Oracle Cloud Infrastructure v2.31.0 published on Thursday, Apr 17, 2025 by Pulumi
oci.Core.getIpsecConnectionTunnel
Explore with Pulumi AI
This data source provides details about a specific Ip Sec Connection Tunnel resource in Oracle Cloud Infrastructure Core service.
Gets the specified IPSec connection’s specified tunnel basic information.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";
const testIpSecConnectionTunnel = oci.Core.getIpsecConnectionTunnel({
    ipsecId: testIpsec.id,
    tunnelId: testIpSecConnectionTunnels.ipSecConnectionTunnels[0].id,
});
import pulumi
import pulumi_oci as oci
test_ip_sec_connection_tunnel = oci.Core.get_ipsec_connection_tunnel(ipsec_id=test_ipsec["id"],
    tunnel_id=test_ip_sec_connection_tunnels["ipSecConnectionTunnels"][0]["id"])
package main
import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/core"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := core.GetIpsecConnectionTunnel(ctx, &core.GetIpsecConnectionTunnelArgs{
			IpsecId:  testIpsec.Id,
			TunnelId: testIpSecConnectionTunnels.IpSecConnectionTunnels[0].Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;
return await Deployment.RunAsync(() => 
{
    var testIpSecConnectionTunnel = Oci.Core.GetIpsecConnectionTunnel.Invoke(new()
    {
        IpsecId = testIpsec.Id,
        TunnelId = testIpSecConnectionTunnels.IpSecConnectionTunnels[0].Id,
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Core.CoreFunctions;
import com.pulumi.oci.Core.inputs.GetIpsecConnectionTunnelArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var testIpSecConnectionTunnel = CoreFunctions.getIpsecConnectionTunnel(GetIpsecConnectionTunnelArgs.builder()
            .ipsecId(testIpsec.id())
            .tunnelId(testIpSecConnectionTunnels.ipSecConnectionTunnels()[0].id())
            .build());
    }
}
variables:
  testIpSecConnectionTunnel:
    fn::invoke:
      function: oci:Core:getIpsecConnectionTunnel
      arguments:
        ipsecId: ${testIpsec.id}
        tunnelId: ${testIpSecConnectionTunnels.ipSecConnectionTunnels[0].id}
Using getIpsecConnectionTunnel
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getIpsecConnectionTunnel(args: GetIpsecConnectionTunnelArgs, opts?: InvokeOptions): Promise<GetIpsecConnectionTunnelResult>
function getIpsecConnectionTunnelOutput(args: GetIpsecConnectionTunnelOutputArgs, opts?: InvokeOptions): Output<GetIpsecConnectionTunnelResult>def get_ipsec_connection_tunnel(ipsec_id: Optional[str] = None,
                                tunnel_id: Optional[str] = None,
                                opts: Optional[InvokeOptions] = None) -> GetIpsecConnectionTunnelResult
def get_ipsec_connection_tunnel_output(ipsec_id: Optional[pulumi.Input[str]] = None,
                                tunnel_id: Optional[pulumi.Input[str]] = None,
                                opts: Optional[InvokeOptions] = None) -> Output[GetIpsecConnectionTunnelResult]func GetIpsecConnectionTunnel(ctx *Context, args *GetIpsecConnectionTunnelArgs, opts ...InvokeOption) (*GetIpsecConnectionTunnelResult, error)
func GetIpsecConnectionTunnelOutput(ctx *Context, args *GetIpsecConnectionTunnelOutputArgs, opts ...InvokeOption) GetIpsecConnectionTunnelResultOutput> Note: This function is named GetIpsecConnectionTunnel in the Go SDK.
public static class GetIpsecConnectionTunnel 
{
    public static Task<GetIpsecConnectionTunnelResult> InvokeAsync(GetIpsecConnectionTunnelArgs args, InvokeOptions? opts = null)
    public static Output<GetIpsecConnectionTunnelResult> Invoke(GetIpsecConnectionTunnelInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetIpsecConnectionTunnelResult> getIpsecConnectionTunnel(GetIpsecConnectionTunnelArgs args, InvokeOptions options)
public static Output<GetIpsecConnectionTunnelResult> getIpsecConnectionTunnel(GetIpsecConnectionTunnelArgs args, InvokeOptions options)
fn::invoke:
  function: oci:Core/getIpsecConnectionTunnel:getIpsecConnectionTunnel
  arguments:
    # arguments dictionaryThe following arguments are supported:
getIpsecConnectionTunnel Result
The following output properties are available:
- AssociatedVirtual List<string>Circuits 
- BgpSession List<GetInfos Ipsec Connection Tunnel Bgp Session Info> 
- Information needed to establish a BGP Session on an interface.
