oci.Core.Ipsec
Explore with Pulumi AI
This resource provides the Ip Sec Connection resource in Oracle Cloud Infrastructure Core service.
Creates a new IPSec connection between the specified DRG and CPE with two default static tunnels. For more information, see Site-to-Site VPN Overview.
For the purposes of access control, you must provide the OCID of the compartment where you want the IPSec connection to reside. Notice that the IPSec connection doesn’t have to be in the same compartment as the DRG, CPE, or other Networking Service components. If you’re not sure which compartment to use, put the IPSec connection in the same compartment as the DRG. For more information about compartments and access control, see Overview of the IAM Service.
You may optionally specify a display name for the IPSec connection, otherwise a default is provided. It does not have to be unique, and you can change it. Avoid entering confidential information.
After creating the IPSec connection, you need to configure your on-premises router with tunnel-specific information. For tunnel status and the required configuration information, see:
To configure tunnel-specific information, use oci.Core.IpsecConnectionTunnelManagement to update the tunnels. If
you configure at least one tunnel to use static routing, then in the oci.Core.Ipsec request you must provide
at least one valid static route (you’re allowed a maximum of 10). For example: 10.0.0.0/16.
If you configure both tunnels to use BGP dynamic routing, the static routes will be ignored. However, you must provide a
static route in oci.Core.Ipsec even if you plan to use BGP routing because it defaults to two static tunnels. For more
information, see the important note in IPSecConnection.
For each tunnel, you need the IP address of Oracle’s VPN headend and the shared secret (that is, the pre-shared key). For more information, see CPE Configuration.
To configure tunnel-specific information for private ipsec connection over fastconnect, use attribute tunnel_configuration.
You can provide configuration for maximum of 2 tunnels. You can configure each tunnel with oracle_tunnel_ip,
associated_virtual_circuits and drg_route_table_id at time of creation. These attributes cannot be updated using IPSec
connection APIs. To update drg route table id, use oci.Core.DrgAttachmentManagement resource to update.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";
const testIpSecConnection = new oci.core.Ipsec("test_ip_sec_connection", {
    compartmentId: compartmentId,
    cpeId: testCpe.id,
    drgId: testDrg.id,
    staticRoutes: ipSecConnectionStaticRoutes,
    cpeLocalIdentifier: ipSecConnectionCpeLocalIdentifier,
    cpeLocalIdentifierType: ipSecConnectionCpeLocalIdentifierType,
    definedTags: {
        "Operations.CostCenter": "42",
    },
    displayName: ipSecConnectionDisplayName,
    freeformTags: {
        Department: "Finance",
    },
});
const testIpSecConnectionOverFc = new oci.core.Ipsec("test_ip_sec_connection_over_fc", {
    compartmentId: compartmentId,
    cpeId: testCpe.id,
    drgId: testDrg.id,
    staticRoutes: ipSecConnectionStaticRoutes,
    cpeLocalIdentifier: ipSecConnectionCpeLocalIdentifier,
    cpeLocalIdentifierType: ipSecConnectionCpeLocalIdentifierType,
    definedTags: {
        "Operations.CostCenter": "42",
    },
    displayName: ipSecConnectionDisplayName,
    freeformTags: {
        Department: "Finance",
    },
    tunnelConfigurations: [
        {
            oracleTunnelIp: "10.1.5.5",
            associatedVirtualCircuits: [testIpsecOverFcVirtualCircuit.id],
            drgRouteTableId: testDrgIpsecOverFcRouteTable.id,
        },
        {
            oracleTunnelIp: "10.1.7.7",
            associatedVirtualCircuits: [testIpsecOverFcVirtualCircuit.id],
            drgRouteTableId: testDrgIpsecOverFcRouteTable.id,
        },
    ],
});
import pulumi
import pulumi_oci as oci
test_ip_sec_connection = oci.core.Ipsec("test_ip_sec_connection",
    compartment_id=compartment_id,
    cpe_id=test_cpe["id"],
    drg_id=test_drg["id"],
    static_routes=ip_sec_connection_static_routes,
    cpe_local_identifier=ip_sec_connection_cpe_local_identifier,
    cpe_local_identifier_type=ip_sec_connection_cpe_local_identifier_type,
    defined_tags={
