1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. Core
  5. Ipsec
Oracle Cloud Infrastructure v2.29.0 published on Wednesday, Apr 9, 2025 by Pulumi

oci.Core.Ipsec

Explore with Pulumi AI

This resource provides the Ip Sec Connection resource in Oracle Cloud Infrastructure Core service.

Creates a new IPSec connection between the specified DRG and CPE with two default static tunnels. For more information, see Site-to-Site VPN Overview.

For the purposes of access control, you must provide the OCID of the compartment where you want the IPSec connection to reside. Notice that the IPSec connection doesn’t have to be in the same compartment as the DRG, CPE, or other Networking Service components. If you’re not sure which compartment to use, put the IPSec connection in the same compartment as the DRG. For more information about compartments and access control, see Overview of the IAM Service.

You may optionally specify a display name for the IPSec connection, otherwise a default is provided. It does not have to be unique, and you can change it. Avoid entering confidential information.

After creating the IPSec connection, you need to configure your on-premises router with tunnel-specific information. For tunnel status and the required configuration information, see:

To configure tunnel-specific information, use oci.Core.IpsecConnectionTunnelManagement to update the tunnels. If you configure at least one tunnel to use static routing, then in the oci.Core.Ipsec request you must provide at least one valid static route (you’re allowed a maximum of 10). For example: 10.0.0.0/16. If you configure both tunnels to use BGP dynamic routing, the static routes will be ignored. However, you must provide a static route in oci.Core.Ipsec even if you plan to use BGP routing because it defaults to two static tunnels. For more information, see the important note in IPSecConnection.

For each tunnel, you need the IP address of Oracle’s VPN headend and the shared secret (that is, the pre-shared key). For more information, see CPE Configuration.

To configure tunnel-specific information for private ipsec connection over fastconnect, use attribute tunnel_configuration. You can provide configuration for maximum of 2 tunnels. You can configure each tunnel with oracle_tunnel_ip, associated_virtual_circuits and drg_route_table_id at time of creation. These attributes cannot be updated using IPSec connection APIs. To update drg route table id, use oci.Core.DrgAttachmentManagement resource to update.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testIpSecConnection = new oci.core.Ipsec("test_ip_sec_connection", {
    compartmentId: compartmentId,
    cpeId: testCpe.id,
    drgId: testDrg.id,
    staticRoutes: ipSecConnectionStaticRoutes,
    cpeLocalIdentifier: ipSecConnectionCpeLocalIdentifier,
    cpeLocalIdentifierType: ipSecConnectionCpeLocalIdentifierType,
    definedTags: {
        "Operations.CostCenter": "42",
    },
    displayName: ipSecConnectionDisplayName,
    freeformTags: {
        Department: "Finance",
    },
});
const testIpSecConnectionOverFc = new oci.core.Ipsec("test_ip_sec_connection_over_fc", {
    compartmentId: compartmentId,
    cpeId: testCpe.id,
    drgId: testDrg.id,
    staticRoutes: ipSecConnectionStaticRoutes,
    cpeLocalIdentifier: ipSecConnectionCpeLocalIdentifier,
    cpeLocalIdentifierType: ipSecConnectionCpeLocalIdentifierType,
    definedTags: {
        "Operations.CostCenter": "42",
    },
    displayName: ipSecConnectionDisplayName,
    freeformTags: {
        Department: "Finance",
    },
    tunnelConfigurations: [
        {
            oracleTunnelIp: "10.1.5.5",
            associatedVirtualCircuits: [testIpsecOverFcVirtualCircuit.id],
            drgRouteTableId: testDrgIpsecOverFcRouteTable.id,
        },
        {
            oracleTunnelIp: "10.1.7.7",
            associatedVirtualCircuits: [testIpsecOverFcVirtualCircuit.id],
            drgRouteTableId: testDrgIpsecOverFcRouteTable.id,
        },
    ],
});
Copy
import pulumi
import pulumi_oci as oci

