GatewayIpSecVpnTunnelConnectionProperties
This specifies the given security profile/connection properties of a given IP Sec VPN Tunnel, such as Dead Probe Interval and IKE settings. If a security type is set to 'CUSTOM', then ike, tunnel, and/or dpd configurations can be specified. Otherwise, those fields are read only and are set to the values based on the specific security type.
{
"securityType": "string",
"ikeConfiguration": {
"ikeVersion": "string",
"dhGroups": [
"string"
],
"digestAlgorithms": [
"string"
],
"encryptionAlgorithms": [
"string"
],
"saLifeTime": 0
},
"tunnelConfiguration": {
"perfectForwardSecrecyActive": false,
"dfPolicy": "string",
"dhGroups": [
"string"
],
"digestAlgorithms": [
"string"
],
"encryptionAlgorithms": [
"string"
],
"saLifeTime": 0
},
"dpdProbeInterval": 0
}
This is the security type used for the IPSec Tunnel. If nothing is specified, this will be set to 'DEFAULT' in which the default settings in NSX will be used. If 'CUSTOM' is specified, then ike, tunnel, and dpd configurations can be set.
Specifies the Dead Peer Detection Profile. This configuration determines the number of seconds to wait in time between probes to detect if an IPSec peer is alive or not. The minimum is 3 seconds, and the maximum is 60 seconds. If unset, the system default of 60 seconds will be used.