VirtualNetworkGatewayConnection

Manages a connection in an existing Virtual Network Gateway.

Create a VirtualNetworkGatewayConnection Resource

new VirtualNetworkGatewayConnection(name: string, args: VirtualNetworkGatewayConnectionArgs, opts?: CustomResourceOptions);

def VirtualNetworkGatewayConnection(resource_name, opts=None, authorization_key=None, connection_protocol=None, enable_bgp=None, express_route_circuit_id=None, express_route_gateway_bypass=None, ipsec_policy=None, local_network_gateway_id=None, location=None, name=None, peer_virtual_network_gateway_id=None, resource_group_name=None, routing_weight=None, shared_key=None, tags=None, type=None, use_policy_based_traffic_selectors=None, virtual_network_gateway_id=None, __props__=None);

func NewVirtualNetworkGatewayConnection(ctx *Context, name string, args VirtualNetworkGatewayConnectionArgs, opts ...ResourceOption) (*VirtualNetworkGatewayConnection, error)

public VirtualNetworkGatewayConnection(string name, VirtualNetworkGatewayConnectionArgs args, CustomResourceOptions? opts = null)

name string: The unique name of the resource.
args VirtualNetworkGatewayConnectionArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
opts ResourceOptions: A bag of options that control this resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args VirtualNetworkGatewayConnectionArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args VirtualNetworkGatewayConnectionArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

VirtualNetworkGatewayConnection Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Programming Model docs.

Inputs

The VirtualNetworkGatewayConnection resource accepts the following input properties:

ResourceGroupName string: The name of the resource group in which to create the connection Changing the name forces a new resource to be created.
Type string: The type of connection. Valid options are IPsec (Site-to-Site), ExpressRoute (ExpressRoute), and Vnet2Vnet (VNet-to-VNet). Each connection type requires different mandatory arguments (refer to the examples above). Changing the connection type will force a new connection to be created.
VirtualNetworkGatewayId string: The ID of the Virtual Network Gateway in which the connection will be created. Changing the gateway forces a new resource to be created.
AuthorizationKey string: The authorization key associated with the Express Route Circuit. This field is required only if the type is an ExpressRoute connection.
ConnectionProtocol string: The IKE protocol version to use. Possible values are IKEv1 and IKEv2. Defaults to IKEv2. Changing this value will force a resource to be created. > Note: Only valid for IPSec connections on virtual network gateways with SKU VpnGw1, VpnGw2, VpnGw3, VpnGw1AZ, VpnGw2AZ or VpnGw3AZ.
EnableBgp bool: If true, BGP (Border Gateway Protocol) is enabled for this connection. Defaults to false.
ExpressRouteCircuitId string: The ID of the Express Route Circuit when creating an ExpressRoute connection (i.e. when type is ExpressRoute). The Express Route Circuit can be in the same or in a different subscription.
ExpressRouteGatewayBypass bool: If true, data packets will bypass ExpressRoute Gateway for data forwarding This is only valid for ExpressRoute connections.
IpsecPolicy VirtualNetworkGatewayConnectionIpsecPolicyArgs: A ipsec_policy block which is documented below. Only a single policy can be defined for a connection. For details on custom policies refer to the relevant section in the Azure documentation.
LocalNetworkGatewayId string: The ID of the local network gateway when creating Site-to-Site connection (i.e. when type is IPsec).
Location string: The location/region where the connection is located. Changing this forces a new resource to be created.
Name string: The name of the connection. Changing the name forces a new resource to be created.
PeerVirtualNetworkGatewayId string: The ID of the peer virtual network gateway when creating a VNet-to-VNet connection (i.e. when type is Vnet2Vnet). The peer Virtual Network Gateway can be in the same or in a different subscription.
RoutingWeight int: The routing weight. Defaults to 10.
SharedKey string: The shared IPSec key. A key could be provided if a Site-to-Site, VNet-to-VNet or ExpressRoute connection is created.
Tags Dictionary<string, string>: A mapping of tags to assign to the resource.
UsePolicyBasedTrafficSelectors bool: If true, policy-based traffic selectors are enabled for this connection. Enabling policy-based traffic selectors requires an ipsec_policy block. Defaults to false.

