Skip to content

IpsecServerProps

Properties for defining a IpsecServer.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-vpc-ipsecserver

Initializer 

import { IpsecServerProps } from '@alicloud/ros-cdk-vpc'
const ipsecServerProps: IpsecServerProps = { ... }

Properties

Name Type Description
clientIpPool string | @alicloud/ros-cdk-core.IResolvable Property clientIpPool: Client network segment refers to the address segment that assigns access addresses to the virtual network card of the client.
localSubnet string | @alicloud/ros-cdk-core.IResolvable Property localSubnet: The local network segment refers to the network segment on the VPC side that needs to be interconnected with the client network segment.
vpnGatewayId string | @alicloud/ros-cdk-core.IResolvable Property vpnGatewayId: VPN gateway instance ID.
effectImmediately boolean | @alicloud/ros-cdk-core.IResolvable Property effectImmediately: true: Apply the new configuration and trigger a reconnection immediately.
ikeConfig @alicloud/ros-cdk-core.IResolvable | IkeConfigProperty Property ikeConfig: Negotiation parameter configuration in the first phase.
ipsecConfig @alicloud/ros-cdk-core.IResolvable | IpsecConfigProperty Property ipsecConfig: Negotiation parameter configuration in the second phase.
ipsecServerName string | @alicloud/ros-cdk-core.IResolvable Property ipsecServerName: The value must be 2 to 128 characters in length and start with a letter or Chinese character.
psk string | @alicloud/ros-cdk-core.IResolvable Property psk: Pre-Shared key.
pskEnabled boolean | @alicloud/ros-cdk-core.IResolvable Property pskEnabled: Whether to enable the pre-shared key authentication method.

clientIpPoolRequired 

public readonly clientIpPool: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property clientIpPool: Client network segment refers to the address segment that assigns access addresses to the virtual network card of the client.

Note: The client network segment cannot conflict with the VPC side network segment.

localSubnetRequired 

public readonly localSubnet: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property localSubnet: The local network segment refers to the network segment on the VPC side that needs to be interconnected with the client network segment.

Use half-width commas (,) to separate multiple network segments, for example: 192.168.1.0\/24,192.168.2.0\/24.

vpnGatewayIdRequired 

public readonly vpnGatewayId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property vpnGatewayId: VPN gateway instance ID.

effectImmediatelyOptional 

public readonly effectImmediately: boolean | IResolvable;
  • Type: boolean | @alicloud/ros-cdk-core.IResolvable

Property effectImmediately: true: Apply the new configuration and trigger a reconnection immediately.

false: Trigger a reconnection only when network traffic occurs. (The reconnection may cause the network to be unavailable for a brief moment)

ikeConfigOptional 

public readonly ikeConfig: IResolvable | IkeConfigProperty;

Property ikeConfig: Negotiation parameter configuration in the first phase.

ipsecConfigOptional 

public readonly ipsecConfig: IResolvable | IpsecConfigProperty;

Property ipsecConfig: Negotiation parameter configuration in the second phase.

ipsecServerNameOptional 

public readonly ipsecServerName: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property ipsecServerName: The value must be 2 to 128 characters in length and start with a letter or Chinese character.

It can contain digits, underscores (_), and hyphens (-).

pskOptional 

public readonly psk: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property psk: Pre-Shared key.

Used for identity authentication between the VPN gateway and the client. A 16-bit random string is randomly generated by default, or you can manually specify the key. The length is limited to 100 characters.

pskEnabledOptional 

public readonly pskEnabled: boolean | IResolvable;
  • Type: boolean | @alicloud/ros-cdk-core.IResolvable

Property pskEnabled: Whether to enable the pre-shared key authentication method.

Only the value is true, which means that the pre-shared key authentication mode is enabled.