1. Packages
  2. Aviatrix
  3. API Docs
  4. AviatrixTransitExternalDeviceConn
Aviatrix v0.0.11 published on Saturday, Jun 17, 2023 by Aviatrix

aviatrix.AviatrixTransitExternalDeviceConn

Explore with Pulumi AI

Import

transit_external_device_conn can be imported using the connection_name and vpc_id, e.g.

 $ pulumi import aviatrix:index/aviatrixTransitExternalDeviceConn:AviatrixTransitExternalDeviceConn test connection_name~vpc_id
Copy

Create AviatrixTransitExternalDeviceConn Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AviatrixTransitExternalDeviceConn(name: string, args: AviatrixTransitExternalDeviceConnArgs, opts?: CustomResourceOptions);
@overload
def AviatrixTransitExternalDeviceConn(resource_name: str,
                                      args: AviatrixTransitExternalDeviceConnArgs,
                                      opts: Optional[ResourceOptions] = None)

@overload
def AviatrixTransitExternalDeviceConn(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      connection_name: Optional[str] = None,
                                      vpc_id: Optional[str] = None,
                                      gw_name: Optional[str] = None,
                                      enable_learned_cidrs_approval: Optional[bool] = None,
                                      bgp_local_as_num: Optional[str] = None,
                                      local_lan_ip: Optional[str] = None,
                                      backup_pre_shared_key: Optional[str] = None,
                                      backup_remote_gateway_ip: Optional[str] = None,
                                      backup_remote_lan_ip: Optional[str] = None,
                                      backup_remote_tunnel_cidr: Optional[str] = None,
                                      ha_enabled: Optional[bool] = None,
                                      bgp_md5_key: Optional[str] = None,
                                      bgp_remote_as_num: Optional[str] = None,
                                      backup_direct_connect: Optional[bool] = None,
                                      connection_type: Optional[str] = None,
                                      backup_bgp_remote_as_num: Optional[str] = None,
                                      direct_connect: Optional[bool] = None,
                                      enable_bgp_lan_activemesh: Optional[bool] = None,
                                      enable_edge_segmentation: Optional[bool] = None,
                                      enable_event_triggered_ha: Optional[bool] = None,
                                      enable_ikev2: Optional[bool] = None,
                                      enable_jumbo_frame: Optional[bool] = None,
                                      approved_cidrs: Optional[Sequence[str]] = None,
                                      custom_algorithms: Optional[bool] = None,
                                      backup_local_lan_ip: Optional[str] = None,
                                      backup_local_tunnel_cidr: Optional[str] = None,
                                      local_tunnel_cidr: Optional[str] = None,
                                      manual_bgp_advertised_cidrs: Optional[Sequence[str]] = None,
                                      phase1_authentication: Optional[str] = None,
                                      phase1_dh_groups: Optional[str] = None,
                                      phase1_encryption: Optional[str] = None,
                                      phase1_remote_identifiers: Optional[Sequence[str]] = None,
                                      phase2_authentication: Optional[str] = None,
                                      phase2_dh_groups: Optional[str] = None,
                                      phase2_encryption: Optional[str] = None,
                                      pre_shared_key: Optional[str] = None,
                                      prepend_as_paths: Optional[Sequence[str]] = None,
                                      remote_gateway_ip: Optional[str] = None,
                                      remote_lan_ip: Optional[str] = None,
                                      remote_subnet: Optional[str] = None,
                                      remote_tunnel_cidr: Optional[str] = None,
                                      remote_vpc_name: Optional[str] = None,
                                      switch_to_ha_standby_gateway: Optional[bool] = None,
                                      tunnel_protocol: Optional[str] = None,
                                      backup_bgp_md5_key: Optional[str] = None)
func NewAviatrixTransitExternalDeviceConn(ctx *Context, name string, args AviatrixTransitExternalDeviceConnArgs, opts ...ResourceOption) (*AviatrixTransitExternalDeviceConn, error)
public AviatrixTransitExternalDeviceConn(string name, AviatrixTransitExternalDeviceConnArgs args, CustomResourceOptions? opts = null)
public AviatrixTransitExternalDeviceConn(String name, AviatrixTransitExternalDeviceConnArgs args)
public AviatrixTransitExternalDeviceConn(String name, AviatrixTransitExternalDeviceConnArgs args, CustomResourceOptions options)
type: aviatrix:AviatrixTransitExternalDeviceConn
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AviatrixTransitExternalDeviceConnArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AviatrixTransitExternalDeviceConnArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AviatrixTransitExternalDeviceConnArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AviatrixTransitExternalDeviceConnArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AviatrixTransitExternalDeviceConnArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var aviatrixTransitExternalDeviceConnResource = new Aviatrix.AviatrixTransitExternalDeviceConn("aviatrixTransitExternalDeviceConnResource", new()
{
    ConnectionName = "string",
    VpcId = "string",
    GwName = "string",
    EnableLearnedCidrsApproval = false,
    BgpLocalAsNum = "string",
    LocalLanIp = "string",
    BackupPreSharedKey = "string",
    BackupRemoteGatewayIp = "string",
    BackupRemoteLanIp = "string",
    BackupRemoteTunnelCidr = "string",
    HaEnabled = false,
    BgpMd5Key = "string",
    BgpRemoteAsNum = "string",
    BackupDirectConnect = false,
    ConnectionType = "string",
    BackupBgpRemoteAsNum = "string",
    DirectConnect = false,
    EnableBgpLanActivemesh = false,
    EnableEdgeSegmentation = false,
    EnableEventTriggeredHa = false,
    EnableIkev2 = false,
    EnableJumboFrame = false,
    ApprovedCidrs = new[]
    {
        "string",
    },
    CustomAlgorithms = false,
    BackupLocalLanIp = "string",
    BackupLocalTunnelCidr = "string",
    LocalTunnelCidr = "string",
    ManualBgpAdvertisedCidrs = new[]
    {
        "string",
    },
    Phase1Authentication = "string",
    Phase1DhGroups = "string",
    Phase1Encryption = "string",
    Phase1RemoteIdentifiers = new[]
    {
        "string",
    },
    Phase2Authentication = "string",
    Phase2DhGroups = "string",
    Phase2Encryption = "string",
    PreSharedKey = "string",
    PrependAsPaths = new[]
    {
        "string",
    },
    RemoteGatewayIp = "string",
    RemoteLanIp = "string",
    RemoteSubnet = "string",
    RemoteTunnelCidr = "string",
    RemoteVpcName = "string",
    SwitchToHaStandbyGateway = false,
    TunnelProtocol = "string",
    BackupBgpMd5Key = "string",
});
Copy
example, err := aviatrix.NewAviatrixTransitExternalDeviceConn(ctx, "aviatrixTransitExternalDeviceConnResource", &aviatrix.AviatrixTransitExternalDeviceConnArgs{
	ConnectionName:             pulumi.String("string"),
	VpcId:                      pulumi.String("string"),
	GwName:                     pulumi.String("string"),
	EnableLearnedCidrsApproval: pulumi.Bool(false),
	BgpLocalAsNum:              pulumi.String("string"),
	LocalLanIp:                 pulumi.String("string"),
	BackupPreSharedKey:         pulumi.String("string"),
	BackupRemoteGatewayIp:      pulumi.String("string"),
	BackupRemoteLanIp:          pulumi.String("string"),
