1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectVpnIpsecManualkey
fortimanager 1.15.0 published on Thursday, Nov 13, 2025 by fortinetdev
Schema (JSON)
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectVpnIpsecManualkey

fortimanager logo
fortimanager 1.15.0 published on Thursday, Nov 13, 2025 by fortinetdev
Schema (JSON)
fortinetdev/terraform-provider-fortimanager

    Configure IPsec manual keys.

    Create ObjectVpnIpsecManualkey Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ObjectVpnIpsecManualkey(name: string, args?: ObjectVpnIpsecManualkeyArgs, opts?: CustomResourceOptions);
    @overload
def ObjectVpnIpsecManualkey(resource_name: str,
                            args: Optional[ObjectVpnIpsecManualkeyArgs] = None,
                            opts: Optional[ResourceOptions] = None)

@overload
def ObjectVpnIpsecManualkey(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            adom: Optional[str] = None,
                            authentication: Optional[str] = None,
                            authkeys: Optional[Sequence[str]] = None,
                            enckeys: Optional[Sequence[str]] = None,
                            encryption: Optional[str] = None,
                            interfaces: Optional[Sequence[str]] = None,
                            local_gw: Optional[str] = None,
                            localspi: Optional[str] = None,
                            name: Optional[str] = None,
                            npu_offload: Optional[str] = None,
                            object_vpn_ipsec_manualkey_id: Optional[str] = None,
                            remote_gw: Optional[str] = None,
                            remotespi: Optional[str] = None,
                            scopetype: Optional[str] = None)
    func NewObjectVpnIpsecManualkey(ctx *Context, name string, args *ObjectVpnIpsecManualkeyArgs, opts ...ResourceOption) (*ObjectVpnIpsecManualkey, error)
    public ObjectVpnIpsecManualkey(string name, ObjectVpnIpsecManualkeyArgs? args = null, CustomResourceOptions? opts = null)
    public ObjectVpnIpsecManualkey(String name, ObjectVpnIpsecManualkeyArgs args)
public ObjectVpnIpsecManualkey(String name, ObjectVpnIpsecManualkeyArgs args, CustomResourceOptions options)

    type: fortimanager:ObjectVpnIpsecManualkey
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ObjectVpnIpsecManualkeyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ObjectVpnIpsecManualkeyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ObjectVpnIpsecManualkeyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ObjectVpnIpsecManualkeyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ObjectVpnIpsecManualkeyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var objectVpnIpsecManualkeyResource = new Fortimanager.ObjectVpnIpsecManualkey("objectVpnIpsecManualkeyResource", new()
{
    Adom = "string",
    Authentication = "string",
    Authkeys = new[]
    {
        "string",
    },
    Enckeys = new[]
    {
        "string",
    },
    Encryption = "string",
    Interfaces = new[]
    {
        "string",
    },
    LocalGw = "string",
    Localspi = "string",
    Name = "string",
    NpuOffload = "string",
    ObjectVpnIpsecManualkeyId = "string",
    RemoteGw = "string",
    Remotespi = "string",
    Scopetype = "string",
});

    example, err := fortimanager.NewObjectVpnIpsecManualkey(ctx, "objectVpnIpsecManualkeyResource", &fortimanager.ObjectVpnIpsecManualkeyArgs{
	Adom:           pulumi.String("string"),
	Authentication: pulumi.String("string"),
	Authkeys: pulumi.StringArray{
		pulumi.String("string"),
	},
	Enckeys: pulumi.StringArray{
		pulumi.String("string"),
	},
	Encryption: pulumi.String("string"),
	Interfaces: pulumi.StringArray{
		pulumi.String("string"),
	},
	LocalGw:                   pulumi.String("string"),
	Localspi:                  pulumi.String("string"),
	Name:                      pulumi.String("string"),
	NpuOffload:                pulumi.String("string"),
	ObjectVpnIpsecManualkeyId: pulumi.String("string"),
	RemoteGw:                  pulumi.String("string"),
	Remotespi:                 pulumi.String("string"),
	Scopetype:                 pulumi.String("string"),
})

    var objectVpnIpsecManualkeyResource = new ObjectVpnIpsecManualkey("objectVpnIpsecManualkeyResource", ObjectVpnIpsecManualkeyArgs.builder()
    .adom("string")
    .authentication("string")
    .authkeys("string")
    .enckeys("string")
    .encryption("string")
    .interfaces("string")
    .localGw("string")
    .localspi("string")
    .name("string")
    .npuOffload("string")
    .objectVpnIpsecManualkeyId("string")
    .remoteGw("string")
    .remotespi("string")
    .scopetype("string")
    .build());

    object_vpn_ipsec_manualkey_resource = fortimanager.ObjectVpnIpsecManualkey("objectVpnIpsecManualkeyResource",
    adom="string",
    authentication="string",
    authkeys=["string"],
    enckeys=["string"],
    encryption="string",
    interfaces=["string"],
    local_gw="string",
    localspi="string",
    name="string",
    npu_offload="string",
    object_vpn_ipsec_manualkey_id="string",
    remote_gw="string",
    remotespi="string",
    scopetype="string")

