alibabacloud-vpc20160428 6.13.2__py3-none-any.whl → 6.14.0__py3-none-any.whl

alibabacloud_vpc20160428/models/_describe_vpn_connection_response_body.py

@@ -0,0 +1,1250 @@
+# -*- coding: utf-8 -*-
+# This file is auto-generated, don't edit it. Thanks.
+from __future__ import annotations
+
+from typing import List
+
+from alibabacloud_vpc20160428 import models as main_models
+from darabonba.model import DaraModel
+
+class DescribeVpnConnectionResponseBody(DaraModel):
+    def __init__(
+        self,
+        attach_instance_id: str = None,
+        attach_type: str = None,
+        create_time: int = None,
+        cross_account_authorized: bool = None,
+        customer_gateway_id: str = None,
+        effect_immediately: bool = None,
+        enable_dpd: bool = None,
+        enable_nat_traversal: bool = None,
+        enable_tunnels_bgp: bool = None,
+        ike_config: main_models.DescribeVpnConnectionResponseBodyIkeConfig = None,
+        internet_ip: str = None,
+        ipsec_config: main_models.DescribeVpnConnectionResponseBodyIpsecConfig = None,
+        local_subnet: str = None,
+        name: str = None,
+        network_type: str = None,
+        remote_ca_certificate: str = None,
+        remote_subnet: str = None,
+        request_id: str = None,
+        resource_group_id: str = None,
+        spec: str = None,
+        state: str = None,
+        status: str = None,
+        tags: main_models.DescribeVpnConnectionResponseBodyTags = None,
+        transit_router_id: str = None,
+        transit_router_name: str = None,
+        tunnel_options_specification: main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecification = None,
+        vco_health_check: main_models.DescribeVpnConnectionResponseBodyVcoHealthCheck = None,
+        vpn_bgp_config: main_models.DescribeVpnConnectionResponseBodyVpnBgpConfig = None,
+        vpn_connection_id: str = None,
+        vpn_gateway_id: str = None,
+        zone_no: str = None,
+    ):
+        # The ID of the CEN instance to which the transit router belongs.
+        self.attach_instance_id = attach_instance_id
+        # The type of the resource that is associated with the IPsec-VPN connection. Valid values:
+        # 
+        # *   **CEN**: indicates that the IPsec-VPN connection is associated with a transit router of a Cloud Enterprise Network (CEN) instance.
+        # *   **NO_ASSOCIATED**: indicates that the IPsec-VPN connection is not associated with any resource.
+        # *   **VPNGW**: indicates that the IPsec-VPN connection is associated with a VPN gateway.
+        self.attach_type = attach_type
+        # The timestamp generated when the IPsec-VPN connection was established. Unit: milliseconds.
+        # 
+        # This value is a UNIX timestamp representing the number of milliseconds that have elapsed since the epoch time January 1, 1970, 00:00:00 UTC.
+        self.create_time = create_time
+        # Indicates whether the IPsec-VPN connection is associated with a transit router that belongs to another Alibaba Cloud account. Valid values:
+        # 
+        # *   **true**
+        # *   **false**
+        self.cross_account_authorized = cross_account_authorized
+        # The ID of the customer gateway associated with the IPsec-VPN connection.
+        self.customer_gateway_id = customer_gateway_id
+        # Indicates whether IPsec negotiations immediately start after the configuration takes effect. Valid values:
+        # 
+        # *   **true**: Negotiations are reinitiated after the configuration is changed.
+        # *   **false**: Negotiations are reinitiated after traffic is detected.
+        self.effect_immediately = effect_immediately
+        # Indicates whether the dead peer detection (DPD) feature is enabled for the IPsec-VPN connection. Valid values:
+        # 
+        # *   **false**
+        # *   **true**
+        # 
+        # After you enable the DPD feature, the initiator of the IPsec-VPN connection sends DPD packets to check the existence and availability of the peer. If no response is received from the peer within a specified period of time, the connection fails. Then, the ISAKMP security association (SA), IPsec SA, and IPsec tunnel are deleted.
+        self.enable_dpd = enable_dpd
+        # Indicates whether NAT traversal is enabled for the IPsec-VPN connection. Valid values:
+        # 
+        # *   **true**
+        # *   **false**
+        # 
+        # After NAT traversal is enabled, the initiator does not check the UDP ports during IKE negotiations and can automatically discover NAT gateway devices along the IPsec tunnel.
+        self.enable_nat_traversal = enable_nat_traversal
+        # Indicates whether BGP is enabled for the tunnel. Valid values:
+        # 
+        # *   **true**
+        # *   **false**
+        self.enable_tunnels_bgp = enable_tunnels_bgp
+        # The configuration of Phase 1 negotiations.
+        self.ike_config = ike_config
+        # The gateway IP address of the IPsec-VPN connection.
+        self.internet_ip = internet_ip
+        # The configuration of Phase 2 negotiations.
+        self.ipsec_config = ipsec_config
+        # The CIDR block on the Alibaba Cloud side.
+        # 
+        # Multiple CIDR blocks are separated by commas (,).
+        self.local_subnet = local_subnet
+        # The name of the IPsec-VPN connection.
+        self.name = name
+        # The network type of the IPsec-VPN connection. Valid values:
+        # 
+        # *   **public**: an encrypted connection over the Internet
+        # *   **private**: an encrypted connection over private networks
+        self.network_type = network_type
+        # The certificate authority (CA) certificate of the peer.
