Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Ibm Provider
  4. API Docs
  5. IsIkePolicy
Viewing docs for ibm 2.3.0-beta0
published on Monday, Jun 15, 2026 by ibm-cloud
Schema (JSON)
ibm-cloud/terraform-provider-ibm

ibm.IsIkePolicy

Viewing docs for ibm 2.3.0-beta0
published on Monday, Jun 15, 2026 by ibm-cloud
Schema (JSON)
ibm-cloud/terraform-provider-ibm

    Create, update, or cancel an Internet Key Exchange (IKE) policy. IKE is an IPSec (Internet Protocol Security) standard protocol that is used to ensure secure communication over the VPC VPN service. For more information, see Using VPC with your VPC.

    Note: VPC infrastructure services are a regional specific based endpoint, by default targets to us-south. Please make sure to target right region in the provider block as shown in the provider.tf file, if VPC service is created in region other than us-south.

    provider.tf

    import * as pulumi from "@pulumi/pulumi";

    import pulumi

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;

return await Deployment.RunAsync(() => 
{
});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
    }
}

    {}

    Example coming soon!

    Example Usage

    Multiple algorithms

    import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";

const exampleMulti = new ibm.IsIkePolicy("example_multi", {
    name: "example-ike-policy-multi",
    authenticationAlgorithms: [
        "sha384",
        "sha512",
    ],
    encryptionAlgorithms: [
        "aes256",
        "aes192",
    ],
    dhGroups: [
        15,
        14,
    ],
    ikeVersion: 2,
    keyLifetime: 1800,
});

    import pulumi
import pulumi_ibm as ibm

example_multi = ibm.IsIkePolicy("example_multi",
    name="example-ike-policy-multi",
    authentication_algorithms=[
        "sha384",
        "sha512",
    ],
    encryption_algorithms=[
        "aes256",
        "aes192",
    ],
    dh_groups=[
        15,
        14,
    ],
    ike_version=2,
    key_lifetime=1800)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/v2/ibm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ibm.NewIsIkePolicy(ctx, "example_multi", &ibm.IsIkePolicyArgs{
			Name: pulumi.String("example-ike-policy-multi"),
			AuthenticationAlgorithms: pulumi.StringArray{
				pulumi.String("sha384"),
				pulumi.String("sha512"),
			},
			EncryptionAlgorithms: pulumi.StringArray{
				pulumi.String("aes256"),
				pulumi.String("aes192"),
			},
			DhGroups: pulumi.Float64Array{
				pulumi.Float64(15),
				pulumi.Float64(14),
			},
			IkeVersion:  pulumi.Float64(2),
			KeyLifetime: pulumi.Float64(1800),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;

return await Deployment.RunAsync(() => 
{
    var exampleMulti = new Ibm.IsIkePolicy("example_multi", new()
    {
        Name = "example-ike-policy-multi",
        AuthenticationAlgorithms = new[]
        {
            "sha384",
            "sha512",
        },
        EncryptionAlgorithms = new[]
        {
            "aes256",
            "aes192",
        },
        DhGroups = new[]
        {
            15,
            14,
        },
        IkeVersion = 2,
        KeyLifetime = 1800,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.IsIkePolicy;
import com.pulumi.ibm.IsIkePolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleMulti = new IsIkePolicy("exampleMulti", IsIkePolicyArgs.builder()
            .name("example-ike-policy-multi")
            .authenticationAlgorithms(            
                "sha384",
                "sha512")
            .encryptionAlgorithms(            
                "aes256",
                "aes192")
            .dhGroups(            
                15.0,
                14.0)
            .ikeVersion(2.0)
            .keyLifetime(1800.0)
            .build());

    }
}

    resources:
  exampleMulti:
    type: ibm:IsIkePolicy
    name: example_multi
    properties:
      name: example-ike-policy-multi
      authenticationAlgorithms:
        - sha384
        - sha512
      encryptionAlgorithms:
        - aes256
        - aes192
      dhGroups:
        - 15
        - 14
      ikeVersion: 2
      keyLifetime: 1800

    Example coming soon!

