published on Friday, Jun 26, 2026 by Pulumi
published on Friday, Jun 26, 2026 by Pulumi
This resource can manage a SSE Cisco Feature.
- Minimum SD-WAN Manager version:
20.15.0
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as sdwan from "@pulumi/sdwan";
const example = new sdwan.SseCiscoFeature("example", {
name: "Example",
description: "My Example",
featureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
contextSharingForVpn: false,
contextSharingForSgt: false,
interfaces: [{
interfaceName: "ipsec1",
tunnelSourceInterface: "GigabitEthernet8",
tunnelDcPreference: "primary-dc",
mtu: 1400,
ikeVersion: 2,
}],
interfacePairs: [{
activeInterface: "ipsec1",
activeInterfaceWeight: 1,
backupInterface: "None",
backupInterfaceWeight: 1,
}],
region: "us-east-1",
trackerSourceIp: "1.2.3.4",
trackers: [{
name: "tracker1",
endpointApiUrl: "http://cisco.com",
threshold: 300,
interval: 60,
multiplier: 3,
}],
});
import pulumi
import pulumi_sdwan as sdwan
example = sdwan.SseCiscoFeature("example",
name="Example",
description="My Example",
feature_profile_id="f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
context_sharing_for_vpn=False,
context_sharing_for_sgt=False,
interfaces=[{
"interface_name": "ipsec1",
"tunnel_source_interface": "GigabitEthernet8",
"tunnel_dc_preference": "primary-dc",
"mtu": 1400,
"ike_version": 2,
}],
interface_pairs=[{
"active_interface": "ipsec1",
"active_interface_weight": 1,
"backup_interface": "None",
"backup_interface_weight": 1,
}],
region="us-east-1",
tracker_source_ip="1.2.3.4",
trackers=[{
"name": "tracker1",
"endpoint_api_url": "http://cisco.com",
"threshold": 300,
"interval": 60,
"multiplier": 3,
}])
package main
import (
"github.com/pulumi/pulumi-sdwan/sdk/go/sdwan"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := sdwan.NewSseCiscoFeature(ctx, "example", &sdwan.SseCiscoFeatureArgs{
Name: pulumi.String("Example"),
Description: pulumi.String("My Example"),
FeatureProfileId: pulumi.String("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"),
ContextSharingForVpn: pulumi.Bool(false),
ContextSharingForSgt: pulumi.Bool(false),
Interfaces: sdwan.SseCiscoFeatureInterfaceArray{
&sdwan.SseCiscoFeatureInterfaceArgs{
InterfaceName: pulumi.String("ipsec1"),
TunnelSourceInterface: pulumi.String("GigabitEthernet8"),
TunnelDcPreference: pulumi.String("primary-dc"),
Mtu: pulumi.Int(1400),
IkeVersion: pulumi.Int(2),
},
},
InterfacePairs: sdwan.SseCiscoFeatureInterfacePairArray{
&sdwan.SseCiscoFeatureInterfacePairArgs{
ActiveInterface: pulumi.String("ipsec1"),
ActiveInterfaceWeight: pulumi.Int(1),
BackupInterface: pulumi.String("None"),
BackupInterfaceWeight: pulumi.Int(1),
},
},
Region: pulumi.String("us-east-1"),
TrackerSourceIp: pulumi.String("1.2.3.4"),
Trackers: sdwan.SseCiscoFeatureTrackerArray{
&sdwan.SseCiscoFeatureTrackerArgs{
Name: pulumi.String("tracker1"),
EndpointApiUrl: pulumi.String("http://cisco.com"),
Threshold: pulumi.Int(300),
Interval: pulumi.Int(60),
Multiplier: pulumi.Int(3),
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdwan = Pulumi.Sdwan;
return await Deployment.RunAsync(() =>
{
var example = new Sdwan.SseCiscoFeature("example", new()
{
Name = "Example",
Description = "My Example",
FeatureProfileId = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
ContextSharingForVpn = false,
ContextSharingForSgt = false,
Interfaces = new[]
{
new Sdwan.Inputs.SseCiscoFeatureInterfaceArgs
{
InterfaceName = "ipsec1",
TunnelSourceInterface = "GigabitEthernet8",
TunnelDcPreference = "primary-dc",
Mtu = 1400,
IkeVersion = 2,
},
},
InterfacePairs = new[]
{
new Sdwan.Inputs.SseCiscoFeatureInterfacePairArgs
{
ActiveInterface = "ipsec1",
ActiveInterfaceWeight = 1,
BackupInterface = "None",
BackupInterfaceWeight = 1,
},
},
Region = "us-east-1",
TrackerSourceIp = "1.2.3.4",
Trackers = new[]
{
new Sdwan.Inputs.SseCiscoFeatureTrackerArgs
{
Name = "tracker1",
EndpointApiUrl = "http://cisco.com",
Threshold = 300,
Interval = 60,
Multiplier = 3,
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.SseCiscoFeature;
import com.pulumi.sdwan.SseCiscoFeatureArgs;
import com.pulumi.sdwan.inputs.SseCiscoFeatureInterfaceArgs;
import com.pulumi.sdwan.inputs.SseCiscoFeatureInterfacePairArgs;
import com.pulumi.sdwan.inputs.SseCiscoFeatureTrackerArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new SseCiscoFeature("example", SseCiscoFeatureArgs.builder()
.name("Example")
.description("My Example")
.featureProfileId("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac")
.contextSharingForVpn(false)
.contextSharingForSgt(false)
.interfaces(SseCiscoFeatureInterfaceArgs.builder()
.interfaceName("ipsec1")
.tunnelSourceInterface("GigabitEthernet8")
.tunnelDcPreference("primary-dc")
.mtu(1400)
.ikeVersion(2)
.build())
.interfacePairs(SseCiscoFeatureInterfacePairArgs.builder()
.activeInterface("ipsec1")
.activeInterfaceWeight(1)
.backupInterface("None")
.backupInterfaceWeight(1)
.build())
.region("us-east-1")
.trackerSourceIp("1.2.3.4")
.trackers(SseCiscoFeatureTrackerArgs.builder()
.name("tracker1")
.endpointApiUrl("http://cisco.com")
.threshold(300)
.interval(60)
.multiplier(3)
.build())
.build());
}
}
resources:
example:
type: sdwan:SseCiscoFeature
properties:
name: Example
description: My Example
featureProfileId: f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac
contextSharingForVpn: false
contextSharingForSgt: false
interfaces:
- interfaceName: ipsec1
tunnelSourceInterface: GigabitEthernet8
tunnelDcPreference: primary-dc
mtu: 1400
ikeVersion: 2
interfacePairs:
- activeInterface: ipsec1
activeInterfaceWeight: 1
backupInterface: None
backupInterfaceWeight: 1
region: us-east-1
trackerSourceIp: 1.2.3.4
trackers:
- name: tracker1
endpointApiUrl: http://cisco.com
threshold: 300
interval: 60
multiplier: 3
pulumi {
required_providers {
sdwan = {
source = "pulumi/sdwan"
}
}
}
resource "sdwan_sseciscofeature" "example" {
name = "Example"
description = "My Example"
feature_profile_id = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"
context_sharing_for_vpn = false
context_sharing_for_sgt = false
interfaces {
interface_name = "ipsec1"
tunnel_source_interface = "GigabitEthernet8"
tunnel_dc_preference = "primary-dc"
mtu = 1400
ike_version = 2
}
interface_pairs {
active_interface = "ipsec1"
active_interface_weight = 1
backup_interface = "None"
backup_interface_weight = 1
}
region = "us-east-1"
tracker_source_ip = "1.2.3.4"
trackers {
name = "tracker1"
endpoint_api_url = "http://cisco.com"
threshold = 300
interval = 60
multiplier = 3
}
}
Create SseCiscoFeature Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new SseCiscoFeature(name: string, args: SseCiscoFeatureArgs, opts?: CustomResourceOptions);@overload
def SseCiscoFeature(resource_name: str,
args: SseCiscoFeatureArgs,
opts: Optional[ResourceOptions] = None)
@overload
def SseCiscoFeature(resource_name: str,
opts: Optional[ResourceOptions] = None,
feature_profile_id: Optional[str] = None,
interface_pairs: Optional[Sequence[SseCiscoFeatureInterfacePairArgs]] = None,
interfaces: Optional[Sequence[SseCiscoFeatureInterfaceArgs]] = None,
region: Optional[str] = None,
tracker_source_ip: Optional[str] = None,
context_sharing_for_sgt: Optional[bool] = None,
context_sharing_for_vpn: Optional[bool] = None,
description: Optional[str] = None,
name: Optional[str] = None,
region_variable: Optional[str] = None,
tracker_source_ip_variable: Optional[str] = None,
trackers: Optional[Sequence[SseCiscoFeatureTrackerArgs]] = None)func NewSseCiscoFeature(ctx *Context, name string, args SseCiscoFeatureArgs, opts ...ResourceOption) (*SseCiscoFeature, error)public SseCiscoFeature(string name, SseCiscoFeatureArgs args, CustomResourceOptions? opts = null)
public SseCiscoFeature(String name, SseCiscoFeatureArgs args)
public SseCiscoFeature(String name, SseCiscoFeatureArgs args, CustomResourceOptions options)
type: sdwan:SseCiscoFeature
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "sdwan_sseciscofeature" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args SseCiscoFeatureArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SseCiscoFeatureArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SseCiscoFeatureArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SseCiscoFeatureArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SseCiscoFeatureArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var sseCiscoFeatureResource = new Sdwan.SseCiscoFeature("sseCiscoFeatureResource", new()
{
FeatureProfileId = "string",
InterfacePairs = new[]
{
new Sdwan.Inputs.SseCiscoFeatureInterfacePairArgs
{
ActiveInterface = "string",
ActiveInterfaceWeight = 0,
BackupInterface = "string",
BackupInterfaceWeight = 0,
},
},
Interfaces = new[]
{
new Sdwan.Inputs.SseCiscoFeatureInterfaceArgs
{
DpdInterval = 0,
DpdIntervalVariable = "string",
DpdRetries = 0,
DpdRetriesVariable = "string",
IkeCiphersuite = "string",
IkeCiphersuiteVariable = "string",
IkeGroup = "string",
IkeGroupVariable = "string",
IkeRekeyInterval = 0,
IkeRekeyIntervalVariable = "string",
IkeVersion = 0,
IkeVersionVariable = "string",
InterfaceName = "string",
IpsecCiphersuite = "string",
IpsecCiphersuiteVariable = "string",
IpsecRekeyInterval = 0,
IpsecRekeyIntervalVariable = "string",
IpsecReplayWindow = 0,
IpsecReplayWindowVariable = "string",
Mtu = 0,
MtuVariable = "string",
PerfectForwardSecrecy = "string",
PerfectForwardSecrecyVariable = "string",
Shutdown = false,
ShutdownVariable = "string",
TcpMssAdjust = 0,
TcpMssAdjustVariable = "string",
TrackEnable = false,
TrackEnableVariable = "string",
Tracker = "string",
TunnelDcPreference = "string",
TunnelRouteVia = "string",
TunnelRouteViaVariable = "string",
TunnelSourceInterface = "string",
TunnelSourceInterfaceVariable = "string",
},
},
Region = "string",
TrackerSourceIp = "string",
ContextSharingForSgt = false,
ContextSharingForVpn = false,
Description = "string",
Name = "string",
RegionVariable = "string",
TrackerSourceIpVariable = "string",
Trackers = new[]
{
new Sdwan.Inputs.SseCiscoFeatureTrackerArgs
{
EndpointApiUrl = "string",
EndpointApiUrlVariable = "string",
Interval = 0,
IntervalVariable = "string",
Multiplier = 0,
MultiplierVariable = "string",
Name = "string",
Threshold = 0,
ThresholdVariable = "string",
},
},
});
example, err := sdwan.NewSseCiscoFeature(ctx, "sseCiscoFeatureResource", &sdwan.SseCiscoFeatureArgs{
FeatureProfileId: pulumi.String("string"),
InterfacePairs: sdwan.SseCiscoFeatureInterfacePairArray{
&sdwan.SseCiscoFeatureInterfacePairArgs{
ActiveInterface: pulumi.String("string"),
ActiveInterfaceWeight: pulumi.Int(0),
BackupInterface: pulumi.String("string"),
BackupInterfaceWeight: pulumi.Int(0),
},
},
Interfaces: sdwan.SseCiscoFeatureInterfaceArray{
&sdwan.SseCiscoFeatureInterfaceArgs{
DpdInterval: pulumi.Int(0),
DpdIntervalVariable: pulumi.String("string"),
DpdRetries: pulumi.Int(0),
DpdRetriesVariable: pulumi.String("string"),
IkeCiphersuite: pulumi.String("string"),
IkeCiphersuiteVariable: pulumi.String("string"),
IkeGroup: pulumi.String("string"),
IkeGroupVariable: pulumi.String("string"),
IkeRekeyInterval: pulumi.Int(0),
IkeRekeyIntervalVariable: pulumi.String("string"),
IkeVersion: pulumi.Int(0),
IkeVersionVariable: pulumi.String("string"),
InterfaceName: pulumi.String("string"),
IpsecCiphersuite: pulumi.String("string"),
IpsecCiphersuiteVariable: pulumi.String("string"),
IpsecRekeyInterval: pulumi.Int(0),
IpsecRekeyIntervalVariable: pulumi.String("string"),
IpsecReplayWindow: pulumi.Int(0),
IpsecReplayWindowVariable: pulumi.String("string"),
Mtu: pulumi.Int(0),
MtuVariable: pulumi.String("string"),
PerfectForwardSecrecy: pulumi.String("string"),
PerfectForwardSecrecyVariable: pulumi.String("string"),
Shutdown: pulumi.Bool(false),
ShutdownVariable: pulumi.String("string"),
TcpMssAdjust: pulumi.Int(0),
TcpMssAdjustVariable: pulumi.String("string"),
TrackEnable: pulumi.Bool(false),
TrackEnableVariable: pulumi.String("string"),
Tracker: pulumi.String("string"),
TunnelDcPreference: pulumi.String("string"),
TunnelRouteVia: pulumi.String("string"),
TunnelRouteViaVariable: pulumi.String("string"),
TunnelSourceInterface: pulumi.String("string"),
TunnelSourceInterfaceVariable: pulumi.String("string"),
},
},
Region: pulumi.String("string"),
TrackerSourceIp: pulumi.String("string"),
ContextSharingForSgt: pulumi.Bool(false),
ContextSharingForVpn: pulumi.Bool(false),
Description: pulumi.String("string"),
Name: pulumi.String("string"),
RegionVariable: pulumi.String("string"),
TrackerSourceIpVariable: pulumi.String("string"),
Trackers: sdwan.SseCiscoFeatureTrackerArray{
&sdwan.SseCiscoFeatureTrackerArgs{
EndpointApiUrl: pulumi.String("string"),
EndpointApiUrlVariable: pulumi.String("string"),
Interval: pulumi.Int(0),
IntervalVariable: pulumi.String("string"),
Multiplier: pulumi.Int(0),
MultiplierVariable: pulumi.String("string"),
Name: pulumi.String("string"),
Threshold: pulumi.Int(0),
ThresholdVariable: pulumi.String("string"),
},
},
})
resource "sdwan_sseciscofeature" "sseCiscoFeatureResource" {
feature_profile_id = "string"
interface_pairs {
active_interface = "string"
active_interface_weight = 0
backup_interface = "string"
backup_interface_weight = 0
}
interfaces {
dpd_interval = 0
dpd_interval_variable = "string"
dpd_retries = 0
dpd_retries_variable = "string"
ike_ciphersuite = "string"
ike_ciphersuite_variable = "string"
ike_group = "string"
ike_group_variable = "string"
ike_rekey_interval = 0
ike_rekey_interval_variable = "string"
ike_version = 0
ike_version_variable = "string"
interface_name = "string"
ipsec_ciphersuite = "string"
ipsec_ciphersuite_variable = "string"
ipsec_rekey_interval = 0
ipsec_rekey_interval_variable = "string"
ipsec_replay_window = 0
ipsec_replay_window_variable = "string"
mtu = 0
mtu_variable = "string"
perfect_forward_secrecy = "string"
perfect_forward_secrecy_variable = "string"
shutdown = false
shutdown_variable = "string"
tcp_mss_adjust = 0
tcp_mss_adjust_variable = "string"
track_enable = false
track_enable_variable = "string"
tracker = "string"
tunnel_dc_preference = "string"
tunnel_route_via = "string"
tunnel_route_via_variable = "string"
tunnel_source_interface = "string"
tunnel_source_interface_variable = "string"
}
region = "string"
tracker_source_ip = "string"
context_sharing_for_sgt = false
context_sharing_for_vpn = false
description = "string"
name = "string"
region_variable = "string"
tracker_source_ip_variable = "string"
trackers {
endpoint_api_url = "string"
endpoint_api_url_variable = "string"
interval = 0
interval_variable = "string"
multiplier = 0
multiplier_variable = "string"
name = "string"
threshold = 0
threshold_variable = "string"
}
}
var sseCiscoFeatureResource = new SseCiscoFeature("sseCiscoFeatureResource", SseCiscoFeatureArgs.builder()
.featureProfileId("string")
.interfacePairs(SseCiscoFeatureInterfacePairArgs.builder()
.activeInterface("string")
.activeInterfaceWeight(0)
.backupInterface("string")
.backupInterfaceWeight(0)
.build())
.interfaces(SseCiscoFeatureInterfaceArgs.builder()
.dpdInterval(0)
.dpdIntervalVariable("string")
.dpdRetries(0)
.dpdRetriesVariable("string")
.ikeCiphersuite("string")
.ikeCiphersuiteVariable("string")
.ikeGroup("string")
.ikeGroupVariable("string")
.ikeRekeyInterval(0)
.ikeRekeyIntervalVariable("string")
.ikeVersion(0)
.ikeVersionVariable("string")
.interfaceName("string")
.ipsecCiphersuite("string")
.ipsecCiphersuiteVariable("string")
.ipsecRekeyInterval(0)
.ipsecRekeyIntervalVariable("string")
.ipsecReplayWindow(0)
.ipsecReplayWindowVariable("string")
.mtu(0)
.mtuVariable("string")
.perfectForwardSecrecy("string")
.perfectForwardSecrecyVariable("string")
.shutdown(false)
.shutdownVariable("string")
.tcpMssAdjust(0)
.tcpMssAdjustVariable("string")
.trackEnable(false)
.trackEnableVariable("string")
.tracker("string")
.tunnelDcPreference("string")
.tunnelRouteVia("string")
.tunnelRouteViaVariable("string")
.tunnelSourceInterface("string")
.tunnelSourceInterfaceVariable("string")
.build())
.region("string")
.trackerSourceIp("string")
.contextSharingForSgt(false)
.contextSharingForVpn(false)
.description("string")
.name("string")
.regionVariable("string")
.trackerSourceIpVariable("string")
.trackers(SseCiscoFeatureTrackerArgs.builder()
.endpointApiUrl("string")
.endpointApiUrlVariable("string")
.interval(0)
.intervalVariable("string")
.multiplier(0)
.multiplierVariable("string")
.name("string")
.threshold(0)
.thresholdVariable("string")
.build())
.build());
sse_cisco_feature_resource = sdwan.SseCiscoFeature("sseCiscoFeatureResource",
feature_profile_id="string",
interface_pairs=[{
"active_interface": "string",
"active_interface_weight": 0,
"backup_interface": "string",
"backup_interface_weight": 0,
}],
interfaces=[{
"dpd_interval": 0,
"dpd_interval_variable": "string",
"dpd_retries": 0,
"dpd_retries_variable": "string",
"ike_ciphersuite": "string",
"ike_ciphersuite_variable": "string",
"ike_group": "string",
"ike_group_variable": "string",
"ike_rekey_interval": 0,
"ike_rekey_interval_variable": "string",
"ike_version": 0,
"ike_version_variable": "string",
"interface_name": "string",
"ipsec_ciphersuite": "string",
"ipsec_ciphersuite_variable": "string",
"ipsec_rekey_interval": 0,
"ipsec_rekey_interval_variable": "string",
"ipsec_replay_window": 0,
"ipsec_replay_window_variable": "string",
"mtu": 0,
"mtu_variable": "string",
"perfect_forward_secrecy": "string",
"perfect_forward_secrecy_variable": "string",
"shutdown": False,
"shutdown_variable": "string",
"tcp_mss_adjust": 0,
"tcp_mss_adjust_variable": "string",
"track_enable": False,
"track_enable_variable": "string",
"tracker": "string",
"tunnel_dc_preference": "string",
"tunnel_route_via": "string",
"tunnel_route_via_variable": "string",
"tunnel_source_interface": "string",
"tunnel_source_interface_variable": "string",
}],
region="string",
tracker_source_ip="string",
context_sharing_for_sgt=False,
context_sharing_for_vpn=False,
description="string",
name="string",
region_variable="string",
tracker_source_ip_variable="string",
trackers=[{
"endpoint_api_url": "string",
"endpoint_api_url_variable": "string",
"interval": 0,
"interval_variable": "string",
"multiplier": 0,
"multiplier_variable": "string",
"name": "string",
"threshold": 0,
"threshold_variable": "string",
}])
const sseCiscoFeatureResource = new sdwan.SseCiscoFeature("sseCiscoFeatureResource", {
featureProfileId: "string",
interfacePairs: [{
activeInterface: "string",
activeInterfaceWeight: 0,
backupInterface: "string",
backupInterfaceWeight: 0,
}],
interfaces: [{
dpdInterval: 0,
dpdIntervalVariable: "string",
dpdRetries: 0,
dpdRetriesVariable: "string",
ikeCiphersuite: "string",
ikeCiphersuiteVariable: "string",
ikeGroup: "string",
ikeGroupVariable: "string",
ikeRekeyInterval: 0,
ikeRekeyIntervalVariable: "string",
ikeVersion: 0,
ikeVersionVariable: "string",
interfaceName: "string",
ipsecCiphersuite: "string",
ipsecCiphersuiteVariable: "string",
ipsecRekeyInterval: 0,
ipsecRekeyIntervalVariable: "string",
ipsecReplayWindow: 0,
ipsecReplayWindowVariable: "string",
mtu: 0,
mtuVariable: "string",
perfectForwardSecrecy: "string",
perfectForwardSecrecyVariable: "string",
shutdown: false,
shutdownVariable: "string",
tcpMssAdjust: 0,
tcpMssAdjustVariable: "string",
trackEnable: false,
trackEnableVariable: "string",
tracker: "string",
tunnelDcPreference: "string",
tunnelRouteVia: "string",
tunnelRouteViaVariable: "string",
tunnelSourceInterface: "string",
tunnelSourceInterfaceVariable: "string",
}],
region: "string",
trackerSourceIp: "string",
contextSharingForSgt: false,
contextSharingForVpn: false,
description: "string",
name: "string",
regionVariable: "string",
trackerSourceIpVariable: "string",
trackers: [{
endpointApiUrl: "string",
endpointApiUrlVariable: "string",
interval: 0,
intervalVariable: "string",
multiplier: 0,
multiplierVariable: "string",
name: "string",
threshold: 0,
thresholdVariable: "string",
}],
});
type: sdwan:SseCiscoFeature
properties:
contextSharingForSgt: false
contextSharingForVpn: false
description: string
featureProfileId: string
interfacePairs:
- activeInterface: string
activeInterfaceWeight: 0
backupInterface: string
backupInterfaceWeight: 0
interfaces:
- dpdInterval: 0
dpdIntervalVariable: string
dpdRetries: 0
dpdRetriesVariable: string
ikeCiphersuite: string
ikeCiphersuiteVariable: string
ikeGroup: string
ikeGroupVariable: string
ikeRekeyInterval: 0
ikeRekeyIntervalVariable: string
ikeVersion: 0
ikeVersionVariable: string
interfaceName: string
ipsecCiphersuite: string
ipsecCiphersuiteVariable: string
ipsecRekeyInterval: 0
ipsecRekeyIntervalVariable: string
ipsecReplayWindow: 0
ipsecReplayWindowVariable: string
mtu: 0
mtuVariable: string
perfectForwardSecrecy: string
perfectForwardSecrecyVariable: string
shutdown: false
shutdownVariable: string
tcpMssAdjust: 0
tcpMssAdjustVariable: string
trackEnable: false
trackEnableVariable: string
tracker: string
tunnelDcPreference: string
tunnelRouteVia: string
tunnelRouteViaVariable: string
tunnelSourceInterface: string
tunnelSourceInterfaceVariable: string
name: string
region: string
regionVariable: string
trackerSourceIp: string
trackerSourceIpVariable: string
trackers:
- endpointApiUrl: string
endpointApiUrlVariable: string
interval: 0
intervalVariable: string
multiplier: 0
multiplierVariable: string
name: string
threshold: 0
thresholdVariable: string
SseCiscoFeature Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The SseCiscoFeature resource accepts the following input properties:
- Feature
Profile stringId - Feature Profile ID
- Interface
Pairs List<SseCisco Feature Interface Pair> - Interface Pair for active and backup
- Interfaces
List<Sse
Cisco Feature Interface> - Interface name: IPsec when present
- Region string
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- Tracker
Source stringIp - Source IP address for Tracker
- Context
Sharing boolFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- Context
Sharing boolFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- Description string
- The description of the Feature
- Name string
- The name of the Feature
- Region
Variable string - Variable name
- Tracker
Source stringIp Variable - Variable name
- Trackers
List<Sse
Cisco Feature Tracker> - Tracker configuration
- Feature
Profile stringId - Feature Profile ID
- Interface
Pairs []SseCisco Feature Interface Pair Args - Interface Pair for active and backup
- Interfaces
[]Sse
Cisco Feature Interface Args - Interface name: IPsec when present
- Region string
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- Tracker
Source stringIp - Source IP address for Tracker
- Context
Sharing boolFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- Context
Sharing boolFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- Description string
- The description of the Feature
- Name string
- The name of the Feature
- Region
Variable string - Variable name
- Tracker
Source stringIp Variable - Variable name
- Trackers
[]Sse
Cisco Feature Tracker Args - Tracker configuration
- feature_
profile_ stringid - Feature Profile ID
- interface_
pairs list(object) - Interface Pair for active and backup
- interfaces list(object)
- Interface name: IPsec when present
- region string
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- tracker_
source_ stringip - Source IP address for Tracker
- context_
sharing_ boolfor_ sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context_
sharing_ boolfor_ vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description string
- The description of the Feature
- name string
- The name of the Feature
- region_
variable string - Variable name
- tracker_
source_ stringip_ variable - Variable name
- trackers list(object)
- Tracker configuration
- feature
Profile StringId - Feature Profile ID
- interface
Pairs List<SseCisco Feature Interface Pair> - Interface Pair for active and backup
- interfaces
List<Sse
Cisco Feature Interface> - Interface name: IPsec when present
- region String
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- tracker
Source StringIp - Source IP address for Tracker
- context
Sharing BooleanFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context
Sharing BooleanFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description String
- The description of the Feature
- name String
- The name of the Feature
- region
Variable String - Variable name
- tracker
Source StringIp Variable - Variable name
- trackers
List<Sse
Cisco Feature Tracker> - Tracker configuration
- feature
Profile stringId - Feature Profile ID
- interface
Pairs SseCisco Feature Interface Pair[] - Interface Pair for active and backup
- interfaces
Sse
Cisco Feature Interface[] - Interface name: IPsec when present
- region string
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- tracker
Source stringIp - Source IP address for Tracker
- context
Sharing booleanFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context
Sharing booleanFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description string
- The description of the Feature
- name string
- The name of the Feature
- region
Variable string - Variable name
- tracker
Source stringIp Variable - Variable name
- trackers
Sse
Cisco Feature Tracker[] - Tracker configuration
- feature_
profile_ strid - Feature Profile ID
- interface_
pairs Sequence[SseCisco Feature Interface Pair Args] - Interface Pair for active and backup
- interfaces
Sequence[Sse
Cisco Feature Interface Args] - Interface name: IPsec when present
- region str
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- tracker_
source_ strip - Source IP address for Tracker
- context_
sharing_ boolfor_ sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context_
sharing_ boolfor_ vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description str
- The description of the Feature
- name str
- The name of the Feature
- region_
variable str - Variable name
- tracker_
source_ strip_ variable - Variable name
- trackers
Sequence[Sse
Cisco Feature Tracker Args] - Tracker configuration
- feature
Profile StringId - Feature Profile ID
- interface
Pairs List<Property Map> - Interface Pair for active and backup
- interfaces List<Property Map>
- Interface name: IPsec when present
- region String
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- tracker
Source StringIp - Source IP address for Tracker
- context
Sharing BooleanFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context
Sharing BooleanFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description String
- The description of the Feature
- name String
- The name of the Feature
- region
Variable String - Variable name
- tracker
Source StringIp Variable - Variable name
- trackers List<Property Map>
- Tracker configuration
Outputs
All input properties are implicitly available as output properties. Additionally, the SseCiscoFeature resource produces the following output properties:
Look up Existing SseCiscoFeature Resource
Get an existing SseCiscoFeature resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SseCiscoFeatureState, opts?: CustomResourceOptions): SseCiscoFeature@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
context_sharing_for_sgt: Optional[bool] = None,
context_sharing_for_vpn: Optional[bool] = None,
description: Optional[str] = None,
feature_profile_id: Optional[str] = None,
interface_pairs: Optional[Sequence[SseCiscoFeatureInterfacePairArgs]] = None,
interfaces: Optional[Sequence[SseCiscoFeatureInterfaceArgs]] = None,
name: Optional[str] = None,
region: Optional[str] = None,
region_variable: Optional[str] = None,
tracker_source_ip: Optional[str] = None,
tracker_source_ip_variable: Optional[str] = None,
trackers: Optional[Sequence[SseCiscoFeatureTrackerArgs]] = None,
version: Optional[int] = None) -> SseCiscoFeaturefunc GetSseCiscoFeature(ctx *Context, name string, id IDInput, state *SseCiscoFeatureState, opts ...ResourceOption) (*SseCiscoFeature, error)public static SseCiscoFeature Get(string name, Input<string> id, SseCiscoFeatureState? state, CustomResourceOptions? opts = null)public static SseCiscoFeature get(String name, Output<String> id, SseCiscoFeatureState state, CustomResourceOptions options)resources: _: type: sdwan:SseCiscoFeature get: id: ${id}import {
to = sdwan_sseciscofeature.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Context
Sharing boolFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- Context
Sharing boolFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- Description string
- The description of the Feature
- Feature
Profile stringId - Feature Profile ID
- Interface
Pairs List<SseCisco Feature Interface Pair> - Interface Pair for active and backup
- Interfaces
List<Sse
Cisco Feature Interface> - Interface name: IPsec when present
- Name string
- The name of the Feature
- Region string
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- Region
Variable string - Variable name
- Tracker
Source stringIp - Source IP address for Tracker
- Tracker
Source stringIp Variable - Variable name
- Trackers
List<Sse
Cisco Feature Tracker> - Tracker configuration
- Version int
- The version of the Feature
- Context
Sharing boolFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- Context
Sharing boolFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- Description string
- The description of the Feature
- Feature
Profile stringId - Feature Profile ID
- Interface
Pairs []SseCisco Feature Interface Pair Args - Interface Pair for active and backup
- Interfaces
[]Sse
Cisco Feature Interface Args - Interface name: IPsec when present
- Name string
- The name of the Feature
- Region string
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- Region
Variable string - Variable name
- Tracker
Source stringIp - Source IP address for Tracker
- Tracker
Source stringIp Variable - Variable name
- Trackers
[]Sse
Cisco Feature Tracker Args - Tracker configuration
- Version int
- The version of the Feature
- context_
sharing_ boolfor_ sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context_
sharing_ boolfor_ vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description string
- The description of the Feature
- feature_
profile_ stringid - Feature Profile ID
- interface_
pairs list(object) - Interface Pair for active and backup
- interfaces list(object)
- Interface name: IPsec when present
- name string
- The name of the Feature
- region string
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- region_
variable string - Variable name
- tracker_
source_ stringip - Source IP address for Tracker
- tracker_
source_ stringip_ variable - Variable name
- trackers list(object)
- Tracker configuration
- version number
- The version of the Feature
- context
Sharing BooleanFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context
Sharing BooleanFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description String
- The description of the Feature
- feature
Profile StringId - Feature Profile ID
- interface
Pairs List<SseCisco Feature Interface Pair> - Interface Pair for active and backup
- interfaces
List<Sse
Cisco Feature Interface> - Interface name: IPsec when present
- name String
- The name of the Feature
- region String
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- region
Variable String - Variable name
- tracker
Source StringIp - Source IP address for Tracker
- tracker
Source StringIp Variable - Variable name
- trackers
List<Sse
Cisco Feature Tracker> - Tracker configuration
- version Integer
- The version of the Feature
- context
Sharing booleanFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context
Sharing booleanFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description string
- The description of the Feature
- feature
Profile stringId - Feature Profile ID
- interface
Pairs SseCisco Feature Interface Pair[] - Interface Pair for active and backup
- interfaces
Sse
Cisco Feature Interface[] - Interface name: IPsec when present
- name string
- The name of the Feature
- region string
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- region
Variable string - Variable name
- tracker
Source stringIp - Source IP address for Tracker
- tracker
Source stringIp Variable - Variable name
- trackers
Sse
Cisco Feature Tracker[] - Tracker configuration
- version number
- The version of the Feature
- context_
sharing_ boolfor_ sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context_
sharing_ boolfor_ vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description str
- The description of the Feature
- feature_
profile_ strid - Feature Profile ID
- interface_
pairs Sequence[SseCisco Feature Interface Pair Args] - Interface Pair for active and backup
- interfaces
Sequence[Sse
Cisco Feature Interface Args] - Interface name: IPsec when present
- name str
- The name of the Feature
- region str
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- region_
variable str - Variable name
- tracker_
source_ strip - Source IP address for Tracker
- tracker_
source_ strip_ variable - Variable name
- trackers
Sequence[Sse
Cisco Feature Tracker Args] - Tracker configuration
- version int
- The version of the Feature
- context
Sharing BooleanFor Sgt - Enable/disable Cisco SSE context sharing for sgt
- Default value:
false
- Default value:
- context
Sharing BooleanFor Vpn - Enable/disable Cisco SSE context sharing for vpn
- Default value:
false
- Default value:
- description String
- The description of the Feature
- feature
Profile StringId - Feature Profile ID
- interface
Pairs List<Property Map> - Interface Pair for active and backup
- interfaces List<Property Map>
- Interface name: IPsec when present
- name String
- The name of the Feature
- region String
- Region for Primary and Secondary Datacenter
- Default value:
auto
- Default value:
- region
Variable String - Variable name
- tracker
Source StringIp - Source IP address for Tracker
- tracker
Source StringIp Variable - Variable name
- trackers List<Property Map>
- Tracker configuration
- version Number
- The version of the Feature
Supporting Types
SseCiscoFeatureInterface, SseCiscoFeatureInterfaceArgs
- Dpd
Interval int - IKE keepalive interval (seconds)
- Range:
0-65535 - Default value:
10
- Range:
- Dpd
Interval stringVariable - Variable name
- Dpd
Retries int - IKE keepalive retries
- Range:
0-255 - Default value:
3
- Range:
- Dpd
Retries stringVariable - Variable name
- Ike
Ciphersuite string - IKE identity the IKE preshared secret belongs to
- Choices:
aes256-cbc-sha1,aes256-cbc-sha2,aes128-cbc-sha1,aes128-cbc-sha2 - Default value:
aes256-cbc-sha1
- Choices:
- Ike
Ciphersuite stringVariable - Variable name
- Ike
Group string - IKE Diffie Hellman Groups
- Choices:
2,5,14,15,16,19,20,21 - Default value:
16
- Choices:
- Ike
Group stringVariable - Variable name
- Ike
Rekey intInterval - IKE rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
14400
- Range:
- Ike
Rekey stringInterval Variable - Variable name
- Ike
Version int - IKE Version <1..2>
- Range:
1-2 - Default value:
2
- Range:
- Ike
Version stringVariable - Variable name
- Interface
Name string - Interface name: ipsec(1..255)
- Ipsec
Ciphersuite string - IPsec(ESP) encryption and integrity protocol
- Choices:
aes256-cbc-sha1,aes256-cbc-sha384,aes256-cbc-sha256,aes256-cbc-sha512,aes256-gcm - Default value:
aes256-cbc-sha512
- Choices:
- Ipsec
Ciphersuite stringVariable - Variable name
- Ipsec
Rekey intInterval - IPsec rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
3600
- Range:
- Ipsec
Rekey stringInterval Variable - Variable name
- Ipsec
Replay intWindow - Replay window size 32..8192 (must be a power of 2)
- Range:
64-4096 - Default value:
512
- Range:
- Ipsec
Replay stringWindow Variable - Variable name
- Mtu int
- Interface MTU <576..2000>, in bytes
- Range:
576-2000 - Default value:
1400
- Range:
- Mtu
Variable string - Variable name
- Perfect
Forward stringSecrecy - IPsec perfect forward secrecy settings
- Choices:
group-2,group-5,group-14,group-15,group-16,group-19,group-20,group-21,none - Default value:
group-16
- Choices:
- Perfect
Forward stringSecrecy Variable - Variable name
- Shutdown bool
- Administrative state
- Default value:
false
- Default value:
- Shutdown
Variable string - Variable name
- Tcp
Mss intAdjust - TCP MSS on SYN packets, in bytes
- Range:
500-1460
- Range:
- Tcp
Mss stringAdjust Variable - Variable name
- Track
Enable bool - Enable/disable Cisco SSE tracking
- Default value:
true
- Default value:
- Track
Enable stringVariable - Variable name
- Tracker string
- Enable tracker for this interface
- Default value:
DefaultTracker
- Default value:
- Tunnel
Dc stringPreference - SSE Tunnel Data Center
- Choices:
primary-dc,secondary-dc
- Choices:
- Tunnel
Route stringVia - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- Tunnel
Route stringVia Variable - Variable name
- Tunnel
Source stringInterface - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- Tunnel
Source stringInterface Variable - Variable name
- Dpd
Interval int - IKE keepalive interval (seconds)
- Range:
0-65535 - Default value:
10
- Range:
- Dpd
Interval stringVariable - Variable name
- Dpd
Retries int - IKE keepalive retries
- Range:
0-255 - Default value:
3
- Range:
- Dpd
Retries stringVariable - Variable name
- Ike
Ciphersuite string - IKE identity the IKE preshared secret belongs to
- Choices:
aes256-cbc-sha1,aes256-cbc-sha2,aes128-cbc-sha1,aes128-cbc-sha2 - Default value:
aes256-cbc-sha1
- Choices:
- Ike
Ciphersuite stringVariable - Variable name
- Ike
Group string - IKE Diffie Hellman Groups
- Choices:
2,5,14,15,16,19,20,21 - Default value:
16
- Choices:
- Ike
Group stringVariable - Variable name
- Ike
Rekey intInterval - IKE rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
14400
- Range:
- Ike
Rekey stringInterval Variable - Variable name
- Ike
Version int - IKE Version <1..2>
- Range:
1-2 - Default value:
2
- Range:
- Ike
Version stringVariable - Variable name
- Interface
Name string - Interface name: ipsec(1..255)
- Ipsec
Ciphersuite string - IPsec(ESP) encryption and integrity protocol
- Choices:
aes256-cbc-sha1,aes256-cbc-sha384,aes256-cbc-sha256,aes256-cbc-sha512,aes256-gcm - Default value:
aes256-cbc-sha512
- Choices:
- Ipsec
Ciphersuite stringVariable - Variable name
