com.aliyun.vpc20160428.models

类 CreateVpnAttachmentRequest

java.lang.Object

com.aliyun.tea.TeaModel

com.aliyun.vpc20160428.models.CreateVpnAttachmentRequest

public class CreateVpnAttachmentRequest
extends com.aliyun.tea.TeaModel

嵌套类概要

嵌套类

限定符和类型	类和说明
static class	CreateVpnAttachmentRequest.CreateVpnAttachmentRequestTags

字段概要

字段

限定符和类型	字段和说明
Boolean	autoConfigRoute Specifies whether to automatically configure routes.
String	bgpConfig The Border Gateway Protocol (BGP) configurations: BgpConfig.EnableBgp: specifies whether to enable BGP.
String	clientToken The client token that is used to ensure the idempotence of the request.
String	customerGatewayId The ID of the customer gateway.
Boolean	effectImmediately Specifies whether to immediately start IPsec negotiations after the configuration takes effect.
Boolean	enableDpd Specifies whether to enable the dead peer detection (DPD) feature.
Boolean	enableNatTraversal Specifies whether to enable NAT traversal.
String	healthCheckConfig The health check configuration: HealthCheckConfig.enable: specifies whether to enable health checks.
String	ikeConfig The configurations of Phase 1 negotiations: IkeConfig.Psk: The pre-shared key that is used for authentication between the VPN gateway and the data center.
String	ipsecConfig The configurations of Phase 2 negotiations: IpsecConfig.IpsecEncAlg: the encryption algorithm that is used in Phase 2 negotiations.
String	localSubnet The CIDR block on the VPC side.
String	name The name of the IPsec-VPN connection.
String	networkType The network type of the IPsec-VPN connection.
String	ownerAccount
String	regionId The region ID of the IPsec-VPN connection.
String	remoteCaCert The peer CA certificate when a ShangMi (SM) VPN gateway is used to create the IPsec-VPN connection.
String	remoteSubnet The CIDR block on the data center side.
String	resourceGroupId The ID of the resource group to which the IPsec-VPN connection belongs.
String	resourceOwnerAccount
Long	resourceOwnerId
List<CreateVpnAttachmentRequest.CreateVpnAttachmentRequestTags>	tags The tag value.

构造器概要

构造器

构造器和说明
CreateVpnAttachmentRequest()

方法概要

限定符和类型	方法和说明
static CreateVpnAttachmentRequest	build(Map<String,?> map)
Boolean	getAutoConfigRoute()
String	getBgpConfig()
String	getClientToken()
String	getCustomerGatewayId()
Boolean	getEffectImmediately()
Boolean	getEnableDpd()
Boolean	getEnableNatTraversal()
String	getHealthCheckConfig()
String	getIkeConfig()
String	getIpsecConfig()
String	getLocalSubnet()
String	getName()
String	getNetworkType()
String	getOwnerAccount()
String	getRegionId()
String	getRemoteCaCert()
String	getRemoteSubnet()
String	getResourceGroupId()
String	getResourceOwnerAccount()
Long	getResourceOwnerId()
List<CreateVpnAttachmentRequest.CreateVpnAttachmentRequestTags>	getTags()
CreateVpnAttachmentRequest	setAutoConfigRoute(Boolean autoConfigRoute)
CreateVpnAttachmentRequest	setBgpConfig(String bgpConfig)
CreateVpnAttachmentRequest	setClientToken(String clientToken)
CreateVpnAttachmentRequest	setCustomerGatewayId(String customerGatewayId)
CreateVpnAttachmentRequest	setEffectImmediately(Boolean effectImmediately)
CreateVpnAttachmentRequest	setEnableDpd(Boolean enableDpd)
CreateVpnAttachmentRequest	setEnableNatTraversal(Boolean enableNatTraversal)
CreateVpnAttachmentRequest	setHealthCheckConfig(String healthCheckConfig)
CreateVpnAttachmentRequest	setIkeConfig(String ikeConfig)
CreateVpnAttachmentRequest	setIpsecConfig(String ipsecConfig)
CreateVpnAttachmentRequest	setLocalSubnet(String localSubnet)
CreateVpnAttachmentRequest	setName(String name)
CreateVpnAttachmentRequest	setNetworkType(String networkType)
CreateVpnAttachmentRequest	setOwnerAccount(String ownerAccount)
CreateVpnAttachmentRequest	setRegionId(String regionId)
CreateVpnAttachmentRequest	setRemoteCaCert(String remoteCaCert)
CreateVpnAttachmentRequest	setRemoteSubnet(String remoteSubnet)
CreateVpnAttachmentRequest	setResourceGroupId(String resourceGroupId)
CreateVpnAttachmentRequest	setResourceOwnerAccount(String resourceOwnerAccount)
CreateVpnAttachmentRequest	setResourceOwnerId(Long resourceOwnerId)
CreateVpnAttachmentRequest	setTags(List<CreateVpnAttachmentRequest.CreateVpnAttachmentRequestTags> tags)