    Deprecated single-algorithm

    import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";

const example = new ibm.IsIkePolicy("example", {
    name: "example-ike-policy",
    authenticationAlgorithm: "sha256",
    encryptionAlgorithm: "aes128",
    dhGroup: 14,
    ikeVersion: 1,
});

    import pulumi
import pulumi_ibm as ibm

example = ibm.IsIkePolicy("example",
    name="example-ike-policy",
    authentication_algorithm="sha256",
    encryption_algorithm="aes128",
    dh_group=14,
    ike_version=1)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/v2/ibm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ibm.NewIsIkePolicy(ctx, "example", &ibm.IsIkePolicyArgs{
			Name:                    pulumi.String("example-ike-policy"),
			AuthenticationAlgorithm: pulumi.String("sha256"),
			EncryptionAlgorithm:     pulumi.String("aes128"),
			DhGroup:                 pulumi.Float64(14),
			IkeVersion:              pulumi.Float64(1),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;

return await Deployment.RunAsync(() => 
{
    var example = new Ibm.IsIkePolicy("example", new()
    {
        Name = "example-ike-policy",
        AuthenticationAlgorithm = "sha256",
        EncryptionAlgorithm = "aes128",
        DhGroup = 14,
        IkeVersion = 1,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.IsIkePolicy;
import com.pulumi.ibm.IsIkePolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new IsIkePolicy("example", IsIkePolicyArgs.builder()
            .name("example-ike-policy")
            .authenticationAlgorithm("sha256")
            .encryptionAlgorithm("aes128")
            .dhGroup(14.0)
            .ikeVersion(1.0)
            .build());

    }
}

    resources:
  example:
    type: ibm:IsIkePolicy
    properties:
      name: example-ike-policy
      authenticationAlgorithm: sha256
      encryptionAlgorithm: aes128
      dhGroup: 14
      ikeVersion: 1

    Example coming soon!

    Create IsIkePolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IsIkePolicy(name: string, args?: IsIkePolicyArgs, opts?: CustomResourceOptions);
    @overload
def IsIkePolicy(resource_name: str,
                args: Optional[IsIkePolicyArgs] = None,
                opts: Optional[ResourceOptions] = None)

@overload
def IsIkePolicy(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                authentication_algorithm: Optional[str] = None,
                authentication_algorithms: Optional[Sequence[str]] = None,
                dh_group: Optional[float] = None,
                dh_groups: Optional[Sequence[float]] = None,
                encryption_algorithm: Optional[str] = None,
                encryption_algorithms: Optional[Sequence[str]] = None,
                ike_version: Optional[float] = None,
                is_ike_policy_id: Optional[str] = None,
                key_lifetime: Optional[float] = None,
                name: Optional[str] = None,
                resource_group: Optional[str] = None)
    func NewIsIkePolicy(ctx *Context, name string, args *IsIkePolicyArgs, opts ...ResourceOption) (*IsIkePolicy, error)
    public IsIkePolicy(string name, IsIkePolicyArgs? args = null, CustomResourceOptions? opts = null)
    public IsIkePolicy(String name, IsIkePolicyArgs args)
public IsIkePolicy(String name, IsIkePolicyArgs args, CustomResourceOptions options)

    type: ibm:IsIkePolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "ibm_isikepolicy" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args IsIkePolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IsIkePolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IsIkePolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IsIkePolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IsIkePolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var isIkePolicyResource = new Ibm.IsIkePolicy("isIkePolicyResource", new()
{
    AuthenticationAlgorithms = new[]
    {
        "string",
    },
    DhGroups = new[]
    {
        0,
    },
    EncryptionAlgorithms = new[]
    {
        "string",
    },
    IkeVersion = 0,
    IsIkePolicyId = "string",
    KeyLifetime = 0,
    Name = "string",
    ResourceGroup = "string",
});

    example, err := ibm.NewIsIkePolicy(ctx, "isIkePolicyResource", &ibm.IsIkePolicyArgs{
	AuthenticationAlgorithms: pulumi.StringArray{
		pulumi.String("string"),
	},
	DhGroups: pulumi.Float64Array{
		pulumi.Float64(0),
	},
	EncryptionAlgorithms: pulumi.StringArray{
		pulumi.String("string"),
	},
	IkeVersion:    pulumi.Float64(0),
	IsIkePolicyId: pulumi.String("string"),
	KeyLifetime:   pulumi.Float64(0),
	Name:          pulumi.String("string"),
	ResourceGroup: pulumi.String("string"),
})

    resource "ibm_isikepolicy" "isIkePolicyResource" {
  authentication_algorithms = ["string"]
  dh_groups                 = [0]
  encryption_algorithms     = ["string"]
  ike_version               = 0
  is_ike_policy_id          = "string"
  key_lifetime              = 0
  name                      = "string"
  resource_group            = "string"
}