+        self.remote_ca_certificate = remote_ca_certificate
+        # The CIDR block on the data center side.
+        # 
+        # Multiple CIDR blocks are separated by commas (,).
+        self.remote_subnet = remote_subnet
+        # The request ID.
+        self.request_id = request_id
+        # The ID of the resource group to which the IPsec-VPN connection belongs.
+        # 
+        # You can call the [ListResourceGroups](https://help.aliyun.com/document_detail/158855.html) operation to query the resource group information.
+        self.resource_group_id = resource_group_id
+        # The bandwidth specification of the IPsec-VPN connection. Unit: **Mbit/s**.
+        self.spec = spec
+        # The association state of the IPsec-VPN connection. Valid values:
+        # 
+        # *   **active**: The IPsec-VPN connection is associated with a VPN gateway.
+        # *   **init**: The IPsec-VPN connection is not associated with any resource and is being initialized.
+        # *   **attaching**: The IPsec-VPN connection is being associated with a transit router.
+        # *   **attached**: The IPsec-VPN connection is associated with a transit router.
+        # *   **detaching**: The IPsec-VPN connection is being disassociated from a transit router.
+        # *   **financialLocked**: The IPsec-VPN connection is locked due to overdue payments.
+        # *   **provisioning**: The IPsec-VPN connection is being prepared.
+        # *   **updating**: The IPsec-VPN connection is being updated.
+        # *   **Upgrading**: The IPsec-VPN connection is being upgraded.
+        # *   **deleted**: The IPsec-VPN connection is deleted.
+        self.state = state
+        # The state of the IPsec-VPN connection. Valid values:
+        # 
+        # *   **ike_sa_not_established**: Phase 1 negotiations failed.
+        # *   **ike_sa_established**: Phase 1 negotiations succeeded.
+        # *   **ipsec_sa_not_established**: Phase 2 negotiations failed.
+        # *   **ipsec_sa_established**: Phase 2 negotiations succeeded.
+        self.status = status
+        # The list of tags added to the IPsec-VPN connection.
+        self.tags = tags
+        # The ID of the transit router with which the IPsec-VPN connection is associated.
+        self.transit_router_id = transit_router_id
+        # The name of the transit router.
+        self.transit_router_name = transit_router_name
+        # The tunnel configurations of the IPsec-VPN connection.
+        # 
+        # Parameters in **TunnelOptionsSpecification** are returned only if you query an IPsec-VPN connection in dual-tunnel mode.
+        self.tunnel_options_specification = tunnel_options_specification
+        # The health check information about the IPsec-VPN connection.
+        self.vco_health_check = vco_health_check
+        # The Border Gateway Protocol (BGP) configuration of the IPsec-VPN connection.
+        self.vpn_bgp_config = vpn_bgp_config
+        # The ID of the IPsec-VPN connection.
+        self.vpn_connection_id = vpn_connection_id
+        # The ID of the VPN gateway.
+        self.vpn_gateway_id = vpn_gateway_id
+        # The ID of the zone where the IPsec-VPN connection is deployed.
+        # 
+        # You can call [DescribeZones](https://help.aliyun.com/document_detail/36064.html) to query zone IDs and mapping between zone IDs and zone names.
+        self.zone_no = zone_no
+
+    def validate(self):
+        if self.ike_config:
+            self.ike_config.validate()
+        if self.ipsec_config:
+            self.ipsec_config.validate()
+        if self.tags:
+            self.tags.validate()
+        if self.tunnel_options_specification:
+            self.tunnel_options_specification.validate()
+        if self.vco_health_check:
+            self.vco_health_check.validate()
+        if self.vpn_bgp_config:
+            self.vpn_bgp_config.validate()
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.attach_instance_id is not None:
+            result['AttachInstanceId'] = self.attach_instance_id
+
+        if self.attach_type is not None:
+            result['AttachType'] = self.attach_type
+
+        if self.create_time is not None:
+            result['CreateTime'] = self.create_time
+
+        if self.cross_account_authorized is not None:
+            result['CrossAccountAuthorized'] = self.cross_account_authorized
+
+        if self.customer_gateway_id is not None:
+            result['CustomerGatewayId'] = self.customer_gateway_id
+
+        if self.effect_immediately is not None:
+            result['EffectImmediately'] = self.effect_immediately
+
+        if self.enable_dpd is not None:
+            result['EnableDpd'] = self.enable_dpd
+
+        if self.enable_nat_traversal is not None:
+            result['EnableNatTraversal'] = self.enable_nat_traversal
+
+        if self.enable_tunnels_bgp is not None:
+            result['EnableTunnelsBgp'] = self.enable_tunnels_bgp
+
+        if self.ike_config is not None:
+            result['IkeConfig'] = self.ike_config.to_map()
+
+        if self.internet_ip is not None:
+            result['InternetIp'] = self.internet_ip
+
+        if self.ipsec_config is not None:
+            result['IpsecConfig'] = self.ipsec_config.to_map()
+
+        if self.local_subnet is not None:
+            result['LocalSubnet'] = self.local_subnet
+
+        if self.name is not None:
+            result['Name'] = self.name
+
+        if self.network_type is not None:
+            result['NetworkType'] = self.network_type
+
+        if self.remote_ca_certificate is not None:
+            result['RemoteCaCertificate'] = self.remote_ca_certificate
+
+        if self.remote_subnet is not None:
+            result['RemoteSubnet'] = self.remote_subnet
+
+        if self.request_id is not None:
+            result['RequestId'] = self.request_id
+
+        if self.resource_group_id is not None:
+            result['ResourceGroupId'] = self.resource_group_id
+
+        if self.spec is not None:
+            result['Spec'] = self.spec
+
+        if self.state is not None:
+            result['State'] = self.state
+
+        if self.status is not None:
+            result['Status'] = self.status
+
+        if self.tags is not None:
+            result['Tags'] = self.tags.to_map()
+
+        if self.transit_router_id is not None:
+            result['TransitRouterId'] = self.transit_router_id
+
+        if self.transit_router_name is not None:
+            result['TransitRouterName'] = self.transit_router_name
+
+        if self.tunnel_options_specification is not None:
+            result['TunnelOptionsSpecification'] = self.tunnel_options_specification.to_map()
+
+        if self.vco_health_check is not None:
+            result['VcoHealthCheck'] = self.vco_health_check.to_map()
+
+        if self.vpn_bgp_config is not None:
+            result['VpnBgpConfig'] = self.vpn_bgp_config.to_map()
+
+        if self.vpn_connection_id is not None:
+            result['VpnConnectionId'] = self.vpn_connection_id
+
+        if self.vpn_gateway_id is not None:
+            result['VpnGatewayId'] = self.vpn_gateway_id
+
+        if self.zone_no is not None:
+            result['ZoneNo'] = self.zone_no
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('AttachInstanceId') is not None:
+            self.attach_instance_id = m.get('AttachInstanceId')
+
+        if m.get('AttachType') is not None:
+            self.attach_type = m.get('AttachType')
+
+        if m.get('CreateTime') is not None:
+            self.create_time = m.get('CreateTime')
+
+        if m.get('CrossAccountAuthorized') is not None:
+            self.cross_account_authorized = m.get('CrossAccountAuthorized')
+
+        if m.get('CustomerGatewayId') is not None:
+            self.customer_gateway_id = m.get('CustomerGatewayId')
+
+        if m.get('EffectImmediately') is not None:
+            self.effect_immediately = m.get('EffectImmediately')
+
+        if m.get('EnableDpd') is not None:
+            self.enable_dpd = m.get('EnableDpd')
+
+        if m.get('EnableNatTraversal') is not None:
+            self.enable_nat_traversal = m.get('EnableNatTraversal')
+
+        if m.get('EnableTunnelsBgp') is not None:
+            self.enable_tunnels_bgp = m.get('EnableTunnelsBgp')
+
+        if m.get('IkeConfig') is not None:
+            temp_model = main_models.DescribeVpnConnectionResponseBodyIkeConfig()
+            self.ike_config = temp_model.from_map(m.get('IkeConfig'))
+
+        if m.get('InternetIp') is not None:
+            self.internet_ip = m.get('InternetIp')
+
+        if m.get('IpsecConfig') is not None:
+            temp_model = main_models.DescribeVpnConnectionResponseBodyIpsecConfig()
+            self.ipsec_config = temp_model.from_map(m.get('IpsecConfig'))
+
+        if m.get('LocalSubnet') is not None:
+            self.local_subnet = m.get('LocalSubnet')
+
+        if m.get('Name') is not None:
+            self.name = m.get('Name')
+
+        if m.get('NetworkType') is not None:
+            self.network_type = m.get('NetworkType')
+
+        if m.get('RemoteCaCertificate') is not None:
+            self.remote_ca_certificate = m.get('RemoteCaCertificate')
+
+        if m.get('RemoteSubnet') is not None:
+            self.remote_subnet = m.get('RemoteSubnet')
+
+        if m.get('RequestId') is not None:
+            self.request_id = m.get('RequestId')
+
+        if m.get('ResourceGroupId') is not None:
+            self.resource_group_id = m.get('ResourceGroupId')
+
+        if m.get('Spec') is not None:
+            self.spec = m.get('Spec')
+
+        if m.get('State') is not None:
+            self.state = m.get('State')
+
+        if m.get('Status') is not None:
+            self.status = m.get('Status')
+
+        if m.get('Tags') is not None:
+            temp_model = main_models.DescribeVpnConnectionResponseBodyTags()
+            self.tags = temp_model.from_map(m.get('Tags'))
+
+        if m.get('TransitRouterId') is not None:
+            self.transit_router_id = m.get('TransitRouterId')
+
+        if m.get('TransitRouterName') is not None:
+            self.transit_router_name = m.get('TransitRouterName')
+
+        if m.get('TunnelOptionsSpecification') is not None:
+            temp_model = main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecification()
+            self.tunnel_options_specification = temp_model.from_map(m.get('TunnelOptionsSpecification'))
+
+        if m.get('VcoHealthCheck') is not None:
+            temp_model = main_models.DescribeVpnConnectionResponseBodyVcoHealthCheck()
+            self.vco_health_check = temp_model.from_map(m.get('VcoHealthCheck'))
+
+        if m.get('VpnBgpConfig') is not None:
+            temp_model = main_models.DescribeVpnConnectionResponseBodyVpnBgpConfig()
+            self.vpn_bgp_config = temp_model.from_map(m.get('VpnBgpConfig'))
+
+        if m.get('VpnConnectionId') is not None:
+            self.vpn_connection_id = m.get('VpnConnectionId')
+
+        if m.get('VpnGatewayId') is not None:
+            self.vpn_gateway_id = m.get('VpnGatewayId')
+
+        if m.get('ZoneNo') is not None:
+            self.zone_no = m.get('ZoneNo')
+
+        return self
+
+class DescribeVpnConnectionResponseBodyVpnBgpConfig(DaraModel):
+    def __init__(
+        self,
+        auth_key: str = None,
+        enable_bgp: str = None,
+        local_asn: int = None,
+        local_bgp_ip: str = None,
+        peer_asn: int = None,
+        peer_bgp_ip: str = None,
+        status: str = None,
+        tunnel_cidr: str = None,
+    ):
+        # The authentication key of the BGP routing protocol.
