Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Nsxt Provider
  3. API Docs
  4. PolicyIpsecVpnTunnelProfile
nsxt 3.8.1 published on Wednesday, Apr 30, 2025 by vmware
vmware/terraform-provider-nsxt

nsxt.PolicyIpsecVpnTunnelProfile

Explore with Pulumi AI

nsxt logo
nsxt 3.8.1 published on Wednesday, Apr 30, 2025 by vmware
vmware/terraform-provider-nsxt

    Create PolicyIpsecVpnTunnelProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new PolicyIpsecVpnTunnelProfile(name: string, args: PolicyIpsecVpnTunnelProfileArgs, opts?: CustomResourceOptions);
    @overload
def PolicyIpsecVpnTunnelProfile(resource_name: str,
                                args: PolicyIpsecVpnTunnelProfileArgs,
                                opts: Optional[ResourceOptions] = None)

@overload
def PolicyIpsecVpnTunnelProfile(resource_name: str,
                                opts: Optional[ResourceOptions] = None,
                                dh_groups: Optional[Sequence[str]] = None,
                                display_name: Optional[str] = None,
                                encryption_algorithms: Optional[Sequence[str]] = None,
                                description: Optional[str] = None,
                                df_policy: Optional[str] = None,
                                digest_algorithms: Optional[Sequence[str]] = None,
                                enable_perfect_forward_secrecy: Optional[bool] = None,
                                nsx_id: Optional[str] = None,
                                policy_ipsec_vpn_tunnel_profile_id: Optional[str] = None,
                                sa_life_time: Optional[float] = None,
                                tags: Optional[Sequence[PolicyIpsecVpnTunnelProfileTagArgs]] = None)
    func NewPolicyIpsecVpnTunnelProfile(ctx *Context, name string, args PolicyIpsecVpnTunnelProfileArgs, opts ...ResourceOption) (*PolicyIpsecVpnTunnelProfile, error)
    public PolicyIpsecVpnTunnelProfile(string name, PolicyIpsecVpnTunnelProfileArgs args, CustomResourceOptions? opts = null)
    public PolicyIpsecVpnTunnelProfile(String name, PolicyIpsecVpnTunnelProfileArgs args)
public PolicyIpsecVpnTunnelProfile(String name, PolicyIpsecVpnTunnelProfileArgs args, CustomResourceOptions options)

    type: nsxt:PolicyIpsecVpnTunnelProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args PolicyIpsecVpnTunnelProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PolicyIpsecVpnTunnelProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PolicyIpsecVpnTunnelProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PolicyIpsecVpnTunnelProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PolicyIpsecVpnTunnelProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var policyIpsecVpnTunnelProfileResource = new Nsxt.PolicyIpsecVpnTunnelProfile("policyIpsecVpnTunnelProfileResource", new()
{
    DhGroups = new[]
    {
        "string",
    },
    DisplayName = "string",
    EncryptionAlgorithms = new[]
    {
        "string",
    },
    Description = "string",
    DfPolicy = "string",
    DigestAlgorithms = new[]
    {
        "string",
    },
    EnablePerfectForwardSecrecy = false,
    NsxId = "string",
    PolicyIpsecVpnTunnelProfileId = "string",
    SaLifeTime = 0,
    Tags = new[]
    {
        new Nsxt.Inputs.PolicyIpsecVpnTunnelProfileTagArgs
        {
            Scope = "string",
            Tag = "string",
        },
    },
});

    example, err := nsxt.NewPolicyIpsecVpnTunnelProfile(ctx, "policyIpsecVpnTunnelProfileResource", &nsxt.PolicyIpsecVpnTunnelProfileArgs{
	DhGroups: pulumi.StringArray{
		pulumi.String("string"),
	},
	DisplayName: pulumi.String("string"),
	EncryptionAlgorithms: pulumi.StringArray{
		pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	DfPolicy:    pulumi.String("string"),
	DigestAlgorithms: pulumi.StringArray{
		pulumi.String("string"),
	},
	EnablePerfectForwardSecrecy:   pulumi.Bool(false),
	NsxId:                         pulumi.String("string"),
	PolicyIpsecVpnTunnelProfileId: pulumi.String("string"),
	SaLifeTime:                    pulumi.Float64(0),
	Tags: nsxt.PolicyIpsecVpnTunnelProfileTagArray{
		&nsxt.PolicyIpsecVpnTunnelProfileTagArgs{
			Scope: pulumi.String("string"),
			Tag:   pulumi.String("string"),
		},
	},
})