ResourceGroupName string: The name of the resource group in which to create the connection Changing the name forces a new resource to be created.
Type string: The type of connection. Valid options are IPsec (Site-to-Site), ExpressRoute (ExpressRoute), and Vnet2Vnet (VNet-to-VNet). Each connection type requires different mandatory arguments (refer to the examples above). Changing the connection type will force a new connection to be created.
VirtualNetworkGatewayId string: The ID of the Virtual Network Gateway in which the connection will be created. Changing the gateway forces a new resource to be created.
AuthorizationKey string: The authorization key associated with the Express Route Circuit. This field is required only if the type is an ExpressRoute connection.
ConnectionProtocol string: The IKE protocol version to use. Possible values are IKEv1 and IKEv2. Defaults to IKEv2. Changing this value will force a resource to be created. > Note: Only valid for IPSec connections on virtual network gateways with SKU VpnGw1, VpnGw2, VpnGw3, VpnGw1AZ, VpnGw2AZ or VpnGw3AZ.
EnableBgp bool: If true, BGP (Border Gateway Protocol) is enabled for this connection. Defaults to false.
ExpressRouteCircuitId string: The ID of the Express Route Circuit when creating an ExpressRoute connection (i.e. when type is ExpressRoute). The Express Route Circuit can be in the same or in a different subscription.
ExpressRouteGatewayBypass bool: If true, data packets will bypass ExpressRoute Gateway for data forwarding This is only valid for ExpressRoute connections.
IpsecPolicy VirtualNetworkGatewayConnectionIpsecPolicy: A ipsec_policy block which is documented below. Only a single policy can be defined for a connection. For details on custom policies refer to the relevant section in the Azure documentation.
LocalNetworkGatewayId string: The ID of the local network gateway when creating Site-to-Site connection (i.e. when type is IPsec).
Location string: The location/region where the connection is located. Changing this forces a new resource to be created.
Name string: The name of the connection. Changing the name forces a new resource to be created.
PeerVirtualNetworkGatewayId string: The ID of the peer virtual network gateway when creating a VNet-to-VNet connection (i.e. when type is Vnet2Vnet). The peer Virtual Network Gateway can be in the same or in a different subscription.
RoutingWeight int: The routing weight. Defaults to 10.
SharedKey string: The shared IPSec key. A key could be provided if a Site-to-Site, VNet-to-VNet or ExpressRoute connection is created.
Tags map[string]string: A mapping of tags to assign to the resource.
UsePolicyBasedTrafficSelectors bool: If true, policy-based traffic selectors are enabled for this connection. Enabling policy-based traffic selectors requires an ipsec_policy block. Defaults to false.

resourceGroupName string: The name of the resource group in which to create the connection Changing the name forces a new resource to be created.
type string: The type of connection. Valid options are IPsec (Site-to-Site), ExpressRoute (ExpressRoute), and Vnet2Vnet (VNet-to-VNet). Each connection type requires different mandatory arguments (refer to the examples above). Changing the connection type will force a new connection to be created.
virtualNetworkGatewayId string: The ID of the Virtual Network Gateway in which the connection will be created. Changing the gateway forces a new resource to be created.
authorizationKey string: The authorization key associated with the Express Route Circuit. This field is required only if the type is an ExpressRoute connection.
connectionProtocol string: The IKE protocol version to use. Possible values are IKEv1 and IKEv2. Defaults to IKEv2. Changing this value will force a resource to be created. > Note: Only valid for IPSec connections on virtual network gateways with SKU VpnGw1, VpnGw2, VpnGw3, VpnGw1AZ, VpnGw2AZ or VpnGw3AZ.
enableBgp boolean: If true, BGP (Border Gateway Protocol) is enabled for this connection. Defaults to false.
expressRouteCircuitId string: The ID of the Express Route Circuit when creating an ExpressRoute connection (i.e. when type is ExpressRoute). The Express Route Circuit can be in the same or in a different subscription.
expressRouteGatewayBypass boolean: If true, data packets will bypass ExpressRoute Gateway for data forwarding This is only valid for ExpressRoute connections.
ipsecPolicy VirtualNetworkGatewayConnectionIpsecPolicy: A ipsec_policy block which is documented below. Only a single policy can be defined for a connection. For details on custom policies refer to the relevant section in the Azure documentation.
localNetworkGatewayId string: The ID of the local network gateway when creating Site-to-Site connection (i.e. when type is IPsec).
location string: The location/region where the connection is located. Changing this forces a new resource to be created.
name string: The name of the connection. Changing the name forces a new resource to be created.
peerVirtualNetworkGatewayId string: The ID of the peer virtual network gateway when creating a VNet-to-VNet connection (i.e. when type is Vnet2Vnet). The peer Virtual Network Gateway can be in the same or in a different subscription.
routingWeight number: The routing weight. Defaults to 10.
sharedKey string: The shared IPSec key. A key could be provided if a Site-to-Site, VNet-to-VNet or ExpressRoute connection is created.
tags {[key: string]: string}: A mapping of tags to assign to the resource.
usePolicyBasedTrafficSelectors boolean: If true, policy-based traffic selectors are enabled for this connection. Enabling policy-based traffic selectors requires an ipsec_policy block. Defaults to false.

