1. Packages
  2. Cisco Catalyst SD-WAN Provider
  3. API Docs
  4. ServiceLanVpnInterfaceIpsecFeature
Cisco Catalyst SD-WAN v0.3.0 published on Friday, Mar 28, 2025 by Pulumi

sdwan.ServiceLanVpnInterfaceIpsecFeature

Explore with Pulumi AI

This resource can manage a Service LAN VPN Interface IPSec Feature.

  • Minimum SD-WAN Manager version: 20.12.0

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as sdwan from "@pulumi/sdwan";

const example = new sdwan.ServiceLanVpnInterfaceIpsecFeature("example", {
    name: "Example",
    description: "My Example",
    featureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    serviceLanVpnFeatureId: "140331f6-5418-4755-a059-13c77eb96037",
    interfaceName: "ipsec987",
    shutdown: true,
    interfaceDescription: "ipsec987",
    ipv4Address: "9.7.5.4",
    ipv4SubnetMask: "255.255.255.0",
    tunnelSourceIpv4Address: "1.3.5.88",
    tunnelSourceIpv4SubnetMask: "255.255.255.0",
    tunnelSourceInterface: "GigabitEthernet8",
    tunnelDestinationIpv4Address: "2.55.67.99",
    tunnelDestinationIpv4SubnetMask: "255.255.255.0",
    applicationTunnelType: "none",
    tcpMss: 1460,
    clearDontFragment: false,
    ipMtu: 1500,
    dpdInterval: 10,
    dpdRetries: 3,
    ikePresharedKey: "123",
    ikeVersion: 1,
    ikeIntegrityProtocol: "main",
    ikeRekeyInterval: 14400,
    ikeCiphersuite: "aes256-cbc-sha1",
    ikeDiffieHellmanGroup: "16",
    ikeIdLocalEndPoint: "xxx",
    ikeIdRemoteEndPoint: "xxx",
    ipsecRekeyInterval: 3600,
    ipsecReplayWindow: 512,
    ipsecCiphersuite: "aes256-gcm",
    perfectForwardSecrecy: "group-16",
    tunnelRouteVia: "2222",
});
Copy
import pulumi
import pulumi_sdwan as sdwan

example = sdwan.ServiceLanVpnInterfaceIpsecFeature("example",
    name="Example",
    description="My Example",
    feature_profile_id="f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
    service_lan_vpn_feature_id="140331f6-5418-4755-a059-13c77eb96037",
    interface_name="ipsec987",
    shutdown=True,
    interface_description="ipsec987",
    ipv4_address="9.7.5.4",
    ipv4_subnet_mask="255.255.255.0",
    tunnel_source_ipv4_address="1.3.5.88",
    tunnel_source_ipv4_subnet_mask="255.255.255.0",
    tunnel_source_interface="GigabitEthernet8",
    tunnel_destination_ipv4_address="2.55.67.99",
    tunnel_destination_ipv4_subnet_mask="255.255.255.0",
    application_tunnel_type="none",
    tcp_mss=1460,
    clear_dont_fragment=False,
    ip_mtu=1500,
    dpd_interval=10,
    dpd_retries=3,
    ike_preshared_key="123",
    ike_version=1,
    ike_integrity_protocol="main",
    ike_rekey_interval=14400,
    ike_ciphersuite="aes256-cbc-sha1",
    ike_diffie_hellman_group="16",
    ike_id_local_end_point="xxx",
    ike_id_remote_end_point="xxx",
    ipsec_rekey_interval=3600,
    ipsec_replay_window=512,
    ipsec_ciphersuite="aes256-gcm",
    perfect_forward_secrecy="group-16",
    tunnel_route_via="2222")
Copy
package main

import (
	"github.com/pulumi/pulumi-sdwan/sdk/go/sdwan"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdwan.NewServiceLanVpnInterfaceIpsecFeature(ctx, "example", &sdwan.ServiceLanVpnInterfaceIpsecFeatureArgs{
			Name:                            pulumi.String("Example"),
			Description:                     pulumi.String("My Example"),
			FeatureProfileId:                pulumi.String("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"),
			ServiceLanVpnFeatureId:          pulumi.String("140331f6-5418-4755-a059-13c77eb96037"),
			InterfaceName:                   pulumi.String("ipsec987"),
			Shutdown:                        pulumi.Bool(true),
			InterfaceDescription:            pulumi.String("ipsec987"),
			Ipv4Address:                     pulumi.String("9.7.5.4"),
			Ipv4SubnetMask:                  pulumi.String("255.255.255.0"),
			TunnelSourceIpv4Address:         pulumi.String("1.3.5.88"),
			TunnelSourceIpv4SubnetMask:      pulumi.String("255.255.255.0"),
			TunnelSourceInterface:           pulumi.String("GigabitEthernet8"),
			TunnelDestinationIpv4Address:    pulumi.String("2.55.67.99"),
			TunnelDestinationIpv4SubnetMask: pulumi.String("255.255.255.0"),
			ApplicationTunnelType:           pulumi.String("none"),
			TcpMss:                          pulumi.Int(1460),
			ClearDontFragment:               pulumi.Bool(false),
			IpMtu:                           pulumi.Int(1500),
			DpdInterval:                     pulumi.Int(10),
			DpdRetries:                      pulumi.Int(3),
			IkePresharedKey:                 pulumi.String("123"),
			IkeVersion:                      pulumi.Int(1),
			IkeIntegrityProtocol:            pulumi.String("main"),
			IkeRekeyInterval:                pulumi.Int(14400),
			IkeCiphersuite:                  pulumi.String("aes256-cbc-sha1"),
			IkeDiffieHellmanGroup:           pulumi.String("16"),
			IkeIdLocalEndPoint:              pulumi.String("xxx"),
			IkeIdRemoteEndPoint:             pulumi.String("xxx"),
			IpsecRekeyInterval:              pulumi.Int(3600),
			IpsecReplayWindow:               pulumi.Int(512),
			IpsecCiphersuite:                pulumi.String("aes256-gcm"),
			PerfectForwardSecrecy:           pulumi.String("group-16"),
			TunnelRouteVia:                  pulumi.String("2222"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdwan = Pulumi.Sdwan;

return await Deployment.RunAsync(() => 
{
    var example = new Sdwan.ServiceLanVpnInterfaceIpsecFeature("example", new()
    {
        Name = "Example",
        Description = "My Example",
        FeatureProfileId = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
        ServiceLanVpnFeatureId = "140331f6-5418-4755-a059-13c77eb96037",
        InterfaceName = "ipsec987",
        Shutdown = true,
        InterfaceDescription = "ipsec987",
        Ipv4Address = "9.7.5.4",
        Ipv4SubnetMask = "255.255.255.0",
        TunnelSourceIpv4Address = "1.3.5.88",
        TunnelSourceIpv4SubnetMask = "255.255.255.0",
        TunnelSourceInterface = "GigabitEthernet8",
        TunnelDestinationIpv4Address = "2.55.67.99",
        TunnelDestinationIpv4SubnetMask = "255.255.255.0",
        ApplicationTunnelType = "none",
        TcpMss = 1460,
        ClearDontFragment = false,
        IpMtu = 1500,
        DpdInterval = 10,
        DpdRetries = 3,
        IkePresharedKey = "123",
        IkeVersion = 1,
        IkeIntegrityProtocol = "main",
        IkeRekeyInterval = 14400,
        IkeCiphersuite = "aes256-cbc-sha1",
        IkeDiffieHellmanGroup = "16",
        IkeIdLocalEndPoint = "xxx",
        IkeIdRemoteEndPoint = "xxx",
        IpsecRekeyInterval = 3600,
        IpsecReplayWindow = 512,
        IpsecCiphersuite = "aes256-gcm",
        PerfectForwardSecrecy = "group-16",
        TunnelRouteVia = "2222",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdwan.ServiceLanVpnInterfaceIpsecFeature;
import com.pulumi.sdwan.ServiceLanVpnInterfaceIpsecFeatureArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ServiceLanVpnInterfaceIpsecFeature("example", ServiceLanVpnInterfaceIpsecFeatureArgs.builder()
            .name("Example")
            .description("My Example")
            .featureProfileId("f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac")
            .serviceLanVpnFeatureId("140331f6-5418-4755-a059-13c77eb96037")
            .interfaceName("ipsec987")
            .shutdown(true)
            .interfaceDescription("ipsec987")
            .ipv4Address("9.7.5.4")
            .ipv4SubnetMask("255.255.255.0")
            .tunnelSourceIpv4Address("1.3.5.88")
            .tunnelSourceIpv4SubnetMask("255.255.255.0")
            .tunnelSourceInterface("GigabitEthernet8")
            .tunnelDestinationIpv4Address("2.55.67.99")
            .tunnelDestinationIpv4SubnetMask("255.255.255.0")
            .applicationTunnelType("none")
            .tcpMss(1460)
            .clearDontFragment(false)
            .ipMtu(1500)
            .dpdInterval(10)
            .dpdRetries(3)
            .ikePresharedKey("123")
            .ikeVersion(1)
            .ikeIntegrityProtocol("main")
            .ikeRekeyInterval(14400)
            .ikeCiphersuite("aes256-cbc-sha1")
            .ikeDiffieHellmanGroup("16")
            .ikeIdLocalEndPoint("xxx")
            .ikeIdRemoteEndPoint("xxx")
            .ipsecRekeyInterval(3600)
            .ipsecReplayWindow(512)
            .ipsecCiphersuite("aes256-gcm")
            .perfectForwardSecrecy("group-16")
            .tunnelRouteVia("2222")
            .build());

