aviatrix.AviatrixTransitExternalDeviceConn
Explore with Pulumi AI
Import
transit_external_device_conn can be imported using the connection_name
and vpc_id
, e.g.
$ pulumi import aviatrix:index/aviatrixTransitExternalDeviceConn:AviatrixTransitExternalDeviceConn test connection_name~vpc_id
Create AviatrixTransitExternalDeviceConn Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new AviatrixTransitExternalDeviceConn(name: string, args: AviatrixTransitExternalDeviceConnArgs, opts?: CustomResourceOptions);
@overload
def AviatrixTransitExternalDeviceConn(resource_name: str,
args: AviatrixTransitExternalDeviceConnArgs,
opts: Optional[ResourceOptions] = None)
@overload
def AviatrixTransitExternalDeviceConn(resource_name: str,
opts: Optional[ResourceOptions] = None,
connection_name: Optional[str] = None,
vpc_id: Optional[str] = None,
gw_name: Optional[str] = None,
enable_learned_cidrs_approval: Optional[bool] = None,
bgp_local_as_num: Optional[str] = None,
local_lan_ip: Optional[str] = None,
backup_pre_shared_key: Optional[str] = None,
backup_remote_gateway_ip: Optional[str] = None,
backup_remote_lan_ip: Optional[str] = None,
backup_remote_tunnel_cidr: Optional[str] = None,
ha_enabled: Optional[bool] = None,
bgp_md5_key: Optional[str] = None,
bgp_remote_as_num: Optional[str] = None,
backup_direct_connect: Optional[bool] = None,
connection_type: Optional[str] = None,
backup_bgp_remote_as_num: Optional[str] = None,
direct_connect: Optional[bool] = None,
enable_bgp_lan_activemesh: Optional[bool] = None,
enable_edge_segmentation: Optional[bool] = None,
enable_event_triggered_ha: Optional[bool] = None,
enable_ikev2: Optional[bool] = None,
enable_jumbo_frame: Optional[bool] = None,
approved_cidrs: Optional[Sequence[str]] = None,
custom_algorithms: Optional[bool] = None,
backup_local_lan_ip: Optional[str] = None,
backup_local_tunnel_cidr: Optional[str] = None,
local_tunnel_cidr: Optional[str] = None,
manual_bgp_advertised_cidrs: Optional[Sequence[str]] = None,
phase1_authentication: Optional[str] = None,
phase1_dh_groups: Optional[str] = None,
phase1_encryption: Optional[str] = None,
phase1_remote_identifiers: Optional[Sequence[str]] = None,
phase2_authentication: Optional[str] = None,
phase2_dh_groups: Optional[str] = None,
phase2_encryption: Optional[str] = None,
pre_shared_key: Optional[str] = None,
prepend_as_paths: Optional[Sequence[str]] = None,
remote_gateway_ip: Optional[str] = None,
remote_lan_ip: Optional[str] = None,
remote_subnet: Optional[str] = None,
remote_tunnel_cidr: Optional[str] = None,
remote_vpc_name: Optional[str] = None,
switch_to_ha_standby_gateway: Optional[bool] = None,
tunnel_protocol: Optional[str] = None,
backup_bgp_md5_key: Optional[str] = None)
func NewAviatrixTransitExternalDeviceConn(ctx *Context, name string, args AviatrixTransitExternalDeviceConnArgs, opts ...ResourceOption) (*AviatrixTransitExternalDeviceConn, error)
public AviatrixTransitExternalDeviceConn(string name, AviatrixTransitExternalDeviceConnArgs args, CustomResourceOptions? opts = null)
public AviatrixTransitExternalDeviceConn(String name, AviatrixTransitExternalDeviceConnArgs args)
public AviatrixTransitExternalDeviceConn(String name, AviatrixTransitExternalDeviceConnArgs args, CustomResourceOptions options)
type: aviatrix:AviatrixTransitExternalDeviceConn
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name
This property is required. string - The unique name of the resource.
- args
This property is required. AviatrixTransitExternalDeviceConnArgs - The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name
This property is required. str - The unique name of the resource.
