pulumi-sdwan 0.5.0a1755712533__py3-none-any.whl → 0.5.0a1756506981__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-sdwan might be problematic. Click here for more details.
- pulumi_sdwan/_inputs.py +120 -5
- pulumi_sdwan/advanced_inspection_profile_policy_definition.py +14 -7
- pulumi_sdwan/advanced_malware_protection_policy_definition.py +91 -42
- pulumi_sdwan/cedge_aaa_feature_template.py +147 -77
- pulumi_sdwan/cedge_global_feature_template.py +336 -175
- pulumi_sdwan/cedge_igmp_feature_template.py +14 -21
- pulumi_sdwan/cedge_multicast_feature_template.py +56 -42
- pulumi_sdwan/cedge_pim_feature_template.py +84 -56
- pulumi_sdwan/cellular_cedge_profile_feature_template.py +70 -42
- pulumi_sdwan/cellular_controller_feature_template.py +70 -49
- pulumi_sdwan/cellular_profile_feature_template.py +63 -42
- pulumi_sdwan/cflowd_policy_definition.py +70 -35
- pulumi_sdwan/cisco_banner_feature_template.py +14 -21
- pulumi_sdwan/cisco_bfd_feature_template.py +77 -49
- pulumi_sdwan/cisco_bgp_feature_template.py +231 -112
- pulumi_sdwan/cisco_dhcp_server_feature_template.py +49 -35
- pulumi_sdwan/cisco_logging_feature_template.py +70 -42
- pulumi_sdwan/cisco_ntp_feature_template.py +42 -35
- pulumi_sdwan/cisco_omp_feature_template.py +231 -112
- pulumi_sdwan/cisco_ospf_feature_template.py +231 -105
- pulumi_sdwan/cisco_ospfv3_feature_template.py +518 -217
- pulumi_sdwan/cisco_secure_internet_gateway_feature_template.py +35 -28
- pulumi_sdwan/cisco_security_feature_template.py +91 -56
- pulumi_sdwan/cisco_sig_credentials_feature_template.py +28 -28
- pulumi_sdwan/cisco_snmp_feature_template.py +28 -28
- pulumi_sdwan/cisco_system_feature_template.py +516 -742
- pulumi_sdwan/cisco_thousandeyes_feature_template.py +14 -21
- pulumi_sdwan/cisco_trustsec_feature_template.py +203 -112
- pulumi_sdwan/cisco_vpn_feature_template.py +98 -56
- pulumi_sdwan/cisco_vpn_interface_feature_template.py +1211 -602
- pulumi_sdwan/cisco_vpn_interface_gre_feature_template.py +105 -70
- pulumi_sdwan/cisco_vpn_interface_ipsec_feature_template.py +329 -161
- pulumi_sdwan/cisco_wireless_lan_feature_template.py +98 -98
- pulumi_sdwan/class_map_policy_object.py +14 -7
- pulumi_sdwan/cli_device_template.py +14 -7
- pulumi_sdwan/cli_template_feature_template.py +14 -21
- pulumi_sdwan/configuration_group.py +28 -14
- pulumi_sdwan/custom_control_topology_policy_definition.py +14 -7
- pulumi_sdwan/eigrp_feature_template.py +98 -56
- pulumi_sdwan/feature_device_template.py +14 -7
- pulumi_sdwan/get_cisco_system_feature_template.py +15 -1
- pulumi_sdwan/gps_feature_template.py +77 -49
- pulumi_sdwan/intrusion_prevention_policy_definition.py +56 -28
- pulumi_sdwan/ipv4_acl_policy_definition.py +14 -7
- pulumi_sdwan/ipv4_device_acl_policy_definition.py +14 -7
- pulumi_sdwan/ipv6_acl_policy_definition.py +14 -7
- pulumi_sdwan/ipv6_device_acl_policy_definition.py +14 -7
- pulumi_sdwan/localized_policy.py +82 -26
- pulumi_sdwan/other_ucse_feature.py +98 -56
- pulumi_sdwan/outputs.py +145 -10
- pulumi_sdwan/policer_policy_object.py +42 -21
- pulumi_sdwan/policy_group.py +14 -7
- pulumi_sdwan/policy_object_as_path_list.py +14 -7
- pulumi_sdwan/policy_object_security_geolocation_list.py +7 -7
- pulumi_sdwan/preferred_color_group_policy_object.py +42 -21
- pulumi_sdwan/pulumi-plugin.json +1 -1
- pulumi_sdwan/route_policy_definition.py +14 -7
- pulumi_sdwan/security_app_hosting_feature_template.py +14 -21
- pulumi_sdwan/security_policy.py +98 -49
- pulumi_sdwan/service_dhcp_server_feature.py +49 -49
- pulumi_sdwan/service_ipv4_acl_feature.py +21 -7
- pulumi_sdwan/service_ipv6_acl_feature.py +21 -7
- pulumi_sdwan/service_lan_vpn_feature.py +63 -28
- pulumi_sdwan/service_lan_vpn_interface_ethernet_feature.py +392 -210
- pulumi_sdwan/service_lan_vpn_interface_gre_feature.py +84 -70
- pulumi_sdwan/service_lan_vpn_interface_ipsec_feature.py +329 -245
- pulumi_sdwan/service_lan_vpn_interface_svi_feature.py +147 -91
- pulumi_sdwan/service_multicast_feature.py +91 -42
- pulumi_sdwan/service_object_tracker_feature.py +63 -56
- pulumi_sdwan/service_object_tracker_group_feature.py +35 -14
- pulumi_sdwan/service_route_policy_feature.py +21 -7
- pulumi_sdwan/service_routing_bgp_feature.py +287 -133
- pulumi_sdwan/service_routing_eigrp_feature.py +84 -35
- pulumi_sdwan/service_routing_ospf_feature.py +217 -84
- pulumi_sdwan/service_routing_ospfv3_ipv4_feature.py +238 -91
- pulumi_sdwan/service_routing_ospfv3_ipv6_feature.py +238 -91
- pulumi_sdwan/service_switchport_feature.py +21 -7
- pulumi_sdwan/service_tracker_feature.py +105 -35
- pulumi_sdwan/service_tracker_group_feature.py +21 -7
- pulumi_sdwan/service_wireless_lan_feature.py +63 -126
- pulumi_sdwan/sla_class_policy_object.py +91 -63
- pulumi_sdwan/switchport_feature_template.py +91 -49
- pulumi_sdwan/system_aaa_feature.py +56 -28
- pulumi_sdwan/system_basic_feature.py +392 -693
- pulumi_sdwan/system_bfd_feature.py +42 -21
- pulumi_sdwan/system_flexible_port_speed_feature.py +21 -21
- pulumi_sdwan/system_global_feature.py +322 -154
- pulumi_sdwan/system_ipv4_device_access_feature.py +21 -7
- pulumi_sdwan/system_ipv6_device_access_feature.py +21 -7
- pulumi_sdwan/system_logging_feature.py +56 -21
- pulumi_sdwan/system_mrf_feature.py +70 -35
- pulumi_sdwan/system_ntp_feature.py +28 -14
- pulumi_sdwan/system_omp_feature.py +441 -196
- pulumi_sdwan/system_performance_monitoring_feature.py +56 -28
- pulumi_sdwan/system_remote_access_feature.py +203 -133
- pulumi_sdwan/system_security_feature.py +77 -35
- pulumi_sdwan/system_snmp_feature.py +14 -7
- pulumi_sdwan/tls_ssl_decryption_policy_definition.py +168 -84
- pulumi_sdwan/tls_ssl_profile_policy_definition.py +28 -14
- pulumi_sdwan/traffic_data_policy_definition.py +14 -7
- pulumi_sdwan/transport_cellular_controller_feature.py +56 -28
- pulumi_sdwan/transport_cellular_profile_feature.py +63 -35
- pulumi_sdwan/transport_gps_feature.py +63 -28
- pulumi_sdwan/transport_ipv4_acl_feature.py +21 -7
- pulumi_sdwan/transport_ipv6_acl_feature.py +21 -7
- pulumi_sdwan/transport_ipv6_tracker_feature.py +105 -35
- pulumi_sdwan/transport_ipv6_tracker_group_feature.py +21 -7
- pulumi_sdwan/transport_management_vpn_interface_ethernet_feature.py +259 -154
- pulumi_sdwan/transport_route_policy_feature.py +21 -7
- pulumi_sdwan/transport_routing_bgp_feature.py +287 -133
- pulumi_sdwan/transport_routing_ospf_feature.py +217 -84
- pulumi_sdwan/transport_routing_ospfv3_ipv4_feature.py +238 -91
- pulumi_sdwan/transport_routing_ospfv3_ipv6_feature.py +238 -91
- pulumi_sdwan/transport_t1_e1_controller_feature.py +14 -7
- pulumi_sdwan/transport_tracker_feature.py +105 -35
- pulumi_sdwan/transport_tracker_group_feature.py +21 -7
- pulumi_sdwan/transport_wan_vpn_feature.py +28 -14
- pulumi_sdwan/transport_wan_vpn_interface_cellular_feature.py +840 -413
- pulumi_sdwan/transport_wan_vpn_interface_ethernet_feature.py +1162 -735
- pulumi_sdwan/transport_wan_vpn_interface_gre_feature.py +84 -70
- pulumi_sdwan/transport_wan_vpn_interface_ipsec_feature.py +329 -245
- pulumi_sdwan/transport_wan_vpn_interface_t1_e1_serial_feature.py +665 -371
- pulumi_sdwan/url_filtering_policy_definition.py +56 -35
- pulumi_sdwan/vpn_interface_cellular_feature_template.py +931 -455
- pulumi_sdwan/vpn_interface_dsl_ipoe_feature_template.py +959 -469
- pulumi_sdwan/vpn_interface_dsl_pppoa_feature_template.py +924 -448
- pulumi_sdwan/vpn_interface_dsl_pppoe_feature_template.py +980 -476
- pulumi_sdwan/vpn_interface_ethernet_pppoe_feature_template.py +980 -476
- pulumi_sdwan/vpn_interface_multilink_feature_template.py +812 -406
- pulumi_sdwan/vpn_interface_svi_feature_template.py +168 -84
- pulumi_sdwan/vpn_interface_t1_e1_serial_feature_template.py +721 -378
- pulumi_sdwan/zone_based_firewall_policy_definition.py +28 -14
- {pulumi_sdwan-0.5.0a1755712533.dist-info → pulumi_sdwan-0.5.0a1756506981.dist-info}/METADATA +1 -1
- {pulumi_sdwan-0.5.0a1755712533.dist-info → pulumi_sdwan-0.5.0a1756506981.dist-info}/RECORD +136 -136
- {pulumi_sdwan-0.5.0a1755712533.dist-info → pulumi_sdwan-0.5.0a1756506981.dist-info}/WHEEL +0 -0
- {pulumi_sdwan-0.5.0a1755712533.dist-info → pulumi_sdwan-0.5.0a1756506981.dist-info}/top_level.txt +0 -0
|
@@ -78,23 +78,34 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
78
78
|
"""
|
|
79
79
|
The set of arguments for constructing a CiscoVpnInterfaceIpsecFeatureTemplate resource.