从类继承的方法 com.aliyun.tea.TeaModel

build, buildMap, confirmType, confirmType, parseObject, toMap, toMap, toModel, validate, validateParams

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

autoConfigRoute

@NameInMap(value="AutoConfigRoute")
public Boolean autoConfigRoute

Specifies whether to automatically configure routes. Valid values:

• true (default)
• false

example:

true

bgpConfig

@NameInMap(value="BgpConfig")
public String bgpConfig

The Border Gateway Protocol (BGP) configurations:

• BgpConfig.EnableBgp: specifies whether to enable BGP. Valid values: true and false. Default value: false.

• BgpConfig.LocalAsn: the ASN on the Alibaba Cloud side. Valid values: 1 to 4294967295. Default value: 45104.

  You can enter the ASN in two segments. Separate the first 16 bits of the ASN from the remaining 16 bits with a period (.). Enter the number in each segment in decimal format.

  For example, if you enter 123.456, the ASN is: 123 × 65536 + 456 = 8061384.

• BgpConfig.TunnelCidr: the CIDR block of the IPsec tunnel. The CIDR block falls within 169.254.0.0/16. The subnet mask of the CIDR block must be 30 bits in length.

• LocalBgpIp: the BGP IP address on the Alibaba Cloud side. This IP address must fall within the CIDR block range of the IPsec tunnel.

• Before you configure BGP, we recommend that you learn about how BGP works and the limits. For more information, see BGP dynamic routing .
• We recommend that you use a private ASN to establish a connection with Alibaba Cloud over BGP. Refer to the relevant documentation for the private ASN range.

example:

{"EnableBgp":"true","LocalAsn":"45104","TunnelCidr":"169.254.11.0/30","LocalBgpIp":"169.254.11.1"}

clientToken

@NameInMap(value="ClientToken")
public String clientToken

The client token that is used to ensure the idempotence of the request.

You can use the client to generate the token, but you must make sure that the token is unique among different requests. The token can contain only ASCII characters.

If you do not specify this parameter, the system automatically uses the request ID as the client token. The request ID may be different for each request.

example:

123e4567-e89b-12d3-a456-4266****

customerGatewayId

@NameInMap(value="CustomerGatewayId")
public String customerGatewayId

The ID of the customer gateway.

This parameter is required.

example:

cgw-p0w2jemrcj5u61un8****

effectImmediately

@NameInMap(value="EffectImmediately")
public Boolean effectImmediately

Specifies whether to immediately start IPsec negotiations after the configuration takes effect. Valid values:

• true: immediately starts IPsec negotiations after the configuration is complete.
• false (default): starts IPsec negotiations when inbound traffic is received.

example:

false

enableDpd

@NameInMap(value="EnableDpd")
public Boolean enableDpd

Specifies whether to enable the dead peer detection (DPD) feature. Valid values:

• true (default) The initiator of the IPsec-VPN connection sends DPD packets to verify the existence and availability of the peer. If no response is received from the peer within a specified period of time, the connection fails. ISAKMP SAs and IPsec SAs are deleted. The IPsec tunnel is also deleted.
• false

example:

true

enableNatTraversal

@NameInMap(value="EnableNatTraversal")
public Boolean enableNatTraversal

Specifies whether to enable NAT traversal. Valid values:

• true (default) After NAT traversal is enabled, the initiator does not check the UDP ports during IKE negotiations and can automatically discover NAT gateway devices along the VPN tunnel.
• false

example:

true

healthCheckConfig

@NameInMap(value="HealthCheckConfig")
public String healthCheckConfig

The health check configuration:

• HealthCheckConfig.enable: specifies whether to enable health checks. Valid values: true and false. Default value: false.

• HealthCheckConfig.dip: the destination IP address configured for health checks. Enter the IP address on the data center side that the VPC can communicate with through the IPsec-VPN connection.

• HealthCheckConfig.sip: the source IP address configured for health checks. Enter the IP address on the VPC side that the data center can communicate with through the IPsec-VPN connection.

• HealthCheckConfig.interval: the time interval of health check retries. Unit: seconds. Default value: 3.

• HealthCheckConfig.retry: the maximum number of health check retries. Default value: 3.