    var isIkePolicyResource = new IsIkePolicy("isIkePolicyResource", IsIkePolicyArgs.builder()
    .authenticationAlgorithms("string")
    .dhGroups(0.0)
    .encryptionAlgorithms("string")
    .ikeVersion(0.0)
    .isIkePolicyId("string")
    .keyLifetime(0.0)
    .name("string")
    .resourceGroup("string")
    .build());

    is_ike_policy_resource = ibm.IsIkePolicy("isIkePolicyResource",
    authentication_algorithms=["string"],
    dh_groups=[float(0)],
    encryption_algorithms=["string"],
    ike_version=float(0),
    is_ike_policy_id="string",
    key_lifetime=float(0),
    name="string",
    resource_group="string")

    const isIkePolicyResource = new ibm.IsIkePolicy("isIkePolicyResource", {
    authenticationAlgorithms: ["string"],
    dhGroups: [0],
    encryptionAlgorithms: ["string"],
    ikeVersion: 0,
    isIkePolicyId: "string",
    keyLifetime: 0,
    name: "string",
    resourceGroup: "string",
});

    type: ibm:IsIkePolicy
properties:
    authenticationAlgorithms:
        - string
    dhGroups:
        - 0
    encryptionAlgorithms:
        - string
    ikeVersion: 0
    isIkePolicyId: string
    keyLifetime: 0
    name: string
    resourceGroup: string

    IsIkePolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IsIkePolicy resource accepts the following input properties:

    AuthenticationAlgorithm string
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    AuthenticationAlgorithms List<string>
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    DhGroup double
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    DhGroups List<double>
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    EncryptionAlgorithm string
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    EncryptionAlgorithms List<string>
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    IkeVersion double
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    IsIkePolicyId string
    (String) The unique identifier of a VPN connection.
    KeyLifetime double
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    Name string
    Enter a name for your IKE policy.
    ResourceGroup string
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    AuthenticationAlgorithm string
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    AuthenticationAlgorithms []string
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    DhGroup float64
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    DhGroups []float64
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    EncryptionAlgorithm string
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    EncryptionAlgorithms []string
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    IkeVersion float64
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    IsIkePolicyId string
    (String) The unique identifier of a VPN connection.
    KeyLifetime float64
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    Name string
    Enter a name for your IKE policy.
    ResourceGroup string
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    authentication_algorithm string
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authentication_algorithms list(string)
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dh_group number
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dh_groups list(number)
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryption_algorithm string
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryption_algorithms list(string)
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    ike_version number
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    is_ike_policy_id string
    (String) The unique identifier of a VPN connection.
    key_lifetime number
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name string
    Enter a name for your IKE policy.
    resource_group string
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    authenticationAlgorithm String
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authenticationAlgorithms List<String>
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dhGroup Double
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dhGroups List<Double>
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryptionAlgorithm String
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryptionAlgorithms List<String>
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    ikeVersion Double
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    isIkePolicyId String
    (String) The unique identifier of a VPN connection.
    keyLifetime Double
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name String
    Enter a name for your IKE policy.
    resourceGroup String
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    authenticationAlgorithm string
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authenticationAlgorithms string[]
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dhGroup number
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dhGroups number[]
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryptionAlgorithm string
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryptionAlgorithms string[]
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    ikeVersion number
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    isIkePolicyId string
    (String) The unique identifier of a VPN connection.
    keyLifetime number
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name string
    Enter a name for your IKE policy.
    resourceGroup string
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    authentication_algorithm str
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authentication_algorithms Sequence[str]
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dh_group float
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dh_groups Sequence[float]
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryption_algorithm str
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryption_algorithms Sequence[str]
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    ike_version float
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    is_ike_policy_id str
    (String) The unique identifier of a VPN connection.
    key_lifetime float
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name str
    Enter a name for your IKE policy.
    resource_group str
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    authenticationAlgorithm String
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authenticationAlgorithms List<String>
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dhGroup Number
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dhGroups List<Number>
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryptionAlgorithm String
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryptionAlgorithms List<String>
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    ikeVersion Number
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    isIkePolicyId String
    (String) The unique identifier of a VPN connection.
    keyLifetime Number
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name String
    Enter a name for your IKE policy.
    resourceGroup String
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IsIkePolicy resource produces the following output properties:

    Href string
    (String) The VPN connection's canonical URL.
    Id string
    The provider-assigned unique ID for this managed resource.
    NegotiationMode string
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    ResourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    ResourceGroupName string
    The resource group name in which resource is provisioned
    ResourceName string
    The name of the resource
    VpnConnections List<IsIkePolicyVpnConnection>
    List - A collection of VPN connections that use the IKE policy.
    Href string
    (String) The VPN connection's canonical URL.
    Id string
    The provider-assigned unique ID for this managed resource.
    NegotiationMode string
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    ResourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    ResourceGroupName string
    The resource group name in which resource is provisioned
    ResourceName string
    The name of the resource
    VpnConnections []IsIkePolicyVpnConnection
    List - A collection of VPN connections that use the IKE policy.
    href string
    (String) The VPN connection's canonical URL.
    id string
    The provider-assigned unique ID for this managed resource.
    negotiation_mode string
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resource_controller_url string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resource_group_name string
    The resource group name in which resource is provisioned
    resource_name string
    The name of the resource
    vpn_connections list(object)
    List - A collection of VPN connections that use the IKE policy.
    href String
    (String) The VPN connection's canonical URL.
    id String
    The provider-assigned unique ID for this managed resource.
    negotiationMode String
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resourceControllerUrl String
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resourceGroupName String
    The resource group name in which resource is provisioned
    resourceName String
    The name of the resource
    vpnConnections List<IsIkePolicyVpnConnection>
    List - A collection of VPN connections that use the IKE policy.
    href string
    (String) The VPN connection's canonical URL.
    id string
    The provider-assigned unique ID for this managed resource.
    negotiationMode string
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resourceGroupName string
    The resource group name in which resource is provisioned
    resourceName string
    The name of the resource
    vpnConnections IsIkePolicyVpnConnection[]
    List - A collection of VPN connections that use the IKE policy.
    href str
    (String) The VPN connection's canonical URL.
    id str
    The provider-assigned unique ID for this managed resource.
    negotiation_mode str
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resource_controller_url str
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resource_group_name str
    The resource group name in which resource is provisioned
    resource_name str
    The name of the resource
    vpn_connections Sequence[IsIkePolicyVpnConnection]
    List - A collection of VPN connections that use the IKE policy.
    href String
    (String) The VPN connection's canonical URL.
    id String
    The provider-assigned unique ID for this managed resource.
    negotiationMode String
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resourceControllerUrl String
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resourceGroupName String
    The resource group name in which resource is provisioned
    resourceName String
    The name of the resource
    vpnConnections List<Property Map>
    List - A collection of VPN connections that use the IKE policy.

