Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. Core
  5. getIpsecConnectionTunnel
Oracle Cloud Infrastructure v3.2.0 published on Thursday, Jul 10, 2025 by Pulumi
pulumi/pulumi-oci

oci.Core.getIpsecConnectionTunnel

Explore with Pulumi AI

oci logo
Oracle Cloud Infrastructure v3.2.0 published on Thursday, Jul 10, 2025 by Pulumi
pulumi/pulumi-oci

    This data source provides details about a specific Ip Sec Connection Tunnel resource in Oracle Cloud Infrastructure Core service.

    Gets the specified IPSec connection’s specified tunnel basic information.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testIpSecConnectionTunnel = oci.Core.getIpsecConnectionTunnel({
    ipsecId: testIpsec.id,
    tunnelId: testIpSecConnectionTunnels.ipSecConnectionTunnels[0].id,
});

    import pulumi
import pulumi_oci as oci

test_ip_sec_connection_tunnel = oci.Core.get_ipsec_connection_tunnel(ipsec_id=test_ipsec["id"],
    tunnel_id=test_ip_sec_connection_tunnels["ipSecConnectionTunnels"][0]["id"])

    package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v3/go/oci/core"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := core.GetIpsecConnectionTunnel(ctx, &core.GetIpsecConnectionTunnelArgs{
			IpsecId:  testIpsec.Id,
			TunnelId: testIpSecConnectionTunnels.IpSecConnectionTunnels[0].Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testIpSecConnectionTunnel = Oci.Core.GetIpsecConnectionTunnel.Invoke(new()
    {
        IpsecId = testIpsec.Id,
        TunnelId = testIpSecConnectionTunnels.IpSecConnectionTunnels[0].Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Core.CoreFunctions;
import com.pulumi.oci.Core.inputs.GetIpsecConnectionTunnelArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testIpSecConnectionTunnel = CoreFunctions.getIpsecConnectionTunnel(GetIpsecConnectionTunnelArgs.builder()
            .ipsecId(testIpsec.id())
            .tunnelId(testIpSecConnectionTunnels.ipSecConnectionTunnels()[0].id())
            .build());

    }
}

    variables:
  testIpSecConnectionTunnel:
    fn::invoke:
      function: oci:Core:getIpsecConnectionTunnel
      arguments:
        ipsecId: ${testIpsec.id}
        tunnelId: ${testIpSecConnectionTunnels.ipSecConnectionTunnels[0].id}

    Using getIpsecConnectionTunnel

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getIpsecConnectionTunnel(args: GetIpsecConnectionTunnelArgs, opts?: InvokeOptions): Promise<GetIpsecConnectionTunnelResult>
function getIpsecConnectionTunnelOutput(args: GetIpsecConnectionTunnelOutputArgs, opts?: InvokeOptions): Output<GetIpsecConnectionTunnelResult>
    def get_ipsec_connection_tunnel(ipsec_id: Optional[str] = None,
                                tunnel_id: Optional[str] = None,
                                opts: Optional[InvokeOptions] = None) -> GetIpsecConnectionTunnelResult
def get_ipsec_connection_tunnel_output(ipsec_id: Optional[pulumi.Input[str]] = None,
                                tunnel_id: Optional[pulumi.Input[str]] = None,
                                opts: Optional[InvokeOptions] = None) -> Output[GetIpsecConnectionTunnelResult]
    func GetIpsecConnectionTunnel(ctx *Context, args *GetIpsecConnectionTunnelArgs, opts ...InvokeOption) (*GetIpsecConnectionTunnelResult, error)
func GetIpsecConnectionTunnelOutput(ctx *Context, args *GetIpsecConnectionTunnelOutputArgs, opts ...InvokeOption) GetIpsecConnectionTunnelResultOutput

    > Note: This function is named GetIpsecConnectionTunnel in the Go SDK.

