InlineL3Vpn

Description not available

Properties

array of string
dh_groups Optional

Diffie-Hellman group to be used if PFS is enabled. Default group is GROUP14.

Possible values are: GROUP2GROUP5GROUP14GROUP15GROUP16


boolean
enable_perfect_forward_secrecy Optional

If true, perfect forward secrecy (PFS) is enabled.


boolean
enabled Optional

Flag to enable L3Vpn. Default is enabled.


array of string
ike_digest_algorithms Optional

Algorithm to be used for message digest during Internet Key Exchange(IKE) negotiation. Default is SHA2_256.

Possible values are: SHA1SHA2_256


array of string
ike_encryption_algorithms Optional

Algorithm to be used during Internet Key Exchange(IKE) negotiation. Default is AES_128.

Possible values are: AES_128AES_256AES_GCM_128AES_GCM_192AES_GCM_256


string
ike_version Optional

IKE protocol version to be used. IKE-Flex will initiate IKE-V2 and responds to both IKE-V1 and IKE-V2.

Possible values are: IKE_V1IKE_V2IKE_FLEX


l3vpn_session Required

L3Vpn Session


string as ipv4
local_address Required

IPv4 address of local gateway


array of string
passphrases Optional

List of IPSec pre-shared keys used for IPSec authentication. If not specified, the older passphrase values are retained if there are any.


string
remote_private_address Optional

This field is used to resolve conflicts in case of a remote site being behind NAT as remote public ip address is not enough. If it is not the case the remote public address should be provided here. If not provided, the value of this field is set to remote_public_address.


string as ipv4
remote_public_address Required

Public IPv4 address of remote gateway


array of string
tunnel_digest_algorithms Optional

Algorithm to be used for message digest during tunnel establishment. Default algorithm is empty.

Possible values are: SHA1SHA2_256


array of string
tunnel_encryption_algorithms Optional

Encryption algorithm to encrypt/decrypt the messages exchanged between IPSec VPN initiator and responder during tunnel negotiation. Default is AES_GCM_128.

Possible values are: AES_128AES_256AES_GCM_128AES_GCM_192AES_GCM_256

JSON Example

{
	"l3vpn_session": {
		"resource_type": "PolicyBasedL3VpnSession"
	},
	"local_address": "string",
	"remote_public_address": "string"
}

Vendor Extensions

This class contains the following vendor extensions defined in the spec:
x-vmw-nsx-module: PolicyL3Vpn
Used By

L3Vpn

Feedback

Was this page helpful?