+        self.auth_key = auth_key
+        # Indicates whether BGP is enabled. Valid values:
+        # 
+        # *   **true**
+        # *   **false**
+        self.enable_bgp = enable_bgp
+        # The ASN on the Alibaba Cloud side.
+        self.local_asn = local_asn
+        # The BGP IP address on the Alibaba Cloud side.
+        self.local_bgp_ip = local_bgp_ip
+        # The autonomous system number (ASN) of the peer.
+        self.peer_asn = peer_asn
+        # The BGP IP address of the peer.
+        self.peer_bgp_ip = peer_bgp_ip
+        # The negotiation state of the BGP routing protocol. Valid values:
+        # 
+        # *   **success**: normal
+        # *   **failed**
+        self.status = status
+        # The BGP CIDR block of the IPsec-VPN connection. The CIDR block falls within 169.254.0.0/16. The subnet mask of the CIDR block must be 30 bits in length.
+        self.tunnel_cidr = tunnel_cidr
+
+    def validate(self):
+        pass
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.auth_key is not None:
+            result['AuthKey'] = self.auth_key
+
+        if self.enable_bgp is not None:
+            result['EnableBgp'] = self.enable_bgp
+
+        if self.local_asn is not None:
+            result['LocalAsn'] = self.local_asn
+
+        if self.local_bgp_ip is not None:
+            result['LocalBgpIp'] = self.local_bgp_ip
+
+        if self.peer_asn is not None:
+            result['PeerAsn'] = self.peer_asn
+
+        if self.peer_bgp_ip is not None:
+            result['PeerBgpIp'] = self.peer_bgp_ip
+
+        if self.status is not None:
+            result['Status'] = self.status
+
+        if self.tunnel_cidr is not None:
+            result['TunnelCidr'] = self.tunnel_cidr
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('AuthKey') is not None:
+            self.auth_key = m.get('AuthKey')
+
+        if m.get('EnableBgp') is not None:
+            self.enable_bgp = m.get('EnableBgp')
+
+        if m.get('LocalAsn') is not None:
+            self.local_asn = m.get('LocalAsn')
+
+        if m.get('LocalBgpIp') is not None:
+            self.local_bgp_ip = m.get('LocalBgpIp')
+
+        if m.get('PeerAsn') is not None:
+            self.peer_asn = m.get('PeerAsn')
+
+        if m.get('PeerBgpIp') is not None:
+            self.peer_bgp_ip = m.get('PeerBgpIp')
+
+        if m.get('Status') is not None:
+            self.status = m.get('Status')
+
+        if m.get('TunnelCidr') is not None:
+            self.tunnel_cidr = m.get('TunnelCidr')
+
+        return self
+
+class DescribeVpnConnectionResponseBodyVcoHealthCheck(DaraModel):
+    def __init__(
+        self,
+        dip: str = None,
+        enable: str = None,
+        interval: int = None,
+        policy: str = None,
+        retry: int = None,
+        sip: str = None,
+        status: str = None,
+    ):
+        # The destination IP address.
+        self.dip = dip
+        # Indicates whether the health check feature is enabled for the IPsec-VPN connection. Valid values:
+        # 
+        # *   **false**
+        # *   **true**
+        self.enable = enable
+        # The interval between two consecutive health checks. Unit: seconds.
+        self.interval = interval
+        # Indicates whether advertised routes are withdrawn when the health check fails. Valid values:
+        # 
+        # *   **revoke_route**: Advertised routes are withdrawn.
+        # *   **reserve_route**: Advertised routes are not withdrawn.
+        self.policy = policy
+        # The maximum number of health check retries.
+        self.retry = retry
+        # The source IP address.
+        self.sip = sip
+        # The state of the health check. Valid values:
+        # 
+        # *   **failed**
+        # *   **success**: normal
+        self.status = status
+
+    def validate(self):
+        pass
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.dip is not None:
+            result['Dip'] = self.dip
+
+        if self.enable is not None:
+            result['Enable'] = self.enable
+
+        if self.interval is not None:
+            result['Interval'] = self.interval
+
+        if self.policy is not None:
+            result['Policy'] = self.policy
+
+        if self.retry is not None:
+            result['Retry'] = self.retry
+
+        if self.sip is not None:
+            result['Sip'] = self.sip
+
+        if self.status is not None:
+            result['Status'] = self.status
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('Dip') is not None:
+            self.dip = m.get('Dip')
+
+        if m.get('Enable') is not None:
+            self.enable = m.get('Enable')
+
+        if m.get('Interval') is not None:
+            self.interval = m.get('Interval')
+
+        if m.get('Policy') is not None:
+            self.policy = m.get('Policy')
+
+        if m.get('Retry') is not None:
+            self.retry = m.get('Retry')
+
+        if m.get('Sip') is not None:
+            self.sip = m.get('Sip')
+
+        if m.get('Status') is not None:
+            self.status = m.get('Status')
+
+        return self
+
+class DescribeVpnConnectionResponseBodyTunnelOptionsSpecification(DaraModel):
+    def __init__(
+        self,
+        tunnel_options: List[main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptions] = None,
+    ):
+        self.tunnel_options = tunnel_options
+
+    def validate(self):
+        if self.tunnel_options:
+            for v1 in self.tunnel_options:
+                 if v1:
+                    v1.validate()
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        result['TunnelOptions'] = []
+        if self.tunnel_options is not None:
+            for k1 in self.tunnel_options:
+                result['TunnelOptions'].append(k1.to_map() if k1 else None)
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        self.tunnel_options = []
+        if m.get('TunnelOptions') is not None:
+            for k1 in m.get('TunnelOptions'):
+                temp_model = main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptions()
+                self.tunnel_options.append(temp_model.from_map(k1))
+
+        return self
+
+class DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptions(DaraModel):
+    def __init__(
+        self,
+        customer_gateway_id: str = None,
+        enable_dpd: str = None,
+        enable_nat_traversal: str = None,
+        internet_ip: str = None,
+        remote_ca_certificate: str = None,
+        role: str = None,
+        state: str = None,
+        status: str = None,
+        tunnel_bgp_config: main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptionsTunnelBgpConfig = None,
+        tunnel_id: str = None,
+        tunnel_ike_config: main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptionsTunnelIkeConfig = None,
+        tunnel_index: int = None,
+        tunnel_ipsec_config: main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptionsTunnelIpsecConfig = None,
+        zone_no: str = None,
+    ):
+        # The ID of the customer gateway associated with the tunnel.
+        self.customer_gateway_id = customer_gateway_id
+        # Indicates whether the DPD feature is enabled for the tunnel. Valid values:
+        # 
+        # *   **false**
+        # *   **true**
+        self.enable_dpd = enable_dpd
+        # Indicates whether NAT traversal is enabled for the tunnel. Valid values:
+        # 
+        # *   **false**
+        # *   **true**
+        self.enable_nat_traversal = enable_nat_traversal
+        # The tunnel IP address.
+        self.internet_ip = internet_ip
+        # The CA certificate of the tunnel peer.
+        # 
+        # This parameter is returned only if the VPN gateway is of the ShangMi (SM) type.
+        self.remote_ca_certificate = remote_ca_certificate
+        # The tunnel role. Valid values:
+        # 
+        # *   **master**: The tunnel is an active tunnel.
+        # *   **slave**: The tunnel is a standby tunnel.
+        self.role = role
+        # The tunnel status. Valid values:
+        # 
+        # *   **active**
+        # *   **updating**
+        # *   **deleting**
+        self.state = state
+        # The state of the IPsec-VPN connection. Valid values:
+        # 
+        # *   **ike_sa_not_established**: Phase 1 negotiations failed.
+        # *   **ike_sa_established**: Phase 1 negotiations succeeded.
+        # *   **ipsec_sa_not_established**: Phase 2 negotiations failed.
+        # *   **ipsec_sa_established**: Phase 2 negotiations succeeded.
+        self.status = status
+        # The BGP configurations.
+        self.tunnel_bgp_config = tunnel_bgp_config
+        # The tunnel ID.
+        self.tunnel_id = tunnel_id
+        # The configuration of Phase 1 negotiations.
+        self.tunnel_ike_config = tunnel_ike_config
+        # The order in which the tunnel is created.
+        # 
+        # *   **1**: Tunnel 1.
+        # *   **2**: Tunnel 2.
+        # 
+        # >  This parameter is returned only if the IPsec-VPN connection is associated with a transit router.
+        self.tunnel_index = tunnel_index
+        # The configurations of Phase 2 negotiations.
+        self.tunnel_ipsec_config = tunnel_ipsec_config
+        # The zone where the tunnel is deployed.
+        # 
+        # You can call [DescribeZones](https://help.aliyun.com/document_detail/36064.html) to query zone IDs.
+        self.zone_no = zone_no
+
+    def validate(self):
+        if self.tunnel_bgp_config:
+            self.tunnel_bgp_config.validate()
+        if self.tunnel_ike_config:
+            self.tunnel_ike_config.validate()
+        if self.tunnel_ipsec_config:
+            self.tunnel_ipsec_config.validate()
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.customer_gateway_id is not None:
+            result['CustomerGatewayId'] = self.customer_gateway_id
+
+        if self.enable_dpd is not None:
+            result['EnableDpd'] = self.enable_dpd
+
+        if self.enable_nat_traversal is not None:
+            result['EnableNatTraversal'] = self.enable_nat_traversal
+
+        if self.internet_ip is not None:
+            result['InternetIp'] = self.internet_ip
+
+        if self.remote_ca_certificate is not None:
+            result['RemoteCaCertificate'] = self.remote_ca_certificate
+
+        if self.role is not None:
+            result['Role'] = self.role
+
+        if self.state is not None:
+            result['State'] = self.state
+
+        if self.status is not None:
+            result['Status'] = self.status
+
+        if self.tunnel_bgp_config is not None:
+            result['TunnelBgpConfig'] = self.tunnel_bgp_config.to_map()
+
+        if self.tunnel_id is not None:
+            result['TunnelId'] = self.tunnel_id
+
+        if self.tunnel_ike_config is not None:
+            result['TunnelIkeConfig'] = self.tunnel_ike_config.to_map()
+
+        if self.tunnel_index is not None:
+            result['TunnelIndex'] = self.tunnel_index
+
+        if self.tunnel_ipsec_config is not None:
+            result['TunnelIpsecConfig'] = self.tunnel_ipsec_config.to_map()
+
+        if self.zone_no is not None:
+            result['ZoneNo'] = self.zone_no
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('CustomerGatewayId') is not None:
+            self.customer_gateway_id = m.get('CustomerGatewayId')
+
+        if m.get('EnableDpd') is not None:
+            self.enable_dpd = m.get('EnableDpd')
+
+        if m.get('EnableNatTraversal') is not None:
+            self.enable_nat_traversal = m.get('EnableNatTraversal')
+
+        if m.get('InternetIp') is not None:
+            self.internet_ip = m.get('InternetIp')
+
+        if m.get('RemoteCaCertificate') is not None:
+            self.remote_ca_certificate = m.get('RemoteCaCertificate')
+
+        if m.get('Role') is not None:
+            self.role = m.get('Role')
+
+        if m.get('State') is not None:
+            self.state = m.get('State')
+
+        if m.get('Status') is not None:
+            self.status = m.get('Status')
+
+        if m.get('TunnelBgpConfig') is not None:
+            temp_model = main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptionsTunnelBgpConfig()
+            self.tunnel_bgp_config = temp_model.from_map(m.get('TunnelBgpConfig'))
+
+        if m.get('TunnelId') is not None:
+            self.tunnel_id = m.get('TunnelId')
+
+        if m.get('TunnelIkeConfig') is not None:
+            temp_model = main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptionsTunnelIkeConfig()
+            self.tunnel_ike_config = temp_model.from_map(m.get('TunnelIkeConfig'))
+
+        if m.get('TunnelIndex') is not None:
+            self.tunnel_index = m.get('TunnelIndex')
+
+        if m.get('TunnelIpsecConfig') is not None:
+            temp_model = main_models.DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptionsTunnelIpsecConfig()
+            self.tunnel_ipsec_config = temp_model.from_map(m.get('TunnelIpsecConfig'))
+
+        if m.get('ZoneNo') is not None:
+            self.zone_no = m.get('ZoneNo')
+
+        return self
+
+class DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptionsTunnelIpsecConfig(DaraModel):
+    def __init__(
+        self,
+        ipsec_auth_alg: str = None,
+        ipsec_enc_alg: str = None,
+        ipsec_lifetime: str = None,
+        ipsec_pfs: str = None,
+    ):
+        # The authentication algorithm in the IPsec phase.
+        self.ipsec_auth_alg = ipsec_auth_alg
+        # The encryption algorithm in the IPsec phase.
+        self.ipsec_enc_alg = ipsec_enc_alg
+        # The lifetime in the IPsec phase. Unit: seconds.
+        self.ipsec_lifetime = ipsec_lifetime
+        # The DH group in the IPsec phase.
+        self.ipsec_pfs = ipsec_pfs
+
+    def validate(self):
+        pass
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.ipsec_auth_alg is not None:
+            result['IpsecAuthAlg'] = self.ipsec_auth_alg
+
+        if self.ipsec_enc_alg is not None:
+            result['IpsecEncAlg'] = self.ipsec_enc_alg
+
+        if self.ipsec_lifetime is not None:
+            result['IpsecLifetime'] = self.ipsec_lifetime
+
+        if self.ipsec_pfs is not None:
+            result['IpsecPfs'] = self.ipsec_pfs
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('IpsecAuthAlg') is not None:
+            self.ipsec_auth_alg = m.get('IpsecAuthAlg')
+
+        if m.get('IpsecEncAlg') is not None:
+            self.ipsec_enc_alg = m.get('IpsecEncAlg')
+
+        if m.get('IpsecLifetime') is not None:
+            self.ipsec_lifetime = m.get('IpsecLifetime')
+
+        if m.get('IpsecPfs') is not None:
+            self.ipsec_pfs = m.get('IpsecPfs')
+
+        return self
+
+class DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptionsTunnelIkeConfig(DaraModel):
+    def __init__(
+        self,
+        ike_auth_alg: str = None,
+        ike_enc_alg: str = None,
+        ike_lifetime: str = None,
+        ike_mode: str = None,
+        ike_pfs: str = None,
+        ike_version: str = None,
+        local_id: str = None,
+        psk: str = None,
+        remote_id: str = None,
+    ):
+        # The authentication algorithm in the IKE phase.
+        self.ike_auth_alg = ike_auth_alg
+        # The encryption algorithm in the IKE phase.
+        self.ike_enc_alg = ike_enc_alg
+        # The lifetime in the IKE phase. Unit: seconds.
+        self.ike_lifetime = ike_lifetime
+        # The IKE negotiation mode.
+        # 
+        # *   **main**: This mode offers higher security during negotiations.
+        # *   **aggressive**: This mode is faster and has a higher success rate.
+        self.ike_mode = ike_mode
+        # The Diffie-Hellman (DH) group in the IKE phase.
+        self.ike_pfs = ike_pfs
+        # The version of the IKE protocol.
+        self.ike_version = ike_version
+        # The identifier of the tunnel on the Alibaba Cloud side.
+        self.local_id = local_id
+        # The pre-shared key.
+        self.psk = psk
+        # The identifier of the tunnel peer.
