Feedback Edit

IpsecPolicy Class

  • Reference

An IPSec Policy configuration for a virtual network gateway connection.

All required parameters must be populated in order to send to Azure.

Inheritance
Model
IpsecPolicy

Constructor

IpsecPolicy(*, sa_life_time_seconds: int, sa_data_size_kilobytes: int, ipsec_encryption: typing.Union[str, _ForwardRef('IpsecEncryption')], ipsec_integrity: typing.Union[str, _ForwardRef('IpsecIntegrity')], ike_encryption: typing.Union[str, _ForwardRef('IkeEncryption')], ike_integrity: typing.Union[str, _ForwardRef('IkeIntegrity')], dh_group: typing.Union[str, _ForwardRef('DhGroup')], pfs_group: typing.Union[str, _ForwardRef('PfsGroup')], **kwargs)

Parameters

sa_life_time_seconds
int

Required. The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.

sa_data_size_kilobytes
int

Required. The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.

ipsec_encryption
str or IpsecEncryption

Required. The IPSec encryption algorithm (IKE phase 1). Possible values include: "None", "DES", "DES3", "AES128", "AES192", "AES256", "GCMAES128", "GCMAES192", "GCMAES256".

ipsec_integrity
str or IpsecIntegrity

Required. The IPSec integrity algorithm (IKE phase 1). Possible values include: "MD5", "SHA1", "SHA256", "GCMAES128", "GCMAES192", "GCMAES256".

ike_encryption
str or IkeEncryption

Required. The IKE encryption algorithm (IKE phase 2). Possible values include: "DES", "DES3", "AES128", "AES192", "AES256".

ike_integrity
str or IkeIntegrity

Required. The IKE integrity algorithm (IKE phase 2). Possible values include: "MD5", "SHA1", "SHA256", "SHA384".

dh_group
str or DhGroup

Required. The DH Groups used in IKE Phase 1 for initial SA. Possible values include: "None", "DHGroup1", "DHGroup2", "DHGroup14", "DHGroup2048", "ECP256", "ECP384", "DHGroup24".

pfs_group
str or PfsGroup

Required. The DH Groups used in IKE Phase 2 for new child SA. Possible values include: "None", "PFS1", "PFS2", "PFS2048", "ECP256", "ECP384", "PFS24".