    const objectVpnIpsecManualkeyResource = new fortimanager.ObjectVpnIpsecManualkey("objectVpnIpsecManualkeyResource", {
    adom: "string",
    authentication: "string",
    authkeys: ["string"],
    enckeys: ["string"],
    encryption: "string",
    interfaces: ["string"],
    localGw: "string",
    localspi: "string",
    name: "string",
    npuOffload: "string",
    objectVpnIpsecManualkeyId: "string",
    remoteGw: "string",
    remotespi: "string",
    scopetype: "string",
});

    type: fortimanager:ObjectVpnIpsecManualkey
properties:
    adom: string
    authentication: string
    authkeys:
        - string
    enckeys:
        - string
    encryption: string
    interfaces:
        - string
    localGw: string
    localspi: string
    name: string
    npuOffload: string
    objectVpnIpsecManualkeyId: string
    remoteGw: string
    remotespi: string
    scopetype: string

    ObjectVpnIpsecManualkey Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ObjectVpnIpsecManualkey resource accepts the following input properties:

    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Authentication string
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    Authkeys List<string>
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    Enckeys List<string>
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    Encryption string
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    Interfaces List<string>
    Name of the physical, aggregate, or VLAN interface.
    LocalGw string
    Local gateway.
    Localspi string
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    Name string
    IPsec tunnel name.
    NpuOffload string
    Enable/disable NPU offloading. Valid values: disable, enable.
    ObjectVpnIpsecManualkeyId string
    an identifier for the resource with format {{name}}.
    RemoteGw string
    Peer gateway.
    Remotespi string
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Authentication string
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    Authkeys []string
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    Enckeys []string
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    Encryption string
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    Interfaces []string
    Name of the physical, aggregate, or VLAN interface.
    LocalGw string
    Local gateway.
    Localspi string
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    Name string
    IPsec tunnel name.
    NpuOffload string
    Enable/disable NPU offloading. Valid values: disable, enable.
    ObjectVpnIpsecManualkeyId string
    an identifier for the resource with format {{name}}.
    RemoteGw string
    Peer gateway.
    Remotespi string
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    authentication String
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    authkeys List<String>
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    enckeys List<String>
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    encryption String
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    interfaces List<String>
    Name of the physical, aggregate, or VLAN interface.
    localGw String
    Local gateway.
    localspi String
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    name String
    IPsec tunnel name.
    npuOffload String
    Enable/disable NPU offloading. Valid values: disable, enable.
    objectVpnIpsecManualkeyId String
    an identifier for the resource with format {{name}}.
    remoteGw String
    Peer gateway.
    remotespi String
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    authentication string
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    authkeys string[]
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    enckeys string[]
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    encryption string
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    interfaces string[]
    Name of the physical, aggregate, or VLAN interface.
    localGw string
    Local gateway.
    localspi string
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    name string
    IPsec tunnel name.
    npuOffload string
    Enable/disable NPU offloading. Valid values: disable, enable.
    objectVpnIpsecManualkeyId string
    an identifier for the resource with format {{name}}.
    remoteGw string
    Peer gateway.
    remotespi string
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    authentication str
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    authkeys Sequence[str]
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    enckeys Sequence[str]
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    encryption str
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    interfaces Sequence[str]
    Name of the physical, aggregate, or VLAN interface.
    local_gw str
    Local gateway.
    localspi str
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    name str
    IPsec tunnel name.
    npu_offload str
    Enable/disable NPU offloading. Valid values: disable, enable.
    object_vpn_ipsec_manualkey_id str
    an identifier for the resource with format {{name}}.
    remote_gw str
    Peer gateway.
    remotespi str
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    authentication String
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    authkeys List<String>
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    enckeys List<String>
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    encryption String
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    interfaces List<String>
    Name of the physical, aggregate, or VLAN interface.
    localGw String
    Local gateway.
    localspi String
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    name String
    IPsec tunnel name.
    npuOffload String
    Enable/disable NPU offloading. Valid values: disable, enable.
    objectVpnIpsecManualkeyId String
    an identifier for the resource with format {{name}}.
    remoteGw String
    Peer gateway.
    remotespi String
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ObjectVpnIpsecManualkey resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ObjectVpnIpsecManualkey Resource