+        self.remote_id = remote_id
+
+    def validate(self):
+        pass
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.ike_auth_alg is not None:
+            result['IkeAuthAlg'] = self.ike_auth_alg
+
+        if self.ike_enc_alg is not None:
+            result['IkeEncAlg'] = self.ike_enc_alg
+
+        if self.ike_lifetime is not None:
+            result['IkeLifetime'] = self.ike_lifetime
+
+        if self.ike_mode is not None:
+            result['IkeMode'] = self.ike_mode
+
+        if self.ike_pfs is not None:
+            result['IkePfs'] = self.ike_pfs
+
+        if self.ike_version is not None:
+            result['IkeVersion'] = self.ike_version
+
+        if self.local_id is not None:
+            result['LocalId'] = self.local_id
+
+        if self.psk is not None:
+            result['Psk'] = self.psk
+
+        if self.remote_id is not None:
+            result['RemoteId'] = self.remote_id
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('IkeAuthAlg') is not None:
+            self.ike_auth_alg = m.get('IkeAuthAlg')
+
+        if m.get('IkeEncAlg') is not None:
+            self.ike_enc_alg = m.get('IkeEncAlg')
+
+        if m.get('IkeLifetime') is not None:
+            self.ike_lifetime = m.get('IkeLifetime')
+
+        if m.get('IkeMode') is not None:
+            self.ike_mode = m.get('IkeMode')
+
+        if m.get('IkePfs') is not None:
+            self.ike_pfs = m.get('IkePfs')
+
+        if m.get('IkeVersion') is not None:
+            self.ike_version = m.get('IkeVersion')
+
+        if m.get('LocalId') is not None:
+            self.local_id = m.get('LocalId')
+
+        if m.get('Psk') is not None:
+            self.psk = m.get('Psk')
+
+        if m.get('RemoteId') is not None:
+            self.remote_id = m.get('RemoteId')
+
+        return self
+
+class DescribeVpnConnectionResponseBodyTunnelOptionsSpecificationTunnelOptionsTunnelBgpConfig(DaraModel):
+    def __init__(
+        self,
+        bgp_status: str = None,
+        local_asn: str = None,
+        local_bgp_ip: str = None,
+        peer_asn: str = None,
+        peer_bgp_ip: str = None,
+        tunnel_cidr: str = None,
+    ):
+        # The negotiation state of BGP. Valid values:
+        # 
+        # *   **success**
+        # *   **false**
+        self.bgp_status = bgp_status
+        # The ASN on the Alibaba Cloud side.
+        self.local_asn = local_asn
+        # The BGP address on the Alibaba Cloud side.
+        self.local_bgp_ip = local_bgp_ip
+        # The ASN of the tunnel peer.
+        self.peer_asn = peer_asn
+        # The BGP IP address of the tunnel peer.
+        self.peer_bgp_ip = peer_bgp_ip
+        # The BGP CIDR block of the tunnel.
+        self.tunnel_cidr = tunnel_cidr
+
+    def validate(self):
+        pass
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.bgp_status is not None:
+            result['BgpStatus'] = self.bgp_status
+
+        if self.local_asn is not None:
+            result['LocalAsn'] = self.local_asn
+
+        if self.local_bgp_ip is not None:
+            result['LocalBgpIp'] = self.local_bgp_ip
+
+        if self.peer_asn is not None:
+            result['PeerAsn'] = self.peer_asn
+
+        if self.peer_bgp_ip is not None:
+            result['PeerBgpIp'] = self.peer_bgp_ip
+
+        if self.tunnel_cidr is not None:
+            result['TunnelCidr'] = self.tunnel_cidr
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('BgpStatus') is not None:
+            self.bgp_status = m.get('BgpStatus')
+
+        if m.get('LocalAsn') is not None:
+            self.local_asn = m.get('LocalAsn')
+
+        if m.get('LocalBgpIp') is not None:
+            self.local_bgp_ip = m.get('LocalBgpIp')
+
+        if m.get('PeerAsn') is not None:
+            self.peer_asn = m.get('PeerAsn')
+
+        if m.get('PeerBgpIp') is not None:
+            self.peer_bgp_ip = m.get('PeerBgpIp')
+
+        if m.get('TunnelCidr') is not None:
+            self.tunnel_cidr = m.get('TunnelCidr')
+
+        return self
+
+class DescribeVpnConnectionResponseBodyTags(DaraModel):
+    def __init__(
+        self,
+        tag: List[main_models.DescribeVpnConnectionResponseBodyTagsTag] = None,
+    ):
+        self.tag = tag
+
+    def validate(self):
+        if self.tag:
+            for v1 in self.tag:
+                 if v1:
+                    v1.validate()
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        result['Tag'] = []
+        if self.tag is not None:
+            for k1 in self.tag:
+                result['Tag'].append(k1.to_map() if k1 else None)
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        self.tag = []
+        if m.get('Tag') is not None:
+            for k1 in m.get('Tag'):
+                temp_model = main_models.DescribeVpnConnectionResponseBodyTagsTag()
+                self.tag.append(temp_model.from_map(k1))
+
+        return self
+
+class DescribeVpnConnectionResponseBodyTagsTag(DaraModel):
+    def __init__(
+        self,
+        key: str = None,
+        value: str = None,
+    ):
+        # The tag key.
+        self.key = key
+        # The tag value.
+        self.value = value
+
+    def validate(self):
+        pass
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.key is not None:
+            result['Key'] = self.key
+
+        if self.value is not None:
+            result['Value'] = self.value
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('Key') is not None:
+            self.key = m.get('Key')
+
+        if m.get('Value') is not None:
+            self.value = m.get('Value')
+
+        return self
+
+class DescribeVpnConnectionResponseBodyIpsecConfig(DaraModel):
+    def __init__(
+        self,
+        ipsec_auth_alg: str = None,
+        ipsec_enc_alg: str = None,
+        ipsec_lifetime: int = None,
+        ipsec_pfs: str = None,
+    ):
+        # The authentication algorithm in the IPsec phase.