    Look up Existing IsIkePolicy Resource

    Get an existing IsIkePolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IsIkePolicyState, opts?: CustomResourceOptions): IsIkePolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        authentication_algorithm: Optional[str] = None,
        authentication_algorithms: Optional[Sequence[str]] = None,
        dh_group: Optional[float] = None,
        dh_groups: Optional[Sequence[float]] = None,
        encryption_algorithm: Optional[str] = None,
        encryption_algorithms: Optional[Sequence[str]] = None,
        href: Optional[str] = None,
        ike_version: Optional[float] = None,
        is_ike_policy_id: Optional[str] = None,
        key_lifetime: Optional[float] = None,
        name: Optional[str] = None,
        negotiation_mode: Optional[str] = None,
        resource_controller_url: Optional[str] = None,
        resource_group: Optional[str] = None,
        resource_group_name: Optional[str] = None,
        resource_name: Optional[str] = None,
        vpn_connections: Optional[Sequence[IsIkePolicyVpnConnectionArgs]] = None) -> IsIkePolicy
    func GetIsIkePolicy(ctx *Context, name string, id IDInput, state *IsIkePolicyState, opts ...ResourceOption) (*IsIkePolicy, error)
    public static IsIkePolicy Get(string name, Input<string> id, IsIkePolicyState? state, CustomResourceOptions? opts = null)
    public static IsIkePolicy get(String name, Output<String> id, IsIkePolicyState state, CustomResourceOptions options)
    resources:  _:    type: ibm:IsIkePolicy    get:      id: ${id}
    import {
  to = ibm_isikepolicy.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AuthenticationAlgorithm string
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    AuthenticationAlgorithms List<string>
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    DhGroup double
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    DhGroups List<double>
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    EncryptionAlgorithm string
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    EncryptionAlgorithms List<string>
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    Href string
    (String) The VPN connection's canonical URL.
    IkeVersion double
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    IsIkePolicyId string
    (String) The unique identifier of a VPN connection.
    KeyLifetime double
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    Name string
    Enter a name for your IKE policy.
    NegotiationMode string
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    ResourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    ResourceGroup string
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    ResourceGroupName string
    The resource group name in which resource is provisioned
    ResourceName string
    The name of the resource
    VpnConnections List<IsIkePolicyVpnConnection>
    List - A collection of VPN connections that use the IKE policy.
    AuthenticationAlgorithm string
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    AuthenticationAlgorithms []string
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    DhGroup float64
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    DhGroups []float64
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    EncryptionAlgorithm string
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    EncryptionAlgorithms []string
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    Href string
    (String) The VPN connection's canonical URL.
    IkeVersion float64
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    IsIkePolicyId string
    (String) The unique identifier of a VPN connection.
    KeyLifetime float64
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    Name string
    Enter a name for your IKE policy.
    NegotiationMode string
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    ResourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    ResourceGroup string
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    ResourceGroupName string
    The resource group name in which resource is provisioned
    ResourceName string
    The name of the resource
    VpnConnections []IsIkePolicyVpnConnectionArgs
    List - A collection of VPN connections that use the IKE policy.
    authentication_algorithm string
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authentication_algorithms list(string)
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dh_group number
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dh_groups list(number)
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryption_algorithm string
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryption_algorithms list(string)
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    href string
    (String) The VPN connection's canonical URL.
    ike_version number
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    is_ike_policy_id string
    (String) The unique identifier of a VPN connection.
    key_lifetime number
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name string
    Enter a name for your IKE policy.
    negotiation_mode string
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resource_controller_url string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resource_group string
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    resource_group_name string
    The resource group name in which resource is provisioned
    resource_name string
    The name of the resource
    vpn_connections list(object)
    List - A collection of VPN connections that use the IKE policy.
    authenticationAlgorithm String
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authenticationAlgorithms List<String>
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dhGroup Double
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dhGroups List<Double>
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryptionAlgorithm String
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryptionAlgorithms List<String>
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    href String
    (String) The VPN connection's canonical URL.
    ikeVersion Double
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    isIkePolicyId String
    (String) The unique identifier of a VPN connection.
    keyLifetime Double
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name String
    Enter a name for your IKE policy.
    negotiationMode String
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resourceControllerUrl String
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resourceGroup String
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    resourceGroupName String
    The resource group name in which resource is provisioned
    resourceName String
    The name of the resource
    vpnConnections List<IsIkePolicyVpnConnection>
    List - A collection of VPN connections that use the IKE policy.
    authenticationAlgorithm string
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authenticationAlgorithms string[]
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dhGroup number
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dhGroups number[]
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryptionAlgorithm string
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryptionAlgorithms string[]
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    href string
    (String) The VPN connection's canonical URL.
    ikeVersion number
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    isIkePolicyId string
    (String) The unique identifier of a VPN connection.
    keyLifetime number
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name string
    Enter a name for your IKE policy.
    negotiationMode string
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resourceControllerUrl string
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resourceGroup string
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    resourceGroupName string
    The resource group name in which resource is provisioned
    resourceName string
    The name of the resource
    vpnConnections IsIkePolicyVpnConnection[]
    List - A collection of VPN connections that use the IKE policy.
    authentication_algorithm str
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authentication_algorithms Sequence[str]
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dh_group float
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dh_groups Sequence[float]
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryption_algorithm str
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryption_algorithms Sequence[str]
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    href str
    (String) The VPN connection's canonical URL.
    ike_version float
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    is_ike_policy_id str
    (String) The unique identifier of a VPN connection.
    key_lifetime float
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name str
    Enter a name for your IKE policy.
    negotiation_mode str
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resource_controller_url str
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resource_group str
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    resource_group_name str
    The resource group name in which resource is provisioned
    resource_name str
    The name of the resource
    vpn_connections Sequence[IsIkePolicyVpnConnectionArgs]
    List - A collection of VPN connections that use the IKE policy.
    authenticationAlgorithm String
    Deprecated. Use authentication_algorithms instead. The authentication algorithm. Available options are sha256, sha512, sha384. Existing configurations using this field continue to work without any changes. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    Deprecated: Deprecated

    authenticationAlgorithms List<String>
    The authentication algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of authentication_algorithm or authentication_algorithms must be specified.