- args
This property is required. AviatrixTransitExternalDeviceConnArgs - The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name
This property is required. string - The unique name of the resource.
- args
This property is required. AviatrixTransitExternalDeviceConnArgs - The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name
This property is required. string - The unique name of the resource.
- args
This property is required. AviatrixTransitExternalDeviceConnArgs - The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name
This property is required. String - The unique name of the resource.
- args
This property is required. AviatrixTransitExternalDeviceConnArgs - The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var aviatrixTransitExternalDeviceConnResource = new Aviatrix.AviatrixTransitExternalDeviceConn("aviatrixTransitExternalDeviceConnResource", new()
{
ConnectionName = "string",
VpcId = "string",
GwName = "string",
EnableLearnedCidrsApproval = false,
BgpLocalAsNum = "string",
LocalLanIp = "string",
BackupPreSharedKey = "string",
BackupRemoteGatewayIp = "string",
BackupRemoteLanIp = "string",
BackupRemoteTunnelCidr = "string",
HaEnabled = false,
BgpMd5Key = "string",
BgpRemoteAsNum = "string",
BackupDirectConnect = false,
ConnectionType = "string",
BackupBgpRemoteAsNum = "string",
DirectConnect = false,
EnableBgpLanActivemesh = false,
EnableEdgeSegmentation = false,
EnableEventTriggeredHa = false,
EnableIkev2 = false,
EnableJumboFrame = false,
ApprovedCidrs = new[]
{
"string",
},
CustomAlgorithms = false,
BackupLocalLanIp = "string",
BackupLocalTunnelCidr = "string",
LocalTunnelCidr = "string",
ManualBgpAdvertisedCidrs = new[]
{
"string",
},
Phase1Authentication = "string",
Phase1DhGroups = "string",
Phase1Encryption = "string",
Phase1RemoteIdentifiers = new[]
{
"string",
},
Phase2Authentication = "string",
Phase2DhGroups = "string",
Phase2Encryption = "string",
PreSharedKey = "string",
PrependAsPaths = new[]
{
"string",
},
RemoteGatewayIp = "string",
RemoteLanIp = "string",
RemoteSubnet = "string",
RemoteTunnelCidr = "string",
RemoteVpcName = "string",
SwitchToHaStandbyGateway = false,
TunnelProtocol = "string",
BackupBgpMd5Key = "string",
});
example, err := aviatrix.NewAviatrixTransitExternalDeviceConn(ctx, "aviatrixTransitExternalDeviceConnResource", &aviatrix.AviatrixTransitExternalDeviceConnArgs{
ConnectionName: pulumi.String("string"),
VpcId: pulumi.String("string"),
GwName: pulumi.String("string"),
EnableLearnedCidrsApproval: pulumi.Bool(false),
BgpLocalAsNum: pulumi.String("string"),
LocalLanIp: pulumi.String("string"),
BackupPreSharedKey: pulumi.String("string"),
BackupRemoteGatewayIp: pulumi.String("string"),
BackupRemoteLanIp: pulumi.String("string"),
BackupRemoteTunnelCidr: pulumi.String("string"),
HaEnabled: pulumi.Bool(false),
BgpMd5Key: pulumi.String("string"),
BgpRemoteAsNum: pulumi.String("string"),
BackupDirectConnect: pulumi.Bool(false),
ConnectionType: pulumi.String("string"),
BackupBgpRemoteAsNum: pulumi.String("string"),
DirectConnect: pulumi.Bool(false),
EnableBgpLanActivemesh: pulumi.Bool(false),
EnableEdgeSegmentation: pulumi.Bool(false),
EnableEventTriggeredHa: pulumi.Bool(false),
EnableIkev2: pulumi.Bool(false),
EnableJumboFrame: pulumi.Bool(false),
ApprovedCidrs: pulumi.StringArray{
pulumi.String("string"),
},
CustomAlgorithms: pulumi.Bool(false),
BackupLocalLanIp: pulumi.String("string"),
BackupLocalTunnelCidr: pulumi.String("string"),
LocalTunnelCidr: pulumi.String("string"),
ManualBgpAdvertisedCidrs: pulumi.StringArray{
pulumi.String("string"),
},
Phase1Authentication: pulumi.String("string"),
Phase1DhGroups: pulumi.String("string"),
Phase1Encryption: pulumi.String("string"),
Phase1RemoteIdentifiers: pulumi.StringArray{
pulumi.String("string"),
},
Phase2Authentication: pulumi.String("string"),
Phase2DhGroups: pulumi.String("string"),
Phase2Encryption: pulumi.String("string"),
PreSharedKey: pulumi.String("string"),
PrependAsPaths: pulumi.StringArray{
pulumi.String("string"),
},
RemoteGatewayIp: pulumi.String("string"),
RemoteLanIp: pulumi.String("string"),
RemoteSubnet: pulumi.String("string"),
RemoteTunnelCidr: pulumi.String("string"),
RemoteVpcName: pulumi.String("string"),
SwitchToHaStandbyGateway: pulumi.Bool(false),
TunnelProtocol: pulumi.String("string"),