	BackupRemoteTunnelCidr:     pulumi.String("string"),
	HaEnabled:                  pulumi.Bool(false),
	BgpMd5Key:                  pulumi.String("string"),
	BgpRemoteAsNum:             pulumi.String("string"),
	BackupDirectConnect:        pulumi.Bool(false),
	ConnectionType:             pulumi.String("string"),
	BackupBgpRemoteAsNum:       pulumi.String("string"),
	DirectConnect:              pulumi.Bool(false),
	EnableBgpLanActivemesh:     pulumi.Bool(false),
	EnableEdgeSegmentation:     pulumi.Bool(false),
	EnableEventTriggeredHa:     pulumi.Bool(false),
	EnableIkev2:                pulumi.Bool(false),
	EnableJumboFrame:           pulumi.Bool(false),
	ApprovedCidrs: pulumi.StringArray{
		pulumi.String("string"),
	},
	CustomAlgorithms:      pulumi.Bool(false),
	BackupLocalLanIp:      pulumi.String("string"),
	BackupLocalTunnelCidr: pulumi.String("string"),
	LocalTunnelCidr:       pulumi.String("string"),
	ManualBgpAdvertisedCidrs: pulumi.StringArray{
		pulumi.String("string"),
	},
	Phase1Authentication: pulumi.String("string"),
	Phase1DhGroups:       pulumi.String("string"),
	Phase1Encryption:     pulumi.String("string"),
	Phase1RemoteIdentifiers: pulumi.StringArray{
		pulumi.String("string"),
	},
	Phase2Authentication: pulumi.String("string"),
	Phase2DhGroups:       pulumi.String("string"),
	Phase2Encryption:     pulumi.String("string"),
	PreSharedKey:         pulumi.String("string"),
	PrependAsPaths: pulumi.StringArray{
		pulumi.String("string"),
	},
	RemoteGatewayIp:          pulumi.String("string"),
	RemoteLanIp:              pulumi.String("string"),
	RemoteSubnet:             pulumi.String("string"),
	RemoteTunnelCidr:         pulumi.String("string"),
	RemoteVpcName:            pulumi.String("string"),
	SwitchToHaStandbyGateway: pulumi.Bool(false),
	TunnelProtocol:           pulumi.String("string"),
	BackupBgpMd5Key:          pulumi.String("string"),
})
Copy
var aviatrixTransitExternalDeviceConnResource = new AviatrixTransitExternalDeviceConn("aviatrixTransitExternalDeviceConnResource", AviatrixTransitExternalDeviceConnArgs.builder()
    .connectionName("string")
    .vpcId("string")
    .gwName("string")
    .enableLearnedCidrsApproval(false)
    .bgpLocalAsNum("string")
    .localLanIp("string")
    .backupPreSharedKey("string")
    .backupRemoteGatewayIp("string")
    .backupRemoteLanIp("string")
    .backupRemoteTunnelCidr("string")
    .haEnabled(false)
    .bgpMd5Key("string")
    .bgpRemoteAsNum("string")
    .backupDirectConnect(false)
    .connectionType("string")
    .backupBgpRemoteAsNum("string")
    .directConnect(false)
    .enableBgpLanActivemesh(false)
    .enableEdgeSegmentation(false)
    .enableEventTriggeredHa(false)
    .enableIkev2(false)
    .enableJumboFrame(false)
    .approvedCidrs("string")
    .customAlgorithms(false)
    .backupLocalLanIp("string")
    .backupLocalTunnelCidr("string")
    .localTunnelCidr("string")
    .manualBgpAdvertisedCidrs("string")
    .phase1Authentication("string")
    .phase1DhGroups("string")
    .phase1Encryption("string")
    .phase1RemoteIdentifiers("string")
    .phase2Authentication("string")
    .phase2DhGroups("string")
    .phase2Encryption("string")
    .preSharedKey("string")
    .prependAsPaths("string")
    .remoteGatewayIp("string")
    .remoteLanIp("string")
    .remoteSubnet("string")
    .remoteTunnelCidr("string")
    .remoteVpcName("string")
    .switchToHaStandbyGateway(false)
    .tunnelProtocol("string")
    .backupBgpMd5Key("string")
    .build());
Copy
aviatrix_transit_external_device_conn_resource = aviatrix.AviatrixTransitExternalDeviceConn("aviatrixTransitExternalDeviceConnResource",
    connection_name="string",
    vpc_id="string",
    gw_name="string",
    enable_learned_cidrs_approval=False,
    bgp_local_as_num="string",
    local_lan_ip="string",
    backup_pre_shared_key="string",
    backup_remote_gateway_ip="string",
    backup_remote_lan_ip="string",
    backup_remote_tunnel_cidr="string",
    ha_enabled=False,
    bgp_md5_key="string",
    bgp_remote_as_num="string",
    backup_direct_connect=False,
    connection_type="string",
    backup_bgp_remote_as_num="string",
    direct_connect=False,
    enable_bgp_lan_activemesh=False,
    enable_edge_segmentation=False,
    enable_event_triggered_ha=False,
    enable_ikev2=False,
    enable_jumbo_frame=False,
    approved_cidrs=["string"],
    custom_algorithms=False,
    backup_local_lan_ip="string",
    backup_local_tunnel_cidr="string",
    local_tunnel_cidr="string",
    manual_bgp_advertised_cidrs=["string"],
    phase1_authentication="string",
    phase1_dh_groups="string",
    phase1_encryption="string",
    phase1_remote_identifiers=["string"],
    phase2_authentication="string",
    phase2_dh_groups="string",
    phase2_encryption="string",
    pre_shared_key="string",
    prepend_as_paths=["string"],
    remote_gateway_ip="string",
    remote_lan_ip="string",
    remote_subnet="string",
    remote_tunnel_cidr="string",
    remote_vpc_name="string",
    switch_to_ha_standby_gateway=False,
    tunnel_protocol="string",
    backup_bgp_md5_key="string")
Copy
const aviatrixTransitExternalDeviceConnResource = new aviatrix.AviatrixTransitExternalDeviceConn("aviatrixTransitExternalDeviceConnResource", {
    connectionName: "string",
    vpcId: "string",
    gwName: "string",
    enableLearnedCidrsApproval: false,
    bgpLocalAsNum: "string",
    localLanIp: "string",
    backupPreSharedKey: "string",
    backupRemoteGatewayIp: "string",
    backupRemoteLanIp: "string",
    backupRemoteTunnelCidr: "string",
    haEnabled: false,
    bgpMd5Key: "string",
    bgpRemoteAsNum: "string",
    backupDirectConnect: false,
    connectionType: "string",
    backupBgpRemoteAsNum: "string",
    directConnect: false,
    enableBgpLanActivemesh: false,
    enableEdgeSegmentation: false,
    enableEventTriggeredHa: false,
    enableIkev2: false,
    enableJumboFrame: false,
    approvedCidrs: ["string"],
    customAlgorithms: false,
    backupLocalLanIp: "string",
    backupLocalTunnelCidr: "string",
    localTunnelCidr: "string",
    manualBgpAdvertisedCidrs: ["string"],
    phase1Authentication: "string",
    phase1DhGroups: "string",
    phase1Encryption: "string",
    phase1RemoteIdentifiers: ["string"],
    phase2Authentication: "string",
    phase2DhGroups: "string",
    phase2Encryption: "string",
    preSharedKey: "string",
    prependAsPaths: ["string"],
    remoteGatewayIp: "string",
    remoteLanIp: "string",
    remoteSubnet: "string",
    remoteTunnelCidr: "string",
    remoteVpcName: "string",
    switchToHaStandbyGateway: false,
    tunnelProtocol: "string",
    backupBgpMd5Key: "string",
});
Copy
type: aviatrix:AviatrixTransitExternalDeviceConn
properties:
    approvedCidrs:
        - string
    backupBgpMd5Key: string
    backupBgpRemoteAsNum: string
    backupDirectConnect: false
    backupLocalLanIp: string
    backupLocalTunnelCidr: string
    backupPreSharedKey: string
    backupRemoteGatewayIp: string
    backupRemoteLanIp: string
    backupRemoteTunnelCidr: string
    bgpLocalAsNum: string
    bgpMd5Key: string
    bgpRemoteAsNum: string
    connectionName: string
    connectionType: string
    customAlgorithms: false
    directConnect: false
    enableBgpLanActivemesh: false
    enableEdgeSegmentation: false
    enableEventTriggeredHa: false
    enableIkev2: false
    enableJumboFrame: false
    enableLearnedCidrsApproval: false
    gwName: string
    haEnabled: false
    localLanIp: string
    localTunnelCidr: string
    manualBgpAdvertisedCidrs:
        - string
    phase1Authentication: string
    phase1DhGroups: string
    phase1Encryption: string
    phase1RemoteIdentifiers:
        - string
    phase2Authentication: string
    phase2DhGroups: string
    phase2Encryption: string
    preSharedKey: string
    prependAsPaths:
        - string
    remoteGatewayIp: string
    remoteLanIp: string
    remoteSubnet: string
    remoteTunnelCidr: string
    remoteVpcName: string
    switchToHaStandbyGateway: false
    tunnelProtocol: string
    vpcId: string
Copy

