VpnConnectionProps
Properties for defining a VpnConnection.
See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-vpc-vpnconnection
Initializer
using AlibabaCloud.SDK.ROS.CDK.Vpc;
new VpnConnectionProps {
object LocalSubnet,
object RemoteSubnet,
object VpnGatewayId,
object AutoConfigRoute = null,
object BgpConfig = null,
object CustomerGatewayId = null,
object EffectImmediately = null,
object EnableDpd = null,
object EnableNatTraversal = null,
object EnableTunnelsBgp = null,
object HealthCheckConfig = null,
object IkeConfig = null,
object IpsecConfig = null,
object Name = null,
object RemoteCaCertificate = null,
object TunnelOptionsSpecification = null
};
Properties
| Name | Type | Description |
|---|---|---|
LocalSubnet |
object |
Property localSubnet: A network segment on the VPC side that needs to be interconnected with the local IDC for the second phase negotiation. |
RemoteSubnet |
object |
Property remoteSubnet: The network segment of the local IDC is used for the second phase negotiation. |
VpnGatewayId |
object |
Property vpnGatewayId: ID of the VPN gateway. |
AutoConfigRoute |
object |
Property autoConfigRoute: Specifies whether to automatically configure routes. |
BgpConfig |
object |
Property bgpConfig: The Border Gateway Protocol (BGP) configuration. |
CustomerGatewayId |
object |
Property customerGatewayId: The ID of the user gateway. |
EffectImmediately |
object |
Property effectImmediately: Whether to delete the currently negotiated IPsec tunnel and re-initiate the negotiation. |
EnableDpd |
object |
Property enableDpd: Specifies whether to enable the dead peer detection (DPD) feature. |
EnableNatTraversal |
object |
Property enableNatTraversal: Specifies whether to enable NAT traversal. |
EnableTunnelsBgp |
object |
Property enableTunnelsBgp: Specifies whether to enable the BGP feature for the tunnel. |
HealthCheckConfig |
object |
Property healthCheckConfig: Whether to enable the health check configuration. |
IkeConfig |
object |
Property ikeConfig: Configuration information for the first phase of negotiation. |
IpsecConfig |
object |
Property ipsecConfig: Configuration information for the second phase negotiation. |
Name |
object |
Property name: The name of the IPsec connection. |
RemoteCaCertificate |
object |
Property remoteCaCertificate: The peer CA certificate when a ShangMi (SM) VPN gateway is used to establish the IPsec-VPN connection. |
TunnelOptionsSpecification |
object |
Property tunnelOptionsSpecification: TunnelOptionsSpecification parameters are supported by dual-tunnel IPsec-VPN gateways. |
LocalSubnetRequired
public object LocalSubnet { get; set; }
- Type: object
Property localSubnet: A network segment on the VPC side that needs to be interconnected with the local IDC for the second phase negotiation.
Multiple network segments are separated by commas, for example: 192.168.1.0/24, 192.168.2.0/24.
RemoteSubnetRequired
public object RemoteSubnet { get; set; }
- Type: object
Property remoteSubnet: The network segment of the local IDC is used for the second phase negotiation.
Multiple network segments are separated by commas, for example: 192.168.3.0/24, 192.168.4.0/24.
VpnGatewayIdRequired
public object VpnGatewayId { get; set; }
- Type: object
Property vpnGatewayId: ID of the VPN gateway.
AutoConfigRouteOptional
public object AutoConfigRoute { get; set; }
- Type: object
Property autoConfigRoute: Specifies whether to automatically configure routes.
Valid values: true (default) false
BgpConfigOptional
public object BgpConfig { get; set; }
- Type: object
Property bgpConfig: The Border Gateway Protocol (BGP) configuration.
This parameter is required when the VPN gateway has dynamic BGP enabled. Before you configure BGP, we recommend that you learn about how BGP works and its limits. For more information, see VPN Gateway supports BGP dynamic routing. We recommend that you use a private ASN to establish a connection with Alibaba Cloud over BGP. Refer to the relevant documentation for the private ASN range.
CustomerGatewayIdOptional
public object CustomerGatewayId { get; set; }
- Type: object
Property customerGatewayId: The ID of the user gateway.
EffectImmediatelyOptional
public object EffectImmediately { get; set; }
- Type: object
Property effectImmediately: Whether to delete the currently negotiated IPsec tunnel and re-initiate the negotiation.
Value: True: Negotiate immediately after the configuration is complete. False (default): Negotiate when traffic enters.
EnableDpdOptional
public object EnableDpd { get; set; }
- Type: object
Property enableDpd: Specifies whether to enable the dead peer detection (DPD) feature.
Valid values: true (default) The initiator of the IPsec-VPN connection sends DPD packets to verify the existence and availability of the peer. If no response is received from the peer within a specified period of time, the connection fails. ISAKMP SAs and IPsec SAs are deleted. The IPsec tunnel is also deleted. false: disables DPD. The IPsec initiator does not send DPD packets.
EnableNatTraversalOptional
public object EnableNatTraversal { get; set; }
- Type: object
Property enableNatTraversal: Specifies whether to enable NAT traversal.
Valid values: true (default) After NAT traversal is enabled, the initiator does not check the UDP ports during IKE negotiations and can automatically discover NAT gateway devices along the VPN tunnel. false
EnableTunnelsBgpOptional
public object EnableTunnelsBgp { get; set; }
- Type: object
Property enableTunnelsBgp: Specifies whether to enable the BGP feature for the tunnel.
Valid values: true and false. Default value: false.
HealthCheckConfigOptional
public object HealthCheckConfig { get; set; }
- Type: object
Property healthCheckConfig: Whether to enable the health check configuration.
IkeConfigOptional
public object IkeConfig { get; set; }
- Type: object
Property ikeConfig: Configuration information for the first phase of negotiation.
IpsecConfigOptional
public object IpsecConfig { get; set; }
- Type: object
Property ipsecConfig: Configuration information for the second phase negotiation.
NameOptional
public object Name { get; set; }
- Type: object
Property name: The name of the IPsec connection.
The length is 2-128 characters and must start with a letter or Chinese. It can contain numbers, periods (.), underscores (_) and dashes (-), but cannot start with http:// or https:// .
RemoteCaCertificateOptional
public object RemoteCaCertificate { get; set; }
- Type: object
Property remoteCaCertificate: The peer CA certificate when a ShangMi (SM) VPN gateway is used to establish the IPsec-VPN connection.
This parameter is required when an SM VPN gateway is used to establish the IPsec-VPN connection. You can ignore this parameter when a standard VPN gateway is used to create the IPsec-VPN connection.
TunnelOptionsSpecificationOptional
public object TunnelOptionsSpecification { get; set; }
- Type: object
Property tunnelOptionsSpecification: TunnelOptionsSpecification parameters are supported by dual-tunnel IPsec-VPN gateways.
You can modify both the active and standby tunnels of the IPsec-VPN connection.