InlineL3Vpn1

InlineL3Vpn1
InlineL3Vpn1
JSON Example
{
    "dh_groups": [
        "string"
    ],
    "enable_perfect_forward_secrecy": false,
    "enabled": false,
    "ike_digest_algorithms": [
        "string"
    ],
    "ike_encryption_algorithms": [
        "string"
    ],
    "ike_version": "string",
    "l3vpn_session": {
        "resource_type": "string"
    },
    "local_address": "string",
    "passphrases": [
        "string"
    ],
    "remote_private_address": "string",
    "remote_public_address": "string",
    "tunnel_digest_algorithms": [
        "string"
    ],
    "tunnel_encryption_algorithms": [
        "string"
    ]
}
array of string
dh_groups
Optional

Diffie-Hellman group to be used if PFS is enabled. Default group is GROUP14.

Possible values are : GROUP2, GROUP5, GROUP14, GROUP15, GROUP16,
boolean
enable_perfect_forward_secrecy
Optional

If true, perfect forward secrecy (PFS) is enabled.

boolean
enabled
Optional

Flag to enable L3Vpn. Default is enabled.

array of string
ike_digest_algorithms
Optional

Algorithm to be used for message digest during Internet Key Exchange(IKE) negotiation. Default is SHA2_256.

Possible values are : SHA1, SHA2_256,
array of string
ike_encryption_algorithms
Optional

Algorithm to be used during Internet Key Exchange(IKE) negotiation. Default is AES_128.

Possible values are : AES_128, AES_256, AES_GCM_128, AES_GCM_192, AES_GCM_256,
string
ike_version
Optional

IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds to both IKE-V1 and IKE-V2.

Possible values are : IKE_V1, IKE_V2, IKE_FLEX,
l3vpn_session
Required

Contains information about L3Vpn session.

string As ipv4 As ipv4
local_address
Required

IPv4 address of local gateway

array of string
passphrases
Optional

List of IPSec pre-shared keys used for IPSec authentication. If not specified, the older passphrase values are retained if there are any.

string
remote_private_address
Optional

This field is used to resolve conflicts in case of a remote site being behind NAT as remote public ip address is not enough. If it is not the case the remote public address should be provided here. If not provided, the value of this field is set to remote_public_address.

string As ipv4 As ipv4
remote_public_address
Required

Public IPv4 address of remote gateway

array of string
tunnel_digest_algorithms
Optional

Algorithm to be used for message digest during tunnel establishment. Default algorithm is empty.

Possible values are : SHA1, SHA2_256,
array of string
tunnel_encryption_algorithms
Optional

Encryption algorithm to encrypt/decrypt the messages exchanged between IPSec VPN initiator and responder during tunnel negotiation. Default is AES_GCM_128.

Possible values are : AES_128, AES_256, AES_GCM_128, AES_GCM_192, AES_GCM_256,
Used By