VpnConnectionProps

Properties for defining a VpnConnection.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-vpc-vpnconnection

Initializer

import "github.com/alibabacloud-go/ros-cdk/alicloudroscdkvpc"
&alicloudroscdkvpc.VpnConnectionProps {
    LocalSubnet: interface{},
    RemoteSubnet: interface{},
    VpnGatewayId: interface{},
    AutoConfigRoute: interface{},
    BgpConfig: interface{},
    CustomerGatewayId: interface{},
    EffectImmediately: interface{},
    EnableDpd: interface{},
    EnableNatTraversal: interface{},
    EnableTunnelsBgp: interface{},
    HealthCheckConfig: interface{},
    IkeConfig: interface{},
    IpsecConfig: interface{},
    Name: interface{},
    RemoteCaCertificate: interface{},
    TunnelOptionsSpecification: interface{},
}

Properties

LocalSubnet^Required

LocalSubnet interface{}

• Type: interface{}

Property localSubnet: The CIDR block of the virtual private cloud (VPC) that needs to communicate with the on-premises database.

The CIDR block is used in Phase 2 negotiations. Separate multiple CIDR blocks with commas (,). Example: 192.168.1.0/24,192.168.2.0/24. The following routing modes are supported:

• If you set LocalSubnet and RemoteSubnet to 0.0.0.0/0, the routing mode of the IPsec-VPN connection is set to Destination Routing Mode.
• If you set LocalSubnet and RemoteSubnet to specific CIDR blocks, the routing mode of the IPsec-VPN connection is set to Protected Data Flows.

RemoteSubnet^Required

RemoteSubnet interface{}

• Type: interface{}

Property remoteSubnet: The CIDR block of the on-premises database that needs to communicate with the VPC.

The CIDR block is used in Phase 2 negotiations. Separate multiple CIDR blocks with commas (,). Example: 192.168.3.0/24,192.168.4.0/24. The following routing modes are supported:

• If you set LocalSubnet and RemoteSubnet to 0.0.0.0/0...

VpnGatewayId^Required

VpnGatewayId interface{}

• Type: interface{}

Property vpnGatewayId: ID of the VPN gateway.

AutoConfigRoute^Optional

AutoConfigRoute interface{}

• Type: interface{}

Property autoConfigRoute: Specifies whether to automatically configure routes.

Valid values: true (default) false

BgpConfig^Optional

BgpConfig interface{}

• Type: interface{}

Property bgpConfig: The Border Gateway Protocol (BGP) configuration.

This parameter is required when the VPN gateway has dynamic BGP enabled. Before you configure BGP, we recommend that you learn about how BGP works and its limits. For more information, see VPN Gateway supports BGP dynamic routing. We recommend that you use a private ASN to establish a connection with Alibaba Cloud over BGP. Refer to the relevant documentation for the private ASN range.

CustomerGatewayId^Optional

CustomerGatewayId interface{}

• Type: interface{}

Property customerGatewayId: The ID of the user gateway.

EffectImmediately^Optional

EffectImmediately interface{}

• Type: interface{}

Property effectImmediately: Whether to delete the currently negotiated IPsec tunnel and re-initiate the negotiation.

Value: True: Negotiate immediately after the configuration is complete. False (default): Negotiate when traffic enters.

EnableDpd^Optional

EnableDpd interface{}

• Type: interface{}

Property enableDpd: Specifies whether to enable the dead peer detection (DPD) feature.

Valid values: true (default) The initiator of the IPsec-VPN connection sends DPD packets to verify the existence and availability of the peer. If no response is received from the peer within a specified period of time, the connection fails. ISAKMP SAs and IPsec SAs are deleted. The IPsec tunnel is also deleted. false: disables DPD. The IPsec initiator does not send DPD packets.

EnableNatTraversal^Optional

EnableNatTraversal interface{}

• Type: interface{}

Property enableNatTraversal: Specifies whether to enable NAT traversal.

Valid values: true (default) After NAT traversal is enabled, the initiator does not check the UDP ports during IKE negotiations and can automatically discover NAT gateway devices along the VPN tunnel. false

EnableTunnelsBgp^Optional

EnableTunnelsBgp interface{}

• Type: interface{}

Property enableTunnelsBgp: Specifies whether to enable the BGP feature for the tunnel.

Valid values: true and false. Default value: false.

HealthCheckConfig^Optional

HealthCheckConfig interface{}

• Type: interface{}

Property healthCheckConfig: This parameter is available if you create an IPsec-VPN connection in single-tunnel mode.

The health check configuration:

• HealthCheckConfig.enable: ... Default value: false.
• HealthCheckConfig.dip / sip / interval (Default: 3) / retry (Default: 3) / Policy (revoke_route default / reserve_route).

IkeConfig^Optional

IkeConfig interface{}

• Type: interface{}

Property ikeConfig: Configuration information for the first phase of negotiation.

IpsecConfig^Optional

IpsecConfig interface{}

• Type: interface{}

Property ipsecConfig: Configuration information for the second phase negotiation.

Name^Optional

Name interface{}

• Type: interface{}

Property name: The name of the IPsec-VPN connection.

The name must be 1 to 100 characters in length and cannot start with http:\/\/ or https:\/\/.

RemoteCaCertificate^Optional

RemoteCaCertificate interface{}

• Type: interface{}

Property remoteCaCertificate: The peer CA certificate when a ShangMi (SM) VPN gateway is used to establish the IPsec-VPN connection.

This parameter is required when an SM VPN gateway is used to establish the IPsec-VPN connection. You can ignore this parameter when a standard VPN gateway is used to create the IPsec-VPN connection.

TunnelOptionsSpecification^Optional

TunnelOptionsSpecification interface{}

• Type: interface{}

Property tunnelOptionsSpecification: TunnelOptionsSpecification parameters are supported by dual-tunnel IPsec-VPN gateways.

You can modify both the active and standby tunnels of the IPsec-VPN connection.