public class CreateSslVpnServerRequest
extends com.aliyun.tea.TeaModel
| 限定符和类型 | 字段和说明 |
|---|---|
String |
cipher
The encryption algorithm that is used by the SSL-VPN connection.
|
String |
clientIpPool
The client CIDR block.
|
String |
clientToken
The client token that is used to ensure the idempotence of the request.
|
Boolean |
compress
Specifies whether to enable data compression.
|
Boolean |
enableMultiFactorAuth
Specifies whether to enable two-factor authentication.
|
String |
IDaaSApplicationId |
String |
IDaaSInstanceId
The Identity as a Service (IDaaS) instance ID.
|
String |
IDaaSRegionId
The ID of the region where the IDaaS instance is created.
|
String |
localSubnet
The local CIDR block.
|
String |
name
The SSL server name.
|
String |
ownerAccount |
Long |
ownerId |
Integer |
port
The port that is used by the SSL server.
|
String |
proto
The protocol that is used by the SSL server.
|
String |
regionId
The region ID of the VPN gateway.
|
String |
resourceOwnerAccount |
Long |
resourceOwnerId |
String |
vpnGatewayId
The ID of the VPN gateway.
|
| 构造器和说明 |
|---|
CreateSslVpnServerRequest() |
@NameInMap(value="Cipher") public String cipher
The encryption algorithm that is used by the SSL-VPN connection.
If the client uses Tunnelblick or OpenVPN 2.4.0 or later, the SSL server dynamically negotiates with the client about the encryption algorithm and uses the most secure encryption algorithm that is supported by the SSL server and the client. The encryption algorithm that you specify for the SSL server does not take effect.
If the client uses OpenVPN of a version that is earlier than 2.4.0, the SSL server and the client use the encryption algorithm that you specify for the SSL server. You can specify one of the following encryption algorithms for the SSL server:
AES-128-CBC
@NameInMap(value="ClientIpPool") public String clientIpPool
The client CIDR block.
It is the CIDR block from which an IP address is allocated to the virtual network interface controller (NIC) of the client. It is not the private CIDR block of the client.
If the client accesses the SSL server over an SSL-VPN connection, the VPN gateway assigns an IP address from the specified client CIDR block to the client. The client uses the assigned IP address to access cloud resources.
Make sure that the number of IP addresses in the client CIDR block is at least four times the maximum number of SSL-VPN connections supported by the VPN gateway.
For example, if you specify 192.168.0.0/24 as the client CIDR block, the system first divides a subnet CIDR block with a subnet mask of 30 from 192.168.0.0/24, such as 192.168.0.4/30. This subnet provides up to four IP addresses. Then, the system allocates an IP address from 192.168.0.4/30 to the client and uses the other three IP addresses to ensure network communication. In this case, one client consumes four IP addresses. Therefore, to ensure that an IP address is assigned to your client, you must make sure that the number of IP addresses in the client CIDR block is at least four times the maximum number of SSL-VPN connections supported by the VPN gateway with which the SSL server is associated.
- The subnet mask of the client CIDR block must be 16 to 29 bits in length.
- Make sure that the local CIDR block and the client CIDR block do not overlap with each other.
- We recommend that you use 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, or one of their subnets as the client CIDR block. If you want to specify a public CIDR block as the client CIDR block, you must specify the public CIDR block as the user CIDR block of the virtual private cloud (VPC). This way, the VPC can access the public CIDR block. For more information, see VPC FAQ.
- After you create an SSL server, the system automatically adds routes that point to the client CIDR block to the VPC route table, which is not displayed in the console by default. Do not add routes that point to the client CIDR block to the VPC route table again. Otherwise, SSL-VPN connections cannot work as expected.
This parameter is required.
example:192.168.1.0/24
@NameInMap(value="ClientToken") public String clientToken
The client token that is used to ensure the idempotence of the request.
You can use the client to generate the token, but you must make sure that the token is unique among different requests. The token can contain only ASCII characters.
example:If you do not specify this parameter, the system automatically uses the request ID as the client token. The request ID may be different for each request.
02fb3da4-130e-11e9-8e44-0016e04115b
@NameInMap(value="Compress") public Boolean compress
Specifies whether to enable data compression. Valid values:
false
@NameInMap(value="EnableMultiFactorAuth") public Boolean enableMultiFactorAuth
Specifies whether to enable two-factor authentication. If you enable two-factor authentication, you must configure IDaaSInstanceId and IDaaSRegionId. Valid values:
example:
- Two-factor authentication supports only earlier versions of IDaaS instances. If you do not have and cannot create earlier versions of IDaaS instances, you cannot enable two-factor authentication.