resource_group_name str: The name of the resource group in which to create the connection Changing the name forces a new resource to be created.
type str: The type of connection. Valid options are IPsec (Site-to-Site), ExpressRoute (ExpressRoute), and Vnet2Vnet (VNet-to-VNet). Each connection type requires different mandatory arguments (refer to the examples above). Changing the connection type will force a new connection to be created.
virtual_network_gateway_id str: The ID of the Virtual Network Gateway in which the connection will be created. Changing the gateway forces a new resource to be created.
authorization_key str: The authorization key associated with the Express Route Circuit. This field is required only if the type is an ExpressRoute connection.
connection_protocol str: The IKE protocol version to use. Possible values are IKEv1 and IKEv2. Defaults to IKEv2. Changing this value will force a resource to be created. > Note: Only valid for IPSec connections on virtual network gateways with SKU VpnGw1, VpnGw2, VpnGw3, VpnGw1AZ, VpnGw2AZ or VpnGw3AZ.
enable_bgp bool: If true, BGP (Border Gateway Protocol) is enabled for this connection. Defaults to false.
express_route_circuit_id str: The ID of the Express Route Circuit when creating an ExpressRoute connection (i.e. when type is ExpressRoute). The Express Route Circuit can be in the same or in a different subscription.
express_route_gateway_bypass bool: If true, data packets will bypass ExpressRoute Gateway for data forwarding This is only valid for ExpressRoute connections.
ipsec_policy Dict[VirtualNetworkGatewayConnectionIpsecPolicy]: A ipsec_policy block which is documented below. Only a single policy can be defined for a connection. For details on custom policies refer to the relevant section in the Azure documentation.
local_network_gateway_id str: The ID of the local network gateway when creating Site-to-Site connection (i.e. when type is IPsec).
location str: The location/region where the connection is located. Changing this forces a new resource to be created.
name str: The name of the connection. Changing the name forces a new resource to be created.
peer_virtual_network_gateway_id str: The ID of the peer virtual network gateway when creating a VNet-to-VNet connection (i.e. when type is Vnet2Vnet). The peer Virtual Network Gateway can be in the same or in a different subscription.
routing_weight float: The routing weight. Defaults to 10.
shared_key str: The shared IPSec key. A key could be provided if a Site-to-Site, VNet-to-VNet or ExpressRoute connection is created.
tags Dict[str, str]: A mapping of tags to assign to the resource.
use_policy_based_traffic_selectors bool: If true, policy-based traffic selectors are enabled for this connection. Enabling policy-based traffic selectors requires an ipsec_policy block. Defaults to false.