test_ip_sec_connection = oci.core.Ipsec("test_ip_sec_connection",
    compartment_id=compartment_id,
    cpe_id=test_cpe["id"],
    drg_id=test_drg["id"],
    static_routes=ip_sec_connection_static_routes,
    cpe_local_identifier=ip_sec_connection_cpe_local_identifier,
    cpe_local_identifier_type=ip_sec_connection_cpe_local_identifier_type,
    defined_tags={
        "Operations.CostCenter": "42",
    },
    display_name=ip_sec_connection_display_name,
    freeform_tags={
        "Department": "Finance",
    })
test_ip_sec_connection_over_fc = oci.core.Ipsec("test_ip_sec_connection_over_fc",
    compartment_id=compartment_id,
    cpe_id=test_cpe["id"],
    drg_id=test_drg["id"],
    static_routes=ip_sec_connection_static_routes,
    cpe_local_identifier=ip_sec_connection_cpe_local_identifier,
    cpe_local_identifier_type=ip_sec_connection_cpe_local_identifier_type,
    defined_tags={
        "Operations.CostCenter": "42",
    },
    display_name=ip_sec_connection_display_name,
    freeform_tags={
        "Department": "Finance",
    },
    tunnel_configurations=[
        {
            "oracle_tunnel_ip": "10.1.5.5",
            "associated_virtual_circuits": [test_ipsec_over_fc_virtual_circuit["id"]],
            "drg_route_table_id": test_drg_ipsec_over_fc_route_table["id"],
        },
        {
            "oracle_tunnel_ip": "10.1.7.7",
            "associated_virtual_circuits": [test_ipsec_over_fc_virtual_circuit["id"]],
            "drg_route_table_id": test_drg_ipsec_over_fc_route_table["id"],
        },
    ])
Copy
package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/core"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := core.NewIpsec(ctx, "test_ip_sec_connection", &core.IpsecArgs{
			CompartmentId:          pulumi.Any(compartmentId),
			CpeId:                  pulumi.Any(testCpe.Id),
			DrgId:                  pulumi.Any(testDrg.Id),
			StaticRoutes:           pulumi.Any(ipSecConnectionStaticRoutes),
			CpeLocalIdentifier:     pulumi.Any(ipSecConnectionCpeLocalIdentifier),
			CpeLocalIdentifierType: pulumi.Any(ipSecConnectionCpeLocalIdentifierType),
			DefinedTags: pulumi.StringMap{
				"Operations.CostCenter": pulumi.String("42"),
			},
			DisplayName: pulumi.Any(ipSecConnectionDisplayName),
			FreeformTags: pulumi.StringMap{
				"Department": pulumi.String("Finance"),
			},
		})
		if err != nil {
			return err
		}
		_, err = core.NewIpsec(ctx, "test_ip_sec_connection_over_fc", &core.IpsecArgs{
			CompartmentId:          pulumi.Any(compartmentId),
			CpeId:                  pulumi.Any(testCpe.Id),
			DrgId:                  pulumi.Any(testDrg.Id),
			StaticRoutes:           pulumi.Any(ipSecConnectionStaticRoutes),
			CpeLocalIdentifier:     pulumi.Any(ipSecConnectionCpeLocalIdentifier),
			CpeLocalIdentifierType: pulumi.Any(ipSecConnectionCpeLocalIdentifierType),
			DefinedTags: pulumi.StringMap{
				"Operations.CostCenter": pulumi.String("42"),
			},
			DisplayName: pulumi.Any(ipSecConnectionDisplayName),
			FreeformTags: pulumi.StringMap{
				"Department": pulumi.String("Finance"),
			},
			TunnelConfigurations: core.IpsecTunnelConfigurationArray{
				&core.IpsecTunnelConfigurationArgs{
					OracleTunnelIp: pulumi.String("10.1.5.5"),
					AssociatedVirtualCircuits: pulumi.StringArray{
						testIpsecOverFcVirtualCircuit.Id,
					},
					DrgRouteTableId: pulumi.Any(testDrgIpsecOverFcRouteTable.Id),
				},
				&core.IpsecTunnelConfigurationArgs{
					OracleTunnelIp: pulumi.String("10.1.7.7"),
					AssociatedVirtualCircuits: pulumi.StringArray{
						testIpsecOverFcVirtualCircuit.Id,
					},
					DrgRouteTableId: pulumi.Any(testDrgIpsecOverFcRouteTable.Id),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testIpSecConnection = new Oci.Core.Ipsec("test_ip_sec_connection", new()
    {
        CompartmentId = compartmentId,
        CpeId = testCpe.Id,
        DrgId = testDrg.Id,
        StaticRoutes = ipSecConnectionStaticRoutes,
        CpeLocalIdentifier = ipSecConnectionCpeLocalIdentifier,
        CpeLocalIdentifierType = ipSecConnectionCpeLocalIdentifierType,
        DefinedTags = 
        {
            { "Operations.CostCenter", "42" },
        },
        DisplayName = ipSecConnectionDisplayName,
        FreeformTags = 
        {
            { "Department", "Finance" },
        },
    });

    var testIpSecConnectionOverFc = new Oci.Core.Ipsec("test_ip_sec_connection_over_fc", new()
    {
        CompartmentId = compartmentId,
        CpeId = testCpe.Id,
        DrgId = testDrg.Id,
        StaticRoutes = ipSecConnectionStaticRoutes,
        CpeLocalIdentifier = ipSecConnectionCpeLocalIdentifier,
        CpeLocalIdentifierType = ipSecConnectionCpeLocalIdentifierType,
        DefinedTags = 
        {
            { "Operations.CostCenter", "42" },
        },
        DisplayName = ipSecConnectionDisplayName,
        FreeformTags = 
        {
            { "Department", "Finance" },
        },
        TunnelConfigurations = new[]
        {
            new Oci.Core.Inputs.IpsecTunnelConfigurationArgs
            {
                OracleTunnelIp = "10.1.5.5",
                AssociatedVirtualCircuits = new[]
                {
                    testIpsecOverFcVirtualCircuit.Id,
                },
                DrgRouteTableId = testDrgIpsecOverFcRouteTable.Id,
            },
            new Oci.Core.Inputs.IpsecTunnelConfigurationArgs
            {
                OracleTunnelIp = "10.1.7.7",
                AssociatedVirtualCircuits = new[]
                {
                    testIpsecOverFcVirtualCircuit.Id,
                },
                DrgRouteTableId = testDrgIpsecOverFcRouteTable.Id,
            },
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Core.Ipsec;
import com.pulumi.oci.Core.IpsecArgs;
import com.pulumi.oci.Core.inputs.IpsecTunnelConfigurationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var testIpSecConnection = new Ipsec("testIpSecConnection", IpsecArgs.builder()
            .compartmentId(compartmentId)
            .cpeId(testCpe.id())
            .drgId(testDrg.id())
            .staticRoutes(ipSecConnectionStaticRoutes)
            .cpeLocalIdentifier(ipSecConnectionCpeLocalIdentifier)
            .cpeLocalIdentifierType(ipSecConnectionCpeLocalIdentifierType)
            .definedTags(Map.of("Operations.CostCenter", "42"))
            .displayName(ipSecConnectionDisplayName)
            .freeformTags(Map.of("Department", "Finance"))
            .build());

        var testIpSecConnectionOverFc = new Ipsec("testIpSecConnectionOverFc", IpsecArgs.builder()
            .compartmentId(compartmentId)
            .cpeId(testCpe.id())
            .drgId(testDrg.id())
            .staticRoutes(ipSecConnectionStaticRoutes)
            .cpeLocalIdentifier(ipSecConnectionCpeLocalIdentifier)
            .cpeLocalIdentifierType(ipSecConnectionCpeLocalIdentifierType)
            .definedTags(Map.of("Operations.CostCenter", "42"))
            .displayName(ipSecConnectionDisplayName)
            .freeformTags(Map.of("Department", "Finance"))
            .tunnelConfigurations(            
                IpsecTunnelConfigurationArgs.builder()
                    .oracleTunnelIp("10.1.5.5")
                    .associatedVirtualCircuits(testIpsecOverFcVirtualCircuit.id())
                    .drgRouteTableId(testDrgIpsecOverFcRouteTable.id())
                    .build(),
                IpsecTunnelConfigurationArgs.builder()
                    .oracleTunnelIp("10.1.7.7")
                    .associatedVirtualCircuits(testIpsecOverFcVirtualCircuit.id())
                    .drgRouteTableId(testDrgIpsecOverFcRouteTable.id())
                    .build())
            .build());

    }
}
Copy
resources:
  testIpSecConnection:
    type: oci:Core:Ipsec
    name: test_ip_sec_connection
    properties:
      compartmentId: ${compartmentId}
      cpeId: ${testCpe.id}
      drgId: ${testDrg.id}
      staticRoutes: ${ipSecConnectionStaticRoutes}
      cpeLocalIdentifier: ${ipSecConnectionCpeLocalIdentifier}
      cpeLocalIdentifierType: ${ipSecConnectionCpeLocalIdentifierType}
      definedTags:
        Operations.CostCenter: '42'
      displayName: ${ipSecConnectionDisplayName}
      freeformTags:
        Department: Finance
  testIpSecConnectionOverFc:
    type: oci:Core:Ipsec
    name: test_ip_sec_connection_over_fc
    properties:
      compartmentId: ${compartmentId}
      cpeId: ${testCpe.id}
      drgId: ${testDrg.id}
      staticRoutes: ${ipSecConnectionStaticRoutes}
      cpeLocalIdentifier: ${ipSecConnectionCpeLocalIdentifier}
      cpeLocalIdentifierType: ${ipSecConnectionCpeLocalIdentifierType}
      definedTags:
        Operations.CostCenter: '42'
      displayName: ${ipSecConnectionDisplayName}
      freeformTags:
        Department: Finance
      tunnelConfigurations:
        - oracleTunnelIp: 10.1.5.5
          associatedVirtualCircuits:
            - ${testIpsecOverFcVirtualCircuit.id}
          drgRouteTableId: ${testDrgIpsecOverFcRouteTable.id}
        - oracleTunnelIp: 10.1.7.7
          associatedVirtualCircuits:
            - ${testIpsecOverFcVirtualCircuit.id}
          drgRouteTableId: ${testDrgIpsecOverFcRouteTable.id}
Copy

Create Ipsec Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Ipsec(name: string, args: IpsecArgs, opts?: CustomResourceOptions);
@overload
def Ipsec(resource_name: str,
          args: IpsecArgs,
          opts: Optional[ResourceOptions] = None)

@overload
def Ipsec(resource_name: str,
          opts: Optional[ResourceOptions] = None,
          compartment_id: Optional[str] = None,
          cpe_id: Optional[str] = None,
          drg_id: Optional[str] = None,
          static_routes: Optional[Sequence[str]] = None,
          cpe_local_identifier: Optional[str] = None,
          cpe_local_identifier_type: Optional[str] = None,
          defined_tags: Optional[Mapping[str, str]] = None,
          display_name: Optional[str] = None,
          freeform_tags: Optional[Mapping[str, str]] = None,
          tunnel_configurations: Optional[Sequence[_core.IpsecTunnelConfigurationArgs]] = None)
func NewIpsec(ctx *Context, name string, args IpsecArgs, opts ...ResourceOption) (*Ipsec, error)
public Ipsec(string name, IpsecArgs args, CustomResourceOptions? opts = null)
public Ipsec(String name, IpsecArgs args)
public Ipsec(String name, IpsecArgs args, CustomResourceOptions options)
type: oci:Core:Ipsec
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. IpsecArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. IpsecArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. IpsecArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. IpsecArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. IpsecArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var ipsecResource = new Oci.Core.Ipsec("ipsecResource", new()
{
    CompartmentId = "string",
    CpeId = "string",
    DrgId = "string",
    StaticRoutes = new[]
    {
        "string",
    },
    CpeLocalIdentifier = "string",
    CpeLocalIdentifierType = "string",
    DefinedTags = 
    {
        { "string", "string" },
    },
    DisplayName = "string",
    FreeformTags = 
    {
        { "string", "string" },
    },
    TunnelConfigurations = new[]
    {
        new Oci.Core.Inputs.IpsecTunnelConfigurationArgs
        {
            AssociatedVirtualCircuits = new[]
            {
                "string",
            },
            DrgRouteTableId = "string",
            OracleTunnelIp = "string",
        },
    },
});
Copy
example, err := Core.NewIpsec(ctx, "ipsecResource", &Core.IpsecArgs{
	CompartmentId: pulumi.String("string"),
	CpeId:         pulumi.String("string"),
	DrgId:         pulumi.String("string"),
	StaticRoutes: pulumi.StringArray{
		pulumi.String("string"),
	},
	CpeLocalIdentifier:     pulumi.String("string"),
	CpeLocalIdentifierType: pulumi.String("string"),
	DefinedTags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	DisplayName: pulumi.String("string"),
	FreeformTags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	TunnelConfigurations: core.IpsecTunnelConfigurationArray{
		&core.IpsecTunnelConfigurationArgs{
			AssociatedVirtualCircuits: pulumi.StringArray{
				pulumi.String("string"),
			},
			DrgRouteTableId: pulumi.String("string"),
			OracleTunnelIp:  pulumi.String("string"),
		},
	},
})
Copy
var ipsecResource = new Ipsec("ipsecResource", IpsecArgs.builder()
    .compartmentId("string")
    .cpeId("string")
    .drgId("string")
    .staticRoutes("string")
    .cpeLocalIdentifier("string")
    .cpeLocalIdentifierType("string")
    .definedTags(Map.of("string", "string"))
    .displayName("string")
    .freeformTags(Map.of("string", "string"))
    .tunnelConfigurations(IpsecTunnelConfigurationArgs.builder()
        .associatedVirtualCircuits("string")
        .drgRouteTableId("string")
        .oracleTunnelIp("string")
        .build())
    .build());
Copy
ipsec_resource = oci.core.Ipsec("ipsecResource",
    compartment_id="string",
    cpe_id="string",
    drg_id="string",
    static_routes=["string"],
    cpe_local_identifier="string",
    cpe_local_identifier_type="string",
    defined_tags={
        "string": "string",
    },
    display_name="string",
    freeform_tags={
        "string": "string",
    },
    tunnel_configurations=[{
        "associated_virtual_circuits": ["string"],
        "drg_route_table_id": "string",
        "oracle_tunnel_ip": "string",
    }])
Copy
const ipsecResource = new oci.core.Ipsec("ipsecResource", {
    compartmentId: "string",
    cpeId: "string",
    drgId: "string",
    staticRoutes: ["string"],
    cpeLocalIdentifier: "string",
    cpeLocalIdentifierType: "string",
    definedTags: {
        string: "string",
    },
    displayName: "string",
    freeformTags: {
        string: "string",
    },
    tunnelConfigurations: [{
        associatedVirtualCircuits: ["string"],
        drgRouteTableId: "string",
        oracleTunnelIp: "string",
    }],
});
Copy
type: oci:Core:Ipsec
properties:
    compartmentId: string
    cpeId: string
    cpeLocalIdentifier: string
    cpeLocalIdentifierType: string
    definedTags:
        string: string
    displayName: string
    drgId: string
    freeformTags:
        string: string
    staticRoutes:
        - string
    tunnelConfigurations:
        - associatedVirtualCircuits:
            - string
          drgRouteTableId: string
          oracleTunnelIp: string
Copy

Ipsec Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Ipsec resource accepts the following input properties:

CompartmentId This property is required. string
(Updatable) The OCID of the compartment to contain the IPSec connection.
CpeId
This property is required.
Changes to this property will trigger replacement.
string
The OCID of the Cpe object.
DrgId
This property is required.
Changes to this property will trigger replacement.
string
The OCID of the DRG.
StaticRoutes This property is required. List<string>

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

CpeLocalIdentifier string

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

CpeLocalIdentifierType string
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
DefinedTags Dictionary<string, string>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
DisplayName string
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
FreeformTags Dictionary<string, string>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
TunnelConfigurations List<IpsecTunnelConfiguration>

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

CompartmentId This property is required. string
(Updatable) The OCID of the compartment to contain the IPSec connection.
CpeId
This property is required.
Changes to this property will trigger replacement.
string
The OCID of the Cpe object.
DrgId
This property is required.
Changes to this property will trigger replacement.
string
The OCID of the DRG.
StaticRoutes This property is required. []string

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

CpeLocalIdentifier string

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

CpeLocalIdentifierType string
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
DefinedTags map[string]string
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
DisplayName string
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
FreeformTags map[string]string
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
TunnelConfigurations []IpsecTunnelConfigurationArgs

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

compartmentId This property is required. String
(Updatable) The OCID of the compartment to contain the IPSec connection.
cpeId
This property is required.
Changes to this property will trigger replacement.
String
The OCID of the Cpe object.
drgId
This property is required.
Changes to this property will trigger replacement.
String
The OCID of the DRG.
staticRoutes This property is required. List<String>

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

cpeLocalIdentifier String

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

cpeLocalIdentifierType String
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
definedTags Map<String,String>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
displayName String
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
freeformTags Map<String,String>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
tunnelConfigurations List<IpsecTunnelConfiguration>

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

compartmentId This property is required. string
(Updatable) The OCID of the compartment to contain the IPSec connection.
cpeId
This property is required.
Changes to this property will trigger replacement.
string
The OCID of the Cpe object.
drgId
This property is required.
Changes to this property will trigger replacement.
string
The OCID of the DRG.
staticRoutes This property is required. string[]

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

cpeLocalIdentifier string

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

cpeLocalIdentifierType string
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
definedTags {[key: string]: string}
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
displayName string
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
freeformTags {[key: string]: string}
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
tunnelConfigurations IpsecTunnelConfiguration[]

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

compartment_id This property is required. str
(Updatable) The OCID of the compartment to contain the IPSec connection.
cpe_id
This property is required.
Changes to this property will trigger replacement.
str
The OCID of the Cpe object.
drg_id
This property is required.
Changes to this property will trigger replacement.
str
The OCID of the DRG.
static_routes This property is required. Sequence[str]

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

cpe_local_identifier str

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

cpe_local_identifier_type str
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
defined_tags Mapping[str, str]
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
display_name str
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
freeform_tags Mapping[str, str]
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
tunnel_configurations Sequence[core.IpsecTunnelConfigurationArgs]

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

compartmentId This property is required. String
(Updatable) The OCID of the compartment to contain the IPSec connection.
cpeId
This property is required.
Changes to this property will trigger replacement.
String
The OCID of the Cpe object.
drgId
This property is required.
Changes to this property will trigger replacement.
String
The OCID of the DRG.
staticRoutes This property is required. List<String>

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

cpeLocalIdentifier String

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

cpeLocalIdentifierType String
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
definedTags Map<String>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
displayName String
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
freeformTags Map<String>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
tunnelConfigurations List<Property Map>

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Outputs

All input properties are implicitly available as output properties. Additionally, the Ipsec resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
State string
The IPSec connection's current state.
TimeCreated string
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
TransportType string
The transport type used for the IPSec connection.
Id string
The provider-assigned unique ID for this managed resource.
State string
The IPSec connection's current state.
TimeCreated string
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
TransportType string
The transport type used for the IPSec connection.
id String
The provider-assigned unique ID for this managed resource.
state String
The IPSec connection's current state.
timeCreated String
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
transportType String
The transport type used for the IPSec connection.
id string
The provider-assigned unique ID for this managed resource.
state string
The IPSec connection's current state.
timeCreated string
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
transportType string
The transport type used for the IPSec connection.
id str
The provider-assigned unique ID for this managed resource.
state str
The IPSec connection's current state.
time_created str
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
transport_type str
The transport type used for the IPSec connection.
id String
The provider-assigned unique ID for this managed resource.
state String
The IPSec connection's current state.
timeCreated String
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
transportType String
The transport type used for the IPSec connection.

Look up Existing Ipsec Resource

Get an existing Ipsec resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: IpsecState, opts?: CustomResourceOptions): Ipsec
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        compartment_id: Optional[str] = None,
        cpe_id: Optional[str] = None,
        cpe_local_identifier: Optional[str] = None,
        cpe_local_identifier_type: Optional[str] = None,
        defined_tags: Optional[Mapping[str, str]] = None,
        display_name: Optional[str] = None,
        drg_id: Optional[str] = None,
        freeform_tags: Optional[Mapping[str, str]] = None,
        state: Optional[str] = None,
        static_routes: Optional[Sequence[str]] = None,
        time_created: Optional[str] = None,
        transport_type: Optional[str] = None,
        tunnel_configurations: Optional[Sequence[_core.IpsecTunnelConfigurationArgs]] = None) -> Ipsec
func GetIpsec(ctx *Context, name string, id IDInput, state *IpsecState, opts ...ResourceOption) (*Ipsec, error)
public static Ipsec Get(string name, Input<string> id, IpsecState? state, CustomResourceOptions? opts = null)
public static Ipsec get(String name, Output<String> id, IpsecState state, CustomResourceOptions options)
resources:  _:    type: oci:Core:Ipsec    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
CompartmentId string
(Updatable) The OCID of the compartment to contain the IPSec connection.
CpeId Changes to this property will trigger replacement. string
The OCID of the Cpe object.
CpeLocalIdentifier string

