public class ModifyVpnAttachmentAttributeRequest
extends com.aliyun.tea.TeaModel
限定符和类型 | 字段和说明 |
---|---|
Boolean |
autoConfigRoute
Specifies whether to automatically configure routes.
|
String |
bgpConfig
The Border Gateway Protocol (BGP) configuration:
BgpConfig.EnableBgp: specifies whether to enable BGP.
|
String |
clientToken
The client token that is used to ensure the idempotence of the request.
|
String |
customerGatewayId
The customer gateway associated with the IPsec-VPN connection.
|
Boolean |
effectImmediately
Specifies whether to immediately start IPsec negotiations after the configuration takes effect.
|
Boolean |
enableDpd
Specifies whether to enable the dead peer detection (DPD) feature.
|
Boolean |
enableNatTraversal
Specifies whether to enable NAT traversal.
|
String |
healthCheckConfig
The health check configurations:
HealthCheckConfig.enable: specifies whether to enable the health check feature.
|
String |
ikeConfig
The configuration of Phase 1 negotiations:
IkeConfig.Psk: The pre-shared key that is used for authentication between the VPN gateway and the data center.
|
String |
ipsecConfig
The configuration of Phase 2 negotiations:
IpsecConfig.IpsecEncAlg: the encryption algorithm that is used in Phase 2 negotiations.
|
String |
localSubnet
The CIDR block of the virtual private cloud (VPC) that communicates with the data center.
|
String |
name
The name of the IPsec-VPN connection.
|
String |
networkType
The network type of the IPsec-VPN connection.
|
String |
ownerAccount |
String |
regionId
The ID of the region in which the IPsec-VPN connection is established.
|
String |
remoteCaCert
The peer CA certificate when a ShangMi (SM) VPN gateway is used to create the IPsec-VPN connection.
|
String |
remoteSubnet
The CIDR block of the data center that communicates with the VPC.
|
String |
resourceOwnerAccount |
Long |
resourceOwnerId |
String |
vpnConnectionId
The ID of the IPsec-VPN connection.
|
构造器和说明 |
---|
ModifyVpnAttachmentAttributeRequest() |
@NameInMap(value="AutoConfigRoute") public Boolean autoConfigRoute
Specifies whether to automatically configure routes. Valid values:
true
@NameInMap(value="BgpConfig") public String bgpConfig
The Border Gateway Protocol (BGP) configuration:
BgpConfig.EnableBgp: specifies whether to enable BGP. Valid values:
BgpConfig.LocalAsn: the autonomous system number (ASN) on the Alibaba Cloud side. Valid values: 1 to 4294967295.
You can enter the ASN in two segments. Separate the first 16 bits of the ASN from the remaining 16 bits with a period (.). Enter the number in each segment in decimal format.
For example, if you enter 123.456, the ASN is: 123 × 65536 + 456 = 8061384.
BgpConfig.TunnelCidr: the CIDR block of the IPsec tunnel. The CIDR block falls within 169.254.0.0/16. The subnet mask of the CIDR block must be 30 bits in length.
LocalBgpIp: the BGP IP address on the Alibaba Cloud side. This IP address must fall within the CIDR block of the IPsec tunnel.
example:
- Before you configure BGP, we recommend that you learn how BGP dynamic routing works and the limits of using BGP dynamic routing. For more information, see BGP dynamic routing .
- We recommend that you use a private ASN to establish a connection with Alibaba Cloud over BGP. Refer to the relevant documentation for the private ASN range.
{"EnableBgp":"true","LocalAsn":"45104","TunnelCidr":"169.254.11.0/30","LocalBgpIp":"169.254.11.1"}
@NameInMap(value="ClientToken") public String clientToken
The client token that is used to ensure the idempotence of the request.
You can use the client to generate the token, but you must make sure that the token is unique among different requests. The token can contain only ASCII characters.
example:If you do not specify this parameter, the system automatically uses the value of RequestId as the value of ClientToken. The request ID may be different for each request.