|
|
80
80
|
:param pulumi.Input[_builtins.str] description: The description of the feature template
|
|
81
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] device_types: List of supported device types
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
81
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] device_types: List of supported device types
|
|
82
|
+
- Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
83
|
+
:param pulumi.Input[_builtins.str] application: Enable Application Tunnel Type
|
|
84
|
+
- Choices: `none`, `sig`
|
|
85
|
+
- Default value: `none`
|
|
85
86
|
:param pulumi.Input[_builtins.str] application_variable: Variable name
|
|
86
|
-
:param pulumi.Input[_builtins.bool] clear_dont_fragment: Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
87
|
+
:param pulumi.Input[_builtins.bool] clear_dont_fragment: Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
88
|
+
- Default value: `false`
|
|
87
89
|
:param pulumi.Input[_builtins.str] clear_dont_fragment_variable: Variable name
|
|
88
|
-
:param pulumi.Input[_builtins.int] dead_peer_detection_interval: IKE keepalive interval (seconds)
|
|
90
|
+
:param pulumi.Input[_builtins.int] dead_peer_detection_interval: IKE keepalive interval (seconds)
|
|
91
|
+
- Range: `10`-`3600`
|
|
92
|
+
- Default value: `10`
|
|
89
93
|
:param pulumi.Input[_builtins.str] dead_peer_detection_interval_variable: Variable name
|
|
90
|
-
:param pulumi.Input[_builtins.int] dead_peer_detection_retries: IKE keepalive retries
|
|
94
|
+
:param pulumi.Input[_builtins.int] dead_peer_detection_retries: IKE keepalive retries
|
|
95
|
+
- Range: `2`-`60`
|
|
96
|
+
- Default value: `3`
|
|
91
97
|
:param pulumi.Input[_builtins.str] dead_peer_detection_retries_variable: Variable name
|
|
92
|
-
:param pulumi.Input[_builtins.str] ike_ciphersuite: IKE identity the IKE preshared secret belongs to
|
|
93
|
-
|
|
98
|
+
:param pulumi.Input[_builtins.str] ike_ciphersuite: IKE identity the IKE preshared secret belongs to
|
|
99
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha2`, `aes128-cbc-sha1`, `aes128-cbc-sha2`
|
|
100
|
+
- Default value: `aes256-cbc-sha1`
|
|
94
101
|
:param pulumi.Input[_builtins.str] ike_ciphersuite_variable: Variable name
|
|
95
|
-
:param pulumi.Input[_builtins.str] ike_group: IKE Diffie Hellman Groups
|
|
102
|
+
:param pulumi.Input[_builtins.str] ike_group: IKE Diffie Hellman Groups
|
|
103
|
+
- Choices: `2`, `14`, `15`, `16`, `19`, `20`, `21`, `24`
|
|
104
|
+
- Default value: `16`
|
|
96
105
|
:param pulumi.Input[_builtins.str] ike_group_variable: Variable name
|
|
97
|
-
:param pulumi.Input[_builtins.str] ike_mode: IKE integrity protocol
|
|
106
|
+
:param pulumi.Input[_builtins.str] ike_mode: IKE integrity protocol
|
|
107
|
+
- Choices: `main`, `aggressive`
|
|
108
|
+
- Default value: `main`
|
|
98
109
|
:param pulumi.Input[_builtins.str] ike_mode_variable: Variable name
|
|
99
110
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key: Use preshared key to authenticate IKE peer
|
|
100
111
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_local_id: IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
|
|
@@ -102,32 +113,45 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
102
113
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_remote_id: IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
|
|
103
114
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_remote_id_variable: Variable name
|
|
104
115
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_variable: Variable name
|
|
105
|
-
:param pulumi.Input[_builtins.int] ike_rekey_interval: IKE rekey interval <60..86400> seconds
|
|
116
|
+
:param pulumi.Input[_builtins.int] ike_rekey_interval: IKE rekey interval <60..86400> seconds
|
|
117
|
+
- Range: `60`-`86400`
|
|
118
|
+
- Default value: `14400`
|
|
106
119
|
:param pulumi.Input[_builtins.str] ike_rekey_interval_variable: Variable name
|
|
107
|
-
:param pulumi.Input[_builtins.int] ike_version: IKE Version <1..2>
|
|
120
|
+
:param pulumi.Input[_builtins.int] ike_version: IKE Version <1..2>
|
|
121
|
+
- Range: `1`-`2`
|
|
122
|
+
- Default value: `1`
|
|
108
123
|
:param pulumi.Input[_builtins.str] interface_description: Interface description
|
|
109
124
|
:param pulumi.Input[_builtins.str] interface_description_variable: Variable name
|
|
110
125
|
:param pulumi.Input[_builtins.str] interface_name: Interface name: IPsec when present
|
|
111
126
|
:param pulumi.Input[_builtins.str] interface_name_variable: Variable name
|
|
112
127
|
:param pulumi.Input[_builtins.str] ip_address: Assign IPv4 address
|
|
113
128
|
:param pulumi.Input[_builtins.str] ip_address_variable: Variable name
|
|
114
|
-
:param pulumi.Input[_builtins.str] ipsec_ciphersuite: IPsec(ESP) encryption and integrity protocol
|
|
115
|
-
|
|
116
|
-
|
|
129
|
+
:param pulumi.Input[_builtins.str] ipsec_ciphersuite: IPsec(ESP) encryption and integrity protocol
|
|
130
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha384`, `aes256-cbc-sha256`, `aes256-cbc-sha512`, `aes256-gcm`, `null-sha1`, `null-sha384`, `null-sha256`, `null-sha512`
|
|
131
|
+
- Default value: `aes256-gcm`
|
|
117
132
|
:param pulumi.Input[_builtins.str] ipsec_ciphersuite_variable: Variable name
|
|
118
|
-
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy: IPsec perfect forward secrecy settings
|
|
119
|
-
|
|
133
|
+
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy: IPsec perfect forward secrecy settings
|
|
134
|
+
- Choices: `group-1`, `group-2`, `group-5`, `group-14`, `group-15`, `group-16`, `group-19`, `group-20`, `group-21`, `group-24`, `none`
|
|
135
|
+
- Default value: `group-16`
|
|
120
136
|
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy_variable: Variable name
|
|
121
|
-
:param pulumi.Input[_builtins.int] ipsec_rekey_interval: IPsec rekey interval <300..1209600> seconds
|
|
137
|
+
:param pulumi.Input[_builtins.int] ipsec_rekey_interval: IPsec rekey interval <300..1209600> seconds
|
|
138
|
+
- Range: `120`-`2592000`
|
|
139
|
+
- Default value: `3600`
|
|
122
140
|
:param pulumi.Input[_builtins.str] ipsec_rekey_interval_variable: Variable name
|
|
123
|
-
:param pulumi.Input[_builtins.int] ipsec_replay_window: Replay window size 32..8192 (must be a power of 2)
|
|
141
|
+
:param pulumi.Input[_builtins.int] ipsec_replay_window: Replay window size 32..8192 (must be a power of 2)
|
|
142
|
+
- Range: `64`-`4096`
|
|
143
|
+
- Default value: `512`
|
|
124
144
|
:param pulumi.Input[_builtins.str] ipsec_replay_window_variable: Variable name
|
|
125
|
-
:param pulumi.Input[_builtins.int] mtu: Interface MTU <68..9216>, in bytes
|
|
145
|
+
:param pulumi.Input[_builtins.int] mtu: Interface MTU <68..9216>, in bytes
|
|
146
|
+
- Range: `68`-`9216`
|
|
147
|
+
- Default value: `1500`
|
|
126
148
|
:param pulumi.Input[_builtins.str] mtu_variable: Variable name
|
|
127
149
|
:param pulumi.Input[_builtins.str] name: The name of the feature template
|
|
128
|
-
:param pulumi.Input[_builtins.bool] shutdown: Administrative state
|
|
150
|
+
:param pulumi.Input[_builtins.bool] shutdown: Administrative state
|
|
151
|
+
- Default value: `true`
|
|
129
152
|
:param pulumi.Input[_builtins.str] shutdown_variable: Variable name
|
|
130
|
-
:param pulumi.Input[_builtins.int] tcp_mss_adjust: TCP MSS on SYN packets, in bytes
|
|
153
|
+
:param pulumi.Input[_builtins.int] tcp_mss_adjust: TCP MSS on SYN packets, in bytes
|
|
154
|
+
- Range: `500`-`1460`
|
|
131
155
|
:param pulumi.Input[_builtins.str] tcp_mss_adjust_variable: Variable name
|
|
132
156
|
:param pulumi.Input[_builtins.str] tracker_variable: Variable name
|
|
133
157
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] trackers: Enable tracker for this interface
|
|
@@ -267,9 +291,8 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
267
291
|
@pulumi.getter(name="deviceTypes")
|
|
268
292
|
def device_types(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]:
|
|
269
293
|
"""
|
|
270
|
-
List of supported device types
|
|
271
|
-
|
|
272
|
-
`vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
294
|
+
List of supported device types
|
|
295
|
+
- Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
273
296
|
"""
|
|
274
297
|
return pulumi.get(self, "device_types")
|
|
275
298
|
|
|
@@ -281,7 +304,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
281
304
|
@pulumi.getter
|
|
282
305
|
def application(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
283
306
|
"""
|
|
284
|
-
Enable Application Tunnel Type
|
|
307
|
+
Enable Application Tunnel Type
|
|
308
|
+
- Choices: `none`, `sig`
|
|
309
|
+
- Default value: `none`
|
|
285
310
|
"""
|
|
286
311
|
return pulumi.get(self, "application")
|
|
287
312
|
|
|
@@ -305,7 +330,8 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
305
330
|
@pulumi.getter(name="clearDontFragment")
|
|
306
331
|
def clear_dont_fragment(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
307
332
|
"""
|
|
308
|
-
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
333
|
+
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
334
|
+
- Default value: `false`
|
|
309
335
|
"""
|
|
310
336
|
return pulumi.get(self, "clear_dont_fragment")
|
|
311
337
|
|
|
@@ -329,7 +355,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
329
355
|
@pulumi.getter(name="deadPeerDetectionInterval")
|
|
330
356
|
def dead_peer_detection_interval(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
331
357
|
"""
|
|
332
|
-
IKE keepalive interval (seconds)
|
|
358
|
+
IKE keepalive interval (seconds)
|
|
359
|
+
- Range: `10`-`3600`
|
|
360
|
+
- Default value: `10`
|
|
333
361
|
"""
|
|
334
362
|
return pulumi.get(self, "dead_peer_detection_interval")
|
|
335
363
|
|
|
@@ -353,7 +381,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
353
381
|
@pulumi.getter(name="deadPeerDetectionRetries")
|
|
354
382
|
def dead_peer_detection_retries(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
355
383
|
"""
|
|
356
|
-
IKE keepalive retries
|
|
384
|
+
IKE keepalive retries
|
|
385
|
+
- Range: `2`-`60`
|
|
386
|
+
- Default value: `3`
|
|
357
387
|
"""
|
|
358
388
|
return pulumi.get(self, "dead_peer_detection_retries")
|
|
359
389
|
|
|
@@ -377,8 +407,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
377
407
|
@pulumi.getter(name="ikeCiphersuite")
|
|
378
408
|
def ike_ciphersuite(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
379
409
|
"""
|
|
380
|
-
IKE identity the IKE preshared secret belongs to
|
|
381
|
-
|
|
410
|
+
IKE identity the IKE preshared secret belongs to
|
|
411
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha2`, `aes128-cbc-sha1`, `aes128-cbc-sha2`
|
|
412
|
+
- Default value: `aes256-cbc-sha1`
|
|
382
413
|
"""
|
|
383
414
|
return pulumi.get(self, "ike_ciphersuite")
|
|
384
415
|
|
|
@@ -402,7 +433,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
402
433
|
@pulumi.getter(name="ikeGroup")
|
|
403
434
|
def ike_group(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
404
435
|
"""
|
|
405
|
-
IKE Diffie Hellman Groups
|
|
436
|
+
IKE Diffie Hellman Groups
|
|
437
|
+
- Choices: `2`, `14`, `15`, `16`, `19`, `20`, `21`, `24`
|
|
438
|
+
- Default value: `16`
|
|
406
439
|
"""
|
|
407
440
|
return pulumi.get(self, "ike_group")
|
|
408
441
|
|
|
@@ -426,7 +459,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
426
459
|
@pulumi.getter(name="ikeMode")
|
|
427
460
|
def ike_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
428
461
|
"""
|
|
429
|
-
IKE integrity protocol
|
|
462
|
+
IKE integrity protocol
|
|
463
|
+
- Choices: `main`, `aggressive`
|
|
464
|
+
- Default value: `main`
|
|
430
465
|
"""
|
|
431
466
|
return pulumi.get(self, "ike_mode")
|
|
432
467
|
|
|
@@ -522,7 +557,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
522
557
|
@pulumi.getter(name="ikeRekeyInterval")
|
|
523
558
|
def ike_rekey_interval(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
524
559
|
"""
|
|
525
|
-
IKE rekey interval <60..86400> seconds
|
|
560
|
+
IKE rekey interval <60..86400> seconds
|
|
561
|
+
- Range: `60`-`86400`
|
|
562
|
+
- Default value: `14400`
|
|
526
563
|
"""
|
|
527
564
|
return pulumi.get(self, "ike_rekey_interval")
|
|
528
565
|
|
|
@@ -546,7 +583,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
546
583
|
@pulumi.getter(name="ikeVersion")
|
|
547
584
|
def ike_version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
548
585
|
"""
|
|
549
|
-
IKE Version <1..2>
|
|
586
|
+
IKE Version <1..2>
|
|
587
|
+
- Range: `1`-`2`
|
|
588
|
+
- Default value: `1`
|
|
550
589
|
"""
|
|
551
590
|
return pulumi.get(self, "ike_version")
|
|
552
591
|
|
|
@@ -630,9 +669,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
630
669
|
@pulumi.getter(name="ipsecCiphersuite")
|
|
631
670
|
def ipsec_ciphersuite(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
632
671
|
"""
|
|
633
|
-
IPsec(ESP) encryption and integrity protocol
|
|
634
|
-
|
|
635
|
-
|
|
672
|
+
IPsec(ESP) encryption and integrity protocol
|
|
673
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha384`, `aes256-cbc-sha256`, `aes256-cbc-sha512`, `aes256-gcm`, `null-sha1`, `null-sha384`, `null-sha256`, `null-sha512`
|
|
674
|
+
- Default value: `aes256-gcm`
|
|
636
675
|
"""
|
|
637
676
|
return pulumi.get(self, "ipsec_ciphersuite")
|
|
638
677
|
|
|
@@ -656,8 +695,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
656
695
|
@pulumi.getter(name="ipsecPerfectForwardSecrecy")
|
|
657
696
|
def ipsec_perfect_forward_secrecy(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
658
697
|
"""
|
|
659
|
-
IPsec perfect forward secrecy settings
|
|
660
|
-
|
|
698
|
+
IPsec perfect forward secrecy settings
|
|
699
|
+
- Choices: `group-1`, `group-2`, `group-5`, `group-14`, `group-15`, `group-16`, `group-19`, `group-20`, `group-21`, `group-24`, `none`
|
|
700
|
+
- Default value: `group-16`
|
|
661
701
|
"""
|
|
662
702
|
return pulumi.get(self, "ipsec_perfect_forward_secrecy")
|
|
663
703
|
|
|
@@ -681,7 +721,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
681
721
|
@pulumi.getter(name="ipsecRekeyInterval")
|
|
682
722
|
def ipsec_rekey_interval(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
683
723
|
"""
|
|
684
|
-
IPsec rekey interval <300..1209600> seconds
|
|
724
|
+
IPsec rekey interval <300..1209600> seconds
|
|
725
|
+
- Range: `120`-`2592000`
|
|
726
|
+
- Default value: `3600`
|
|
685
727
|
"""
|
|
686
728
|
return pulumi.get(self, "ipsec_rekey_interval")
|
|
687
729
|
|
|
@@ -705,7 +747,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
705
747
|
@pulumi.getter(name="ipsecReplayWindow")
|
|
706
748
|
def ipsec_replay_window(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
707
749
|
"""
|
|
708
|
-
Replay window size 32..8192 (must be a power of 2)
|
|
750
|
+
Replay window size 32..8192 (must be a power of 2)
|
|
751
|
+
- Range: `64`-`4096`
|
|
752
|
+
- Default value: `512`
|
|
709
753
|
"""
|
|
710
754
|
return pulumi.get(self, "ipsec_replay_window")
|
|
711
755
|
|
|
@@ -729,7 +773,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
729
773
|
@pulumi.getter
|
|
730
774
|
def mtu(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
731
775
|
"""
|
|
732
|
-
Interface MTU <68..9216>, in bytes
|
|
776
|
+
Interface MTU <68..9216>, in bytes
|
|
777
|
+
- Range: `68`-`9216`
|
|
778
|
+
- Default value: `1500`
|
|
733
779
|
"""
|
|
734
780
|
return pulumi.get(self, "mtu")
|
|
735
781
|
|
|
@@ -765,7 +811,8 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
765
811
|
@pulumi.getter
|
|
766
812
|
def shutdown(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
767
813
|
"""
|
|
768
|
-
Administrative state
|
|
814
|
+
Administrative state
|
|
815
|
+
- Default value: `true`
|
|
769
816
|
"""
|
|
770
817
|
return pulumi.get(self, "shutdown")
|
|
771
818
|
|
|
@@ -789,7 +836,8 @@ class CiscoVpnInterfaceIpsecFeatureTemplateArgs:
|
|
|
789
836
|
@pulumi.getter(name="tcpMssAdjust")
|
|
790
837
|
def tcp_mss_adjust(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
791
838
|
"""
|
|
792
|
-
TCP MSS on SYN packets, in bytes
|
|
839
|
+
TCP MSS on SYN packets, in bytes
|
|
840
|
+
- Range: `500`-`1460`
|
|
793
841
|
"""
|
|
794
842
|
return pulumi.get(self, "tcp_mss_adjust")
|
|
795
843
|
|
|
@@ -993,24 +1041,35 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
993
1041
|
version: Optional[pulumi.Input[_builtins.int]] = None):
|
|
994
1042
|
"""
|
|
995
1043
|
Input properties used for looking up and filtering CiscoVpnInterfaceIpsecFeatureTemplate resources.
|
|
996
|
-
:param pulumi.Input[_builtins.str] application: Enable Application Tunnel Type
|
|
1044
|
+
:param pulumi.Input[_builtins.str] application: Enable Application Tunnel Type
|
|
1045
|
+
- Choices: `none`, `sig`
|
|
1046
|
+
- Default value: `none`
|
|
997
1047
|
:param pulumi.Input[_builtins.str] application_variable: Variable name
|
|
998
|
-
:param pulumi.Input[_builtins.bool] clear_dont_fragment: Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
1048
|
+
:param pulumi.Input[_builtins.bool] clear_dont_fragment: Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
1049
|
+
- Default value: `false`
|
|
999
1050
|
:param pulumi.Input[_builtins.str] clear_dont_fragment_variable: Variable name
|
|
1000
|
-
:param pulumi.Input[_builtins.int] dead_peer_detection_interval: IKE keepalive interval (seconds)
|
|
1051
|
+
:param pulumi.Input[_builtins.int] dead_peer_detection_interval: IKE keepalive interval (seconds)
|
|
1052
|
+
- Range: `10`-`3600`
|
|
1053
|
+
- Default value: `10`
|
|
1001
1054
|
:param pulumi.Input[_builtins.str] dead_peer_detection_interval_variable: Variable name
|
|
1002
|
-
:param pulumi.Input[_builtins.int] dead_peer_detection_retries: IKE keepalive retries
|
|
1055
|
+
:param pulumi.Input[_builtins.int] dead_peer_detection_retries: IKE keepalive retries
|
|
1056
|
+
- Range: `2`-`60`
|
|
1057
|
+
- Default value: `3`
|
|
1003
1058
|
:param pulumi.Input[_builtins.str] dead_peer_detection_retries_variable: Variable name
|
|
1004
1059
|
:param pulumi.Input[_builtins.str] description: The description of the feature template
|
|
1005
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] device_types: List of supported device types
|
|
1006
|
-
|
|
1007
|
-
|
|
1008
|
-
|
|
1009
|
-
|
|
1060
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] device_types: List of supported device types
|
|
1061
|
+
- Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
1062
|
+
:param pulumi.Input[_builtins.str] ike_ciphersuite: IKE identity the IKE preshared secret belongs to
|
|
1063
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha2`, `aes128-cbc-sha1`, `aes128-cbc-sha2`
|
|
1064
|
+
- Default value: `aes256-cbc-sha1`
|
|
1010
1065
|
:param pulumi.Input[_builtins.str] ike_ciphersuite_variable: Variable name
|
|
1011
|
-
:param pulumi.Input[_builtins.str] ike_group: IKE Diffie Hellman Groups
|
|
1066
|
+
:param pulumi.Input[_builtins.str] ike_group: IKE Diffie Hellman Groups
|
|
1067
|
+
- Choices: `2`, `14`, `15`, `16`, `19`, `20`, `21`, `24`
|
|
1068
|
+
- Default value: `16`
|
|
1012
1069
|
:param pulumi.Input[_builtins.str] ike_group_variable: Variable name
|
|
1013
|
-
:param pulumi.Input[_builtins.str] ike_mode: IKE integrity protocol
|
|
1070
|
+
:param pulumi.Input[_builtins.str] ike_mode: IKE integrity protocol
|
|
1071
|
+
- Choices: `main`, `aggressive`
|
|
1072
|
+
- Default value: `main`
|
|
1014
1073
|
:param pulumi.Input[_builtins.str] ike_mode_variable: Variable name
|
|
1015
1074
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key: Use preshared key to authenticate IKE peer
|
|
1016
1075
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_local_id: IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
|
|
@@ -1018,32 +1077,45 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1018
1077
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_remote_id: IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
|
|
1019
1078
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_remote_id_variable: Variable name
|
|
1020
1079
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_variable: Variable name
|
|
1021
|
-
:param pulumi.Input[_builtins.int] ike_rekey_interval: IKE rekey interval <60..86400> seconds
|
|
1080
|
+
:param pulumi.Input[_builtins.int] ike_rekey_interval: IKE rekey interval <60..86400> seconds
|
|
1081
|
+
- Range: `60`-`86400`
|
|
1082
|
+
- Default value: `14400`
|
|
1022
1083
|
:param pulumi.Input[_builtins.str] ike_rekey_interval_variable: Variable name
|
|
1023
|
-
:param pulumi.Input[_builtins.int] ike_version: IKE Version <1..2>
|
|
1084
|
+
:param pulumi.Input[_builtins.int] ike_version: IKE Version <1..2>
|
|
1085
|
+
- Range: `1`-`2`
|
|
1086
|
+
- Default value: `1`
|
|
1024
1087
|
:param pulumi.Input[_builtins.str] interface_description: Interface description
|
|
1025
1088
|
:param pulumi.Input[_builtins.str] interface_description_variable: Variable name
|
|
1026
1089
|
:param pulumi.Input[_builtins.str] interface_name: Interface name: IPsec when present
|
|
1027
1090
|
:param pulumi.Input[_builtins.str] interface_name_variable: Variable name
|
|
1028
1091
|
:param pulumi.Input[_builtins.str] ip_address: Assign IPv4 address
|
|
1029
1092
|
:param pulumi.Input[_builtins.str] ip_address_variable: Variable name
|
|
1030
|
-
:param pulumi.Input[_builtins.str] ipsec_ciphersuite: IPsec(ESP) encryption and integrity protocol
|
|
1031
|
-
|
|
1032
|
-
|
|
1093
|
+
:param pulumi.Input[_builtins.str] ipsec_ciphersuite: IPsec(ESP) encryption and integrity protocol
|
|
1094
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha384`, `aes256-cbc-sha256`, `aes256-cbc-sha512`, `aes256-gcm`, `null-sha1`, `null-sha384`, `null-sha256`, `null-sha512`
|
|
1095
|
+
- Default value: `aes256-gcm`
|
|
1033
1096
|
:param pulumi.Input[_builtins.str] ipsec_ciphersuite_variable: Variable name
|
|
1034
|
-
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy: IPsec perfect forward secrecy settings
|
|
1035
|
-
|
|
1097
|
+
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy: IPsec perfect forward secrecy settings
|
|
1098
|
+
- Choices: `group-1`, `group-2`, `group-5`, `group-14`, `group-15`, `group-16`, `group-19`, `group-20`, `group-21`, `group-24`, `none`
|
|
1099
|
+
- Default value: `group-16`
|
|
1036
1100
|
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy_variable: Variable name
|
|
1037
|
-
:param pulumi.Input[_builtins.int] ipsec_rekey_interval: IPsec rekey interval <300..1209600> seconds
|
|
1101
|
+
:param pulumi.Input[_builtins.int] ipsec_rekey_interval: IPsec rekey interval <300..1209600> seconds
|
|
1102
|
+
- Range: `120`-`2592000`
|
|
1103
|
+
- Default value: `3600`
|
|
1038
1104
|
:param pulumi.Input[_builtins.str] ipsec_rekey_interval_variable: Variable name
|
|
1039
|
-
:param pulumi.Input[_builtins.int] ipsec_replay_window: Replay window size 32..8192 (must be a power of 2)
|
|
1105
|
+
:param pulumi.Input[_builtins.int] ipsec_replay_window: Replay window size 32..8192 (must be a power of 2)
|
|
1106
|
+
- Range: `64`-`4096`
|
|
1107
|
+
- Default value: `512`
|
|
1040
1108
|
:param pulumi.Input[_builtins.str] ipsec_replay_window_variable: Variable name
|
|
1041
|
-
:param pulumi.Input[_builtins.int] mtu: Interface MTU <68..9216>, in bytes
|
|
1109
|
+
:param pulumi.Input[_builtins.int] mtu: Interface MTU <68..9216>, in bytes
|
|
1110
|
+
- Range: `68`-`9216`
|
|
1111
|
+
- Default value: `1500`
|
|
1042
1112
|
:param pulumi.Input[_builtins.str] mtu_variable: Variable name
|
|
1043
1113
|
:param pulumi.Input[_builtins.str] name: The name of the feature template
|
|
1044
|
-
:param pulumi.Input[_builtins.bool] shutdown: Administrative state
|
|
1114
|
+
:param pulumi.Input[_builtins.bool] shutdown: Administrative state
|
|
1115
|
+
- Default value: `true`
|
|
1045
1116
|
:param pulumi.Input[_builtins.str] shutdown_variable: Variable name
|
|
1046
|
-
:param pulumi.Input[_builtins.int] tcp_mss_adjust: TCP MSS on SYN packets, in bytes
|
|
1117
|
+
:param pulumi.Input[_builtins.int] tcp_mss_adjust: TCP MSS on SYN packets, in bytes
|
|
1118
|
+
- Range: `500`-`1460`
|
|
1047
1119
|
:param pulumi.Input[_builtins.str] tcp_mss_adjust_variable: Variable name
|
|
1048
1120
|
:param pulumi.Input[_builtins.str] template_type: The template type
|
|
1049
1121
|
:param pulumi.Input[_builtins.str] tracker_variable: Variable name
|
|
@@ -1179,7 +1251,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1179
1251
|
@pulumi.getter
|
|
1180
1252
|
def application(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1181
1253
|
"""
|
|
1182
|
-
Enable Application Tunnel Type
|
|
1254
|
+
Enable Application Tunnel Type
|
|
1255
|
+
- Choices: `none`, `sig`
|
|
1256
|
+
- Default value: `none`
|
|
1183
1257
|
"""
|
|
1184
1258
|
return pulumi.get(self, "application")
|
|
1185
1259
|
|
|
@@ -1203,7 +1277,8 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1203
1277
|
@pulumi.getter(name="clearDontFragment")
|
|
1204
1278
|
def clear_dont_fragment(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1205
1279
|
"""
|
|
1206
|
-
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
1280
|
+
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
1281
|
+
- Default value: `false`
|
|
1207
1282
|
"""
|
|
1208
1283
|
return pulumi.get(self, "clear_dont_fragment")
|
|
1209
1284
|
|
|
@@ -1227,7 +1302,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1227
1302
|
@pulumi.getter(name="deadPeerDetectionInterval")
|
|
1228
1303
|
def dead_peer_detection_interval(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1229
1304
|
"""
|
|
1230
|
-
IKE keepalive interval (seconds)
|
|
1305
|
+
IKE keepalive interval (seconds)
|
|
1306
|
+
- Range: `10`-`3600`
|
|
1307
|
+
- Default value: `10`
|
|
1231
1308
|
"""
|
|
1232
1309
|
return pulumi.get(self, "dead_peer_detection_interval")
|
|
1233
1310
|
|
|
@@ -1251,7 +1328,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1251
1328
|
@pulumi.getter(name="deadPeerDetectionRetries")
|
|
1252
1329
|
def dead_peer_detection_retries(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1253
1330
|
"""
|
|
1254
|
-
IKE keepalive retries
|
|
1331
|
+
IKE keepalive retries
|
|
1332
|
+
- Range: `2`-`60`
|
|
1333
|
+
- Default value: `3`
|
|
1255
1334
|
"""
|
|
1256
1335
|
return pulumi.get(self, "dead_peer_detection_retries")
|
|
1257
1336
|
|
|
@@ -1287,9 +1366,8 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1287
1366
|
@pulumi.getter(name="deviceTypes")
|
|
1288
1367
|
def device_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1289
1368
|
"""
|
|
1290
|
-
List of supported device types
|
|
1291
|
-
|
|
1292
|
-
`vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
1369
|
+
List of supported device types
|
|
1370
|
+
- Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
1293
1371
|
"""
|
|
1294
1372
|
return pulumi.get(self, "device_types")
|
|
1295
1373
|
|
|
@@ -1301,8 +1379,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1301
1379
|
@pulumi.getter(name="ikeCiphersuite")
|
|
1302
1380
|
def ike_ciphersuite(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1303
1381
|
"""
|
|
1304
|
-
IKE identity the IKE preshared secret belongs to
|
|
1305
|
-
|
|
1382
|
+
IKE identity the IKE preshared secret belongs to
|
|
1383
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha2`, `aes128-cbc-sha1`, `aes128-cbc-sha2`
|
|
1384
|
+
- Default value: `aes256-cbc-sha1`
|
|
1306
1385
|
"""
|
|
1307
1386
|
return pulumi.get(self, "ike_ciphersuite")
|
|
1308
1387
|
|
|
@@ -1326,7 +1405,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1326
1405
|
@pulumi.getter(name="ikeGroup")
|
|
1327
1406
|
def ike_group(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1328
1407
|
"""
|
|
1329
|
-
IKE Diffie Hellman Groups
|
|
1408
|
+
IKE Diffie Hellman Groups
|
|
1409
|
+
- Choices: `2`, `14`, `15`, `16`, `19`, `20`, `21`, `24`
|
|
1410
|
+
- Default value: `16`
|
|
1330
1411
|
"""
|
|
1331
1412
|
return pulumi.get(self, "ike_group")
|
|
1332
1413
|
|
|
@@ -1350,7 +1431,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1350
1431
|
@pulumi.getter(name="ikeMode")
|
|
1351
1432
|
def ike_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1352
1433
|
"""
|
|
1353
|
-
IKE integrity protocol
|
|
1434
|
+
IKE integrity protocol
|
|
1435
|
+
- Choices: `main`, `aggressive`
|
|
1436
|
+
- Default value: `main`
|
|
1354
1437
|
"""
|
|
1355
1438
|
return pulumi.get(self, "ike_mode")
|
|
1356
1439
|
|
|
@@ -1446,7 +1529,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1446
1529
|
@pulumi.getter(name="ikeRekeyInterval")
|
|
1447
1530
|
def ike_rekey_interval(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1448
1531
|
"""
|
|
1449
|
-
IKE rekey interval <60..86400> seconds
|
|
1532
|
+
IKE rekey interval <60..86400> seconds
|
|
1533
|
+
- Range: `60`-`86400`
|
|
1534
|
+
- Default value: `14400`
|
|
1450
1535
|
"""
|
|
1451
1536
|
return pulumi.get(self, "ike_rekey_interval")
|
|
1452
1537
|
|
|
@@ -1470,7 +1555,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1470
1555
|
@pulumi.getter(name="ikeVersion")
|
|
1471
1556
|
def ike_version(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1472
1557
|
"""
|
|
1473
|
-
IKE Version <1..2>
|
|
1558
|
+
IKE Version <1..2>
|
|
1559
|
+
- Range: `1`-`2`
|
|
1560
|
+
- Default value: `1`
|
|
1474
1561
|
"""
|
|
1475
1562
|
return pulumi.get(self, "ike_version")
|
|
1476
1563
|
|
|
@@ -1554,9 +1641,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1554
1641
|
@pulumi.getter(name="ipsecCiphersuite")
|
|
1555
1642
|
def ipsec_ciphersuite(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1556
1643
|
"""
|
|
1557
|
-
IPsec(ESP) encryption and integrity protocol
|
|
1558
|
-
|
|
1559
|
-
|
|
1644
|
+
IPsec(ESP) encryption and integrity protocol
|
|
1645
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha384`, `aes256-cbc-sha256`, `aes256-cbc-sha512`, `aes256-gcm`, `null-sha1`, `null-sha384`, `null-sha256`, `null-sha512`
|
|
1646
|
+
- Default value: `aes256-gcm`
|
|
1560
1647
|
"""
|
|
1561
1648
|
return pulumi.get(self, "ipsec_ciphersuite")
|
|
1562
1649
|
|
|
@@ -1580,8 +1667,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1580
1667
|
@pulumi.getter(name="ipsecPerfectForwardSecrecy")
|
|
1581
1668
|
def ipsec_perfect_forward_secrecy(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1582
1669
|
"""
|
|
1583
|
-
IPsec perfect forward secrecy settings
|
|
1584
|
-
|
|
1670
|
+
IPsec perfect forward secrecy settings
|
|
1671
|
+
- Choices: `group-1`, `group-2`, `group-5`, `group-14`, `group-15`, `group-16`, `group-19`, `group-20`, `group-21`, `group-24`, `none`
|
|
1672
|
+
- Default value: `group-16`
|
|
1585
1673
|
"""
|
|
1586
1674
|
return pulumi.get(self, "ipsec_perfect_forward_secrecy")
|
|
1587
1675
|
|
|
@@ -1605,7 +1693,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1605
1693
|
@pulumi.getter(name="ipsecRekeyInterval")
|
|
1606
1694
|
def ipsec_rekey_interval(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1607
1695
|
"""
|
|
1608
|
-
IPsec rekey interval <300..1209600> seconds
|
|
1696
|
+
IPsec rekey interval <300..1209600> seconds
|
|
1697
|
+
- Range: `120`-`2592000`
|
|
1698
|
+
- Default value: `3600`
|
|
1609
1699
|
"""
|
|
1610
1700
|
return pulumi.get(self, "ipsec_rekey_interval")
|
|
1611
1701
|
|
|
@@ -1629,7 +1719,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1629
1719
|
@pulumi.getter(name="ipsecReplayWindow")
|
|
1630
1720
|
def ipsec_replay_window(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1631
1721
|
"""
|
|
1632
|
-
Replay window size 32..8192 (must be a power of 2)
|
|
1722
|
+
Replay window size 32..8192 (must be a power of 2)
|
|
1723
|
+
- Range: `64`-`4096`
|
|
1724
|
+
- Default value: `512`
|
|
1633
1725
|
"""
|
|
1634
1726
|
return pulumi.get(self, "ipsec_replay_window")
|
|
1635
1727
|
|
|
@@ -1653,7 +1745,9 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1653
1745
|
@pulumi.getter
|
|
1654
1746
|
def mtu(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1655
1747
|
"""
|
|
1656
|
-
Interface MTU <68..9216>, in bytes
|
|
1748
|
+
Interface MTU <68..9216>, in bytes
|
|
1749
|
+
- Range: `68`-`9216`
|
|
1750
|
+
- Default value: `1500`
|
|
1657
1751
|
"""
|
|
1658
1752
|
return pulumi.get(self, "mtu")
|
|
1659
1753
|
|
|
@@ -1689,7 +1783,8 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1689
1783
|
@pulumi.getter
|
|
1690
1784
|
def shutdown(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1691
1785
|
"""
|
|
1692
|
-
Administrative state
|
|
1786
|
+
Administrative state
|
|
1787
|
+
- Default value: `true`
|
|
1693
1788
|
"""
|
|
1694
1789
|
return pulumi.get(self, "shutdown")
|
|
1695
1790
|
|
|
@@ -1713,7 +1808,8 @@ class _CiscoVpnInterfaceIpsecFeatureTemplateState:
|
|
|
1713
1808
|
@pulumi.getter(name="tcpMssAdjust")
|
|
1714
1809
|
def tcp_mss_adjust(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1715
1810
|
"""
|
|
1716
|
-
TCP MSS on SYN packets, in bytes
|
|
1811
|
+
TCP MSS on SYN packets, in bytes
|
|
1812
|
+
- Range: `500`-`1460`
|
|
1717
1813
|
"""
|
|
1718
1814
|
return pulumi.get(self, "tcp_mss_adjust")
|
|
1719
1815
|
|
|
@@ -1994,24 +2090,35 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
1994
2090
|
|
|
1995
2091
|
:param str resource_name: The name of the resource.
|
|
1996
2092
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1997
|
-
:param pulumi.Input[_builtins.str] application: Enable Application Tunnel Type
|
|
2093
|
+
:param pulumi.Input[_builtins.str] application: Enable Application Tunnel Type
|
|
2094
|
+
- Choices: `none`, `sig`
|
|
2095
|
+
- Default value: `none`
|
|
1998
2096
|
:param pulumi.Input[_builtins.str] application_variable: Variable name
|
|
1999
|
-
:param pulumi.Input[_builtins.bool] clear_dont_fragment: Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
2097
|
+
:param pulumi.Input[_builtins.bool] clear_dont_fragment: Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
2098
|
+
- Default value: `false`
|
|
2000
2099
|
:param pulumi.Input[_builtins.str] clear_dont_fragment_variable: Variable name
|
|
2001
|
-
:param pulumi.Input[_builtins.int] dead_peer_detection_interval: IKE keepalive interval (seconds)
|
|
2100
|
+
:param pulumi.Input[_builtins.int] dead_peer_detection_interval: IKE keepalive interval (seconds)
|
|
2101
|
+
- Range: `10`-`3600`
|
|
2102
|
+
- Default value: `10`
|
|
2002
2103
|
:param pulumi.Input[_builtins.str] dead_peer_detection_interval_variable: Variable name
|
|
2003
|
-
:param pulumi.Input[_builtins.int] dead_peer_detection_retries: IKE keepalive retries
|
|
2104
|
+
:param pulumi.Input[_builtins.int] dead_peer_detection_retries: IKE keepalive retries
|
|
2105
|
+
- Range: `2`-`60`
|
|
2106
|
+
- Default value: `3`
|
|
2004
2107
|
:param pulumi.Input[_builtins.str] dead_peer_detection_retries_variable: Variable name
|
|
2005
2108
|
:param pulumi.Input[_builtins.str] description: The description of the feature template
|
|
2006
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] device_types: List of supported device types
|
|
2007
|
-
|
|
2008
|
-
|
|
2009
|
-
|
|
2010
|
-
|
|
2109
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] device_types: List of supported device types
|
|
2110
|
+
- Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
2111
|
+
:param pulumi.Input[_builtins.str] ike_ciphersuite: IKE identity the IKE preshared secret belongs to
|
|
2112
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha2`, `aes128-cbc-sha1`, `aes128-cbc-sha2`
|
|
2113
|
+
- Default value: `aes256-cbc-sha1`
|
|
2011
2114
|
:param pulumi.Input[_builtins.str] ike_ciphersuite_variable: Variable name
|
|
2012
|
-
:param pulumi.Input[_builtins.str] ike_group: IKE Diffie Hellman Groups
|
|
2115
|
+
:param pulumi.Input[_builtins.str] ike_group: IKE Diffie Hellman Groups
|
|
2116
|
+
- Choices: `2`, `14`, `15`, `16`, `19`, `20`, `21`, `24`
|
|
2117
|
+
- Default value: `16`
|
|
2013
2118
|
:param pulumi.Input[_builtins.str] ike_group_variable: Variable name
|
|
2014
|
-
:param pulumi.Input[_builtins.str] ike_mode: IKE integrity protocol
|
|
2119
|
+
:param pulumi.Input[_builtins.str] ike_mode: IKE integrity protocol
|
|
2120
|
+
- Choices: `main`, `aggressive`
|
|
2121
|
+
- Default value: `main`
|
|
2015
2122
|
:param pulumi.Input[_builtins.str] ike_mode_variable: Variable name
|
|
2016
2123
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key: Use preshared key to authenticate IKE peer
|
|
2017
2124
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_local_id: IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
|
|
@@ -2019,32 +2126,45 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2019
2126
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_remote_id: IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
|
|
2020
2127
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_remote_id_variable: Variable name
|
|
2021
2128
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_variable: Variable name
|
|
2022
|
-
:param pulumi.Input[_builtins.int] ike_rekey_interval: IKE rekey interval <60..86400> seconds
|
|
2129
|
+
:param pulumi.Input[_builtins.int] ike_rekey_interval: IKE rekey interval <60..86400> seconds
|
|
2130
|
+
- Range: `60`-`86400`
|
|
2131
|
+
- Default value: `14400`
|
|
2023
2132
|
:param pulumi.Input[_builtins.str] ike_rekey_interval_variable: Variable name
|
|
2024
|
-
:param pulumi.Input[_builtins.int] ike_version: IKE Version <1..2>
|
|
2133
|
+
:param pulumi.Input[_builtins.int] ike_version: IKE Version <1..2>
|
|
2134
|
+
- Range: `1`-`2`
|
|
2135
|
+
- Default value: `1`
|
|
2025
2136
|
:param pulumi.Input[_builtins.str] interface_description: Interface description
|
|
2026
2137
|
:param pulumi.Input[_builtins.str] interface_description_variable: Variable name
|
|
2027
2138
|
:param pulumi.Input[_builtins.str] interface_name: Interface name: IPsec when present
|
|
2028
2139
|
:param pulumi.Input[_builtins.str] interface_name_variable: Variable name
|
|
2029
2140
|
:param pulumi.Input[_builtins.str] ip_address: Assign IPv4 address
|
|
2030
2141
|
:param pulumi.Input[_builtins.str] ip_address_variable: Variable name
|
|
2031
|
-
:param pulumi.Input[_builtins.str] ipsec_ciphersuite: IPsec(ESP) encryption and integrity protocol
|
|
2032
|
-
|
|
2033
|
-
|
|
2142
|
+
:param pulumi.Input[_builtins.str] ipsec_ciphersuite: IPsec(ESP) encryption and integrity protocol
|
|
2143
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha384`, `aes256-cbc-sha256`, `aes256-cbc-sha512`, `aes256-gcm`, `null-sha1`, `null-sha384`, `null-sha256`, `null-sha512`
|
|
2144
|
+
- Default value: `aes256-gcm`
|
|
2034
2145
|
:param pulumi.Input[_builtins.str] ipsec_ciphersuite_variable: Variable name
|
|
2035
|
-
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy: IPsec perfect forward secrecy settings
|
|
2036
|
-
|
|
2146
|
+
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy: IPsec perfect forward secrecy settings
|
|
2147
|
+
- Choices: `group-1`, `group-2`, `group-5`, `group-14`, `group-15`, `group-16`, `group-19`, `group-20`, `group-21`, `group-24`, `none`
|
|
2148
|
+
- Default value: `group-16`
|
|
2037
2149
|
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy_variable: Variable name
|
|
2038
|
-
:param pulumi.Input[_builtins.int] ipsec_rekey_interval: IPsec rekey interval <300..1209600> seconds
|
|
2150
|
+
:param pulumi.Input[_builtins.int] ipsec_rekey_interval: IPsec rekey interval <300..1209600> seconds
|
|
2151
|
+
- Range: `120`-`2592000`
|
|
2152
|
+
- Default value: `3600`
|
|
2039
2153
|
:param pulumi.Input[_builtins.str] ipsec_rekey_interval_variable: Variable name
|
|
2040
|
-
:param pulumi.Input[_builtins.int] ipsec_replay_window: Replay window size 32..8192 (must be a power of 2)
|
|
2154
|
+
:param pulumi.Input[_builtins.int] ipsec_replay_window: Replay window size 32..8192 (must be a power of 2)
|
|
2155
|
+
- Range: `64`-`4096`
|
|
2156
|
+
- Default value: `512`
|
|
2041
2157
|
:param pulumi.Input[_builtins.str] ipsec_replay_window_variable: Variable name
|
|
2042
|
-
:param pulumi.Input[_builtins.int] mtu: Interface MTU <68..9216>, in bytes
|
|
2158
|
+
:param pulumi.Input[_builtins.int] mtu: Interface MTU <68..9216>, in bytes
|
|
2159
|
+
- Range: `68`-`9216`
|
|
2160
|
+
- Default value: `1500`
|
|
2043
2161
|
:param pulumi.Input[_builtins.str] mtu_variable: Variable name
|
|
2044
2162
|
:param pulumi.Input[_builtins.str] name: The name of the feature template
|
|
2045
|
-
:param pulumi.Input[_builtins.bool] shutdown: Administrative state
|
|
2163
|
+
:param pulumi.Input[_builtins.bool] shutdown: Administrative state
|
|
2164
|
+
- Default value: `true`
|
|
2046
2165
|
:param pulumi.Input[_builtins.str] shutdown_variable: Variable name
|
|
2047
|
-
:param pulumi.Input[_builtins.int] tcp_mss_adjust: TCP MSS on SYN packets, in bytes
|
|
2166
|
+
:param pulumi.Input[_builtins.int] tcp_mss_adjust: TCP MSS on SYN packets, in bytes
|
|
2167
|
+
- Range: `500`-`1460`
|
|
2048
2168
|
:param pulumi.Input[_builtins.str] tcp_mss_adjust_variable: Variable name
|
|
2049
2169
|
:param pulumi.Input[_builtins.str] tracker_variable: Variable name
|
|
2050
2170
|
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] trackers: Enable tracker for this interface
|
|
@@ -2331,24 +2451,35 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2331
2451
|
:param str resource_name: The unique name of the resulting resource.
|
|
2332
2452
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
2333
2453
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
2334
|
-
:param pulumi.Input[_builtins.str] application: Enable Application Tunnel Type
|
|
2454
|
+
:param pulumi.Input[_builtins.str] application: Enable Application Tunnel Type
|
|
2455
|
+
- Choices: `none`, `sig`
|
|
2456
|
+
- Default value: `none`
|
|
2335
2457
|
:param pulumi.Input[_builtins.str] application_variable: Variable name
|
|
2336
|
-
:param pulumi.Input[_builtins.bool] clear_dont_fragment: Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
2458
|
+
:param pulumi.Input[_builtins.bool] clear_dont_fragment: Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
2459
|
+
- Default value: `false`
|
|
2337
2460
|
:param pulumi.Input[_builtins.str] clear_dont_fragment_variable: Variable name
|
|
2338
|
-
:param pulumi.Input[_builtins.int] dead_peer_detection_interval: IKE keepalive interval (seconds)
|
|
2461
|
+
:param pulumi.Input[_builtins.int] dead_peer_detection_interval: IKE keepalive interval (seconds)
|
|
2462
|
+
- Range: `10`-`3600`
|
|
2463
|
+
- Default value: `10`
|
|
2339
2464
|
:param pulumi.Input[_builtins.str] dead_peer_detection_interval_variable: Variable name
|
|
2340
|
-
:param pulumi.Input[_builtins.int] dead_peer_detection_retries: IKE keepalive retries
|
|
2465
|
+
:param pulumi.Input[_builtins.int] dead_peer_detection_retries: IKE keepalive retries
|
|
2466
|
+
- Range: `2`-`60`
|
|
2467
|
+
- Default value: `3`
|
|
2341
2468
|
:param pulumi.Input[_builtins.str] dead_peer_detection_retries_variable: Variable name
|
|
2342
2469
|
:param pulumi.Input[_builtins.str] description: The description of the feature template
|
|
2343
|
-
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] device_types: List of supported device types
|
|
2344
|
-
|
|
2345
|
-
|
|
2346
|
-
|
|
2347
|
-
|
|
2470
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] device_types: List of supported device types
|
|
2471
|
+
- Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
2472
|
+
:param pulumi.Input[_builtins.str] ike_ciphersuite: IKE identity the IKE preshared secret belongs to
|
|
2473
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha2`, `aes128-cbc-sha1`, `aes128-cbc-sha2`
|
|
2474
|
+
- Default value: `aes256-cbc-sha1`
|
|
2348
2475
|
:param pulumi.Input[_builtins.str] ike_ciphersuite_variable: Variable name
|
|
2349
|
-
:param pulumi.Input[_builtins.str] ike_group: IKE Diffie Hellman Groups
|
|
2476
|
+
:param pulumi.Input[_builtins.str] ike_group: IKE Diffie Hellman Groups
|
|
2477
|
+
- Choices: `2`, `14`, `15`, `16`, `19`, `20`, `21`, `24`
|
|
2478
|
+
- Default value: `16`
|
|
2350
2479
|
:param pulumi.Input[_builtins.str] ike_group_variable: Variable name
|
|
2351
|
-
:param pulumi.Input[_builtins.str] ike_mode: IKE integrity protocol
|
|
2480
|
+
:param pulumi.Input[_builtins.str] ike_mode: IKE integrity protocol
|
|
2481
|
+
- Choices: `main`, `aggressive`
|
|
2482
|
+
- Default value: `main`
|
|
2352
2483
|
:param pulumi.Input[_builtins.str] ike_mode_variable: Variable name
|
|
2353
2484
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key: Use preshared key to authenticate IKE peer
|
|
2354
2485
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_local_id: IKE ID for the local endpoint. Input IPv4 address, domain name, or email address
|
|
@@ -2356,32 +2487,45 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2356
2487
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_remote_id: IKE ID for the remote endpoint. Input IPv4 address, domain name, or email address
|
|
2357
2488
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_remote_id_variable: Variable name
|
|
2358
2489
|
:param pulumi.Input[_builtins.str] ike_pre_shared_key_variable: Variable name
|
|
2359
|
-
:param pulumi.Input[_builtins.int] ike_rekey_interval: IKE rekey interval <60..86400> seconds
|
|
2490
|
+
:param pulumi.Input[_builtins.int] ike_rekey_interval: IKE rekey interval <60..86400> seconds
|
|
2491
|
+
- Range: `60`-`86400`
|
|
2492
|
+
- Default value: `14400`
|
|
2360
2493
|
:param pulumi.Input[_builtins.str] ike_rekey_interval_variable: Variable name
|
|
2361
|
-
:param pulumi.Input[_builtins.int] ike_version: IKE Version <1..2>
|
|
2494
|
+
:param pulumi.Input[_builtins.int] ike_version: IKE Version <1..2>
|
|
2495
|
+
- Range: `1`-`2`
|
|
2496
|
+
- Default value: `1`
|
|
2362
2497
|
:param pulumi.Input[_builtins.str] interface_description: Interface description
|
|
2363
2498
|
:param pulumi.Input[_builtins.str] interface_description_variable: Variable name
|
|
2364
2499
|
:param pulumi.Input[_builtins.str] interface_name: Interface name: IPsec when present
|
|
2365
2500
|
:param pulumi.Input[_builtins.str] interface_name_variable: Variable name
|
|
2366
2501
|
:param pulumi.Input[_builtins.str] ip_address: Assign IPv4 address
|
|
2367
2502
|
:param pulumi.Input[_builtins.str] ip_address_variable: Variable name
|
|
2368
|
-
:param pulumi.Input[_builtins.str] ipsec_ciphersuite: IPsec(ESP) encryption and integrity protocol
|
|
2369
|
-
|
|
2370
|
-
|
|
2503
|
+
:param pulumi.Input[_builtins.str] ipsec_ciphersuite: IPsec(ESP) encryption and integrity protocol
|
|
2504
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha384`, `aes256-cbc-sha256`, `aes256-cbc-sha512`, `aes256-gcm`, `null-sha1`, `null-sha384`, `null-sha256`, `null-sha512`
|
|
2505
|
+
- Default value: `aes256-gcm`
|
|
2371
2506
|
:param pulumi.Input[_builtins.str] ipsec_ciphersuite_variable: Variable name
|
|
2372
|
-
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy: IPsec perfect forward secrecy settings
|
|
2373
|
-
|
|
2507
|
+
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy: IPsec perfect forward secrecy settings
|
|
2508
|
+
- Choices: `group-1`, `group-2`, `group-5`, `group-14`, `group-15`, `group-16`, `group-19`, `group-20`, `group-21`, `group-24`, `none`
|
|
2509
|
+
- Default value: `group-16`
|
|
2374
2510
|
:param pulumi.Input[_builtins.str] ipsec_perfect_forward_secrecy_variable: Variable name
|
|
2375
|
-
:param pulumi.Input[_builtins.int] ipsec_rekey_interval: IPsec rekey interval <300..1209600> seconds
|
|
2511
|
+
:param pulumi.Input[_builtins.int] ipsec_rekey_interval: IPsec rekey interval <300..1209600> seconds
|
|
2512
|
+
- Range: `120`-`2592000`
|
|
2513
|
+
- Default value: `3600`
|
|
2376
2514
|
:param pulumi.Input[_builtins.str] ipsec_rekey_interval_variable: Variable name
|
|
2377
|
-
:param pulumi.Input[_builtins.int] ipsec_replay_window: Replay window size 32..8192 (must be a power of 2)
|
|
2515
|
+
:param pulumi.Input[_builtins.int] ipsec_replay_window: Replay window size 32..8192 (must be a power of 2)
|
|
2516
|
+
- Range: `64`-`4096`
|
|
2517
|
+
- Default value: `512`
|
|
2378
2518
|
:param pulumi.Input[_builtins.str] ipsec_replay_window_variable: Variable name
|
|
2379
|
-
:param pulumi.Input[_builtins.int] mtu: Interface MTU <68..9216>, in bytes
|
|
2519
|
+
:param pulumi.Input[_builtins.int] mtu: Interface MTU <68..9216>, in bytes
|
|
2520
|
+
- Range: `68`-`9216`
|
|
2521
|
+
- Default value: `1500`
|
|
2380
2522
|
:param pulumi.Input[_builtins.str] mtu_variable: Variable name
|
|
2381
2523
|
:param pulumi.Input[_builtins.str] name: The name of the feature template
|
|
2382
|
-
:param pulumi.Input[_builtins.bool] shutdown: Administrative state
|
|
2524
|
+
:param pulumi.Input[_builtins.bool] shutdown: Administrative state
|
|
2525
|
+
- Default value: `true`
|
|
2383
2526
|
:param pulumi.Input[_builtins.str] shutdown_variable: Variable name
|
|
2384
|
-
:param pulumi.Input[_builtins.int] tcp_mss_adjust: TCP MSS on SYN packets, in bytes
|
|
2527
|
+
:param pulumi.Input[_builtins.int] tcp_mss_adjust: TCP MSS on SYN packets, in bytes
|
|
2528
|
+
- Range: `500`-`1460`
|
|
2385
2529
|
:param pulumi.Input[_builtins.str] tcp_mss_adjust_variable: Variable name
|
|
2386
2530
|
:param pulumi.Input[_builtins.str] template_type: The template type
|
|
2387
2531
|
:param pulumi.Input[_builtins.str] tracker_variable: Variable name
|
|
@@ -2464,7 +2608,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2464
2608
|
@pulumi.getter
|
|
2465
2609
|
def application(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2466
2610
|
"""
|
|
2467
|
-
Enable Application Tunnel Type
|
|
2611
|
+
Enable Application Tunnel Type
|
|
2612
|
+
- Choices: `none`, `sig`
|
|
2613
|
+
- Default value: `none`
|
|
2468
2614
|
"""
|
|
2469
2615
|
return pulumi.get(self, "application")
|
|
2470
2616
|
|
|