BackupBgpMd5Key: pulumi.String("string"),
})
var aviatrixTransitExternalDeviceConnResource = new AviatrixTransitExternalDeviceConn("aviatrixTransitExternalDeviceConnResource", AviatrixTransitExternalDeviceConnArgs.builder()
.connectionName("string")
.vpcId("string")
.gwName("string")
.enableLearnedCidrsApproval(false)
.bgpLocalAsNum("string")
.localLanIp("string")
.backupPreSharedKey("string")
.backupRemoteGatewayIp("string")
.backupRemoteLanIp("string")
.backupRemoteTunnelCidr("string")
.haEnabled(false)
.bgpMd5Key("string")
.bgpRemoteAsNum("string")
.backupDirectConnect(false)
.connectionType("string")
.backupBgpRemoteAsNum("string")
.directConnect(false)
.enableBgpLanActivemesh(false)
.enableEdgeSegmentation(false)
.enableEventTriggeredHa(false)
.enableIkev2(false)
.enableJumboFrame(false)
.approvedCidrs("string")
.customAlgorithms(false)
.backupLocalLanIp("string")
.backupLocalTunnelCidr("string")
.localTunnelCidr("string")
.manualBgpAdvertisedCidrs("string")
.phase1Authentication("string")
.phase1DhGroups("string")
.phase1Encryption("string")
.phase1RemoteIdentifiers("string")
.phase2Authentication("string")
.phase2DhGroups("string")
.phase2Encryption("string")
.preSharedKey("string")
.prependAsPaths("string")
.remoteGatewayIp("string")
.remoteLanIp("string")
.remoteSubnet("string")
.remoteTunnelCidr("string")
.remoteVpcName("string")
.switchToHaStandbyGateway(false)
.tunnelProtocol("string")
.backupBgpMd5Key("string")
.build());
aviatrix_transit_external_device_conn_resource = aviatrix.AviatrixTransitExternalDeviceConn("aviatrixTransitExternalDeviceConnResource",
connection_name="string",
vpc_id="string",
gw_name="string",
enable_learned_cidrs_approval=False,
bgp_local_as_num="string",
local_lan_ip="string",
backup_pre_shared_key="string",
backup_remote_gateway_ip="string",
backup_remote_lan_ip="string",
backup_remote_tunnel_cidr="string",
ha_enabled=False,
bgp_md5_key="string",
bgp_remote_as_num="string",
backup_direct_connect=False,
connection_type="string",
backup_bgp_remote_as_num="string",
direct_connect=False,
enable_bgp_lan_activemesh=False,
enable_edge_segmentation=False,
enable_event_triggered_ha=False,
enable_ikev2=False,
enable_jumbo_frame=False,
approved_cidrs=["string"],
custom_algorithms=False,
backup_local_lan_ip="string",
backup_local_tunnel_cidr="string",
local_tunnel_cidr="string",
manual_bgp_advertised_cidrs=["string"],
phase1_authentication="string",
phase1_dh_groups="string",
phase1_encryption="string",
phase1_remote_identifiers=["string"],
phase2_authentication="string",
phase2_dh_groups="string",
phase2_encryption="string",
pre_shared_key="string",
prepend_as_paths=["string"],
remote_gateway_ip="string",
remote_lan_ip="string",
remote_subnet="string",
remote_tunnel_cidr="string",
remote_vpc_name="string",
switch_to_ha_standby_gateway=False,
tunnel_protocol="string",
backup_bgp_md5_key="string")
const aviatrixTransitExternalDeviceConnResource = new aviatrix.AviatrixTransitExternalDeviceConn("aviatrixTransitExternalDeviceConnResource", {
connectionName: "string",
vpcId: "string",
gwName: "string",
enableLearnedCidrsApproval: false,
bgpLocalAsNum: "string",
localLanIp: "string",
backupPreSharedKey: "string",
backupRemoteGatewayIp: "string",
backupRemoteLanIp: "string",
backupRemoteTunnelCidr: "string",
haEnabled: false,
bgpMd5Key: "string",
bgpRemoteAsNum: "string",
backupDirectConnect: false,
connectionType: "string",
backupBgpRemoteAsNum: "string",
directConnect: false,
enableBgpLanActivemesh: false,
enableEdgeSegmentation: false,
enableEventTriggeredHa: false,
enableIkev2: false,
enableJumboFrame: false,
approvedCidrs: ["string"],
customAlgorithms: false,
backupLocalLanIp: "string",
backupLocalTunnelCidr: "string",
localTunnelCidr: "string",
manualBgpAdvertisedCidrs: ["string"],
phase1Authentication: "string",
phase1DhGroups: "string",
phase1Encryption: "string",
phase1RemoteIdentifiers: ["string"],
phase2Authentication: "string",
phase2DhGroups: "string",
phase2Encryption: "string",
preSharedKey: "string",
prependAsPaths: ["string"],
remoteGatewayIp: "string",
remoteLanIp: "string",
remoteSubnet: "string",
remoteTunnelCidr: "string",
remoteVpcName: "string",
switchToHaStandbyGateway: false,
tunnelProtocol: "string",
backupBgpMd5Key: "string",
});