• HealthCheckConfig.Policy: specifies whether to withdraw published routes when health checks fail. Valid values:

  • revoke_route (default): withdraws published routes.
  • reserve_route: does not withdraw published routes.

example:

{"enable":"true","dip":"192.168.1.1","sip":"10.1.1.1","interval":"3","retry":"3","Policy": "revoke_route"}

ikeConfig

@NameInMap(value="IkeConfig")
public String ikeConfig

The configurations of Phase 1 negotiations:

• IkeConfig.Psk: The pre-shared key that is used for authentication between the VPN gateway and the data center.

  • It must be 1 to 100 characters in length, and can contain letters, digits, and the following characters: ~!`@#$%^&*()_-+={}[]|;:\\",.<>/?
  • If you do not specify a pre-shared key, the system generates a random 16-character string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is generated by the system.

  The pre-shared key of the IPsec-VPN connection must be the same as the authentication key of the data center. Otherwise, a connection cannot be established between the data center and the VPN gateway.

• IkeConfig.IkeVersion: the IKE version. Valid values: ikev1 and ikev2. Default value: ikev1.

• IkeConfig.IkeMode: the negotiation mode. Valid values: main and aggressive. Default value: main.

• IkeConfig.IkeEncAlg: the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.

• IkeConfig.IkeAuthAlg: the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.

• IkeConfig.IkePfs: the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.

• IkeConfig.IkeLifetime: the SA lifetime determined by Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.

• IkeConfig.LocalId: the identifier on the Alibaba Cloud side. The identifier cannot exceed 100 characters in length. This parameter is empty by default.

• IkeConfig.RemoteId: the identifier on the data center side. The identifier cannot exceed 100 characters in length. The default value is the IP address of the customer gateway.

example:

{"Psk":"1234****","IkeVersion":"ikev1","IkeMode":"main","IkeEncAlg":"aes","IkeAuthAlg":"sha1","IkePfs":"group2","IkeLifetime":86400,"LocalId":"47.XX.XX.1","RemoteId":"47.XX.XX.2"}

ipsecConfig

@NameInMap(value="IpsecConfig")
public String ipsecConfig

The configurations of Phase 2 negotiations:

• IpsecConfig.IpsecEncAlg: the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
• IpsecConfig. IpsecAuthAlg: the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
• IpsecConfig. IpsecPfs: the Diffie-Hellman key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.
• IpsecConfig. IpsecLifetime: the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.

example:

{"IpsecEncAlg":"aes","IpsecAuthAlg":"sha1","IpsecPfs":"group2","IpsecLifetime":86400}

localSubnet

@NameInMap(value="LocalSubnet")
public String localSubnet

The CIDR block on the VPC side. The CIDR block is used in Phase 2 negotiations.

Separate multiple CIDR blocks with commas (,). Example: 192.168.1.0/24,192.168.2.0/24.

The following routing modes are supported:

• If you set LocalSubnet and RemoteSubnet to 0.0.0.0/0, the routing mode of the IPsec-VPN connection is set to Destination Routing Mode.
• If you set LocalSubnet and RemoteSubnet to specific CIDR blocks, the routing mode of the IPsec-VPN connection is set to Protected Data Flows.

This parameter is required.

example:

10.1.1.0/24,10.1.2.0/24

name

@NameInMap(value="Name")
public String name

The name of the IPsec-VPN connection.

The name must be 1 to 100 characters in length and cannot start with http:// or https://.

example:

nametest

networkType

@NameInMap(value="NetworkType")
public String networkType

The network type of the IPsec-VPN connection. Valid values:

• public (default)
• private

example:

public

ownerAccount

@NameInMap(value="OwnerAccount")
public String ownerAccount

regionId

@NameInMap(value="RegionId")
public String regionId

The region ID of the IPsec-VPN connection.

You can call the DescribeRegions operation to query the most recent region list.

This parameter is required.

example:

cn-hangzhou

remoteCaCert

@NameInMap(value="RemoteCaCert")
public String remoteCaCert

The peer CA certificate when a ShangMi (SM) VPN gateway is used to create the IPsec-VPN connection.

example:

-----BEGIN CERTIFICATE----- MIIB7zCCAZW**** -----END CERTIFICATE-----

remoteSubnet

@NameInMap(value="RemoteSubnet")
public String remoteSubnet

The CIDR block on the data center side. This CIDR block is used in Phase 2 negotiations.

Separate multiple CIDR blocks with commas (,). Example: 192.168.3.0/24,192.168.4.0/24.

The following routing modes are supported:

• If you set LocalSubnet and RemoteSubnet to 0.0.0.0/0, the routing mode of the IPsec-VPN connection is set to Destination Routing Mode.
• If you set LocalSubnet and RemoteSubnet to specific CIDR blocks, the routing mode of the IPsec-VPN connection is set to Protected Data Flows.