    var policyIpsecVpnTunnelProfileResource = new PolicyIpsecVpnTunnelProfile("policyIpsecVpnTunnelProfileResource", PolicyIpsecVpnTunnelProfileArgs.builder()
    .dhGroups("string")
    .displayName("string")
    .encryptionAlgorithms("string")
    .description("string")
    .dfPolicy("string")
    .digestAlgorithms("string")
    .enablePerfectForwardSecrecy(false)
    .nsxId("string")
    .policyIpsecVpnTunnelProfileId("string")
    .saLifeTime(0)
    .tags(PolicyIpsecVpnTunnelProfileTagArgs.builder()
        .scope("string")
        .tag("string")
        .build())
    .build());

    policy_ipsec_vpn_tunnel_profile_resource = nsxt.PolicyIpsecVpnTunnelProfile("policyIpsecVpnTunnelProfileResource",
    dh_groups=["string"],
    display_name="string",
    encryption_algorithms=["string"],
    description="string",
    df_policy="string",
    digest_algorithms=["string"],
    enable_perfect_forward_secrecy=False,
    nsx_id="string",
    policy_ipsec_vpn_tunnel_profile_id="string",
    sa_life_time=0,
    tags=[{
        "scope": "string",
        "tag": "string",
    }])

    const policyIpsecVpnTunnelProfileResource = new nsxt.PolicyIpsecVpnTunnelProfile("policyIpsecVpnTunnelProfileResource", {
    dhGroups: ["string"],
    displayName: "string",
    encryptionAlgorithms: ["string"],
    description: "string",
    dfPolicy: "string",
    digestAlgorithms: ["string"],
    enablePerfectForwardSecrecy: false,
    nsxId: "string",
    policyIpsecVpnTunnelProfileId: "string",
    saLifeTime: 0,
    tags: [{
        scope: "string",
        tag: "string",
    }],
});

    type: nsxt:PolicyIpsecVpnTunnelProfile
properties:
    description: string
    dfPolicy: string
    dhGroups:
        - string
    digestAlgorithms:
        - string
    displayName: string
    enablePerfectForwardSecrecy: false
    encryptionAlgorithms:
        - string
    nsxId: string
    policyIpsecVpnTunnelProfileId: string
    saLifeTime: 0
    tags:
        - scope: string
          tag: string

    PolicyIpsecVpnTunnelProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The PolicyIpsecVpnTunnelProfile resource accepts the following input properties:

    DhGroups List<string>
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    DisplayName string
    Display name of the resource.
    EncryptionAlgorithms List<string>
    Set of encryption algorithms to be used during IKE negotiation.
    Description string
    Description of the resource.
    DfPolicy string
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    DigestAlgorithms List<string>
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    EnablePerfectForwardSecrecy bool
    Enable perfect forward secrecy. Default is True.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    PolicyIpsecVpnTunnelProfileId string
    ID of the resource.
    SaLifeTime double
    SA lifetime specifies the expiry time of security association. Default is 3600.
    Tags List<PolicyIpsecVpnTunnelProfileTag>
    A list of scope + tag pairs to associate with this resource.
    DhGroups []string
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    DisplayName string
    Display name of the resource.
    EncryptionAlgorithms []string
    Set of encryption algorithms to be used during IKE negotiation.
    Description string
    Description of the resource.
    DfPolicy string
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    DigestAlgorithms []string
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    EnablePerfectForwardSecrecy bool
    Enable perfect forward secrecy. Default is True.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    PolicyIpsecVpnTunnelProfileId string
    ID of the resource.
    SaLifeTime float64
    SA lifetime specifies the expiry time of security association. Default is 3600.
    Tags []PolicyIpsecVpnTunnelProfileTagArgs
    A list of scope + tag pairs to associate with this resource.
    dhGroups List<String>
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    displayName String
    Display name of the resource.
    encryptionAlgorithms List<String>
    Set of encryption algorithms to be used during IKE negotiation.
    description String
    Description of the resource.
    dfPolicy String
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    digestAlgorithms List<String>
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    enablePerfectForwardSecrecy Boolean
    Enable perfect forward secrecy. Default is True.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    policyIpsecVpnTunnelProfileId String
    ID of the resource.
    saLifeTime Double
    SA lifetime specifies the expiry time of security association. Default is 3600.
    tags List<PolicyIpsecVpnTunnelProfileTag>
    A list of scope + tag pairs to associate with this resource.
    dhGroups string[]
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    displayName string
    Display name of the resource.
    encryptionAlgorithms string[]
    Set of encryption algorithms to be used during IKE negotiation.
    description string
    Description of the resource.
    dfPolicy string
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    digestAlgorithms string[]
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    enablePerfectForwardSecrecy boolean
    Enable perfect forward secrecy. Default is True.
    nsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    policyIpsecVpnTunnelProfileId string
    ID of the resource.
    saLifeTime number
    SA lifetime specifies the expiry time of security association. Default is 3600.
    tags PolicyIpsecVpnTunnelProfileTag[]
    A list of scope + tag pairs to associate with this resource.
    dh_groups Sequence[str]
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    display_name str
    Display name of the resource.
    encryption_algorithms Sequence[str]
    Set of encryption algorithms to be used during IKE negotiation.
    description str
    Description of the resource.
    df_policy str
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    digest_algorithms Sequence[str]
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    enable_perfect_forward_secrecy bool
    Enable perfect forward secrecy. Default is True.
    nsx_id str
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    policy_ipsec_vpn_tunnel_profile_id str
    ID of the resource.
    sa_life_time float
    SA lifetime specifies the expiry time of security association. Default is 3600.
    tags Sequence[PolicyIpsecVpnTunnelProfileTagArgs]
    A list of scope + tag pairs to associate with this resource.
    dhGroups List<String>
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    displayName String
    Display name of the resource.
    encryptionAlgorithms List<String>
    Set of encryption algorithms to be used during IKE negotiation.
    description String
    Description of the resource.
    dfPolicy String
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    digestAlgorithms List<String>
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    enablePerfectForwardSecrecy Boolean
    Enable perfect forward secrecy. Default is True.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    policyIpsecVpnTunnelProfileId String
    ID of the resource.
    saLifeTime Number
    SA lifetime specifies the expiry time of security association. Default is 3600.
    tags List<Property Map>
    A list of scope + tag pairs to associate with this resource.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the PolicyIpsecVpnTunnelProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Path string
    The NSX path of the policy resource.
    Revision double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    Id string
    The provider-assigned unique ID for this managed resource.
    Path string
    The NSX path of the policy resource.
    Revision float64
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    id String
    The provider-assigned unique ID for this managed resource.
    path String
    The NSX path of the policy resource.
    revision Double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    id string
    The provider-assigned unique ID for this managed resource.
    path string
    The NSX path of the policy resource.
    revision number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    id str
    The provider-assigned unique ID for this managed resource.
    path str
    The NSX path of the policy resource.
    revision float
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    id String
    The provider-assigned unique ID for this managed resource.
    path String
    The NSX path of the policy resource.
    revision Number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.

    Look up Existing PolicyIpsecVpnTunnelProfile Resource

    Get an existing PolicyIpsecVpnTunnelProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: PolicyIpsecVpnTunnelProfileState, opts?: CustomResourceOptions): PolicyIpsecVpnTunnelProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        description: Optional[str] = None,
        df_policy: Optional[str] = None,
        dh_groups: Optional[Sequence[str]] = None,
        digest_algorithms: Optional[Sequence[str]] = None,
        display_name: Optional[str] = None,
        enable_perfect_forward_secrecy: Optional[bool] = None,
        encryption_algorithms: Optional[Sequence[str]] = None,
        nsx_id: Optional[str] = None,
        path: Optional[str] = None,
        policy_ipsec_vpn_tunnel_profile_id: Optional[str] = None,
        revision: Optional[float] = None,
        sa_life_time: Optional[float] = None,
        tags: Optional[Sequence[PolicyIpsecVpnTunnelProfileTagArgs]] = None) -> PolicyIpsecVpnTunnelProfile
    func GetPolicyIpsecVpnTunnelProfile(ctx *Context, name string, id IDInput, state *PolicyIpsecVpnTunnelProfileState, opts ...ResourceOption) (*PolicyIpsecVpnTunnelProfile, error)
    public static PolicyIpsecVpnTunnelProfile Get(string name, Input<string> id, PolicyIpsecVpnTunnelProfileState? state, CustomResourceOptions? opts = null)
    public static PolicyIpsecVpnTunnelProfile get(String name, Output<String> id, PolicyIpsecVpnTunnelProfileState state, CustomResourceOptions options)
    resources:  _:    type: nsxt:PolicyIpsecVpnTunnelProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Description string
    Description of the resource.
    DfPolicy string
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    DhGroups List<string>
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    DigestAlgorithms List<string>
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    DisplayName string
    Display name of the resource.
    EnablePerfectForwardSecrecy bool
    Enable perfect forward secrecy. Default is True.
    EncryptionAlgorithms List<string>
    Set of encryption algorithms to be used during IKE negotiation.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    Path string
    The NSX path of the policy resource.
    PolicyIpsecVpnTunnelProfileId string
    ID of the resource.
    Revision double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    SaLifeTime double
    SA lifetime specifies the expiry time of security association. Default is 3600.
    Tags List<PolicyIpsecVpnTunnelProfileTag>
    A list of scope + tag pairs to associate with this resource.
    Description string
    Description of the resource.
    DfPolicy string
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    DhGroups []string
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    DigestAlgorithms []string
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    DisplayName string
    Display name of the resource.
    EnablePerfectForwardSecrecy bool
    Enable perfect forward secrecy. Default is True.
    EncryptionAlgorithms []string
    Set of encryption algorithms to be used during IKE negotiation.
    NsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    Path string
    The NSX path of the policy resource.
    PolicyIpsecVpnTunnelProfileId string
    ID of the resource.
    Revision float64
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    SaLifeTime float64
    SA lifetime specifies the expiry time of security association. Default is 3600.
    Tags []PolicyIpsecVpnTunnelProfileTagArgs
    A list of scope + tag pairs to associate with this resource.
    description String
    Description of the resource.
    dfPolicy String
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    dhGroups List<String>
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    digestAlgorithms List<String>
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    displayName String
    Display name of the resource.
    enablePerfectForwardSecrecy Boolean
    Enable perfect forward secrecy. Default is True.
    encryptionAlgorithms List<String>
    Set of encryption algorithms to be used during IKE negotiation.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path String
    The NSX path of the policy resource.
    policyIpsecVpnTunnelProfileId String
    ID of the resource.
    revision Double
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    saLifeTime Double
    SA lifetime specifies the expiry time of security association. Default is 3600.