Outputs

All input properties are implicitly available as output properties. Additionally, the VirtualNetworkGatewayConnection resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

Look up an Existing VirtualNetworkGatewayConnection Resource

Get an existing VirtualNetworkGatewayConnection resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: VirtualNetworkGatewayConnectionState, opts?: CustomResourceOptions): VirtualNetworkGatewayConnection

static get(resource_name, id, opts=None, authorization_key=None, connection_protocol=None, enable_bgp=None, express_route_circuit_id=None, express_route_gateway_bypass=None, ipsec_policy=None, local_network_gateway_id=None, location=None, name=None, peer_virtual_network_gateway_id=None, resource_group_name=None, routing_weight=None, shared_key=None, tags=None, type=None, use_policy_based_traffic_selectors=None, virtual_network_gateway_id=None, __props__=None);

func GetVirtualNetworkGatewayConnection(ctx *Context, name string, id IDInput, state *VirtualNetworkGatewayConnectionState, opts ...ResourceOption) (*VirtualNetworkGatewayConnection, error)

public static VirtualNetworkGatewayConnection Get(string name, Input<string> id, VirtualNetworkGatewayConnectionState? state, CustomResourceOptions? opts = null)

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AuthorizationKey string: The authorization key associated with the Express Route Circuit. This field is required only if the type is an ExpressRoute connection.
ConnectionProtocol string: The IKE protocol version to use. Possible values are IKEv1 and IKEv2. Defaults to IKEv2. Changing this value will force a resource to be created. > Note: Only valid for IPSec connections on virtual network gateways with SKU VpnGw1, VpnGw2, VpnGw3, VpnGw1AZ, VpnGw2AZ or VpnGw3AZ.
EnableBgp bool: If true, BGP (Border Gateway Protocol) is enabled for this connection. Defaults to false.
ExpressRouteCircuitId string: The ID of the Express Route Circuit when creating an ExpressRoute connection (i.e. when type is ExpressRoute). The Express Route Circuit can be in the same or in a different subscription.
ExpressRouteGatewayBypass bool: If true, data packets will bypass ExpressRoute Gateway for data forwarding This is only valid for ExpressRoute connections.
IpsecPolicy VirtualNetworkGatewayConnectionIpsecPolicyArgs: A ipsec_policy block which is documented below. Only a single policy can be defined for a connection. For details on custom policies refer to the relevant section in the Azure documentation.
LocalNetworkGatewayId string: The ID of the local network gateway when creating Site-to-Site connection (i.e. when type is IPsec).
Location string: The location/region where the connection is located. Changing this forces a new resource to be created.
Name string: The name of the connection. Changing the name forces a new resource to be created.
PeerVirtualNetworkGatewayId string: The ID of the peer virtual network gateway when creating a VNet-to-VNet connection (i.e. when type is Vnet2Vnet). The peer Virtual Network Gateway can be in the same or in a different subscription.
ResourceGroupName string: The name of the resource group in which to create the connection Changing the name forces a new resource to be created.
RoutingWeight int: The routing weight. Defaults to 10.
SharedKey string: The shared IPSec key. A key could be provided if a Site-to-Site, VNet-to-VNet or ExpressRoute connection is created.
Tags Dictionary<string, string>: A mapping of tags to assign to the resource.
Type string: The type of connection. Valid options are IPsec (Site-to-Site), ExpressRoute (ExpressRoute), and Vnet2Vnet (VNet-to-VNet). Each connection type requires different mandatory arguments (refer to the examples above). Changing the connection type will force a new connection to be created.
UsePolicyBasedTrafficSelectors bool: If true, policy-based traffic selectors are enabled for this connection. Enabling policy-based traffic selectors requires an ipsec_policy block. Defaults to false.
VirtualNetworkGatewayId string: The ID of the Virtual Network Gateway in which the connection will be created. Changing the gateway forces a new resource to be created.