    public static class GetIpsecConnectionTunnel 
{
    public static Task<GetIpsecConnectionTunnelResult> InvokeAsync(GetIpsecConnectionTunnelArgs args, InvokeOptions? opts = null)
    public static Output<GetIpsecConnectionTunnelResult> Invoke(GetIpsecConnectionTunnelInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetIpsecConnectionTunnelResult> getIpsecConnectionTunnel(GetIpsecConnectionTunnelArgs args, InvokeOptions options)
public static Output<GetIpsecConnectionTunnelResult> getIpsecConnectionTunnel(GetIpsecConnectionTunnelArgs args, InvokeOptions options)

    fn::invoke:
  function: oci:Core/getIpsecConnectionTunnel:getIpsecConnectionTunnel
  arguments:
    # arguments dictionary

    The following arguments are supported:

    IpsecId string
    The OCID of the IPSec connection.
    TunnelId string
    The OCID of the IPSec connection's tunnel.
    IpsecId string
    The OCID of the IPSec connection.
    TunnelId string
    The OCID of the IPSec connection's tunnel.
    ipsecId String
    The OCID of the IPSec connection.
    tunnelId String
    The OCID of the IPSec connection's tunnel.
    ipsecId string
    The OCID of the IPSec connection.
    tunnelId string
    The OCID of the IPSec connection's tunnel.
    ipsec_id str
    The OCID of the IPSec connection.
    tunnel_id str
    The OCID of the IPSec connection's tunnel.
    ipsecId String
    The OCID of the IPSec connection.
    tunnelId String
    The OCID of the IPSec connection's tunnel.

    getIpsecConnectionTunnel Result

    The following output properties are available:

    AssociatedVirtualCircuits List<string>
    BgpSessionInfos List<GetIpsecConnectionTunnelBgpSessionInfo>
    Information needed to establish a BGP Session on an interface.
    CompartmentId string
    The OCID of the compartment containing the tunnel.
    CpeIp string
    The IP address of Cpe headend. Example: 129.146.17.50
    DisplayName string
    A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    DpdConfigs List<GetIpsecConnectionTunnelDpdConfig>
    DpdMode string
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    DpdTimeoutInSec int
    DPD timeout in seconds.
    EncryptionDomainConfigs List<GetIpsecConnectionTunnelEncryptionDomainConfig>
    Configuration information used by the encryption domain policy.
    Id string
    The tunnel's Oracle ID (OCID).
    IkeVersion string
    Internet Key Exchange protocol version.
    IpsecId string
    NatTranslationEnabled string
    By default (the AUTO setting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
    OracleCanInitiate string
    Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
    PhaseOneDetails List<GetIpsecConnectionTunnelPhaseOneDetail>
    IPSec tunnel details specific to ISAKMP phase one.
    PhaseTwoDetails List<GetIpsecConnectionTunnelPhaseTwoDetail>
    IPsec tunnel detail information specific to phase two.
    Routing string
    the routing strategy used for this tunnel, either static route or BGP dynamic routing
    SharedSecret string
    State string
    The IPSec connection's tunnel's lifecycle state.
    Status string
    The tunnel's current state.
    TimeCreated string
    The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    TimeStatusUpdated string
    When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    TunnelId string
    VpnIp string
    The IP address of Oracle's VPN headend. Example: 129.146.17.50
    AssociatedVirtualCircuits []string
    BgpSessionInfos []GetIpsecConnectionTunnelBgpSessionInfo
    Information needed to establish a BGP Session on an interface.
    CompartmentId string
    The OCID of the compartment containing the tunnel.
    CpeIp string
    The IP address of Cpe headend. Example: 129.146.17.50
    DisplayName string
    A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    DpdConfigs []GetIpsecConnectionTunnelDpdConfig
    DpdMode string
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    DpdTimeoutInSec int
    DPD timeout in seconds.
    EncryptionDomainConfigs []GetIpsecConnectionTunnelEncryptionDomainConfig
    Configuration information used by the encryption domain policy.
    Id string
    The tunnel's Oracle ID (OCID).
    IkeVersion string
    Internet Key Exchange protocol version.
    IpsecId string
    NatTranslationEnabled string
    By default (the AUTO setting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
    OracleCanInitiate string
    Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
    PhaseOneDetails []GetIpsecConnectionTunnelPhaseOneDetail
    IPSec tunnel details specific to ISAKMP phase one.
    PhaseTwoDetails []GetIpsecConnectionTunnelPhaseTwoDetail
    IPsec tunnel detail information specific to phase two.
    Routing string
    the routing strategy used for this tunnel, either static route or BGP dynamic routing
    SharedSecret string
    State string
    The IPSec connection's tunnel's lifecycle state.
    Status string
    The tunnel's current state.
    TimeCreated string
    The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    TimeStatusUpdated string
    When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    TunnelId string
    VpnIp string
    The IP address of Oracle's VPN headend. Example: 129.146.17.50
    associatedVirtualCircuits List<String>
    bgpSessionInfos List<GetIpsecConnectionTunnelBgpSessionInfo>
    Information needed to establish a BGP Session on an interface.
    compartmentId String
    The OCID of the compartment containing the tunnel.
    cpeIp String
    The IP address of Cpe headend. Example: 129.146.17.50
    displayName String
    A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    dpdConfigs List<GetIpsecConnectionTunnelDpdConfig>
    dpdMode String
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    dpdTimeoutInSec Integer
    DPD timeout in seconds.
    encryptionDomainConfigs List<GetIpsecConnectionTunnelEncryptionDomainConfig>
    Configuration information used by the encryption domain policy.
    id String
    The tunnel's Oracle ID (OCID).
    ikeVersion String
    Internet Key Exchange protocol version.
    ipsecId String
    natTranslationEnabled String
    By default (the AUTO setting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
    oracleCanInitiate String
    Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
    phaseOneDetails List<GetIpsecConnectionTunnelPhaseOneDetail>
    IPSec tunnel details specific to ISAKMP phase one.
    phaseTwoDetails List<GetIpsecConnectionTunnelPhaseTwoDetail>
    IPsec tunnel detail information specific to phase two.
    routing String
    the routing strategy used for this tunnel, either static route or BGP dynamic routing
    sharedSecret String
    state String
    The IPSec connection's tunnel's lifecycle state.
    status String
    The tunnel's current state.
    timeCreated String
    The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    timeStatusUpdated String
    When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    tunnelId String
    vpnIp String
    The IP address of Oracle's VPN headend. Example: 129.146.17.50
    associatedVirtualCircuits string[]
    bgpSessionInfos GetIpsecConnectionTunnelBgpSessionInfo[]
    Information needed to establish a BGP Session on an interface.
    compartmentId string
    The OCID of the compartment containing the tunnel.
    cpeIp string
    The IP address of Cpe headend. Example: 129.146.17.50
    displayName string
    A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    dpdConfigs GetIpsecConnectionTunnelDpdConfig[]
    dpdMode string
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    dpdTimeoutInSec number
    DPD timeout in seconds.
    encryptionDomainConfigs GetIpsecConnectionTunnelEncryptionDomainConfig[]
    Configuration information used by the encryption domain policy.
    id string
    The tunnel's Oracle ID (OCID).
    ikeVersion string
    Internet Key Exchange protocol version.
    ipsecId string
    natTranslationEnabled string
    By default (the AUTO setting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
    oracleCanInitiate string
    Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
    phaseOneDetails GetIpsecConnectionTunnelPhaseOneDetail[]
    IPSec tunnel details specific to ISAKMP phase one.
    phaseTwoDetails GetIpsecConnectionTunnelPhaseTwoDetail[]
    IPsec tunnel detail information specific to phase two.
    routing string
    the routing strategy used for this tunnel, either static route or BGP dynamic routing
    sharedSecret string
    state string
    The IPSec connection's tunnel's lifecycle state.
    status string
    The tunnel's current state.
    timeCreated string
    The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    timeStatusUpdated string
    When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    tunnelId string
    vpnIp string
    The IP address of Oracle's VPN headend. Example: 129.146.17.50
    associated_virtual_circuits Sequence[str]
    bgp_session_infos Sequence[GetIpsecConnectionTunnelBgpSessionInfo]
    Information needed to establish a BGP Session on an interface.
    compartment_id str
    The OCID of the compartment containing the tunnel.
    cpe_ip str
    The IP address of Cpe headend. Example: 129.146.17.50
    display_name str
    A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    dpd_configs Sequence[GetIpsecConnectionTunnelDpdConfig]
    dpd_mode str
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    dpd_timeout_in_sec int
    DPD timeout in seconds.
    encryption_domain_configs Sequence[GetIpsecConnectionTunnelEncryptionDomainConfig]
    Configuration information used by the encryption domain policy.
    id str
    The tunnel's Oracle ID (OCID).
    ike_version str
    Internet Key Exchange protocol version.
    ipsec_id str
    nat_translation_enabled str
    By default (the AUTO setting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
    oracle_can_initiate str
    Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
    phase_one_details Sequence[GetIpsecConnectionTunnelPhaseOneDetail]
    IPSec tunnel details specific to ISAKMP phase one.
    phase_two_details Sequence[GetIpsecConnectionTunnelPhaseTwoDetail]
    IPsec tunnel detail information specific to phase two.
    routing str
    the routing strategy used for this tunnel, either static route or BGP dynamic routing
    shared_secret str
    state str
    The IPSec connection's tunnel's lifecycle state.
    status str
    The tunnel's current state.
    time_created str
    The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    time_status_updated str
    When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    tunnel_id str
    vpn_ip str
    The IP address of Oracle's VPN headend. Example: 129.146.17.50
    associatedVirtualCircuits List<String>
    bgpSessionInfos List<Property Map>
    Information needed to establish a BGP Session on an interface.
    compartmentId String
    The OCID of the compartment containing the tunnel.
    cpeIp String
    The IP address of Cpe headend. Example: 129.146.17.50
    displayName String
    A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
    dpdConfigs List<Property Map>
    dpdMode String
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    dpdTimeoutInSec Number
    DPD timeout in seconds.
    encryptionDomainConfigs List<Property Map>
    Configuration information used by the encryption domain policy.
    id String
    The tunnel's Oracle ID (OCID).
    ikeVersion String
    Internet Key Exchange protocol version.
    ipsecId String
    natTranslationEnabled String
    By default (the AUTO setting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
    oracleCanInitiate String
    Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
    phaseOneDetails List<Property Map>
    IPSec tunnel details specific to ISAKMP phase one.
    phaseTwoDetails List<Property Map>
    IPsec tunnel detail information specific to phase two.
    routing String
    the routing strategy used for this tunnel, either static route or BGP dynamic routing
    sharedSecret String
    state String
    The IPSec connection's tunnel's lifecycle state.
    status String
    The tunnel's current state.
    timeCreated String
    The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    timeStatusUpdated String
    When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    tunnelId String
    vpnIp String
    The IP address of Oracle's VPN headend. Example: 129.146.17.50