- CompartmentId string
- The OCID of the compartment containing the tunnel.
- CpeIp string
- The IP address of Cpe headend. Example: 129.146.17.50
- DisplayName string
- A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- DpdConfigs List<GetIpsec Connection Tunnel Dpd Config> 
- DpdMode string
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- DpdTimeout intIn Sec 
- DPD timeout in seconds.
- EncryptionDomain List<GetConfigs Ipsec Connection Tunnel Encryption Domain Config> 
- Configuration information used by the encryption domain policy.
- Id string
- The tunnel's Oracle ID (OCID).
- IkeVersion string
- Internet Key Exchange protocol version.
- IpsecId string
- NatTranslation stringEnabled 
- By default (the AUTOsetting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
- OracleCan stringInitiate 
- Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
- PhaseOne List<GetDetails Ipsec Connection Tunnel Phase One Detail> 
- IPSec tunnel details specific to ISAKMP phase one.
- PhaseTwo List<GetDetails Ipsec Connection Tunnel Phase Two Detail> 
- IPsec tunnel detail information specific to phase two.
- Routing string
- the routing strategy used for this tunnel, either static route or BGP dynamic routing
- string
- State string
- The IPSec connection's tunnel's lifecycle state.
- Status string
- The tunnel's current state.
- TimeCreated string
- The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- TimeStatus stringUpdated 
- When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- TunnelId string
- VpnIp string
- The IP address of Oracle's VPN headend. Example: 129.146.17.50
- AssociatedVirtual []stringCircuits 
- BgpSession []GetInfos Ipsec Connection Tunnel Bgp Session Info 
- Information needed to establish a BGP Session on an interface.
- CompartmentId string
- The OCID of the compartment containing the tunnel.
- CpeIp string
- The IP address of Cpe headend. Example: 129.146.17.50
- DisplayName string
- A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- DpdConfigs []GetIpsec Connection Tunnel Dpd Config 
- DpdMode string
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- DpdTimeout intIn Sec 
- DPD timeout in seconds.
- EncryptionDomain []GetConfigs Ipsec Connection Tunnel Encryption Domain Config 
- Configuration information used by the encryption domain policy.
- Id string
- The tunnel's Oracle ID (OCID).
- IkeVersion string
- Internet Key Exchange protocol version.
- IpsecId string
- NatTranslation stringEnabled 
- By default (the AUTOsetting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
- OracleCan stringInitiate 
- Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
- PhaseOne []GetDetails Ipsec Connection Tunnel Phase One Detail 
- IPSec tunnel details specific to ISAKMP phase one.
- PhaseTwo []GetDetails Ipsec Connection Tunnel Phase Two Detail 
- IPsec tunnel detail information specific to phase two.
- Routing string
- the routing strategy used for this tunnel, either static route or BGP dynamic routing
- string
- State string
- The IPSec connection's tunnel's lifecycle state.
- Status string
- The tunnel's current state.
- TimeCreated string
- The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- TimeStatus stringUpdated 
- When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- TunnelId string
- VpnIp string
- The IP address of Oracle's VPN headend. Example: 129.146.17.50
- associatedVirtual List<String>Circuits 
- bgpSession List<GetInfos Ipsec Connection Tunnel Bgp Session Info> 
- Information needed to establish a BGP Session on an interface.
- compartmentId String
- The OCID of the compartment containing the tunnel.
- cpeIp String
- The IP address of Cpe headend. Example: 129.146.17.50
- displayName String
- A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- dpdConfigs List<GetIpsec Connection Tunnel Dpd Config> 
- dpdMode String
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- dpdTimeout IntegerIn Sec 
- DPD timeout in seconds.
- encryptionDomain List<GetConfigs Ipsec Connection Tunnel Encryption Domain Config> 
- Configuration information used by the encryption domain policy.
- id String
- The tunnel's Oracle ID (OCID).
- ikeVersion String
- Internet Key Exchange protocol version.
- ipsecId String
- natTranslation StringEnabled 
- By default (the AUTOsetting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
- oracleCan StringInitiate 
- Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
- phaseOne List<GetDetails Ipsec Connection Tunnel Phase One Detail> 
- IPSec tunnel details specific to ISAKMP phase one.