    tags List<PolicyIpsecVpnTunnelProfileTag>
    A list of scope + tag pairs to associate with this resource.
    description string
    Description of the resource.
    dfPolicy string
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    dhGroups string[]
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    digestAlgorithms string[]
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    displayName string
    Display name of the resource.
    enablePerfectForwardSecrecy boolean
    Enable perfect forward secrecy. Default is True.
    encryptionAlgorithms string[]
    Set of encryption algorithms to be used during IKE negotiation.
    nsxId string
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path string
    The NSX path of the policy resource.
    policyIpsecVpnTunnelProfileId string
    ID of the resource.
    revision number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    saLifeTime number
    SA lifetime specifies the expiry time of security association. Default is 3600.
    tags PolicyIpsecVpnTunnelProfileTag[]
    A list of scope + tag pairs to associate with this resource.
    description str
    Description of the resource.
    df_policy str
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    dh_groups Sequence[str]
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    digest_algorithms Sequence[str]
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    display_name str
    Display name of the resource.
    enable_perfect_forward_secrecy bool
    Enable perfect forward secrecy. Default is True.
    encryption_algorithms Sequence[str]
    Set of encryption algorithms to be used during IKE negotiation.
    nsx_id str
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path str
    The NSX path of the policy resource.
    policy_ipsec_vpn_tunnel_profile_id str
    ID of the resource.
    revision float
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    sa_life_time float
    SA lifetime specifies the expiry time of security association. Default is 3600.
    tags Sequence[PolicyIpsecVpnTunnelProfileTagArgs]
    A list of scope + tag pairs to associate with this resource.
    description String
    Description of the resource.
    dfPolicy String
    Defragmentation policy, one of COPY or CLEAR. COPY copies the defragmentation bit from the inner IP packet into the outer packet. CLEAR ignores the defragmentation bit present in the inner packet. Default is COPY.
    dhGroups List<String>
    Diffie-Hellman group to be used if PFS is enabled. Default is GROUP14.
    digestAlgorithms List<String>
    Set of algorithms to be used for message digest during IKE negotiation. Default is SHA2_256.
    displayName String
    Display name of the resource.
    enablePerfectForwardSecrecy Boolean
    Enable perfect forward secrecy. Default is True.
    encryptionAlgorithms List<String>
    Set of encryption algorithms to be used during IKE negotiation.
    nsxId String
    The NSX ID of this resource. If set, this ID will be used to create the resource.
    path String
    The NSX path of the policy resource.
    policyIpsecVpnTunnelProfileId String
    ID of the resource.
    revision Number
    Indicates current revision number of the object as seen by NSX-T API server. This attribute can be useful for debugging.
    saLifeTime Number
    SA lifetime specifies the expiry time of security association. Default is 3600.
    tags List<Property Map>
    A list of scope + tag pairs to associate with this resource.

    Supporting Types

    PolicyIpsecVpnTunnelProfileTag, PolicyIpsecVpnTunnelProfileTagArgs

    Scope string
    Tag string
    A list of scope + tag pairs to associate with this resource.
    Scope string
    Tag string
    A list of scope + tag pairs to associate with this resource.
    scope String
    tag String
    A list of scope + tag pairs to associate with this resource.
    scope string
    tag string
    A list of scope + tag pairs to associate with this resource.
    scope str
    tag str
    A list of scope + tag pairs to associate with this resource.
    scope String
    tag String
    A list of scope + tag pairs to associate with this resource.

    Package Details

    Repository
    nsxt vmware/terraform-provider-nsxt
    License
    Notes
    This Pulumi package is based on the nsxt Terraform Provider.
    nsxt logo
    nsxt 3.8.1 published on Wednesday, Apr 30, 2025 by vmware
    vmware/terraform-provider-nsxt