AuthorizationKey string: The authorization key associated with the Express Route Circuit. This field is required only if the type is an ExpressRoute connection.
ConnectionProtocol string: The IKE protocol version to use. Possible values are IKEv1 and IKEv2. Defaults to IKEv2. Changing this value will force a resource to be created. > Note: Only valid for IPSec connections on virtual network gateways with SKU VpnGw1, VpnGw2, VpnGw3, VpnGw1AZ, VpnGw2AZ or VpnGw3AZ.
EnableBgp bool: If true, BGP (Border Gateway Protocol) is enabled for this connection. Defaults to false.
ExpressRouteCircuitId string: The ID of the Express Route Circuit when creating an ExpressRoute connection (i.e. when type is ExpressRoute). The Express Route Circuit can be in the same or in a different subscription.
ExpressRouteGatewayBypass bool: If true, data packets will bypass ExpressRoute Gateway for data forwarding This is only valid for ExpressRoute connections.
IpsecPolicy VirtualNetworkGatewayConnectionIpsecPolicy: A ipsec_policy block which is documented below. Only a single policy can be defined for a connection. For details on custom policies refer to the relevant section in the Azure documentation.
LocalNetworkGatewayId string: The ID of the local network gateway when creating Site-to-Site connection (i.e. when type is IPsec).
Location string: The location/region where the connection is located. Changing this forces a new resource to be created.
Name string: The name of the connection. Changing the name forces a new resource to be created.
PeerVirtualNetworkGatewayId string: The ID of the peer virtual network gateway when creating a VNet-to-VNet connection (i.e. when type is Vnet2Vnet). The peer Virtual Network Gateway can be in the same or in a different subscription.
ResourceGroupName string: The name of the resource group in which to create the connection Changing the name forces a new resource to be created.
RoutingWeight int: The routing weight. Defaults to 10.
SharedKey string: The shared IPSec key. A key could be provided if a Site-to-Site, VNet-to-VNet or ExpressRoute connection is created.
Tags map[string]string: A mapping of tags to assign to the resource.
Type string: The type of connection. Valid options are IPsec (Site-to-Site), ExpressRoute (ExpressRoute), and Vnet2Vnet (VNet-to-VNet). Each connection type requires different mandatory arguments (refer to the examples above). Changing the connection type will force a new connection to be created.
UsePolicyBasedTrafficSelectors bool: If true, policy-based traffic selectors are enabled for this connection. Enabling policy-based traffic selectors requires an ipsec_policy block. Defaults to false.
VirtualNetworkGatewayId string: The ID of the Virtual Network Gateway in which the connection will be created. Changing the gateway forces a new resource to be created.

authorizationKey string: The authorization key associated with the Express Route Circuit. This field is required only if the type is an ExpressRoute connection.
connectionProtocol string: The IKE protocol version to use. Possible values are IKEv1 and IKEv2. Defaults to IKEv2. Changing this value will force a resource to be created. > Note: Only valid for IPSec connections on virtual network gateways with SKU VpnGw1, VpnGw2, VpnGw3, VpnGw1AZ, VpnGw2AZ or VpnGw3AZ.
enableBgp boolean: If true, BGP (Border Gateway Protocol) is enabled for this connection. Defaults to false.
expressRouteCircuitId string: The ID of the Express Route Circuit when creating an ExpressRoute connection (i.e. when type is ExpressRoute). The Express Route Circuit can be in the same or in a different subscription.
expressRouteGatewayBypass boolean: If true, data packets will bypass ExpressRoute Gateway for data forwarding This is only valid for ExpressRoute connections.
ipsecPolicy VirtualNetworkGatewayConnectionIpsecPolicy: A ipsec_policy block which is documented below. Only a single policy can be defined for a connection. For details on custom policies refer to the relevant section in the Azure documentation.
localNetworkGatewayId string: The ID of the local network gateway when creating Site-to-Site connection (i.e. when type is IPsec).
location string: The location/region where the connection is located. Changing this forces a new resource to be created.
name string: The name of the connection. Changing the name forces a new resource to be created.
peerVirtualNetworkGatewayId string: The ID of the peer virtual network gateway when creating a VNet-to-VNet connection (i.e. when type is Vnet2Vnet). The peer Virtual Network Gateway can be in the same or in a different subscription.
resourceGroupName string: The name of the resource group in which to create the connection Changing the name forces a new resource to be created.
routingWeight number: The routing weight. Defaults to 10.
sharedKey string: The shared IPSec key. A key could be provided if a Site-to-Site, VNet-to-VNet or ExpressRoute connection is created.
tags {[key: string]: string}: A mapping of tags to assign to the resource.
type string: The type of connection. Valid options are IPsec (Site-to-Site), ExpressRoute (ExpressRoute), and Vnet2Vnet (VNet-to-VNet). Each connection type requires different mandatory arguments (refer to the examples above). Changing the connection type will force a new connection to be created.
usePolicyBasedTrafficSelectors boolean: If true, policy-based traffic selectors are enabled for this connection. Enabling policy-based traffic selectors requires an ipsec_policy block. Defaults to false.
virtualNetworkGatewayId string: The ID of the Virtual Network Gateway in which the connection will be created. Changing the gateway forces a new resource to be created.

