IpsecTunnel

Strata Cloud Manager v0.4.3, Nov 8 25

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as scm from "@pulumi/scm";

//# 1. Define the IKE Crypto Profile (IKE Phase 1)
// Note: The resource name is plural: "scm_ike_crypto_profile"
const example = new scm.IkeCryptoProfile("example", {
    name: "example-ike-crypto",
    folder: "Remote Networks",
    hashes: ["sha256"],
    dhGroups: ["group14"],
    encryptions: ["aes-256-cbc"],
});
//# 2. Define the IPsec Crypto Profile (IKE Phase 2)
// Note: The resource name is plural and nested blocks now use an equals sign (=).
const exampleIpsecCryptoProfile = new scm.IpsecCryptoProfile("example", {
    name: "PaloAlto-Networks-IPSec-Crypto",
    folder: "Remote Networks",
    esp: {
        encryptions: ["aes-256-gcm"],
        authentications: ["sha256"],
    },
    dhGroup: "group14",
    lifetime: {
        hours: 8,
    },
});
//# 3. Define the IKE Gateway
// Note: The resource name is plural and nested blocks now use an equals sign (=).
const exampleIkeGateway = new scm.IkeGateway("example", {
    name: "example-gateway",
    folder: "Remote Networks",
    peerAddress: {
        ip: "1.1.1.1",
    },
    authentication: {
        preSharedKey: {
            key: "secret",
        },
    },
    protocol: {
        ikev1: {
            ikeCryptoProfile: example.name,
        },
    },
});
//# 4. Define the IPsec Tunnel
// Note: Nested 'auto_key' block uses an equals sign (=).
const exampleIpsecTunnel = new scm.IpsecTunnel("example", {
    name: "example-tunnel",
    folder: "Remote Networks",
    tunnelInterface: "tunnel",
    antiReplay: true,
    copyTos: false,
    enableGreEncapsulation: false,
    autoKey: {
        ikeGateways: [{
            name: exampleIkeGateway.name,
        }],
        ipsecCryptoProfile: exampleIpsecCryptoProfile.name,
    },
}, {
    dependsOn: [exampleIkeGateway],
});

import pulumi
import pulumi_scm as scm

## 1. Define the IKE Crypto Profile (IKE Phase 1)
# Note: The resource name is plural: "scm_ike_crypto_profile"
example = scm.IkeCryptoProfile("example",
    name="example-ike-crypto",
    folder="Remote Networks",
    hashes=["sha256"],
    dh_groups=["group14"],
    encryptions=["aes-256-cbc"])
## 2. Define the IPsec Crypto Profile (IKE Phase 2)
# Note: The resource name is plural and nested blocks now use an equals sign (=).
example_ipsec_crypto_profile = scm.IpsecCryptoProfile("example",
    name="PaloAlto-Networks-IPSec-Crypto",
    folder="Remote Networks",
    esp={
        "encryptions": ["aes-256-gcm"],
        "authentications": ["sha256"],
    },
    dh_group="group14",
    lifetime={
        "hours": 8,
    })
## 3. Define the IKE Gateway
# Note: The resource name is plural and nested blocks now use an equals sign (=).
example_ike_gateway = scm.IkeGateway("example",
    name="example-gateway",
    folder="Remote Networks",
    peer_address={
        "ip": "1.1.1.1",
    },
    authentication={
        "pre_shared_key": {
            "key": "secret",
        },
    },
    protocol={
        "ikev1": {
            "ike_crypto_profile": example.name,
        },
    })
## 4. Define the IPsec Tunnel
# Note: Nested 'auto_key' block uses an equals sign (=).
example_ipsec_tunnel = scm.IpsecTunnel("example",
    name="example-tunnel",
    folder="Remote Networks",
    tunnel_interface="tunnel",
    anti_replay=True,
    copy_tos=False,
    enable_gre_encapsulation=False,
    auto_key={
        "ike_gateways": [{
            "name": example_ike_gateway.name,
        }],
        "ipsec_crypto_profile": example_ipsec_crypto_profile.name,
    },
    opts = pulumi.ResourceOptions(depends_on=[example_ike_gateway]))

package main

import (
	"github.com/pulumi/pulumi-scm/sdk/go/scm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// # 1. Define the IKE Crypto Profile (IKE Phase 1)
		// Note: The resource name is plural: "scm_ike_crypto_profile"
		example, err := scm.NewIkeCryptoProfile(ctx, "example", &scm.IkeCryptoProfileArgs{
			Name:   pulumi.String("example-ike-crypto"),
			Folder: pulumi.String("Remote Networks"),
			Hashes: pulumi.StringArray{
				pulumi.String("sha256"),
			},
			DhGroups: pulumi.StringArray{
				pulumi.String("group14"),
			},
			Encryptions: pulumi.StringArray{
				pulumi.String("aes-256-cbc"),
			},
		})
		if err != nil {
			return err
		}
		// # 2. Define the IPsec Crypto Profile (IKE Phase 2)
		// Note: The resource name is plural and nested blocks now use an equals sign (=).
		exampleIpsecCryptoProfile, err := scm.NewIpsecCryptoProfile(ctx, "example", &scm.IpsecCryptoProfileArgs{
			Name:   pulumi.String("PaloAlto-Networks-IPSec-Crypto"),
			Folder: pulumi.String("Remote Networks"),
			Esp: &scm.IpsecCryptoProfileEspArgs{
				Encryptions: pulumi.StringArray{
					pulumi.String("aes-256-gcm"),
				},
				Authentications: pulumi.StringArray{
					pulumi.String("sha256"),
				},
			},
			DhGroup: pulumi.String("group14"),
			Lifetime: &scm.IpsecCryptoProfileLifetimeArgs{
				Hours: pulumi.Int(8),
			},
		})
		if err != nil {
			return err
		}
		// # 3. Define the IKE Gateway
		// Note: The resource name is plural and nested blocks now use an equals sign (=).
		exampleIkeGateway, err := scm.NewIkeGateway(ctx, "example", &scm.IkeGatewayArgs{
			Name:   pulumi.String("example-gateway"),
			Folder: pulumi.String("Remote Networks"),
			PeerAddress: &scm.IkeGatewayPeerAddressArgs{
				Ip: pulumi.String("1.1.1.1"),
			},
			Authentication: &scm.IkeGatewayAuthenticationArgs{
				PreSharedKey: &scm.IkeGatewayAuthenticationPreSharedKeyArgs{
					Key: pulumi.String("secret"),
				},
			},
			Protocol: &scm.IkeGatewayProtocolArgs{
				Ikev1: &scm.IkeGatewayProtocolIkev1Args{
					IkeCryptoProfile: example.Name,
				},
			},
		})
		if err != nil {
			return err
		}
		// # 4. Define the IPsec Tunnel
		// Note: Nested 'auto_key' block uses an equals sign (=).
		_, err = scm.NewIpsecTunnel(ctx, "example", &scm.IpsecTunnelArgs{
			Name:                   pulumi.String("example-tunnel"),
			Folder:                 pulumi.String("Remote Networks"),
			TunnelInterface:        pulumi.String("tunnel"),
			AntiReplay:             pulumi.Bool(true),
			CopyTos:                pulumi.Bool(false),
			EnableGreEncapsulation: pulumi.Bool(false),
			AutoKey: &scm.IpsecTunnelAutoKeyArgs{
				IkeGateways: scm.IpsecTunnelAutoKeyIkeGatewayArray{
					&scm.IpsecTunnelAutoKeyIkeGatewayArgs{
						Name: exampleIkeGateway.Name,
					},
				},
				IpsecCryptoProfile: exampleIpsecCryptoProfile.Name,
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleIkeGateway,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scm = Pulumi.Scm;