type: aviatrix:AviatrixTransitExternalDeviceConn
properties:
approvedCidrs:
- string
backupBgpMd5Key: string
backupBgpRemoteAsNum: string
backupDirectConnect: false
backupLocalLanIp: string
backupLocalTunnelCidr: string
backupPreSharedKey: string
backupRemoteGatewayIp: string
backupRemoteLanIp: string
backupRemoteTunnelCidr: string
bgpLocalAsNum: string
bgpMd5Key: string
bgpRemoteAsNum: string
connectionName: string
connectionType: string
customAlgorithms: false
directConnect: false
enableBgpLanActivemesh: false
enableEdgeSegmentation: false
enableEventTriggeredHa: false
enableIkev2: false
enableJumboFrame: false
enableLearnedCidrsApproval: false
gwName: string
haEnabled: false
localLanIp: string
localTunnelCidr: string
manualBgpAdvertisedCidrs:
- string
phase1Authentication: string
phase1DhGroups: string
phase1Encryption: string
phase1RemoteIdentifiers:
- string
phase2Authentication: string
phase2DhGroups: string
phase2Encryption: string
preSharedKey: string
prependAsPaths:
- string
remoteGatewayIp: string
remoteLanIp: string
remoteSubnet: string
remoteTunnelCidr: string
remoteVpcName: string
switchToHaStandbyGateway: false
tunnelProtocol: string
vpcId: string
AviatrixTransitExternalDeviceConn Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The AviatrixTransitExternalDeviceConn resource accepts the following input properties:
- Connection
Name This property is required. Changes to this property will trigger replacement.
- Transit external device connection name.
- Gw
Name This property is required. Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- Vpc
Id This property is required. Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- Approved
Cidrs List<string> - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - Backup
Bgp stringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- Backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- Backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- Backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- Backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- Backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- Backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- Backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- Bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- Bgp
Md5Key string - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- Bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- Connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- Custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- Direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- Enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- Enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- Enable
Event boolTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- Enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- Enable
Jumbo boolFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- Enable
Learned boolCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - Ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- Local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- Local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- Manual
Bgp List<string>Advertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - Phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- Phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- Phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- Phase1Remote
Identifiers List<string> - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- Phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- Phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- Phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- Prepend
As List<string>Paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- Remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - Remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- Remote
Subnet string - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- Remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- Remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - Switch
To boolHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- Tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
- Connection
Name This property is required. Changes to this property will trigger replacement.