    Supporting Types

    GetIpsecConnectionTunnelBgpSessionInfo

    BgpIpv6State string
    The state of the BGP IPv6 session.
    BgpIpv6state string

    Deprecated: The 'bgp_session_info.0.bgp_ipv6state' field has been deprecated. Please use 'bgp_session_info.0.bgp_ipv6_state' instead.

    BgpState string
    the state of the BGP.
    CustomerBgpAsn string
    This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    CustomerInterfaceIp string
    This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
    CustomerInterfaceIpv6 string
    The IPv6 address for the CPE end of the inside tunnel interface.
    OracleBgpAsn string
    This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    OracleInterfaceIp string
    This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
    OracleInterfaceIpv6 string
    The IPv6 address for the Oracle end of the inside tunnel interface.
    BgpIpv6State string
    The state of the BGP IPv6 session.
    BgpIpv6state string

    Deprecated: The 'bgp_session_info.0.bgp_ipv6state' field has been deprecated. Please use 'bgp_session_info.0.bgp_ipv6_state' instead.

    BgpState string
    the state of the BGP.
    CustomerBgpAsn string
    This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    CustomerInterfaceIp string
    This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
    CustomerInterfaceIpv6 string
    The IPv6 address for the CPE end of the inside tunnel interface.
    OracleBgpAsn string
    This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    OracleInterfaceIp string
    This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
    OracleInterfaceIpv6 string
    The IPv6 address for the Oracle end of the inside tunnel interface.
    bgpIpv6State String
    The state of the BGP IPv6 session.
    bgpIpv6state String

    Deprecated: The 'bgp_session_info.0.bgp_ipv6state' field has been deprecated. Please use 'bgp_session_info.0.bgp_ipv6_state' instead.

    bgpState String
    the state of the BGP.
    customerBgpAsn String
    This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    customerInterfaceIp String
    This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
    customerInterfaceIpv6 String
    The IPv6 address for the CPE end of the inside tunnel interface.
    oracleBgpAsn String
    This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    oracleInterfaceIp String
    This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
    oracleInterfaceIpv6 String
    The IPv6 address for the Oracle end of the inside tunnel interface.
    bgpIpv6State string
    The state of the BGP IPv6 session.
    bgpIpv6state string

    Deprecated: The 'bgp_session_info.0.bgp_ipv6state' field has been deprecated. Please use 'bgp_session_info.0.bgp_ipv6_state' instead.

    bgpState string
    the state of the BGP.
    customerBgpAsn string
    This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    customerInterfaceIp string
    This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
    customerInterfaceIpv6 string
    The IPv6 address for the CPE end of the inside tunnel interface.
    oracleBgpAsn string
    This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    oracleInterfaceIp string
    This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
    oracleInterfaceIpv6 string
    The IPv6 address for the Oracle end of the inside tunnel interface.
    bgp_ipv6_state str
    The state of the BGP IPv6 session.
    bgp_ipv6state str

    Deprecated: The 'bgp_session_info.0.bgp_ipv6state' field has been deprecated. Please use 'bgp_session_info.0.bgp_ipv6_state' instead.

    bgp_state str
    the state of the BGP.
    customer_bgp_asn str
    This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    customer_interface_ip str
    This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
    customer_interface_ipv6 str
    The IPv6 address for the CPE end of the inside tunnel interface.
    oracle_bgp_asn str
    This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    oracle_interface_ip str
    This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
    oracle_interface_ipv6 str
    The IPv6 address for the Oracle end of the inside tunnel interface.
    bgpIpv6State String
    The state of the BGP IPv6 session.
    bgpIpv6state String

    Deprecated: The 'bgp_session_info.0.bgp_ipv6state' field has been deprecated. Please use 'bgp_session_info.0.bgp_ipv6_state' instead.

    bgpState String
    the state of the BGP.
    customerBgpAsn String
    This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    customerInterfaceIp String
    This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
    customerInterfaceIpv6 String
    The IPv6 address for the CPE end of the inside tunnel interface.
    oracleBgpAsn String
    This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
    oracleInterfaceIp String
    This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
    oracleInterfaceIpv6 String
    The IPv6 address for the Oracle end of the inside tunnel interface.

    GetIpsecConnectionTunnelDpdConfig

    DpdMode string
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    DpdTimeoutInSec int
    DPD timeout in seconds.
    DpdMode string
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    DpdTimeoutInSec int
    DPD timeout in seconds.
    dpdMode String
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    dpdTimeoutInSec Integer
    DPD timeout in seconds.
    dpdMode string
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    dpdTimeoutInSec number
    DPD timeout in seconds.
    dpd_mode str
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    dpd_timeout_in_sec int
    DPD timeout in seconds.
    dpdMode String
    Dead peer detection (DPD) mode set on the Oracle side of the connection.
    dpdTimeoutInSec Number
    DPD timeout in seconds.

    GetIpsecConnectionTunnelEncryptionDomainConfig

    CpeTrafficSelectors List<string>
    Lists IPv4 or IPv6-enabled subnets in your on-premises network.
    OracleTrafficSelectors List<string>
    Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
    CpeTrafficSelectors []string
    Lists IPv4 or IPv6-enabled subnets in your on-premises network.
    OracleTrafficSelectors []string
    Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
    cpeTrafficSelectors List<String>
    Lists IPv4 or IPv6-enabled subnets in your on-premises network.
    oracleTrafficSelectors List<String>
    Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
    cpeTrafficSelectors string[]
    Lists IPv4 or IPv6-enabled subnets in your on-premises network.
    oracleTrafficSelectors string[]
    Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
    cpe_traffic_selectors Sequence[str]
    Lists IPv4 or IPv6-enabled subnets in your on-premises network.
    oracle_traffic_selectors Sequence[str]
    Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
    cpeTrafficSelectors List<String>
    Lists IPv4 or IPv6-enabled subnets in your on-premises network.
    oracleTrafficSelectors List<String>
    Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.

    GetIpsecConnectionTunnelPhaseOneDetail

    CustomAuthenticationAlgorithm string
    Phase two authentication algorithm proposed during tunnel negotiation.
    CustomDhGroup string
    The proposed custom Diffie-Hellman group.
    CustomEncryptionAlgorithm string
    The proposed custom phase two encryption algorithm.
    IsCustomPhaseOneConfig bool
    Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
    IsIkeEstablished bool
    Indicates whether IKE phase one is established.
    Lifetime int
    The total configured lifetime of the IKE security association.
    NegotiatedAuthenticationAlgorithm string
    The negotiated phase two authentication algorithm.
    NegotiatedDhGroup string
    The negotiated Diffie-Hellman group.
    NegotiatedEncryptionAlgorithm string
    The negotiated encryption algorithm.
    RemainingLifetime string

    Deprecated: The 'phase_one_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_one_details.0.remaining_lifetime_int' instead.

    RemainingLifetimeInt int
    The remaining lifetime before the key is refreshed.
    RemainingLifetimeLastRetrieved string
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    CustomAuthenticationAlgorithm string
    Phase two authentication algorithm proposed during tunnel negotiation.
    CustomDhGroup string
    The proposed custom Diffie-Hellman group.
    CustomEncryptionAlgorithm string
    The proposed custom phase two encryption algorithm.
    IsCustomPhaseOneConfig bool
    Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
    IsIkeEstablished bool
    Indicates whether IKE phase one is established.
    Lifetime int
    The total configured lifetime of the IKE security association.
    NegotiatedAuthenticationAlgorithm string
    The negotiated phase two authentication algorithm.
    NegotiatedDhGroup string
    The negotiated Diffie-Hellman group.
    NegotiatedEncryptionAlgorithm string
    The negotiated encryption algorithm.
    RemainingLifetime string

    Deprecated: The 'phase_one_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_one_details.0.remaining_lifetime_int' instead.

    RemainingLifetimeInt int
    The remaining lifetime before the key is refreshed.
    RemainingLifetimeLastRetrieved string
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    customAuthenticationAlgorithm String
    Phase two authentication algorithm proposed during tunnel negotiation.
    customDhGroup String
    The proposed custom Diffie-Hellman group.
    customEncryptionAlgorithm String
    The proposed custom phase two encryption algorithm.
    isCustomPhaseOneConfig Boolean
    Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
    isIkeEstablished Boolean
    Indicates whether IKE phase one is established.
    lifetime Integer
    The total configured lifetime of the IKE security association.
    negotiatedAuthenticationAlgorithm String
    The negotiated phase two authentication algorithm.
    negotiatedDhGroup String
    The negotiated Diffie-Hellman group.
    negotiatedEncryptionAlgorithm String
    The negotiated encryption algorithm.
    remainingLifetime String

    Deprecated: The 'phase_one_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_one_details.0.remaining_lifetime_int' instead.

    remainingLifetimeInt Integer
    The remaining lifetime before the key is refreshed.
    remainingLifetimeLastRetrieved String
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    customAuthenticationAlgorithm string
    Phase two authentication algorithm proposed during tunnel negotiation.
    customDhGroup string
    The proposed custom Diffie-Hellman group.
    customEncryptionAlgorithm string
    The proposed custom phase two encryption algorithm.
    isCustomPhaseOneConfig boolean
    Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
    isIkeEstablished boolean
    Indicates whether IKE phase one is established.
    lifetime number
    The total configured lifetime of the IKE security association.
    negotiatedAuthenticationAlgorithm string
    The negotiated phase two authentication algorithm.
    negotiatedDhGroup string
    The negotiated Diffie-Hellman group.
    negotiatedEncryptionAlgorithm string
    The negotiated encryption algorithm.
    remainingLifetime string

    Deprecated: The 'phase_one_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_one_details.0.remaining_lifetime_int' instead.