return await Deployment.RunAsync(() => 
{
    //# 1. Define the IKE Crypto Profile (IKE Phase 1)
    // Note: The resource name is plural: "scm_ike_crypto_profile"
    var example = new Scm.IkeCryptoProfile("example", new()
    {
        Name = "example-ike-crypto",
        Folder = "Remote Networks",
        Hashes = new[]
        {
            "sha256",
        },
        DhGroups = new[]
        {
            "group14",
        },
        Encryptions = new[]
        {
            "aes-256-cbc",
        },
    });

    //# 2. Define the IPsec Crypto Profile (IKE Phase 2)
    // Note: The resource name is plural and nested blocks now use an equals sign (=).
    var exampleIpsecCryptoProfile = new Scm.IpsecCryptoProfile("example", new()
    {
        Name = "PaloAlto-Networks-IPSec-Crypto",
        Folder = "Remote Networks",
        Esp = new Scm.Inputs.IpsecCryptoProfileEspArgs
        {
            Encryptions = new[]
            {
                "aes-256-gcm",
            },
            Authentications = new[]
            {
                "sha256",
            },
        },
        DhGroup = "group14",
        Lifetime = new Scm.Inputs.IpsecCryptoProfileLifetimeArgs
        {
            Hours = 8,
        },
    });

    //# 3. Define the IKE Gateway
    // Note: The resource name is plural and nested blocks now use an equals sign (=).
    var exampleIkeGateway = new Scm.IkeGateway("example", new()
    {
        Name = "example-gateway",
        Folder = "Remote Networks",
        PeerAddress = new Scm.Inputs.IkeGatewayPeerAddressArgs
        {
            Ip = "1.1.1.1",
        },
        Authentication = new Scm.Inputs.IkeGatewayAuthenticationArgs
        {
            PreSharedKey = new Scm.Inputs.IkeGatewayAuthenticationPreSharedKeyArgs
            {
                Key = "secret",
            },
        },
        Protocol = new Scm.Inputs.IkeGatewayProtocolArgs
        {
            Ikev1 = new Scm.Inputs.IkeGatewayProtocolIkev1Args
            {
                IkeCryptoProfile = example.Name,
            },
        },
    });

    //# 4. Define the IPsec Tunnel
    // Note: Nested 'auto_key' block uses an equals sign (=).
    var exampleIpsecTunnel = new Scm.IpsecTunnel("example", new()
    {
        Name = "example-tunnel",
        Folder = "Remote Networks",
        TunnelInterface = "tunnel",
        AntiReplay = true,
        CopyTos = false,
        EnableGreEncapsulation = false,
        AutoKey = new Scm.Inputs.IpsecTunnelAutoKeyArgs
        {
            IkeGateways = new[]
            {
                new Scm.Inputs.IpsecTunnelAutoKeyIkeGatewayArgs
                {
                    Name = exampleIkeGateway.Name,
                },
            },
            IpsecCryptoProfile = exampleIpsecCryptoProfile.Name,
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            exampleIkeGateway,
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scm.IkeCryptoProfile;
import com.pulumi.scm.IkeCryptoProfileArgs;
import com.pulumi.scm.IpsecCryptoProfile;
import com.pulumi.scm.IpsecCryptoProfileArgs;
import com.pulumi.scm.inputs.IpsecCryptoProfileEspArgs;
import com.pulumi.scm.inputs.IpsecCryptoProfileLifetimeArgs;
import com.pulumi.scm.IkeGateway;
import com.pulumi.scm.IkeGatewayArgs;
import com.pulumi.scm.inputs.IkeGatewayPeerAddressArgs;
import com.pulumi.scm.inputs.IkeGatewayAuthenticationArgs;
import com.pulumi.scm.inputs.IkeGatewayAuthenticationPreSharedKeyArgs;
import com.pulumi.scm.inputs.IkeGatewayProtocolArgs;
import com.pulumi.scm.inputs.IkeGatewayProtocolIkev1Args;
import com.pulumi.scm.IpsecTunnel;
import com.pulumi.scm.IpsecTunnelArgs;
import com.pulumi.scm.inputs.IpsecTunnelAutoKeyArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        //# 1. Define the IKE Crypto Profile (IKE Phase 1)
        // Note: The resource name is plural: "scm_ike_crypto_profile"
        var example = new IkeCryptoProfile("example", IkeCryptoProfileArgs.builder()
            .name("example-ike-crypto")
            .folder("Remote Networks")
            .hashes("sha256")
            .dhGroups("group14")
            .encryptions("aes-256-cbc")
            .build());

