# fortios need host, username, password in every "- name"

**URL:** <https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365>\
**Category:** Ansible Project\
**Created:** [August 20, 2018, 3:58am UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365 "2018-08-20T03:58:58Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![nbctcp](https://avatars.discourse-cdn.com/v4/letter/n/c5a1d2/32.png) [@nbctcp](https://forum.ansible.com/u/nbctcp)\
**Post date:** [August 20, 2018, 3:58am UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/1 "2018-08-20T03:58:58Z")

</div>

Hi,

I have playbook for fortios and working.  
But is that possible

1. I don’t want to put password in playbook, but put that in group\_vars/forti.yml
2. In cisco I can apply playbook to group name in hosts  
i.e.

# cat playbooks/cisco.yml

---

<div class="post-metadata">

**Author:** ![Kai\_Stian\_Olstad](https://avatars.discourse-cdn.com/v4/letter/k/e19adc/32.png) [@Kai\_Stian\_Olstad](https://forum.ansible.com/u/Kai_Stian_Olstad)\
**Post date:** [August 20, 2018, 8:16am UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/2 "2018-08-20T08:16:20Z")

</div>

In group\_vars/forti.yml you can have any variable you like, so lets say forti\_password.

group\_vars/forti.yml

---

<div class="post-metadata">

**Author:** ![Jonathan\_Lozada\_De\_L](https://avatars.discourse-cdn.com/v4/letter/j/eb8c5e/32.png) [@Jonathan\_Lozada\_De\_L](https://forum.ansible.com/u/Jonathan_Lozada_De_L)\
**Post date:** [August 20, 2018, 12:27pm UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/3 "2018-08-20T12:27:20Z")

</div>

also check out ansible vault

---

<div class="post-metadata">

**Author:** ![nbctcp](https://avatars.discourse-cdn.com/v4/letter/n/c5a1d2/32.png) [@nbctcp](https://forum.ansible.com/u/nbctcp)\
**Post date:** [August 20, 2018, 2:45pm UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/4 "2018-08-20T14:45:37Z")

</div>

QUESTION1: SOLVED  
QUESTION2: Here my goal  
I have 2 fortigate (fgt1 and fgt2 with their respective ip)  
I want to backup both using 1 group name “forti” instead issuing 1 backup task to each fgt1 and fgt2  
Is that possible?  
tq

# cat hosts

[forti]

fgt1 ansible\_host=10.0.10.123  
fgt2 ansible\_host=10.0.10.124

# cat group\_vars/forti.yml

---

<div class="post-metadata">

**Author:** ![Jonathan\_Lozada\_De\_L](https://avatars.discourse-cdn.com/v4/letter/j/eb8c5e/32.png) [@Jonathan\_Lozada\_De\_L](https://forum.ansible.com/u/Jonathan_Lozada_De_L)\
**Post date:** [August 20, 2018, 3:30pm UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/5 "2018-08-20T15:30:31Z")

</div>

have you run it this way yet? it should do both host in that group

---

<div class="post-metadata">

**Author:** ![nbctcp](https://avatars.discourse-cdn.com/v4/letter/n/c5a1d2/32.png) [@nbctcp](https://forum.ansible.com/u/nbctcp)\
**Post date:** [August 20, 2018, 3:37pm UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/6 "2018-08-20T15:37:22Z")

</div>

with this setting, I got this erro

# cat playbooks/forti.yml

---

<div class="post-metadata">

**Author:** ![Jonathan\_Lozada\_De\_L](https://avatars.discourse-cdn.com/v4/letter/j/eb8c5e/32.png) [@Jonathan\_Lozada\_De\_L](https://forum.ansible.com/u/Jonathan_Lozada_De_L)\
**Post date:** [August 20, 2018, 3:40pm UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/7 "2018-08-20T15:40:58Z")

</div>

are you able to connect to it regularly? at the end you can see this error

},  
“msg”: “Error connecting device”

---

<div class="post-metadata">

**Author:** ![nbctcp](https://avatars.discourse-cdn.com/v4/letter/n/c5a1d2/32.png) [@nbctcp](https://forum.ansible.com/u/nbctcp)\
**Post date:** [August 20, 2018, 4:09pm UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/8 "2018-08-20T16:09:53Z")

</div>

PROBLEMS:  
-with working playbook.  
backup applied on both fgt1 and fgt2 but  
address (LAN) and policy task (LAN2WAN DNS) only applied on fgt1

WORKING

# cat forti.yml

---

<div class="post-metadata">

**Author:** ![Kai\_Stian\_Olstad](https://avatars.discourse-cdn.com/v4/letter/k/e19adc/32.png) [@Kai\_Stian\_Olstad](https://forum.ansible.com/u/Kai_Stian_Olstad)\
**Post date:** [August 20, 2018, 4:34pm UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/9 "2018-08-20T16:34:48Z")

</div>

Your host n the module need to different for each host so use the variable ansible\_host or inventory\_hostanme.

---

<div class="post-metadata">

**Author:** ![nbctcp](https://avatars.discourse-cdn.com/v4/letter/n/c5a1d2/32.png) [@nbctcp](https://forum.ansible.com/u/nbctcp)\
**Post date:** [August 20, 2018, 4:50pm UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/10 "2018-08-20T16:50:28Z")

</div>

SOLVED  
tq

---

<div class="post-metadata">

**Author:** ![Philippe\_Domineaux](https://avatars.discourse-cdn.com/v4/letter/p/8491ac/32.png) [@Philippe\_Domineaux](https://forum.ansible.com/u/Philippe_Domineaux)\
**Post date:** [October 30, 2019, 6:22pm UTC](https://forum.ansible.com/t/fortios-need-host-username-password-in-every-name/28365/11 "2019-10-30T18:22:34Z")

</div>

Hello,

how did you managed to make it work?