AviatrixTransitExternalDeviceConn Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AviatrixTransitExternalDeviceConn resource accepts the following input properties:

ConnectionName
This property is required.
Changes to this property will trigger replacement.
string
Transit external device connection name.
GwName
This property is required.
Changes to this property will trigger replacement.
string
Aviatrix transit gateway name.
VpcId
This property is required.
Changes to this property will trigger replacement.
string
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
ApprovedCidrs List<string>
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
BackupBgpMd5Key string
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
BackupBgpRemoteAsNum Changes to this property will trigger replacement. string
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
BackupDirectConnect Changes to this property will trigger replacement. bool
Backup direct connect for backup external device.
BackupLocalLanIp Changes to this property will trigger replacement. string
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
BackupLocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
BackupPreSharedKey Changes to this property will trigger replacement. string
Backup Pre-Shared Key.
BackupRemoteGatewayIp Changes to this property will trigger replacement. string
Backup remote gateway IP.
BackupRemoteLanIp Changes to this property will trigger replacement. string
Backup Remote LAN IP. Required for HA BGP over LAN connection.
BackupRemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the backup external device.
BgpLocalAsNum Changes to this property will trigger replacement. string
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
BgpMd5Key string
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
BgpRemoteAsNum Changes to this property will trigger replacement. string
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
ConnectionType Changes to this property will trigger replacement. string
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
CustomAlgorithms Changes to this property will trigger replacement. bool
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
DirectConnect Changes to this property will trigger replacement. bool
Set true for private network infrastructure.
EnableBgpLanActivemesh Changes to this property will trigger replacement. bool
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
EnableEdgeSegmentation Changes to this property will trigger replacement. bool
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
EnableEventTriggeredHa bool
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
EnableIkev2 Changes to this property will trigger replacement. bool
Set as true to enable IKEv2 protocol.
EnableJumboFrame bool
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
EnableLearnedCidrsApproval bool
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
HaEnabled Changes to this property will trigger replacement. bool
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
LocalLanIp Changes to this property will trigger replacement. string
Local LAN IP. Required for GCP BGP over LAN connection.
LocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the Aviatrix transit gateway.
ManualBgpAdvertisedCidrs List<string>
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
Phase1Authentication Changes to this property will trigger replacement. string
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
Phase1DhGroups Changes to this property will trigger replacement. string
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
Phase1Encryption Changes to this property will trigger replacement. string
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
Phase1RemoteIdentifiers List<string>
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
Phase2Authentication Changes to this property will trigger replacement. string
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
Phase2DhGroups Changes to this property will trigger replacement. string
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
Phase2Encryption Changes to this property will trigger replacement. string
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
PreSharedKey Changes to this property will trigger replacement. string
Pre-Shared Key.
PrependAsPaths List<string>
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
RemoteGatewayIp Changes to this property will trigger replacement. string
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
RemoteLanIp Changes to this property will trigger replacement. string
Remote LAN IP. Required for BGP over LAN connection.
RemoteSubnet string
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
RemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the external device.
RemoteVpcName Changes to this property will trigger replacement. string
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
SwitchToHaStandbyGateway bool
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
TunnelProtocol Changes to this property will trigger replacement. string
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
ConnectionName
This property is required.
Changes to this property will trigger replacement.
string
Transit external device connection name.
GwName
This property is required.
Changes to this property will trigger replacement.
string
Aviatrix transit gateway name.
VpcId
This property is required.
Changes to this property will trigger replacement.
string
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
ApprovedCidrs []string
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
BackupBgpMd5Key string
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
BackupBgpRemoteAsNum Changes to this property will trigger replacement. string
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
BackupDirectConnect Changes to this property will trigger replacement. bool
Backup direct connect for backup external device.
BackupLocalLanIp Changes to this property will trigger replacement. string
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
BackupLocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
BackupPreSharedKey Changes to this property will trigger replacement. string
Backup Pre-Shared Key.
BackupRemoteGatewayIp Changes to this property will trigger replacement. string
Backup remote gateway IP.
BackupRemoteLanIp Changes to this property will trigger replacement. string
Backup Remote LAN IP. Required for HA BGP over LAN connection.
BackupRemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the backup external device.
BgpLocalAsNum Changes to this property will trigger replacement. string
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
BgpMd5Key string
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
BgpRemoteAsNum Changes to this property will trigger replacement. string
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
ConnectionType Changes to this property will trigger replacement. string
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
CustomAlgorithms Changes to this property will trigger replacement. bool
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
DirectConnect Changes to this property will trigger replacement. bool
Set true for private network infrastructure.
EnableBgpLanActivemesh Changes to this property will trigger replacement. bool
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
EnableEdgeSegmentation Changes to this property will trigger replacement. bool
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
EnableEventTriggeredHa bool
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
EnableIkev2 Changes to this property will trigger replacement. bool
Set as true to enable IKEv2 protocol.
EnableJumboFrame bool
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
EnableLearnedCidrsApproval bool
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
HaEnabled Changes to this property will trigger replacement. bool
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
LocalLanIp Changes to this property will trigger replacement. string
Local LAN IP. Required for GCP BGP over LAN connection.
LocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the Aviatrix transit gateway.
ManualBgpAdvertisedCidrs []string
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
Phase1Authentication Changes to this property will trigger replacement. string
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
Phase1DhGroups Changes to this property will trigger replacement. string
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
Phase1Encryption Changes to this property will trigger replacement. string
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
Phase1RemoteIdentifiers []string
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
Phase2Authentication Changes to this property will trigger replacement. string
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
Phase2DhGroups Changes to this property will trigger replacement. string
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
Phase2Encryption Changes to this property will trigger replacement. string
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
PreSharedKey Changes to this property will trigger replacement. string
Pre-Shared Key.
PrependAsPaths []string
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
RemoteGatewayIp Changes to this property will trigger replacement. string
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
RemoteLanIp Changes to this property will trigger replacement. string
Remote LAN IP. Required for BGP over LAN connection.
RemoteSubnet string
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
RemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the external device.
RemoteVpcName Changes to this property will trigger replacement. string
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
SwitchToHaStandbyGateway bool
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
TunnelProtocol Changes to this property will trigger replacement. string
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
connectionName
This property is required.
Changes to this property will trigger replacement.
String
Transit external device connection name.
gwName
This property is required.
Changes to this property will trigger replacement.
String
Aviatrix transit gateway name.
vpcId
This property is required.
Changes to this property will trigger replacement.
String
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
approvedCidrs List<String>
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
backupBgpMd5Key String
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
backupBgpRemoteAsNum Changes to this property will trigger replacement. String
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
backupDirectConnect Changes to this property will trigger replacement. Boolean
Backup direct connect for backup external device.
backupLocalLanIp Changes to this property will trigger replacement. String
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
backupLocalTunnelCidr Changes to this property will trigger replacement. String
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
backupPreSharedKey Changes to this property will trigger replacement. String
Backup Pre-Shared Key.
backupRemoteGatewayIp Changes to this property will trigger replacement. String
Backup remote gateway IP.
backupRemoteLanIp Changes to this property will trigger replacement. String
Backup Remote LAN IP. Required for HA BGP over LAN connection.
backupRemoteTunnelCidr Changes to this property will trigger replacement. String
Destination CIDR for the tunnel to the backup external device.
bgpLocalAsNum Changes to this property will trigger replacement. String
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
bgpMd5Key String
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
bgpRemoteAsNum Changes to this property will trigger replacement. String
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
connectionType Changes to this property will trigger replacement. String
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
customAlgorithms Changes to this property will trigger replacement. Boolean
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
directConnect Changes to this property will trigger replacement. Boolean
Set true for private network infrastructure.
enableBgpLanActivemesh Changes to this property will trigger replacement. Boolean
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
enableEdgeSegmentation Changes to this property will trigger replacement. Boolean
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
enableEventTriggeredHa Boolean
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
enableIkev2 Changes to this property will trigger replacement. Boolean
Set as true to enable IKEv2 protocol.
enableJumboFrame Boolean
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
enableLearnedCidrsApproval Boolean
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
haEnabled Changes to this property will trigger replacement. Boolean
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
localLanIp Changes to this property will trigger replacement. String
Local LAN IP. Required for GCP BGP over LAN connection.
localTunnelCidr Changes to this property will trigger replacement. String
Source CIDR for the tunnel from the Aviatrix transit gateway.
manualBgpAdvertisedCidrs List<String>
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
phase1Authentication Changes to this property will trigger replacement. String
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
phase1DhGroups Changes to this property will trigger replacement. String
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase1Encryption Changes to this property will trigger replacement. String
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
phase1RemoteIdentifiers List<String>
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
phase2Authentication Changes to this property will trigger replacement. String
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
phase2DhGroups Changes to this property will trigger replacement. String
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase2Encryption Changes to this property will trigger replacement. String
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
preSharedKey Changes to this property will trigger replacement. String
Pre-Shared Key.
prependAsPaths List<String>
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
remoteGatewayIp Changes to this property will trigger replacement. String
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
remoteLanIp Changes to this property will trigger replacement. String
Remote LAN IP. Required for BGP over LAN connection.
remoteSubnet String
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
remoteTunnelCidr Changes to this property will trigger replacement. String
Destination CIDR for the tunnel to the external device.
remoteVpcName Changes to this property will trigger replacement. String
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
switchToHaStandbyGateway Boolean
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
tunnelProtocol Changes to this property will trigger replacement. String
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
connectionName
This property is required.