        //# 2. Define the IPsec Crypto Profile (IKE Phase 2)
        // Note: The resource name is plural and nested blocks now use an equals sign (=).
        var exampleIpsecCryptoProfile = new IpsecCryptoProfile("exampleIpsecCryptoProfile", IpsecCryptoProfileArgs.builder()
            .name("PaloAlto-Networks-IPSec-Crypto")
            .folder("Remote Networks")
            .esp(IpsecCryptoProfileEspArgs.builder()
                .encryptions("aes-256-gcm")
                .authentications("sha256")
                .build())
            .dhGroup("group14")
            .lifetime(IpsecCryptoProfileLifetimeArgs.builder()
                .hours(8)
                .build())
            .build());

        //# 3. Define the IKE Gateway
        // Note: The resource name is plural and nested blocks now use an equals sign (=).
        var exampleIkeGateway = new IkeGateway("exampleIkeGateway", IkeGatewayArgs.builder()
            .name("example-gateway")
            .folder("Remote Networks")
            .peerAddress(IkeGatewayPeerAddressArgs.builder()
                .ip("1.1.1.1")
                .build())
            .authentication(IkeGatewayAuthenticationArgs.builder()
                .preSharedKey(IkeGatewayAuthenticationPreSharedKeyArgs.builder()
                    .key("secret")
                    .build())
                .build())
            .protocol(IkeGatewayProtocolArgs.builder()
                .ikev1(IkeGatewayProtocolIkev1Args.builder()
                    .ikeCryptoProfile(example.name())
                    .build())
                .build())
            .build());

        //# 4. Define the IPsec Tunnel
        // Note: Nested 'auto_key' block uses an equals sign (=).
        var exampleIpsecTunnel = new IpsecTunnel("exampleIpsecTunnel", IpsecTunnelArgs.builder()
            .name("example-tunnel")
            .folder("Remote Networks")
            .tunnelInterface("tunnel")
            .antiReplay(true)
            .copyTos(false)
            .enableGreEncapsulation(false)
            .autoKey(IpsecTunnelAutoKeyArgs.builder()
                .ikeGateways(IpsecTunnelAutoKeyIkeGatewayArgs.builder()
                    .name(exampleIkeGateway.name())
                    .build())
                .ipsecCryptoProfile(exampleIpsecCryptoProfile.name())
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleIkeGateway)
                .build());

    }
}

resources:
  ## 1. Define the IKE Crypto Profile (IKE Phase 1)
  # Note: The resource name is plural: "scm_ike_crypto_profile"
  example:
    type: scm:IkeCryptoProfile
    properties:
      name: example-ike-crypto
      folder: Remote Networks
      hashes:
        - sha256
      dhGroups:
        - group14
      encryptions:
        - aes-256-cbc
  ## 2. Define the IPsec Crypto Profile (IKE Phase 2)
  # Note: The resource name is plural and nested blocks now use an equals sign (=).
  exampleIpsecCryptoProfile:
    type: scm:IpsecCryptoProfile
    name: example
    properties:
      name: PaloAlto-Networks-IPSec-Crypto
      folder: Remote Networks
      esp:
        encryptions:
          - aes-256-gcm
        authentications:
          - sha256
      dhGroup: group14
      lifetime:
        hours: 8
  ## 3. Define the IKE Gateway
  # Note: The resource name is plural and nested blocks now use an equals sign (=).
  exampleIkeGateway:
    type: scm:IkeGateway
    name: example
    properties:
      name: example-gateway
      folder: Remote Networks
      peerAddress:
        ip: 1.1.1.1
      authentication:
        preSharedKey:
          key: secret
      protocol:
        ikev1:
          ikeCryptoProfile: ${example.name}
  ## 4. Define the IPsec Tunnel
  # Note: Nested 'auto_key' block uses an equals sign (=).
  exampleIpsecTunnel:
    type: scm:IpsecTunnel
    name: example
    properties:
      name: example-tunnel
      folder: Remote Networks
      tunnelInterface: tunnel
      antiReplay: true
      copyTos: false
      enableGreEncapsulation: false
      autoKey:
        ikeGateways:
          - name: ${exampleIkeGateway.name}
        ipsecCryptoProfile: ${exampleIpsecCryptoProfile.name}
    options:
      dependsOn:
        - ${exampleIkeGateway}

Create IpsecTunnel Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new IpsecTunnel(name: string, args: IpsecTunnelArgs, opts?: CustomResourceOptions);

@overload
def IpsecTunnel(resource_name: str,
                args: IpsecTunnelArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def IpsecTunnel(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                auto_key: Optional[IpsecTunnelAutoKeyArgs] = None,
                anti_replay: Optional[bool] = None,
                copy_tos: Optional[bool] = None,
                device: Optional[str] = None,
                enable_gre_encapsulation: Optional[bool] = None,
                folder: Optional[str] = None,
                name: Optional[str] = None,
                snippet: Optional[str] = None,
                tunnel_interface: Optional[str] = None,
                tunnel_monitor: Optional[IpsecTunnelTunnelMonitorArgs] = None)

func NewIpsecTunnel(ctx *Context, name string, args IpsecTunnelArgs, opts ...ResourceOption) (*IpsecTunnel, error)

public IpsecTunnel(string name, IpsecTunnelArgs args, CustomResourceOptions? opts = null)

public IpsecTunnel(String name, IpsecTunnelArgs args)
public IpsecTunnel(String name, IpsecTunnelArgs args, CustomResourceOptions options)