    }
}
Copy
resources:
  example:
    type: sdwan:ServiceLanVpnInterfaceIpsecFeature
    properties:
      name: Example
      description: My Example
      featureProfileId: f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac
      serviceLanVpnFeatureId: 140331f6-5418-4755-a059-13c77eb96037
      interfaceName: ipsec987
      shutdown: true
      interfaceDescription: ipsec987
      ipv4Address: 9.7.5.4
      ipv4SubnetMask: 255.255.255.0
      tunnelSourceIpv4Address: 1.3.5.88
      tunnelSourceIpv4SubnetMask: 255.255.255.0
      tunnelSourceInterface: GigabitEthernet8
      tunnelDestinationIpv4Address: 2.55.67.99
      tunnelDestinationIpv4SubnetMask: 255.255.255.0
      applicationTunnelType: none
      tcpMss: 1460
      clearDontFragment: false
      ipMtu: 1500
      dpdInterval: 10
      dpdRetries: 3
      ikePresharedKey: '123'
      ikeVersion: 1
      ikeIntegrityProtocol: main
      ikeRekeyInterval: 14400
      ikeCiphersuite: aes256-cbc-sha1
      ikeDiffieHellmanGroup: '16'
      ikeIdLocalEndPoint: xxx
      ikeIdRemoteEndPoint: xxx
      ipsecRekeyInterval: 3600
      ipsecReplayWindow: 512
      ipsecCiphersuite: aes256-gcm
      perfectForwardSecrecy: group-16
      tunnelRouteVia: '2222'
Copy

Create ServiceLanVpnInterfaceIpsecFeature Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ServiceLanVpnInterfaceIpsecFeature(name: string, args: ServiceLanVpnInterfaceIpsecFeatureArgs, opts?: CustomResourceOptions);
@overload
def ServiceLanVpnInterfaceIpsecFeature(resource_name: str,
                                       args: ServiceLanVpnInterfaceIpsecFeatureArgs,
                                       opts: Optional[ResourceOptions] = None)

