oci.Core.IpsecConnectionTunnelManagement

By default (the AUTO setting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

PhaseOneDetails List<IpsecConnectionTunnelManagementPhaseOneDetail>

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

PhaseTwoDetails List<IpsecConnectionTunnelManagementPhaseTwoDetail>

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

Routing string

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

SharedSecret string

The shared secret (pre-shared key) to use for the IPSec tunnel. If you don't provide a value, Oracle generates a value for you. You can specify your own shared secret later if you like with UpdateIPSecConnectionTunnelSharedSecret. Example: EXAMPLEToUis6j1c.p8G.dVQxcmdfMO0yXMLi.lZTbYCMDGu4V8o

IpsecId string

The OCID of the IPSec connection.

TunnelId string

The OCID of the IPSec connection's tunnel.

BgpSessionInfos []IpsecConnectionTunnelManagementBgpSessionInfoArgs

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

DisplayName string

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

DpdConfigs []IpsecConnectionTunnelManagementDpdConfigArgs

EncryptionDomainConfig IpsecConnectionTunnelManagementEncryptionDomainConfigArgs

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

IkeVersion string

Internet Key Exchange protocol version.

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

PhaseOneDetails []IpsecConnectionTunnelManagementPhaseOneDetailArgs

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

PhaseTwoDetails []IpsecConnectionTunnelManagementPhaseTwoDetailArgs

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

Routing string

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

SharedSecret string

ipsecId String

The OCID of the IPSec connection.

tunnelId String

The OCID of the IPSec connection's tunnel.

bgpSessionInfos List<IpsecConnectionTunnelManagementBgpSessionInfo>

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

displayName String

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

dpdConfigs List<IpsecConnectionTunnelManagementDpdConfig>

encryptionDomainConfig IpsecConnectionTunnelManagementEncryptionDomainConfig

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

ikeVersion String

Internet Key Exchange protocol version.

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

phaseOneDetails List<IpsecConnectionTunnelManagementPhaseOneDetail>

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

phaseTwoDetails List<IpsecConnectionTunnelManagementPhaseTwoDetail>

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

routing String

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

sharedSecret String

ipsecId string

The OCID of the IPSec connection.

tunnelId string

The OCID of the IPSec connection's tunnel.

bgpSessionInfos IpsecConnectionTunnelManagementBgpSessionInfo[]

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

displayName string

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

dpdConfigs IpsecConnectionTunnelManagementDpdConfig[]

encryptionDomainConfig IpsecConnectionTunnelManagementEncryptionDomainConfig

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

ikeVersion string

Internet Key Exchange protocol version.

natTranslationEnabled string

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

oracleCanInitiate string

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

phaseOneDetails IpsecConnectionTunnelManagementPhaseOneDetail[]

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

phaseTwoDetails IpsecConnectionTunnelManagementPhaseTwoDetail[]

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

routing string

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

sharedSecret string

ipsec_id str

The OCID of the IPSec connection.

tunnel_id str

The OCID of the IPSec connection's tunnel.

bgp_session_infos Sequence[core.IpsecConnectionTunnelManagementBgpSessionInfoArgs]

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

display_name str

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

dpd_configs Sequence[core.IpsecConnectionTunnelManagementDpdConfigArgs]

encryption_domain_config core.IpsecConnectionTunnelManagementEncryptionDomainConfigArgs

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

ike_version str

Internet Key Exchange protocol version.

nat_translation_enabled str

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

oracle_can_initiate str

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

phase_one_details Sequence[core.IpsecConnectionTunnelManagementPhaseOneDetailArgs]

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

phase_two_details Sequence[core.IpsecConnectionTunnelManagementPhaseTwoDetailArgs]

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

routing str

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

shared_secret str

ipsecId String

The OCID of the IPSec connection.

tunnelId String

The OCID of the IPSec connection's tunnel.

bgpSessionInfos List<Property Map>

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

displayName String

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

dpdConfigs List<Property Map>

encryptionDomainConfig Property Map

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

ikeVersion String

Internet Key Exchange protocol version.

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

phaseOneDetails List<Property Map>

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

phaseTwoDetails List<Property Map>

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

routing String

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

sharedSecret String

Outputs

All input properties are implicitly available as output properties. Additionally, the IpsecConnectionTunnelManagement resource produces the following output properties:

AssociatedVirtualCircuits List<string>: The list of virtual circuit OCIDs over which your network can reach this tunnel.
CompartmentId string: The OCID of the compartment containing the tunnel.
CpeIp string: The IP address of the CPE device's VPN headend. Example: 203.0.113.22
DpdMode string: This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY
DpdTimeoutInSec int: DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.
Id string: The provider-assigned unique ID for this managed resource.
State string: The IPSec connection's tunnel's lifecycle state.
Status string: The tunnel's current state.
TimeCreated string: The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
TimeStatusUpdated string: When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
VpnIp string: The IP address of Oracle's VPN headend. Example: 129.146.17.50

AssociatedVirtualCircuits []string: The list of virtual circuit OCIDs over which your network can reach this tunnel.
CompartmentId string: The OCID of the compartment containing the tunnel.
CpeIp string: The IP address of the CPE device's VPN headend. Example: 203.0.113.22
DpdMode string: This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY
DpdTimeoutInSec int: DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.
Id string: The provider-assigned unique ID for this managed resource.
State string: The IPSec connection's tunnel's lifecycle state.
Status string: The tunnel's current state.
TimeCreated string: The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
TimeStatusUpdated string: When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
VpnIp string: The IP address of Oracle's VPN headend. Example: 129.146.17.50

associatedVirtualCircuits List<String>: The list of virtual circuit OCIDs over which your network can reach this tunnel.
compartmentId String: The OCID of the compartment containing the tunnel.
cpeIp String: The IP address of the CPE device's VPN headend. Example: 203.0.113.22
dpdMode String: This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY
dpdTimeoutInSec Integer: DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.
id String: The provider-assigned unique ID for this managed resource.
state String: The IPSec connection's tunnel's lifecycle state.
status String: The tunnel's current state.
timeCreated String: The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
timeStatusUpdated String: When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
vpnIp String: The IP address of Oracle's VPN headend. Example: 129.146.17.50

associatedVirtualCircuits string[]: The list of virtual circuit OCIDs over which your network can reach this tunnel.
compartmentId string: The OCID of the compartment containing the tunnel.
cpeIp string: The IP address of the CPE device's VPN headend. Example: 203.0.113.22
dpdMode string: This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY
dpdTimeoutInSec number: DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.
id string: The provider-assigned unique ID for this managed resource.
state string: The IPSec connection's tunnel's lifecycle state.
status string: The tunnel's current state.
timeCreated string: The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
timeStatusUpdated string: When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
vpnIp string: The IP address of Oracle's VPN headend. Example: 129.146.17.50

associated_virtual_circuits Sequence[str]: The list of virtual circuit OCIDs over which your network can reach this tunnel.
compartment_id str: The OCID of the compartment containing the tunnel.
cpe_ip str: The IP address of the CPE device's VPN headend. Example: 203.0.113.22
dpd_mode str: This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY
dpd_timeout_in_sec int: DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.
id str: The provider-assigned unique ID for this managed resource.
state str: The IPSec connection's tunnel's lifecycle state.
status str: The tunnel's current state.
time_created str: The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
time_status_updated str: When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
vpn_ip str: The IP address of Oracle's VPN headend. Example: 129.146.17.50

associatedVirtualCircuits List<String>: The list of virtual circuit OCIDs over which your network can reach this tunnel.
compartmentId String: The OCID of the compartment containing the tunnel.
cpeIp String: The IP address of the CPE device's VPN headend. Example: 203.0.113.22
dpdMode String: This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY
dpdTimeoutInSec Number: DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.
id String: The provider-assigned unique ID for this managed resource.
state String: The IPSec connection's tunnel's lifecycle state.
status String: The tunnel's current state.
timeCreated String: The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
timeStatusUpdated String: When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
vpnIp String: The IP address of Oracle's VPN headend. Example: 129.146.17.50

Look up Existing IpsecConnectionTunnelManagement Resource

Get an existing IpsecConnectionTunnelManagement resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: IpsecConnectionTunnelManagementState, opts?: CustomResourceOptions): IpsecConnectionTunnelManagement

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        associated_virtual_circuits: Optional[Sequence[str]] = None,
        bgp_session_infos: Optional[Sequence[_core.IpsecConnectionTunnelManagementBgpSessionInfoArgs]] = None,
        compartment_id: Optional[str] = None,
        cpe_ip: Optional[str] = None,
        display_name: Optional[str] = None,
        dpd_configs: Optional[Sequence[_core.IpsecConnectionTunnelManagementDpdConfigArgs]] = None,
        dpd_mode: Optional[str] = None,
        dpd_timeout_in_sec: Optional[int] = None,
        encryption_domain_config: Optional[_core.IpsecConnectionTunnelManagementEncryptionDomainConfigArgs] = None,
        ike_version: Optional[str] = None,
        ipsec_id: Optional[str] = None,
        nat_translation_enabled: Optional[str] = None,
        oracle_can_initiate: Optional[str] = None,
        phase_one_details: Optional[Sequence[_core.IpsecConnectionTunnelManagementPhaseOneDetailArgs]] = None,
        phase_two_details: Optional[Sequence[_core.IpsecConnectionTunnelManagementPhaseTwoDetailArgs]] = None,
        routing: Optional[str] = None,
        shared_secret: Optional[str] = None,
        state: Optional[str] = None,
        status: Optional[str] = None,
        time_created: Optional[str] = None,
        time_status_updated: Optional[str] = None,
        tunnel_id: Optional[str] = None,
        vpn_ip: Optional[str] = None) -> IpsecConnectionTunnelManagement

func GetIpsecConnectionTunnelManagement(ctx *Context, name string, id IDInput, state *IpsecConnectionTunnelManagementState, opts ...ResourceOption) (*IpsecConnectionTunnelManagement, error)

public static IpsecConnectionTunnelManagement Get(string name, Input<string> id, IpsecConnectionTunnelManagementState? state, CustomResourceOptions? opts = null)

public static IpsecConnectionTunnelManagement get(String name, Output<String> id, IpsecConnectionTunnelManagementState state, CustomResourceOptions options)

Resource lookup is not supported in YAML

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AssociatedVirtualCircuits List<string>

The list of virtual circuit OCIDs over which your network can reach this tunnel.

BgpSessionInfos List<IpsecConnectionTunnelManagementBgpSessionInfo>

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

CompartmentId string

The OCID of the compartment containing the tunnel.

CpeIp string

The IP address of the CPE device's VPN headend. Example: 203.0.113.22

DisplayName string

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

DpdConfigs List<IpsecConnectionTunnelManagementDpdConfig>

DpdMode string

This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY

DpdTimeoutInSec int

DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.

EncryptionDomainConfig IpsecConnectionTunnelManagementEncryptionDomainConfig

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

IkeVersion string

Internet Key Exchange protocol version.

IpsecId string

The OCID of the IPSec connection.

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

PhaseOneDetails List<IpsecConnectionTunnelManagementPhaseOneDetail>

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

PhaseTwoDetails List<IpsecConnectionTunnelManagementPhaseTwoDetail>

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

Routing string

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

SharedSecret string

State string

The IPSec connection's tunnel's lifecycle state.

Status string

The tunnel's current state.

TimeCreated string

The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

TimeStatusUpdated string

When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

TunnelId string

The OCID of the IPSec connection's tunnel.

VpnIp string

The IP address of Oracle's VPN headend. Example: 129.146.17.50

AssociatedVirtualCircuits []string

The list of virtual circuit OCIDs over which your network can reach this tunnel.

BgpSessionInfos []IpsecConnectionTunnelManagementBgpSessionInfoArgs

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

CompartmentId string

The OCID of the compartment containing the tunnel.

CpeIp string

The IP address of the CPE device's VPN headend. Example: 203.0.113.22

DisplayName string

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

DpdConfigs []IpsecConnectionTunnelManagementDpdConfigArgs

DpdMode string

This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY

DpdTimeoutInSec int

DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.

EncryptionDomainConfig IpsecConnectionTunnelManagementEncryptionDomainConfigArgs

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

IkeVersion string

Internet Key Exchange protocol version.

IpsecId string

The OCID of the IPSec connection.

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

PhaseOneDetails []IpsecConnectionTunnelManagementPhaseOneDetailArgs

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

PhaseTwoDetails []IpsecConnectionTunnelManagementPhaseTwoDetailArgs

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

Routing string

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

SharedSecret string

State string

The IPSec connection's tunnel's lifecycle state.

Status string

The tunnel's current state.

TimeCreated string

The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

TimeStatusUpdated string

When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

TunnelId string

The OCID of the IPSec connection's tunnel.

VpnIp string

The IP address of Oracle's VPN headend. Example: 129.146.17.50

associatedVirtualCircuits List<String>

The list of virtual circuit OCIDs over which your network can reach this tunnel.

bgpSessionInfos List<IpsecConnectionTunnelManagementBgpSessionInfo>

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

compartmentId String

The OCID of the compartment containing the tunnel.

cpeIp String

The IP address of the CPE device's VPN headend. Example: 203.0.113.22

displayName String

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

dpdConfigs List<IpsecConnectionTunnelManagementDpdConfig>

dpdMode String

This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY

dpdTimeoutInSec Integer

DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.

encryptionDomainConfig IpsecConnectionTunnelManagementEncryptionDomainConfig

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

ikeVersion String

Internet Key Exchange protocol version.

ipsecId String

The OCID of the IPSec connection.

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

phaseOneDetails List<IpsecConnectionTunnelManagementPhaseOneDetail>

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

phaseTwoDetails List<IpsecConnectionTunnelManagementPhaseTwoDetail>

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

routing String

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

sharedSecret String

state String

The IPSec connection's tunnel's lifecycle state.

status String

The tunnel's current state.

timeCreated String

The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

timeStatusUpdated String

When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

tunnelId String

The OCID of the IPSec connection's tunnel.

vpnIp String

The IP address of Oracle's VPN headend. Example: 129.146.17.50

associatedVirtualCircuits string[]

The list of virtual circuit OCIDs over which your network can reach this tunnel.

bgpSessionInfos IpsecConnectionTunnelManagementBgpSessionInfo[]

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

compartmentId string

The OCID of the compartment containing the tunnel.

cpeIp string

The IP address of the CPE device's VPN headend. Example: 203.0.113.22

displayName string

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

dpdConfigs IpsecConnectionTunnelManagementDpdConfig[]

dpdMode string

This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY

dpdTimeoutInSec number

DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.

encryptionDomainConfig IpsecConnectionTunnelManagementEncryptionDomainConfig

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

ikeVersion string

Internet Key Exchange protocol version.

ipsecId string

The OCID of the IPSec connection.

natTranslationEnabled string

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

oracleCanInitiate string

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

phaseOneDetails IpsecConnectionTunnelManagementPhaseOneDetail[]

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

phaseTwoDetails IpsecConnectionTunnelManagementPhaseTwoDetail[]

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

routing string

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

sharedSecret string

state string

The IPSec connection's tunnel's lifecycle state.

status string

The tunnel's current state.

timeCreated string

The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

timeStatusUpdated string

When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

tunnelId string

The OCID of the IPSec connection's tunnel.

vpnIp string

The IP address of Oracle's VPN headend. Example: 129.146.17.50

associated_virtual_circuits Sequence[str]

The list of virtual circuit OCIDs over which your network can reach this tunnel.

bgp_session_infos Sequence[core.IpsecConnectionTunnelManagementBgpSessionInfoArgs]

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

compartment_id str

The OCID of the compartment containing the tunnel.

cpe_ip str

The IP address of the CPE device's VPN headend. Example: 203.0.113.22

display_name str

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

dpd_configs Sequence[core.IpsecConnectionTunnelManagementDpdConfigArgs]

dpd_mode str

This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY

dpd_timeout_in_sec int

DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.

encryption_domain_config core.IpsecConnectionTunnelManagementEncryptionDomainConfigArgs

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

ike_version str

Internet Key Exchange protocol version.

ipsec_id str

The OCID of the IPSec connection.

nat_translation_enabled str

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.

oracle_can_initiate str

Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device (RESPONDER_ONLY), or both respond to and initiate requests (INITIATOR_OR_RESPONDER).

phase_one_details Sequence[core.IpsecConnectionTunnelManagementPhaseOneDetailArgs]

Configuration details for IKE phase one (ISAKMP) configuration parameters.

See PhaseOneConfigDetails for allowed values but note naming scheme follows TunnelPhaseOneDetails.

phase_two_details Sequence[core.IpsecConnectionTunnelManagementPhaseTwoDetailArgs]

Configuration details for IPSec phase two configuration parameters.

See PhaseTwoConfigDetails for allowed values, but note naming scheme follows TunnelPhaseTwoDetails.

routing str

The type of routing to use for this tunnel (either BGP dynamic routing, STATIC routing or POLICY routing).

shared_secret str

state str

The IPSec connection's tunnel's lifecycle state.

status str

The tunnel's current state.

time_created str

The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

time_status_updated str

When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z

tunnel_id str

The OCID of the IPSec connection's tunnel.

vpn_ip str

The IP address of Oracle's VPN headend. Example: 129.146.17.50

associatedVirtualCircuits List<String>

The list of virtual circuit OCIDs over which your network can reach this tunnel.

bgpSessionInfos List<Property Map>

Information for establishing a BGP session for the IPSec tunnel. Required if the tunnel uses BGP dynamic routing.

compartmentId String

The OCID of the compartment containing the tunnel.

cpeIp String

The IP address of the CPE device's VPN headend. Example: 203.0.113.22

displayName String

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

dpdConfigs List<Property Map>

dpdMode String

This option defines whether DPD can be initiated from the Oracle side of the connection. INITIATE_AND_RESPOND or RESPOND_ONLY

dpdTimeoutInSec Number

DPD timeout in seconds. This sets the longest interval between CPE device health messages before the IPSec connection indicates it has lost contact with the CPE. The default is 20 seconds.

encryptionDomainConfig Property Map

Configuration information used by the encryption domain policy. Required if the tunnel uses POLICY routing.

ikeVersion String

Internet Key Exchange protocol version.

ipsecId String

The OCID of the IPSec connection.

The ENABLED option sets the IKE protocol to use port 4500 instead of 500 and forces encapsulating traffic with the ESP protocol inside UDP packets.

The DISABLED option directs IKE to completely refuse to negotiate NAT-T even if it senses there may be a NAT device in use.