type: scm:IpsecTunnel
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args IpsecTunnelArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args IpsecTunnelArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args IpsecTunnelArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args IpsecTunnelArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args IpsecTunnelArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var ipsecTunnelResource = new Scm.IpsecTunnel("ipsecTunnelResource", new()
{
    AutoKey = new Scm.Inputs.IpsecTunnelAutoKeyArgs
    {
        IkeGateways = new[]
        {
            new Scm.Inputs.IpsecTunnelAutoKeyIkeGatewayArgs
            {
                Name = "string",
            },
        },
        IpsecCryptoProfile = "string",
        ProxyIdV6s = new[]
        {
            new Scm.Inputs.IpsecTunnelAutoKeyProxyIdV6Args
            {
                Name = "string",
                Local = "string",
                Protocol = new Scm.Inputs.IpsecTunnelAutoKeyProxyIdV6ProtocolArgs
                {
                    Number = 0,
                    Tcp = new Scm.Inputs.IpsecTunnelAutoKeyProxyIdV6ProtocolTcpArgs
                    {
                        LocalPort = 0,
                        RemotePort = 0,
                    },
                    Udp = new Scm.Inputs.IpsecTunnelAutoKeyProxyIdV6ProtocolUdpArgs
                    {
                        LocalPort = 0,
                        RemotePort = 0,
                    },
                },
                Remote = "string",
            },
        },
        ProxyIds = new[]
        {
            new Scm.Inputs.IpsecTunnelAutoKeyProxyIdArgs
            {
                Name = "string",
                Local = "string",
                Protocol = new Scm.Inputs.IpsecTunnelAutoKeyProxyIdProtocolArgs
                {
                    Number = 0,
                    Tcp = new Scm.Inputs.IpsecTunnelAutoKeyProxyIdProtocolTcpArgs
                    {
                        LocalPort = 0,
                        RemotePort = 0,
                    },
                    Udp = new Scm.Inputs.IpsecTunnelAutoKeyProxyIdProtocolUdpArgs
                    {
                        LocalPort = 0,
                        RemotePort = 0,
                    },
                },
                Remote = "string",
            },
        },
    },
    AntiReplay = false,
    CopyTos = false,
    Device = "string",
    EnableGreEncapsulation = false,
    Folder = "string",
    Name = "string",
    Snippet = "string",
    TunnelInterface = "string",
    TunnelMonitor = new Scm.Inputs.IpsecTunnelTunnelMonitorArgs
    {
        DestinationIp = "string",
        Enable = false,
        ProxyId = "string",
    },
});

example, err := scm.NewIpsecTunnel(ctx, "ipsecTunnelResource", &scm.IpsecTunnelArgs{
	AutoKey: &scm.IpsecTunnelAutoKeyArgs{
		IkeGateways: scm.IpsecTunnelAutoKeyIkeGatewayArray{
			&scm.IpsecTunnelAutoKeyIkeGatewayArgs{
				Name: pulumi.String("string"),
			},
		},
		IpsecCryptoProfile: pulumi.String("string"),
		ProxyIdV6s: scm.IpsecTunnelAutoKeyProxyIdV6Array{
			&scm.IpsecTunnelAutoKeyProxyIdV6Args{
				Name:  pulumi.String("string"),
				Local: pulumi.String("string"),
				Protocol: &scm.IpsecTunnelAutoKeyProxyIdV6ProtocolArgs{
					Number: pulumi.Int(0),
					Tcp: &scm.IpsecTunnelAutoKeyProxyIdV6ProtocolTcpArgs{
						LocalPort:  pulumi.Int(0),
						RemotePort: pulumi.Int(0),
					},
					Udp: &scm.IpsecTunnelAutoKeyProxyIdV6ProtocolUdpArgs{
						LocalPort:  pulumi.Int(0),
						RemotePort: pulumi.Int(0),
					},
				},
				Remote: pulumi.String("string"),
			},
		},
		ProxyIds: scm.IpsecTunnelAutoKeyProxyIdArray{
			&scm.IpsecTunnelAutoKeyProxyIdArgs{
				Name:  pulumi.String("string"),
				Local: pulumi.String("string"),
				Protocol: &scm.IpsecTunnelAutoKeyProxyIdProtocolArgs{
					Number: pulumi.Int(0),
					Tcp: &scm.IpsecTunnelAutoKeyProxyIdProtocolTcpArgs{
						LocalPort:  pulumi.Int(0),
						RemotePort: pulumi.Int(0),
					},
					Udp: &scm.IpsecTunnelAutoKeyProxyIdProtocolUdpArgs{
						LocalPort:  pulumi.Int(0),
						RemotePort: pulumi.Int(0),
					},
				},
				Remote: pulumi.String("string"),
			},
		},
	},
	AntiReplay:             pulumi.Bool(false),
	CopyTos:                pulumi.Bool(false),
	Device:                 pulumi.String("string"),
	EnableGreEncapsulation: pulumi.Bool(false),
	Folder:                 pulumi.String("string"),
	Name:                   pulumi.String("string"),
	Snippet:                pulumi.String("string"),
	TunnelInterface:        pulumi.String("string"),
	TunnelMonitor: &scm.IpsecTunnelTunnelMonitorArgs{
		DestinationIp: pulumi.String("string"),
		Enable:        pulumi.Bool(false),
		ProxyId:       pulumi.String("string"),
	},
})

var ipsecTunnelResource = new IpsecTunnel("ipsecTunnelResource", IpsecTunnelArgs.builder()
    .autoKey(IpsecTunnelAutoKeyArgs.builder()
        .ikeGateways(IpsecTunnelAutoKeyIkeGatewayArgs.builder()
            .name("string")
            .build())
        .ipsecCryptoProfile("string")
        .proxyIdV6s(IpsecTunnelAutoKeyProxyIdV6Args.builder()
            .name("string")
            .local("string")
            .protocol(IpsecTunnelAutoKeyProxyIdV6ProtocolArgs.builder()
                .number(0)
                .tcp(IpsecTunnelAutoKeyProxyIdV6ProtocolTcpArgs.builder()
                    .localPort(0)
                    .remotePort(0)
                    .build())
                .udp(IpsecTunnelAutoKeyProxyIdV6ProtocolUdpArgs.builder()
                    .localPort(0)
                    .remotePort(0)
                    .build())
                .build())
            .remote("string")
            .build())
        .proxyIds(IpsecTunnelAutoKeyProxyIdArgs.builder()
            .name("string")
            .local("string")
            .protocol(IpsecTunnelAutoKeyProxyIdProtocolArgs.builder()
                .number(0)
                .tcp(IpsecTunnelAutoKeyProxyIdProtocolTcpArgs.builder()
                    .localPort(0)
                    .remotePort(0)
                    .build())
                .udp(IpsecTunnelAutoKeyProxyIdProtocolUdpArgs.builder()
                    .localPort(0)
                    .remotePort(0)
                    .build())
                .build())
            .remote("string")
            .build())
        .build())
    .antiReplay(false)
    .copyTos(false)
    .device("string")
    .enableGreEncapsulation(false)
    .folder("string")
    .name("string")
    .snippet("string")
    .tunnelInterface("string")
    .tunnelMonitor(IpsecTunnelTunnelMonitorArgs.builder()
        .destinationIp("string")
        .enable(false)
        .proxyId("string")
        .build())
    .build());

ipsec_tunnel_resource = scm.IpsecTunnel("ipsecTunnelResource",
    auto_key={
        "ike_gateways": [{
            "name": "string",
        }],
        "ipsec_crypto_profile": "string",
        "proxy_id_v6s": [{
            "name": "string",
            "local": "string",
            "protocol": {
                "number": 0,
                "tcp": {
                    "local_port": 0,
                    "remote_port": 0,
                },
                "udp": {
                    "local_port": 0,
                    "remote_port": 0,
                },
            },
            "remote": "string",
        }],
        "proxy_ids": [{
            "name": "string",
            "local": "string",
            "protocol": {
                "number": 0,
                "tcp": {
                    "local_port": 0,
                    "remote_port": 0,
                },
                "udp": {
                    "local_port": 0,
                    "remote_port": 0,
                },
            },
            "remote": "string",
        }],
    },
    anti_replay=False,
    copy_tos=False,
    device="string",
    enable_gre_encapsulation=False,
    folder="string",
    name="string",
    snippet="string",
    tunnel_interface="string",
    tunnel_monitor={
        "destination_ip": "string",
        "enable": False,
        "proxy_id": "string",
    })

const ipsecTunnelResource = new scm.IpsecTunnel("ipsecTunnelResource", {
    autoKey: {
        ikeGateways: [{
            name: "string",
        }],
        ipsecCryptoProfile: "string",
        proxyIdV6s: [{
            name: "string",
            local: "string",
            protocol: {
                number: 0,
                tcp: {
                    localPort: 0,
                    remotePort: 0,
                },
                udp: {
                    localPort: 0,
                    remotePort: 0,
                },
            },
            remote: "string",
        }],
        proxyIds: [{
            name: "string",
            local: "string",
            protocol: {
                number: 0,
                tcp: {
                    localPort: 0,
                    remotePort: 0,
                },
                udp: {
                    localPort: 0,
                    remotePort: 0,
                },
            },
            remote: "string",
        }],
    },
    antiReplay: false,
    copyTos: false,
    device: "string",
    enableGreEncapsulation: false,
    folder: "string",
    name: "string",
    snippet: "string",
    tunnelInterface: "string",
    tunnelMonitor: {
        destinationIp: "string",
        enable: false,
        proxyId: "string",
    },
});

type: scm:IpsecTunnel
properties:
    antiReplay: false
    autoKey:
        ikeGateways:
            - name: string
        ipsecCryptoProfile: string
        proxyIdV6s:
            - local: string
              name: string
              protocol:
                number: 0
                tcp:
                    localPort: 0
                    remotePort: 0
                udp:
                    localPort: 0
                    remotePort: 0
              remote: string
        proxyIds:
            - local: string
              name: string
              protocol:
                number: 0
                tcp:
                    localPort: 0
                    remotePort: 0
                udp:
                    localPort: 0
                    remotePort: 0
              remote: string
    copyTos: false
    device: string
    enableGreEncapsulation: false
    folder: string
    name: string
    snippet: string
    tunnelInterface: string
    tunnelMonitor:
        destinationIp: string
        enable: false
        proxyId: string

IpsecTunnel Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The IpsecTunnel resource accepts the following input properties:

AutoKey IpsecTunnelAutoKey: Auto key
AntiReplay bool: Enable Anti-Replay check on this tunnel
CopyTos bool: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
Device string: The device in which the resource is defined
EnableGreEncapsulation bool: allow GRE over IPSec
Folder string: The folder in which the resource is defined
Name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
Snippet string: The snippet in which the resource is defined
TunnelInterface string: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
TunnelMonitor IpsecTunnelTunnelMonitor: Tunnel monitor

AutoKey IpsecTunnelAutoKeyArgs: Auto key
AntiReplay bool: Enable Anti-Replay check on this tunnel
CopyTos bool: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
Device string: The device in which the resource is defined
EnableGreEncapsulation bool: allow GRE over IPSec
Folder string: The folder in which the resource is defined
Name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
Snippet string: The snippet in which the resource is defined
TunnelInterface string: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
TunnelMonitor IpsecTunnelTunnelMonitorArgs: Tunnel monitor

autoKey IpsecTunnelAutoKey: Auto key
antiReplay Boolean: Enable Anti-Replay check on this tunnel
copyTos Boolean: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
device String: The device in which the resource is defined
enableGreEncapsulation Boolean: allow GRE over IPSec
folder String: The folder in which the resource is defined
name String: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
snippet String: The snippet in which the resource is defined
tunnelInterface String: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
tunnelMonitor IpsecTunnelTunnelMonitor: Tunnel monitor

autoKey IpsecTunnelAutoKey: Auto key
antiReplay boolean: Enable Anti-Replay check on this tunnel
copyTos boolean: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
device string: The device in which the resource is defined
enableGreEncapsulation boolean: allow GRE over IPSec
folder string: The folder in which the resource is defined
name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
snippet string: The snippet in which the resource is defined
tunnelInterface string: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
tunnelMonitor IpsecTunnelTunnelMonitor: Tunnel monitor

auto_key IpsecTunnelAutoKeyArgs: Auto key
anti_replay bool: Enable Anti-Replay check on this tunnel
copy_tos bool: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
device str: The device in which the resource is defined
enable_gre_encapsulation bool: allow GRE over IPSec
folder str: The folder in which the resource is defined
name str: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
snippet str: The snippet in which the resource is defined
tunnel_interface str: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
tunnel_monitor IpsecTunnelTunnelMonitorArgs: Tunnel monitor

autoKey Property Map: Auto key
antiReplay Boolean: Enable Anti-Replay check on this tunnel
copyTos Boolean: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
device String: The device in which the resource is defined
enableGreEncapsulation Boolean: allow GRE over IPSec
folder String: The folder in which the resource is defined
name String: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
snippet String: The snippet in which the resource is defined
tunnelInterface String: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
tunnelMonitor Property Map: Tunnel monitor