Changes to this property will trigger replacement.
string
Transit external device connection name.
gwName
This property is required.
Changes to this property will trigger replacement.
string
Aviatrix transit gateway name.
vpcId
This property is required.
Changes to this property will trigger replacement.
string
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
approvedCidrs string[]
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
backupBgpMd5Key string
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
backupBgpRemoteAsNum Changes to this property will trigger replacement. string
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
backupDirectConnect Changes to this property will trigger replacement. boolean
Backup direct connect for backup external device.
backupLocalLanIp Changes to this property will trigger replacement. string
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
backupLocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
backupPreSharedKey Changes to this property will trigger replacement. string
Backup Pre-Shared Key.
backupRemoteGatewayIp Changes to this property will trigger replacement. string
Backup remote gateway IP.
backupRemoteLanIp Changes to this property will trigger replacement. string
Backup Remote LAN IP. Required for HA BGP over LAN connection.
backupRemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the backup external device.
bgpLocalAsNum Changes to this property will trigger replacement. string
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
bgpMd5Key string
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
bgpRemoteAsNum Changes to this property will trigger replacement. string
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
connectionType Changes to this property will trigger replacement. string
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
customAlgorithms Changes to this property will trigger replacement. boolean
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
directConnect Changes to this property will trigger replacement. boolean
Set true for private network infrastructure.
enableBgpLanActivemesh Changes to this property will trigger replacement. boolean
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
enableEdgeSegmentation Changes to this property will trigger replacement. boolean
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
enableEventTriggeredHa boolean
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
enableIkev2 Changes to this property will trigger replacement. boolean
Set as true to enable IKEv2 protocol.
enableJumboFrame boolean
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
enableLearnedCidrsApproval boolean
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
haEnabled Changes to this property will trigger replacement. boolean
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
localLanIp Changes to this property will trigger replacement. string
Local LAN IP. Required for GCP BGP over LAN connection.
localTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the Aviatrix transit gateway.
manualBgpAdvertisedCidrs string[]
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
phase1Authentication Changes to this property will trigger replacement. string
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
phase1DhGroups Changes to this property will trigger replacement. string
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase1Encryption Changes to this property will trigger replacement. string
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
phase1RemoteIdentifiers string[]
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
phase2Authentication Changes to this property will trigger replacement. string
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
phase2DhGroups Changes to this property will trigger replacement. string
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase2Encryption Changes to this property will trigger replacement. string
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
preSharedKey Changes to this property will trigger replacement. string
Pre-Shared Key.
prependAsPaths string[]
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
remoteGatewayIp Changes to this property will trigger replacement. string
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
remoteLanIp Changes to this property will trigger replacement. string
Remote LAN IP. Required for BGP over LAN connection.
remoteSubnet string
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
remoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the external device.
remoteVpcName Changes to this property will trigger replacement. string
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
switchToHaStandbyGateway boolean
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
tunnelProtocol Changes to this property will trigger replacement. string
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
connection_name
This property is required.
Changes to this property will trigger replacement.
str
Transit external device connection name.
gw_name
This property is required.
Changes to this property will trigger replacement.
str
Aviatrix transit gateway name.
vpc_id
This property is required.
Changes to this property will trigger replacement.
str
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
approved_cidrs Sequence[str]
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
backup_bgp_md5_key str
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
backup_bgp_remote_as_num Changes to this property will trigger replacement. str
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
backup_direct_connect Changes to this property will trigger replacement. bool
Backup direct connect for backup external device.
backup_local_lan_ip Changes to this property will trigger replacement. str
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
backup_local_tunnel_cidr Changes to this property will trigger replacement. str
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
backup_pre_shared_key Changes to this property will trigger replacement. str
Backup Pre-Shared Key.
backup_remote_gateway_ip Changes to this property will trigger replacement. str
Backup remote gateway IP.
backup_remote_lan_ip Changes to this property will trigger replacement. str
Backup Remote LAN IP. Required for HA BGP over LAN connection.
backup_remote_tunnel_cidr Changes to this property will trigger replacement. str
Destination CIDR for the tunnel to the backup external device.
bgp_local_as_num Changes to this property will trigger replacement. str
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
bgp_md5_key str
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
bgp_remote_as_num Changes to this property will trigger replacement. str
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
connection_type Changes to this property will trigger replacement. str
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
custom_algorithms Changes to this property will trigger replacement. bool
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
direct_connect Changes to this property will trigger replacement. bool
Set true for private network infrastructure.
enable_bgp_lan_activemesh Changes to this property will trigger replacement. bool
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
enable_edge_segmentation Changes to this property will trigger replacement. bool
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
enable_event_triggered_ha bool
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
enable_ikev2 Changes to this property will trigger replacement. bool
Set as true to enable IKEv2 protocol.
enable_jumbo_frame bool
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
enable_learned_cidrs_approval bool
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
ha_enabled Changes to this property will trigger replacement. bool
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
local_lan_ip Changes to this property will trigger replacement. str
Local LAN IP. Required for GCP BGP over LAN connection.
local_tunnel_cidr Changes to this property will trigger replacement. str
Source CIDR for the tunnel from the Aviatrix transit gateway.
manual_bgp_advertised_cidrs Sequence[str]
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
phase1_authentication Changes to this property will trigger replacement. str
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
phase1_dh_groups Changes to this property will trigger replacement. str
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase1_encryption Changes to this property will trigger replacement. str
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
phase1_remote_identifiers Sequence[str]
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
phase2_authentication Changes to this property will trigger replacement. str
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
phase2_dh_groups Changes to this property will trigger replacement. str
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase2_encryption Changes to this property will trigger replacement. str
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
pre_shared_key Changes to this property will trigger replacement. str
Pre-Shared Key.
prepend_as_paths Sequence[str]
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
remote_gateway_ip Changes to this property will trigger replacement. str
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
remote_lan_ip Changes to this property will trigger replacement. str
Remote LAN IP. Required for BGP over LAN connection.
remote_subnet str
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
remote_tunnel_cidr Changes to this property will trigger replacement. str
Destination CIDR for the tunnel to the external device.
remote_vpc_name Changes to this property will trigger replacement. str
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
switch_to_ha_standby_gateway bool
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
tunnel_protocol Changes to this property will trigger replacement. str
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
connectionName
This property is required.
Changes to this property will trigger replacement.
String
Transit external device connection name.
gwName
This property is required.
Changes to this property will trigger replacement.
String
Aviatrix transit gateway name.
vpcId
This property is required.
Changes to this property will trigger replacement.
String
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
approvedCidrs List<String>
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
backupBgpMd5Key String
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
backupBgpRemoteAsNum Changes to this property will trigger replacement. String
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
backupDirectConnect Changes to this property will trigger replacement. Boolean
Backup direct connect for backup external device.
backupLocalLanIp Changes to this property will trigger replacement. String
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
backupLocalTunnelCidr Changes to this property will trigger replacement. String
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
backupPreSharedKey Changes to this property will trigger replacement. String
Backup Pre-Shared Key.
backupRemoteGatewayIp Changes to this property will trigger replacement. String
Backup remote gateway IP.
backupRemoteLanIp Changes to this property will trigger replacement. String
Backup Remote LAN IP. Required for HA BGP over LAN connection.
backupRemoteTunnelCidr Changes to this property will trigger replacement. String
Destination CIDR for the tunnel to the backup external device.
bgpLocalAsNum Changes to this property will trigger replacement. String
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
bgpMd5Key String
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
bgpRemoteAsNum Changes to this property will trigger replacement. String
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
connectionType Changes to this property will trigger replacement. String
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
customAlgorithms Changes to this property will trigger replacement. Boolean
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
directConnect Changes to this property will trigger replacement. Boolean
Set true for private network infrastructure.
enableBgpLanActivemesh Changes to this property will trigger replacement. Boolean
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
enableEdgeSegmentation Changes to this property will trigger replacement. Boolean
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
enableEventTriggeredHa Boolean
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
enableIkev2 Changes to this property will trigger replacement. Boolean
Set as true to enable IKEv2 protocol.
enableJumboFrame Boolean
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
enableLearnedCidrsApproval Boolean
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
haEnabled Changes to this property will trigger replacement. Boolean
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
localLanIp Changes to this property will trigger replacement. String
Local LAN IP. Required for GCP BGP over LAN connection.
localTunnelCidr Changes to this property will trigger replacement. String
Source CIDR for the tunnel from the Aviatrix transit gateway.
manualBgpAdvertisedCidrs List<String>
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
phase1Authentication Changes to this property will trigger replacement. String
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
phase1DhGroups Changes to this property will trigger replacement. String
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase1Encryption Changes to this property will trigger replacement. String
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
phase1RemoteIdentifiers List<String>
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
phase2Authentication Changes to this property will trigger replacement. String
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
phase2DhGroups Changes to this property will trigger replacement. String
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase2Encryption Changes to this property will trigger replacement. String
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
preSharedKey Changes to this property will trigger replacement. String
Pre-Shared Key.
prependAsPaths List<String>
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
remoteGatewayIp Changes to this property will trigger replacement. String
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
remoteLanIp Changes to this property will trigger replacement. String
Remote LAN IP. Required for BGP over LAN connection.
remoteSubnet String
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
remoteTunnelCidr Changes to this property will trigger replacement. String
Destination CIDR for the tunnel to the external device.
remoteVpcName Changes to this property will trigger replacement. String
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
switchToHaStandbyGateway Boolean
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
tunnelProtocol Changes to this property will trigger replacement. String
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.

Outputs

All input properties are implicitly available as output properties. Additionally, the AviatrixTransitExternalDeviceConn resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing AviatrixTransitExternalDeviceConn Resource

Get an existing AviatrixTransitExternalDeviceConn resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AviatrixTransitExternalDeviceConnState, opts?: CustomResourceOptions): AviatrixTransitExternalDeviceConn
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        approved_cidrs: Optional[Sequence[str]] = None,
        backup_bgp_md5_key: Optional[str] = None,
        backup_bgp_remote_as_num: Optional[str] = None,
        backup_direct_connect: Optional[bool] = None,
        backup_local_lan_ip: Optional[str] = None,
        backup_local_tunnel_cidr: Optional[str] = None,
        backup_pre_shared_key: Optional[str] = None,
        backup_remote_gateway_ip: Optional[str] = None,
        backup_remote_lan_ip: Optional[str] = None,
        backup_remote_tunnel_cidr: Optional[str] = None,
        bgp_local_as_num: Optional[str] = None,
        bgp_md5_key: Optional[str] = None,
        bgp_remote_as_num: Optional[str] = None,
        connection_name: Optional[str] = None,
        connection_type: Optional[str] = None,
        custom_algorithms: Optional[bool] = None,
        direct_connect: Optional[bool] = None,
        enable_bgp_lan_activemesh: Optional[bool] = None,
        enable_edge_segmentation: Optional[bool] = None,
        enable_event_triggered_ha: Optional[bool] = None,
        enable_ikev2: Optional[bool] = None,
        enable_jumbo_frame: Optional[bool] = None,
        enable_learned_cidrs_approval: Optional[bool] = None,
        gw_name: Optional[str] = None,
        ha_enabled: Optional[bool] = None,
        local_lan_ip: Optional[str] = None,
        local_tunnel_cidr: Optional[str] = None,
        manual_bgp_advertised_cidrs: Optional[Sequence[str]] = None,
        phase1_authentication: Optional[str] = None,
        phase1_dh_groups: Optional[str] = None,
        phase1_encryption: Optional[str] = None,
        phase1_remote_identifiers: Optional[Sequence[str]] = None,
        phase2_authentication: Optional[str] = None,
        phase2_dh_groups: Optional[str] = None,
        phase2_encryption: Optional[str] = None,
        pre_shared_key: Optional[str] = None,
        prepend_as_paths: Optional[Sequence[str]] = None,
        remote_gateway_ip: Optional[str] = None,
        remote_lan_ip: Optional[str] = None,
        remote_subnet: Optional[str] = None,
        remote_tunnel_cidr: Optional[str] = None,
        remote_vpc_name: Optional[str] = None,
        switch_to_ha_standby_gateway: Optional[bool] = None,
        tunnel_protocol: Optional[str] = None,
        vpc_id: Optional[str] = None) -> AviatrixTransitExternalDeviceConn
func GetAviatrixTransitExternalDeviceConn(ctx *Context, name string, id IDInput, state *AviatrixTransitExternalDeviceConnState, opts ...ResourceOption) (*AviatrixTransitExternalDeviceConn, error)
public static AviatrixTransitExternalDeviceConn Get(string name, Input<string> id, AviatrixTransitExternalDeviceConnState? state, CustomResourceOptions? opts = null)
public static AviatrixTransitExternalDeviceConn get(String name, Output<String> id, AviatrixTransitExternalDeviceConnState state, CustomResourceOptions options)
resources:  _:    type: aviatrix:AviatrixTransitExternalDeviceConn    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
ApprovedCidrs List<string>
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
BackupBgpMd5Key string
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
BackupBgpRemoteAsNum Changes to this property will trigger replacement. string
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
BackupDirectConnect Changes to this property will trigger replacement. bool
Backup direct connect for backup external device.
BackupLocalLanIp Changes to this property will trigger replacement. string
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
BackupLocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
BackupPreSharedKey Changes to this property will trigger replacement. string
Backup Pre-Shared Key.
BackupRemoteGatewayIp Changes to this property will trigger replacement. string
Backup remote gateway IP.
BackupRemoteLanIp Changes to this property will trigger replacement. string
Backup Remote LAN IP. Required for HA BGP over LAN connection.
BackupRemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the backup external device.
BgpLocalAsNum Changes to this property will trigger replacement. string
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
BgpMd5Key string
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
BgpRemoteAsNum Changes to this property will trigger replacement. string
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
ConnectionName Changes to this property will trigger replacement. string
Transit external device connection name.
ConnectionType Changes to this property will trigger replacement. string
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
CustomAlgorithms Changes to this property will trigger replacement. bool
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
DirectConnect Changes to this property will trigger replacement. bool
Set true for private network infrastructure.
EnableBgpLanActivemesh Changes to this property will trigger replacement. bool
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
EnableEdgeSegmentation Changes to this property will trigger replacement. bool
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
EnableEventTriggeredHa bool
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
EnableIkev2 Changes to this property will trigger replacement. bool
Set as true to enable IKEv2 protocol.
EnableJumboFrame bool
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
EnableLearnedCidrsApproval bool
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
GwName Changes to this property will trigger replacement. string
Aviatrix transit gateway name.
HaEnabled Changes to this property will trigger replacement. bool
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
LocalLanIp Changes to this property will trigger replacement. string
Local LAN IP. Required for GCP BGP over LAN connection.
LocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the Aviatrix transit gateway.
ManualBgpAdvertisedCidrs List<string>
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
Phase1Authentication Changes to this property will trigger replacement. string
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
Phase1DhGroups Changes to this property will trigger replacement. string
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
Phase1Encryption Changes to this property will trigger replacement. string
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
Phase1RemoteIdentifiers List<string>
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
Phase2Authentication Changes to this property will trigger replacement. string
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
Phase2DhGroups Changes to this property will trigger replacement. string
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
Phase2Encryption Changes to this property will trigger replacement. string
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
PreSharedKey Changes to this property will trigger replacement. string
Pre-Shared Key.
PrependAsPaths List<string>
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
RemoteGatewayIp Changes to this property will trigger replacement. string
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
RemoteLanIp Changes to this property will trigger replacement. string
Remote LAN IP. Required for BGP over LAN connection.
RemoteSubnet string
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
RemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the external device.
RemoteVpcName Changes to this property will trigger replacement. string
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
SwitchToHaStandbyGateway bool
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
TunnelProtocol Changes to this property will trigger replacement. string
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
VpcId Changes to this property will trigger replacement. string
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
ApprovedCidrs []string
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
BackupBgpMd5Key string
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
BackupBgpRemoteAsNum Changes to this property will trigger replacement. string
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
BackupDirectConnect Changes to this property will trigger replacement. bool
Backup direct connect for backup external device.
BackupLocalLanIp Changes to this property will trigger replacement. string
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
BackupLocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
BackupPreSharedKey Changes to this property will trigger replacement. string
Backup Pre-Shared Key.
BackupRemoteGatewayIp Changes to this property will trigger replacement. string
Backup remote gateway IP.
BackupRemoteLanIp Changes to this property will trigger replacement. string
Backup Remote LAN IP. Required for HA BGP over LAN connection.
BackupRemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the backup external device.
BgpLocalAsNum Changes to this property will trigger replacement. string
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
BgpMd5Key string
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
BgpRemoteAsNum Changes to this property will trigger replacement. string
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
ConnectionName Changes to this property will trigger replacement. string
Transit external device connection name.
ConnectionType Changes to this property will trigger replacement. string
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
CustomAlgorithms Changes to this property will trigger replacement. bool
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
DirectConnect Changes to this property will trigger replacement. bool
Set true for private network infrastructure.
EnableBgpLanActivemesh Changes to this property will trigger replacement. bool
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
EnableEdgeSegmentation Changes to this property will trigger replacement. bool
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
EnableEventTriggeredHa bool
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
EnableIkev2 Changes to this property will trigger replacement. bool
Set as true to enable IKEv2 protocol.
EnableJumboFrame bool
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
EnableLearnedCidrsApproval bool
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
GwName Changes to this property will trigger replacement. string
Aviatrix transit gateway name.
HaEnabled Changes to this property will trigger replacement. bool
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
LocalLanIp Changes to this property will trigger replacement. string
Local LAN IP. Required for GCP BGP over LAN connection.
LocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the Aviatrix transit gateway.
ManualBgpAdvertisedCidrs []string
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
Phase1Authentication Changes to this property will trigger replacement. string
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
Phase1DhGroups Changes to this property will trigger replacement. string
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
Phase1Encryption Changes to this property will trigger replacement. string
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
Phase1RemoteIdentifiers []string
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
Phase2Authentication Changes to this property will trigger replacement. string
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
Phase2DhGroups Changes to this property will trigger replacement. string
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
Phase2Encryption Changes to this property will trigger replacement. string
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
PreSharedKey Changes to this property will trigger replacement. string
Pre-Shared Key.
PrependAsPaths []string
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
RemoteGatewayIp Changes to this property will trigger replacement. string
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
RemoteLanIp Changes to this property will trigger replacement. string
Remote LAN IP. Required for BGP over LAN connection.
RemoteSubnet string
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
RemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the external device.
RemoteVpcName Changes to this property will trigger replacement. string
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
SwitchToHaStandbyGateway bool
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
TunnelProtocol Changes to this property will trigger replacement. string
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
VpcId Changes to this property will trigger replacement. string
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
approvedCidrs List<String>
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
backupBgpMd5Key String
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
backupBgpRemoteAsNum Changes to this property will trigger replacement. String
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
backupDirectConnect Changes to this property will trigger replacement. Boolean
Backup direct connect for backup external device.
backupLocalLanIp Changes to this property will trigger replacement. String
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
backupLocalTunnelCidr Changes to this property will trigger replacement. String
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
backupPreSharedKey Changes to this property will trigger replacement. String
Backup Pre-Shared Key.
backupRemoteGatewayIp Changes to this property will trigger replacement. String
Backup remote gateway IP.
backupRemoteLanIp Changes to this property will trigger replacement. String
Backup Remote LAN IP. Required for HA BGP over LAN connection.
backupRemoteTunnelCidr Changes to this property will trigger replacement. String
Destination CIDR for the tunnel to the backup external device.
bgpLocalAsNum Changes to this property will trigger replacement. String
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
bgpMd5Key String
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
bgpRemoteAsNum Changes to this property will trigger replacement. String
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
connectionName Changes to this property will trigger replacement. String
Transit external device connection name.
connectionType Changes to this property will trigger replacement. String
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
customAlgorithms Changes to this property will trigger replacement. Boolean
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
directConnect Changes to this property will trigger replacement. Boolean
Set true for private network infrastructure.
enableBgpLanActivemesh Changes to this property will trigger replacement. Boolean
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
enableEdgeSegmentation Changes to this property will trigger replacement. Boolean
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
enableEventTriggeredHa Boolean
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
enableIkev2 Changes to this property will trigger replacement. Boolean
Set as true to enable IKEv2 protocol.
enableJumboFrame Boolean
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
enableLearnedCidrsApproval Boolean
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
gwName Changes to this property will trigger replacement. String
Aviatrix transit gateway name.
haEnabled Changes to this property will trigger replacement. Boolean
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
localLanIp Changes to this property will trigger replacement. String
Local LAN IP. Required for GCP BGP over LAN connection.
localTunnelCidr Changes to this property will trigger replacement. String
Source CIDR for the tunnel from the Aviatrix transit gateway.
manualBgpAdvertisedCidrs List<String>
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
phase1Authentication Changes to this property will trigger replacement. String
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
phase1DhGroups Changes to this property will trigger replacement. String
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase1Encryption Changes to this property will trigger replacement. String
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
phase1RemoteIdentifiers List<String>
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
phase2Authentication Changes to this property will trigger replacement. String
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
phase2DhGroups Changes to this property will trigger replacement. String
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase2Encryption Changes to this property will trigger replacement. String
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
preSharedKey Changes to this property will trigger replacement. String
Pre-Shared Key.
prependAsPaths List<String>
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
remoteGatewayIp Changes to this property will trigger replacement. String
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
remoteLanIp Changes to this property will trigger replacement. String
Remote LAN IP. Required for BGP over LAN connection.
remoteSubnet String
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
remoteTunnelCidr Changes to this property will trigger replacement. String
Destination CIDR for the tunnel to the external device.
remoteVpcName Changes to this property will trigger replacement. String
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
switchToHaStandbyGateway Boolean
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
tunnelProtocol Changes to this property will trigger replacement. String
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
vpcId Changes to this property will trigger replacement. String
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
approvedCidrs string[]
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
backupBgpMd5Key string
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
backupBgpRemoteAsNum Changes to this property will trigger replacement. string
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
backupDirectConnect Changes to this property will trigger replacement. boolean
Backup direct connect for backup external device.
backupLocalLanIp Changes to this property will trigger replacement. string
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
backupLocalTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
backupPreSharedKey Changes to this property will trigger replacement. string
Backup Pre-Shared Key.
backupRemoteGatewayIp Changes to this property will trigger replacement. string
Backup remote gateway IP.
backupRemoteLanIp Changes to this property will trigger replacement. string
Backup Remote LAN IP. Required for HA BGP over LAN connection.
backupRemoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the backup external device.
bgpLocalAsNum Changes to this property will trigger replacement. string
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
bgpMd5Key string
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
bgpRemoteAsNum Changes to this property will trigger replacement. string
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
connectionName Changes to this property will trigger replacement. string
Transit external device connection name.
connectionType Changes to this property will trigger replacement. string
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
customAlgorithms Changes to this property will trigger replacement. boolean
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
directConnect Changes to this property will trigger replacement. boolean
Set true for private network infrastructure.
enableBgpLanActivemesh Changes to this property will trigger replacement. boolean
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
enableEdgeSegmentation Changes to this property will trigger replacement. boolean
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
enableEventTriggeredHa boolean
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
enableIkev2 Changes to this property will trigger replacement. boolean
Set as true to enable IKEv2 protocol.
enableJumboFrame boolean
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
enableLearnedCidrsApproval boolean
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
gwName Changes to this property will trigger replacement. string
Aviatrix transit gateway name.
haEnabled Changes to this property will trigger replacement. boolean
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
localLanIp Changes to this property will trigger replacement. string
Local LAN IP. Required for GCP BGP over LAN connection.
localTunnelCidr Changes to this property will trigger replacement. string
Source CIDR for the tunnel from the Aviatrix transit gateway.
manualBgpAdvertisedCidrs string[]
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
phase1Authentication Changes to this property will trigger replacement. string
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
phase1DhGroups Changes to this property will trigger replacement. string
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase1Encryption Changes to this property will trigger replacement. string
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
phase1RemoteIdentifiers string[]
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
phase2Authentication Changes to this property will trigger replacement. string
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
phase2DhGroups Changes to this property will trigger replacement. string
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase2Encryption Changes to this property will trigger replacement. string
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
preSharedKey Changes to this property will trigger replacement. string
Pre-Shared Key.
prependAsPaths string[]
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
remoteGatewayIp Changes to this property will trigger replacement. string
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
remoteLanIp Changes to this property will trigger replacement. string
Remote LAN IP. Required for BGP over LAN connection.
remoteSubnet string
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
remoteTunnelCidr Changes to this property will trigger replacement. string
Destination CIDR for the tunnel to the external device.
remoteVpcName Changes to this property will trigger replacement. string
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
switchToHaStandbyGateway boolean
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
tunnelProtocol Changes to this property will trigger replacement. string
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
vpcId Changes to this property will trigger replacement. string
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
approved_cidrs Sequence[str]
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
backup_bgp_md5_key str
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
backup_bgp_remote_as_num Changes to this property will trigger replacement. str
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
backup_direct_connect Changes to this property will trigger replacement. bool
Backup direct connect for backup external device.
backup_local_lan_ip Changes to this property will trigger replacement. str
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
backup_local_tunnel_cidr Changes to this property will trigger replacement. str
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
backup_pre_shared_key Changes to this property will trigger replacement. str
Backup Pre-Shared Key.
backup_remote_gateway_ip Changes to this property will trigger replacement. str
Backup remote gateway IP.
backup_remote_lan_ip Changes to this property will trigger replacement. str
Backup Remote LAN IP. Required for HA BGP over LAN connection.
backup_remote_tunnel_cidr Changes to this property will trigger replacement. str
Destination CIDR for the tunnel to the backup external device.
bgp_local_as_num Changes to this property will trigger replacement. str
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
bgp_md5_key str
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
bgp_remote_as_num Changes to this property will trigger replacement. str
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
connection_name Changes to this property will trigger replacement. str
Transit external device connection name.
connection_type Changes to this property will trigger replacement. str
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
custom_algorithms Changes to this property will trigger replacement. bool
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
direct_connect Changes to this property will trigger replacement. bool
Set true for private network infrastructure.
enable_bgp_lan_activemesh Changes to this property will trigger replacement. bool
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
enable_edge_segmentation Changes to this property will trigger replacement. bool
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
enable_event_triggered_ha bool
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
enable_ikev2 Changes to this property will trigger replacement. bool
Set as true to enable IKEv2 protocol.
enable_jumbo_frame bool
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
enable_learned_cidrs_approval bool
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
gw_name Changes to this property will trigger replacement. str
Aviatrix transit gateway name.
ha_enabled Changes to this property will trigger replacement. bool
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
local_lan_ip Changes to this property will trigger replacement. str
Local LAN IP. Required for GCP BGP over LAN connection.
local_tunnel_cidr Changes to this property will trigger replacement. str
Source CIDR for the tunnel from the Aviatrix transit gateway.
manual_bgp_advertised_cidrs Sequence[str]
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
phase1_authentication Changes to this property will trigger replacement. str
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
phase1_dh_groups Changes to this property will trigger replacement. str
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase1_encryption Changes to this property will trigger replacement. str
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
phase1_remote_identifiers Sequence[str]
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
phase2_authentication Changes to this property will trigger replacement. str
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
phase2_dh_groups Changes to this property will trigger replacement. str
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase2_encryption Changes to this property will trigger replacement. str
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
pre_shared_key Changes to this property will trigger replacement. str
Pre-Shared Key.
prepend_as_paths Sequence[str]
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
remote_gateway_ip Changes to this property will trigger replacement. str
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
remote_lan_ip Changes to this property will trigger replacement. str
Remote LAN IP. Required for BGP over LAN connection.
remote_subnet str
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
remote_tunnel_cidr Changes to this property will trigger replacement. str
Destination CIDR for the tunnel to the external device.
remote_vpc_name Changes to this property will trigger replacement. str
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
switch_to_ha_standby_gateway bool
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
tunnel_protocol Changes to this property will trigger replacement. str
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
vpc_id Changes to this property will trigger replacement. str
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".
approvedCidrs List<String>
Set of approved CIDRs. Requires enable_learned_cidrs_approval to be true. Type: Set(String).
backupBgpMd5Key String
Backup BGP MD5 Authentication Key. Valid with HA enabled for connection. Example: 'avx03,avx04'. For BGP LAN ActiveMesh mode disabled, example: 'avx03'.
backupBgpRemoteAsNum Changes to this property will trigger replacement. String
Backup BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required if HA enabled for 'bgp' connection.
backupDirectConnect Changes to this property will trigger replacement. Boolean
Backup direct connect for backup external device.
backupLocalLanIp Changes to this property will trigger replacement. String
Backup Local LAN IP. Required for GCP HA BGP over LAN connection.
backupLocalTunnelCidr Changes to this property will trigger replacement. String
Source CIDR for the tunnel from the backup Aviatrix transit gateway.
backupPreSharedKey Changes to this property will trigger replacement. String
Backup Pre-Shared Key.
backupRemoteGatewayIp Changes to this property will trigger replacement. String
Backup remote gateway IP.
backupRemoteLanIp Changes to this property will trigger replacement. String
Backup Remote LAN IP. Required for HA BGP over LAN connection.
backupRemoteTunnelCidr Changes to this property will trigger replacement. String
Destination CIDR for the tunnel to the backup external device.
bgpLocalAsNum Changes to this property will trigger replacement. String
BGP local ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
bgpMd5Key String
BGP MD5 Authentication Key. Example: 'avx01,avx02'. For BGP LAN ActiveMesh mode disabled, example: 'avx01'.
bgpRemoteAsNum Changes to this property will trigger replacement. String
BGP remote ASN (Autonomous System Number). Integer between 1-4294967294. Required for 'bgp' connection.
connectionName Changes to this property will trigger replacement. String
Transit external device connection name.
connectionType Changes to this property will trigger replacement. String
Connection type. Valid values: 'bgp', 'static'. Default value: 'bgp'.
customAlgorithms Changes to this property will trigger replacement. Boolean
Switch to enable custom/non-default algorithms for IPSec Authentication/Encryption. Valid values: true, false. NOTE: Please see notes here for more information.
directConnect Changes to this property will trigger replacement. Boolean
Set true for private network infrastructure.
enableBgpLanActivemesh Changes to this property will trigger replacement. Boolean
Switch to enable BGP LAN ActiveMesh mode. Only valid for GCP with Remote Gateway HA enabled. Default: false. Available as of provider version R2.21+.
enableEdgeSegmentation Changes to this property will trigger replacement. Boolean
Switch to allow this connection to communicate with a Network Domain via Connection Policy.
enableEventTriggeredHa Boolean
Enable Event Triggered HA. Default value: false. Valid values: true or false. Available as of provider version R2.19+.
enableIkev2 Changes to this property will trigger replacement. Boolean
Set as true to enable IKEv2 protocol.
enableJumboFrame Boolean
Enable Jumbo Frame for the transit external device connection. Only valid with 'GRE' tunnels under 'bgp' connection. Requires transit to be jumbo frame and insane mode enabled. Valid values: true, false. Default value: false. Available as of provider version R2.22.2+.
enableLearnedCidrsApproval Boolean
Enable learned CIDRs approval for the connection. Only valid with connection_type = 'bgp'. Requires the transit_gateway's learned_cidrs_approval_mode attribute be set to 'connection'. Valid values: true, false. Default value: false. Available as of provider version R2.18+.
gwName Changes to this property will trigger replacement. String
Aviatrix transit gateway name.
haEnabled Changes to this property will trigger replacement. Boolean
Set as true if there are two external devices.