- Transit external device connection name.
- Gw
Name This property is required. Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- Vpc
Id This property is required. Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- Approved
Cidrs []string - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - Backup
Bgp stringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- Backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- Backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- Backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- Backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- Backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- Backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- Backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- Bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- Bgp
Md5Key string - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- Bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- Connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- Custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- Direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- Enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- Enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- Enable
Event boolTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- Enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- Enable
Jumbo boolFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- Enable
Learned boolCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - Ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- Local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- Local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- Manual
Bgp []stringAdvertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - Phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- Phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- Phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- Phase1Remote
Identifiers []string - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- Phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- Phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- Phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- Prepend
As []stringPaths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- Remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - Remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- Remote
Subnet string - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- Remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- Remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - Switch
To boolHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- Tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
- connection
Name This property is required. Changes to this property will trigger replacement.
- Transit external device connection name.
- gw
Name This property is required. Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- vpc
Id This property is required. Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- approved
Cidrs List<String> - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - backup
Bgp StringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- bgp
Md5Key String - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- enable
Event BooleanTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- enable
Jumbo BooleanFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- enable
Learned BooleanCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- manual
Bgp List<String>Advertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- phase1Remote
Identifiers List<String> - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- prepend
As List<String>Paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- remote
Subnet String - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - switch
To BooleanHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
- connection
Name This property is required. Changes to this property will trigger replacement.
- Transit external device connection name.
- gw
Name This property is required. Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- vpc
Id This property is required. Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- approved
Cidrs string[] - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - backup
Bgp stringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- bgp
Md5Key string - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- enable
Event booleanTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- enable
Jumbo booleanFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- enable
Learned booleanCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- manual
Bgp string[]Advertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- phase1Remote
Identifiers string[] - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- prepend
As string[]Paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- remote
Subnet string - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - switch
To booleanHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
- connection_
name This property is required. Changes to this property will trigger replacement.
- Transit external device connection name.
- gw_
name This property is required. Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- vpc_
id This property is required. Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- approved_
cidrs Sequence[str] - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - backup_
bgp_ strmd5_ key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- backup_
bgp_ remote_ as_ num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- backup_
direct_ connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- backup_
local_ lan_ ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- backup_
local_ tunnel_ cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- backup_
remote_ gateway_ ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- backup_
remote_ lan_ ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- backup_
remote_ tunnel_ cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- bgp_
local_ as_ num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- bgp_
md5_ strkey - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- bgp_
remote_ as_ num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- connection_
type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- custom_
algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- direct_
connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- enable_
bgp_ lan_ activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- enable_
edge_ segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- enable_
event_ booltriggered_ ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- enable_
ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- enable_
jumbo_ boolframe - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- enable_
learned_ boolcidrs_ approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - ha_
enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- local_
lan_ ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- local_
tunnel_ cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- manual_
bgp_ Sequence[str]advertised_ cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - phase1_
authentication Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- phase1_
dh_ groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase1_
encryption Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- phase1_
remote_ Sequence[str]identifiers - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- phase2_
authentication Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- phase2_
dh_ groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase2_
encryption Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- prepend_
as_ Sequence[str]paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- remote_
gateway_ ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - remote_
lan_ ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- remote_
subnet str - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- remote_
tunnel_ cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- remote_
vpc_ name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - switch_
to_ boolha_ standby_ gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- tunnel_
protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
- connection
Name This property is required. Changes to this property will trigger replacement.
- Transit external device connection name.