@overload
def ServiceLanVpnInterfaceIpsecFeature(resource_name: str,
                                       opts: Optional[ResourceOptions] = None,
                                       feature_profile_id: Optional[str] = None,
                                       tunnel_destination_ipv4_subnet_mask: Optional[str] = None,
                                       application_tunnel_type: Optional[str] = None,
                                       application_tunnel_type_variable: Optional[str] = None,
                                       clear_dont_fragment: Optional[bool] = None,
                                       clear_dont_fragment_variable: Optional[str] = None,
                                       description: Optional[str] = None,
                                       dpd_interval: Optional[int] = None,
                                       dpd_interval_variable: Optional[str] = None,
                                       dpd_retries: Optional[int] = None,
                                       dpd_retries_variable: Optional[str] = None,
                                       ike_ciphersuite: Optional[str] = None,
                                       ike_ciphersuite_variable: Optional[str] = None,
                                       ike_diffie_hellman_group: Optional[str] = None,
                                       ike_diffie_hellman_group_variable: Optional[str] = None,
                                       ike_id_local_end_point: Optional[str] = None,
                                       ike_id_local_end_point_variable: Optional[str] = None,
                                       ike_id_remote_end_point: Optional[str] = None,
                                       ike_id_remote_end_point_variable: Optional[str] = None,
                                       ike_integrity_protocol: Optional[str] = None,
                                       ike_integrity_protocol_variable: Optional[str] = None,
                                       ike_preshared_key: Optional[str] = None,
                                       ike_preshared_key_variable: Optional[str] = None,
                                       ike_rekey_interval: Optional[int] = None,
                                       ike_rekey_interval_variable: Optional[str] = None,
                                       ike_version: Optional[int] = None,
                                       interface_description: Optional[str] = None,
                                       interface_description_variable: Optional[str] = None,
                                       interface_name: Optional[str] = None,
                                       interface_name_variable: Optional[str] = None,
                                       ip_mtu: Optional[int] = None,
                                       ip_mtu_variable: Optional[str] = None,
                                       ipsec_ciphersuite: Optional[str] = None,
                                       ipsec_ciphersuite_variable: Optional[str] = None,
                                       ipsec_rekey_interval: Optional[int] = None,
                                       ipsec_rekey_interval_variable: Optional[str] = None,
                                       ipsec_replay_window: Optional[int] = None,
                                       ipsec_replay_window_variable: Optional[str] = None,
                                       ipv4_address: Optional[str] = None,
                                       ipv4_address_variable: Optional[str] = None,
                                       ipv4_subnet_mask: Optional[str] = None,
                                       ipv4_subnet_mask_variable: Optional[str] = None,
                                       name: Optional[str] = None,
                                       perfect_forward_secrecy: Optional[str] = None,
                                       perfect_forward_secrecy_variable: Optional[str] = None,
                                       service_lan_vpn_feature_id: Optional[str] = None,
                                       shutdown: Optional[bool] = None,
                                       shutdown_variable: Optional[str] = None,
                                       tcp_mss: Optional[int] = None,
                                       tcp_mss_variable: Optional[str] = None,
                                       tracker_id: Optional[str] = None,
                                       tracker_id_variable: Optional[str] = None,
                                       tunnel_destination_ipv4_address: Optional[str] = None,
                                       tunnel_destination_ipv4_address_variable: Optional[str] = None,
                                       tunnel_destination_ipv4_subnet_mask_variable: Optional[str] = None,
                                       tunnel_route_via: Optional[str] = None,
                                       tunnel_route_via_variable: Optional[str] = None,
                                       tunnel_source_interface: Optional[str] = None,
                                       tunnel_source_interface_variable: Optional[str] = None,
                                       tunnel_source_ipv4_address: Optional[str] = None,
                                       tunnel_source_ipv4_address_variable: Optional[str] = None,
                                       tunnel_source_ipv4_subnet_mask: Optional[str] = None,
                                       tunnel_source_ipv4_subnet_mask_variable: Optional[str] = None)
func NewServiceLanVpnInterfaceIpsecFeature(ctx *Context, name string, args ServiceLanVpnInterfaceIpsecFeatureArgs, opts ...ResourceOption) (*ServiceLanVpnInterfaceIpsecFeature, error)
public ServiceLanVpnInterfaceIpsecFeature(string name, ServiceLanVpnInterfaceIpsecFeatureArgs args, CustomResourceOptions? opts = null)
public ServiceLanVpnInterfaceIpsecFeature(String name, ServiceLanVpnInterfaceIpsecFeatureArgs args)
public ServiceLanVpnInterfaceIpsecFeature(String name, ServiceLanVpnInterfaceIpsecFeatureArgs args, CustomResourceOptions options)
type: sdwan:ServiceLanVpnInterfaceIpsecFeature
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. ServiceLanVpnInterfaceIpsecFeatureArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. ServiceLanVpnInterfaceIpsecFeatureArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. ServiceLanVpnInterfaceIpsecFeatureArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. ServiceLanVpnInterfaceIpsecFeatureArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ServiceLanVpnInterfaceIpsecFeatureArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var serviceLanVpnInterfaceIpsecFeatureResource = new Sdwan.ServiceLanVpnInterfaceIpsecFeature("serviceLanVpnInterfaceIpsecFeatureResource", new()
{
    FeatureProfileId = "string",
    TunnelDestinationIpv4SubnetMask = "string",
    ApplicationTunnelType = "string",
    ApplicationTunnelTypeVariable = "string",
    ClearDontFragment = false,
    ClearDontFragmentVariable = "string",
    Description = "string",
    DpdInterval = 0,
    DpdIntervalVariable = "string",
    DpdRetries = 0,
    DpdRetriesVariable = "string",
    IkeCiphersuite = "string",
    IkeCiphersuiteVariable = "string",
    IkeDiffieHellmanGroup = "string",
    IkeDiffieHellmanGroupVariable = "string",
    IkeIdLocalEndPoint = "string",
    IkeIdLocalEndPointVariable = "string",
    IkeIdRemoteEndPoint = "string",
    IkeIdRemoteEndPointVariable = "string",
    IkeIntegrityProtocol = "string",
    IkeIntegrityProtocolVariable = "string",
    IkePresharedKey = "string",
    IkePresharedKeyVariable = "string",
    IkeRekeyInterval = 0,
    IkeRekeyIntervalVariable = "string",
    IkeVersion = 0,
    InterfaceDescription = "string",
    InterfaceDescriptionVariable = "string",
    InterfaceName = "string",
    InterfaceNameVariable = "string",
    IpMtu = 0,
    IpMtuVariable = "string",
    IpsecCiphersuite = "string",
    IpsecCiphersuiteVariable = "string",
    IpsecRekeyInterval = 0,
    IpsecRekeyIntervalVariable = "string",
    IpsecReplayWindow = 0,
    IpsecReplayWindowVariable = "string",
    Ipv4Address = "string",
    Ipv4AddressVariable = "string",
    Ipv4SubnetMask = "string",
    Ipv4SubnetMaskVariable = "string",
    Name = "string",
    PerfectForwardSecrecy = "string",
    PerfectForwardSecrecyVariable = "string",
    ServiceLanVpnFeatureId = "string",
    Shutdown = false,
    ShutdownVariable = "string",
    TcpMss = 0,
    TcpMssVariable = "string",
    TrackerId = "string",
    TrackerIdVariable = "string",
    TunnelDestinationIpv4Address = "string",
    TunnelDestinationIpv4AddressVariable = "string",
    TunnelDestinationIpv4SubnetMaskVariable = "string",
    TunnelRouteVia = "string",
    TunnelRouteViaVariable = "string",
    TunnelSourceInterface = "string",
    TunnelSourceInterfaceVariable = "string",
    TunnelSourceIpv4Address = "string",
    TunnelSourceIpv4AddressVariable = "string",
    TunnelSourceIpv4SubnetMask = "string",
    TunnelSourceIpv4SubnetMaskVariable = "string",
});
Copy
example, err := sdwan.NewServiceLanVpnInterfaceIpsecFeature(ctx, "serviceLanVpnInterfaceIpsecFeatureResource", &sdwan.ServiceLanVpnInterfaceIpsecFeatureArgs{
	FeatureProfileId:                        pulumi.String("string"),
	TunnelDestinationIpv4SubnetMask:         pulumi.String("string"),
	ApplicationTunnelType:                   pulumi.String("string"),
	ApplicationTunnelTypeVariable:           pulumi.String("string"),
	ClearDontFragment:                       pulumi.Bool(false),
	ClearDontFragmentVariable:               pulumi.String("string"),
	Description:                             pulumi.String("string"),
	DpdInterval:                             pulumi.Int(0),
	DpdIntervalVariable:                     pulumi.String("string"),
	DpdRetries:                              pulumi.Int(0),
	DpdRetriesVariable:                      pulumi.String("string"),
	IkeCiphersuite:                          pulumi.String("string"),
	IkeCiphersuiteVariable:                  pulumi.String("string"),
	IkeDiffieHellmanGroup:                   pulumi.String("string"),
	IkeDiffieHellmanGroupVariable:           pulumi.String("string"),
	IkeIdLocalEndPoint:                      pulumi.String("string"),
	IkeIdLocalEndPointVariable:              pulumi.String("string"),
	IkeIdRemoteEndPoint:                     pulumi.String("string"),
	IkeIdRemoteEndPointVariable:             pulumi.String("string"),
	IkeIntegrityProtocol:                    pulumi.String("string"),
	IkeIntegrityProtocolVariable:            pulumi.String("string"),
	IkePresharedKey:                         pulumi.String("string"),
	IkePresharedKeyVariable:                 pulumi.String("string"),
	IkeRekeyInterval:                        pulumi.Int(0),
	IkeRekeyIntervalVariable:                pulumi.String("string"),
	IkeVersion:                              pulumi.Int(0),
	InterfaceDescription:                    pulumi.String("string"),
	InterfaceDescriptionVariable:            pulumi.String("string"),
	InterfaceName:                           pulumi.String("string"),
	InterfaceNameVariable:                   pulumi.String("string"),
	IpMtu:                                   pulumi.Int(0),
	IpMtuVariable:                           pulumi.String("string"),