Outputs

All input properties are implicitly available as output properties. Additionally, the IpsecTunnel resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
Tfid string

Id string: The provider-assigned unique ID for this managed resource.
Tfid string

id String: The provider-assigned unique ID for this managed resource.
tfid String

id string: The provider-assigned unique ID for this managed resource.
tfid string

id str: The provider-assigned unique ID for this managed resource.
tfid str

id String: The provider-assigned unique ID for this managed resource.
tfid String

Look up Existing IpsecTunnel Resource

Get an existing IpsecTunnel resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: IpsecTunnelState, opts?: CustomResourceOptions): IpsecTunnel

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        anti_replay: Optional[bool] = None,
        auto_key: Optional[IpsecTunnelAutoKeyArgs] = None,
        copy_tos: Optional[bool] = None,
        device: Optional[str] = None,
        enable_gre_encapsulation: Optional[bool] = None,
        folder: Optional[str] = None,
        name: Optional[str] = None,
        snippet: Optional[str] = None,
        tfid: Optional[str] = None,
        tunnel_interface: Optional[str] = None,
        tunnel_monitor: Optional[IpsecTunnelTunnelMonitorArgs] = None) -> IpsecTunnel

func GetIpsecTunnel(ctx *Context, name string, id IDInput, state *IpsecTunnelState, opts ...ResourceOption) (*IpsecTunnel, error)

public static IpsecTunnel Get(string name, Input<string> id, IpsecTunnelState? state, CustomResourceOptions? opts = null)

public static IpsecTunnel get(String name, Output<String> id, IpsecTunnelState state, CustomResourceOptions options)

resources:  _:    type: scm:IpsecTunnel    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AntiReplay bool: Enable Anti-Replay check on this tunnel
AutoKey IpsecTunnelAutoKey: Auto key
CopyTos bool: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
Device string: The device in which the resource is defined
EnableGreEncapsulation bool: allow GRE over IPSec
Folder string: The folder in which the resource is defined
Name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
Snippet string: The snippet in which the resource is defined
Tfid string
TunnelInterface string: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
TunnelMonitor IpsecTunnelTunnelMonitor: Tunnel monitor

AntiReplay bool: Enable Anti-Replay check on this tunnel
AutoKey IpsecTunnelAutoKeyArgs: Auto key
CopyTos bool: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
Device string: The device in which the resource is defined
EnableGreEncapsulation bool: allow GRE over IPSec
Folder string: The folder in which the resource is defined
Name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
Snippet string: The snippet in which the resource is defined
Tfid string
TunnelInterface string: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
TunnelMonitor IpsecTunnelTunnelMonitorArgs: Tunnel monitor

antiReplay Boolean: Enable Anti-Replay check on this tunnel
autoKey IpsecTunnelAutoKey: Auto key
copyTos Boolean: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
device String: The device in which the resource is defined
enableGreEncapsulation Boolean: allow GRE over IPSec
folder String: The folder in which the resource is defined
name String: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
snippet String: The snippet in which the resource is defined
tfid String
tunnelInterface String: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
tunnelMonitor IpsecTunnelTunnelMonitor: Tunnel monitor

antiReplay boolean: Enable Anti-Replay check on this tunnel
autoKey IpsecTunnelAutoKey: Auto key
copyTos boolean: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
device string: The device in which the resource is defined
enableGreEncapsulation boolean: allow GRE over IPSec
folder string: The folder in which the resource is defined
name string: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
snippet string: The snippet in which the resource is defined
tfid string
tunnelInterface string: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
tunnelMonitor IpsecTunnelTunnelMonitor: Tunnel monitor

anti_replay bool: Enable Anti-Replay check on this tunnel
auto_key IpsecTunnelAutoKeyArgs: Auto key
copy_tos bool: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
device str: The device in which the resource is defined
enable_gre_encapsulation bool: allow GRE over IPSec
folder str: The folder in which the resource is defined
name str: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
snippet str: The snippet in which the resource is defined
tfid str
tunnel_interface str: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
tunnel_monitor IpsecTunnelTunnelMonitorArgs: Tunnel monitor

antiReplay Boolean: Enable Anti-Replay check on this tunnel
autoKey Property Map: Auto key
copyTos Boolean: Copy IP TOS bits from inner packet to IPSec packet (not recommended)
device String: The device in which the resource is defined
enableGreEncapsulation Boolean: allow GRE over IPSec
folder String: The folder in which the resource is defined
name String: Alphanumeric string begin with letter: [0-9a-zA-Z._-]
snippet String: The snippet in which the resource is defined
tfid String
tunnelInterface String: Tunnel interface variable or hardcoded tunnel. Default will be tunnels.
tunnelMonitor Property Map: Tunnel monitor

Supporting Types

IpsecTunnelAutoKey, IpsecTunnelAutoKeyArgs

IkeGateways List<IpsecTunnelAutoKeyIkeGateway>: Ike gateway
IpsecCryptoProfile string: Ipsec crypto profile
ProxyIdV6s List<IpsecTunnelAutoKeyProxyIdV6>: IPv6 type of proxy*id values
ProxyIds List<IpsecTunnelAutoKeyProxyId>: IPv4 type of proxy*id values

