pulumi-alicloud-kotlin/com.pulumi.alicloud.vpn.kotlin.outputs/GetGatewayVpnAttachmentsAttachmentTunnelOptionsSpecificationTunnelIkeConfig

GetGatewayVpnAttachmentsAttachmentTunnelOptionsSpecificationTunnelIkeConfig

data class GetGatewayVpnAttachmentsAttachmentTunnelOptionsSpecificationTunnelIkeConfig(val ikeAuthAlg: String, val ikeEncAlg: String, val ikeLifetime: Int, val ikeMode: String, val ikePfs: String, val ikeVersion: String, val localId: String, val psk: String, val remoteId: String)

Constructors

constructor(ikeAuthAlg: String, ikeEncAlg: String, ikeLifetime: Int, ikeMode: String, ikePfs: String, ikeVersion: String, localId: String, psk: String, remoteId: String)

Types

Companion

object Companion

Properties

ikeAuthAlg

val ikeAuthAlg: String

The authentication algorithm negotiated in the first stage. Values: md5, sha1, sha256, sha384, sha512. Default value: sha1.

ikeEncAlg

val ikeEncAlg: String

The encryption algorithm negotiated in the first stage. Value: aes, aes192, aes256, des, or 3des. Default value: aes.

ikeLifetime

val ikeLifetime: Int

The life cycle of SA negotiated in the first stage. Unit: seconds.Value range: 0 to 86400. Default value: 86400.

ikeMode

val ikeMode: String

IKE version of the negotiation mode. Value: main or aggressive. Default value: main.-main: main mode, high security during negotiation.-aggressive: Savage mode, fast negotiation and high negotiation success rate.

ikePfs

val ikePfs: String

The first stage negotiates the Diffie-Hellman key exchange algorithm used. Default value: group2.Values: group1, group2, group5, group14.

ikeVersion

val ikeVersion: String

Version of the IKE protocol. Value: ikev1 or ikev2. Default value: ikev2.Compared with IKEv1, IKEv2 simplifies the SA negotiation process and provides better support for multiple network segments.

localId

val localId: String

The identifier of the local end of the tunnel (Alibaba Cloud side), which is used for the first phase of negotiation. The length is limited to 100 characters and cannot contain spaces. The default value is the IP address of the tunnel.LocalId supports the FQDN format. If you use the FQDN format, we recommend that you select aggressive (barbaric mode) as the negotiation mode.

psk

val psk: String

The pre-shared key is used for identity authentication between the tunnel and the tunnel peer.-The key can be 1 to 100 characters in length. It supports numbers, upper and lower case English letters, and characters on the right. It cannot contain spaces. '''~! \'@#$%^& *()_-+ ={}[]|;:',./? '''-If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. The pre-shared key of the tunnel and the tunnel peer must be the same, otherwise the system cannot establish the tunnel normally.

remoteId

val remoteId: String

Identifier of the tunnel peer, which is used for the first-stage negotiation. The length is limited to 100 characters and cannot contain spaces. The default value is the IP address of the user gateway associated with the tunnel.- RemoteId supports the FQDN format. If you use the FQDN format, we recommend that you select aggressive (barbaric mode) as the negotiation mode.