	IpsecCiphersuite:                        pulumi.String("string"),
	IpsecCiphersuiteVariable:                pulumi.String("string"),
	IpsecRekeyInterval:                      pulumi.Int(0),
	IpsecRekeyIntervalVariable:              pulumi.String("string"),
	IpsecReplayWindow:                       pulumi.Int(0),
	IpsecReplayWindowVariable:               pulumi.String("string"),
	Ipv4Address:                             pulumi.String("string"),
	Ipv4AddressVariable:                     pulumi.String("string"),
	Ipv4SubnetMask:                          pulumi.String("string"),
	Ipv4SubnetMaskVariable:                  pulumi.String("string"),
	Name:                                    pulumi.String("string"),
	PerfectForwardSecrecy:                   pulumi.String("string"),
	PerfectForwardSecrecyVariable:           pulumi.String("string"),
	ServiceLanVpnFeatureId:                  pulumi.String("string"),
	Shutdown:                                pulumi.Bool(false),
	ShutdownVariable:                        pulumi.String("string"),
	TcpMss:                                  pulumi.Int(0),
	TcpMssVariable:                          pulumi.String("string"),
	TrackerId:                               pulumi.String("string"),
	TrackerIdVariable:                       pulumi.String("string"),
	TunnelDestinationIpv4Address:            pulumi.String("string"),
	TunnelDestinationIpv4AddressVariable:    pulumi.String("string"),
	TunnelDestinationIpv4SubnetMaskVariable: pulumi.String("string"),
	TunnelRouteVia:                          pulumi.String("string"),
	TunnelRouteViaVariable:                  pulumi.String("string"),
	TunnelSourceInterface:                   pulumi.String("string"),
	TunnelSourceInterfaceVariable:           pulumi.String("string"),
	TunnelSourceIpv4Address:                 pulumi.String("string"),
	TunnelSourceIpv4AddressVariable:         pulumi.String("string"),
	TunnelSourceIpv4SubnetMask:              pulumi.String("string"),
	TunnelSourceIpv4SubnetMaskVariable:      pulumi.String("string"),
})
Copy
var serviceLanVpnInterfaceIpsecFeatureResource = new ServiceLanVpnInterfaceIpsecFeature("serviceLanVpnInterfaceIpsecFeatureResource", ServiceLanVpnInterfaceIpsecFeatureArgs.builder()
    .featureProfileId("string")
    .tunnelDestinationIpv4SubnetMask("string")
    .applicationTunnelType("string")
    .applicationTunnelTypeVariable("string")
    .clearDontFragment(false)
    .clearDontFragmentVariable("string")
    .description("string")
    .dpdInterval(0)
    .dpdIntervalVariable("string")
    .dpdRetries(0)
    .dpdRetriesVariable("string")
    .ikeCiphersuite("string")
    .ikeCiphersuiteVariable("string")
    .ikeDiffieHellmanGroup("string")
    .ikeDiffieHellmanGroupVariable("string")
    .ikeIdLocalEndPoint("string")
    .ikeIdLocalEndPointVariable("string")
    .ikeIdRemoteEndPoint("string")
    .ikeIdRemoteEndPointVariable("string")
    .ikeIntegrityProtocol("string")
    .ikeIntegrityProtocolVariable("string")
    .ikePresharedKey("string")
    .ikePresharedKeyVariable("string")
    .ikeRekeyInterval(0)
    .ikeRekeyIntervalVariable("string")
    .ikeVersion(0)
    .interfaceDescription("string")
    .interfaceDescriptionVariable("string")
    .interfaceName("string")
    .interfaceNameVariable("string")
    .ipMtu(0)
    .ipMtuVariable("string")
    .ipsecCiphersuite("string")
    .ipsecCiphersuiteVariable("string")
    .ipsecRekeyInterval(0)
    .ipsecRekeyIntervalVariable("string")
    .ipsecReplayWindow(0)
    .ipsecReplayWindowVariable("string")
    .ipv4Address("string")
    .ipv4AddressVariable("string")
    .ipv4SubnetMask("string")
    .ipv4SubnetMaskVariable("string")
    .name("string")
    .perfectForwardSecrecy("string")
    .perfectForwardSecrecyVariable("string")
    .serviceLanVpnFeatureId("string")
    .shutdown(false)
    .shutdownVariable("string")
    .tcpMss(0)
    .tcpMssVariable("string")
    .trackerId("string")
    .trackerIdVariable("string")
    .tunnelDestinationIpv4Address("string")
    .tunnelDestinationIpv4AddressVariable("string")
    .tunnelDestinationIpv4SubnetMaskVariable("string")
    .tunnelRouteVia("string")
    .tunnelRouteViaVariable("string")
    .tunnelSourceInterface("string")
    .tunnelSourceInterfaceVariable("string")
    .tunnelSourceIpv4Address("string")
    .tunnelSourceIpv4AddressVariable("string")
    .tunnelSourceIpv4SubnetMask("string")
    .tunnelSourceIpv4SubnetMaskVariable("string")
    .build());
Copy
service_lan_vpn_interface_ipsec_feature_resource = sdwan.ServiceLanVpnInterfaceIpsecFeature("serviceLanVpnInterfaceIpsecFeatureResource",
    feature_profile_id="string",
    tunnel_destination_ipv4_subnet_mask="string",
    application_tunnel_type="string",
    application_tunnel_type_variable="string",
    clear_dont_fragment=False,
    clear_dont_fragment_variable="string",
    description="string",
    dpd_interval=0,
    dpd_interval_variable="string",
    dpd_retries=0,
    dpd_retries_variable="string",
    ike_ciphersuite="string",
    ike_ciphersuite_variable="string",
    ike_diffie_hellman_group="string",
    ike_diffie_hellman_group_variable="string",
    ike_id_local_end_point="string",
    ike_id_local_end_point_variable="string",
    ike_id_remote_end_point="string",
    ike_id_remote_end_point_variable="string",
    ike_integrity_protocol="string",
    ike_integrity_protocol_variable="string",
    ike_preshared_key="string",
    ike_preshared_key_variable="string",
    ike_rekey_interval=0,
    ike_rekey_interval_variable="string",
    ike_version=0,
    interface_description="string",
    interface_description_variable="string",
    interface_name="string",
    interface_name_variable="string",
    ip_mtu=0,
    ip_mtu_variable="string",
    ipsec_ciphersuite="string",
    ipsec_ciphersuite_variable="string",
    ipsec_rekey_interval=0,
    ipsec_rekey_interval_variable="string",
    ipsec_replay_window=0,
    ipsec_replay_window_variable="string",
    ipv4_address="string",
    ipv4_address_variable="string",
    ipv4_subnet_mask="string",
    ipv4_subnet_mask_variable="string",
    name="string",
    perfect_forward_secrecy="string",
    perfect_forward_secrecy_variable="string",
    service_lan_vpn_feature_id="string",
    shutdown=False,
    shutdown_variable="string",
    tcp_mss=0,
    tcp_mss_variable="string",
    tracker_id="string",
    tracker_id_variable="string",
    tunnel_destination_ipv4_address="string",
    tunnel_destination_ipv4_address_variable="string",
    tunnel_destination_ipv4_subnet_mask_variable="string",
    tunnel_route_via="string",
    tunnel_route_via_variable="string",
    tunnel_source_interface="string",
    tunnel_source_interface_variable="string",
    tunnel_source_ipv4_address="string",
    tunnel_source_ipv4_address_variable="string",
    tunnel_source_ipv4_subnet_mask="string",
    tunnel_source_ipv4_subnet_mask_variable="string")
Copy
const serviceLanVpnInterfaceIpsecFeatureResource = new sdwan.ServiceLanVpnInterfaceIpsecFeature("serviceLanVpnInterfaceIpsecFeatureResource", {
    featureProfileId: "string",
    tunnelDestinationIpv4SubnetMask: "string",
    applicationTunnelType: "string",
    applicationTunnelTypeVariable: "string",
    clearDontFragment: false,
    clearDontFragmentVariable: "string",
    description: "string",
    dpdInterval: 0,
    dpdIntervalVariable: "string",
    dpdRetries: 0,
    dpdRetriesVariable: "string",
    ikeCiphersuite: "string",
    ikeCiphersuiteVariable: "string",
    ikeDiffieHellmanGroup: "string",
    ikeDiffieHellmanGroupVariable: "string",
    ikeIdLocalEndPoint: "string",
    ikeIdLocalEndPointVariable: "string",
    ikeIdRemoteEndPoint: "string",
    ikeIdRemoteEndPointVariable: "string",
    ikeIntegrityProtocol: "string",
    ikeIntegrityProtocolVariable: "string",
    ikePresharedKey: "string",
    ikePresharedKeyVariable: "string",
    ikeRekeyInterval: 0,
    ikeRekeyIntervalVariable: "string",
    ikeVersion: 0,
    interfaceDescription: "string",
    interfaceDescriptionVariable: "string",
    interfaceName: "string",
    interfaceNameVariable: "string",
    ipMtu: 0,
    ipMtuVariable: "string",
    ipsecCiphersuite: "string",
    ipsecCiphersuiteVariable: "string",
    ipsecRekeyInterval: 0,
    ipsecRekeyIntervalVariable: "string",
    ipsecReplayWindow: 0,
    ipsecReplayWindowVariable: "string",
    ipv4Address: "string",
    ipv4AddressVariable: "string",
    ipv4SubnetMask: "string",
    ipv4SubnetMaskVariable: "string",
    name: "string",
    perfectForwardSecrecy: "string",
    perfectForwardSecrecyVariable: "string",
    serviceLanVpnFeatureId: "string",
    shutdown: false,
    shutdownVariable: "string",
    tcpMss: 0,
    tcpMssVariable: "string",
    trackerId: "string",
    trackerIdVariable: "string",
    tunnelDestinationIpv4Address: "string",
    tunnelDestinationIpv4AddressVariable: "string",
    tunnelDestinationIpv4SubnetMaskVariable: "string",
    tunnelRouteVia: "string",
    tunnelRouteViaVariable: "string",
    tunnelSourceInterface: "string",
    tunnelSourceInterfaceVariable: "string",
    tunnelSourceIpv4Address: "string",
    tunnelSourceIpv4AddressVariable: "string",
    tunnelSourceIpv4SubnetMask: "string",
    tunnelSourceIpv4SubnetMaskVariable: "string",
});
Copy
type: sdwan:ServiceLanVpnInterfaceIpsecFeature
properties:
    applicationTunnelType: string
    applicationTunnelTypeVariable: string
    clearDontFragment: false
    clearDontFragmentVariable: string
    description: string
    dpdInterval: 0
    dpdIntervalVariable: string
    dpdRetries: 0
    dpdRetriesVariable: string
    featureProfileId: string
    ikeCiphersuite: string
    ikeCiphersuiteVariable: string
    ikeDiffieHellmanGroup: string
    ikeDiffieHellmanGroupVariable: string
    ikeIdLocalEndPoint: string
    ikeIdLocalEndPointVariable: string
    ikeIdRemoteEndPoint: string
    ikeIdRemoteEndPointVariable: string
    ikeIntegrityProtocol: string
    ikeIntegrityProtocolVariable: string
    ikePresharedKey: string
    ikePresharedKeyVariable: string
    ikeRekeyInterval: 0
    ikeRekeyIntervalVariable: string
    ikeVersion: 0
    interfaceDescription: string
    interfaceDescriptionVariable: string
    interfaceName: string
    interfaceNameVariable: string
    ipMtu: 0
    ipMtuVariable: string
    ipsecCiphersuite: string
    ipsecCiphersuiteVariable: string
    ipsecRekeyInterval: 0
    ipsecRekeyIntervalVariable: string
    ipsecReplayWindow: 0
    ipsecReplayWindowVariable: string
    ipv4Address: string
    ipv4AddressVariable: string
    ipv4SubnetMask: string
    ipv4SubnetMaskVariable: string
    name: string
    perfectForwardSecrecy: string
    perfectForwardSecrecyVariable: string
    serviceLanVpnFeatureId: string
    shutdown: false
    shutdownVariable: string
    tcpMss: 0
    tcpMssVariable: string
    trackerId: string
    trackerIdVariable: string
    tunnelDestinationIpv4Address: string
    tunnelDestinationIpv4AddressVariable: string
    tunnelDestinationIpv4SubnetMask: string
    tunnelDestinationIpv4SubnetMaskVariable: string
    tunnelRouteVia: string
    tunnelRouteViaVariable: string
    tunnelSourceInterface: string
    tunnelSourceInterfaceVariable: string
    tunnelSourceIpv4Address: string
    tunnelSourceIpv4AddressVariable: string
    tunnelSourceIpv4SubnetMask: string
    tunnelSourceIpv4SubnetMaskVariable: string
Copy

ServiceLanVpnInterfaceIpsecFeature Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ServiceLanVpnInterfaceIpsecFeature resource accepts the following input properties:

FeatureProfileId This property is required. string
Feature Profile ID
TunnelDestinationIpv4SubnetMask This property is required. string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ApplicationTunnelType string
Enable Application Tunnel Type - Choices: none, sig
ApplicationTunnelTypeVariable string
Variable name
ClearDontFragment bool
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
ClearDontFragmentVariable string
Variable name
Description string
The description of the Feature
DpdInterval int
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
DpdIntervalVariable string
Variable name
DpdRetries int
IKE keepalive retries - Range: 2-60 - Default value: 3
DpdRetriesVariable string
Variable name
IkeCiphersuite string
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
IkeCiphersuiteVariable string
Variable name
IkeDiffieHellmanGroup string
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
IkeDiffieHellmanGroupVariable string
Variable name
IkeIdLocalEndPoint string
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
IkeIdLocalEndPointVariable string
Variable name
IkeIdRemoteEndPoint string
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
IkeIdRemoteEndPointVariable string
Variable name
IkeIntegrityProtocol string
IKE integrity protocol - Choices: main, aggressive - Default value: main
IkeIntegrityProtocolVariable string
Variable name
IkePresharedKey string
Use preshared key to authenticate IKE peer
IkePresharedKeyVariable string
Variable name
IkeRekeyInterval int
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
IkeRekeyIntervalVariable string
Variable name
IkeVersion int
IKE Version <1..2> - Range: 1-2 - Default value: 1
InterfaceDescription string
Interface description
InterfaceDescriptionVariable string
Variable name
InterfaceName string
Interface name: IPsec when present
InterfaceNameVariable string
Variable name
IpMtu int
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
IpMtuVariable string
Variable name
IpsecCiphersuite string
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
IpsecCiphersuiteVariable string
Variable name
IpsecRekeyInterval int
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
IpsecRekeyIntervalVariable string
Variable name
IpsecReplayWindow int
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
IpsecReplayWindowVariable string
Variable name
Ipv4Address string
Ipv4AddressVariable string
Variable name
Ipv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
Ipv4SubnetMaskVariable string
Variable name
Name string
The name of the Feature
PerfectForwardSecrecy string
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
PerfectForwardSecrecyVariable string
Variable name
ServiceLanVpnFeatureId string
Service LAN VPN Feature ID
Shutdown bool
Administrative state - Default value: true
ShutdownVariable string
Variable name
TcpMss int
TCP MSS on SYN packets, in bytes - Range: 500-1460
TcpMssVariable string
Variable name
TrackerId string
Enable tracker for this interface
TrackerIdVariable string
Variable name
TunnelDestinationIpv4Address string
TunnelDestinationIpv4AddressVariable string
Variable name
TunnelDestinationIpv4SubnetMaskVariable string
Variable name
TunnelRouteVia string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
TunnelRouteViaVariable string
Variable name
TunnelSourceInterface string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
TunnelSourceInterfaceVariable string
Variable name
TunnelSourceIpv4Address string
TunnelSourceIpv4AddressVariable string
Variable name
TunnelSourceIpv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
TunnelSourceIpv4SubnetMaskVariable string
Variable name
FeatureProfileId This property is required. string
Feature Profile ID
TunnelDestinationIpv4SubnetMask This property is required. string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ApplicationTunnelType string
Enable Application Tunnel Type - Choices: none, sig
ApplicationTunnelTypeVariable string
Variable name
ClearDontFragment bool
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
ClearDontFragmentVariable string
Variable name
Description string
The description of the Feature
DpdInterval int
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
DpdIntervalVariable string
Variable name
DpdRetries int
IKE keepalive retries - Range: 2-60 - Default value: 3
DpdRetriesVariable string
Variable name
IkeCiphersuite string
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
IkeCiphersuiteVariable string
Variable name
IkeDiffieHellmanGroup string
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
IkeDiffieHellmanGroupVariable string
Variable name
IkeIdLocalEndPoint string
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
IkeIdLocalEndPointVariable string
Variable name
IkeIdRemoteEndPoint string
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
IkeIdRemoteEndPointVariable string
Variable name
IkeIntegrityProtocol string
IKE integrity protocol - Choices: main, aggressive - Default value: main
IkeIntegrityProtocolVariable string
Variable name
IkePresharedKey string
Use preshared key to authenticate IKE peer
IkePresharedKeyVariable string
Variable name
IkeRekeyInterval int
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
IkeRekeyIntervalVariable string
Variable name
IkeVersion int
IKE Version <1..2> - Range: 1-2 - Default value: 1
InterfaceDescription string
Interface description
InterfaceDescriptionVariable string
Variable name
InterfaceName string
Interface name: IPsec when present
InterfaceNameVariable string
Variable name
IpMtu int
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
IpMtuVariable string
Variable name
IpsecCiphersuite string
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
IpsecCiphersuiteVariable string
Variable name
IpsecRekeyInterval int
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
IpsecRekeyIntervalVariable string
Variable name
IpsecReplayWindow int
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
IpsecReplayWindowVariable string
Variable name
Ipv4Address string
Ipv4AddressVariable string
Variable name
Ipv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
Ipv4SubnetMaskVariable string
Variable name
Name string
The name of the Feature
PerfectForwardSecrecy string
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
PerfectForwardSecrecyVariable string
Variable name
ServiceLanVpnFeatureId string
Service LAN VPN Feature ID
Shutdown bool
Administrative state - Default value: true
ShutdownVariable string
Variable name
TcpMss int
TCP MSS on SYN packets, in bytes - Range: 500-1460
TcpMssVariable string
Variable name
TrackerId string
Enable tracker for this interface
TrackerIdVariable string
Variable name
TunnelDestinationIpv4Address string
TunnelDestinationIpv4AddressVariable string
Variable name
TunnelDestinationIpv4SubnetMaskVariable string
Variable name
TunnelRouteVia string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
TunnelRouteViaVariable string
Variable name
TunnelSourceInterface string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
TunnelSourceInterfaceVariable string
Variable name
TunnelSourceIpv4Address string
TunnelSourceIpv4AddressVariable string
Variable name
TunnelSourceIpv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
TunnelSourceIpv4SubnetMaskVariable string
Variable name
featureProfileId This property is required. String
Feature Profile ID
tunnelDestinationIpv4SubnetMask This property is required. String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
applicationTunnelType String
Enable Application Tunnel Type - Choices: none, sig
applicationTunnelTypeVariable String
Variable name
clearDontFragment Boolean
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
clearDontFragmentVariable String
Variable name
description String
The description of the Feature
dpdInterval Integer
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
dpdIntervalVariable String
Variable name
dpdRetries Integer
IKE keepalive retries - Range: 2-60 - Default value: 3
dpdRetriesVariable String
Variable name
ikeCiphersuite String
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
ikeCiphersuiteVariable String
Variable name
ikeDiffieHellmanGroup String
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
ikeDiffieHellmanGroupVariable String
Variable name
ikeIdLocalEndPoint String
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
ikeIdLocalEndPointVariable String
Variable name
ikeIdRemoteEndPoint String
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
ikeIdRemoteEndPointVariable String
Variable name
ikeIntegrityProtocol String
IKE integrity protocol - Choices: main, aggressive - Default value: main
ikeIntegrityProtocolVariable String
Variable name
ikePresharedKey String
Use preshared key to authenticate IKE peer
ikePresharedKeyVariable String
Variable name
ikeRekeyInterval Integer
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
ikeRekeyIntervalVariable String
Variable name
ikeVersion Integer
IKE Version <1..2> - Range: 1-2 - Default value: 1
interfaceDescription String
Interface description
interfaceDescriptionVariable String
Variable name
interfaceName String
Interface name: IPsec when present
interfaceNameVariable String
Variable name
ipMtu Integer
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
ipMtuVariable String
Variable name
ipsecCiphersuite String
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
ipsecCiphersuiteVariable String
Variable name
ipsecRekeyInterval Integer
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
ipsecRekeyIntervalVariable String
Variable name
ipsecReplayWindow Integer
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
ipsecReplayWindowVariable String
Variable name
ipv4Address String
ipv4AddressVariable String
Variable name
ipv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ipv4SubnetMaskVariable String
Variable name
name String
The name of the Feature
perfectForwardSecrecy String
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
perfectForwardSecrecyVariable String
Variable name
serviceLanVpnFeatureId String
Service LAN VPN Feature ID
shutdown Boolean
Administrative state - Default value: true
shutdownVariable String
Variable name
tcpMss Integer
TCP MSS on SYN packets, in bytes - Range: 500-1460
tcpMssVariable String
Variable name
trackerId String
Enable tracker for this interface
trackerIdVariable String
Variable name
tunnelDestinationIpv4Address String
tunnelDestinationIpv4AddressVariable String
Variable name
tunnelDestinationIpv4SubnetMaskVariable String
Variable name
tunnelRouteVia String
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelRouteViaVariable String
Variable name
tunnelSourceInterface String
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelSourceInterfaceVariable String
Variable name
tunnelSourceIpv4Address String
tunnelSourceIpv4AddressVariable String
Variable name
tunnelSourceIpv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnelSourceIpv4SubnetMaskVariable String
Variable name
featureProfileId This property is required. string
Feature Profile ID
tunnelDestinationIpv4SubnetMask This property is required. string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
applicationTunnelType string
Enable Application Tunnel Type - Choices: none, sig
applicationTunnelTypeVariable string
Variable name
clearDontFragment boolean
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
clearDontFragmentVariable string
Variable name
description string
The description of the Feature
dpdInterval number
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
dpdIntervalVariable string
Variable name
dpdRetries number
IKE keepalive retries - Range: 2-60 - Default value: 3
dpdRetriesVariable string
Variable name
ikeCiphersuite string
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
ikeCiphersuiteVariable string
Variable name
ikeDiffieHellmanGroup string
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
ikeDiffieHellmanGroupVariable string
Variable name
ikeIdLocalEndPoint string
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
ikeIdLocalEndPointVariable string
Variable name
ikeIdRemoteEndPoint string
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
ikeIdRemoteEndPointVariable string
Variable name
ikeIntegrityProtocol string
IKE integrity protocol - Choices: main, aggressive - Default value: main
ikeIntegrityProtocolVariable string
Variable name
ikePresharedKey string
Use preshared key to authenticate IKE peer
ikePresharedKeyVariable string
Variable name
ikeRekeyInterval number
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
ikeRekeyIntervalVariable string
Variable name
ikeVersion number
IKE Version <1..2> - Range: 1-2 - Default value: 1
interfaceDescription string
Interface description
interfaceDescriptionVariable string
Variable name
interfaceName string
Interface name: IPsec when present
interfaceNameVariable string
Variable name
ipMtu number
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
ipMtuVariable string
Variable name
ipsecCiphersuite string
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
ipsecCiphersuiteVariable string
Variable name
ipsecRekeyInterval number
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
ipsecRekeyIntervalVariable string
Variable name
ipsecReplayWindow number
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
ipsecReplayWindowVariable string
Variable name
ipv4Address string
ipv4AddressVariable string
Variable name
ipv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ipv4SubnetMaskVariable string
Variable name
name string
The name of the Feature
perfectForwardSecrecy string
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
perfectForwardSecrecyVariable string
Variable name
serviceLanVpnFeatureId string
Service LAN VPN Feature ID
shutdown boolean
Administrative state - Default value: true
shutdownVariable string
Variable name
tcpMss number
TCP MSS on SYN packets, in bytes - Range: 500-1460
tcpMssVariable string
Variable name
trackerId string
Enable tracker for this interface
trackerIdVariable string
Variable name
tunnelDestinationIpv4Address string
tunnelDestinationIpv4AddressVariable string
Variable name
tunnelDestinationIpv4SubnetMaskVariable string
Variable name
tunnelRouteVia string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelRouteViaVariable string
Variable name
tunnelSourceInterface string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelSourceInterfaceVariable string
Variable name
tunnelSourceIpv4Address string
tunnelSourceIpv4AddressVariable string
Variable name
tunnelSourceIpv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnelSourceIpv4SubnetMaskVariable string
Variable name
feature_profile_id This property is required. str
Feature Profile ID
tunnel_destination_ipv4_subnet_mask This property is required. str
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
application_tunnel_type str
Enable Application Tunnel Type - Choices: none, sig
application_tunnel_type_variable str
Variable name
clear_dont_fragment bool
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
clear_dont_fragment_variable str
Variable name
description str
The description of the Feature
dpd_interval int
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
dpd_interval_variable str
Variable name
dpd_retries int
IKE keepalive retries - Range: 2-60 - Default value: 3
dpd_retries_variable str
Variable name
ike_ciphersuite str
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
ike_ciphersuite_variable str
Variable name
ike_diffie_hellman_group str
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
ike_diffie_hellman_group_variable str
Variable name
ike_id_local_end_point str
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
ike_id_local_end_point_variable str
Variable name
ike_id_remote_end_point str
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
ike_id_remote_end_point_variable str
Variable name
ike_integrity_protocol str
IKE integrity protocol - Choices: main, aggressive - Default value: main
ike_integrity_protocol_variable str
Variable name
ike_preshared_key str
Use preshared key to authenticate IKE peer
ike_preshared_key_variable str
Variable name
ike_rekey_interval int
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
ike_rekey_interval_variable str
Variable name
ike_version int
IKE Version <1..2> - Range: 1-2 - Default value: 1
interface_description str
Interface description
interface_description_variable str
Variable name
interface_name str
Interface name: IPsec when present
interface_name_variable str
Variable name
ip_mtu int
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
ip_mtu_variable str
Variable name
ipsec_ciphersuite str
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
ipsec_ciphersuite_variable str
Variable name
ipsec_rekey_interval int
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
ipsec_rekey_interval_variable str
Variable name
ipsec_replay_window int
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
ipsec_replay_window_variable str
Variable name
ipv4_address str
ipv4_address_variable str
Variable name
ipv4_subnet_mask str
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ipv4_subnet_mask_variable str
Variable name
name str
The name of the Feature
perfect_forward_secrecy str
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
perfect_forward_secrecy_variable str
Variable name
service_lan_vpn_feature_id str
Service LAN VPN Feature ID
shutdown bool
Administrative state - Default value: true
shutdown_variable str
Variable name
tcp_mss int
TCP MSS on SYN packets, in bytes - Range: 500-1460
tcp_mss_variable str
Variable name
tracker_id str
Enable tracker for this interface
tracker_id_variable str
Variable name
tunnel_destination_ipv4_address str
tunnel_destination_ipv4_address_variable str
Variable name
tunnel_destination_ipv4_subnet_mask_variable str
Variable name
tunnel_route_via str
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnel_route_via_variable str
Variable name
tunnel_source_interface str
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnel_source_interface_variable str
Variable name
tunnel_source_ipv4_address str
tunnel_source_ipv4_address_variable str
Variable name
tunnel_source_ipv4_subnet_mask str
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnel_source_ipv4_subnet_mask_variable str
Variable name
featureProfileId This property is required. String
Feature Profile ID
tunnelDestinationIpv4SubnetMask This property is required. String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
applicationTunnelType String
Enable Application Tunnel Type - Choices: none, sig
applicationTunnelTypeVariable String
Variable name
clearDontFragment Boolean
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
clearDontFragmentVariable String
Variable name
description String
The description of the Feature
dpdInterval Number
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
dpdIntervalVariable String
Variable name
dpdRetries Number
IKE keepalive retries - Range: 2-60 - Default value: 3
dpdRetriesVariable String
Variable name
ikeCiphersuite String
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
ikeCiphersuiteVariable String
Variable name
ikeDiffieHellmanGroup String
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
ikeDiffieHellmanGroupVariable String
Variable name
ikeIdLocalEndPoint String
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
ikeIdLocalEndPointVariable String
Variable name
ikeIdRemoteEndPoint String
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
ikeIdRemoteEndPointVariable String
Variable name
ikeIntegrityProtocol String
IKE integrity protocol - Choices: main, aggressive - Default value: main
ikeIntegrityProtocolVariable String
Variable name
ikePresharedKey String
Use preshared key to authenticate IKE peer
ikePresharedKeyVariable String
Variable name
ikeRekeyInterval Number
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
ikeRekeyIntervalVariable String
Variable name
ikeVersion Number
IKE Version <1..2> - Range: 1-2 - Default value: 1
interfaceDescription String
Interface description
interfaceDescriptionVariable String
Variable name
interfaceName String
Interface name: IPsec when present
interfaceNameVariable String
Variable name
ipMtu Number
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
ipMtuVariable String
Variable name
ipsecCiphersuite String
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
ipsecCiphersuiteVariable String
Variable name
ipsecRekeyInterval Number
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
ipsecRekeyIntervalVariable String
Variable name
ipsecReplayWindow Number
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
ipsecReplayWindowVariable String
Variable name
ipv4Address String
ipv4AddressVariable String
Variable name
ipv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ipv4SubnetMaskVariable String
Variable name
name String
The name of the Feature
perfectForwardSecrecy String
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
perfectForwardSecrecyVariable String
Variable name
serviceLanVpnFeatureId String
Service LAN VPN Feature ID
shutdown Boolean
Administrative state - Default value: true
shutdownVariable String
Variable name
tcpMss Number
TCP MSS on SYN packets, in bytes - Range: 500-1460
tcpMssVariable String
Variable name
trackerId String
Enable tracker for this interface
trackerIdVariable String
Variable name
tunnelDestinationIpv4Address String
tunnelDestinationIpv4AddressVariable String
Variable name
tunnelDestinationIpv4SubnetMaskVariable String
Variable name
tunnelRouteVia String
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelRouteViaVariable String
Variable name
tunnelSourceInterface String
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelSourceInterfaceVariable String
Variable name
tunnelSourceIpv4Address String
tunnelSourceIpv4AddressVariable String
Variable name
tunnelSourceIpv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnelSourceIpv4SubnetMaskVariable String
Variable name