IkeGateways []IpsecTunnelAutoKeyIkeGateway: Ike gateway
IpsecCryptoProfile string: Ipsec crypto profile
ProxyIdV6s []IpsecTunnelAutoKeyProxyIdV6: IPv6 type of proxy*id values
ProxyIds []IpsecTunnelAutoKeyProxyId: IPv4 type of proxy*id values

ikeGateways List<IpsecTunnelAutoKeyIkeGateway>: Ike gateway
ipsecCryptoProfile String: Ipsec crypto profile
proxyIdV6s List<IpsecTunnelAutoKeyProxyIdV6>: IPv6 type of proxy*id values
proxyIds List<IpsecTunnelAutoKeyProxyId>: IPv4 type of proxy*id values

ikeGateways IpsecTunnelAutoKeyIkeGateway[]: Ike gateway
ipsecCryptoProfile string: Ipsec crypto profile
proxyIdV6s IpsecTunnelAutoKeyProxyIdV6[]: IPv6 type of proxy*id values
proxyIds IpsecTunnelAutoKeyProxyId[]: IPv4 type of proxy*id values

ike_gateways Sequence[IpsecTunnelAutoKeyIkeGateway]: Ike gateway
ipsec_crypto_profile str: Ipsec crypto profile
proxy_id_v6s Sequence[IpsecTunnelAutoKeyProxyIdV6]: IPv6 type of proxy*id values
proxy_ids Sequence[IpsecTunnelAutoKeyProxyId]: IPv4 type of proxy*id values

ikeGateways List<Property Map>: Ike gateway
ipsecCryptoProfile String: Ipsec crypto profile
proxyIdV6s List<Property Map>: IPv6 type of proxy*id values
proxyIds List<Property Map>: IPv4 type of proxy*id values

IpsecTunnelAutoKeyIkeGateway, IpsecTunnelAutoKeyIkeGatewayArgs

Name string: Name

Name string: Name

name String: Name

name string: Name

name str: Name

name String: Name

IpsecTunnelAutoKeyProxyId, IpsecTunnelAutoKeyProxyIdArgs

Name string: Name
Local string: Local
Protocol IpsecTunnelAutoKeyProxyIdProtocol: IPv4 type of proxy*id protocol values for TCP protocol
Remote string: Remote

Name string: Name
Local string: Local
Protocol IpsecTunnelAutoKeyProxyIdProtocol: IPv4 type of proxy*id protocol values for TCP protocol
Remote string: Remote

name String: Name
local String: Local
protocol IpsecTunnelAutoKeyProxyIdProtocol: IPv4 type of proxy*id protocol values for TCP protocol
remote String: Remote

name string: Name
local string: Local
protocol IpsecTunnelAutoKeyProxyIdProtocol: IPv4 type of proxy*id protocol values for TCP protocol
remote string: Remote

name str: Name
local str: Local
protocol IpsecTunnelAutoKeyProxyIdProtocol: IPv4 type of proxy*id protocol values for TCP protocol
remote str: Remote

name String: Name
local String: Local
protocol Property Map: IPv4 type of proxy*id protocol values for TCP protocol
remote String: Remote

IpsecTunnelAutoKeyProxyIdProtocol, IpsecTunnelAutoKeyProxyIdProtocolArgs

Number int: IP protocol number
Tcp IpsecTunnelAutoKeyProxyIdProtocolTcp: IPv4 type of proxy*id protocol values for TCP protocol
Udp IpsecTunnelAutoKeyProxyIdProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

Number int: IP protocol number
Tcp IpsecTunnelAutoKeyProxyIdProtocolTcp: IPv4 type of proxy*id protocol values for TCP protocol
Udp IpsecTunnelAutoKeyProxyIdProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

number Integer: IP protocol number
tcp IpsecTunnelAutoKeyProxyIdProtocolTcp: IPv4 type of proxy*id protocol values for TCP protocol
udp IpsecTunnelAutoKeyProxyIdProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

number number: IP protocol number
tcp IpsecTunnelAutoKeyProxyIdProtocolTcp: IPv4 type of proxy*id protocol values for TCP protocol
udp IpsecTunnelAutoKeyProxyIdProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

number int: IP protocol number
tcp IpsecTunnelAutoKeyProxyIdProtocolTcp: IPv4 type of proxy*id protocol values for TCP protocol
udp IpsecTunnelAutoKeyProxyIdProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

number Number: IP protocol number
tcp Property Map: IPv4 type of proxy*id protocol values for TCP protocol
udp Property Map: IPv6 type of proxy*id protocol values for UDP protocol

IpsecTunnelAutoKeyProxyIdProtocolTcp, IpsecTunnelAutoKeyProxyIdProtocolTcpArgs

LocalPort int: Local port
RemotePort int: Remote port

LocalPort int: Local port
RemotePort int: Remote port

localPort Integer: Local port
remotePort Integer: Remote port

localPort number: Local port
remotePort number: Remote port

local_port int: Local port
remote_port int: Remote port

localPort Number: Local port
remotePort Number: Remote port

IpsecTunnelAutoKeyProxyIdProtocolUdp, IpsecTunnelAutoKeyProxyIdProtocolUdpArgs

LocalPort int: Local port
RemotePort int: Remote port

LocalPort int: Local port
RemotePort int: Remote port

localPort Integer: Local port
remotePort Integer: Remote port

localPort number: Local port
remotePort number: Remote port

local_port int: Local port
remote_port int: Remote port

localPort Number: Local port
remotePort Number: Remote port

IpsecTunnelAutoKeyProxyIdV6, IpsecTunnelAutoKeyProxyIdV6Args

Name string: Name
Local string: Local
Protocol IpsecTunnelAutoKeyProxyIdV6Protocol: IPv6 type of proxy*id protocol values for protocol
Remote string: Remote

Name string: Name
Local string: Local
Protocol IpsecTunnelAutoKeyProxyIdV6Protocol: IPv6 type of proxy*id protocol values for protocol
Remote string: Remote

name String: Name
local String: Local
protocol IpsecTunnelAutoKeyProxyIdV6Protocol: IPv6 type of proxy*id protocol values for protocol
remote String: Remote

name string: Name
local string: Local
protocol IpsecTunnelAutoKeyProxyIdV6Protocol: IPv6 type of proxy*id protocol values for protocol
remote string: Remote

name str: Name
local str: Local
protocol IpsecTunnelAutoKeyProxyIdV6Protocol: IPv6 type of proxy*id protocol values for protocol
remote str: Remote

name String: Name
local String: Local
protocol Property Map: IPv6 type of proxy*id protocol values for protocol
remote String: Remote