- If two-factor authentication is already enabled for existing SSL servers, you can continue to use two-factor authentication.
false
@NameInMap(value="IDaaSApplicationId") public String IDaaSApplicationId
@NameInMap(value="IDaaSInstanceId") public String IDaaSInstanceId
The Identity as a Service (IDaaS) instance ID.
example:idaas-cn-hangzhou-p****
@NameInMap(value="IDaaSRegionId") public String IDaaSRegionId
The ID of the region where the IDaaS instance is created.
example:cn-hangzhou
@NameInMap(value="LocalSubnet") public String localSubnet
The local CIDR block.
It is the CIDR block that your client needs to access by using the SSL-VPN connection.
This value can be the CIDR block of a VPC, a vSwitch, a data center that is connected to a VPC by using an Express Connect circuit, or an Alibaba Cloud service such as Object Storage Service (OSS).
The subnet mask of the specified local CIDR block must be 8 to 32 bits in length. You cannot specify the following CIDR blocks as the local CIDR blocks:
This parameter is required.
example:10.0.0.0/8
@NameInMap(value="Name") public String name
The SSL server name.
The name must be 1 to 100 characters in length and cannot start with http:// or https://.
sslvpnname
@NameInMap(value="OwnerAccount") public String ownerAccount
@NameInMap(value="OwnerId") public Long ownerId
@NameInMap(value="Port") public Integer port
The port that is used by the SSL server. Valid values of port numbers: 1 to 65535. Default value: 1194.
The following ports are not supported: 22, 2222, 22222, 9000, 9001, 9002, 7505, 80, 443, 53, 68, 123, 4510, 4560, 500, and 4500.
example:1194
@NameInMap(value="Proto") public String proto
The protocol that is used by the SSL server. Valid values:
UDP
@NameInMap(value="RegionId") public String regionId
The region ID of the VPN gateway.
You can call the DescribeRegions operation to query the most recent region list.
This parameter is required.
example:cn-shanghai
@NameInMap(value="ResourceOwnerAccount") public String resourceOwnerAccount
@NameInMap(value="ResourceOwnerId") public Long resourceOwnerId
@NameInMap(value="VpnGatewayId") public String vpnGatewayId
The ID of the VPN gateway.
This parameter is required.
example:vpn-bp1hgim8by0kc9nga****
public static CreateSslVpnServerRequest build(Map<String,?> map) throws Exception
Exceptionpublic CreateSslVpnServerRequest setCipher(String cipher)
public String getCipher()
public CreateSslVpnServerRequest setClientIpPool(String clientIpPool)
public String getClientIpPool()
public CreateSslVpnServerRequest setClientToken(String clientToken)
public String getClientToken()
public CreateSslVpnServerRequest setCompress(Boolean compress)
public Boolean getCompress()
public CreateSslVpnServerRequest setEnableMultiFactorAuth(Boolean enableMultiFactorAuth)
public Boolean getEnableMultiFactorAuth()
public CreateSslVpnServerRequest setIDaaSApplicationId(String IDaaSApplicationId)
public String getIDaaSApplicationId()
public CreateSslVpnServerRequest setIDaaSInstanceId(String IDaaSInstanceId)
public String getIDaaSInstanceId()
public CreateSslVpnServerRequest setIDaaSRegionId(String IDaaSRegionId)
public String getIDaaSRegionId()
public CreateSslVpnServerRequest setLocalSubnet(String localSubnet)
public String getLocalSubnet()
public CreateSslVpnServerRequest setName(String name)
public String getName()
public CreateSslVpnServerRequest setOwnerAccount(String ownerAccount)
public String getOwnerAccount()
public CreateSslVpnServerRequest setOwnerId(Long ownerId)
public Long getOwnerId()
public CreateSslVpnServerRequest setPort(Integer port)
public Integer getPort()
public CreateSslVpnServerRequest setProto(String proto)
public String getProto()
public CreateSslVpnServerRequest setRegionId(String regionId)
public String getRegionId()
public CreateSslVpnServerRequest setResourceOwnerAccount(String resourceOwnerAccount)
public String getResourceOwnerAccount()
public CreateSslVpnServerRequest setResourceOwnerId(Long resourceOwnerId)
public Long getResourceOwnerId()
public CreateSslVpnServerRequest setVpnGatewayId(String vpnGatewayId)
public String getVpnGatewayId()
Copyright © 2024. All rights reserved.