Outputs

All input properties are implicitly available as output properties. Additionally, the ServiceLanVpnInterfaceIpsecFeature resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Version int
The version of the Feature
Id string
The provider-assigned unique ID for this managed resource.
Version int
The version of the Feature
id String
The provider-assigned unique ID for this managed resource.
version Integer
The version of the Feature
id string
The provider-assigned unique ID for this managed resource.
version number
The version of the Feature
id str
The provider-assigned unique ID for this managed resource.
version int
The version of the Feature
id String
The provider-assigned unique ID for this managed resource.
version Number
The version of the Feature

Look up Existing ServiceLanVpnInterfaceIpsecFeature Resource

Get an existing ServiceLanVpnInterfaceIpsecFeature resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ServiceLanVpnInterfaceIpsecFeatureState, opts?: CustomResourceOptions): ServiceLanVpnInterfaceIpsecFeature
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        application_tunnel_type: Optional[str] = None,
        application_tunnel_type_variable: Optional[str] = None,
        clear_dont_fragment: Optional[bool] = None,
        clear_dont_fragment_variable: Optional[str] = None,
        description: Optional[str] = None,
        dpd_interval: Optional[int] = None,
        dpd_interval_variable: Optional[str] = None,
        dpd_retries: Optional[int] = None,
        dpd_retries_variable: Optional[str] = None,
        feature_profile_id: Optional[str] = None,
        ike_ciphersuite: Optional[str] = None,
        ike_ciphersuite_variable: Optional[str] = None,
        ike_diffie_hellman_group: Optional[str] = None,
        ike_diffie_hellman_group_variable: Optional[str] = None,
        ike_id_local_end_point: Optional[str] = None,
        ike_id_local_end_point_variable: Optional[str] = None,
        ike_id_remote_end_point: Optional[str] = None,
        ike_id_remote_end_point_variable: Optional[str] = None,
        ike_integrity_protocol: Optional[str] = None,
        ike_integrity_protocol_variable: Optional[str] = None,
        ike_preshared_key: Optional[str] = None,
        ike_preshared_key_variable: Optional[str] = None,
        ike_rekey_interval: Optional[int] = None,
        ike_rekey_interval_variable: Optional[str] = None,
        ike_version: Optional[int] = None,
        interface_description: Optional[str] = None,
        interface_description_variable: Optional[str] = None,
        interface_name: Optional[str] = None,
        interface_name_variable: Optional[str] = None,
        ip_mtu: Optional[int] = None,
        ip_mtu_variable: Optional[str] = None,
        ipsec_ciphersuite: Optional[str] = None,
        ipsec_ciphersuite_variable: Optional[str] = None,
        ipsec_rekey_interval: Optional[int] = None,
        ipsec_rekey_interval_variable: Optional[str] = None,
        ipsec_replay_window: Optional[int] = None,
        ipsec_replay_window_variable: Optional[str] = None,
        ipv4_address: Optional[str] = None,
        ipv4_address_variable: Optional[str] = None,
        ipv4_subnet_mask: Optional[str] = None,
        ipv4_subnet_mask_variable: Optional[str] = None,
        name: Optional[str] = None,
        perfect_forward_secrecy: Optional[str] = None,
        perfect_forward_secrecy_variable: Optional[str] = None,
        service_lan_vpn_feature_id: Optional[str] = None,
        shutdown: Optional[bool] = None,
        shutdown_variable: Optional[str] = None,
        tcp_mss: Optional[int] = None,
        tcp_mss_variable: Optional[str] = None,
        tracker_id: Optional[str] = None,
        tracker_id_variable: Optional[str] = None,
        tunnel_destination_ipv4_address: Optional[str] = None,
        tunnel_destination_ipv4_address_variable: Optional[str] = None,
        tunnel_destination_ipv4_subnet_mask: Optional[str] = None,
        tunnel_destination_ipv4_subnet_mask_variable: Optional[str] = None,
        tunnel_route_via: Optional[str] = None,
        tunnel_route_via_variable: Optional[str] = None,
        tunnel_source_interface: Optional[str] = None,
        tunnel_source_interface_variable: Optional[str] = None,
        tunnel_source_ipv4_address: Optional[str] = None,
        tunnel_source_ipv4_address_variable: Optional[str] = None,
        tunnel_source_ipv4_subnet_mask: Optional[str] = None,
        tunnel_source_ipv4_subnet_mask_variable: Optional[str] = None,
        version: Optional[int] = None) -> ServiceLanVpnInterfaceIpsecFeature
func GetServiceLanVpnInterfaceIpsecFeature(ctx *Context, name string, id IDInput, state *ServiceLanVpnInterfaceIpsecFeatureState, opts ...ResourceOption) (*ServiceLanVpnInterfaceIpsecFeature, error)
public static ServiceLanVpnInterfaceIpsecFeature Get(string name, Input<string> id, ServiceLanVpnInterfaceIpsecFeatureState? state, CustomResourceOptions? opts = null)
public static ServiceLanVpnInterfaceIpsecFeature get(String name, Output<String> id, ServiceLanVpnInterfaceIpsecFeatureState state, CustomResourceOptions options)
resources:  _:    type: sdwan:ServiceLanVpnInterfaceIpsecFeature    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
ApplicationTunnelType string
Enable Application Tunnel Type - Choices: none, sig
ApplicationTunnelTypeVariable string
Variable name
ClearDontFragment bool
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
ClearDontFragmentVariable string
Variable name
Description string
The description of the Feature
DpdInterval int
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
DpdIntervalVariable string
Variable name
DpdRetries int
IKE keepalive retries - Range: 2-60 - Default value: 3
DpdRetriesVariable string
Variable name
FeatureProfileId string
Feature Profile ID
IkeCiphersuite string
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
IkeCiphersuiteVariable string
Variable name
IkeDiffieHellmanGroup string
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
IkeDiffieHellmanGroupVariable string
Variable name
IkeIdLocalEndPoint string
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
IkeIdLocalEndPointVariable string
Variable name
IkeIdRemoteEndPoint string
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
IkeIdRemoteEndPointVariable string
Variable name
IkeIntegrityProtocol string
IKE integrity protocol - Choices: main, aggressive - Default value: main
IkeIntegrityProtocolVariable string
Variable name
IkePresharedKey string
Use preshared key to authenticate IKE peer
IkePresharedKeyVariable string
Variable name
IkeRekeyInterval int
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
IkeRekeyIntervalVariable string
Variable name
IkeVersion int
IKE Version <1..2> - Range: 1-2 - Default value: 1
InterfaceDescription string
Interface description
InterfaceDescriptionVariable string
Variable name
InterfaceName string
Interface name: IPsec when present
InterfaceNameVariable string
Variable name
IpMtu int
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
IpMtuVariable string
Variable name
IpsecCiphersuite string
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
IpsecCiphersuiteVariable string
Variable name
IpsecRekeyInterval int
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
IpsecRekeyIntervalVariable string
Variable name
IpsecReplayWindow int
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
IpsecReplayWindowVariable string
Variable name
Ipv4Address string
Ipv4AddressVariable string
Variable name
Ipv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
Ipv4SubnetMaskVariable string
Variable name
Name string
The name of the Feature
PerfectForwardSecrecy string
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
PerfectForwardSecrecyVariable string
Variable name
ServiceLanVpnFeatureId string
Service LAN VPN Feature ID
Shutdown bool
Administrative state - Default value: true
ShutdownVariable string
Variable name
TcpMss int
TCP MSS on SYN packets, in bytes - Range: 500-1460
TcpMssVariable string
Variable name
TrackerId string
Enable tracker for this interface
TrackerIdVariable string
Variable name
TunnelDestinationIpv4Address string
TunnelDestinationIpv4AddressVariable string
Variable name
TunnelDestinationIpv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
TunnelDestinationIpv4SubnetMaskVariable string
Variable name
TunnelRouteVia string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
TunnelRouteViaVariable string
Variable name
TunnelSourceInterface string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
TunnelSourceInterfaceVariable string
Variable name
TunnelSourceIpv4Address string
TunnelSourceIpv4AddressVariable string
Variable name
TunnelSourceIpv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
TunnelSourceIpv4SubnetMaskVariable string
Variable name
Version int
The version of the Feature
ApplicationTunnelType string
Enable Application Tunnel Type - Choices: none, sig
ApplicationTunnelTypeVariable string
Variable name
ClearDontFragment bool
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
ClearDontFragmentVariable string
Variable name
Description string
The description of the Feature
DpdInterval int
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
DpdIntervalVariable string
Variable name
DpdRetries int
IKE keepalive retries - Range: 2-60 - Default value: 3
DpdRetriesVariable string
Variable name
FeatureProfileId string
Feature Profile ID
IkeCiphersuite string
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
IkeCiphersuiteVariable string
Variable name
IkeDiffieHellmanGroup string
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
IkeDiffieHellmanGroupVariable string
Variable name
IkeIdLocalEndPoint string
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
IkeIdLocalEndPointVariable string
Variable name
IkeIdRemoteEndPoint string
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
IkeIdRemoteEndPointVariable string
Variable name
IkeIntegrityProtocol string
IKE integrity protocol - Choices: main, aggressive - Default value: main
IkeIntegrityProtocolVariable string
Variable name
IkePresharedKey string
Use preshared key to authenticate IKE peer
IkePresharedKeyVariable string
Variable name
IkeRekeyInterval int
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
IkeRekeyIntervalVariable string
Variable name
IkeVersion int
IKE Version <1..2> - Range: 1-2 - Default value: 1
InterfaceDescription string
Interface description
InterfaceDescriptionVariable string
Variable name
InterfaceName string
Interface name: IPsec when present
InterfaceNameVariable string
Variable name
IpMtu int
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
IpMtuVariable string
Variable name
IpsecCiphersuite string
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
IpsecCiphersuiteVariable string
Variable name
IpsecRekeyInterval int
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
IpsecRekeyIntervalVariable string
Variable name
IpsecReplayWindow int
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
IpsecReplayWindowVariable string
Variable name
Ipv4Address string
Ipv4AddressVariable string
Variable name
Ipv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
Ipv4SubnetMaskVariable string
Variable name
Name string
The name of the Feature
PerfectForwardSecrecy string
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
PerfectForwardSecrecyVariable string
Variable name
ServiceLanVpnFeatureId string
Service LAN VPN Feature ID
Shutdown bool
Administrative state - Default value: true
ShutdownVariable string
Variable name
TcpMss int
TCP MSS on SYN packets, in bytes - Range: 500-1460
TcpMssVariable string
Variable name
TrackerId string
Enable tracker for this interface
TrackerIdVariable string
Variable name
TunnelDestinationIpv4Address string
TunnelDestinationIpv4AddressVariable string
Variable name
TunnelDestinationIpv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
TunnelDestinationIpv4SubnetMaskVariable string
Variable name
TunnelRouteVia string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
TunnelRouteViaVariable string
Variable name
TunnelSourceInterface string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
TunnelSourceInterfaceVariable string
Variable name
TunnelSourceIpv4Address string
TunnelSourceIpv4AddressVariable string
Variable name
TunnelSourceIpv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
TunnelSourceIpv4SubnetMaskVariable string
Variable name
Version int
The version of the Feature
applicationTunnelType String
Enable Application Tunnel Type - Choices: none, sig
applicationTunnelTypeVariable String
Variable name
clearDontFragment Boolean
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
clearDontFragmentVariable String
Variable name
description String
The description of the Feature
dpdInterval Integer
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
dpdIntervalVariable String
Variable name
dpdRetries Integer
IKE keepalive retries - Range: 2-60 - Default value: 3
dpdRetriesVariable String
Variable name
featureProfileId String
Feature Profile ID
ikeCiphersuite String
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
ikeCiphersuiteVariable String
Variable name
ikeDiffieHellmanGroup String
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
ikeDiffieHellmanGroupVariable String
Variable name
ikeIdLocalEndPoint String
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
ikeIdLocalEndPointVariable String
Variable name
ikeIdRemoteEndPoint String
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
ikeIdRemoteEndPointVariable String
Variable name
ikeIntegrityProtocol String
IKE integrity protocol - Choices: main, aggressive - Default value: main
ikeIntegrityProtocolVariable String
Variable name
ikePresharedKey String
Use preshared key to authenticate IKE peer
ikePresharedKeyVariable String
Variable name
ikeRekeyInterval Integer
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
ikeRekeyIntervalVariable String
Variable name
ikeVersion Integer
IKE Version <1..2> - Range: 1-2 - Default value: 1
interfaceDescription String
Interface description
interfaceDescriptionVariable String
Variable name
interfaceName String
Interface name: IPsec when present
interfaceNameVariable String
Variable name
ipMtu Integer
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