    • Constraints: Allowable list items are: sha256, sha384, sha512. The maximum length is 3 items. The minimum length is 1 item.
    dhGroup Number
    Deprecated. Use dh_groups instead. The Diffie-Hellman group. Available enumeration type are 14, 19, 15, 16 ,17 ,18 ,20 ,21 ,22 ,23 ,24 ,31. Exactly one of dh_group or dh_groups must be specified.

    Deprecated: Deprecated

    dhGroups List<Number>
    The Diffie-Hellman groups to use for IKE negotiation. The order of the Diffie-Hellman groups in this array indicates their priority for negotiation, with each Diffie-Hellman group having priority over the one after it. Exactly one of dh_group or dh_groups must be specified.

    • Constraints: Allowable list items are: 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 31. The maximum length is 12 items. The minimum length is 1 item.
    encryptionAlgorithm String
    Deprecated. Use encryption_algorithms instead. The encryption algorithm. Available options are: aes128, aes192, aes256. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    Deprecated: Deprecated

    encryptionAlgorithms List<String>
    The encryption algorithms to use for IKE negotiation. The order of the algorithms in this array indicates their priority for negotiation, with each algorithm having priority over the one after it. Exactly one of encryption_algorithm or encryption_algorithms must be specified.

    • Constraints: Allowable list items are: aes128, aes192, aes256. The maximum length is 3 items. The minimum length is 1 item.
    href String
    (String) The VPN connection's canonical URL.
    ikeVersion Number
    Enter the IKE protocol version that you want to use. Available options are 1, or 2.
    isIkePolicyId String
    (String) The unique identifier of a VPN connection.
    keyLifetime Number
    The key lifetime in seconds. Maximum: 86400, Minimum: 1800. Default is 28800.
    name String
    Enter a name for your IKE policy.
    negotiationMode String
    (String) The IKE negotiation mode that was set for your IKE policy. Only main is supported.
    resourceControllerUrl String
    The URL of the IBM Cloud dashboard that can be used to explore and view details about this instance
    resourceGroup String
    Enter the ID of the resource group where you want to create the IKE policy. To list available resource groups, run ibmcloud resource groups. If you do not specify a resource group, the IKE policy is created in the default resource group.
    resourceGroupName String
    The resource group name in which resource is provisioned
    resourceName String
    The name of the resource
    vpnConnections List<Property Map>
    List - A collection of VPN connections that use the IKE policy.

    Supporting Types

    IsIkePolicyVpnConnection, IsIkePolicyVpnConnectionArgs

    Href string
    (String) The VPN connection's canonical URL.
    Id string
    (String) The unique identifier of a VPN connection.
    Name string
    Enter a name for your IKE policy.
    Href string
    (String) The VPN connection's canonical URL.
    Id string
    (String) The unique identifier of a VPN connection.
    Name string
    Enter a name for your IKE policy.
    href string
    (String) The VPN connection's canonical URL.
    id string
    (String) The unique identifier of a VPN connection.
    name string
    Enter a name for your IKE policy.
    href String
    (String) The VPN connection's canonical URL.
    id String
    (String) The unique identifier of a VPN connection.
    name String
    Enter a name for your IKE policy.
    href string
    (String) The VPN connection's canonical URL.
    id string
    (String) The unique identifier of a VPN connection.
    name string
    Enter a name for your IKE policy.
    href str
    (String) The VPN connection's canonical URL.
    id str
    (String) The unique identifier of a VPN connection.
    name str
    Enter a name for your IKE policy.
    href String
    (String) The VPN connection's canonical URL.
    id String
    (String) The unique identifier of a VPN connection.
    name String
    Enter a name for your IKE policy.

    Import

    Using pulumi import. For example:

    $ pulumi import ibm:index/isIkePolicy:IsIkePolicy example <ike_policy_id>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ibm ibm-cloud/terraform-provider-ibm
    License
    Notes
    This Pulumi package is based on the ibm Terraform Provider.
    Viewing docs for ibm 2.3.0-beta0
    published on Monday, Jun 15, 2026 by ibm-cloud
    Schema (JSON)
    ibm-cloud/terraform-provider-ibm

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial