panos 2.0.0, Apr 15 25

panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks

paloaltonetworks/terraform-provider-panos

panos.IkeGateway

Explore with Pulumi AI

panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks

paloaltonetworks/terraform-provider-panos

Create IkeGateway Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new IkeGateway(name: string, args: IkeGatewayArgs, opts?: CustomResourceOptions);

@overload
def IkeGateway(resource_name: str,
               args: IkeGatewayArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def IkeGateway(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               location: Optional[IkeGatewayLocationArgs] = None,
               authentication: Optional[IkeGatewayAuthenticationArgs] = None,
               comment: Optional[str] = None,
               disabled: Optional[bool] = None,
               ipv6: Optional[bool] = None,
               local_address: Optional[IkeGatewayLocalAddressArgs] = None,
               local_id: Optional[IkeGatewayLocalIdArgs] = None,
               name: Optional[str] = None,
               peer_address: Optional[IkeGatewayPeerAddressArgs] = None,
               peer_id: Optional[IkeGatewayPeerIdArgs] = None,
               protocol: Optional[IkeGatewayProtocolArgs] = None,
               protocol_common: Optional[IkeGatewayProtocolCommonArgs] = None)

func NewIkeGateway(ctx *Context, name string, args IkeGatewayArgs, opts ...ResourceOption) (*IkeGateway, error)

public IkeGateway(string name, IkeGatewayArgs args, CustomResourceOptions? opts = null)

public IkeGateway(String name, IkeGatewayArgs args)
public IkeGateway(String name, IkeGatewayArgs args, CustomResourceOptions options)

type: panos:IkeGateway
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args IkeGatewayArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args IkeGatewayArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args IkeGatewayArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args IkeGatewayArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args IkeGatewayArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var ikeGatewayResource = new Panos.IkeGateway("ikeGatewayResource", new()
{
    Location = new Panos.Inputs.IkeGatewayLocationArgs
    {
        Ngfw = new Panos.Inputs.IkeGatewayLocationNgfwArgs
        {
            NgfwDevice = "string",
        },
        Template = new Panos.Inputs.IkeGatewayLocationTemplateArgs
        {
            Name = "string",
            NgfwDevice = "string",
            PanoramaDevice = "string",
        },
        TemplateStack = new Panos.Inputs.IkeGatewayLocationTemplateStackArgs
        {
            Name = "string",
            NgfwDevice = "string",
            PanoramaDevice = "string",
        },
    },
    Authentication = new Panos.Inputs.IkeGatewayAuthenticationArgs
    {
        Certificate = new Panos.Inputs.IkeGatewayAuthenticationCertificateArgs
        {
            AllowIdPayloadMismatch = false,
            CertificateProfile = "string",
            LocalCertificate = new Panos.Inputs.IkeGatewayAuthenticationCertificateLocalCertificateArgs
            {
                HashAndUrl = new Panos.Inputs.IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrlArgs
                {
                    BaseUrl = "string",
                    Enable = false,
                },
                Name = "string",
            },
            StrictValidationRevocation = false,
            UseManagementAsSource = false,
        },
        PreSharedKey = new Panos.Inputs.IkeGatewayAuthenticationPreSharedKeyArgs
        {
            Key = "string",
        },
    },
    Comment = "string",
    Disabled = false,
    Ipv6 = false,
    LocalAddress = new Panos.Inputs.IkeGatewayLocalAddressArgs
    {
        FloatingIp = "string",
        Interface = "string",
        Ip = "string",
    },
    LocalId = new Panos.Inputs.IkeGatewayLocalIdArgs
    {
        Id = "string",
        Type = "string",
    },
    Name = "string",
    PeerAddress = new Panos.Inputs.IkeGatewayPeerAddressArgs
    {
        Dynamic = null,
        Fqdn = "string",
        Ip = "string",
    },
    PeerId = new Panos.Inputs.IkeGatewayPeerIdArgs
    {
        Id = "string",
        Matching = "string",
        Type = "string",
    },
    Protocol = new Panos.Inputs.IkeGatewayProtocolArgs
    {
        Ikev1 = new Panos.Inputs.IkeGatewayProtocolIkev1Args
        {
            Dpd = new Panos.Inputs.IkeGatewayProtocolIkev1DpdArgs
            {
                Enable = false,
                Interval = 0,
                Retry = 0,
            },
            ExchangeMode = "string",
            IkeCryptoProfile = "string",
        },
        Ikev2 = new Panos.Inputs.IkeGatewayProtocolIkev2Args
        {
            Dpd = new Panos.Inputs.IkeGatewayProtocolIkev2DpdArgs
            {
                Enable = false,
                Interval = 0,
            },
            IkeCryptoProfile = "string",
            RequireCookie = false,
        },
        Version = "string",
    },
    ProtocolCommon = new Panos.Inputs.IkeGatewayProtocolCommonArgs
    {
        Fragmentation = new Panos.Inputs.IkeGatewayProtocolCommonFragmentationArgs
        {
            Enable = false,
        },
        NatTraversal = new Panos.Inputs.IkeGatewayProtocolCommonNatTraversalArgs
        {
            Enable = false,
            KeepAliveInterval = 0,
            UdpChecksumEnable = false,
        },
        PassiveMode = false,
    },
});

example, err := panos.NewIkeGateway(ctx, "ikeGatewayResource", &panos.IkeGatewayArgs{
	Location: &panos.IkeGatewayLocationArgs{
		Ngfw: &panos.IkeGatewayLocationNgfwArgs{
			NgfwDevice: pulumi.String("string"),
		},
		Template: &panos.IkeGatewayLocationTemplateArgs{
			Name:           pulumi.String("string"),
			NgfwDevice:     pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
		},
		TemplateStack: &panos.IkeGatewayLocationTemplateStackArgs{
			Name:           pulumi.String("string"),
			NgfwDevice:     pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
		},
	},
	Authentication: &panos.IkeGatewayAuthenticationArgs{
		Certificate: &panos.IkeGatewayAuthenticationCertificateArgs{
			AllowIdPayloadMismatch: pulumi.Bool(false),
			CertificateProfile:     pulumi.String("string"),
			LocalCertificate: &panos.IkeGatewayAuthenticationCertificateLocalCertificateArgs{
				HashAndUrl: &panos.IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrlArgs{
					BaseUrl: pulumi.String("string"),
					Enable:  pulumi.Bool(false),
				},
				Name: pulumi.String("string"),
			},
			StrictValidationRevocation: pulumi.Bool(false),
			UseManagementAsSource:      pulumi.Bool(false),
		},
		PreSharedKey: &panos.IkeGatewayAuthenticationPreSharedKeyArgs{
			Key: pulumi.String("string"),
		},
	},
	Comment:  pulumi.String("string"),
	Disabled: pulumi.Bool(false),
	Ipv6:     pulumi.Bool(false),
	LocalAddress: &panos.IkeGatewayLocalAddressArgs{
		FloatingIp: pulumi.String("string"),
		Interface:  pulumi.String("string"),
		Ip:         pulumi.String("string"),
	},
	LocalId: &panos.IkeGatewayLocalIdArgs{
		Id:   pulumi.String("string"),
		Type: pulumi.String("string"),
	},
	Name: pulumi.String("string"),
	PeerAddress: &panos.IkeGatewayPeerAddressArgs{
		Dynamic: &panos.IkeGatewayPeerAddressDynamicArgs{},
		Fqdn:    pulumi.String("string"),
		Ip:      pulumi.String("string"),
	},
	PeerId: &panos.IkeGatewayPeerIdArgs{
		Id:       pulumi.String("string"),
		Matching: pulumi.String("string"),
		Type:     pulumi.String("string"),
	},
	Protocol: &panos.IkeGatewayProtocolArgs{
		Ikev1: &panos.IkeGatewayProtocolIkev1Args{
			Dpd: &panos.IkeGatewayProtocolIkev1DpdArgs{
				Enable:   pulumi.Bool(false),
				Interval: pulumi.Float64(0),
				Retry:    pulumi.Float64(0),
			},
			ExchangeMode:     pulumi.String("string"),
			IkeCryptoProfile: pulumi.String("string"),
		},
		Ikev2: &panos.IkeGatewayProtocolIkev2Args{
			Dpd: &panos.IkeGatewayProtocolIkev2DpdArgs{
				Enable:   pulumi.Bool(false),
				Interval: pulumi.Float64(0),
			},
			IkeCryptoProfile: pulumi.String("string"),
			RequireCookie:    pulumi.Bool(false),
		},
		Version: pulumi.String("string"),
	},
	ProtocolCommon: &panos.IkeGatewayProtocolCommonArgs{
		Fragmentation: &panos.IkeGatewayProtocolCommonFragmentationArgs{
			Enable: pulumi.Bool(false),
		},
		NatTraversal: &panos.IkeGatewayProtocolCommonNatTraversalArgs{
			Enable:            pulumi.Bool(false),
			KeepAliveInterval: pulumi.Float64(0),
			UdpChecksumEnable: pulumi.Bool(false),
		},
		PassiveMode: pulumi.Bool(false),
	},
})

var ikeGatewayResource = new IkeGateway("ikeGatewayResource", IkeGatewayArgs.builder()
    .location(IkeGatewayLocationArgs.builder()
        .ngfw(IkeGatewayLocationNgfwArgs.builder()
            .ngfwDevice("string")
            .build())
        .template(IkeGatewayLocationTemplateArgs.builder()
            .name("string")
            .ngfwDevice("string")
            .panoramaDevice("string")
            .build())
        .templateStack(IkeGatewayLocationTemplateStackArgs.builder()
            .name("string")
            .ngfwDevice("string")
            .panoramaDevice("string")
            .build())
        .build())
    .authentication(IkeGatewayAuthenticationArgs.builder()
        .certificate(IkeGatewayAuthenticationCertificateArgs.builder()
            .allowIdPayloadMismatch(false)
            .certificateProfile("string")
            .localCertificate(IkeGatewayAuthenticationCertificateLocalCertificateArgs.builder()
                .hashAndUrl(IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrlArgs.builder()
                    .baseUrl("string")
                    .enable(false)
                    .build())
                .name("string")
                .build())
            .strictValidationRevocation(false)
            .useManagementAsSource(false)
            .build())
        .preSharedKey(IkeGatewayAuthenticationPreSharedKeyArgs.builder()
            .key("string")
            .build())
        .build())
    .comment("string")
    .disabled(false)
    .ipv6(false)
    .localAddress(IkeGatewayLocalAddressArgs.builder()
        .floatingIp("string")
        .interface_("string")
        .ip("string")
        .build())
    .localId(IkeGatewayLocalIdArgs.builder()
        .id("string")
        .type("string")
        .build())
    .name("string")
    .peerAddress(IkeGatewayPeerAddressArgs.builder()
        .dynamic()
        .fqdn("string")
        .ip("string")
        .build())
    .peerId(IkeGatewayPeerIdArgs.builder()
        .id("string")
        .matching("string")
        .type("string")
        .build())
    .protocol(IkeGatewayProtocolArgs.builder()
        .ikev1(IkeGatewayProtocolIkev1Args.builder()
            .dpd(IkeGatewayProtocolIkev1DpdArgs.builder()
                .enable(false)
                .interval(0)
                .retry(0)
                .build())
            .exchangeMode("string")
            .ikeCryptoProfile("string")
            .build())
        .ikev2(IkeGatewayProtocolIkev2Args.builder()
            .dpd(IkeGatewayProtocolIkev2DpdArgs.builder()
                .enable(false)
                .interval(0)
                .build())
            .ikeCryptoProfile("string")
            .requireCookie(false)
            .build())
        .version("string")
        .build())
    .protocolCommon(IkeGatewayProtocolCommonArgs.builder()
        .fragmentation(IkeGatewayProtocolCommonFragmentationArgs.builder()
            .enable(false)
            .build())
        .natTraversal(IkeGatewayProtocolCommonNatTraversalArgs.builder()
            .enable(false)
            .keepAliveInterval(0)
            .udpChecksumEnable(false)
            .build())
        .passiveMode(false)
        .build())
    .build());

ike_gateway_resource = panos.IkeGateway("ikeGatewayResource",
    location={
        "ngfw": {
            "ngfw_device": "string",
        },
        "template": {
            "name": "string",
            "ngfw_device": "string",
            "panorama_device": "string",
        },
        "template_stack": {
            "name": "string",
            "ngfw_device": "string",
            "panorama_device": "string",
        },
    },
    authentication={
        "certificate": {
            "allow_id_payload_mismatch": False,
            "certificate_profile": "string",
            "local_certificate": {
                "hash_and_url": {
                    "base_url": "string",
                    "enable": False,
                },
                "name": "string",
            },
            "strict_validation_revocation": False,
            "use_management_as_source": False,
        },
        "pre_shared_key": {
            "key": "string",
        },
    },
    comment="string",
    disabled=False,
    ipv6=False,
    local_address={
        "floating_ip": "string",
        "interface": "string",
        "ip": "string",
    },
    local_id={
        "id": "string",
        "type": "string",
    },
    name="string",
    peer_address={
        "dynamic": {},
        "fqdn": "string",
        "ip": "string",
    },
    peer_id={
        "id": "string",
        "matching": "string",
        "type": "string",
    },
    protocol={
        "ikev1": {
            "dpd": {
                "enable": False,
                "interval": 0,
                "retry": 0,
            },
            "exchange_mode": "string",
            "ike_crypto_profile": "string",
        },
        "ikev2": {
            "dpd": {
                "enable": False,
                "interval": 0,
            },
            "ike_crypto_profile": "string",
            "require_cookie": False,
        },
        "version": "string",
    },
    protocol_common={
        "fragmentation": {
            "enable": False,
        },
        "nat_traversal": {
            "enable": False,
            "keep_alive_interval": 0,
            "udp_checksum_enable": False,
        },
        "passive_mode": False,
    })

const ikeGatewayResource = new panos.IkeGateway("ikeGatewayResource", {
    location: {
        ngfw: {
            ngfwDevice: "string",
        },
        template: {
            name: "string",
            ngfwDevice: "string",
            panoramaDevice: "string",
        },
        templateStack: {
            name: "string",
            ngfwDevice: "string",
            panoramaDevice: "string",
        },
    },
    authentication: {
        certificate: {
            allowIdPayloadMismatch: false,
            certificateProfile: "string",
            localCertificate: {
                hashAndUrl: {
                    baseUrl: "string",
                    enable: false,
                },
                name: "string",
            },
            strictValidationRevocation: false,
            useManagementAsSource: false,
        },
        preSharedKey: {
            key: "string",
        },
    },
    comment: "string",
    disabled: false,
    ipv6: false,
    localAddress: {
        floatingIp: "string",
        "interface": "string",
        ip: "string",
    },
    localId: {
        id: "string",
        type: "string",
    },
    name: "string",
    peerAddress: {
        dynamic: {},
        fqdn: "string",
        ip: "string",
    },
    peerId: {
        id: "string",
        matching: "string",
        type: "string",
    },
    protocol: {
        ikev1: {
            dpd: {
                enable: false,
                interval: 0,
                retry: 0,
            },
            exchangeMode: "string",
            ikeCryptoProfile: "string",
        },
        ikev2: {
            dpd: {
                enable: false,
                interval: 0,
            },
            ikeCryptoProfile: "string",
            requireCookie: false,
        },
        version: "string",
    },
    protocolCommon: {
        fragmentation: {
            enable: false,
        },
        natTraversal: {
            enable: false,
            keepAliveInterval: 0,
            udpChecksumEnable: false,
        },
        passiveMode: false,
    },
});

type: panos:IkeGateway
properties:
    authentication:
        certificate:
            allowIdPayloadMismatch: false
            certificateProfile: string
            localCertificate:
                hashAndUrl:
                    baseUrl: string
                    enable: false
                name: string
            strictValidationRevocation: false
            useManagementAsSource: false
        preSharedKey:
            key: string
    comment: string
    disabled: false
    ipv6: false
    localAddress:
        floatingIp: string
        interface: string
        ip: string
    localId:
        id: string
        type: string
    location:
        ngfw:
            ngfwDevice: string
        template:
            name: string
            ngfwDevice: string
            panoramaDevice: string
        templateStack:
            name: string
            ngfwDevice: string
            panoramaDevice: string
    name: string
    peerAddress:
        dynamic: {}
        fqdn: string
        ip: string
    peerId:
        id: string
        matching: string
        type: string
    protocol:
        ikev1:
            dpd:
                enable: false
                interval: 0
                retry: 0
            exchangeMode: string
            ikeCryptoProfile: string
        ikev2:
            dpd:
                enable: false
                interval: 0
            ikeCryptoProfile: string
            requireCookie: false
        version: string
    protocolCommon:
        fragmentation:
            enable: false
        natTraversal:
            enable: false
            keepAliveInterval: 0
            udpChecksumEnable: false
        passiveMode: false

IkeGateway Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The IkeGateway resource accepts the following input properties:

Location IkeGatewayLocation: The location of this object.
Authentication IkeGatewayAuthentication
Comment string
Disabled bool: Disable the IKE gateway
Ipv6 bool: use IPv6 for the IKE gateway
LocalAddress IkeGatewayLocalAddress
LocalId IkeGatewayLocalId
Name string
PeerAddress IkeGatewayPeerAddress
PeerId IkeGatewayPeerId
Protocol IkeGatewayProtocol
ProtocolCommon IkeGatewayProtocolCommon

Location IkeGatewayLocationArgs: The location of this object.
Authentication IkeGatewayAuthenticationArgs
Comment string
Disabled bool: Disable the IKE gateway
Ipv6 bool: use IPv6 for the IKE gateway
LocalAddress IkeGatewayLocalAddressArgs
LocalId IkeGatewayLocalIdArgs
Name string
PeerAddress IkeGatewayPeerAddressArgs
PeerId IkeGatewayPeerIdArgs
Protocol IkeGatewayProtocolArgs
ProtocolCommon IkeGatewayProtocolCommonArgs

location IkeGatewayLocation: The location of this object.
authentication IkeGatewayAuthentication
comment String
disabled Boolean: Disable the IKE gateway
ipv6 Boolean: use IPv6 for the IKE gateway
localAddress IkeGatewayLocalAddress
localId IkeGatewayLocalId
name String
peerAddress IkeGatewayPeerAddress
peerId IkeGatewayPeerId
protocol IkeGatewayProtocol
protocolCommon IkeGatewayProtocolCommon

location IkeGatewayLocation: The location of this object.
authentication IkeGatewayAuthentication
comment string
disabled boolean: Disable the IKE gateway
ipv6 boolean: use IPv6 for the IKE gateway
localAddress IkeGatewayLocalAddress
localId IkeGatewayLocalId
name string
peerAddress IkeGatewayPeerAddress
peerId IkeGatewayPeerId
protocol IkeGatewayProtocol
protocolCommon IkeGatewayProtocolCommon

location IkeGatewayLocationArgs: The location of this object.
authentication IkeGatewayAuthenticationArgs
comment str
disabled bool: Disable the IKE gateway
ipv6 bool: use IPv6 for the IKE gateway
local_address IkeGatewayLocalAddressArgs
local_id IkeGatewayLocalIdArgs
name str
peer_address IkeGatewayPeerAddressArgs
peer_id IkeGatewayPeerIdArgs
protocol IkeGatewayProtocolArgs
protocol_common IkeGatewayProtocolCommonArgs

location Property Map: The location of this object.
authentication Property Map
comment String
disabled Boolean: Disable the IKE gateway
ipv6 Boolean: use IPv6 for the IKE gateway
localAddress Property Map
localId Property Map
name String
peerAddress Property Map
peerId Property Map
protocol Property Map
protocolCommon Property Map

Outputs

All input properties are implicitly available as output properties. Additionally, the IkeGateway resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing IkeGateway Resource

Get an existing IkeGateway resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: IkeGatewayState, opts?: CustomResourceOptions): IkeGateway

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        authentication: Optional[IkeGatewayAuthenticationArgs] = None,
        comment: Optional[str] = None,
        disabled: Optional[bool] = None,
        ipv6: Optional[bool] = None,
        local_address: Optional[IkeGatewayLocalAddressArgs] = None,
        local_id: Optional[IkeGatewayLocalIdArgs] = None,
        location: Optional[IkeGatewayLocationArgs] = None,
        name: Optional[str] = None,
        peer_address: Optional[IkeGatewayPeerAddressArgs] = None,
        peer_id: Optional[IkeGatewayPeerIdArgs] = None,
        protocol: Optional[IkeGatewayProtocolArgs] = None,
        protocol_common: Optional[IkeGatewayProtocolCommonArgs] = None) -> IkeGateway

func GetIkeGateway(ctx *Context, name string, id IDInput, state *IkeGatewayState, opts ...ResourceOption) (*IkeGateway, error)

public static IkeGateway Get(string name, Input<string> id, IkeGatewayState? state, CustomResourceOptions? opts = null)

public static IkeGateway get(String name, Output<String> id, IkeGatewayState state, CustomResourceOptions options)

resources:  _:    type: panos:IkeGateway    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Authentication IkeGatewayAuthentication
Comment string
Disabled bool: Disable the IKE gateway
Ipv6 bool: use IPv6 for the IKE gateway
LocalAddress IkeGatewayLocalAddress
LocalId IkeGatewayLocalId
Location IkeGatewayLocation: The location of this object.
Name string
PeerAddress IkeGatewayPeerAddress
PeerId IkeGatewayPeerId
Protocol IkeGatewayProtocol
ProtocolCommon IkeGatewayProtocolCommon

Authentication IkeGatewayAuthenticationArgs
Comment string
Disabled bool: Disable the IKE gateway
Ipv6 bool: use IPv6 for the IKE gateway
LocalAddress IkeGatewayLocalAddressArgs
LocalId IkeGatewayLocalIdArgs
Location IkeGatewayLocationArgs: The location of this object.
Name string
PeerAddress IkeGatewayPeerAddressArgs
PeerId IkeGatewayPeerIdArgs
Protocol IkeGatewayProtocolArgs
ProtocolCommon IkeGatewayProtocolCommonArgs

authentication IkeGatewayAuthentication
comment String
disabled Boolean: Disable the IKE gateway
ipv6 Boolean: use IPv6 for the IKE gateway
localAddress IkeGatewayLocalAddress
localId IkeGatewayLocalId
location IkeGatewayLocation: The location of this object.
name String
peerAddress IkeGatewayPeerAddress
peerId IkeGatewayPeerId
protocol IkeGatewayProtocol
protocolCommon IkeGatewayProtocolCommon

authentication IkeGatewayAuthentication
comment string
disabled boolean: Disable the IKE gateway
ipv6 boolean: use IPv6 for the IKE gateway
localAddress IkeGatewayLocalAddress
localId IkeGatewayLocalId
location IkeGatewayLocation: The location of this object.
name string
peerAddress IkeGatewayPeerAddress
peerId IkeGatewayPeerId
protocol IkeGatewayProtocol
protocolCommon IkeGatewayProtocolCommon

authentication IkeGatewayAuthenticationArgs
comment str
disabled bool: Disable the IKE gateway
ipv6 bool: use IPv6 for the IKE gateway
local_address IkeGatewayLocalAddressArgs
local_id IkeGatewayLocalIdArgs
location IkeGatewayLocationArgs: The location of this object.
name str
peer_address IkeGatewayPeerAddressArgs
peer_id IkeGatewayPeerIdArgs
protocol IkeGatewayProtocolArgs
protocol_common IkeGatewayProtocolCommonArgs

authentication Property Map
comment String
disabled Boolean: Disable the IKE gateway
ipv6 Boolean: use IPv6 for the IKE gateway
localAddress Property Map
localId Property Map
location Property Map: The location of this object.
name String
peerAddress Property Map
peerId Property Map
protocol Property Map
protocolCommon Property Map

Supporting Types

IkeGatewayAuthentication, IkeGatewayAuthenticationArgs

Certificate IkeGatewayAuthenticationCertificate
PreSharedKey IkeGatewayAuthenticationPreSharedKey

Certificate IkeGatewayAuthenticationCertificate
PreSharedKey IkeGatewayAuthenticationPreSharedKey

certificate IkeGatewayAuthenticationCertificate
preSharedKey IkeGatewayAuthenticationPreSharedKey

certificate IkeGatewayAuthenticationCertificate
preSharedKey IkeGatewayAuthenticationPreSharedKey

certificate IkeGatewayAuthenticationCertificate
pre_shared_key IkeGatewayAuthenticationPreSharedKey

certificate Property Map
preSharedKey Property Map

IkeGatewayAuthenticationCertificate, IkeGatewayAuthenticationCertificateArgs

AllowIdPayloadMismatch bool: Permit peer identification and certificate payload identification mismatch
CertificateProfile string: Profile for certificate valdiation during IKE negotiation
LocalCertificate IkeGatewayAuthenticationCertificateLocalCertificate
StrictValidationRevocation bool: Enable strict validation of peer's extended key use
UseManagementAsSource bool: Use management interface IP as source to retrieve http certificates

AllowIdPayloadMismatch bool: Permit peer identification and certificate payload identification mismatch
CertificateProfile string: Profile for certificate valdiation during IKE negotiation
LocalCertificate IkeGatewayAuthenticationCertificateLocalCertificate
StrictValidationRevocation bool: Enable strict validation of peer's extended key use
UseManagementAsSource bool: Use management interface IP as source to retrieve http certificates

allowIdPayloadMismatch Boolean: Permit peer identification and certificate payload identification mismatch
certificateProfile String: Profile for certificate valdiation during IKE negotiation
localCertificate IkeGatewayAuthenticationCertificateLocalCertificate
strictValidationRevocation Boolean: Enable strict validation of peer's extended key use
useManagementAsSource Boolean: Use management interface IP as source to retrieve http certificates

allowIdPayloadMismatch boolean: Permit peer identification and certificate payload identification mismatch
certificateProfile string: Profile for certificate valdiation during IKE negotiation
localCertificate IkeGatewayAuthenticationCertificateLocalCertificate
strictValidationRevocation boolean: Enable strict validation of peer's extended key use
useManagementAsSource boolean: Use management interface IP as source to retrieve http certificates

allow_id_payload_mismatch bool: Permit peer identification and certificate payload identification mismatch
certificate_profile str: Profile for certificate valdiation during IKE negotiation
local_certificate IkeGatewayAuthenticationCertificateLocalCertificate
strict_validation_revocation bool: Enable strict validation of peer's extended key use
use_management_as_source bool: Use management interface IP as source to retrieve http certificates

allowIdPayloadMismatch Boolean: Permit peer identification and certificate payload identification mismatch
certificateProfile String: Profile for certificate valdiation during IKE negotiation
localCertificate Property Map
strictValidationRevocation Boolean: Enable strict validation of peer's extended key use
useManagementAsSource Boolean: Use management interface IP as source to retrieve http certificates

IkeGatewayAuthenticationCertificateLocalCertificate, IkeGatewayAuthenticationCertificateLocalCertificateArgs

HashAndUrl IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrl
Name string: Local certificate name

HashAndUrl IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrl
Name string: Local certificate name

hashAndUrl IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrl
name String: Local certificate name

hashAndUrl IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrl
name string: Local certificate name

hash_and_url IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrl
name str: Local certificate name

hashAndUrl Property Map
name String: Local certificate name

IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrl, IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrlArgs

BaseUrl string: The host and directory part of URL for local certificates(http only)
Enable bool: Use hash-and-url for local certificate

BaseUrl string: The host and directory part of URL for local certificates(http only)
Enable bool: Use hash-and-url for local certificate

baseUrl String: The host and directory part of URL for local certificates(http only)
enable Boolean: Use hash-and-url for local certificate

baseUrl string: The host and directory part of URL for local certificates(http only)
enable boolean: Use hash-and-url for local certificate

base_url str: The host and directory part of URL for local certificates(http only)
enable bool: Use hash-and-url for local certificate

baseUrl String: The host and directory part of URL for local certificates(http only)
enable Boolean: Use hash-and-url for local certificate

IkeGatewayAuthenticationPreSharedKey, IkeGatewayAuthenticationPreSharedKeyArgs

Key string: the string used as pre-shared key

Key string: the string used as pre-shared key

key String: the string used as pre-shared key

key string: the string used as pre-shared key

key str: the string used as pre-shared key

key String: the string used as pre-shared key

IkeGatewayLocalAddress, IkeGatewayLocalAddressArgs

FloatingIp string: Floating IP address in HA Active-Active configuration
Interface string: local gateway end-point
Ip string: specify exact IP address if interface has multiple addresses

FloatingIp string: Floating IP address in HA Active-Active configuration
Interface string: local gateway end-point
Ip string: specify exact IP address if interface has multiple addresses

floatingIp String: Floating IP address in HA Active-Active configuration
interface_ String: local gateway end-point
ip String: specify exact IP address if interface has multiple addresses

floatingIp string: Floating IP address in HA Active-Active configuration
interface string: local gateway end-point
ip string: specify exact IP address if interface has multiple addresses

floating_ip str: Floating IP address in HA Active-Active configuration
interface str: local gateway end-point
ip str: specify exact IP address if interface has multiple addresses

floatingIp String: Floating IP address in HA Active-Active configuration
interface String: local gateway end-point
ip String: specify exact IP address if interface has multiple addresses

IkeGatewayLocalId, IkeGatewayLocalIdArgs

Id string: Local ID string
Type string

Id string: Local ID string
Type string

id String: Local ID string
type String

id string: Local ID string
type string

id str: Local ID string
type str

id String: Local ID string
type String

IkeGatewayLocation, IkeGatewayLocationArgs

Ngfw IkeGatewayLocationNgfw: Located in a specific NGFW device
Template IkeGatewayLocationTemplate: Located in a specific template
TemplateStack IkeGatewayLocationTemplateStack: Located in a specific template stack

Ngfw IkeGatewayLocationNgfw: Located in a specific NGFW device
Template IkeGatewayLocationTemplate: Located in a specific template
TemplateStack IkeGatewayLocationTemplateStack: Located in a specific template stack

ngfw IkeGatewayLocationNgfw: Located in a specific NGFW device
template IkeGatewayLocationTemplate: Located in a specific template
templateStack IkeGatewayLocationTemplateStack: Located in a specific template stack

ngfw IkeGatewayLocationNgfw: Located in a specific NGFW device
template IkeGatewayLocationTemplate: Located in a specific template
templateStack IkeGatewayLocationTemplateStack: Located in a specific template stack

ngfw IkeGatewayLocationNgfw: Located in a specific NGFW device
template IkeGatewayLocationTemplate: Located in a specific template
template_stack IkeGatewayLocationTemplateStack: Located in a specific template stack

ngfw Property Map: Located in a specific NGFW device
template Property Map: Located in a specific template
templateStack Property Map: Located in a specific template stack

IkeGatewayLocationNgfw, IkeGatewayLocationNgfwArgs

NgfwDevice string: The NGFW device

NgfwDevice string: The NGFW device

ngfwDevice String: The NGFW device

ngfwDevice string: The NGFW device

ngfw_device str: The NGFW device

ngfwDevice String: The NGFW device

IkeGatewayLocationTemplate, IkeGatewayLocationTemplateArgs

Name string: Specific Panorama template
NgfwDevice string: The NGFW device
PanoramaDevice string: Specific Panorama device

Name string: Specific Panorama template
NgfwDevice string: The NGFW device
PanoramaDevice string: Specific Panorama device

name String: Specific Panorama template
ngfwDevice String: The NGFW device
panoramaDevice String: Specific Panorama device

name string: Specific Panorama template
ngfwDevice string: The NGFW device
panoramaDevice string: Specific Panorama device

name str: Specific Panorama template
ngfw_device str: The NGFW device
panorama_device str: Specific Panorama device

name String: Specific Panorama template
ngfwDevice String: The NGFW device
panoramaDevice String: Specific Panorama device

IkeGatewayLocationTemplateStack, IkeGatewayLocationTemplateStackArgs

Name string: Specific Panorama template stack
NgfwDevice string: The NGFW device
PanoramaDevice string: Specific Panorama device

Name string: Specific Panorama template stack
NgfwDevice string: The NGFW device
PanoramaDevice string: Specific Panorama device

name String: Specific Panorama template stack
ngfwDevice String: The NGFW device
panoramaDevice String: Specific Panorama device

name string: Specific Panorama template stack
ngfwDevice string: The NGFW device
panoramaDevice string: Specific Panorama device

name str: Specific Panorama template stack
ngfw_device str: The NGFW device
panorama_device str: Specific Panorama device

name String: Specific Panorama template stack
ngfwDevice String: The NGFW device
panoramaDevice String: Specific Panorama device

IkeGatewayPeerAddress, IkeGatewayPeerAddressArgs

Dynamic IkeGatewayPeerAddressDynamic
Fqdn string: peer gateway FQDN name
Ip string: peer gateway has static IP address

Dynamic IkeGatewayPeerAddressDynamic
Fqdn string: peer gateway FQDN name
Ip string: peer gateway has static IP address

dynamic IkeGatewayPeerAddressDynamic
fqdn String: peer gateway FQDN name
ip String: peer gateway has static IP address

dynamic IkeGatewayPeerAddressDynamic
fqdn string: peer gateway FQDN name
ip string: peer gateway has static IP address

dynamic IkeGatewayPeerAddressDynamic
fqdn str: peer gateway FQDN name
ip str: peer gateway has static IP address

dynamic Property Map
fqdn String: peer gateway FQDN name
ip String: peer gateway has static IP address

IkeGatewayPeerId, IkeGatewayPeerIdArgs

Id string: Peer ID string
Matching string: Enable peer ID wildcard match for certificate authentication
Type string

Id string: Peer ID string
Matching string: Enable peer ID wildcard match for certificate authentication
Type string

id String: Peer ID string
matching String: Enable peer ID wildcard match for certificate authentication
type String

id string: Peer ID string
matching string: Enable peer ID wildcard match for certificate authentication
type string

id str: Peer ID string
matching str: Enable peer ID wildcard match for certificate authentication
type str

id String: Peer ID string
matching String: Enable peer ID wildcard match for certificate authentication
type String

IkeGatewayProtocol, IkeGatewayProtocolArgs

Ikev1 IkeGatewayProtocolIkev1
Ikev2 IkeGatewayProtocolIkev2
Version string: IKE protocol version

Ikev1 IkeGatewayProtocolIkev1
Ikev2 IkeGatewayProtocolIkev2
Version string: IKE protocol version

ikev1 IkeGatewayProtocolIkev1
ikev2 IkeGatewayProtocolIkev2
version String: IKE protocol version

ikev1 IkeGatewayProtocolIkev1
ikev2 IkeGatewayProtocolIkev2
version string: IKE protocol version

ikev1 IkeGatewayProtocolIkev1
ikev2 IkeGatewayProtocolIkev2
version str: IKE protocol version

ikev1 Property Map
ikev2 Property Map
version String: IKE protocol version

IkeGatewayProtocolCommon, IkeGatewayProtocolCommonArgs

Fragmentation IkeGatewayProtocolCommonFragmentation
NatTraversal IkeGatewayProtocolCommonNatTraversal
PassiveMode bool: Enable passive mode (responder only)

Fragmentation IkeGatewayProtocolCommonFragmentation
NatTraversal IkeGatewayProtocolCommonNatTraversal
PassiveMode bool: Enable passive mode (responder only)

fragmentation IkeGatewayProtocolCommonFragmentation
natTraversal IkeGatewayProtocolCommonNatTraversal
passiveMode Boolean: Enable passive mode (responder only)

fragmentation IkeGatewayProtocolCommonFragmentation
natTraversal IkeGatewayProtocolCommonNatTraversal
passiveMode boolean: Enable passive mode (responder only)

fragmentation IkeGatewayProtocolCommonFragmentation
nat_traversal IkeGatewayProtocolCommonNatTraversal
passive_mode bool: Enable passive mode (responder only)

fragmentation Property Map
natTraversal Property Map
passiveMode Boolean: Enable passive mode (responder only)

IkeGatewayProtocolCommonFragmentation, IkeGatewayProtocolCommonFragmentationArgs

Enable bool: Enable IKE fragmentation

Enable bool: Enable IKE fragmentation

enable Boolean: Enable IKE fragmentation

enable boolean: Enable IKE fragmentation

enable bool: Enable IKE fragmentation

enable Boolean: Enable IKE fragmentation

IkeGatewayProtocolCommonNatTraversal, IkeGatewayProtocolCommonNatTraversalArgs

Enable bool: Enable NAT-Traversal
KeepAliveInterval double: sending interval for NAT keep-alive packets (in seconds)
UdpChecksumEnable bool: Enable UDP checksum

Enable bool: Enable NAT-Traversal
KeepAliveInterval float64: sending interval for NAT keep-alive packets (in seconds)
UdpChecksumEnable bool: Enable UDP checksum

enable Boolean: Enable NAT-Traversal
keepAliveInterval Double: sending interval for NAT keep-alive packets (in seconds)
udpChecksumEnable Boolean: Enable UDP checksum

enable boolean: Enable NAT-Traversal
keepAliveInterval number: sending interval for NAT keep-alive packets (in seconds)
udpChecksumEnable boolean: Enable UDP checksum

enable bool: Enable NAT-Traversal
keep_alive_interval float: sending interval for NAT keep-alive packets (in seconds)
udp_checksum_enable bool: Enable UDP checksum

enable Boolean: Enable NAT-Traversal
keepAliveInterval Number: sending interval for NAT keep-alive packets (in seconds)
udpChecksumEnable Boolean: Enable UDP checksum

IkeGatewayProtocolIkev1, IkeGatewayProtocolIkev1Args

Dpd IkeGatewayProtocolIkev1Dpd
ExchangeMode string: Exchange mode
IkeCryptoProfile string: IKE SA crypto profile name