ipMtuVariable String
Variable name
ipsecCiphersuite String
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
ipsecCiphersuiteVariable String
Variable name
ipsecRekeyInterval Integer
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
ipsecRekeyIntervalVariable String
Variable name
ipsecReplayWindow Integer
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
ipsecReplayWindowVariable String
Variable name
ipv4Address String
ipv4AddressVariable String
Variable name
ipv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ipv4SubnetMaskVariable String
Variable name
name String
The name of the Feature
perfectForwardSecrecy String
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
perfectForwardSecrecyVariable String
Variable name
serviceLanVpnFeatureId String
Service LAN VPN Feature ID
shutdown Boolean
Administrative state - Default value: true
shutdownVariable String
Variable name
tcpMss Integer
TCP MSS on SYN packets, in bytes - Range: 500-1460
tcpMssVariable String
Variable name
trackerId String
Enable tracker for this interface
trackerIdVariable String
Variable name
tunnelDestinationIpv4Address String
tunnelDestinationIpv4AddressVariable String
Variable name
tunnelDestinationIpv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnelDestinationIpv4SubnetMaskVariable String
Variable name
tunnelRouteVia String
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelRouteViaVariable String
Variable name
tunnelSourceInterface String
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelSourceInterfaceVariable String
Variable name
tunnelSourceIpv4Address String
tunnelSourceIpv4AddressVariable String
Variable name
tunnelSourceIpv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnelSourceIpv4SubnetMaskVariable String
Variable name
version Integer
The version of the Feature
applicationTunnelType string
Enable Application Tunnel Type - Choices: none, sig
applicationTunnelTypeVariable string
Variable name
clearDontFragment boolean
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
clearDontFragmentVariable string
Variable name
description string
The description of the Feature
dpdInterval number
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
dpdIntervalVariable string
Variable name
dpdRetries number
IKE keepalive retries - Range: 2-60 - Default value: 3
dpdRetriesVariable string
Variable name
featureProfileId string
Feature Profile ID
ikeCiphersuite string
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
ikeCiphersuiteVariable string
Variable name
ikeDiffieHellmanGroup string
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
ikeDiffieHellmanGroupVariable string
Variable name
ikeIdLocalEndPoint string
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
ikeIdLocalEndPointVariable string
Variable name
ikeIdRemoteEndPoint string
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
ikeIdRemoteEndPointVariable string
Variable name
ikeIntegrityProtocol string
IKE integrity protocol - Choices: main, aggressive - Default value: main
ikeIntegrityProtocolVariable string
Variable name
ikePresharedKey string
Use preshared key to authenticate IKE peer
ikePresharedKeyVariable string
Variable name
ikeRekeyInterval number
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
ikeRekeyIntervalVariable string
Variable name
ikeVersion number
IKE Version <1..2> - Range: 1-2 - Default value: 1
interfaceDescription string
Interface description
interfaceDescriptionVariable string
Variable name
interfaceName string
Interface name: IPsec when present
interfaceNameVariable string
Variable name
ipMtu number
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
ipMtuVariable string
Variable name
ipsecCiphersuite string
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
ipsecCiphersuiteVariable string
Variable name
ipsecRekeyInterval number
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
ipsecRekeyIntervalVariable string
Variable name
ipsecReplayWindow number
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
ipsecReplayWindowVariable string
Variable name
ipv4Address string
ipv4AddressVariable string
Variable name
ipv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ipv4SubnetMaskVariable string
Variable name
name string
The name of the Feature
perfectForwardSecrecy string
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
perfectForwardSecrecyVariable string
Variable name
serviceLanVpnFeatureId string
Service LAN VPN Feature ID
shutdown boolean
Administrative state - Default value: true
shutdownVariable string
Variable name
tcpMss number
TCP MSS on SYN packets, in bytes - Range: 500-1460
tcpMssVariable string
Variable name
trackerId string
Enable tracker for this interface
trackerIdVariable string
Variable name
tunnelDestinationIpv4Address string
tunnelDestinationIpv4AddressVariable string
Variable name
tunnelDestinationIpv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnelDestinationIpv4SubnetMaskVariable string
Variable name
tunnelRouteVia string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelRouteViaVariable string
Variable name
tunnelSourceInterface string
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelSourceInterfaceVariable string
Variable name
tunnelSourceIpv4Address string
tunnelSourceIpv4AddressVariable string
Variable name
tunnelSourceIpv4SubnetMask string
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnelSourceIpv4SubnetMaskVariable string
Variable name
version number
The version of the Feature
application_tunnel_type str
Enable Application Tunnel Type - Choices: none, sig
application_tunnel_type_variable str
Variable name
clear_dont_fragment bool
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
clear_dont_fragment_variable str
Variable name
description str
The description of the Feature
dpd_interval int
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
dpd_interval_variable str
Variable name
dpd_retries int
IKE keepalive retries - Range: 2-60 - Default value: 3
dpd_retries_variable str
Variable name
feature_profile_id str
Feature Profile ID
ike_ciphersuite str
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
ike_ciphersuite_variable str
Variable name
ike_diffie_hellman_group str
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
ike_diffie_hellman_group_variable str
Variable name
ike_id_local_end_point str
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
ike_id_local_end_point_variable str
Variable name
ike_id_remote_end_point str
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
ike_id_remote_end_point_variable str
Variable name
ike_integrity_protocol str
IKE integrity protocol - Choices: main, aggressive - Default value: main
ike_integrity_protocol_variable str
Variable name
ike_preshared_key str
Use preshared key to authenticate IKE peer
ike_preshared_key_variable str
Variable name
ike_rekey_interval int
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
ike_rekey_interval_variable str
Variable name
ike_version int
IKE Version <1..2> - Range: 1-2 - Default value: 1
interface_description str
Interface description
interface_description_variable str
Variable name
interface_name str
Interface name: IPsec when present
interface_name_variable str
Variable name
ip_mtu int
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
ip_mtu_variable str
Variable name
ipsec_ciphersuite str
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
ipsec_ciphersuite_variable str
Variable name
ipsec_rekey_interval int
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
ipsec_rekey_interval_variable str
Variable name
ipsec_replay_window int
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
ipsec_replay_window_variable str
Variable name
ipv4_address str
ipv4_address_variable str
Variable name
ipv4_subnet_mask str
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ipv4_subnet_mask_variable str
Variable name
name str
The name of the Feature
perfect_forward_secrecy str
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
perfect_forward_secrecy_variable str
Variable name
service_lan_vpn_feature_id str
Service LAN VPN Feature ID
shutdown bool
Administrative state - Default value: true
shutdown_variable str
Variable name
tcp_mss int
TCP MSS on SYN packets, in bytes - Range: 500-1460
tcp_mss_variable str
Variable name
tracker_id str
Enable tracker for this interface
tracker_id_variable str
Variable name
tunnel_destination_ipv4_address str
tunnel_destination_ipv4_address_variable str
Variable name
tunnel_destination_ipv4_subnet_mask str
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnel_destination_ipv4_subnet_mask_variable str
Variable name
tunnel_route_via str
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnel_route_via_variable str
Variable name
tunnel_source_interface str
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnel_source_interface_variable str
Variable name
tunnel_source_ipv4_address str
tunnel_source_ipv4_address_variable str
Variable name
tunnel_source_ipv4_subnet_mask str
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnel_source_ipv4_subnet_mask_variable str
Variable name
version int
The version of the Feature
applicationTunnelType String
Enable Application Tunnel Type - Choices: none, sig
applicationTunnelTypeVariable String
Variable name
clearDontFragment Boolean
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface) - Default value: false
clearDontFragmentVariable String
Variable name
description String
The description of the Feature
dpdInterval Number
IKE keepalive interval (seconds) - Range: 10-3600 - Default value: 10
dpdIntervalVariable String
Variable name
dpdRetries Number
IKE keepalive retries - Range: 2-60 - Default value: 3
dpdRetriesVariable String
Variable name
featureProfileId String
Feature Profile ID
ikeCiphersuite String
IKE identity the IKE preshared secret belongs to - Choices: aes256-cbc-sha1, aes256-cbc-sha2, aes128-cbc-sha1, aes128-cbc-sha2 - Default value: aes256-cbc-sha1
ikeCiphersuiteVariable String
Variable name
ikeDiffieHellmanGroup String
IKE Diffie Hellman Groups - Choices: 2, 14, 15, 16, 19, 20, 21, 24 - Default value: 16
ikeDiffieHellmanGroupVariable String
Variable name
ikeIdLocalEndPoint String
IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
ikeIdLocalEndPointVariable String
Variable name
ikeIdRemoteEndPoint String
IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
ikeIdRemoteEndPointVariable String
Variable name
ikeIntegrityProtocol String
IKE integrity protocol - Choices: main, aggressive - Default value: main
ikeIntegrityProtocolVariable String
Variable name
ikePresharedKey String
Use preshared key to authenticate IKE peer
ikePresharedKeyVariable String
Variable name
ikeRekeyInterval Number
IKE rekey interval <60..86400> seconds - Range: 60-86400 - Default value: 14400
ikeRekeyIntervalVariable String
Variable name
ikeVersion Number
IKE Version <1..2> - Range: 1-2 - Default value: 1
interfaceDescription String
Interface description
interfaceDescriptionVariable String
Variable name
interfaceName String
Interface name: IPsec when present
interfaceNameVariable String
Variable name
ipMtu Number
Interface MTU <68..9216>, in bytes - Range: 68-9216 - Default value: 1500
ipMtuVariable String
Variable name
ipsecCiphersuite String
IPsec(ESP) encryption and integrity protocol - Choices: aes256-cbc-sha1, aes256-cbc-sha384, aes256-cbc-sha256, aes256-cbc-sha512, aes256-gcm, null-sha1, null-sha384, null-sha256, null-sha512 - Default value: aes256-gcm
ipsecCiphersuiteVariable String
Variable name
ipsecRekeyInterval Number
IPsec rekey interval <300..1209600> seconds - Range: 120-2592000 - Default value: 3600
ipsecRekeyIntervalVariable String
Variable name
ipsecReplayWindow Number
Replay window size 32..8192 (must be a power of 2) - Range: 64-4096 - Default value: 512
ipsecReplayWindowVariable String
Variable name
ipv4Address String
ipv4AddressVariable String
Variable name
ipv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
ipv4SubnetMaskVariable String
Variable name
name String
The name of the Feature
perfectForwardSecrecy String
IPsec perfect forward secrecy settings - Choices: group-1, group-2, group-5, group-14, group-15, group-16, group-19, group-20, group-21, group-24, none - Default value: group-16
perfectForwardSecrecyVariable String
Variable name
serviceLanVpnFeatureId String
Service LAN VPN Feature ID
shutdown Boolean
Administrative state - Default value: true
shutdownVariable String
Variable name
tcpMss Number
TCP MSS on SYN packets, in bytes - Range: 500-1460
tcpMssVariable String
Variable name
trackerId String
Enable tracker for this interface
trackerIdVariable String
Variable name
tunnelDestinationIpv4Address String
tunnelDestinationIpv4AddressVariable String
Variable name
tunnelDestinationIpv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnelDestinationIpv4SubnetMaskVariable String
Variable name
tunnelRouteVia String
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelRouteViaVariable String
Variable name
tunnelSourceInterface String
<1..32 characters> Interface name: ge0/<0-..> or ge0/<0-..>.vlanid
tunnelSourceInterfaceVariable String
Variable name
tunnelSourceIpv4Address String
tunnelSourceIpv4AddressVariable String
Variable name
tunnelSourceIpv4SubnetMask String
  • Choices: 255.255.255.255, 255.255.255.254, 255.255.255.252, 255.255.255.248, 255.255.255.240, 255.255.255.224, 255.255.255.192, 255.255.255.128, 255.255.255.0, 255.255.254.0, 255.255.252.0, 255.255.248.0, 255.255.240.0, 255.255.224.0, 255.255.192.0, 255.255.128.0, 255.255.0.0, 255.254.0.0, 255.252.0.0, 255.240.0.0, 255.224.0.0, 255.192.0.0, 255.128.0.0, 255.0.0.0, 254.0.0.0, 252.0.0.0, 248.0.0.0, 240.0.0.0, 224.0.0.0, 192.0.0.0, 128.0.0.0, 0.0.0.0
tunnelSourceIpv4SubnetMaskVariable String
Variable name
version Number
The version of the Feature

Import

Expected import identifier with the format: “service_lan_vpn_interface_ipsec_feature_id,feature_profile_id,service_lan_vpn_feature_id”

$ pulumi import sdwan:index/serviceLanVpnInterfaceIpsecFeature:ServiceLanVpnInterfaceIpsecFeature example "f6b2c44c-693c-4763-b010-895aa3d236bd,f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac,140331f6-5418-4755-a059-13c77eb96037"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
sdwan pulumi/pulumi-sdwan
License
Apache-2.0
Notes
This Pulumi package is based on the sdwan Terraform Provider.