        "Operations.CostCenter": "42",
    },
    display_name=ip_sec_connection_display_name,
    freeform_tags={
        "Department": "Finance",
    })
test_ip_sec_connection_over_fc = oci.core.Ipsec("test_ip_sec_connection_over_fc",
    compartment_id=compartment_id,
    cpe_id=test_cpe["id"],
    drg_id=test_drg["id"],
    static_routes=ip_sec_connection_static_routes,
    cpe_local_identifier=ip_sec_connection_cpe_local_identifier,
    cpe_local_identifier_type=ip_sec_connection_cpe_local_identifier_type,
    defined_tags={
        "Operations.CostCenter": "42",
    },
    display_name=ip_sec_connection_display_name,
    freeform_tags={
        "Department": "Finance",
    },
    tunnel_configurations=[
        {
            "oracle_tunnel_ip": "10.1.5.5",
            "associated_virtual_circuits": [test_ipsec_over_fc_virtual_circuit["id"]],
            "drg_route_table_id": test_drg_ipsec_over_fc_route_table["id"],
        },
        {
            "oracle_tunnel_ip": "10.1.7.7",
            "associated_virtual_circuits": [test_ipsec_over_fc_virtual_circuit["id"]],
            "drg_route_table_id": test_drg_ipsec_over_fc_route_table["id"],
        },
    ])
package main
import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/core"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := core.NewIpsec(ctx, "test_ip_sec_connection", &core.IpsecArgs{
			CompartmentId:          pulumi.Any(compartmentId),
			CpeId:                  pulumi.Any(testCpe.Id),
			DrgId:                  pulumi.Any(testDrg.Id),
			StaticRoutes:           pulumi.Any(ipSecConnectionStaticRoutes),
			CpeLocalIdentifier:     pulumi.Any(ipSecConnectionCpeLocalIdentifier),
			CpeLocalIdentifierType: pulumi.Any(ipSecConnectionCpeLocalIdentifierType),
			DefinedTags: pulumi.StringMap{
				"Operations.CostCenter": pulumi.String("42"),
			},
			DisplayName: pulumi.Any(ipSecConnectionDisplayName),
			FreeformTags: pulumi.StringMap{
				"Department": pulumi.String("Finance"),
			},
		})
		if err != nil {
			return err
		}
		_, err = core.NewIpsec(ctx, "test_ip_sec_connection_over_fc", &core.IpsecArgs{
			CompartmentId:          pulumi.Any(compartmentId),
			CpeId:                  pulumi.Any(testCpe.Id),
			DrgId:                  pulumi.Any(testDrg.Id),
			StaticRoutes:           pulumi.Any(ipSecConnectionStaticRoutes),
			CpeLocalIdentifier:     pulumi.Any(ipSecConnectionCpeLocalIdentifier),
			CpeLocalIdentifierType: pulumi.Any(ipSecConnectionCpeLocalIdentifierType),
			DefinedTags: pulumi.StringMap{
				"Operations.CostCenter": pulumi.String("42"),
			},
			DisplayName: pulumi.Any(ipSecConnectionDisplayName),
			FreeformTags: pulumi.StringMap{
				"Department": pulumi.String("Finance"),
			},
			TunnelConfigurations: core.IpsecTunnelConfigurationArray{
				&core.IpsecTunnelConfigurationArgs{
					OracleTunnelIp: pulumi.String("10.1.5.5"),
					AssociatedVirtualCircuits: pulumi.StringArray{
						testIpsecOverFcVirtualCircuit.Id,
					},
					DrgRouteTableId: pulumi.Any(testDrgIpsecOverFcRouteTable.Id),
				},
				&core.IpsecTunnelConfigurationArgs{
					OracleTunnelIp: pulumi.String("10.1.7.7"),
					AssociatedVirtualCircuits: pulumi.StringArray{
						testIpsecOverFcVirtualCircuit.Id,
					},
					DrgRouteTableId: pulumi.Any(testDrgIpsecOverFcRouteTable.Id),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;
return await Deployment.RunAsync(() => 
{
    var testIpSecConnection = new Oci.Core.Ipsec("test_ip_sec_connection", new()
    {
        CompartmentId = compartmentId,
        CpeId = testCpe.Id,
        DrgId = testDrg.Id,
        StaticRoutes = ipSecConnectionStaticRoutes,
        CpeLocalIdentifier = ipSecConnectionCpeLocalIdentifier,
        CpeLocalIdentifierType = ipSecConnectionCpeLocalIdentifierType,
        DefinedTags = 
        {
            { "Operations.CostCenter", "42" },
        },
        DisplayName = ipSecConnectionDisplayName,
        FreeformTags = 
        {
            { "Department", "Finance" },
        },
    });
    var testIpSecConnectionOverFc = new Oci.Core.Ipsec("test_ip_sec_connection_over_fc", new()
    {
        CompartmentId = compartmentId,
        CpeId = testCpe.Id,
        DrgId = testDrg.Id,
        StaticRoutes = ipSecConnectionStaticRoutes,
        CpeLocalIdentifier = ipSecConnectionCpeLocalIdentifier,
        CpeLocalIdentifierType = ipSecConnectionCpeLocalIdentifierType,
        DefinedTags = 
        {
            { "Operations.CostCenter", "42" },
        },
        DisplayName = ipSecConnectionDisplayName,
        FreeformTags = 
        {
            { "Department", "Finance" },
        },
        TunnelConfigurations = new[]
        {
            new Oci.Core.Inputs.IpsecTunnelConfigurationArgs
            {
                OracleTunnelIp = "10.1.5.5",
                AssociatedVirtualCircuits = new[]
                {
                    testIpsecOverFcVirtualCircuit.Id,
                },
                DrgRouteTableId = testDrgIpsecOverFcRouteTable.Id,
            },
            new Oci.Core.Inputs.IpsecTunnelConfigurationArgs
            {
                OracleTunnelIp = "10.1.7.7",
                AssociatedVirtualCircuits = new[]
                {
                    testIpsecOverFcVirtualCircuit.Id,
                },
                DrgRouteTableId = testDrgIpsecOverFcRouteTable.Id,
            },
        },
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Core.Ipsec;
import com.pulumi.oci.Core.IpsecArgs;
import com.pulumi.oci.Core.inputs.IpsecTunnelConfigurationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var testIpSecConnection = new Ipsec("testIpSecConnection", IpsecArgs.builder()
            .compartmentId(compartmentId)
            .cpeId(testCpe.id())
            .drgId(testDrg.id())
            .staticRoutes(ipSecConnectionStaticRoutes)
            .cpeLocalIdentifier(ipSecConnectionCpeLocalIdentifier)
            .cpeLocalIdentifierType(ipSecConnectionCpeLocalIdentifierType)
            .definedTags(Map.of("Operations.CostCenter", "42"))
            .displayName(ipSecConnectionDisplayName)
            .freeformTags(Map.of("Department", "Finance"))
            .build());
        var testIpSecConnectionOverFc = new Ipsec("testIpSecConnectionOverFc", IpsecArgs.builder()
            .compartmentId(compartmentId)
            .cpeId(testCpe.id())
            .drgId(testDrg.id())
            .staticRoutes(ipSecConnectionStaticRoutes)
            .cpeLocalIdentifier(ipSecConnectionCpeLocalIdentifier)
            .cpeLocalIdentifierType(ipSecConnectionCpeLocalIdentifierType)
            .definedTags(Map.of("Operations.CostCenter", "42"))
            .displayName(ipSecConnectionDisplayName)
            .freeformTags(Map.of("Department", "Finance"))
            .tunnelConfigurations(            
                IpsecTunnelConfigurationArgs.builder()
                    .oracleTunnelIp("10.1.5.5")
                    .associatedVirtualCircuits(testIpsecOverFcVirtualCircuit.id())
                    .drgRouteTableId(testDrgIpsecOverFcRouteTable.id())
                    .build(),
                IpsecTunnelConfigurationArgs.builder()
                    .oracleTunnelIp("10.1.7.7")
                    .associatedVirtualCircuits(testIpsecOverFcVirtualCircuit.id())
                    .drgRouteTableId(testDrgIpsecOverFcRouteTable.id())
                    .build())
            .build());
    }
}
resources:
  testIpSecConnection:
    type: oci:Core:Ipsec
    name: test_ip_sec_connection
    properties:
      compartmentId: ${compartmentId}
      cpeId: ${testCpe.id}
      drgId: ${testDrg.id}
      staticRoutes: ${ipSecConnectionStaticRoutes}
      cpeLocalIdentifier: ${ipSecConnectionCpeLocalIdentifier}
      cpeLocalIdentifierType: ${ipSecConnectionCpeLocalIdentifierType}
      definedTags:
        Operations.CostCenter: '42'
      displayName: ${ipSecConnectionDisplayName}
      freeformTags:
        Department: Finance
  testIpSecConnectionOverFc:
    type: oci:Core:Ipsec
    name: test_ip_sec_connection_over_fc
    properties:
      compartmentId: ${compartmentId}
      cpeId: ${testCpe.id}
      drgId: ${testDrg.id}
      staticRoutes: ${ipSecConnectionStaticRoutes}
      cpeLocalIdentifier: ${ipSecConnectionCpeLocalIdentifier}
      cpeLocalIdentifierType: ${ipSecConnectionCpeLocalIdentifierType}
      definedTags:
        Operations.CostCenter: '42'
      displayName: ${ipSecConnectionDisplayName}
      freeformTags:
        Department: Finance
      tunnelConfigurations:
        - oracleTunnelIp: 10.1.5.5
          associatedVirtualCircuits:
            - ${testIpsecOverFcVirtualCircuit.id}
          drgRouteTableId: ${testDrgIpsecOverFcRouteTable.id}
        - oracleTunnelIp: 10.1.7.7
          associatedVirtualCircuits:
            - ${testIpsecOverFcVirtualCircuit.id}
          drgRouteTableId: ${testDrgIpsecOverFcRouteTable.id}
Create Ipsec Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Ipsec(name: string, args: IpsecArgs, opts?: CustomResourceOptions);@overload
def Ipsec(resource_name: str,
          args: IpsecArgs,
          opts: Optional[ResourceOptions] = None)
@overload
def Ipsec(resource_name: str,
          opts: Optional[ResourceOptions] = None,
          compartment_id: Optional[str] = None,
          cpe_id: Optional[str] = None,
          drg_id: Optional[str] = None,
          static_routes: Optional[Sequence[str]] = None,
          cpe_local_identifier: Optional[str] = None,
          cpe_local_identifier_type: Optional[str] = None,
          defined_tags: Optional[Mapping[str, str]] = None,
          display_name: Optional[str] = None,
          freeform_tags: Optional[Mapping[str, str]] = None,
          tunnel_configurations: Optional[Sequence[IpsecTunnelConfigurationArgs]] = None)func NewIpsec(ctx *Context, name string, args IpsecArgs, opts ...ResourceOption) (*Ipsec, error)public Ipsec(string name, IpsecArgs args, CustomResourceOptions? opts = null)type: oci:Core:Ipsec
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args IpsecArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args IpsecArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args IpsecArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args IpsecArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args IpsecArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var ipsecResource = new Oci.Core.Ipsec("ipsecResource", new()
{
    CompartmentId = "string",
    CpeId = "string",
    DrgId = "string",
    StaticRoutes = new[]
    {
        "string",
    },
    CpeLocalIdentifier = "string",
    CpeLocalIdentifierType = "string",
    DefinedTags = 
    {
        { "string", "string" },
    },
    DisplayName = "string",
    FreeformTags = 
    {
        { "string", "string" },
    },
    TunnelConfigurations = new[]
    {
        new Oci.Core.Inputs.IpsecTunnelConfigurationArgs
        {
            AssociatedVirtualCircuits = new[]
            {
                "string",
            },
            DrgRouteTableId = "string",
            OracleTunnelIp = "string",
        },
    },
});
example, err := core.NewIpsec(ctx, "ipsecResource", &core.IpsecArgs{
	CompartmentId: pulumi.String("string"),
	CpeId:         pulumi.String("string"),
	DrgId:         pulumi.String("string"),
	StaticRoutes: pulumi.StringArray{
		pulumi.String("string"),
	},
	CpeLocalIdentifier:     pulumi.String("string"),
	CpeLocalIdentifierType: pulumi.String("string"),
	DefinedTags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	DisplayName: pulumi.String("string"),
	FreeformTags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	TunnelConfigurations: core.IpsecTunnelConfigurationArray{
		&core.IpsecTunnelConfigurationArgs{
			AssociatedVirtualCircuits: pulumi.StringArray{
				pulumi.String("string"),
			},
			DrgRouteTableId: pulumi.String("string"),
			OracleTunnelIp:  pulumi.String("string"),
		},
	},
})
var ipsecResource = new Ipsec("ipsecResource", IpsecArgs.builder()
    .compartmentId("string")
    .cpeId("string")
    .drgId("string")
    .staticRoutes("string")
    .cpeLocalIdentifier("string")
    .cpeLocalIdentifierType("string")
    .definedTags(Map.of("string", "string"))
    .displayName("string")
    .freeformTags(Map.of("string", "string"))
    .tunnelConfigurations(IpsecTunnelConfigurationArgs.builder()
        .associatedVirtualCircuits("string")
        .drgRouteTableId("string")
        .oracleTunnelIp("string")
        .build())
    .build());
ipsec_resource = oci.core.Ipsec("ipsecResource",
    compartment_id="string",
    cpe_id="string",
    drg_id="string",
    static_routes=["string"],
    cpe_local_identifier="string",
    cpe_local_identifier_type="string",
    defined_tags={
        "string": "string",
    },
    display_name="string",
    freeform_tags={
        "string": "string",
    },
    tunnel_configurations=[{
        "associated_virtual_circuits": ["string"],
        "drg_route_table_id": "string",
        "oracle_tunnel_ip": "string",
    }])
const ipsecResource = new oci.core.Ipsec("ipsecResource", {
    compartmentId: "string",
    cpeId: "string",
    drgId: "string",
    staticRoutes: ["string"],
    cpeLocalIdentifier: "string",
    cpeLocalIdentifierType: "string",
    definedTags: {
        string: "string",
    },
    displayName: "string",
    freeformTags: {
        string: "string",
    },
    tunnelConfigurations: [{
        associatedVirtualCircuits: ["string"],
        drgRouteTableId: "string",
        oracleTunnelIp: "string",
    }],
});
type: oci:Core:Ipsec
properties:
    compartmentId: string
    cpeId: string
    cpeLocalIdentifier: string
    cpeLocalIdentifierType: string
    definedTags:
        string: string
    displayName: string
    drgId: string
    freeformTags:
        string: string
    staticRoutes:
        - string
    tunnelConfigurations:
        - associatedVirtualCircuits:
            - string
          drgRouteTableId: string
          oracleTunnelIp: string
Ipsec Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Ipsec resource accepts the following input properties:
- CompartmentId string
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- CpeId string
- The OCID of the Cpe object.
- DrgId string
- The OCID of the DRG.
- StaticRoutes List<string>
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- CpeLocal stringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- CpeLocal stringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- Dictionary<string, string>
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- DisplayName string
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- Dictionary<string, string>
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- TunnelConfigurations List<IpsecTunnel Configuration> 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- CompartmentId string
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- CpeId string
- The OCID of the Cpe object.
- DrgId string
- The OCID of the DRG.
- StaticRoutes []string
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- CpeLocal stringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- CpeLocal stringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- map[string]string
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- DisplayName string
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- map[string]string
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- TunnelConfigurations []IpsecTunnel Configuration Args 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- compartmentId String
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- cpeId String
- The OCID of the Cpe object.
- drgId String
- The OCID of the DRG.
- staticRoutes List<String>
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- cpeLocal StringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- cpeLocal StringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- Map<String,String>
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- displayName String
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- Map<String,String>
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- tunnelConfigurations List<IpsecTunnel Configuration> 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- compartmentId string
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- cpeId string
- The OCID of the Cpe object.
- drgId string
- The OCID of the DRG.
- staticRoutes string[]
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- cpeLocal stringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- cpeLocal stringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- {[key: string]: string}
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- displayName string
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- {[key: string]: string}
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- tunnelConfigurations IpsecTunnel Configuration[] 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- compartment_id str
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- cpe_id str
- The OCID of the Cpe object.
- drg_id str
- The OCID of the DRG.
- static_routes Sequence[str]
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- cpe_local_ stridentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- cpe_local_ stridentifier_ type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- Mapping[str, str]
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- display_name str
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- Mapping[str, str]
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- tunnel_configurations Sequence[IpsecTunnel Configuration Args] 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- compartmentId String
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- cpeId String
- The OCID of the Cpe object.
- drgId String
- The OCID of the DRG.
- staticRoutes List<String>
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- cpeLocal StringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- cpeLocal StringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- Map<String>
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- displayName String
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- Map<String>
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- tunnelConfigurations List<Property Map>
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
Outputs
All input properties are implicitly available as output properties. Additionally, the Ipsec resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- State string
- The IPSec connection's current state.
- TimeCreated string
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- TransportType string
- The transport type used for the IPSec connection.
- Id string
- The provider-assigned unique ID for this managed resource.
- State string
- The IPSec connection's current state.
- TimeCreated string
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- TransportType string
- The transport type used for the IPSec connection.
- id String
- The provider-assigned unique ID for this managed resource.
- state String
- The IPSec connection's current state.
- timeCreated String
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- transportType String
- The transport type used for the IPSec connection.
- id string
- The provider-assigned unique ID for this managed resource.
- state string
- The IPSec connection's current state.
- timeCreated string
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- transportType string
- The transport type used for the IPSec connection.
- id str
- The provider-assigned unique ID for this managed resource.
- state str
- The IPSec connection's current state.
- time_created str
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- transport_type str
- The transport type used for the IPSec connection.
- id String
- The provider-assigned unique ID for this managed resource.
- state String
- The IPSec connection's current state.
- timeCreated String
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- transportType String
- The transport type used for the IPSec connection.
Look up Existing Ipsec Resource
Get an existing Ipsec resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: IpsecState, opts?: CustomResourceOptions): Ipsec@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        compartment_id: Optional[str] = None,
        cpe_id: Optional[str] = None,
        cpe_local_identifier: Optional[str] = None,
        cpe_local_identifier_type: Optional[str] = None,
        defined_tags: Optional[Mapping[str, str]] = None,
        display_name: Optional[str] = None,
        drg_id: Optional[str] = None,
        freeform_tags: Optional[Mapping[str, str]] = None,
        state: Optional[str] = None,
        static_routes: Optional[Sequence[str]] = None,
        time_created: Optional[str] = None,
        transport_type: Optional[str] = None,
        tunnel_configurations: Optional[Sequence[IpsecTunnelConfigurationArgs]] = None) -> Ipsecfunc GetIpsec(ctx *Context, name string, id IDInput, state *IpsecState, opts ...ResourceOption) (*Ipsec, error)public static Ipsec Get(string name, Input<string> id, IpsecState? state, CustomResourceOptions? opts = null)public static Ipsec get(String name, Output<String> id, IpsecState state, CustomResourceOptions options)resources:  _:    type: oci:Core:Ipsec    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- CompartmentId string
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- CpeId string
- The OCID of the Cpe object.
- CpeLocal stringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- CpeLocal stringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- Dictionary<string, string>
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- DisplayName string
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- DrgId string
- The OCID of the DRG.
- Dictionary<string, string>
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- State string
- The IPSec connection's current state.
- StaticRoutes List<string>
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- TimeCreated string
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- TransportType string
- The transport type used for the IPSec connection.
- TunnelConfigurations List<IpsecTunnel Configuration> 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- CompartmentId string
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- CpeId string
- The OCID of the Cpe object.
- CpeLocal stringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- CpeLocal stringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- map[string]string
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- DisplayName string
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- DrgId string
- The OCID of the DRG.
- map[string]string
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- State string
- The IPSec connection's current state.
- StaticRoutes []string
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- TimeCreated string
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- TransportType string
- The transport type used for the IPSec connection.
- TunnelConfigurations []IpsecTunnel Configuration Args 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- compartmentId String
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- cpeId String
- The OCID of the Cpe object.
- cpeLocal StringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- cpeLocal StringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- Map<String,String>
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- displayName String
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- drgId String
- The OCID of the DRG.
- Map<String,String>
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- state String
- The IPSec connection's current state.
