policy: Add dstinf for Add-FGTFIrewallPolicyMember

FortiPower · Jan 8, 2025 · 388bad3 · 388bad3
1 parent 7baad8b
commit 388bad3
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/PowerFGT/Public/cmdb/firewall/policy.ps1 b/PowerFGT/Public/cmdb/firewall/policy.ps1
@@ -354,6 +354,8 @@ function Add-FGTFirewallPolicyMember {
         [Parameter(Mandatory = $false)]
         [string[]]$dstaddr,
         [Parameter(Mandatory = $false)]
+        [string[]]$dstintf,
+        [Parameter(Mandatory = $false)]
         [String[]]$vdom,
         [Parameter(Mandatory = $false)]
         [psobject]$connection = $DefaultFGTConnection
@@ -430,6 +432,25 @@ function Add-FGTFirewallPolicyMember {
             $_policy | add-member -name "dstaddr" -membertype NoteProperty -Value $members
         }
 
+        if ( $PsBoundParameters.ContainsKey('dstintf') ) {
+
+            if ($policy.dstintf.name -eq "all") {
+                #all => create new empty array members
+                $members = @()
+            }
+            else {
+                #Add member to existing source interface
+                $members = $policy.dstintf
+            }
+
+            foreach ( $member in $dstintf ) {
+                $member_name = @{ }
+                $member_name.add( 'name', $member)
+                $members += $member_name
+            }
+            $_policy | add-member -name "dstintf" -membertype NoteProperty -Value $members
+        }
+
         if ($PSCmdlet.ShouldProcess($policy.name, 'Add Firewall Policy Group Member')) {
             Invoke-FGTRestMethod -method "PUT" -body $_policy -uri $uri -uri_escape $policy.policyid -connection $connection @invokeParams | Out-Null