- gw
Name This property is required. Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- vpc
Id This property is required. Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- approved
Cidrs List<String> - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - backup
Bgp StringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- bgp
Md5Key String - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- enable
Event BooleanTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- enable
Jumbo BooleanFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- enable
Learned BooleanCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- manual
Bgp List<String>Advertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- phase1Remote
Identifiers List<String> - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- prepend
As List<String>Paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- remote
Subnet String - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - switch
To BooleanHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
Outputs
All input properties are implicitly available as output properties. Additionally, the AviatrixTransitExternalDeviceConn resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing AviatrixTransitExternalDeviceConn Resource
Get an existing AviatrixTransitExternalDeviceConn resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: AviatrixTransitExternalDeviceConnState, opts?: CustomResourceOptions): AviatrixTransitExternalDeviceConn
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
approved_cidrs: Optional[Sequence[str]] = None,
backup_bgp_md5_key: Optional[str] = None,
backup_bgp_remote_as_num: Optional[str] = None,
backup_direct_connect: Optional[bool] = None,
backup_local_lan_ip: Optional[str] = None,
backup_local_tunnel_cidr: Optional[str] = None,
backup_pre_shared_key: Optional[str] = None,
backup_remote_gateway_ip: Optional[str] = None,
backup_remote_lan_ip: Optional[str] = None,
backup_remote_tunnel_cidr: Optional[str] = None,
bgp_local_as_num: Optional[str] = None,
bgp_md5_key: Optional[str] = None,
bgp_remote_as_num: Optional[str] = None,
connection_name: Optional[str] = None,
connection_type: Optional[str] = None,
custom_algorithms: Optional[bool] = None,
direct_connect: Optional[bool] = None,
enable_bgp_lan_activemesh: Optional[bool] = None,
enable_edge_segmentation: Optional[bool] = None,
enable_event_triggered_ha: Optional[bool] = None,
enable_ikev2: Optional[bool] = None,
enable_jumbo_frame: Optional[bool] = None,
enable_learned_cidrs_approval: Optional[bool] = None,
gw_name: Optional[str] = None,
ha_enabled: Optional[bool] = None,
local_lan_ip: Optional[str] = None,
local_tunnel_cidr: Optional[str] = None,
manual_bgp_advertised_cidrs: Optional[Sequence[str]] = None,
phase1_authentication: Optional[str] = None,
phase1_dh_groups: Optional[str] = None,
phase1_encryption: Optional[str] = None,
phase1_remote_identifiers: Optional[Sequence[str]] = None,
phase2_authentication: Optional[str] = None,
phase2_dh_groups: Optional[str] = None,
phase2_encryption: Optional[str] = None,
pre_shared_key: Optional[str] = None,
prepend_as_paths: Optional[Sequence[str]] = None,
remote_gateway_ip: Optional[str] = None,
remote_lan_ip: Optional[str] = None,
remote_subnet: Optional[str] = None,
remote_tunnel_cidr: Optional[str] = None,
remote_vpc_name: Optional[str] = None,
switch_to_ha_standby_gateway: Optional[bool] = None,
tunnel_protocol: Optional[str] = None,
vpc_id: Optional[str] = None) -> AviatrixTransitExternalDeviceConn
func GetAviatrixTransitExternalDeviceConn(ctx *Context, name string, id IDInput, state *AviatrixTransitExternalDeviceConnState, opts ...ResourceOption) (*AviatrixTransitExternalDeviceConn, error)
public static AviatrixTransitExternalDeviceConn Get(string name, Input<string> id, AviatrixTransitExternalDeviceConnState? state, CustomResourceOptions? opts = null)
public static AviatrixTransitExternalDeviceConn get(String name, Output<String> id, AviatrixTransitExternalDeviceConnState state, CustomResourceOptions options)
resources: _: type: aviatrix:AviatrixTransitExternalDeviceConn get: id: ${id}
- name
This property is required. - The unique name of the resulting resource.
- id
This property is required. - The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
This property is required. - The unique name of the resulting resource.
- id
This property is required. - The unique provider ID of the resource to lookup.
- name
This property is required. - The unique name of the resulting resource.
- id
This property is required. - The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
This property is required. - The unique name of the resulting resource.
- id
This property is required. - The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
This property is required. - The unique name of the resulting resource.
- id
This property is required. - The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Approved
Cidrs List<string> - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - Backup
Bgp stringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- Backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- Backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- Backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- Backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- Backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- Backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- Backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- Bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- Bgp
Md5Key string - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- Bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- Connection
Name Changes to this property will trigger replacement.
