Up-to-date reference of API arguments for VPNAAS site connection you can get at documentation portal

opentelekomcloud_vpnaas_site_connection_v2¶

Manages a V2 site connection resource within OpenTelekomCloud.

Example Usage¶

resource "opentelekomcloud_vpnaas_site_connection_v2" "conn_1" {
  name              = "connection_1"
  ikepolicy_id      = opentelekomcloud_vpnaas_ike_policy_v2.policy_2.id
  ipsecpolicy_id    = opentelekomcloud_vpnaas_ipsec_policy_v2.policy_1.id
  vpnservice_id     = opentelekomcloud_vpnaas_service_v2.service_1.id
  psk               = "secret"
  peer_address      = "192.168.10.1"
  peer_id           = "192.168.10.1"
  local_ep_group_id = opentelekomcloud_vpnaas_endpoint_group_v2.group_2.id
  peer_ep_group_id  = opentelekomcloud_vpnaas_endpoint_group_v2.group_1.id

  tags = {
    foo = "bar"
    key = "value"
  }
}

Argument Reference¶

The following arguments are supported:

region - (Optional) The region in which to obtain the V2 Networking client. A Networking client is needed to create an IPSec site connection. If omitted, the region argument of the provider is used. Changing this creates a new site connection.
name - (Optional) The name of the connection. Changing this updates the name of the existing connection.
tenant_id - (Optional) The owner of the connection. Required if admin wants to create a connection for another project. Changing this creates a new connection.
description - (Optional) The human-readable description for the connection. Changing this updates the description of the existing connection.
admin_state_up - (Optional) The administrative state of the resource. Can either be up(true) or down(false). Changing this updates the administrative state of the existing connection.
ikepolicy_id - (Required) The ID of the IKE policy. Changing this creates a new connection.
vpnservice_id - (Required) The ID of the VPN service. Changing this creates a new connection.
local_ep_group_id - (Optional) The ID for the endpoint group that contains private subnets for the local side of the connection. You must specify this parameter with the peer_ep_group_id parameter unless in backward-compatible mode where peer_cidrs is provided with a subnet_id for the VPN service. Changing this updates the existing connection.
ipsecpolicy_id - (Required) The ID of the IPsec policy. Changing this creates a new connection.
peer_id - (Required) The peer router identity for authentication. A valid value is an IPv4 address, IPv6 address, e-mail address, key ID, or FQDN. Typically, this value matches the peer_address value. Changing this updates the existing policy.
peer_ep_group_id - (Optional) The ID for the endpoint group that contains private CIDRs in the form <net_address>/ for the peer side of the connection. You must specify this parameter with the local_ep_group_id parameter unless in backward-compatible mode where peer_cidrs is provided with a subnet_id for the VPN service.
local_id - (Optional) An ID to be used instead of the external IP address for a virtual router used in traffic between instances on different networks in east-west traffic. Most often, local ID would be domain name, email address, etc. If this is not configured then the external IP address will be used as the ID.
peer_address - (Required) The peer gateway public IPv4 or IPv6 address or FQDN.
psk - (Required) The pre-shared key. A PSK can contain 6 to 128 characters. Spaces and the following special characters are not allowed: <>&?*'".
initiator - (Optional) A valid value is response-only or bi-directional.
peer_cidrs - (Optional) Unique list of valid peer private CIDRs in the form <net_address>/.
dpd - (Optional) A dictionary with dead peer detection (DPD) protocol controls.
- action - (Optional) The dead peer detection (DPD) action. A valid value is clear, hold, restart, disabled or restart-by-peer. Default value is hold.
- timeout - (Optional) The dead peer detection (DPD) timeout in seconds. A valid value is a positive integer that is greater than the DPD interval value. Default is 120.
- interval - (Optional) The dead peer detection (DPD) interval, in seconds. A valid value is a positive integer. Default is 30.
mtu - (Optional) The maximum transmission unit (MTU) value to address fragmentation. Minimum value is 68 for IPv4, and 1280 for IPv6.
value_specs - (Optional) Map of additional options.
tags - (Optional) The key/value pairs to associate with the connection.

Attributes Reference¶

The following attributes are exported:

region - See Argument Reference above.
name - See Argument Reference above.
tenant_id - See Argument Reference above.
admin_state_up - See Argument Reference above.
description - See Argument Reference above.
dpd - See Argument Reference above.
psk - See Argument Reference above.
initiator - See Argument Reference above.
peer_address - See Argument Reference above.
peer_id - See Argument Reference above.
peer_cidrs - See Argument Reference above.
mtu - See Argument Reference above.
local_id - See Argument Reference above.
peer_ep_group_id - See Argument Reference above.
ipsecpolicy_id - See Argument Reference above.
vpnservice_id - See Argument Reference above.
ikepolicy_id - See Argument Reference above.
value_specs - See Argument Reference above.
tags - See Argument Reference above.

Import¶

Site Connections can be imported using the id, e.g.

terraform import opentelekomcloud_vpnaas_site_connection_v2.conn_1 832cb7f3-59fe-40cf-8f64-8350ffc03272

last updated: UTC - commit: