Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Panos Provider
  3. API Docs
  4. IpsecTunnel
panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks
paloaltonetworks/terraform-provider-panos

panos.IpsecTunnel

Explore with Pulumi AI

panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks
paloaltonetworks/terraform-provider-panos

Create IpsecTunnel Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new IpsecTunnel(name: string, args: IpsecTunnelArgs, opts?: CustomResourceOptions);
@overload
def IpsecTunnel(resource_name: str,
                args: IpsecTunnelArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def IpsecTunnel(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                location: Optional[IpsecTunnelLocationArgs] = None,
                global_protect_satellite: Optional[IpsecTunnelGlobalProtectSatelliteArgs] = None,
                anti_replay_window: Optional[str] = None,
                comment: Optional[str] = None,
                copy_flow_label: Optional[bool] = None,
                copy_tos: Optional[bool] = None,
                disabled: Optional[bool] = None,
                auto_key: Optional[IpsecTunnelAutoKeyArgs] = None,
                ipsec_mode: Optional[str] = None,
                enable_gre_encapsulation: Optional[bool] = None,
                ipv6: Optional[bool] = None,
                anti_replay: Optional[bool] = None,
                manual_key: Optional[IpsecTunnelManualKeyArgs] = None,
                name: Optional[str] = None,
                tunnel_interface: Optional[str] = None,
                tunnel_monitor: Optional[IpsecTunnelTunnelMonitorArgs] = None)
func NewIpsecTunnel(ctx *Context, name string, args IpsecTunnelArgs, opts ...ResourceOption) (*IpsecTunnel, error)
public IpsecTunnel(string name, IpsecTunnelArgs args, CustomResourceOptions? opts = null)
public IpsecTunnel(String name, IpsecTunnelArgs args)
public IpsecTunnel(String name, IpsecTunnelArgs args, CustomResourceOptions options)

type: panos:IpsecTunnel
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. IpsecTunnelArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. IpsecTunnelArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. IpsecTunnelArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. IpsecTunnelArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. IpsecTunnelArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var ipsecTunnelResource = new Panos.IpsecTunnel("ipsecTunnelResource", new()
{
    Location = new Panos.Inputs.IpsecTunnelLocationArgs
    {
        Template = new Panos.Inputs.IpsecTunnelLocationTemplateArgs
        {
            Name = "string",
            NgfwDevice = "string",
            PanoramaDevice = "string",
        },
        TemplateStack = new Panos.Inputs.IpsecTunnelLocationTemplateStackArgs
        {
            Name = "string",
            NgfwDevice = "string",
            PanoramaDevice = "string",
        },
    },
    GlobalProtectSatellite = new Panos.Inputs.IpsecTunnelGlobalProtectSatelliteArgs
    {
        ExternalCa = new Panos.Inputs.IpsecTunnelGlobalProtectSatelliteExternalCaArgs
        {
            CertificateProfile = "string",
            LocalCertificate = "string",
        },
        Ipv6Preferred = false,
        LocalAddress = new Panos.Inputs.IpsecTunnelGlobalProtectSatelliteLocalAddressArgs
        {
            FloatingIp = new Panos.Inputs.IpsecTunnelGlobalProtectSatelliteLocalAddressFloatingIpArgs
            {
                Ipv4 = "string",
                Ipv6 = "string",
            },
            Interface = "string",
            Ip = new Panos.Inputs.IpsecTunnelGlobalProtectSatelliteLocalAddressIpArgs
            {
                Ipv4 = "string",
                Ipv6 = "string",
            },
        },
        PortalAddress = "string",
        PublishConnectedRoutes = new Panos.Inputs.IpsecTunnelGlobalProtectSatellitePublishConnectedRoutesArgs
        {
            Enable = false,
        },
        PublishRoutes = new[]
        {
            "string",
        },
    },
    AntiReplayWindow = "string",
    Comment = "string",
    CopyFlowLabel = false,
    CopyTos = false,
    Disabled = false,
    AutoKey = new Panos.Inputs.IpsecTunnelAutoKeyArgs
    {
        IkeGateways = new[]
        {
            new Panos.Inputs.IpsecTunnelAutoKeyIkeGatewayArgs
            {
                Name = "string",
            },
        },
        IpsecCryptoProfile = "string",
        ProxyIdV6s = new[]
        {
            new Panos.Inputs.IpsecTunnelAutoKeyProxyIdV6Args
            {
                Name = "string",
                Local = "string",
                Protocol = new Panos.Inputs.IpsecTunnelAutoKeyProxyIdV6ProtocolArgs
                {
                    Any = null,
                    Number = 0,
                    Tcp = new Panos.Inputs.IpsecTunnelAutoKeyProxyIdV6ProtocolTcpArgs
                    {
                        LocalPort = 0,
                        RemotePort = 0,
                    },
                    Udp = new Panos.Inputs.IpsecTunnelAutoKeyProxyIdV6ProtocolUdpArgs
                    {
                        LocalPort = 0,
                        RemotePort = 0,
                    },
                },
                Remote = "string",
            },
        },
        ProxyIds = new[]
        {
            new Panos.Inputs.IpsecTunnelAutoKeyProxyIdArgs
            {
                Name = "string",
                Local = "string",
                Protocol = new Panos.Inputs.IpsecTunnelAutoKeyProxyIdProtocolArgs
                {
                    Any = null,
                    Number = 0,
                    Tcp = new Panos.Inputs.IpsecTunnelAutoKeyProxyIdProtocolTcpArgs
                    {
                        LocalPort = 0,
                        RemotePort = 0,
                    },
                    Udp = new Panos.Inputs.IpsecTunnelAutoKeyProxyIdProtocolUdpArgs
                    {
                        LocalPort = 0,
                        RemotePort = 0,
                    },
                },
                Remote = "string",
            },
        },
    },
    IpsecMode = "string",
    EnableGreEncapsulation = false,
    Ipv6 = false,
    AntiReplay = false,
    ManualKey = new Panos.Inputs.IpsecTunnelManualKeyArgs
    {
        Ah = new Panos.Inputs.IpsecTunnelManualKeyAhArgs
        {
            Md5 = new Panos.Inputs.IpsecTunnelManualKeyAhMd5Args
            {
                Key = "string",
            },
            Sha1 = new Panos.Inputs.IpsecTunnelManualKeyAhSha1Args
            {
                Key = "string",
            },
            Sha256 = new Panos.Inputs.IpsecTunnelManualKeyAhSha256Args
            {
                Key = "string",
            },
            Sha384 = new Panos.Inputs.IpsecTunnelManualKeyAhSha384Args
            {
                Key = "string",
            },
            Sha512 = new Panos.Inputs.IpsecTunnelManualKeyAhSha512Args
            {
                Key = "string",
            },
        },
        Esp = new Panos.Inputs.IpsecTunnelManualKeyEspArgs
        {
            Authentication = new Panos.Inputs.IpsecTunnelManualKeyEspAuthenticationArgs
            {
                Md5 = new Panos.Inputs.IpsecTunnelManualKeyEspAuthenticationMd5Args
                {
                    Key = "string",
                },
                None = null,
                Sha1 = new Panos.Inputs.IpsecTunnelManualKeyEspAuthenticationSha1Args
                {
                    Key = "string",
                },
                Sha256 = new Panos.Inputs.IpsecTunnelManualKeyEspAuthenticationSha256Args
                {
                    Key = "string",
                },
                Sha384 = new Panos.Inputs.IpsecTunnelManualKeyEspAuthenticationSha384Args
                {
                    Key = "string",
                },
                Sha512 = new Panos.Inputs.IpsecTunnelManualKeyEspAuthenticationSha512Args
                {
                    Key = "string",
                },
            },
            Encryption = new Panos.Inputs.IpsecTunnelManualKeyEspEncryptionArgs
            {
                Algorithm = "string",
                Key = "string",
            },
        },
        LocalAddress = new Panos.Inputs.IpsecTunnelManualKeyLocalAddressArgs
        {
            FloatingIp = "string",
            Interface = "string",
            Ip = "string",
        },
        LocalSpi = "string",
        PeerAddress = new Panos.Inputs.IpsecTunnelManualKeyPeerAddressArgs
        {
            Ip = "string",
        },
        RemoteSpi = "string",
    },
    Name = "string",
    TunnelInterface = "string",
    TunnelMonitor = new Panos.Inputs.IpsecTunnelTunnelMonitorArgs
    {
        DestinationIp = "string",
        Enable = false,
        ProxyId = "string",
        TunnelMonitorProfile = "string",
    },
});
Copy
example, err := panos.NewIpsecTunnel(ctx, "ipsecTunnelResource", &panos.IpsecTunnelArgs{
Location: &.IpsecTunnelLocationArgs{
Template: &.IpsecTunnelLocationTemplateArgs{
Name: pulumi.String("string"),
NgfwDevice: pulumi.String("string"),
PanoramaDevice: pulumi.String("string"),
},
TemplateStack: &.IpsecTunnelLocationTemplateStackArgs{
Name: pulumi.String("string"),
NgfwDevice: pulumi.String("string"),
PanoramaDevice: pulumi.String("string"),
},
},
GlobalProtectSatellite: &.IpsecTunnelGlobalProtectSatelliteArgs{
ExternalCa: &.IpsecTunnelGlobalProtectSatelliteExternalCaArgs{
CertificateProfile: pulumi.String("string"),
LocalCertificate: pulumi.String("string"),
},
Ipv6Preferred: pulumi.Bool(false),
LocalAddress: &.IpsecTunnelGlobalProtectSatelliteLocalAddressArgs{
FloatingIp: &.IpsecTunnelGlobalProtectSatelliteLocalAddressFloatingIpArgs{
Ipv4: pulumi.String("string"),
Ipv6: pulumi.String("string"),
},
Interface: pulumi.String("string"),
Ip: &.IpsecTunnelGlobalProtectSatelliteLocalAddressIpArgs{
Ipv4: pulumi.String("string"),
Ipv6: pulumi.String("string"),
},
},
PortalAddress: pulumi.String("string"),
PublishConnectedRoutes: &.IpsecTunnelGlobalProtectSatellitePublishConnectedRoutesArgs{
Enable: pulumi.Bool(false),
},
PublishRoutes: pulumi.StringArray{
pulumi.String("string"),
},
},
AntiReplayWindow: pulumi.String("string"),
Comment: pulumi.String("string"),
CopyFlowLabel: pulumi.Bool(false),
CopyTos: pulumi.Bool(false),
Disabled: pulumi.Bool(false),
AutoKey: &.IpsecTunnelAutoKeyArgs{
IkeGateways: .IpsecTunnelAutoKeyIkeGatewayArray{
&.IpsecTunnelAutoKeyIkeGatewayArgs{
Name: pulumi.String("string"),
},
},
IpsecCryptoProfile: pulumi.String("string"),
ProxyIdV6s: .IpsecTunnelAutoKeyProxyIdV6Array{
&.IpsecTunnelAutoKeyProxyIdV6Args{
Name: pulumi.String("string"),
Local: pulumi.String("string"),
Protocol: &.IpsecTunnelAutoKeyProxyIdV6ProtocolArgs{
Any: &.IpsecTunnelAutoKeyProxyIdV6ProtocolAnyArgs{
},
Number: pulumi.Float64(0),
Tcp: &.IpsecTunnelAutoKeyProxyIdV6ProtocolTcpArgs{
LocalPort: pulumi.Float64(0),
RemotePort: pulumi.Float64(0),
},
Udp: &.IpsecTunnelAutoKeyProxyIdV6ProtocolUdpArgs{
LocalPort: pulumi.Float64(0),
RemotePort: pulumi.Float64(0),
},
},
Remote: pulumi.String("string"),
},
},
ProxyIds: .IpsecTunnelAutoKeyProxyIdArray{
&.IpsecTunnelAutoKeyProxyIdArgs{
Name: pulumi.String("string"),
Local: pulumi.String("string"),
Protocol: &.IpsecTunnelAutoKeyProxyIdProtocolArgs{
Any: &.IpsecTunnelAutoKeyProxyIdProtocolAnyArgs{
},
Number: pulumi.Float64(0),
Tcp: &.IpsecTunnelAutoKeyProxyIdProtocolTcpArgs{
LocalPort: pulumi.Float64(0),
RemotePort: pulumi.Float64(0),
},
Udp: &.IpsecTunnelAutoKeyProxyIdProtocolUdpArgs{
LocalPort: pulumi.Float64(0),
RemotePort: pulumi.Float64(0),
},
},
Remote: pulumi.String("string"),
},
},
},
IpsecMode: pulumi.String("string"),
EnableGreEncapsulation: pulumi.Bool(false),
Ipv6: pulumi.Bool(false),
AntiReplay: pulumi.Bool(false),
ManualKey: &.IpsecTunnelManualKeyArgs{
Ah: &.IpsecTunnelManualKeyAhArgs{
Md5: &.IpsecTunnelManualKeyAhMd5Args{
Key: pulumi.String("string"),
},
Sha1: &.IpsecTunnelManualKeyAhSha1Args{
Key: pulumi.String("string"),
},
Sha256: &.IpsecTunnelManualKeyAhSha256Args{
Key: pulumi.String("string"),
},
Sha384: &.IpsecTunnelManualKeyAhSha384Args{
Key: pulumi.String("string"),
},
Sha512: &.IpsecTunnelManualKeyAhSha512Args{
Key: pulumi.String("string"),
},
},
Esp: &.IpsecTunnelManualKeyEspArgs{
Authentication: &.IpsecTunnelManualKeyEspAuthenticationArgs{
Md5: &.IpsecTunnelManualKeyEspAuthenticationMd5Args{
Key: pulumi.String("string"),
},
None: &.IpsecTunnelManualKeyEspAuthenticationNoneArgs{
},
Sha1: &.IpsecTunnelManualKeyEspAuthenticationSha1Args{
Key: pulumi.String("string"),
},
Sha256: &.IpsecTunnelManualKeyEspAuthenticationSha256Args{
Key: pulumi.String("string"),
},
Sha384: &.IpsecTunnelManualKeyEspAuthenticationSha384Args{
Key: pulumi.String("string"),
},
Sha512: &.IpsecTunnelManualKeyEspAuthenticationSha512Args{
Key: pulumi.String("string"),
},
},
Encryption: &.IpsecTunnelManualKeyEspEncryptionArgs{
Algorithm: pulumi.String("string"),
Key: pulumi.String("string"),
},
},
LocalAddress: &.IpsecTunnelManualKeyLocalAddressArgs{
FloatingIp: pulumi.String("string"),
Interface: pulumi.String("string"),
Ip: pulumi.String("string"),
},
LocalSpi: pulumi.String("string"),
PeerAddress: &.IpsecTunnelManualKeyPeerAddressArgs{
Ip: pulumi.String("string"),
},
RemoteSpi: pulumi.String("string"),
},
Name: pulumi.String("string"),
TunnelInterface: pulumi.String("string"),
TunnelMonitor: &.IpsecTunnelTunnelMonitorArgs{
DestinationIp: pulumi.String("string"),
Enable: pulumi.Bool(false),
ProxyId: pulumi.String("string"),
TunnelMonitorProfile: pulumi.String("string"),
},
})
Copy
var ipsecTunnelResource = new IpsecTunnel("ipsecTunnelResource", IpsecTunnelArgs.builder()
    .location(IpsecTunnelLocationArgs.builder()
        .template(IpsecTunnelLocationTemplateArgs.builder()
            .name("string")
            .ngfwDevice("string")
            .panoramaDevice("string")
            .build())
        .templateStack(IpsecTunnelLocationTemplateStackArgs.builder()
            .name("string")
            .ngfwDevice("string")
            .panoramaDevice("string")
            .build())
        .build())
    .globalProtectSatellite(IpsecTunnelGlobalProtectSatelliteArgs.builder()
        .externalCa(IpsecTunnelGlobalProtectSatelliteExternalCaArgs.builder()
            .certificateProfile("string")
            .localCertificate("string")
            .build())
        .ipv6Preferred(false)
        .localAddress(IpsecTunnelGlobalProtectSatelliteLocalAddressArgs.builder()
            .floatingIp(IpsecTunnelGlobalProtectSatelliteLocalAddressFloatingIpArgs.builder()
                .ipv4("string")
                .ipv6("string")
                .build())
            .interface_("string")
            .ip(IpsecTunnelGlobalProtectSatelliteLocalAddressIpArgs.builder()
                .ipv4("string")
                .ipv6("string")
                .build())
            .build())
        .portalAddress("string")
        .publishConnectedRoutes(IpsecTunnelGlobalProtectSatellitePublishConnectedRoutesArgs.builder()
            .enable(false)
            .build())
        .publishRoutes("string")
        .build())
    .antiReplayWindow("string")
    .comment("string")
    .copyFlowLabel(false)
    .copyTos(false)
    .disabled(false)
    .autoKey(IpsecTunnelAutoKeyArgs.builder()
        .ikeGateways(IpsecTunnelAutoKeyIkeGatewayArgs.builder()
            .name("string")
            .build())
        .ipsecCryptoProfile("string")
        .proxyIdV6s(IpsecTunnelAutoKeyProxyIdV6Args.builder()
            .name("string")
            .local("string")
            .protocol(IpsecTunnelAutoKeyProxyIdV6ProtocolArgs.builder()
                .any()
                .number(0)
                .tcp(IpsecTunnelAutoKeyProxyIdV6ProtocolTcpArgs.builder()
                    .localPort(0)
                    .remotePort(0)
                    .build())
                .udp(IpsecTunnelAutoKeyProxyIdV6ProtocolUdpArgs.builder()
                    .localPort(0)
                    .remotePort(0)
                    .build())
                .build())
            .remote("string")
            .build())
        .proxyIds(IpsecTunnelAutoKeyProxyIdArgs.builder()
            .name("string")
            .local("string")
            .protocol(IpsecTunnelAutoKeyProxyIdProtocolArgs.builder()
                .any()
                .number(0)
                .tcp(IpsecTunnelAutoKeyProxyIdProtocolTcpArgs.builder()
                    .localPort(0)
                    .remotePort(0)
                    .build())
                .udp(IpsecTunnelAutoKeyProxyIdProtocolUdpArgs.builder()
                    .localPort(0)
                    .remotePort(0)
                    .build())
                .build())
            .remote("string")
            .build())
        .build())
    .ipsecMode("string")
    .enableGreEncapsulation(false)
    .ipv6(false)
    .antiReplay(false)
    .manualKey(IpsecTunnelManualKeyArgs.builder()
        .ah(IpsecTunnelManualKeyAhArgs.builder()
            .md5(IpsecTunnelManualKeyAhMd5Args.builder()
                .key("string")
                .build())
            .sha1(IpsecTunnelManualKeyAhSha1Args.builder()
                .key("string")
                .build())
            .sha256(IpsecTunnelManualKeyAhSha256Args.builder()
                .key("string")
                .build())
            .sha384(IpsecTunnelManualKeyAhSha384Args.builder()
                .key("string")
                .build())
            .sha512(IpsecTunnelManualKeyAhSha512Args.builder()
                .key("string")
                .build())
            .build())
        .esp(IpsecTunnelManualKeyEspArgs.builder()
            .authentication(IpsecTunnelManualKeyEspAuthenticationArgs.builder()
                .md5(IpsecTunnelManualKeyEspAuthenticationMd5Args.builder()
                    .key("string")
                    .build())
                .none()
                .sha1(IpsecTunnelManualKeyEspAuthenticationSha1Args.builder()
                    .key("string")
                    .build())
                .sha256(IpsecTunnelManualKeyEspAuthenticationSha256Args.builder()
                    .key("string")
                    .build())
                .sha384(IpsecTunnelManualKeyEspAuthenticationSha384Args.builder()
                    .key("string")
                    .build())
                .sha512(IpsecTunnelManualKeyEspAuthenticationSha512Args.builder()
                    .key("string")
                    .build())
                .build())
            .encryption(IpsecTunnelManualKeyEspEncryptionArgs.builder()
                .algorithm("string")
                .key("string")
                .build())
            .build())
        .localAddress(IpsecTunnelManualKeyLocalAddressArgs.builder()
            .floatingIp("string")
            .interface_("string")
            .ip("string")
            .build())
        .localSpi("string")
        .peerAddress(IpsecTunnelManualKeyPeerAddressArgs.builder()
            .ip("string")
            .build())
        .remoteSpi("string")
        .build())
    .name("string")
    .tunnelInterface("string")
    .tunnelMonitor(IpsecTunnelTunnelMonitorArgs.builder()
        .destinationIp("string")
        .enable(false)
        .proxyId("string")
        .tunnelMonitorProfile("string")
        .build())
    .build());
Copy
ipsec_tunnel_resource = panos.IpsecTunnel("ipsecTunnelResource",
    location={
        "template": {
            "name": "string",
            "ngfw_device": "string",
            "panorama_device": "string",
        },
        "template_stack": {
            "name": "string",
            "ngfw_device": "string",
            "panorama_device": "string",
        },
    },
    global_protect_satellite={
        "external_ca": {
            "certificate_profile": "string",
            "local_certificate": "string",
        },
        "ipv6_preferred": False,
        "local_address": {
            "floating_ip": {
                "ipv4": "string",
                "ipv6": "string",
            },
            "interface": "string",
            "ip": {
                "ipv4": "string",
                "ipv6": "string",
            },
        },
        "portal_address": "string",
        "publish_connected_routes": {
            "enable": False,
        },
        "publish_routes": ["string"],
    },
    anti_replay_window="string",
    comment="string",
    copy_flow_label=False,
    copy_tos=False,
    disabled=False,
    auto_key={
        "ike_gateways": [{
            "name": "string",
        }],
        "ipsec_crypto_profile": "string",
        "proxy_id_v6s": [{
            "name": "string",
            "local": "string",
            "protocol": {
                "any": {},
                "number": 0,
                "tcp": {
                    "local_port": 0,
                    "remote_port": 0,
                },
                "udp": {
                    "local_port": 0,
                    "remote_port": 0,
                },
            },
            "remote": "string",
        }],
        "proxy_ids": [{
            "name": "string",
            "local": "string",
            "protocol": {
                "any": {},
                "number": 0,
                "tcp": {
                    "local_port": 0,
                    "remote_port": 0,
                },
                "udp": {
                    "local_port": 0,
                    "remote_port": 0,
                },
            },
            "remote": "string",
        }],
    },
    ipsec_mode="string",
    enable_gre_encapsulation=False,
    ipv6=False,
    anti_replay=False,
    manual_key={
        "ah": {
            "md5": {
                "key": "string",
            },
            "sha1": {
                "key": "string",
            },
            "sha256": {
                "key": "string",
            },
            "sha384": {
                "key": "string",
            },
            "sha512": {
                "key": "string",
            },
        },
        "esp": {
            "authentication": {
                "md5": {
                    "key": "string",
                },
                "none": {},
                "sha1": {
                    "key": "string",
                },
                "sha256": {
                    "key": "string",
                },
                "sha384": {
                    "key": "string",
                },
                "sha512": {
                    "key": "string",
                },
            },
            "encryption": {
                "algorithm": "string",
                "key": "string",
            },
        },
        "local_address": {
            "floating_ip": "string",
            "interface": "string",
            "ip": "string",
        },
        "local_spi": "string",
        "peer_address": {
            "ip": "string",
        },
        "remote_spi": "string",
    },
    name="string",
    tunnel_interface="string",
    tunnel_monitor={
        "destination_ip": "string",
        "enable": False,
        "proxy_id": "string",
        "tunnel_monitor_profile": "string",
    })
Copy
const ipsecTunnelResource = new panos.IpsecTunnel("ipsecTunnelResource", {
    location: {
        template: {
            name: "string",
            ngfwDevice: "string",
            panoramaDevice: "string",
        },
        templateStack: {
            name: "string",
            ngfwDevice: "string",
            panoramaDevice: "string",
        },
    },
    globalProtectSatellite: {
        externalCa: {
            certificateProfile: "string",
            localCertificate: "string",
        },
        ipv6Preferred: false,
        localAddress: {
            floatingIp: {
                ipv4: "string",
                ipv6: "string",
            },
            "interface": "string",
            ip: {
                ipv4: "string",
                ipv6: "string",
            },
        },
        portalAddress: "string",
        publishConnectedRoutes: {
            enable: false,
        },
        publishRoutes: ["string"],
    },
    antiReplayWindow: "string",
    comment: "string",
    copyFlowLabel: false,
    copyTos: false,
    disabled: false,
    autoKey: {
        ikeGateways: [{
            name: "string",
        }],
        ipsecCryptoProfile: "string",
        proxyIdV6s: [{
            name: "string",
            local: "string",
            protocol: {
                any: {},
                number: 0,
                tcp: {
                    localPort: 0,
                    remotePort: 0,
                },
                udp: {
                    localPort: 0,
                    remotePort: 0,
                },
            },
            remote: "string",
        }],
        proxyIds: [{
            name: "string",
            local: "string",
            protocol: {
                any: {},
                number: 0,
                tcp: {
                    localPort: 0,
                    remotePort: 0,
                },
                udp: {
                    localPort: 0,
                    remotePort: 0,
                },
            },
            remote: "string",
        }],
    },
    ipsecMode: "string",
    enableGreEncapsulation: false,
    ipv6: false,
    antiReplay: false,
    manualKey: {
        ah: {
            md5: {
                key: "string",
            },
            sha1: {
                key: "string",
            },
            sha256: {
                key: "string",
            },
            sha384: {
                key: "string",
            },
            sha512: {
                key: "string",
            },
        },
        esp: {
            authentication: {
                md5: {
                    key: "string",
                },
                none: {},
                sha1: {
                    key: "string",
                },
                sha256: {
                    key: "string",
                },
                sha384: {
                    key: "string",
                },
                sha512: {
                    key: "string",
                },
            },
            encryption: {
                algorithm: "string",
                key: "string",
            },
        },
        localAddress: {
            floatingIp: "string",
            "interface": "string",
            ip: "string",
        },
        localSpi: "string",
        peerAddress: {
            ip: "string",
        },
        remoteSpi: "string",
    },
    name: "string",
    tunnelInterface: "string",
    tunnelMonitor: {
        destinationIp: "string",
        enable: false,
        proxyId: "string",
        tunnelMonitorProfile: "string",
    },
});
Copy
type: panos:IpsecTunnel
properties:
    antiReplay: false
    antiReplayWindow: string
    autoKey:
        ikeGateways:
            - name: string
        ipsecCryptoProfile: string
        proxyIdV6s:
            - local: string
              name: string
              protocol:
                any: {}
                number: 0
                tcp:
                    localPort: 0
                    remotePort: 0
                udp:
                    localPort: 0
                    remotePort: 0
              remote: string
        proxyIds:
            - local: string
              name: string
              protocol:
                any: {}
                number: 0
                tcp:
                    localPort: 0
                    remotePort: 0
                udp:
                    localPort: 0
                    remotePort: 0
              remote: string
    comment: string
    copyFlowLabel: false
    copyTos: false
    disabled: false
    enableGreEncapsulation: false
    globalProtectSatellite:
        externalCa:
            certificateProfile: string
            localCertificate: string
        ipv6Preferred: false
        localAddress:
            floatingIp:
                ipv4: string
                ipv6: string
            interface: string
            ip:
                ipv4: string
                ipv6: string
        portalAddress: string
        publishConnectedRoutes:
            enable: false
        publishRoutes:
            - string
    ipsecMode: string
    ipv6: false
    location:
        template:
            name: string
            ngfwDevice: string
            panoramaDevice: string
        templateStack:
            name: string
            ngfwDevice: string
            panoramaDevice: string
    manualKey:
        ah:
            md5:
                key: string
            sha1:
                key: string
            sha256:
                key: string
            sha384:
                key: string
            sha512:
                key: string
        esp:
            authentication:
                md5:
                    key: string
                none: {}
                sha1:
                    key: string
                sha256:
                    key: string
                sha384:
                    key: string
                sha512:
                    key: string
            encryption:
                algorithm: string
                key: string
        localAddress:
            floatingIp: string
            interface: string
            ip: string
        localSpi: string
        peerAddress:
            ip: string
        remoteSpi: string
    name: string
    tunnelInterface: string
    tunnelMonitor:
        destinationIp: string
        enable: false
        proxyId: string
        tunnelMonitorProfile: string
Copy

IpsecTunnel Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The IpsecTunnel resource accepts the following input properties:

Location This property is required. IpsecTunnelLocation
The location of this object.
AntiReplay bool
Enable Anti-Replay check on this tunnel
AntiReplayWindow string
64,128,256,512,1024,2048,4096
AutoKey IpsecTunnelAutoKey
Comment string
CopyFlowLabel bool
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
CopyTos bool
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
Disabled bool
Disable the IPSec tunnel
EnableGreEncapsulation bool
allow GRE over IPSec
GlobalProtectSatellite IpsecTunnelGlobalProtectSatellite
IpsecMode string
Ipv6 bool
use IPv6 for the IPSec tunnel
ManualKey IpsecTunnelManualKey
Name string
TunnelInterface string
to apply IPSec VPN tunnels to tunnel interface
TunnelMonitor IpsecTunnelTunnelMonitor
Location This property is required. IpsecTunnelLocationArgs
The location of this object.
AntiReplay bool
Enable Anti-Replay check on this tunnel
AntiReplayWindow string
64,128,256,512,1024,2048,4096
AutoKey IpsecTunnelAutoKeyArgs
Comment string
CopyFlowLabel bool
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
CopyTos bool
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
Disabled bool
Disable the IPSec tunnel
EnableGreEncapsulation bool
allow GRE over IPSec
GlobalProtectSatellite IpsecTunnelGlobalProtectSatelliteArgs
IpsecMode string
Ipv6 bool
use IPv6 for the IPSec tunnel
ManualKey IpsecTunnelManualKeyArgs
Name string
TunnelInterface string
to apply IPSec VPN tunnels to tunnel interface
TunnelMonitor IpsecTunnelTunnelMonitorArgs
location This property is required. IpsecTunnelLocation
The location of this object.
antiReplay Boolean
Enable Anti-Replay check on this tunnel
antiReplayWindow String
64,128,256,512,1024,2048,4096
autoKey IpsecTunnelAutoKey
comment String
copyFlowLabel Boolean
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
copyTos Boolean
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
disabled Boolean
Disable the IPSec tunnel
enableGreEncapsulation Boolean
allow GRE over IPSec
globalProtectSatellite IpsecTunnelGlobalProtectSatellite
ipsecMode String
ipv6 Boolean
use IPv6 for the IPSec tunnel
manualKey IpsecTunnelManualKey
name String
tunnelInterface String
to apply IPSec VPN tunnels to tunnel interface
tunnelMonitor IpsecTunnelTunnelMonitor
location This property is required. IpsecTunnelLocation
The location of this object.
antiReplay boolean
Enable Anti-Replay check on this tunnel
antiReplayWindow string
64,128,256,512,1024,2048,4096
autoKey IpsecTunnelAutoKey
comment string
copyFlowLabel boolean
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
copyTos boolean
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
disabled boolean
Disable the IPSec tunnel
enableGreEncapsulation boolean
allow GRE over IPSec
globalProtectSatellite IpsecTunnelGlobalProtectSatellite
ipsecMode string
ipv6 boolean
use IPv6 for the IPSec tunnel
manualKey IpsecTunnelManualKey
name string
tunnelInterface string
to apply IPSec VPN tunnels to tunnel interface
tunnelMonitor IpsecTunnelTunnelMonitor
location This property is required. IpsecTunnelLocationArgs
The location of this object.
anti_replay bool
Enable Anti-Replay check on this tunnel
anti_replay_window str
64,128,256,512,1024,2048,4096
auto_key IpsecTunnelAutoKeyArgs
comment str
copy_flow_label bool
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
copy_tos bool
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
disabled bool
Disable the IPSec tunnel
enable_gre_encapsulation bool
allow GRE over IPSec
global_protect_satellite IpsecTunnelGlobalProtectSatelliteArgs
ipsec_mode str
ipv6 bool
use IPv6 for the IPSec tunnel
manual_key IpsecTunnelManualKeyArgs
name str
tunnel_interface str
to apply IPSec VPN tunnels to tunnel interface
tunnel_monitor IpsecTunnelTunnelMonitorArgs
location This property is required. Property Map
The location of this object.
antiReplay Boolean
Enable Anti-Replay check on this tunnel
antiReplayWindow String
64,128,256,512,1024,2048,4096
autoKey Property Map
comment String
copyFlowLabel Boolean
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
copyTos Boolean
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
disabled Boolean
Disable the IPSec tunnel
enableGreEncapsulation Boolean
allow GRE over IPSec
globalProtectSatellite Property Map
ipsecMode String
ipv6 Boolean
use IPv6 for the IPSec tunnel
manualKey Property Map
name String
tunnelInterface String
to apply IPSec VPN tunnels to tunnel interface
tunnelMonitor Property Map

Outputs

All input properties are implicitly available as output properties. Additionally, the IpsecTunnel resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing IpsecTunnel Resource

Get an existing IpsecTunnel resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: IpsecTunnelState, opts?: CustomResourceOptions): IpsecTunnel
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        anti_replay: Optional[bool] = None,
        anti_replay_window: Optional[str] = None,
        auto_key: Optional[IpsecTunnelAutoKeyArgs] = None,
        comment: Optional[str] = None,
        copy_flow_label: Optional[bool] = None,
        copy_tos: Optional[bool] = None,
        disabled: Optional[bool] = None,
        enable_gre_encapsulation: Optional[bool] = None,
        global_protect_satellite: Optional[IpsecTunnelGlobalProtectSatelliteArgs] = None,
        ipsec_mode: Optional[str] = None,
        ipv6: Optional[bool] = None,
        location: Optional[IpsecTunnelLocationArgs] = None,
        manual_key: Optional[IpsecTunnelManualKeyArgs] = None,
        name: Optional[str] = None,
        tunnel_interface: Optional[str] = None,
        tunnel_monitor: Optional[IpsecTunnelTunnelMonitorArgs] = None) -> IpsecTunnel
func GetIpsecTunnel(ctx *Context, name string, id IDInput, state *IpsecTunnelState, opts ...ResourceOption) (*IpsecTunnel, error)
public static IpsecTunnel Get(string name, Input<string> id, IpsecTunnelState? state, CustomResourceOptions? opts = null)
public static IpsecTunnel get(String name, Output<String> id, IpsecTunnelState state, CustomResourceOptions options)
resources:  _:    type: panos:IpsecTunnel    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AntiReplay bool
Enable Anti-Replay check on this tunnel
AntiReplayWindow string
64,128,256,512,1024,2048,4096
AutoKey IpsecTunnelAutoKey
Comment string
CopyFlowLabel bool
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
CopyTos bool
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
Disabled bool
Disable the IPSec tunnel
EnableGreEncapsulation bool
allow GRE over IPSec
GlobalProtectSatellite IpsecTunnelGlobalProtectSatellite
IpsecMode string
Ipv6 bool
use IPv6 for the IPSec tunnel
Location IpsecTunnelLocation
The location of this object.
ManualKey IpsecTunnelManualKey
Name string
TunnelInterface string
to apply IPSec VPN tunnels to tunnel interface
TunnelMonitor IpsecTunnelTunnelMonitor
AntiReplay bool
Enable Anti-Replay check on this tunnel
AntiReplayWindow string
64,128,256,512,1024,2048,4096
AutoKey IpsecTunnelAutoKeyArgs
Comment string
CopyFlowLabel bool
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
CopyTos bool
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
Disabled bool
Disable the IPSec tunnel
EnableGreEncapsulation bool
allow GRE over IPSec
GlobalProtectSatellite IpsecTunnelGlobalProtectSatelliteArgs
IpsecMode string
Ipv6 bool
use IPv6 for the IPSec tunnel
Location IpsecTunnelLocationArgs
The location of this object.
ManualKey IpsecTunnelManualKeyArgs
Name string
TunnelInterface string
to apply IPSec VPN tunnels to tunnel interface
TunnelMonitor IpsecTunnelTunnelMonitorArgs
antiReplay Boolean
Enable Anti-Replay check on this tunnel
antiReplayWindow String
64,128,256,512,1024,2048,4096
autoKey IpsecTunnelAutoKey
comment String
copyFlowLabel Boolean
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
copyTos Boolean
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
disabled Boolean
Disable the IPSec tunnel
enableGreEncapsulation Boolean
allow GRE over IPSec
globalProtectSatellite IpsecTunnelGlobalProtectSatellite
ipsecMode String
ipv6 Boolean
use IPv6 for the IPSec tunnel
location IpsecTunnelLocation
The location of this object.
manualKey IpsecTunnelManualKey
name String
tunnelInterface String
to apply IPSec VPN tunnels to tunnel interface
tunnelMonitor IpsecTunnelTunnelMonitor
antiReplay boolean
Enable Anti-Replay check on this tunnel
antiReplayWindow string
64,128,256,512,1024,2048,4096
autoKey IpsecTunnelAutoKey
comment string
copyFlowLabel boolean
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
copyTos boolean
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
disabled boolean
Disable the IPSec tunnel
enableGreEncapsulation boolean
allow GRE over IPSec
globalProtectSatellite IpsecTunnelGlobalProtectSatellite
ipsecMode string
ipv6 boolean
use IPv6 for the IPSec tunnel
location IpsecTunnelLocation
The location of this object.
manualKey IpsecTunnelManualKey
name string
tunnelInterface string
to apply IPSec VPN tunnels to tunnel interface
tunnelMonitor IpsecTunnelTunnelMonitor
anti_replay bool
Enable Anti-Replay check on this tunnel
anti_replay_window str
64,128,256,512,1024,2048,4096
auto_key IpsecTunnelAutoKeyArgs
comment str
copy_flow_label bool
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
copy_tos bool
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
disabled bool
Disable the IPSec tunnel
enable_gre_encapsulation bool
allow GRE over IPSec
global_protect_satellite IpsecTunnelGlobalProtectSatelliteArgs
ipsec_mode str
ipv6 bool
use IPv6 for the IPSec tunnel
location IpsecTunnelLocationArgs
The location of this object.
manual_key IpsecTunnelManualKeyArgs
name str
tunnel_interface str
to apply IPSec VPN tunnels to tunnel interface
tunnel_monitor IpsecTunnelTunnelMonitorArgs
antiReplay Boolean
Enable Anti-Replay check on this tunnel
antiReplayWindow String
64,128,256,512,1024,2048,4096
autoKey Property Map
comment String
copyFlowLabel Boolean
Copy IPv6 flow label for 6in6 tunnel from inner packet to IPSec packet (not recommended)
copyTos Boolean
Copy IP TOS bits from inner packet to IPSec packet (not recommended)
disabled Boolean
Disable the IPSec tunnel
enableGreEncapsulation Boolean
allow GRE over IPSec
globalProtectSatellite Property Map
ipsecMode String
ipv6 Boolean
use IPv6 for the IPSec tunnel
location Property Map
The location of this object.
manualKey Property Map
name String
tunnelInterface String
to apply IPSec VPN tunnels to tunnel interface
tunnelMonitor Property Map

Supporting Types

IpsecTunnelAutoKey
, IpsecTunnelAutoKeyArgs

IpsecTunnelAutoKeyIkeGateway
, IpsecTunnelAutoKeyIkeGatewayArgs

Name This property is required. string
Name This property is required. string
name This property is required. String
name This property is required. string
name This property is required. str
name This property is required. String

IpsecTunnelAutoKeyProxyId
, IpsecTunnelAutoKeyProxyIdArgs

Name This property is required. string
Local string
IP subnet or IP address represents local network
Protocol IpsecTunnelAutoKeyProxyIdProtocol
Remote string
IP subnet or IP address represents remote network
Name This property is required. string
Local string
IP subnet or IP address represents local network
Protocol IpsecTunnelAutoKeyProxyIdProtocol
Remote string
IP subnet or IP address represents remote network
name This property is required. String
local String
IP subnet or IP address represents local network
protocol IpsecTunnelAutoKeyProxyIdProtocol
remote String
IP subnet or IP address represents remote network
name This property is required. string
local string
IP subnet or IP address represents local network
protocol IpsecTunnelAutoKeyProxyIdProtocol
remote string
IP subnet or IP address represents remote network
name This property is required. str
local str
IP subnet or IP address represents local network
protocol IpsecTunnelAutoKeyProxyIdProtocol
remote str
IP subnet or IP address represents remote network
name This property is required. String
local String
IP subnet or IP address represents local network
protocol Property Map
remote String
IP subnet or IP address represents remote network

IpsecTunnelAutoKeyProxyIdProtocol
, IpsecTunnelAutoKeyProxyIdProtocolArgs

IpsecTunnelAutoKeyProxyIdProtocolTcp
, IpsecTunnelAutoKeyProxyIdProtocolTcpArgs

LocalPort double
RemotePort double
LocalPort float64
RemotePort float64
localPort Double
remotePort Double
localPort number
remotePort number
localPort Number
remotePort Number

IpsecTunnelAutoKeyProxyIdProtocolUdp
, IpsecTunnelAutoKeyProxyIdProtocolUdpArgs

LocalPort double
RemotePort double
LocalPort float64
RemotePort float64
localPort Double
remotePort Double
localPort number
remotePort number
localPort Number
remotePort Number

IpsecTunnelAutoKeyProxyIdV6
, IpsecTunnelAutoKeyProxyIdV6Args

Name This property is required. string
Local string
IP subnet or IP address represents local network
Protocol IpsecTunnelAutoKeyProxyIdV6Protocol
Remote string
IP subnet or IP address represents remote network
Name This property is required. string
Local string
IP subnet or IP address represents local network
Protocol IpsecTunnelAutoKeyProxyIdV6Protocol
Remote string
IP subnet or IP address represents remote network
name This property is required. String
local String
IP subnet or IP address represents local network
protocol IpsecTunnelAutoKeyProxyIdV6Protocol
remote String
IP subnet or IP address represents remote network
name This property is required. string
local string
IP subnet or IP address represents local network
protocol IpsecTunnelAutoKeyProxyIdV6Protocol
remote string
IP subnet or IP address represents remote network
name This property is required. str
local str
IP subnet or IP address represents local network
protocol IpsecTunnelAutoKeyProxyIdV6Protocol
remote str
IP subnet or IP address represents remote network
name This property is required. String
local String
IP subnet or IP address represents local network
protocol Property Map
remote String
IP subnet or IP address represents remote network

IpsecTunnelAutoKeyProxyIdV6Protocol
, IpsecTunnelAutoKeyProxyIdV6ProtocolArgs

IpsecTunnelAutoKeyProxyIdV6ProtocolTcp
, IpsecTunnelAutoKeyProxyIdV6ProtocolTcpArgs

LocalPort double
RemotePort double
LocalPort float64
RemotePort float64
localPort Double
remotePort Double
localPort number
remotePort number
localPort Number
remotePort Number

IpsecTunnelAutoKeyProxyIdV6ProtocolUdp
, IpsecTunnelAutoKeyProxyIdV6ProtocolUdpArgs

LocalPort double
RemotePort double
LocalPort float64
RemotePort float64
localPort Double
remotePort Double
localPort number
remotePort number
localPort Number
remotePort Number

IpsecTunnelGlobalProtectSatellite
, IpsecTunnelGlobalProtectSatelliteArgs

externalCa Property Map
ipv6Preferred Boolean
Prefer to register to portal in ipv6. Only applicable to fqdn portal-address
localAddress Property Map
portalAddress String
GlobalProtect portal address
publishConnectedRoutes Property Map
publishRoutes List<String>

IpsecTunnelGlobalProtectSatelliteExternalCa
, IpsecTunnelGlobalProtectSatelliteExternalCaArgs

CertificateProfile string
Profile for authenticating GlobalProtect gateway certificates
LocalCertificate string
GlobalProtect satellite certificate file name
CertificateProfile string
Profile for authenticating GlobalProtect gateway certificates
LocalCertificate string
GlobalProtect satellite certificate file name
certificateProfile String
Profile for authenticating GlobalProtect gateway certificates
localCertificate String
GlobalProtect satellite certificate file name
certificateProfile string
Profile for authenticating GlobalProtect gateway certificates
localCertificate string
GlobalProtect satellite certificate file name
certificate_profile str
Profile for authenticating GlobalProtect gateway certificates
local_certificate str
GlobalProtect satellite certificate file name
certificateProfile String
Profile for authenticating GlobalProtect gateway certificates
localCertificate String
GlobalProtect satellite certificate file name

IpsecTunnelGlobalProtectSatelliteLocalAddress
, IpsecTunnelGlobalProtectSatelliteLocalAddressArgs

floatingIp Property Map
interface String
Interface to communicate with Portal
ip Property Map

IpsecTunnelGlobalProtectSatelliteLocalAddressFloatingIp
, IpsecTunnelGlobalProtectSatelliteLocalAddressFloatingIpArgs

Ipv4 string
Floating IP address in HA Active-Active configuration
Ipv6 string
Floating IPv6 address in HA Active-Active configuration
Ipv4 string
Floating IP address in HA Active-Active configuration
Ipv6 string
Floating IPv6 address in HA Active-Active configuration
ipv4 String
Floating IP address in HA Active-Active configuration
ipv6 String
Floating IPv6 address in HA Active-Active configuration
ipv4 string
Floating IP address in HA Active-Active configuration
ipv6 string
Floating IPv6 address in HA Active-Active configuration
ipv4 str
Floating IP address in HA Active-Active configuration
ipv6 str
Floating IPv6 address in HA Active-Active configuration
ipv4 String
Floating IP address in HA Active-Active configuration
ipv6 String
Floating IPv6 address in HA Active-Active configuration

IpsecTunnelGlobalProtectSatelliteLocalAddressIp
, IpsecTunnelGlobalProtectSatelliteLocalAddressIpArgs

Ipv4 string
specify exact IP address if interface has multiple addresses
Ipv6 string
specify exact local IPv6 address if interface has multiple addresses
Ipv4 string
specify exact IP address if interface has multiple addresses
Ipv6 string
specify exact local IPv6 address if interface has multiple addresses
ipv4 String
specify exact IP address if interface has multiple addresses
ipv6 String
specify exact local IPv6 address if interface has multiple addresses
ipv4 string
specify exact IP address if interface has multiple addresses
ipv6 string
specify exact local IPv6 address if interface has multiple addresses
ipv4 str
specify exact IP address if interface has multiple addresses
ipv6 str
specify exact local IPv6 address if interface has multiple addresses
ipv4 String
specify exact IP address if interface has multiple addresses
ipv6 String
specify exact local IPv6 address if interface has multiple addresses

IpsecTunnelGlobalProtectSatellitePublishConnectedRoutes
, IpsecTunnelGlobalProtectSatellitePublishConnectedRoutesArgs

Enable bool
Enable publishing of connected and static routes
Enable bool
Enable publishing of connected and static routes
enable Boolean
Enable publishing of connected and static routes
enable boolean
Enable publishing of connected and static routes
enable bool
Enable publishing of connected and static routes
enable Boolean
Enable publishing of connected and static routes

IpsecTunnelLocation
, IpsecTunnelLocationArgs

Template IpsecTunnelLocationTemplate
Located in a specific template
TemplateStack IpsecTunnelLocationTemplateStack
Located in a specific template stack
Template IpsecTunnelLocationTemplate
Located in a specific template
TemplateStack IpsecTunnelLocationTemplateStack
Located in a specific template stack
template IpsecTunnelLocationTemplate
Located in a specific template
templateStack IpsecTunnelLocationTemplateStack
Located in a specific template stack
template IpsecTunnelLocationTemplate
Located in a specific template
templateStack IpsecTunnelLocationTemplateStack
Located in a specific template stack
template IpsecTunnelLocationTemplate
Located in a specific template
template_stack IpsecTunnelLocationTemplateStack
Located in a specific template stack
template Property Map
Located in a specific template
templateStack Property Map
Located in a specific template stack

IpsecTunnelLocationTemplate
, IpsecTunnelLocationTemplateArgs

Name string
Specific Panorama template
NgfwDevice string
The NGFW device
PanoramaDevice string
Specific Panorama device
Name string
Specific Panorama template
NgfwDevice string
The NGFW device
PanoramaDevice string
Specific Panorama device
name String
Specific Panorama template
ngfwDevice String
The NGFW device
panoramaDevice String
Specific Panorama device
name string
Specific Panorama template
ngfwDevice string
The NGFW device
panoramaDevice string
Specific Panorama device
name str
Specific Panorama template
ngfw_device str
The NGFW device
panorama_device str
Specific Panorama device
name String
Specific Panorama template
ngfwDevice String
The NGFW device
panoramaDevice String
Specific Panorama device

IpsecTunnelLocationTemplateStack
, IpsecTunnelLocationTemplateStackArgs

Name string
Specific Panorama template stack
NgfwDevice string
The NGFW device
PanoramaDevice string
Specific Panorama device
Name string
Specific Panorama template stack
NgfwDevice string
The NGFW device
PanoramaDevice string
Specific Panorama device
name String
Specific Panorama template stack
ngfwDevice String
The NGFW device
panoramaDevice String
Specific Panorama device
name string
Specific Panorama template stack
ngfwDevice string
The NGFW device
panoramaDevice string
Specific Panorama device
name str
Specific Panorama template stack
ngfw_device str
The NGFW device
panorama_device str
Specific Panorama device
name String
Specific Panorama template stack
ngfwDevice String
The NGFW device
panoramaDevice String
Specific Panorama device

IpsecTunnelManualKey
, IpsecTunnelManualKeyArgs

Ah IpsecTunnelManualKeyAh
Esp IpsecTunnelManualKeyEsp
LocalAddress IpsecTunnelManualKeyLocalAddress
LocalSpi string
Outbound SPI, hex format xxxxxxxx. range 00001000 to 1FFFFFFF
PeerAddress IpsecTunnelManualKeyPeerAddress
RemoteSpi string
Inbound SPI, hex format xxxxxxxx.
Ah IpsecTunnelManualKeyAh
Esp IpsecTunnelManualKeyEsp
LocalAddress IpsecTunnelManualKeyLocalAddress
LocalSpi string
Outbound SPI, hex format xxxxxxxx. range 00001000 to 1FFFFFFF
PeerAddress IpsecTunnelManualKeyPeerAddress
RemoteSpi string
Inbound SPI, hex format xxxxxxxx.
ah IpsecTunnelManualKeyAh
esp IpsecTunnelManualKeyEsp
localAddress IpsecTunnelManualKeyLocalAddress
localSpi String
Outbound SPI, hex format xxxxxxxx. range 00001000 to 1FFFFFFF
peerAddress IpsecTunnelManualKeyPeerAddress
remoteSpi String
Inbound SPI, hex format xxxxxxxx.
ah IpsecTunnelManualKeyAh
esp IpsecTunnelManualKeyEsp
localAddress IpsecTunnelManualKeyLocalAddress
localSpi string
Outbound SPI, hex format xxxxxxxx. range 00001000 to 1FFFFFFF
peerAddress IpsecTunnelManualKeyPeerAddress
remoteSpi string
Inbound SPI, hex format xxxxxxxx.
ah IpsecTunnelManualKeyAh
esp IpsecTunnelManualKeyEsp
local_address IpsecTunnelManualKeyLocalAddress
local_spi str
Outbound SPI, hex format xxxxxxxx. range 00001000 to 1FFFFFFF
peer_address IpsecTunnelManualKeyPeerAddress
remote_spi str
Inbound SPI, hex format xxxxxxxx.
ah Property Map
esp Property Map
localAddress Property Map
localSpi String
Outbound SPI, hex format xxxxxxxx. range 00001000 to 1FFFFFFF
peerAddress Property Map
remoteSpi String
Inbound SPI, hex format xxxxxxxx.

IpsecTunnelManualKeyAh
, IpsecTunnelManualKeyAhArgs

IpsecTunnelManualKeyAhMd5
, IpsecTunnelManualKeyAhMd5Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections

IpsecTunnelManualKeyAhSha1
, IpsecTunnelManualKeyAhSha1Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections

IpsecTunnelManualKeyAhSha256
, IpsecTunnelManualKeyAhSha256Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections

IpsecTunnelManualKeyAhSha384
, IpsecTunnelManualKeyAhSha384Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections

IpsecTunnelManualKeyAhSha512
, IpsecTunnelManualKeyAhSha512Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections

IpsecTunnelManualKeyEsp
, IpsecTunnelManualKeyEspArgs

IpsecTunnelManualKeyEspAuthentication
, IpsecTunnelManualKeyEspAuthenticationArgs

IpsecTunnelManualKeyEspAuthenticationMd5
, IpsecTunnelManualKeyEspAuthenticationMd5Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 4 sections

IpsecTunnelManualKeyEspAuthenticationSha1
, IpsecTunnelManualKeyEspAuthenticationSha1Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 5 sections

IpsecTunnelManualKeyEspAuthenticationSha256
, IpsecTunnelManualKeyEspAuthenticationSha256Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 8 sections

IpsecTunnelManualKeyEspAuthenticationSha384
, IpsecTunnelManualKeyEspAuthenticationSha384Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 12 sections

IpsecTunnelManualKeyEspAuthenticationSha512
, IpsecTunnelManualKeyEspAuthenticationSha512Args

Key string
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
Key string
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
key string
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
key str
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections
key String
hex format xxxxxxxx[-xxxxxxxx]... total 16 sections

IpsecTunnelManualKeyEspEncryption
, IpsecTunnelManualKeyEspEncryptionArgs

Algorithm string
Key string
hex format xxxxxxxx[-xxxxxxxx]... total number of sections: des: 2, 3des: 6, aes-128-cbc: 4, aes-192-cbc: 6, aes-256-cbc: 8
Algorithm string
Key string
hex format xxxxxxxx[-xxxxxxxx]... total number of sections: des: 2, 3des: 6, aes-128-cbc: 4, aes-192-cbc: 6, aes-256-cbc: 8
algorithm String
key String
hex format xxxxxxxx[-xxxxxxxx]... total number of sections: des: 2, 3des: 6, aes-128-cbc: 4, aes-192-cbc: 6, aes-256-cbc: 8
algorithm string
key string
hex format xxxxxxxx[-xxxxxxxx]... total number of sections: des: 2, 3des: 6, aes-128-cbc: 4, aes-192-cbc: 6, aes-256-cbc: 8
algorithm str
key str
hex format xxxxxxxx[-xxxxxxxx]... total number of sections: des: 2, 3des: 6, aes-128-cbc: 4, aes-192-cbc: 6, aes-256-cbc: 8
algorithm String
key String
hex format xxxxxxxx[-xxxxxxxx]... total number of sections: des: 2, 3des: 6, aes-128-cbc: 4, aes-192-cbc: 6, aes-256-cbc: 8

IpsecTunnelManualKeyLocalAddress
, IpsecTunnelManualKeyLocalAddressArgs

FloatingIp string
Floating IP address in HA Active-Active configuration
Interface string
Interface to termate tunnel
Ip string
specify exact IP address if interface has multiple addresses
FloatingIp string
Floating IP address in HA Active-Active configuration
Interface string
Interface to termate tunnel
Ip string
specify exact IP address if interface has multiple addresses
floatingIp String
Floating IP address in HA Active-Active configuration
interface_ String
Interface to termate tunnel
ip String
specify exact IP address if interface has multiple addresses
floatingIp string
Floating IP address in HA Active-Active configuration
interface string
Interface to termate tunnel
ip string
specify exact IP address if interface has multiple addresses
floating_ip str
Floating IP address in HA Active-Active configuration
interface str
Interface to termate tunnel
ip str
specify exact IP address if interface has multiple addresses
floatingIp String
Floating IP address in HA Active-Active configuration
interface String
Interface to termate tunnel
ip String
specify exact IP address if interface has multiple addresses

IpsecTunnelManualKeyPeerAddress
, IpsecTunnelManualKeyPeerAddressArgs

Ip string
Tunnel peer IP address
Ip string
Tunnel peer IP address
ip String
Tunnel peer IP address
ip string
Tunnel peer IP address
ip str
Tunnel peer IP address
ip String
Tunnel peer IP address

IpsecTunnelTunnelMonitor
, IpsecTunnelTunnelMonitorArgs

DestinationIp string
Destination IP to send ICMP probe
Enable bool
Enable tunnel monitoring on this tunnel
ProxyId string
Which proxy-id (or proxy-id-v6) the monitoring traffic will use
TunnelMonitorProfile string
monitoring action
DestinationIp string
Destination IP to send ICMP probe
Enable bool
Enable tunnel monitoring on this tunnel
ProxyId string
Which proxy-id (or proxy-id-v6) the monitoring traffic will use
TunnelMonitorProfile string
monitoring action
destinationIp String
Destination IP to send ICMP probe
enable Boolean
Enable tunnel monitoring on this tunnel
proxyId String
Which proxy-id (or proxy-id-v6) the monitoring traffic will use
tunnelMonitorProfile String
monitoring action
destinationIp string
Destination IP to send ICMP probe
enable boolean
Enable tunnel monitoring on this tunnel
proxyId string
Which proxy-id (or proxy-id-v6) the monitoring traffic will use
tunnelMonitorProfile string
monitoring action
destination_ip str
Destination IP to send ICMP probe
enable bool
Enable tunnel monitoring on this tunnel
proxy_id str
Which proxy-id (or proxy-id-v6) the monitoring traffic will use
tunnel_monitor_profile str
monitoring action
destinationIp String
Destination IP to send ICMP probe
enable Boolean
Enable tunnel monitoring on this tunnel
proxyId String
Which proxy-id (or proxy-id-v6) the monitoring traffic will use
tunnelMonitorProfile String
monitoring action

Package Details

Repository
panos paloaltonetworks/terraform-provider-panos
License
Notes
This Pulumi package is based on the panos Terraform Provider.
panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks
paloaltonetworks/terraform-provider-panos