- Transit external device connection name.
- Connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- Custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- Direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- Enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- Enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- Enable
Event boolTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- Enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- Enable
Jumbo boolFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- Enable
Learned boolCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - Gw
Name Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- Ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- Local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- Local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- Manual
Bgp List<string>Advertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - Phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- Phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- Phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- Phase1Remote
Identifiers List<string> - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- Phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- Phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- Phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- Prepend
As List<string>Paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- Remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - Remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- Remote
Subnet string - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- Remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- Remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - Switch
To boolHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- Tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+. - Vpc
Id Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- Approved
Cidrs []string - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - Backup
Bgp stringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- Backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- Backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- Backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- Backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- Backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- Backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- Backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- Bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- Bgp
Md5Key string - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- Bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- Connection
Name Changes to this property will trigger replacement.
- Transit external device connection name.
- Connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- Custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- Direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- Enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- Enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- Enable
Event boolTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- Enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- Enable
Jumbo boolFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- Enable
Learned boolCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - Gw
Name Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- Ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- Local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- Local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- Manual
Bgp []stringAdvertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - Phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- Phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- Phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- Phase1Remote
Identifiers []string - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- Phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- Phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- Phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- Prepend
As []stringPaths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- Remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - Remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- Remote
Subnet string - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- Remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- Remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - Switch
To boolHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- Tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+. - Vpc
Id Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- approved
Cidrs List<String> - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - backup
Bgp StringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- bgp
Md5Key String - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- connection
Name Changes to this property will trigger replacement.
- Transit external device connection name.
- connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- enable
Event BooleanTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- enable
Jumbo BooleanFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- enable
Learned BooleanCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - gw
Name Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- manual
Bgp List<String>Advertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- phase1Remote
Identifiers List<String> - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- prepend
As List<String>Paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- remote
Subnet String - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - switch
To BooleanHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+. - vpc
Id Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- approved
Cidrs string[] - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - backup
Bgp stringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- bgp
Md5Key string - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- connection
Name Changes to this property will trigger replacement.
- Transit external device connection name.
- connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- enable
Event booleanTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- enable
Jumbo booleanFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- enable
Learned booleanCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - gw
Name Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- manual
Bgp string[]Advertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- phase1Remote
Identifiers string[] - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- prepend
As string[]Paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- remote
Subnet string - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - switch
To booleanHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+. - vpc
Id Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- approved_
cidrs Sequence[str] - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - backup_
bgp_ strmd5_ key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- backup_
bgp_ remote_ as_ num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- backup_
direct_ connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- backup_
local_ lan_ ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- backup_
local_ tunnel_ cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- backup_
remote_ gateway_ ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- backup_
remote_ lan_ ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- backup_
remote_ tunnel_ cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- bgp_
local_ as_ num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- bgp_
md5_ strkey - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- bgp_
remote_ as_ num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- connection_
name Changes to this property will trigger replacement.
- Transit external device connection name.
- connection_
type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- custom_
algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- direct_
connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- enable_
bgp_ lan_ activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- enable_
edge_ segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- enable_
event_ booltriggered_ ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- enable_
ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- enable_
jumbo_ boolframe - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- enable_
learned_ boolcidrs_ approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - gw_
name Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- ha_
enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- local_
lan_ ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- local_
tunnel_ cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- manual_
bgp_ Sequence[str]advertised_ cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - phase1_
authentication Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- phase1_
dh_ groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase1_
encryption Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- phase1_
remote_ Sequence[str]identifiers - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- phase2_
authentication Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- phase2_
dh_ groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase2_
encryption Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- prepend_
as_ Sequence[str]paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- remote_
gateway_ ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - remote_
lan_ ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- remote_
subnet str - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- remote_
tunnel_ cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- remote_
vpc_ name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - switch_
to_ boolha_ standby_ gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- tunnel_
protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+. - vpc_
id Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
- approved
Cidrs List<String> - Set of approved CIDRs. Requires
enable_learned_cidrs_approval
to be true. Type: Set(String). - backup
Bgp StringMd5Key - Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
- backup
Bgp Remote As Num Changes to this property will trigger replacement.
- Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
- backup
Direct Connect Changes to this property will trigger replacement.
- Backup direct connect for backup external device.
- backup
Local Lan Ip Changes to this property will trigger replacement.
- Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
- backup
Local Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the backup Aviatrix transit gateway.
Changes to this property will trigger replacement.
- Backup Pre-Shared Key.
- backup
Remote Gateway Ip Changes to this property will trigger replacement.
- Backup remote gateway IP.
- backup
Remote Lan Ip Changes to this property will trigger replacement.
- Backup Remote LAN IP. Required for HA BGP over LAN connection.
- backup
Remote Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the backup external device.
- bgp
Local As Num Changes to this property will trigger replacement.
- BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- bgp
Md5Key String - BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
- bgp
Remote As Num Changes to this property will trigger replacement.
- BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
- connection
Name Changes to this property will trigger replacement.
- Transit external device connection name.
- connection
Type Changes to this property will trigger replacement.
- Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
- custom
Algorithms Changes to this property will trigger replacement.
- Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
- direct
Connect Changes to this property will trigger replacement.
- Set true for private network infrastructure.
- enable
Bgp Lan Activemesh Changes to this property will trigger replacement.
- Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
- enable
Edge Segmentation Changes to this property will trigger replacement.
- Switch to allow this connection to communicate with a Network Domain via Connection Policy.
- enable
Event BooleanTriggered Ha - Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
- enable
Ikev2 Changes to this property will trigger replacement.
- Set as true to enable IKEv2 protocol.
- enable
Jumbo BooleanFrame - Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
- enable
Learned BooleanCidrs Approval - Enable learned CIDRs approval for the connection. Only valid with
connection_type
= 'bgp'. Requires the transit_gateway'slearned_cidrs_approval_mode
attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+. - gw
Name Changes to this property will trigger replacement.
- Aviatrix transit gateway name.
- ha
Enabled Changes to this property will trigger replacement.
- Set as true if there are two external devices.
backup_remote_gateway_ip
- (Optional) Backup remote gateway IP. Required if HA enabled.
- local
Lan Ip Changes to this property will trigger replacement.
- Local LAN IP. Required for GCP BGP over LAN connection.
- local
Tunnel Cidr Changes to this property will trigger replacement.
- Source CIDR for the tunnel from the Aviatrix transit gateway.
- manual
Bgp List<String>Advertised Cidrs - Configure manual BGP advertised CIDRs for this connection. Only valid with
connection_type
= 'bgp'. Available as of provider version R2.18+. - phase1Authentication
Changes to this property will trigger replacement.
- Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
- phase1Dh
Groups Changes to this property will trigger replacement.
- Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase1Encryption
Changes to this property will trigger replacement.
- Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
- phase1Remote
Identifiers List<String> - Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
- phase2Authentication
Changes to this property will trigger replacement.
- Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
- phase2Dh
Groups Changes to this property will trigger replacement.
- Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
- phase2Encryption
Changes to this property will trigger replacement.
- Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
Changes to this property will trigger replacement.
- Pre-Shared Key.
- prepend
As List<String>Paths - Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
- remote
Gateway Ip Changes to this property will trigger replacement.
- Remote gateway IP. Required when
tunnel_protocol
!= 'LAN'. - remote
Lan Ip Changes to this property will trigger replacement.
- Remote LAN IP. Required for BGP over LAN connection.
- remote
Subnet String - Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
- remote
Tunnel Cidr Changes to this property will trigger replacement.
- Destination CIDR for the tunnel to the external device.
- remote
Vpc Name Changes to this property will trigger replacement.
- Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when
connection_type
= 'bgp' andtunnel_protocol
= 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+. - switch
To BooleanHa Standby Gateway - Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
- tunnel
Protocol Changes to this property will trigger replacement.
- Tunnel protocol, only valid with
connection_type
= 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+. - vpc
Id Changes to this property will trigger replacement.
- VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
Package Details
- Repository
- aviatrix astipkovits/pulumi-aviatrix
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
aviatrix
Terraform Provider.