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

CpeLocalIdentifierType string
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
DefinedTags Dictionary<string, string>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
DisplayName string
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
DrgId Changes to this property will trigger replacement. string
The OCID of the DRG.
FreeformTags Dictionary<string, string>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
State string
The IPSec connection's current state.
StaticRoutes List<string>

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

TimeCreated string
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
TransportType string
The transport type used for the IPSec connection.
TunnelConfigurations List<IpsecTunnelConfiguration>

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

CompartmentId string
(Updatable) The OCID of the compartment to contain the IPSec connection.
CpeId Changes to this property will trigger replacement. string
The OCID of the Cpe object.
CpeLocalIdentifier string

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

CpeLocalIdentifierType string
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
DefinedTags map[string]string
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
DisplayName string
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
DrgId Changes to this property will trigger replacement. string
The OCID of the DRG.
FreeformTags map[string]string
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
State string
The IPSec connection's current state.
StaticRoutes []string

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

TimeCreated string
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
TransportType string
The transport type used for the IPSec connection.
TunnelConfigurations []IpsecTunnelConfigurationArgs

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

compartmentId String
(Updatable) The OCID of the compartment to contain the IPSec connection.
cpeId Changes to this property will trigger replacement. String
The OCID of the Cpe object.
cpeLocalIdentifier String

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

cpeLocalIdentifierType String
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
definedTags Map<String,String>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
displayName String
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
drgId Changes to this property will trigger replacement. String
The OCID of the DRG.
freeformTags Map<String,String>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
state String
The IPSec connection's current state.
staticRoutes List<String>

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

timeCreated String
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
transportType String
The transport type used for the IPSec connection.
tunnelConfigurations List<IpsecTunnelConfiguration>

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

compartmentId string
(Updatable) The OCID of the compartment to contain the IPSec connection.
cpeId Changes to this property will trigger replacement. string
The OCID of the Cpe object.
cpeLocalIdentifier string

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

cpeLocalIdentifierType string
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
definedTags {[key: string]: string}
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
displayName string
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
drgId Changes to this property will trigger replacement. string
The OCID of the DRG.
freeformTags {[key: string]: string}
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
state string
The IPSec connection's current state.
staticRoutes string[]

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

timeCreated string
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
transportType string
The transport type used for the IPSec connection.
tunnelConfigurations IpsecTunnelConfiguration[]

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

compartment_id str
(Updatable) The OCID of the compartment to contain the IPSec connection.
cpe_id Changes to this property will trigger replacement. str
The OCID of the Cpe object.
cpe_local_identifier str

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

cpe_local_identifier_type str
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
defined_tags Mapping[str, str]
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
display_name str
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
drg_id Changes to this property will trigger replacement. str
The OCID of the DRG.
freeform_tags Mapping[str, str]
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
state str
The IPSec connection's current state.
static_routes Sequence[str]

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

time_created str
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
transport_type str
The transport type used for the IPSec connection.
tunnel_configurations Sequence[core.IpsecTunnelConfigurationArgs]

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

compartmentId String
(Updatable) The OCID of the compartment to contain the IPSec connection.
cpeId Changes to this property will trigger replacement. String
The OCID of the Cpe object.
cpeLocalIdentifier String

(Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for cpeLocalIdentifierType.

If you don't provide a value, the ipAddress attribute for the Cpe object specified by cpeId is used as the cpeLocalIdentifier.

For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device.

Example IP address: 10.0.3.3

Example hostname: cpe.example.com

cpeLocalIdentifierType String
(Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
definedTags Map<String>
(Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
displayName String
(Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
drgId Changes to this property will trigger replacement. String
The OCID of the DRG.
freeformTags Map<String>
(Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
state String
The IPSec connection's current state.
staticRoutes List<String>

(Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address.

Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection.

Example: 10.0.1.0/24

timeCreated String
The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
transportType String
The transport type used for the IPSec connection.
tunnelConfigurations List<Property Map>

(Non-updatable) Tunnel configuration for private ipsec connection over fastconnect.

Example: tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }

** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Supporting Types

IpsecTunnelConfiguration
, IpsecTunnelConfigurationArgs

Import

IpSecConnections can be imported using the id, e.g.

$ pulumi import oci:Core/ipsec:Ipsec test_ip_sec_connection "id"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
oci pulumi/pulumi-oci
License
Apache-2.0
Notes
This Pulumi package is based on the oci Terraform Provider.