    remainingLifetimeInt number
    The remaining lifetime before the key is refreshed.
    remainingLifetimeLastRetrieved string
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    custom_authentication_algorithm str
    Phase two authentication algorithm proposed during tunnel negotiation.
    custom_dh_group str
    The proposed custom Diffie-Hellman group.
    custom_encryption_algorithm str
    The proposed custom phase two encryption algorithm.
    is_custom_phase_one_config bool
    Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
    is_ike_established bool
    Indicates whether IKE phase one is established.
    lifetime int
    The total configured lifetime of the IKE security association.
    negotiated_authentication_algorithm str
    The negotiated phase two authentication algorithm.
    negotiated_dh_group str
    The negotiated Diffie-Hellman group.
    negotiated_encryption_algorithm str
    The negotiated encryption algorithm.
    remaining_lifetime str

    Deprecated: The 'phase_one_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_one_details.0.remaining_lifetime_int' instead.

    remaining_lifetime_int int
    The remaining lifetime before the key is refreshed.
    remaining_lifetime_last_retrieved str
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    customAuthenticationAlgorithm String
    Phase two authentication algorithm proposed during tunnel negotiation.
    customDhGroup String
    The proposed custom Diffie-Hellman group.
    customEncryptionAlgorithm String
    The proposed custom phase two encryption algorithm.
    isCustomPhaseOneConfig Boolean
    Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
    isIkeEstablished Boolean
    Indicates whether IKE phase one is established.
    lifetime Number
    The total configured lifetime of the IKE security association.
    negotiatedAuthenticationAlgorithm String
    The negotiated phase two authentication algorithm.
    negotiatedDhGroup String
    The negotiated Diffie-Hellman group.
    negotiatedEncryptionAlgorithm String
    The negotiated encryption algorithm.
    remainingLifetime String

    Deprecated: The 'phase_one_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_one_details.0.remaining_lifetime_int' instead.

    remainingLifetimeInt Number
    The remaining lifetime before the key is refreshed.
    remainingLifetimeLastRetrieved String
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

    GetIpsecConnectionTunnelPhaseTwoDetail

    CustomAuthenticationAlgorithm string
    Phase two authentication algorithm proposed during tunnel negotiation.
    CustomEncryptionAlgorithm string
    The proposed custom phase two encryption algorithm.
    DhGroup string
    The proposed Diffie-Hellman group.
    IsCustomPhaseTwoConfig bool
    Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
    IsEspEstablished bool
    Indicates that ESP phase two is established.
    IsPfsEnabled bool
    Indicates that PFS (perfect forward secrecy) is enabled.
    Lifetime int
    The total configured lifetime of the IKE security association.
    NegotiatedAuthenticationAlgorithm string
    The negotiated phase two authentication algorithm.
    NegotiatedDhGroup string
    The negotiated Diffie-Hellman group.
    NegotiatedEncryptionAlgorithm string
    The negotiated encryption algorithm.
    RemainingLifetime string

    Deprecated: The 'phase_two_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_two_details.0.remaining_lifetime_int' instead.

    RemainingLifetimeInt int
    The remaining lifetime before the key is refreshed.
    RemainingLifetimeLastRetrieved string
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    CustomAuthenticationAlgorithm string
    Phase two authentication algorithm proposed during tunnel negotiation.
    CustomEncryptionAlgorithm string
    The proposed custom phase two encryption algorithm.
    DhGroup string
    The proposed Diffie-Hellman group.
    IsCustomPhaseTwoConfig bool
    Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
    IsEspEstablished bool
    Indicates that ESP phase two is established.
    IsPfsEnabled bool
    Indicates that PFS (perfect forward secrecy) is enabled.
    Lifetime int
    The total configured lifetime of the IKE security association.
    NegotiatedAuthenticationAlgorithm string
    The negotiated phase two authentication algorithm.
    NegotiatedDhGroup string
    The negotiated Diffie-Hellman group.
    NegotiatedEncryptionAlgorithm string
    The negotiated encryption algorithm.
    RemainingLifetime string

    Deprecated: The 'phase_two_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_two_details.0.remaining_lifetime_int' instead.