    Get an existing ObjectVpnIpsecManualkey resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ObjectVpnIpsecManualkeyState, opts?: CustomResourceOptions): ObjectVpnIpsecManualkey
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        adom: Optional[str] = None,
        authentication: Optional[str] = None,
        authkeys: Optional[Sequence[str]] = None,
        enckeys: Optional[Sequence[str]] = None,
        encryption: Optional[str] = None,
        interfaces: Optional[Sequence[str]] = None,
        local_gw: Optional[str] = None,
        localspi: Optional[str] = None,
        name: Optional[str] = None,
        npu_offload: Optional[str] = None,
        object_vpn_ipsec_manualkey_id: Optional[str] = None,
        remote_gw: Optional[str] = None,
        remotespi: Optional[str] = None,
        scopetype: Optional[str] = None) -> ObjectVpnIpsecManualkey
    func GetObjectVpnIpsecManualkey(ctx *Context, name string, id IDInput, state *ObjectVpnIpsecManualkeyState, opts ...ResourceOption) (*ObjectVpnIpsecManualkey, error)
    public static ObjectVpnIpsecManualkey Get(string name, Input<string> id, ObjectVpnIpsecManualkeyState? state, CustomResourceOptions? opts = null)
    public static ObjectVpnIpsecManualkey get(String name, Output<String> id, ObjectVpnIpsecManualkeyState state, CustomResourceOptions options)
    resources:  _:    type: fortimanager:ObjectVpnIpsecManualkey    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Authentication string
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    Authkeys List<string>
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    Enckeys List<string>
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    Encryption string
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    Interfaces List<string>
    Name of the physical, aggregate, or VLAN interface.
    LocalGw string
    Local gateway.
    Localspi string
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    Name string
    IPsec tunnel name.
    NpuOffload string
    Enable/disable NPU offloading. Valid values: disable, enable.
    ObjectVpnIpsecManualkeyId string
    an identifier for the resource with format {{name}}.
    RemoteGw string
    Peer gateway.
    Remotespi string
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Authentication string
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    Authkeys []string
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    Enckeys []string
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    Encryption string
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    Interfaces []string
    Name of the physical, aggregate, or VLAN interface.
    LocalGw string
    Local gateway.
    Localspi string
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    Name string
    IPsec tunnel name.
    NpuOffload string
    Enable/disable NPU offloading. Valid values: disable, enable.
    ObjectVpnIpsecManualkeyId string
    an identifier for the resource with format {{name}}.
    RemoteGw string
    Peer gateway.
    Remotespi string
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    authentication String
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    authkeys List<String>
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    enckeys List<String>
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    encryption String
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    interfaces List<String>
    Name of the physical, aggregate, or VLAN interface.
    localGw String
    Local gateway.
    localspi String
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    name String
    IPsec tunnel name.
    npuOffload String
    Enable/disable NPU offloading. Valid values: disable, enable.
    objectVpnIpsecManualkeyId String
    an identifier for the resource with format {{name}}.
    remoteGw String
    Peer gateway.
    remotespi String
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    authentication string
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    authkeys string[]
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    enckeys string[]
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    encryption string
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    interfaces string[]
    Name of the physical, aggregate, or VLAN interface.
    localGw string
    Local gateway.
    localspi string
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    name string
    IPsec tunnel name.
    npuOffload string
    Enable/disable NPU offloading. Valid values: disable, enable.
    objectVpnIpsecManualkeyId string
    an identifier for the resource with format {{name}}.
    remoteGw string
    Peer gateway.
    remotespi string
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    authentication str
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    authkeys Sequence[str]
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    enckeys Sequence[str]
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    encryption str
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    interfaces Sequence[str]
    Name of the physical, aggregate, or VLAN interface.
    local_gw str
    Local gateway.
    localspi str
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    name str
    IPsec tunnel name.
    npu_offload str
    Enable/disable NPU offloading. Valid values: disable, enable.
    object_vpn_ipsec_manualkey_id str
    an identifier for the resource with format {{name}}.
    remote_gw str
    Peer gateway.
    remotespi str
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    authentication String
    Authentication algorithm. Must be the same for both ends of the tunnel. Valid values: null, md5, sha1, sha256, sha384, sha512.
    authkeys List<String>
    Hexadecimal authentication key in 16-digit (8-byte) segments separated by hyphens.
    enckeys List<String>
    Hexadecimal encryption key in 16-digit (8-byte) segments separated by hyphens.
    encryption String
    Encryption algorithm. Must be the same for both ends of the tunnel. Valid values: null, des, 3des, aes128, aes192, aes256, aria128, aria192, aria256, seed.
    interfaces List<String>
    Name of the physical, aggregate, or VLAN interface.
    localGw String
    Local gateway.
    localspi String
    Local SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    name String
    IPsec tunnel name.
    npuOffload String
    Enable/disable NPU offloading. Valid values: disable, enable.
    objectVpnIpsecManualkeyId String
    an identifier for the resource with format {{name}}.
    remoteGw String
    Peer gateway.
    remotespi String
    Remote SPI, a hexadecimal 8-digit (4-byte) tag. Discerns between two traffic streams with different encryption rules.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.

    Import

    ObjectVpn IpsecManualkey can be imported using any of these accepted formats:

    $ export “FORTIMANAGER_IMPORT_TABLE”=“true”

    $ pulumi import fortimanager:index/objectVpnIpsecManualkey:ObjectVpnIpsecManualkey labelname {{name}}

    $ unset “FORTIMANAGER_IMPORT_TABLE”

    -> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortimanager fortinetdev/terraform-provider-fortimanager
    License
    Notes
    This Pulumi package is based on the fortimanager Terraform Provider.
    fortimanager logo
    fortimanager 1.15.0 published on Thursday, Nov 13, 2025 by fortinetdev
    Schema (JSON)
    fortinetdev/terraform-provider-fortimanager
      Meet Neo: Your AI Platform Teammate