- phaseTwo List<GetDetails Ipsec Connection Tunnel Phase Two Detail> 
- IPsec tunnel detail information specific to phase two.
- routing String
- the routing strategy used for this tunnel, either static route or BGP dynamic routing
- String
- state String
- The IPSec connection's tunnel's lifecycle state.
- status String
- The tunnel's current state.
- timeCreated String
- The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- timeStatus StringUpdated 
- When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- tunnelId String
- vpnIp String
- The IP address of Oracle's VPN headend. Example: 129.146.17.50
- associatedVirtual string[]Circuits 
- bgpSession GetInfos Ipsec Connection Tunnel Bgp Session Info[] 
- Information needed to establish a BGP Session on an interface.
- compartmentId string
- The OCID of the compartment containing the tunnel.
- cpeIp string
- The IP address of Cpe headend. Example: 129.146.17.50
- displayName string
- A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- dpdConfigs GetIpsec Connection Tunnel Dpd Config[] 
- dpdMode string
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- dpdTimeout numberIn Sec 
- DPD timeout in seconds.
- encryptionDomain GetConfigs Ipsec Connection Tunnel Encryption Domain Config[] 
- Configuration information used by the encryption domain policy.
- id string
- The tunnel's Oracle ID (OCID).
- ikeVersion string
- Internet Key Exchange protocol version.
- ipsecId string
- natTranslation stringEnabled 
- By default (the AUTOsetting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
- oracleCan stringInitiate 
- Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
- phaseOne GetDetails Ipsec Connection Tunnel Phase One Detail[] 
- IPSec tunnel details specific to ISAKMP phase one.
- phaseTwo GetDetails Ipsec Connection Tunnel Phase Two Detail[] 
- IPsec tunnel detail information specific to phase two.
- routing string
- the routing strategy used for this tunnel, either static route or BGP dynamic routing
- string
- state string
- The IPSec connection's tunnel's lifecycle state.
- status string
- The tunnel's current state.
- timeCreated string
- The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- timeStatus stringUpdated 
- When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- tunnelId string
- vpnIp string
- The IP address of Oracle's VPN headend. Example: 129.146.17.50
- associated_virtual_ Sequence[str]circuits 
- bgp_session_ Sequence[core.infos Get Ipsec Connection Tunnel Bgp Session Info] 
- Information needed to establish a BGP Session on an interface.
- compartment_id str
- The OCID of the compartment containing the tunnel.
- cpe_ip str
- The IP address of Cpe headend. Example: 129.146.17.50
- display_name str
- A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- dpd_configs Sequence[core.Get Ipsec Connection Tunnel Dpd Config] 
- dpd_mode str
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- dpd_timeout_ intin_ sec 
- DPD timeout in seconds.
- encryption_domain_ Sequence[core.configs Get Ipsec Connection Tunnel Encryption Domain Config] 
- Configuration information used by the encryption domain policy.
- id str
- The tunnel's Oracle ID (OCID).
- ike_version str
- Internet Key Exchange protocol version.
- ipsec_id str
- nat_translation_ strenabled 
- By default (the AUTOsetting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
- oracle_can_ strinitiate 
- Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
- phase_one_ Sequence[core.details Get Ipsec Connection Tunnel Phase One Detail] 
- IPSec tunnel details specific to ISAKMP phase one.
- phase_two_ Sequence[core.details Get Ipsec Connection Tunnel Phase Two Detail] 
- IPsec tunnel detail information specific to phase two.
- routing str
- the routing strategy used for this tunnel, either static route or BGP dynamic routing
- str
- state str
- The IPSec connection's tunnel's lifecycle state.
- status str
- The tunnel's current state.
- time_created str
- The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- time_status_ strupdated 
- When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- tunnel_id str
- vpn_ip str
- The IP address of Oracle's VPN headend. Example: 129.146.17.50
- associatedVirtual List<String>Circuits 
- bgpSession List<Property Map>Infos 
- Information needed to establish a BGP Session on an interface.
- compartmentId String
- The OCID of the compartment containing the tunnel.
- cpeIp String
- The IP address of Cpe headend. Example: 129.146.17.50
- displayName String
- A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.
- dpdConfigs List<Property Map>
- dpdMode String
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- dpdTimeout NumberIn Sec 
- DPD timeout in seconds.
- encryptionDomain List<Property Map>Configs 
- Configuration information used by the encryption domain policy.
- id String
- The tunnel's Oracle ID (OCID).
- ikeVersion String
- Internet Key Exchange protocol version.
- ipsecId String
- natTranslation StringEnabled 
- By default (the AUTOsetting), IKE sends packets with a source and destination port set to 500, and when it detects that the port used to forward packets has changed (most likely because a NAT device is between the CPE device and the Oracle VPN headend) it will try to negotiate the use of NAT-T.
- oracleCan StringInitiate 
- Indicates whether Oracle can only respond to a request to start an IPSec tunnel from the CPE device, or both respond to and initiate requests.
- phaseOne List<Property Map>Details 
- IPSec tunnel details specific to ISAKMP phase one.
- phaseTwo List<Property Map>Details 
- IPsec tunnel detail information specific to phase two.
- routing String
- the routing strategy used for this tunnel, either static route or BGP dynamic routing
- String
- state String
- The IPSec connection's tunnel's lifecycle state.
- status String
- The tunnel's current state.
- timeCreated String
- The date and time the IPSec connection tunnel was created, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- timeStatus StringUpdated 
- When the status of the tunnel last changed, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- tunnelId String
- vpnIp String
- The IP address of Oracle's VPN headend. Example: 129.146.17.50
Supporting Types
GetIpsecConnectionTunnelBgpSessionInfo      
- BgpIpv6State string
- The state of the BGP IPv6 session.
- BgpIpv6state string
- BgpState string
- the state of the BGP.
- CustomerBgp stringAsn 
- This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- CustomerInterface stringIp 
- This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
- CustomerInterface stringIpv6 
- The IPv6 address for the CPE end of the inside tunnel interface.
- OracleBgp stringAsn 
- This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- OracleInterface stringIp 
- This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
- OracleInterface stringIpv6 
- The IPv6 address for the Oracle end of the inside tunnel interface.
- BgpIpv6State string
- The state of the BGP IPv6 session.
- BgpIpv6state string
- BgpState string
- the state of the BGP.
- CustomerBgp stringAsn 
- This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- CustomerInterface stringIp 
- This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
- CustomerInterface stringIpv6 
- The IPv6 address for the CPE end of the inside tunnel interface.
- OracleBgp stringAsn 
- This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- OracleInterface stringIp 
- This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
- OracleInterface stringIpv6 
- The IPv6 address for the Oracle end of the inside tunnel interface.
- bgpIpv6State String
- The state of the BGP IPv6 session.
- bgpIpv6state String
- bgpState String
- the state of the BGP.
- customerBgp StringAsn 
- This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- customerInterface StringIp 
- This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
- customerInterface StringIpv6 
- The IPv6 address for the CPE end of the inside tunnel interface.
- oracleBgp StringAsn 
- This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- oracleInterface StringIp 
- This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
- oracleInterface StringIpv6 
- The IPv6 address for the Oracle end of the inside tunnel interface.
- bgpIpv6State string
- The state of the BGP IPv6 session.
- bgpIpv6state string
- bgpState string
- the state of the BGP.
- customerBgp stringAsn 
- This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- customerInterface stringIp 
- This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
- customerInterface stringIpv6 
- The IPv6 address for the CPE end of the inside tunnel interface.
- oracleBgp stringAsn 
- This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- oracleInterface stringIp 
- This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
- oracleInterface stringIpv6 
- The IPv6 address for the Oracle end of the inside tunnel interface.
- bgp_ipv6_ strstate 
- The state of the BGP IPv6 session.
- bgp_ipv6state str
- bgp_state str
- the state of the BGP.
- customer_bgp_ strasn 
- This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- customer_interface_ strip 
- This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
- customer_interface_ stripv6 
- The IPv6 address for the CPE end of the inside tunnel interface.
- oracle_bgp_ strasn 
- This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- oracle_interface_ strip 
- This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
- oracle_interface_ stripv6 
- The IPv6 address for the Oracle end of the inside tunnel interface.
- bgpIpv6State String
- The state of the BGP IPv6 session.
- bgpIpv6state String
- bgpState String
- the state of the BGP.
- customerBgp StringAsn 
- This is the value of the remote Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- customerInterface StringIp 
- This is the IPv4 Address used in the BGP peering session for the non-Oracle router. Example: 10.0.0.2/31
- customerInterface StringIpv6 
- The IPv6 address for the CPE end of the inside tunnel interface.
- oracleBgp StringAsn 
- This is the value of the Oracle Bgp ASN in asplain format, as a string. Example: 1587232876 (4 byte ASN) or 12345 (2 byte ASN)
- oracleInterface StringIp 
- This is the IPv4 Address used in the BGP peering session for the Oracle router. Example: 10.0.0.1/31
- oracleInterface StringIpv6 
- The IPv6 address for the Oracle end of the inside tunnel interface.
GetIpsecConnectionTunnelDpdConfig     
- DpdMode string
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- DpdTimeout intIn Sec 
- DPD timeout in seconds.
- DpdMode string
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- DpdTimeout intIn Sec 
- DPD timeout in seconds.
- dpdMode String
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- dpdTimeout IntegerIn Sec 
- DPD timeout in seconds.
- dpdMode string
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- dpdTimeout numberIn Sec 
- DPD timeout in seconds.
- dpd_mode str
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- dpd_timeout_ intin_ sec 
- DPD timeout in seconds.
- dpdMode String
- Dead peer detection (DPD) mode set on the Oracle side of the connection.
- dpdTimeout NumberIn Sec 
- DPD timeout in seconds.
GetIpsecConnectionTunnelEncryptionDomainConfig      
- CpeTraffic List<string>Selectors 
- Lists IPv4 or IPv6-enabled subnets in your on-premises network.
- OracleTraffic List<string>Selectors 
- Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
- CpeTraffic []stringSelectors 
- Lists IPv4 or IPv6-enabled subnets in your on-premises network.
- OracleTraffic []stringSelectors 
- Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
- cpeTraffic List<String>Selectors 
- Lists IPv4 or IPv6-enabled subnets in your on-premises network.
- oracleTraffic List<String>Selectors 
- Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
- cpeTraffic string[]Selectors 
- Lists IPv4 or IPv6-enabled subnets in your on-premises network.
- oracleTraffic string[]Selectors 
- Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
- cpe_traffic_ Sequence[str]selectors 
- Lists IPv4 or IPv6-enabled subnets in your on-premises network.
- oracle_traffic_ Sequence[str]selectors 
- Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
- cpeTraffic List<String>Selectors 
- Lists IPv4 or IPv6-enabled subnets in your on-premises network.
- oracleTraffic List<String>Selectors 
- Lists IPv4 or IPv6-enabled subnets in your Oracle tenancy.
GetIpsecConnectionTunnelPhaseOneDetail      
- CustomAuthentication stringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- CustomDh stringGroup 
- The proposed custom Diffie-Hellman group.
- CustomEncryption stringAlgorithm 
- The proposed custom phase two encryption algorithm.
- IsCustom boolPhase One Config 
- Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
- IsIke boolEstablished 
- Indicates whether IKE phase one is established.
- Lifetime int
- The total configured lifetime of the IKE security association.
- NegotiatedAuthentication stringAlgorithm 
- The negotiated phase two authentication algorithm.
- NegotiatedDh stringGroup 
- The negotiated Diffie-Hellman group.
- NegotiatedEncryption stringAlgorithm 
- The negotiated encryption algorithm.
- RemainingLifetime string
- RemainingLifetime intInt 
- The remaining lifetime before the key is refreshed.
- RemainingLifetime stringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- CustomAuthentication stringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- CustomDh stringGroup 
- The proposed custom Diffie-Hellman group.
- CustomEncryption stringAlgorithm 
- The proposed custom phase two encryption algorithm.
- IsCustom boolPhase One Config 
- Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
- IsIke boolEstablished 
- Indicates whether IKE phase one is established.
- Lifetime int
- The total configured lifetime of the IKE security association.
- NegotiatedAuthentication stringAlgorithm 
- The negotiated phase two authentication algorithm.
- NegotiatedDh stringGroup 
- The negotiated Diffie-Hellman group.
- NegotiatedEncryption stringAlgorithm 
- The negotiated encryption algorithm.
- RemainingLifetime string
- RemainingLifetime intInt 
- The remaining lifetime before the key is refreshed.
- RemainingLifetime stringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- customAuthentication StringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- customDh StringGroup 
- The proposed custom Diffie-Hellman group.
- customEncryption StringAlgorithm 
- The proposed custom phase two encryption algorithm.
- isCustom BooleanPhase One Config 
- Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
- isIke BooleanEstablished 
- Indicates whether IKE phase one is established.
- lifetime Integer
- The total configured lifetime of the IKE security association.
- negotiatedAuthentication StringAlgorithm 
- The negotiated phase two authentication algorithm.
- negotiatedDh StringGroup 
- The negotiated Diffie-Hellman group.
- negotiatedEncryption StringAlgorithm 
- The negotiated encryption algorithm.
- remainingLifetime String
- remainingLifetime IntegerInt 
- The remaining lifetime before the key is refreshed.
- remainingLifetime StringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- customAuthentication stringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- customDh stringGroup 
- The proposed custom Diffie-Hellman group.
- customEncryption stringAlgorithm 
- The proposed custom phase two encryption algorithm.
- isCustom booleanPhase One Config 
- Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
- isIke booleanEstablished 
- Indicates whether IKE phase one is established.
- lifetime number
- The total configured lifetime of the IKE security association.
- negotiatedAuthentication stringAlgorithm 
- The negotiated phase two authentication algorithm.
- negotiatedDh stringGroup 
- The negotiated Diffie-Hellman group.
- negotiatedEncryption stringAlgorithm 
- The negotiated encryption algorithm.
- remainingLifetime string
- remainingLifetime numberInt 
- The remaining lifetime before the key is refreshed.
- remainingLifetime stringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- custom_authentication_ stralgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- custom_dh_ strgroup 
- The proposed custom Diffie-Hellman group.
- custom_encryption_ stralgorithm 
- The proposed custom phase two encryption algorithm.
- is_custom_ boolphase_ one_ config 
- Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
- is_ike_ boolestablished 
- Indicates whether IKE phase one is established.
- lifetime int
- The total configured lifetime of the IKE security association.
- negotiated_authentication_ stralgorithm 
- The negotiated phase two authentication algorithm.
- negotiated_dh_ strgroup 
- The negotiated Diffie-Hellman group.
- negotiated_encryption_ stralgorithm 
- The negotiated encryption algorithm.
- remaining_lifetime str
- remaining_lifetime_ intint 
- The remaining lifetime before the key is refreshed.
- remaining_lifetime_ strlast_ retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- customAuthentication StringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- customDh StringGroup 
- The proposed custom Diffie-Hellman group.
- customEncryption StringAlgorithm 
- The proposed custom phase two encryption algorithm.
- isCustom BooleanPhase One Config 
- Indicates whether custom phase one configuration is enabled. If this option is not enabled, default settings are proposed.
- isIke BooleanEstablished 
- Indicates whether IKE phase one is established.
- lifetime Number
- The total configured lifetime of the IKE security association.
- negotiatedAuthentication StringAlgorithm 
- The negotiated phase two authentication algorithm.
- negotiatedDh StringGroup 
- The negotiated Diffie-Hellman group.
- negotiatedEncryption StringAlgorithm 
- The negotiated encryption algorithm.
- remainingLifetime String
- remainingLifetime NumberInt 
- The remaining lifetime before the key is refreshed.
- remainingLifetime StringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
GetIpsecConnectionTunnelPhaseTwoDetail      
- CustomAuthentication stringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- CustomEncryption stringAlgorithm 
- The proposed custom phase two encryption algorithm.
- DhGroup string
- The proposed Diffie-Hellman group.
- IsCustom boolPhase Two Config 
- Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
- IsEsp boolEstablished 
- Indicates that ESP phase two is established.
- IsPfs boolEnabled 
- Indicates that PFS (perfect forward secrecy) is enabled.
- Lifetime int
- The total configured lifetime of the IKE security association.
- NegotiatedAuthentication stringAlgorithm 
- The negotiated phase two authentication algorithm.
- NegotiatedDh stringGroup 
- The negotiated Diffie-Hellman group.
- NegotiatedEncryption stringAlgorithm 
- The negotiated encryption algorithm.
- RemainingLifetime string
- RemainingLifetime intInt 
- The remaining lifetime before the key is refreshed.
- RemainingLifetime stringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- CustomAuthentication stringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- CustomEncryption stringAlgorithm 
- The proposed custom phase two encryption algorithm.
- DhGroup string
- The proposed Diffie-Hellman group.
- IsCustom boolPhase Two Config 
- Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
- IsEsp boolEstablished 
- Indicates that ESP phase two is established.
- IsPfs boolEnabled 
- Indicates that PFS (perfect forward secrecy) is enabled.
- Lifetime int
- The total configured lifetime of the IKE security association.