Dpd IkeGatewayProtocolIkev1Dpd
ExchangeMode string: Exchange mode
IkeCryptoProfile string: IKE SA crypto profile name

dpd IkeGatewayProtocolIkev1Dpd
exchangeMode String: Exchange mode
ikeCryptoProfile String: IKE SA crypto profile name

dpd IkeGatewayProtocolIkev1Dpd
exchangeMode string: Exchange mode
ikeCryptoProfile string: IKE SA crypto profile name

dpd IkeGatewayProtocolIkev1Dpd
exchange_mode str: Exchange mode
ike_crypto_profile str: IKE SA crypto profile name

dpd Property Map
exchangeMode String: Exchange mode
ikeCryptoProfile String: IKE SA crypto profile name

IkeGatewayProtocolIkev1Dpd, IkeGatewayProtocolIkev1DpdArgs

Enable bool: Enable Dead-Peer-Detection
Interval double: sending interval for probing packets (in seconds)
Retry double: number of retries before disconnection

Enable bool: Enable Dead-Peer-Detection
Interval float64: sending interval for probing packets (in seconds)
Retry float64: number of retries before disconnection

enable Boolean: Enable Dead-Peer-Detection
interval Double: sending interval for probing packets (in seconds)
retry Double: number of retries before disconnection

enable boolean: Enable Dead-Peer-Detection
interval number: sending interval for probing packets (in seconds)
retry number: number of retries before disconnection

enable bool: Enable Dead-Peer-Detection
interval float: sending interval for probing packets (in seconds)
retry float: number of retries before disconnection

enable Boolean: Enable Dead-Peer-Detection
interval Number: sending interval for probing packets (in seconds)
retry Number: number of retries before disconnection

IkeGatewayProtocolIkev2, IkeGatewayProtocolIkev2Args

Dpd IkeGatewayProtocolIkev2Dpd
IkeCryptoProfile string: IKE SA crypto profile name
RequireCookie bool: Require cookie

Dpd IkeGatewayProtocolIkev2Dpd
IkeCryptoProfile string: IKE SA crypto profile name
RequireCookie bool: Require cookie

dpd IkeGatewayProtocolIkev2Dpd
ikeCryptoProfile String: IKE SA crypto profile name
requireCookie Boolean: Require cookie

dpd IkeGatewayProtocolIkev2Dpd
ikeCryptoProfile string: IKE SA crypto profile name
requireCookie boolean: Require cookie

dpd IkeGatewayProtocolIkev2Dpd
ike_crypto_profile str: IKE SA crypto profile name
require_cookie bool: Require cookie

dpd Property Map
ikeCryptoProfile String: IKE SA crypto profile name
requireCookie Boolean: Require cookie

IkeGatewayProtocolIkev2Dpd, IkeGatewayProtocolIkev2DpdArgs

Enable bool: Enable sending empty information liveness check message
Interval double: delay interval before sending probing packets (in seconds)

Enable bool: Enable sending empty information liveness check message
Interval float64: delay interval before sending probing packets (in seconds)

enable Boolean: Enable sending empty information liveness check message
interval Double: delay interval before sending probing packets (in seconds)

enable boolean: Enable sending empty information liveness check message
interval number: delay interval before sending probing packets (in seconds)

enable bool: Enable sending empty information liveness check message
interval float: delay interval before sending probing packets (in seconds)

enable Boolean: Enable sending empty information liveness check message
interval Number: delay interval before sending probing packets (in seconds)

Package Details

Repository: panos paloaltonetworks/terraform-provider-panos
License
Notes: This Pulumi package is based on the panos Terraform Provider.

panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks

paloaltonetworks/terraform-provider-panos

panos.IkeGateway

On this page

On this page

Create IkeGateway Resource

Constructor syntax

Parameters

Constructor example

IkeGateway Resource Properties

Inputs

Outputs

Look up Existing IkeGateway Resource

Supporting Types

IkeGatewayAuthentication, IkeGatewayAuthenticationArgs

IkeGatewayAuthenticationCertificate, IkeGatewayAuthenticationCertificateArgs

IkeGatewayAuthenticationCertificateLocalCertificate, IkeGatewayAuthenticationCertificateLocalCertificateArgs

IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrl, IkeGatewayAuthenticationCertificateLocalCertificateHashAndUrlArgs

IkeGatewayAuthenticationPreSharedKey, IkeGatewayAuthenticationPreSharedKeyArgs

IkeGatewayLocalAddress, IkeGatewayLocalAddressArgs

IkeGatewayLocalId, IkeGatewayLocalIdArgs

IkeGatewayLocation, IkeGatewayLocationArgs

IkeGatewayLocationNgfw, IkeGatewayLocationNgfwArgs

IkeGatewayLocationTemplate, IkeGatewayLocationTemplateArgs

IkeGatewayLocationTemplateStack, IkeGatewayLocationTemplateStackArgs

IkeGatewayPeerAddress, IkeGatewayPeerAddressArgs

IkeGatewayPeerId, IkeGatewayPeerIdArgs

IkeGatewayProtocol, IkeGatewayProtocolArgs

IkeGatewayProtocolCommon, IkeGatewayProtocolCommonArgs

IkeGatewayProtocolCommonFragmentation, IkeGatewayProtocolCommonFragmentationArgs

IkeGatewayProtocolCommonNatTraversal, IkeGatewayProtocolCommonNatTraversalArgs

IkeGatewayProtocolIkev1, IkeGatewayProtocolIkev1Args

IkeGatewayProtocolIkev1Dpd, IkeGatewayProtocolIkev1DpdArgs

IkeGatewayProtocolIkev2, IkeGatewayProtocolIkev2Args

IkeGatewayProtocolIkev2Dpd, IkeGatewayProtocolIkev2DpdArgs

Package Details

On this page

On this page