- Ipsec
Rekey intInterval - IPsec rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
3600
- Range:
- Ipsec
Rekey stringInterval Variable - Variable name
- Ipsec
Replay intWindow - Replay window size 32..8192 (must be a power of 2)
- Range:
64-4096 - Default value:
512
- Range:
- Ipsec
Replay stringWindow Variable - Variable name
- Mtu int
- Interface MTU <576..2000>, in bytes
- Range:
576-2000 - Default value:
1400
- Range:
- Mtu
Variable string - Variable name
- Perfect
Forward stringSecrecy - IPsec perfect forward secrecy settings
- Choices:
group-2,group-5,group-14,group-15,group-16,group-19,group-20,group-21,none - Default value:
group-16
- Choices:
- Perfect
Forward stringSecrecy Variable - Variable name
- Shutdown bool
- Administrative state
- Default value:
false
- Default value:
- Shutdown
Variable string - Variable name
- Tcp
Mss intAdjust - TCP MSS on SYN packets, in bytes
- Range:
500-1460
- Range:
- Tcp
Mss stringAdjust Variable - Variable name
- Track
Enable bool - Enable/disable Cisco SSE tracking
- Default value:
true
- Default value:
- Track
Enable stringVariable - Variable name
- Tracker string
- Enable tracker for this interface
- Default value:
DefaultTracker
- Default value:
- Tunnel
Dc stringPreference - SSE Tunnel Data Center
- Choices:
primary-dc,secondary-dc
- Choices:
- Tunnel
Route stringVia - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- Tunnel
Route stringVia Variable - Variable name
- Tunnel
Source stringInterface - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- Tunnel
Source stringInterface Variable - Variable name
- dpd_
interval number - IKE keepalive interval (seconds)
- Range:
0-65535 - Default value:
10
- Range:
- dpd_
interval_ stringvariable - Variable name
- dpd_
retries number - IKE keepalive retries
- Range:
0-255 - Default value:
3
- Range:
- dpd_
retries_ stringvariable - Variable name
- ike_
ciphersuite string - IKE identity the IKE preshared secret belongs to
- Choices:
aes256-cbc-sha1,aes256-cbc-sha2,aes128-cbc-sha1,aes128-cbc-sha2 - Default value:
aes256-cbc-sha1
- Choices:
- ike_
ciphersuite_ stringvariable - Variable name
- ike_
group string - IKE Diffie Hellman Groups
- Choices:
2,5,14,15,16,19,20,21 - Default value:
16
- Choices:
- ike_
group_ stringvariable - Variable name
- ike_
rekey_ numberinterval - IKE rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
14400
- Range:
- ike_
rekey_ stringinterval_ variable - Variable name
- ike_
version number - IKE Version <1..2>
- Range:
1-2 - Default value:
2
- Range:
- ike_
version_ stringvariable - Variable name
- interface_
name string - Interface name: ipsec(1..255)
- ipsec_
ciphersuite string - IPsec(ESP) encryption and integrity protocol
- Choices:
aes256-cbc-sha1,aes256-cbc-sha384,aes256-cbc-sha256,aes256-cbc-sha512,aes256-gcm - Default value:
aes256-cbc-sha512
- Choices:
- ipsec_
ciphersuite_ stringvariable - Variable name
- ipsec_
rekey_ numberinterval - IPsec rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
3600
- Range:
- ipsec_
rekey_ stringinterval_ variable - Variable name
- ipsec_
replay_ numberwindow - Replay window size 32..8192 (must be a power of 2)
- Range:
64-4096 - Default value:
512
- Range:
- ipsec_
replay_ stringwindow_ variable - Variable name
- mtu number
- Interface MTU <576..2000>, in bytes
- Range:
576-2000 - Default value:
1400
- Range:
- mtu_
variable string - Variable name
- perfect_
forward_ stringsecrecy - IPsec perfect forward secrecy settings
- Choices:
group-2,group-5,group-14,group-15,group-16,group-19,group-20,group-21,none - Default value:
group-16
- Choices:
- perfect_
forward_ stringsecrecy_ variable - Variable name
- shutdown bool
- Administrative state
- Default value:
false
- Default value:
- shutdown_
variable string - Variable name
- tcp_
mss_ numberadjust - TCP MSS on SYN packets, in bytes
- Range:
500-1460
- Range:
- tcp_
mss_ stringadjust_ variable - Variable name
- track_
enable bool - Enable/disable Cisco SSE tracking
- Default value:
true
- Default value:
- track_
enable_ stringvariable - Variable name
- tracker string
- Enable tracker for this interface
- Default value:
DefaultTracker
- Default value:
- tunnel_
dc_ stringpreference - SSE Tunnel Data Center
- Choices:
primary-dc,secondary-dc
- Choices:
- tunnel_
route_ stringvia - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel_
route_ stringvia_ variable - Variable name
- tunnel_
source_ stringinterface - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel_
source_ stringinterface_ variable - Variable name
- dpd
Interval Integer - IKE keepalive interval (seconds)
- Range:
0-65535 - Default value:
10
- Range:
- dpd
Interval StringVariable - Variable name
- dpd
Retries Integer - IKE keepalive retries
- Range:
0-255 - Default value:
3
- Range:
- dpd
Retries StringVariable - Variable name
- ike
Ciphersuite String - IKE identity the IKE preshared secret belongs to
- Choices:
aes256-cbc-sha1,aes256-cbc-sha2,aes128-cbc-sha1,aes128-cbc-sha2 - Default value:
aes256-cbc-sha1
- Choices:
- ike
Ciphersuite StringVariable - Variable name
- ike
Group String - IKE Diffie Hellman Groups
- Choices:
2,5,14,15,16,19,20,21 - Default value:
16
- Choices:
- ike
Group StringVariable - Variable name
- ike
Rekey IntegerInterval - IKE rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
14400
- Range:
- ike
Rekey StringInterval Variable - Variable name
- ike
Version Integer - IKE Version <1..2>
- Range:
1-2 - Default value:
2
- Range:
- ike
Version StringVariable - Variable name
- interface
Name String - Interface name: ipsec(1..255)
- ipsec
Ciphersuite String - IPsec(ESP) encryption and integrity protocol
- Choices:
aes256-cbc-sha1,aes256-cbc-sha384,aes256-cbc-sha256,aes256-cbc-sha512,aes256-gcm - Default value:
aes256-cbc-sha512
- Choices:
- ipsec
Ciphersuite StringVariable - Variable name
- ipsec
Rekey IntegerInterval - IPsec rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
3600
- Range:
- ipsec
Rekey StringInterval Variable - Variable name
- ipsec
Replay IntegerWindow - Replay window size 32..8192 (must be a power of 2)
- Range:
64-4096 - Default value:
512
- Range:
- ipsec
Replay StringWindow Variable - Variable name
- mtu Integer
- Interface MTU <576..2000>, in bytes
- Range:
576-2000 - Default value:
1400
- Range:
- mtu
Variable String - Variable name
- perfect
Forward StringSecrecy - IPsec perfect forward secrecy settings
- Choices:
group-2,group-5,group-14,group-15,group-16,group-19,group-20,group-21,none - Default value:
group-16
- Choices:
- perfect
Forward StringSecrecy Variable - Variable name
- shutdown Boolean
- Administrative state
- Default value:
false
- Default value:
- shutdown
Variable String - Variable name
- tcp
Mss IntegerAdjust - TCP MSS on SYN packets, in bytes
- Range:
500-1460
- Range:
- tcp
Mss StringAdjust Variable - Variable name
- track
Enable Boolean - Enable/disable Cisco SSE tracking
- Default value:
true
- Default value:
- track
Enable StringVariable - Variable name
- tracker String
- Enable tracker for this interface
- Default value:
DefaultTracker
- Default value:
- tunnel
Dc StringPreference - SSE Tunnel Data Center
- Choices:
primary-dc,secondary-dc
- Choices:
- tunnel
Route StringVia - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel
Route StringVia Variable - Variable name
- tunnel
Source StringInterface - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel
Source StringInterface Variable - Variable name
- dpd
Interval number - IKE keepalive interval (seconds)
- Range:
0-65535 - Default value:
10
- Range:
- dpd
Interval stringVariable - Variable name
- dpd
Retries number - IKE keepalive retries
- Range:
0-255 - Default value:
3
- Range:
- dpd
Retries stringVariable - Variable name
- ike
Ciphersuite string - IKE identity the IKE preshared secret belongs to
- Choices:
aes256-cbc-sha1,aes256-cbc-sha2,aes128-cbc-sha1,aes128-cbc-sha2 - Default value:
aes256-cbc-sha1
- Choices:
- ike
Ciphersuite stringVariable - Variable name
- ike
Group string - IKE Diffie Hellman Groups
- Choices:
2,5,14,15,16,19,20,21 - Default value:
16
- Choices:
- ike
Group stringVariable - Variable name
- ike
Rekey numberInterval - IKE rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
14400
- Range:
- ike
Rekey stringInterval Variable - Variable name
- ike
Version number - IKE Version <1..2>
- Range:
1-2 - Default value:
2
- Range:
- ike
Version stringVariable - Variable name
- interface
Name string - Interface name: ipsec(1..255)
- ipsec
Ciphersuite string - IPsec(ESP) encryption and integrity protocol
- Choices:
aes256-cbc-sha1,aes256-cbc-sha384,aes256-cbc-sha256,aes256-cbc-sha512,aes256-gcm - Default value:
aes256-cbc-sha512
- Choices:
- ipsec
Ciphersuite stringVariable - Variable name
- ipsec
Rekey numberInterval - IPsec rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
3600
- Range:
- ipsec
Rekey stringInterval Variable - Variable name
- ipsec
Replay numberWindow - Replay window size 32..8192 (must be a power of 2)
- Range:
64-4096 - Default value:
512
- Range:
- ipsec
Replay stringWindow Variable - Variable name
- mtu number
- Interface MTU <576..2000>, in bytes
- Range:
576-2000 - Default value:
1400
- Range:
- mtu
Variable string - Variable name
- perfect
Forward stringSecrecy - IPsec perfect forward secrecy settings
- Choices:
group-2,group-5,group-14,group-15,group-16,group-19,group-20,group-21,none - Default value:
group-16
- Choices:
- perfect
Forward stringSecrecy Variable - Variable name
- shutdown boolean
- Administrative state
- Default value:
false
- Default value:
- shutdown
Variable string - Variable name
- tcp
Mss numberAdjust - TCP MSS on SYN packets, in bytes
- Range:
500-1460
- Range:
- tcp
Mss stringAdjust Variable - Variable name
- track
Enable boolean - Enable/disable Cisco SSE tracking
- Default value:
true
- Default value:
- track
Enable stringVariable - Variable name
- tracker string
- Enable tracker for this interface
- Default value:
DefaultTracker
- Default value:
- tunnel
Dc stringPreference - SSE Tunnel Data Center
- Choices:
primary-dc,secondary-dc
- Choices:
- tunnel
Route stringVia - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel
Route stringVia Variable - Variable name
- tunnel
Source stringInterface - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel
Source stringInterface Variable - Variable name
- dpd_
interval int - IKE keepalive interval (seconds)
- Range:
0-65535 - Default value:
10
- Range:
- dpd_
interval_ strvariable - Variable name
- dpd_
retries int - IKE keepalive retries
- Range:
0-255 - Default value:
3
- Range:
- dpd_
retries_ strvariable - Variable name
- ike_
ciphersuite str - IKE identity the IKE preshared secret belongs to
- Choices:
aes256-cbc-sha1,aes256-cbc-sha2,aes128-cbc-sha1,aes128-cbc-sha2 - Default value:
aes256-cbc-sha1
- Choices:
- ike_
ciphersuite_ strvariable - Variable name
- ike_
group str - IKE Diffie Hellman Groups
- Choices:
2,5,14,15,16,19,20,21 - Default value:
16
- Choices:
- ike_
group_ strvariable - Variable name
- ike_
rekey_ intinterval - IKE rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
14400
- Range:
- ike_
rekey_ strinterval_ variable - Variable name
- ike_
version int - IKE Version <1..2>
- Range:
1-2 - Default value:
2
- Range:
- ike_
version_ strvariable - Variable name
- interface_
name str - Interface name: ipsec(1..255)
- ipsec_
ciphersuite str - IPsec(ESP) encryption and integrity protocol
- Choices:
aes256-cbc-sha1,aes256-cbc-sha384,aes256-cbc-sha256,aes256-cbc-sha512,aes256-gcm - Default value:
aes256-cbc-sha512
- Choices:
- ipsec_
ciphersuite_ strvariable - Variable name
- ipsec_
rekey_ intinterval - IPsec rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
3600
- Range:
- ipsec_
rekey_ strinterval_ variable - Variable name
- ipsec_
replay_ intwindow - Replay window size 32..8192 (must be a power of 2)
- Range:
64-4096 - Default value:
512
- Range:
- ipsec_
replay_ strwindow_ variable - Variable name
- mtu int
- Interface MTU <576..2000>, in bytes
- Range:
576-2000 - Default value:
1400
- Range:
- mtu_
variable str - Variable name
- perfect_
forward_ strsecrecy - IPsec perfect forward secrecy settings
- Choices:
group-2,group-5,group-14,group-15,group-16,group-19,group-20,group-21,none - Default value:
group-16
- Choices:
- perfect_
forward_ strsecrecy_ variable - Variable name
- shutdown bool
- Administrative state
- Default value:
false
- Default value:
- shutdown_
variable str - Variable name
- tcp_
mss_ intadjust - TCP MSS on SYN packets, in bytes
- Range:
500-1460
- Range:
- tcp_
mss_ stradjust_ variable - Variable name
- track_
enable bool - Enable/disable Cisco SSE tracking
- Default value:
true
- Default value:
- track_
enable_ strvariable - Variable name
- tracker str
- Enable tracker for this interface
- Default value:
DefaultTracker
- Default value:
- tunnel_
dc_ strpreference - SSE Tunnel Data Center
- Choices:
primary-dc,secondary-dc
- Choices:
- tunnel_
route_ strvia - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel_
route_ strvia_ variable - Variable name
- tunnel_
source_ strinterface - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel_
source_ strinterface_ variable - Variable name
- dpd
Interval Number - IKE keepalive interval (seconds)
- Range:
0-65535 - Default value:
10
- Range:
- dpd
Interval StringVariable - Variable name
- dpd
Retries Number - IKE keepalive retries
- Range:
0-255 - Default value:
3
- Range:
- dpd
Retries StringVariable - Variable name
- ike
Ciphersuite String - IKE identity the IKE preshared secret belongs to
- Choices:
aes256-cbc-sha1,aes256-cbc-sha2,aes128-cbc-sha1,aes128-cbc-sha2 - Default value:
aes256-cbc-sha1
- Choices:
- ike
Ciphersuite StringVariable - Variable name
- ike
Group String - IKE Diffie Hellman Groups
- Choices:
2,5,14,15,16,19,20,21 - Default value:
16
- Choices:
- ike
Group StringVariable - Variable name
- ike
Rekey NumberInterval - IKE rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
14400
- Range:
- ike
Rekey StringInterval Variable - Variable name
- ike
Version Number - IKE Version <1..2>
- Range:
1-2 - Default value:
2
- Range:
- ike
Version StringVariable - Variable name
- interface
Name String - Interface name: ipsec(1..255)
- ipsec
Ciphersuite String - IPsec(ESP) encryption and integrity protocol
- Choices:
aes256-cbc-sha1,aes256-cbc-sha384,aes256-cbc-sha256,aes256-cbc-sha512,aes256-gcm - Default value:
aes256-cbc-sha512
- Choices:
- ipsec
Ciphersuite StringVariable - Variable name
- ipsec
Rekey NumberInterval - IPsec rekey interval <300..1209600> seconds
- Range:
300-1209600 - Default value:
3600
- Range:
- ipsec
Rekey StringInterval Variable - Variable name
- ipsec
Replay NumberWindow - Replay window size 32..8192 (must be a power of 2)
- Range:
64-4096 - Default value:
512
- Range:
- ipsec
Replay StringWindow Variable - Variable name
- mtu Number
- Interface MTU <576..2000>, in bytes
- Range:
576-2000 - Default value:
1400
- Range:
- mtu
Variable String - Variable name
- perfect
Forward StringSecrecy - IPsec perfect forward secrecy settings
- Choices:
group-2,group-5,group-14,group-15,group-16,group-19,group-20,group-21,none - Default value:
group-16
- Choices:
- perfect
Forward StringSecrecy Variable - Variable name
- shutdown Boolean
- Administrative state