- NegotiatedAuthentication stringAlgorithm 
- The negotiated phase two authentication algorithm.
- NegotiatedDh stringGroup 
- The negotiated Diffie-Hellman group.
- NegotiatedEncryption stringAlgorithm 
- The negotiated encryption algorithm.
- RemainingLifetime string
- RemainingLifetime intInt 
- The remaining lifetime before the key is refreshed.
- RemainingLifetime stringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- customAuthentication StringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- customEncryption StringAlgorithm 
- The proposed custom phase two encryption algorithm.
- dhGroup String
- The proposed Diffie-Hellman group.
- isCustom BooleanPhase Two Config 
- Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
- isEsp BooleanEstablished 
- Indicates that ESP phase two is established.
- isPfs BooleanEnabled 
- Indicates that PFS (perfect forward secrecy) is enabled.
- lifetime Integer
- The total configured lifetime of the IKE security association.
- negotiatedAuthentication StringAlgorithm 
- The negotiated phase two authentication algorithm.
- negotiatedDh StringGroup 
- The negotiated Diffie-Hellman group.
- negotiatedEncryption StringAlgorithm 
- The negotiated encryption algorithm.
- remainingLifetime String
- remainingLifetime IntegerInt 
- The remaining lifetime before the key is refreshed.
- remainingLifetime StringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- customAuthentication stringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- customEncryption stringAlgorithm 
- The proposed custom phase two encryption algorithm.
- dhGroup string
- The proposed Diffie-Hellman group.
- isCustom booleanPhase Two Config 
- Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
- isEsp booleanEstablished 
- Indicates that ESP phase two is established.
- isPfs booleanEnabled 
- Indicates that PFS (perfect forward secrecy) is enabled.
- lifetime number
- The total configured lifetime of the IKE security association.
- negotiatedAuthentication stringAlgorithm 
- The negotiated phase two authentication algorithm.
- negotiatedDh stringGroup 
- The negotiated Diffie-Hellman group.
- negotiatedEncryption stringAlgorithm 
- The negotiated encryption algorithm.
- remainingLifetime string
- remainingLifetime numberInt 
- The remaining lifetime before the key is refreshed.
- remainingLifetime stringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- custom_authentication_ stralgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- custom_encryption_ stralgorithm 
- The proposed custom phase two encryption algorithm.
- dh_group str
- The proposed Diffie-Hellman group.
- is_custom_ boolphase_ two_ config 
- Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
- is_esp_ boolestablished 
- Indicates that ESP phase two is established.
- is_pfs_ boolenabled 
- Indicates that PFS (perfect forward secrecy) is enabled.
- lifetime int
- The total configured lifetime of the IKE security association.
- negotiated_authentication_ stralgorithm 
- The negotiated phase two authentication algorithm.
- negotiated_dh_ strgroup 
- The negotiated Diffie-Hellman group.
- negotiated_encryption_ stralgorithm 
- The negotiated encryption algorithm.
- remaining_lifetime str
- remaining_lifetime_ intint 
- The remaining lifetime before the key is refreshed.
- remaining_lifetime_ strlast_ retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
- customAuthentication StringAlgorithm 
- Phase two authentication algorithm proposed during tunnel negotiation.
- customEncryption StringAlgorithm 
- The proposed custom phase two encryption algorithm.
- dhGroup String
- The proposed Diffie-Hellman group.
- isCustom BooleanPhase Two Config 
- Indicates whether custom phase two configuration is enabled. If this option is not enabled, default settings are proposed.
- isEsp BooleanEstablished 
- Indicates that ESP phase two is established.
- isPfs BooleanEnabled 
- Indicates that PFS (perfect forward secrecy) is enabled.
- lifetime Number
- The total configured lifetime of the IKE security association.
- negotiatedAuthentication StringAlgorithm 
- The negotiated phase two authentication algorithm.
- negotiatedDh StringGroup 
- The negotiated Diffie-Hellman group.
- negotiatedEncryption StringAlgorithm 
- The negotiated encryption algorithm.
- remainingLifetime String
- remainingLifetime NumberInt 
- The remaining lifetime before the key is refreshed.
- remainingLifetime StringLast Retrieved 
- The date and time the remaining lifetime was last retrieved, in the format defined by RFC3339. Example: 2016-08-25T21:10:29.600Z
Package Details
- Repository
- oci pulumi/pulumi-oci
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the ociTerraform Provider.