123e4567-e89b-12d3-a456-4266****
@NameInMap(value="CustomerGatewayId") public String customerGatewayId
The customer gateway associated with the IPsec-VPN connection.
example:cgw-p0w2jemrcj5u61un8****
@NameInMap(value="EffectImmediately") public Boolean effectImmediately
Specifies whether to immediately start IPsec negotiations after the configuration takes effect. Valid values:
false
@NameInMap(value="EnableDpd") public Boolean enableDpd
Specifies whether to enable the dead peer detection (DPD) feature. Valid values:
true
@NameInMap(value="EnableNatTraversal") public Boolean enableNatTraversal
Specifies whether to enable NAT traversal. Valid values:
true
@NameInMap(value="HealthCheckConfig") public String healthCheckConfig
The health check configurations:
HealthCheckConfig.enable: specifies whether to enable the health check feature. Valid values:
HealthCheckConfig.dip: the destination IP address that is used for health checks. Enter the IP address on the data center side that the VPC can communicate with through the IPsec-VPN connection.
HealthCheckConfig.sip: the source IP address that is used for health checks. Enter the IP address on the VPC side that the data center can communicate with through the IPsec-VPN connection.
HealthCheckConfig.interval: the interval between two consecutive health checks. Unit: seconds.
HealthCheckConfig.retry: the maximum number of health check retries.
HealthCheckConfig.Policy: specifies whether to withdraw advertised routes when health checks fail. Valid values:
{"enable":"true","dip":"192.168.1.1","sip":"10.1.1.1","interval":"3","retry":"3","Policy": "revoke_route"}
@NameInMap(value="IkeConfig") public String ikeConfig
The configuration of Phase 1 negotiations:
IkeConfig.Psk: The pre-shared key that is used for authentication between the VPN gateway and the data center.
~ ! ` @ # $ % ^ & * () _ - + = {} [] | ; : \\" , . < > / ?
The pre-shared key of the IPsec-VPN connection must be the same as the authentication key of the data center. Otherwise, you cannot establish a connection between the data center and the VPN gateway.
IkeConfig.IkeVersion: the Internet Key Exchange (IKE) version. Valid values: ikev1 and ikev2.
IkeConfig.IkeMode: the negotiation mode. Valid values: main and aggressive.
IkeConfig.IkeEncAlg: the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des.
IkeConfig.IkeAuthAlg: the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512.
IkeConfig.IkePfs: the Diffie-Hellman (DH) key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14.
IkeConfig.IkeLifetime: the security association (SA) lifetime determined by Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400.
IkeConfig.LocalIdIPsec: the identifier of the IPsec-VPN connection on the Alibaba Cloud side. The identifier can be up to 100 characters in length.
IkeConfig.RemoteId: the identifier of the IPsec-VPN connection on the data center side. The identifier can be up to 100 characters in length.
{"Psk":"1234****","IkeVersion":"ikev1","IkeMode":"main","IkeEncAlg":"aes","IkeAuthAlg":"sha1","IkePfs":"group2","IkeLifetime":86400,"LocalId":"47.XX.XX.1","RemoteId":"47.XX.XX.2"}
@NameInMap(value="IpsecConfig") public String ipsecConfig
The configuration of Phase 2 negotiations:
{"IpsecEncAlg":"aes","IpsecAuthAlg":"sha1","IpsecPfs":"group2","IpsecLifetime":86400}
@NameInMap(value="LocalSubnet") public String localSubnet
The CIDR block of the virtual private cloud (VPC) that communicates with the data center. The CIDR block is used in Phase 2 negotiations.
Separate multiple CIDR blocks with commas (,). Example: 192.168.1.0/24,192.168.2.0/24.
The following routing modes are supported:
10.1.1.0/24,10.1.2.0/24
@NameInMap(value="Name") public String name
The name of the IPsec-VPN connection.