  • backup_remote_gateway_ip - (Optional) Backup remote gateway IP. Required if HA enabled.
localLanIp Changes to this property will trigger replacement. String
Local LAN IP. Required for GCP BGP over LAN connection.
localTunnelCidr Changes to this property will trigger replacement. String
Source CIDR for the tunnel from the Aviatrix transit gateway.
manualBgpAdvertisedCidrs List<String>
Configure manual BGP advertised CIDRs for this connection. Only valid with connection_type= 'bgp'. Available as of provider version R2.18+.
phase1Authentication Changes to this property will trigger replacement. String
Phase one Authentication. Valid values: 'SHA-1', 'SHA-256', 'SHA-384' and 'SHA-512'. Default value: 'SHA-256'.
phase1DhGroups Changes to this property will trigger replacement. String
Phase one DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase1Encryption Changes to this property will trigger replacement. String
Phase one Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", and "AES-256-GCM-128". Default value: "AES-256-CBC".
phase1RemoteIdentifiers List<String>
Phase 1 remote identifier of the IPsec tunnel. This can be configured to be either the public IP address or the private IP address of the peer terminating the IPsec tunnel. Example: ["1.2.3.4"] when HA is disabled, ["1.2.3.4", "5.6.7.8"] when HA is enabled. Available as of provider version R2.19+.
phase2Authentication Changes to this property will trigger replacement. String
Phase two Authentication. Valid values: 'NO-AUTH', 'HMAC-SHA-1', 'HMAC-SHA-256', 'HMAC-SHA-384' and 'HMAC-SHA-512'. Default value: 'HMAC-SHA-256'.
phase2DhGroups Changes to this property will trigger replacement. String
Phase two DH Groups. Valid values: '1', '2', '5', '14', '15', '16', '17', '18', '19', '20' and '21'. Default value: '14'.
phase2Encryption Changes to this property will trigger replacement. String
Phase two Encryption. Valid values: "3DES", "AES-128-CBC", "AES-192-CBC", "AES-256-CBC", "AES-128-GCM-64", "AES-128-GCM-96", "AES-128-GCM-128", "AES-256-GCM-64", "AES-256-GCM-96", "AES-256-GCM-128" and "NULL-ENCR". Default value: "AES-256-CBC".
preSharedKey Changes to this property will trigger replacement. String
Pre-Shared Key.
prependAsPaths List<String>
Connection AS Path Prepend customized by specifying AS PATH for a BGP connection. Available as of provider version R2.19.2.
remoteGatewayIp Changes to this property will trigger replacement. String
Remote gateway IP. Required when tunnel_protocol != 'LAN'.
remoteLanIp Changes to this property will trigger replacement. String
Remote LAN IP. Required for BGP over LAN connection.
remoteSubnet String
Remote CIDRs joined as a string with ','. Required for a 'static' type connection.
remoteTunnelCidr Changes to this property will trigger replacement. String
Destination CIDR for the tunnel to the external device.
remoteVpcName Changes to this property will trigger replacement. String
Name of the remote VPC for a LAN BGP connection with an Azure Transit Gateway. Required when connection_type = 'bgp' and tunnel_protocol = 'LAN' with an Azure transit gateway. Must be in the format "::". Available as of provider version R2.18+.
switchToHaStandbyGateway Boolean
Switch to HA Standby Transit Gateway connection. Only valid with Transit Gateway that has Active-Standby Mode enabled and for non-HA external device. Valid values: true, false. Default: false. Available in provider version R2.17.1+.
tunnelProtocol Changes to this property will trigger replacement. String
Tunnel protocol, only valid with connection_type = 'bgp'. Valid values: 'IPsec', 'GRE' or 'LAN'. Default value: 'IPsec'. Case insensitive. Available as of provider version R2.18+.
vpcId Changes to this property will trigger replacement. String
VPC ID of the Aviatrix transit gateway. For GCP BGP over LAN connection, it is in the format of "vpc_name~-~project_name".

Package Details

Repository
aviatrix astipkovits/pulumi-aviatrix
License
Apache-2.0
Notes
This Pulumi package is based on the aviatrix Terraform Provider.