IpsecTunnelAutoKeyProxyIdV6Protocol, IpsecTunnelAutoKeyProxyIdV6ProtocolArgs

Number int: IP protocol number
Tcp IpsecTunnelAutoKeyProxyIdV6ProtocolTcp: IPv6 type of proxy*id protocol values for TCP protocol
Udp IpsecTunnelAutoKeyProxyIdV6ProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

Number int: IP protocol number
Tcp IpsecTunnelAutoKeyProxyIdV6ProtocolTcp: IPv6 type of proxy*id protocol values for TCP protocol
Udp IpsecTunnelAutoKeyProxyIdV6ProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

number Integer: IP protocol number
tcp IpsecTunnelAutoKeyProxyIdV6ProtocolTcp: IPv6 type of proxy*id protocol values for TCP protocol
udp IpsecTunnelAutoKeyProxyIdV6ProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

number number: IP protocol number
tcp IpsecTunnelAutoKeyProxyIdV6ProtocolTcp: IPv6 type of proxy*id protocol values for TCP protocol
udp IpsecTunnelAutoKeyProxyIdV6ProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

number int: IP protocol number
tcp IpsecTunnelAutoKeyProxyIdV6ProtocolTcp: IPv6 type of proxy*id protocol values for TCP protocol
udp IpsecTunnelAutoKeyProxyIdV6ProtocolUdp: IPv6 type of proxy*id protocol values for UDP protocol

number Number: IP protocol number
tcp Property Map: IPv6 type of proxy*id protocol values for TCP protocol
udp Property Map: IPv6 type of proxy*id protocol values for UDP protocol

IpsecTunnelAutoKeyProxyIdV6ProtocolTcp, IpsecTunnelAutoKeyProxyIdV6ProtocolTcpArgs

LocalPort int: Local port
RemotePort int: Remote port

LocalPort int: Local port
RemotePort int: Remote port

localPort Integer: Local port
remotePort Integer: Remote port

localPort number: Local port
remotePort number: Remote port

local_port int: Local port
remote_port int: Remote port

localPort Number: Local port
remotePort Number: Remote port

IpsecTunnelAutoKeyProxyIdV6ProtocolUdp, IpsecTunnelAutoKeyProxyIdV6ProtocolUdpArgs

LocalPort int: Local port
RemotePort int: Remote port

LocalPort int: Local port
RemotePort int: Remote port

localPort Integer: Local port
remotePort Integer: Remote port

localPort number: Local port
remotePort number: Remote port

local_port int: Local port
remote_port int: Remote port

localPort Number: Local port
remotePort Number: Remote port

IpsecTunnelTunnelMonitor, IpsecTunnelTunnelMonitorArgs

DestinationIp string: Destination IP to send ICMP probe
Enable bool: Enable tunnel monitoring on this tunnel
ProxyId string: Which proxy-id (or proxy-id-v6) the monitoring traffic will use

DestinationIp string: Destination IP to send ICMP probe
Enable bool: Enable tunnel monitoring on this tunnel
ProxyId string: Which proxy-id (or proxy-id-v6) the monitoring traffic will use

destinationIp String: Destination IP to send ICMP probe
enable Boolean: Enable tunnel monitoring on this tunnel
proxyId String: Which proxy-id (or proxy-id-v6) the monitoring traffic will use

destinationIp string: Destination IP to send ICMP probe
enable boolean: Enable tunnel monitoring on this tunnel
proxyId string: Which proxy-id (or proxy-id-v6) the monitoring traffic will use

destination_ip str: Destination IP to send ICMP probe
enable bool: Enable tunnel monitoring on this tunnel
proxy_id str: Which proxy-id (or proxy-id-v6) the monitoring traffic will use

destinationIp String: Destination IP to send ICMP probe
enable Boolean: Enable tunnel monitoring on this tunnel
proxyId String: Which proxy-id (or proxy-id-v6) the monitoring traffic will use

Package Details

Repository: scm pulumi/pulumi-scm
License: Apache-2.0
Notes: This Pulumi package is based on the scm Terraform Provider.

Strata Cloud Manager v0.4.3 published on Saturday, Nov 8, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-scm

scm.IpsecTunnel

On this page

On this page

Example Usage

Create IpsecTunnel Resource

Constructor syntax

Parameters

Constructor example

IpsecTunnel Resource Properties

Inputs

Outputs

Look up Existing IpsecTunnel Resource

Supporting Types

IpsecTunnelAutoKey, IpsecTunnelAutoKeyArgs

IpsecTunnelAutoKeyIkeGateway, IpsecTunnelAutoKeyIkeGatewayArgs

IpsecTunnelAutoKeyProxyId, IpsecTunnelAutoKeyProxyIdArgs

IpsecTunnelAutoKeyProxyIdProtocol, IpsecTunnelAutoKeyProxyIdProtocolArgs

IpsecTunnelAutoKeyProxyIdProtocolTcp, IpsecTunnelAutoKeyProxyIdProtocolTcpArgs

IpsecTunnelAutoKeyProxyIdProtocolUdp, IpsecTunnelAutoKeyProxyIdProtocolUdpArgs

IpsecTunnelAutoKeyProxyIdV6, IpsecTunnelAutoKeyProxyIdV6Args

IpsecTunnelAutoKeyProxyIdV6Protocol, IpsecTunnelAutoKeyProxyIdV6ProtocolArgs

IpsecTunnelAutoKeyProxyIdV6ProtocolTcp, IpsecTunnelAutoKeyProxyIdV6ProtocolTcpArgs

IpsecTunnelAutoKeyProxyIdV6ProtocolUdp, IpsecTunnelAutoKeyProxyIdV6ProtocolUdpArgs

IpsecTunnelTunnelMonitor, IpsecTunnelTunnelMonitorArgs

Package Details

On this page

On this page