authorization_key str: The authorization key associated with the Express Route Circuit. This field is required only if the type is an ExpressRoute connection.
connection_protocol str: The IKE protocol version to use. Possible values are IKEv1 and IKEv2. Defaults to IKEv2. Changing this value will force a resource to be created. > Note: Only valid for IPSec connections on virtual network gateways with SKU VpnGw1, VpnGw2, VpnGw3, VpnGw1AZ, VpnGw2AZ or VpnGw3AZ.
enable_bgp bool: If true, BGP (Border Gateway Protocol) is enabled for this connection. Defaults to false.
express_route_circuit_id str: The ID of the Express Route Circuit when creating an ExpressRoute connection (i.e. when type is ExpressRoute). The Express Route Circuit can be in the same or in a different subscription.
express_route_gateway_bypass bool: If true, data packets will bypass ExpressRoute Gateway for data forwarding This is only valid for ExpressRoute connections.
ipsec_policy Dict[VirtualNetworkGatewayConnectionIpsecPolicy]: A ipsec_policy block which is documented below. Only a single policy can be defined for a connection. For details on custom policies refer to the relevant section in the Azure documentation.
local_network_gateway_id str: The ID of the local network gateway when creating Site-to-Site connection (i.e. when type is IPsec).
location str: The location/region where the connection is located. Changing this forces a new resource to be created.
name str: The name of the connection. Changing the name forces a new resource to be created.
peer_virtual_network_gateway_id str: The ID of the peer virtual network gateway when creating a VNet-to-VNet connection (i.e. when type is Vnet2Vnet). The peer Virtual Network Gateway can be in the same or in a different subscription.
resource_group_name str: The name of the resource group in which to create the connection Changing the name forces a new resource to be created.
routing_weight float: The routing weight. Defaults to 10.
shared_key str: The shared IPSec key. A key could be provided if a Site-to-Site, VNet-to-VNet or ExpressRoute connection is created.
tags Dict[str, str]: A mapping of tags to assign to the resource.
type str: The type of connection. Valid options are IPsec (Site-to-Site), ExpressRoute (ExpressRoute), and Vnet2Vnet (VNet-to-VNet). Each connection type requires different mandatory arguments (refer to the examples above). Changing the connection type will force a new connection to be created.
use_policy_based_traffic_selectors bool: If true, policy-based traffic selectors are enabled for this connection. Enabling policy-based traffic selectors requires an ipsec_policy block. Defaults to false.
virtual_network_gateway_id str: The ID of the Virtual Network Gateway in which the connection will be created. Changing the gateway forces a new resource to be created.

Supporting Types

VirtualNetworkGatewayConnectionIpsecPolicy

See the input and output API doc for this type.

DhGroup string: The DH group used in IKE phase 1 for initial SA. Valid options are DHGroup1, DHGroup14, DHGroup2, DHGroup2048, DHGroup24, ECP256, ECP384, or None.
IkeEncryption string: The IKE encryption algorithm. Valid options are AES128, AES192, AES256, DES, or DES3.
IkeIntegrity string: The IKE integrity algorithm. Valid options are MD5, SHA1, SHA256, or SHA384.
IpsecEncryption string: The IPSec encryption algorithm. Valid options are AES128, AES192, AES256, DES, DES3, GCMAES128, GCMAES192, GCMAES256, or None.
IpsecIntegrity string: The IPSec integrity algorithm. Valid options are GCMAES128, GCMAES192, GCMAES256, MD5, SHA1, or SHA256.
PfsGroup string: The DH group used in IKE phase 2 for new child SA. Valid options are ECP256, ECP384, PFS1, PFS2, PFS2048, PFS24, or None.
SaDatasize int: The IPSec SA payload size in KB. Must be at least 1024 KB. Defaults to 102400000 KB.
SaLifetime int: The IPSec SA lifetime in seconds. Must be at least 300 seconds. Defaults to 27000 seconds.