    RemainingLifetimeInt int
    The remaining lifetime before the key is refreshed.
    RemainingLifetimeLastRetrieved string
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    customAuthenticationAlgorithm String
    Phase two authentication algorithm proposed during tunnel negotiation.
    customEncryptionAlgorithm String
    The proposed custom phase two encryption algorithm.
    dhGroup String
    The proposed Diffie-Hellman group.
    isCustomPhaseTwoConfig Boolean
    Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
    isEspEstablished Boolean
    Indicates that ESP phase two is established.
    isPfsEnabled Boolean
    Indicates that PFS (perfect forward secrecy) is enabled.
    lifetime Integer
    The total configured lifetime of the IKE security association.
    negotiatedAuthenticationAlgorithm String
    The negotiated phase two authentication algorithm.
    negotiatedDhGroup String
    The negotiated Diffie-Hellman group.
    negotiatedEncryptionAlgorithm String
    The negotiated encryption algorithm.
    remainingLifetime String

    Deprecated: The 'phase_two_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_two_details.0.remaining_lifetime_int' instead.

    remainingLifetimeInt Integer
    The remaining lifetime before the key is refreshed.
    remainingLifetimeLastRetrieved String
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    customAuthenticationAlgorithm string
    Phase two authentication algorithm proposed during tunnel negotiation.
    customEncryptionAlgorithm string
    The proposed custom phase two encryption algorithm.
    dhGroup string
    The proposed Diffie-Hellman group.
    isCustomPhaseTwoConfig boolean
    Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
    isEspEstablished boolean
    Indicates that ESP phase two is established.
    isPfsEnabled boolean
    Indicates that PFS (perfect forward secrecy) is enabled.
    lifetime number
    The total configured lifetime of the IKE security association.
    negotiatedAuthenticationAlgorithm string
    The negotiated phase two authentication algorithm.
    negotiatedDhGroup string
    The negotiated Diffie-Hellman group.
    negotiatedEncryptionAlgorithm string
    The negotiated encryption algorithm.
    remainingLifetime string

    Deprecated: The 'phase_two_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_two_details.0.remaining_lifetime_int' instead.

    remainingLifetimeInt number
    The remaining lifetime before the key is refreshed.
    remainingLifetimeLastRetrieved string
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    custom_authentication_algorithm str
    Phase two authentication algorithm proposed during tunnel negotiation.
    custom_encryption_algorithm str
    The proposed custom phase two encryption algorithm.
    dh_group str
    The proposed Diffie-Hellman group.
    is_custom_phase_two_config bool
    Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
    is_esp_established bool
    Indicates that ESP phase two is established.
    is_pfs_enabled bool
    Indicates that PFS (perfect forward secrecy) is enabled.
    lifetime int
    The total configured lifetime of the IKE security association.
    negotiated_authentication_algorithm str
    The negotiated phase two authentication algorithm.
    negotiated_dh_group str
    The negotiated Diffie-Hellman group.
    negotiated_encryption_algorithm str
    The negotiated encryption algorithm.
    remaining_lifetime str

    Deprecated: The 'phase_two_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_two_details.0.remaining_lifetime_int' instead.

    remaining_lifetime_int int
    The remaining lifetime before the key is refreshed.
    remaining_lifetime_last_retrieved str
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
    customAuthenticationAlgorithm String
    Phase two authentication algorithm proposed during tunnel negotiation.
    customEncryptionAlgorithm String
    The proposed custom phase two encryption algorithm.
    dhGroup String
    The proposed Diffie-Hellman group.
    isCustomPhaseTwoConfig Boolean
    Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
    isEspEstablished Boolean
    Indicates that ESP phase two is established.
    isPfsEnabled Boolean
    Indicates that PFS (perfect forward secrecy) is enabled.
    lifetime Number
    The total configured lifetime of the IKE security association.
    negotiatedAuthenticationAlgorithm String
    The negotiated phase two authentication algorithm.
    negotiatedDhGroup String
    The negotiated Diffie-Hellman group.
    negotiatedEncryptionAlgorithm String
    The negotiated encryption algorithm.
    remainingLifetime String

    Deprecated: The 'phase_two_details.0.remaining_lifetime' field has been deprecated. Please use 'phase_two_details.0.remaining_lifetime_int' instead.

    remainingLifetimeInt Number
    The remaining lifetime before the key is refreshed.
    remainingLifetimeLastRetrieved String
    The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo
    Oracle Cloud Infrastructure v3.2.0 published on Thursday, Jul 10, 2025 by Pulumi
    pulumi/pulumi-oci