- staticRoutes List<String>
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- timeCreated String
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- transportType String
- The transport type used for the IPSec connection.
- tunnelConfigurations List<IpsecTunnel Configuration> 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- compartmentId string
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- cpeId string
- The OCID of the Cpe object.
- cpeLocal stringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- cpeLocal stringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- {[key: string]: string}
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- displayName string
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- drgId string
- The OCID of the DRG.
- {[key: string]: string}
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- state string
- The IPSec connection's current state.
- staticRoutes string[]
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- timeCreated string
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- transportType string
- The transport type used for the IPSec connection.
- tunnelConfigurations IpsecTunnel Configuration[] 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- compartment_id str
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- cpe_id str
- The OCID of the Cpe object.
- cpe_local_ stridentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- cpe_local_ stridentifier_ type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- Mapping[str, str]
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- display_name str
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- drg_id str
- The OCID of the DRG.
- Mapping[str, str]
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- state str
- The IPSec connection's current state.
- static_routes Sequence[str]
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- time_created str
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- transport_type str
- The transport type used for the IPSec connection.
- tunnel_configurations Sequence[IpsecTunnel Configuration Args] 
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
- compartmentId String
- (Updatable) The OCID of the compartment to contain the IPSec connection.
- cpeId String
- The OCID of the Cpe object.
- cpeLocal StringIdentifier 
- (Updatable) Your identifier for your CPE device. Can be either an IP address or a hostname (specifically, the fully qualified domain name (FQDN)). The type of identifier you provide here must correspond to the value for - cpeLocalIdentifierType.- If you don't provide a value, the - ipAddressattribute for the Cpe object specified by- cpeIdis used as the- cpeLocalIdentifier.- For information about why you'd provide this value, see If Your CPE Is Behind a NAT Device. - Example IP address: - 10.0.3.3- Example hostname: - cpe.example.com
- cpeLocal StringIdentifier Type 
- (Updatable) The type of identifier for your CPE device. The value you provide here must correspond to the value for cpeLocalIdentifier.
- Map<String>
- (Updatable) Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
- displayName String
- (Updatable) A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- drgId String
- The OCID of the DRG.
- Map<String>
- (Updatable) Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
- state String
- The IPSec connection's current state.
- staticRoutes List<String>
- (Updatable) Static routes to the CPE. A static route's CIDR must not be a multicast address or class E address. - Used for routing a given IPSec tunnel's traffic only if the tunnel is using static routing. If you configure at least one tunnel to use static routing, then you must provide at least one valid static route. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes on update. For more information, see the important note in IPSecConnection. - Example: - 10.0.1.0/24
- timeCreated String
- The date and time the IPSec connection was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- transportType String
- The transport type used for the IPSec connection.
- tunnelConfigurations List<Property Map>
- (Non-updatable) Tunnel configuration for private ipsec connection over fastconnect. - Example: - tunnel_configuration { oracle_tunnel_ip = "10.1.5.5" associated_virtual_circuits = [oci_core_virtual_circuit.test_ipsec_over_fc_virtual_circuit.id] drg_route_table_id = oci_core_drg_route_table.test_drg_ipsec_over_fc_route_table.id }- ** IMPORTANT ** Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values 
Supporting Types
IpsecTunnelConfiguration, IpsecTunnelConfigurationArgs      
- AssociatedVirtual List<string>Circuits 
- DrgRoute stringTable Id 
- OracleTunnel stringIp 
- AssociatedVirtual []stringCircuits 
- DrgRoute stringTable Id 
- OracleTunnel stringIp 
- associatedVirtual List<String>Circuits 
- drgRoute StringTable Id 
- oracleTunnel StringIp 
- associatedVirtual string[]Circuits 
- drgRoute stringTable Id 
- oracleTunnel stringIp 
- associated_virtual_ Sequence[str]circuits 
- drg_route_ strtable_ id 
- oracle_tunnel_ strip 
- associatedVirtual List<String>Circuits 
- drgRoute StringTable Id 
- oracleTunnel StringIp 
Import
IpSecConnections can be imported using the id, e.g.
$ pulumi import oci:Core/ipsec:Ipsec test_ip_sec_connection "id"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- oci pulumi/pulumi-oci
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the ociTerraform Provider.