- Default value:
false
- Default value:
- shutdown
Variable String - Variable name
- tcp
Mss NumberAdjust - TCP MSS on SYN packets, in bytes
- Range:
500-1460
- Range:
- tcp
Mss StringAdjust Variable - Variable name
- track
Enable Boolean - Enable/disable Cisco SSE tracking
- Default value:
true
- Default value:
- track
Enable StringVariable - Variable name
- tracker String
- Enable tracker for this interface
- Default value:
DefaultTracker
- Default value:
- tunnel
Dc StringPreference - SSE Tunnel Data Center
- Choices:
primary-dc,secondary-dc
- Choices:
- tunnel
Route StringVia - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel
Route StringVia Variable - Variable name
- tunnel
Source StringInterface - <1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
- tunnel
Source StringInterface Variable - Variable name
SseCiscoFeatureInterfacePair, SseCiscoFeatureInterfacePairArgs
- Active
Interface string - Active Tunnel Interface for SSE
- Active
Interface intWeight - Active Tunnel Interface Weight
- Range:
1-255
- Range:
- Backup
Interface string - Backup Tunnel Interface for Cisco SSE
- Backup
Interface intWeight - Backup Tunnel Interface Weight
- Range:
1-255
- Range:
- Active
Interface string - Active Tunnel Interface for SSE
- Active
Interface intWeight - Active Tunnel Interface Weight
- Range:
1-255
- Range:
- Backup
Interface string - Backup Tunnel Interface for Cisco SSE
- Backup
Interface intWeight - Backup Tunnel Interface Weight
- Range:
1-255
- Range:
- active_
interface string - Active Tunnel Interface for SSE
- active_
interface_ numberweight - Active Tunnel Interface Weight
- Range:
1-255
- Range:
- backup_
interface string - Backup Tunnel Interface for Cisco SSE
- backup_
interface_ numberweight - Backup Tunnel Interface Weight
- Range:
1-255
- Range:
- active
Interface String - Active Tunnel Interface for SSE
- active
Interface IntegerWeight - Active Tunnel Interface Weight
- Range:
1-255
- Range:
- backup
Interface String - Backup Tunnel Interface for Cisco SSE
- backup
Interface IntegerWeight - Backup Tunnel Interface Weight
- Range:
1-255
- Range:
- active
Interface string - Active Tunnel Interface for SSE
- active
Interface numberWeight - Active Tunnel Interface Weight
- Range:
1-255
- Range:
- backup
Interface string - Backup Tunnel Interface for Cisco SSE
- backup
Interface numberWeight - Backup Tunnel Interface Weight
- Range:
1-255
- Range:
- active_
interface str - Active Tunnel Interface for SSE
- active_
interface_ intweight - Active Tunnel Interface Weight
- Range:
1-255
- Range:
- backup_
interface str - Backup Tunnel Interface for Cisco SSE
- backup_
interface_ intweight - Backup Tunnel Interface Weight
- Range:
1-255
- Range:
- active
Interface String - Active Tunnel Interface for SSE
- active
Interface NumberWeight - Active Tunnel Interface Weight
- Range:
1-255
- Range:
- backup
Interface String - Backup Tunnel Interface for Cisco SSE
- backup
Interface NumberWeight - Backup Tunnel Interface Weight
- Range:
1-255
- Range:
SseCiscoFeatureTracker, SseCiscoFeatureTrackerArgs
- Endpoint
Api stringUrl - API url of endpoint
- Endpoint
Api stringUrl Variable - Variable name
- Interval int
- Probe interval <10..600> seconds
- Range:
20-600 - Default value:
30
- Range:
- Interval
Variable string - Variable name
- Multiplier int
- Probe failure multiplier <1..10> failed attempts
- Range:
1-10 - Default value:
2
- Range:
- Multiplier
Variable string - Variable name
- Name string
- Tracker name
- Threshold int
- Probe Timeout threshold <100..1000> milliseconds
- Range:
100-1000 - Default value:
1000
- Range:
- Threshold
Variable string - Variable name
- Endpoint
Api stringUrl - API url of endpoint
- Endpoint
Api stringUrl Variable - Variable name
- Interval int
- Probe interval <10..600> seconds
- Range:
20-600 - Default value:
30
- Range:
- Interval
Variable string - Variable name
- Multiplier int
- Probe failure multiplier <1..10> failed attempts
- Range:
1-10 - Default value:
2
- Range:
- Multiplier
Variable string - Variable name
- Name string
- Tracker name
- Threshold int
- Probe Timeout threshold <100..1000> milliseconds
- Range:
100-1000 - Default value:
1000
- Range:
- Threshold
Variable string - Variable name
- endpoint_
api_ stringurl - API url of endpoint
- endpoint_
api_ stringurl_ variable - Variable name
- interval number
- Probe interval <10..600> seconds
- Range:
20-600 - Default value:
30
- Range:
- interval_
variable string - Variable name
- multiplier number
- Probe failure multiplier <1..10> failed attempts
- Range:
1-10 - Default value:
2
- Range:
- multiplier_
variable string - Variable name
- name string
- Tracker name
- threshold number
- Probe Timeout threshold <100..1000> milliseconds
- Range:
100-1000 - Default value:
1000
- Range:
- threshold_
variable string - Variable name
- endpoint
Api StringUrl - API url of endpoint
- endpoint
Api StringUrl Variable - Variable name
- interval Integer
- Probe interval <10..600> seconds
- Range:
20-600 - Default value:
30
- Range:
- interval
Variable String - Variable name
- multiplier Integer
- Probe failure multiplier <1..10> failed attempts
- Range:
1-10 - Default value:
2
- Range:
- multiplier
Variable String - Variable name
- name String
- Tracker name
- threshold Integer
- Probe Timeout threshold <100..1000> milliseconds
- Range:
100-1000 - Default value:
1000
- Range:
- threshold
Variable String - Variable name
- endpoint
Api stringUrl - API url of endpoint
- endpoint
Api stringUrl Variable - Variable name
- interval number
- Probe interval <10..600> seconds
- Range:
20-600 - Default value:
30
- Range:
- interval
Variable string - Variable name
- multiplier number
- Probe failure multiplier <1..10> failed attempts
- Range:
1-10 - Default value:
2
- Range:
- multiplier
Variable string - Variable name
- name string
- Tracker name
- threshold number
- Probe Timeout threshold <100..1000> milliseconds
- Range:
100-1000 - Default value:
1000
- Range:
- threshold
Variable string - Variable name
- endpoint_
api_ strurl - API url of endpoint
- endpoint_
api_ strurl_ variable - Variable name
- interval int
- Probe interval <10..600> seconds
- Range:
20-600 - Default value:
30
- Range:
- interval_
variable str - Variable name
- multiplier int
- Probe failure multiplier <1..10> failed attempts
- Range:
1-10 - Default value:
2
- Range:
- multiplier_
variable str - Variable name
- name str
- Tracker name
- threshold int
- Probe Timeout threshold <100..1000> milliseconds
- Range:
100-1000 - Default value:
1000
- Range:
- threshold_
variable str - Variable name
- endpoint
Api StringUrl - API url of endpoint
- endpoint
Api StringUrl Variable - Variable name
- interval Number
- Probe interval <10..600> seconds
- Range:
20-600 - Default value:
30
- Range:
- interval
Variable String - Variable name
- multiplier Number
- Probe failure multiplier <1..10> failed attempts
- Range:
1-10 - Default value:
2
- Range:
- multiplier
Variable String - Variable name
- name String
- Tracker name
- threshold Number
- Probe Timeout threshold <100..1000> milliseconds
- Range:
100-1000 - Default value:
1000
- Range:
- threshold
Variable String - Variable name
Import
The pulumi import command can be used, for example:
Expected import identifier with the format: “sse_cisco_feature_id,feature_profile_id”
$ pulumi import sdwan:index/sseCiscoFeature:SseCiscoFeature example "f6b2c44c-693c-4763-b010-895aa3d236bd,f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- sdwan pulumi/pulumi-sdwan
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
sdwanTerraform Provider.
published on Friday, Jun 26, 2026 by Pulumi