+        self.ipsec_auth_alg = ipsec_auth_alg
+        # The encryption algorithm in the IPsec phase.
+        self.ipsec_enc_alg = ipsec_enc_alg
+        # The lifetime in the IPsec phase. Unit: seconds.
+        self.ipsec_lifetime = ipsec_lifetime
+        # The DH group in the IPsec phase.
+        self.ipsec_pfs = ipsec_pfs
+
+    def validate(self):
+        pass
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.ipsec_auth_alg is not None:
+            result['IpsecAuthAlg'] = self.ipsec_auth_alg
+
+        if self.ipsec_enc_alg is not None:
+            result['IpsecEncAlg'] = self.ipsec_enc_alg
+
+        if self.ipsec_lifetime is not None:
+            result['IpsecLifetime'] = self.ipsec_lifetime
+
+        if self.ipsec_pfs is not None:
+            result['IpsecPfs'] = self.ipsec_pfs
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('IpsecAuthAlg') is not None:
+            self.ipsec_auth_alg = m.get('IpsecAuthAlg')
+
+        if m.get('IpsecEncAlg') is not None:
+            self.ipsec_enc_alg = m.get('IpsecEncAlg')
+
+        if m.get('IpsecLifetime') is not None:
+            self.ipsec_lifetime = m.get('IpsecLifetime')
+
+        if m.get('IpsecPfs') is not None:
+            self.ipsec_pfs = m.get('IpsecPfs')
+
+        return self
+
+class DescribeVpnConnectionResponseBodyIkeConfig(DaraModel):
+    def __init__(
+        self,
+        ike_auth_alg: str = None,
+        ike_enc_alg: str = None,
+        ike_lifetime: int = None,
+        ike_mode: str = None,
+        ike_pfs: str = None,
+        ike_version: str = None,
+        local_id: str = None,
+        psk: str = None,
+        remote_id: str = None,
+    ):
+        # The authentication algorithm in the IKE phase.
+        self.ike_auth_alg = ike_auth_alg
+        # The encryption algorithm in the IKE phase.
+        self.ike_enc_alg = ike_enc_alg
+        # The lifetime in the IKE phase. Unit: seconds.
+        self.ike_lifetime = ike_lifetime
+        # The IKE negotiation mode.
+        # 
+        # *   **main**: This mode offers higher security during negotiations.
+        # *   **aggressive**: This mode is faster and has a higher success rate.
+        self.ike_mode = ike_mode
+        # The Diffie-Hellman (DH) group in the IKE phase.
+        self.ike_pfs = ike_pfs
+        # The version of the IKE protocol.
+        # 
+        # *   **ikev1**
+        # *   **ikev2**
+        # 
+        # Compared with IKEv1, IKEv2 simplifies the SA negotiation process and is more suitable for scenarios in which multiple CIDR blocks are used.
+        self.ike_version = ike_version
+        # The identifier of the IPsec-VPN connection on the Alibaba Cloud side.
+        self.local_id = local_id
+        # The pre-shared key.
+        self.psk = psk
+        # The identifier of the IPsec-VPN connection on the data center side.
+        self.remote_id = remote_id
+
+    def validate(self):
+        pass
+
+    def to_map(self):
+        result = dict()
+        _map = super().to_map()
+        if _map is not None:
+            result = _map
+        if self.ike_auth_alg is not None:
+            result['IkeAuthAlg'] = self.ike_auth_alg
+
+        if self.ike_enc_alg is not None:
+            result['IkeEncAlg'] = self.ike_enc_alg
+
+        if self.ike_lifetime is not None:
+            result['IkeLifetime'] = self.ike_lifetime
+
+        if self.ike_mode is not None:
+            result['IkeMode'] = self.ike_mode
+
+        if self.ike_pfs is not None:
+            result['IkePfs'] = self.ike_pfs
+
+        if self.ike_version is not None:
+            result['IkeVersion'] = self.ike_version
+
+        if self.local_id is not None:
+            result['LocalId'] = self.local_id
+
+        if self.psk is not None:
+            result['Psk'] = self.psk
+
+        if self.remote_id is not None:
+            result['RemoteId'] = self.remote_id
+
+        return result
+
+    def from_map(self, m: dict = None):
+        m = m or dict()
+        if m.get('IkeAuthAlg') is not None:
+            self.ike_auth_alg = m.get('IkeAuthAlg')
+
+        if m.get('IkeEncAlg') is not None:
+            self.ike_enc_alg = m.get('IkeEncAlg')
+
+        if m.get('IkeLifetime') is not None:
+            self.ike_lifetime = m.get('IkeLifetime')
+
+        if m.get('IkeMode') is not None:
+            self.ike_mode = m.get('IkeMode')
+
+        if m.get('IkePfs') is not None:
+            self.ike_pfs = m.get('IkePfs')
+
+        if m.get('IkeVersion') is not None:
+            self.ike_version = m.get('IkeVersion')
+
+        if m.get('LocalId') is not None:
+            self.local_id = m.get('LocalId')
+
+        if m.get('Psk') is not None:
+            self.psk = m.get('Psk')
+
+        if m.get('RemoteId') is not None:
+            self.remote_id = m.get('RemoteId')
+
+        return self
+