This parameter is required.

example:

10.1.3.0/24,10.1.4.0/24

resourceGroupId

@NameInMap(value="ResourceGroupId")
public String resourceGroupId

The ID of the resource group to which the IPsec-VPN connection belongs.

• You can call the ListResourceGroups operation to query resource group IDs.
• If you do not specify a resource group ID, the IPsec-VPN connection belongs to the default resource group.

example:

rg-acfmzs372yg****

resourceOwnerAccount

@NameInMap(value="ResourceOwnerAccount")
public String resourceOwnerAccount

resourceOwnerId

@NameInMap(value="ResourceOwnerId")
public Long resourceOwnerId

tags

@NameInMap(value="Tags")
public List<CreateVpnAttachmentRequest.CreateVpnAttachmentRequestTags> tags

The tag value.

The tag value can be an empty string and cannot exceed 128 characters in length. It cannot start with aliyun or acs:, and cannot contain http:// or https://.

Each tag key corresponds to one tag value. You can specify up to 20 tag values in each call.

构造器详细资料

CreateVpnAttachmentRequest

public CreateVpnAttachmentRequest()

方法详细资料

build

public static CreateVpnAttachmentRequest build(Map<String,?> map)
                                        throws Exception

抛出:

Exception

setAutoConfigRoute

public CreateVpnAttachmentRequest setAutoConfigRoute(Boolean autoConfigRoute)

getAutoConfigRoute

public Boolean getAutoConfigRoute()

setBgpConfig

public CreateVpnAttachmentRequest setBgpConfig(String bgpConfig)

getBgpConfig

public String getBgpConfig()

setClientToken

public CreateVpnAttachmentRequest setClientToken(String clientToken)

getClientToken

public String getClientToken()

setCustomerGatewayId

public CreateVpnAttachmentRequest setCustomerGatewayId(String customerGatewayId)

getCustomerGatewayId

public String getCustomerGatewayId()

setEffectImmediately

public CreateVpnAttachmentRequest setEffectImmediately(Boolean effectImmediately)

getEffectImmediately

public Boolean getEffectImmediately()

setEnableDpd

public CreateVpnAttachmentRequest setEnableDpd(Boolean enableDpd)

getEnableDpd

public Boolean getEnableDpd()

setEnableNatTraversal

public CreateVpnAttachmentRequest setEnableNatTraversal(Boolean enableNatTraversal)

getEnableNatTraversal

public Boolean getEnableNatTraversal()

setHealthCheckConfig

public CreateVpnAttachmentRequest setHealthCheckConfig(String healthCheckConfig)

getHealthCheckConfig

public String getHealthCheckConfig()

setIkeConfig

public CreateVpnAttachmentRequest setIkeConfig(String ikeConfig)

getIkeConfig

public String getIkeConfig()

setIpsecConfig

public CreateVpnAttachmentRequest setIpsecConfig(String ipsecConfig)

getIpsecConfig

public String getIpsecConfig()

setLocalSubnet

public CreateVpnAttachmentRequest setLocalSubnet(String localSubnet)

getLocalSubnet

public String getLocalSubnet()

setName

public CreateVpnAttachmentRequest setName(String name)

getName

public String getName()

setNetworkType

public CreateVpnAttachmentRequest setNetworkType(String networkType)

getNetworkType

public String getNetworkType()

setOwnerAccount

public CreateVpnAttachmentRequest setOwnerAccount(String ownerAccount)

getOwnerAccount

public String getOwnerAccount()

setRegionId

public CreateVpnAttachmentRequest setRegionId(String regionId)

getRegionId

public String getRegionId()

setRemoteCaCert

public CreateVpnAttachmentRequest setRemoteCaCert(String remoteCaCert)

getRemoteCaCert

public String getRemoteCaCert()

setRemoteSubnet

public CreateVpnAttachmentRequest setRemoteSubnet(String remoteSubnet)

getRemoteSubnet

public String getRemoteSubnet()

setResourceGroupId

public CreateVpnAttachmentRequest setResourceGroupId(String resourceGroupId)

getResourceGroupId

public String getResourceGroupId()

setResourceOwnerAccount

public CreateVpnAttachmentRequest setResourceOwnerAccount(String resourceOwnerAccount)

getResourceOwnerAccount

public String getResourceOwnerAccount()

setResourceOwnerId

public CreateVpnAttachmentRequest setResourceOwnerId(Long resourceOwnerId)

getResourceOwnerId

public Long getResourceOwnerId()

setTags

public CreateVpnAttachmentRequest setTags(List<CreateVpnAttachmentRequest.CreateVpnAttachmentRequestTags> tags)

getTags

public List<CreateVpnAttachmentRequest.CreateVpnAttachmentRequestTags> getTags()