocols and services by running the tmsh list net self-allow defaults command on the command line. May be combined with further protocol:port values.
  • all: Activates all TCP and UDP services on this self IP. May not be combined with any other values.
  • none: Specifies that this self IP accepts no traffic. May not be combined with any other values.
  Supported values:

  • default
  • all
  • none
  • /\s*:\d+/
• traffic_group

  Specifies the traffic group to associate with the self IP. You can click the box to have the self IP inherit the traffic group from the root folder, or clear the box to select a specific traffic group for the self IP.

• vlan

  Specifies the VLAN associated with this self IP address.

Parameters

• address

  Specify either an IPv4 or an IPv6 address. For an IPv4 address, you must specify a /32 IP address per RFC 3021. and

• name (namevar)
• provider

  The specific backend to use for this f5_selfip resource. You will seldom need to specify this --- Puppet will usually discover the appropriate provider for your platform.