DhGroup string: The DH group used in IKE phase 1 for initial SA. Valid options are DHGroup1, DHGroup14, DHGroup2, DHGroup2048, DHGroup24, ECP256, ECP384, or None.
IkeEncryption string: The IKE encryption algorithm. Valid options are AES128, AES192, AES256, DES, or DES3.
IkeIntegrity string: The IKE integrity algorithm. Valid options are MD5, SHA1, SHA256, or SHA384.
IpsecEncryption string: The IPSec encryption algorithm. Valid options are AES128, AES192, AES256, DES, DES3, GCMAES128, GCMAES192, GCMAES256, or None.
IpsecIntegrity string: The IPSec integrity algorithm. Valid options are GCMAES128, GCMAES192, GCMAES256, MD5, SHA1, or SHA256.
PfsGroup string: The DH group used in IKE phase 2 for new child SA. Valid options are ECP256, ECP384, PFS1, PFS2, PFS2048, PFS24, or None.
SaDatasize int: The IPSec SA payload size in KB. Must be at least 1024 KB. Defaults to 102400000 KB.
SaLifetime int: The IPSec SA lifetime in seconds. Must be at least 300 seconds. Defaults to 27000 seconds.

dhGroup string: The DH group used in IKE phase 1 for initial SA. Valid options are DHGroup1, DHGroup14, DHGroup2, DHGroup2048, DHGroup24, ECP256, ECP384, or None.
ikeEncryption string: The IKE encryption algorithm. Valid options are AES128, AES192, AES256, DES, or DES3.
ikeIntegrity string: The IKE integrity algorithm. Valid options are MD5, SHA1, SHA256, or SHA384.
ipsecEncryption string: The IPSec encryption algorithm. Valid options are AES128, AES192, AES256, DES, DES3, GCMAES128, GCMAES192, GCMAES256, or None.
ipsecIntegrity string: The IPSec integrity algorithm. Valid options are GCMAES128, GCMAES192, GCMAES256, MD5, SHA1, or SHA256.
pfsGroup string: The DH group used in IKE phase 2 for new child SA. Valid options are ECP256, ECP384, PFS1, PFS2, PFS2048, PFS24, or None.
saDatasize number: The IPSec SA payload size in KB. Must be at least 1024 KB. Defaults to 102400000 KB.
saLifetime number: The IPSec SA lifetime in seconds. Must be at least 300 seconds. Defaults to 27000 seconds.

dhGroup str: The DH group used in IKE phase 1 for initial SA. Valid options are DHGroup1, DHGroup14, DHGroup2, DHGroup2048, DHGroup24, ECP256, ECP384, or None.
ikeEncryption str: The IKE encryption algorithm. Valid options are AES128, AES192, AES256, DES, or DES3.
ikeIntegrity str: The IKE integrity algorithm. Valid options are MD5, SHA1, SHA256, or SHA384.
ipsecEncryption str: The IPSec encryption algorithm. Valid options are AES128, AES192, AES256, DES, DES3, GCMAES128, GCMAES192, GCMAES256, or None.
ipsecIntegrity str: The IPSec integrity algorithm. Valid options are GCMAES128, GCMAES192, GCMAES256, MD5, SHA1, or SHA256.
pfsGroup str: The DH group used in IKE phase 2 for new child SA. Valid options are ECP256, ECP384, PFS1, PFS2, PFS2048, PFS24, or None.
saDatasize float: The IPSec SA payload size in KB. Must be at least 1024 KB. Defaults to 102400000 KB.
saLifetime float: The IPSec SA lifetime in seconds. Must be at least 300 seconds. Defaults to 27000 seconds.

Package Details

Repository: https://github.com/pulumi/pulumi-azure
License: Apache-2.0
Notes: This Pulumi package is based on the azurerm Terraform Provider.

The Pulumi Platform

Get Started

Migrate to Pulumi

Solutions for All Teams and Engineers

Any Code

Any Cloud