GetGatewayVpnAttachmentsAttachmentIkeConfig

data class GetGatewayVpnAttachmentsAttachmentIkeConfig(val ikeAuthAlg: String, val ikeEncAlg: String, val ikeLifetime: Int, val ikeMode: String, val ikePfs: String, val ikeVersion: String, val localId: String, val psk: String, val remoteId: String)

Constructors

constructor(ikeAuthAlg: String, ikeEncAlg: String, ikeLifetime: Int, ikeMode: String, ikePfs: String, ikeVersion: String, localId: String, psk: String, remoteId: String)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

The authentication algorithm negotiated in the first stage. Values: md5, sha1, sha256, sha384, sha512. Default value: sha1.

Link copied to clipboard

The encryption algorithm negotiated in the first stage. Value: aes, aes192, aes256, des, or 3des. Default value: aes.

Link copied to clipboard

The life cycle of SA negotiated in the first stage. Unit: seconds.Value range: 0 to 86400. Default value: 86400.

Link copied to clipboard

IKE version of the negotiation mode. Value: main or aggressive. Default value: main.-main: main mode, high security during negotiation.-aggressive: Savage mode, fast negotiation and high negotiation success rate.

Link copied to clipboard

The first stage negotiates the Diffie-Hellman key exchange algorithm used. Default value: group2.Values: group1, group2, group5, group14.

Link copied to clipboard

Version of the IKE protocol. Value: ikev1 or ikev2. Default value: ikev2.Compared with IKEv1, IKEv2 simplifies the SA negotiation process and provides better support for multiple network segments.

Link copied to clipboard

The identifier of the local end of the tunnel (Alibaba Cloud side), which is used for the first phase of negotiation. The length is limited to 100 characters and cannot contain spaces. The default value is the IP address of the tunnel.LocalId supports the FQDN format. If you use the FQDN format, we recommend that you select aggressive (barbaric mode) as the negotiation mode.

Link copied to clipboard
val psk: String

The pre-shared key is used for identity authentication between the tunnel and the tunnel peer.-The key can be 1 to 100 characters in length. It supports numbers, upper and lower case English letters, and characters on the right. It cannot contain spaces. '''~! \'@#$%^& *()_-+ ={}[]|;:',./? '''-If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. The pre-shared key of the tunnel and the tunnel peer must be the same, otherwise the system cannot establish the tunnel normally.

Link copied to clipboard

Identifier of the tunnel peer, which is used for the first-stage negotiation. The length is limited to 100 characters and cannot contain spaces. The default value is the IP address of the user gateway associated with the tunnel.- RemoteId supports the FQDN format. If you use the FQDN format, we recommend that you select aggressive (barbaric mode) as the negotiation mode.