@@ -2480,7 +2626,8 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2480
2626
|
@pulumi.getter(name="clearDontFragment")
|
|
2481
2627
|
def clear_dont_fragment(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
2482
2628
|
"""
|
|
2483
|
-
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
2629
|
+
Enable clear dont fragment (Currently Only SDWAN Tunnel Interface)
|
|
2630
|
+
- Default value: `false`
|
|
2484
2631
|
"""
|
|
2485
2632
|
return pulumi.get(self, "clear_dont_fragment")
|
|
2486
2633
|
|
|
@@ -2496,7 +2643,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2496
2643
|
@pulumi.getter(name="deadPeerDetectionInterval")
|
|
2497
2644
|
def dead_peer_detection_interval(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
2498
2645
|
"""
|
|
2499
|
-
IKE keepalive interval (seconds)
|
|
2646
|
+
IKE keepalive interval (seconds)
|
|
2647
|
+
- Range: `10`-`3600`
|
|
2648
|
+
- Default value: `10`
|
|
2500
2649
|
"""
|
|
2501
2650
|
return pulumi.get(self, "dead_peer_detection_interval")
|
|
2502
2651
|
|
|
@@ -2512,7 +2661,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2512
2661
|
@pulumi.getter(name="deadPeerDetectionRetries")
|
|
2513
2662
|
def dead_peer_detection_retries(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
2514
2663
|
"""
|
|
2515
|
-
IKE keepalive retries
|
|
2664
|
+
IKE keepalive retries
|
|
2665
|
+
- Range: `2`-`60`
|
|
2666
|
+
- Default value: `3`
|
|
2516
2667
|
"""
|
|
2517
2668
|
return pulumi.get(self, "dead_peer_detection_retries")
|
|
2518
2669
|
|
|
@@ -2536,9 +2687,8 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2536
2687
|
@pulumi.getter(name="deviceTypes")
|
|
2537
2688
|
def device_types(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
2538
2689
|
"""
|
|
2539
|
-
List of supported device types
|
|
2540
|
-
|
|
2541
|
-
`vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
2690
|
+
List of supported device types
|
|
2691
|
+
- Choices: `vedge-C8000V`, `vedge-C8300-1N1S-4T2X`, `vedge-C8300-1N1S-6T`, `vedge-C8300-2N2S-6T`, `vedge-C8300-2N2S-4T2X`, `vedge-C8500-12X4QC`, `vedge-C8500-12X`, `vedge-C8500-20X6C`, `vedge-C8500L-8S4X`, `vedge-C8200-1N-4T`, `vedge-C8200L-1N-4T`
|
|
2542
2692
|
"""
|
|
2543
2693
|
return pulumi.get(self, "device_types")
|
|
2544
2694
|
|
|
@@ -2546,8 +2696,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2546
2696
|
@pulumi.getter(name="ikeCiphersuite")
|
|
2547
2697
|
def ike_ciphersuite(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2548
2698
|
"""
|
|
2549
|
-
IKE identity the IKE preshared secret belongs to
|
|
2550
|
-
|
|
2699
|
+
IKE identity the IKE preshared secret belongs to
|
|
2700
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha2`, `aes128-cbc-sha1`, `aes128-cbc-sha2`
|
|
2701
|
+
- Default value: `aes256-cbc-sha1`
|
|
2551
2702
|
"""
|
|
2552
2703
|
return pulumi.get(self, "ike_ciphersuite")
|
|
2553
2704
|
|
|
@@ -2563,7 +2714,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2563
2714
|
@pulumi.getter(name="ikeGroup")
|
|
2564
2715
|
def ike_group(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2565
2716
|
"""
|
|
2566
|
-
IKE Diffie Hellman Groups
|
|
2717
|
+
IKE Diffie Hellman Groups
|
|
2718
|
+
- Choices: `2`, `14`, `15`, `16`, `19`, `20`, `21`, `24`
|
|
2719
|
+
- Default value: `16`
|
|
2567
2720
|
"""
|
|
2568
2721
|
return pulumi.get(self, "ike_group")
|
|
2569
2722
|
|
|
@@ -2579,7 +2732,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2579
2732
|
@pulumi.getter(name="ikeMode")
|
|
2580
2733
|
def ike_mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2581
2734
|
"""
|
|
2582
|
-
IKE integrity protocol
|
|
2735
|
+
IKE integrity protocol
|
|
2736
|
+
- Choices: `main`, `aggressive`
|
|
2737
|
+
- Default value: `main`
|
|
2583
2738
|
"""
|
|
2584
2739
|
return pulumi.get(self, "ike_mode")
|
|
2585
2740
|
|
|
@@ -2643,7 +2798,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2643
2798
|
@pulumi.getter(name="ikeRekeyInterval")
|
|
2644
2799
|
def ike_rekey_interval(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
2645
2800
|
"""
|
|
2646
|
-
IKE rekey interval <60..86400> seconds
|
|
2801
|
+
IKE rekey interval <60..86400> seconds
|
|
2802
|
+
- Range: `60`-`86400`
|
|
2803
|
+
- Default value: `14400`
|
|
2647
2804
|
"""
|
|
2648
2805
|
return pulumi.get(self, "ike_rekey_interval")
|
|
2649
2806
|
|
|
@@ -2659,7 +2816,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2659
2816
|
@pulumi.getter(name="ikeVersion")
|
|
2660
2817
|
def ike_version(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
2661
2818
|
"""
|
|
2662
|
-
IKE Version <1..2>
|
|
2819
|
+
IKE Version <1..2>
|
|
2820
|
+
- Range: `1`-`2`
|
|
2821
|
+
- Default value: `1`
|
|
2663
2822
|
"""
|
|
2664
2823
|
return pulumi.get(self, "ike_version")
|
|
2665
2824
|
|
|
@@ -2715,9 +2874,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2715
2874
|
@pulumi.getter(name="ipsecCiphersuite")
|
|
2716
2875
|
def ipsec_ciphersuite(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2717
2876
|
"""
|
|
2718
|
-
IPsec(ESP) encryption and integrity protocol
|
|
2719
|
-
|
|
2720
|
-
|
|
2877
|
+
IPsec(ESP) encryption and integrity protocol
|
|
2878
|
+
- Choices: `aes256-cbc-sha1`, `aes256-cbc-sha384`, `aes256-cbc-sha256`, `aes256-cbc-sha512`, `aes256-gcm`, `null-sha1`, `null-sha384`, `null-sha256`, `null-sha512`
|
|
2879
|
+
- Default value: `aes256-gcm`
|
|
2721
2880
|
"""
|
|
2722
2881
|
return pulumi.get(self, "ipsec_ciphersuite")
|
|
2723
2882
|
|
|
@@ -2733,8 +2892,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2733
2892
|
@pulumi.getter(name="ipsecPerfectForwardSecrecy")
|
|
2734
2893
|
def ipsec_perfect_forward_secrecy(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2735
2894
|
"""
|
|
2736
|
-
IPsec perfect forward secrecy settings
|
|
2737
|
-
|
|
2895
|
+
IPsec perfect forward secrecy settings
|
|
2896
|
+
- Choices: `group-1`, `group-2`, `group-5`, `group-14`, `group-15`, `group-16`, `group-19`, `group-20`, `group-21`, `group-24`, `none`
|
|
2897
|
+
- Default value: `group-16`
|
|
2738
2898
|
"""
|
|
2739
2899
|
return pulumi.get(self, "ipsec_perfect_forward_secrecy")
|
|
2740
2900
|
|
|
@@ -2750,7 +2910,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2750
2910
|
@pulumi.getter(name="ipsecRekeyInterval")
|
|
2751
2911
|
def ipsec_rekey_interval(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
2752
2912
|
"""
|
|
2753
|
-
IPsec rekey interval <300..1209600> seconds
|
|
2913
|
+
IPsec rekey interval <300..1209600> seconds
|
|
2914
|
+
- Range: `120`-`2592000`
|
|
2915
|
+
- Default value: `3600`
|
|
2754
2916
|
"""
|
|
2755
2917
|
return pulumi.get(self, "ipsec_rekey_interval")
|
|
2756
2918
|
|
|
@@ -2766,7 +2928,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2766
2928
|
@pulumi.getter(name="ipsecReplayWindow")
|
|
2767
2929
|
def ipsec_replay_window(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
2768
2930
|
"""
|
|
2769
|
-
Replay window size 32..8192 (must be a power of 2)
|
|
2931
|
+
Replay window size 32..8192 (must be a power of 2)
|
|
2932
|
+
- Range: `64`-`4096`
|
|
2933
|
+
- Default value: `512`
|
|
2770
2934
|
"""
|
|
2771
2935
|
return pulumi.get(self, "ipsec_replay_window")
|
|
2772
2936
|
|
|
@@ -2782,7 +2946,9 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2782
2946
|
@pulumi.getter
|
|
2783
2947
|
def mtu(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
2784
2948
|
"""
|
|
2785
|
-
Interface MTU <68..9216>, in bytes
|
|
2949
|
+
Interface MTU <68..9216>, in bytes
|
|
2950
|
+
- Range: `68`-`9216`
|
|
2951
|
+
- Default value: `1500`
|
|
2786
2952
|
"""
|
|
2787
2953
|
return pulumi.get(self, "mtu")
|
|
2788
2954
|
|
|
@@ -2806,7 +2972,8 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2806
2972
|
@pulumi.getter
|
|
2807
2973
|
def shutdown(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
2808
2974
|
"""
|
|
2809
|
-
Administrative state
|
|
2975
|
+
Administrative state
|
|
2976
|
+
- Default value: `true`
|
|
2810
2977
|
"""
|
|
2811
2978
|
return pulumi.get(self, "shutdown")
|
|
2812
2979
|
|
|
@@ -2822,7 +2989,8 @@ class CiscoVpnInterfaceIpsecFeatureTemplate(pulumi.CustomResource):
|
|
|
2822
2989
|
@pulumi.getter(name="tcpMssAdjust")
|
|
2823
2990
|
def tcp_mss_adjust(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
2824
2991
|
"""
|
|
2825
|
-
TCP MSS on SYN packets, in bytes
|
|
2992
|
+
TCP MSS on SYN packets, in bytes
|
|
2993
|
+
- Range: `500`-`1460`
|
|
2826
2994
|
"""
|
|
2827
2995
|
return pulumi.get(self, "tcp_mss_adjust")
|
|
2828
2996
|
|