The name must be 1 to 100 characters in length and cannot start with http://
or https://
.
nametest
@NameInMap(value="NetworkType") public String networkType
The network type of the IPsec-VPN connection. Valid values:
public
@NameInMap(value="OwnerAccount") public String ownerAccount
@NameInMap(value="RegionId") public String regionId
The ID of the region in which the IPsec-VPN connection is established.
You can call the DescribeRegions operation to query the most recent region list.
This parameter is required.
example:cn-hangzhou
@NameInMap(value="RemoteCaCert") public String remoteCaCert
The peer CA certificate when a ShangMi (SM) VPN gateway is used to create the IPsec-VPN connection.
example:c20ycDI1NnYxIENBIChURVNUIFN****
@NameInMap(value="RemoteSubnet") public String remoteSubnet
The CIDR block of the data center that communicates with the VPC. This CIDR block is used in Phase 2 negotiations.
Separate multiple CIDR blocks with commas (,). Example: 192.168.3.0/24,192.168.4.0/24.
The following routing modes are supported:
10.1.3.0/24,10.1.4.0/24
@NameInMap(value="ResourceOwnerAccount") public String resourceOwnerAccount
@NameInMap(value="ResourceOwnerId") public Long resourceOwnerId
@NameInMap(value="VpnConnectionId") public String vpnConnectionId
The ID of the IPsec-VPN connection.
This parameter is required.
example:vco-p0w5112fgnl2ihlmf****
public static ModifyVpnAttachmentAttributeRequest build(Map<String,?> map) throws Exception
Exception
public ModifyVpnAttachmentAttributeRequest setAutoConfigRoute(Boolean autoConfigRoute)
public Boolean getAutoConfigRoute()
public ModifyVpnAttachmentAttributeRequest setBgpConfig(String bgpConfig)
public String getBgpConfig()
public ModifyVpnAttachmentAttributeRequest setClientToken(String clientToken)
public String getClientToken()
public ModifyVpnAttachmentAttributeRequest setCustomerGatewayId(String customerGatewayId)
public String getCustomerGatewayId()
public ModifyVpnAttachmentAttributeRequest setEffectImmediately(Boolean effectImmediately)
public Boolean getEffectImmediately()
public ModifyVpnAttachmentAttributeRequest setEnableDpd(Boolean enableDpd)
public Boolean getEnableDpd()
public ModifyVpnAttachmentAttributeRequest setEnableNatTraversal(Boolean enableNatTraversal)
public Boolean getEnableNatTraversal()
public ModifyVpnAttachmentAttributeRequest setHealthCheckConfig(String healthCheckConfig)
public String getHealthCheckConfig()
public ModifyVpnAttachmentAttributeRequest setIkeConfig(String ikeConfig)
public String getIkeConfig()
public ModifyVpnAttachmentAttributeRequest setIpsecConfig(String ipsecConfig)
public String getIpsecConfig()
public ModifyVpnAttachmentAttributeRequest setLocalSubnet(String localSubnet)
public String getLocalSubnet()
public ModifyVpnAttachmentAttributeRequest setName(String name)
public String getName()
public ModifyVpnAttachmentAttributeRequest setNetworkType(String networkType)
public String getNetworkType()
public ModifyVpnAttachmentAttributeRequest setOwnerAccount(String ownerAccount)
public String getOwnerAccount()
public ModifyVpnAttachmentAttributeRequest setRegionId(String regionId)
public String getRegionId()
public ModifyVpnAttachmentAttributeRequest setRemoteCaCert(String remoteCaCert)
public String getRemoteCaCert()
public ModifyVpnAttachmentAttributeRequest setRemoteSubnet(String remoteSubnet)
public String getRemoteSubnet()
public ModifyVpnAttachmentAttributeRequest setResourceOwnerAccount(String resourceOwnerAccount)
public String getResourceOwnerAccount()
public ModifyVpnAttachmentAttributeRequest setResourceOwnerId(Long resourceOwnerId)
public Long getResourceOwnerId()
public ModifyVpnAttachmentAttributeRequest setVpnConnectionId(String vpnConnectionId)
public String getVpnConnectionId()
Copyright © 2024. All rights reserved.