ModifyVpnTunnelOptionsSpecification Structure Reference


                    
                    
                    _members

Declaration

Swift

public static var _members: [AWSShapeMember]


                    
                    
                    dPDTimeoutAction

The action to take after DPD timeout occurs. Specify restart to restart the IKE initiation. Specify clear to end the IKE session. Valid Values: clear | none | restart Default: clear

Declaration

Swift

public let dPDTimeoutAction: String?


                    
                    
                    dPDTimeoutSeconds

The number of seconds after which a DPD timeout occurs. Constraints: A value between 0 and 30. Default: 30

Declaration

Swift

public let dPDTimeoutSeconds: Int?


                    
                    
                    iKEVersions

The IKE versions that are permitted for the VPN tunnel. Valid values: ikev1 | ikev2

Declaration

Swift

public let iKEVersions: [IKEVersionsRequestListValue]?


                    
                    
                    phase1DHGroupNumbers

One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations. Valid values: 2 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24

Declaration

Swift

public let phase1DHGroupNumbers: [Phase1DHGroupNumbersRequestListValue]?


                    
                    
                    phase1EncryptionAlgorithms

One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations. Valid values: AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16

Declaration

Swift

public let phase1EncryptionAlgorithms: [Phase1EncryptionAlgorithmsRequestListValue]?


                    
                    
                    phase1IntegrityAlgorithms

One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations. Valid values: SHA1 | SHA2-256 | SHA2-384 | SHA2-512

Declaration

Swift

public let phase1IntegrityAlgorithms: [Phase1IntegrityAlgorithmsRequestListValue]?


                    
                    
                    phase1LifetimeSeconds

The lifetime for phase 1 of the IKE negotiation, in seconds. Constraints: A value between 900 and 28,800. Default: 28800

Declaration

Swift

public let phase1LifetimeSeconds: Int?


                    
                    
                    phase2DHGroupNumbers

One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations. Valid values: 2 | 5 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24

Declaration

Swift

public let phase2DHGroupNumbers: [Phase2DHGroupNumbersRequestListValue]?


                    
                    
                    phase2EncryptionAlgorithms

One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations. Valid values: AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16

Declaration

Swift

public let phase2EncryptionAlgorithms: [Phase2EncryptionAlgorithmsRequestListValue]?


                    
                    
                    phase2IntegrityAlgorithms

One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations. Valid values: SHA1 | SHA2-256 | SHA2-384 | SHA2-512

Declaration

Swift

public let phase2IntegrityAlgorithms: [Phase2IntegrityAlgorithmsRequestListValue]?


                    
                    
                    phase2LifetimeSeconds

The lifetime for phase 2 of the IKE negotiation, in seconds. Constraints: A value between 900 and 3,600. The value must be less than the value for Phase1LifetimeSeconds. Default: 3600

Declaration

Swift

public let phase2LifetimeSeconds: Int?


                    
                    
                    preSharedKey

The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and the customer gateway. Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).

Declaration

Swift

public let preSharedKey: String?


                    
                    
                    rekeyFuzzPercentage

The percentage of the rekey window (determined by RekeyMarginTimeSeconds) during which the rekey time is randomly selected. Constraints: A value between 0 and 100. Default: 100

Declaration

Swift

public let rekeyFuzzPercentage: Int?


                    
                    
                    rekeyMarginTimeSeconds

The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for RekeyFuzzPercentage. Constraints: A value between 60 and half of Phase2LifetimeSeconds. Default: 540

Declaration

Swift

public let rekeyMarginTimeSeconds: Int?


                    
                    
                    replayWindowSize

The number of packets in an IKE replay window. Constraints: A value between 64 and 2048. Default: 1024

Declaration

Swift

public let replayWindowSize: Int?


                    
                    
                    startupAction

The action to take when the establishing the tunnel for the VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify start for AWS to initiate the IKE negotiation. Valid Values: add | start Default: add

Declaration

Swift

public let startupAction: String?


                    
                    
                    tunnelInsideCidr

The range of inside IPv4 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway. Constraints: A size /30 CIDR block from the 169.254.0.0/16 range. The following CIDR blocks are reserved and cannot be used: 169.254.0.0/30 169.254.1.0/30 169.254.2.0/30 169.254.3.0/30 169.254.4.0/30 169.254.5.0/30 169.254.169.252/30

Declaration

Swift

public let tunnelInsideCidr: String?


                    
                    
                    tunnelInsideIpv6Cidr

The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same transit gateway. Constraints: A size /126 CIDR block from the local fd00::/8 range.

Declaration

Swift

public let tunnelInsideIpv6Cidr: String?


                    
                    
                    init(dPDTimeoutAction:dPDTimeoutSeconds:iKEVersions:phase1DHGroupNumbers:phase1EncryptionAlgorithms:phase1IntegrityAlgorithms:phase1LifetimeSeconds:phase2DHGroupNumbers:phase2EncryptionAlgorithms:phase2IntegrityAlgorithms:phase2LifetimeSeconds:preSharedKey:rekeyFuzzPercentage:rekeyMarginTimeSeconds:replayWindowSize:startupAction:tunnelInsideCidr:tunnelInsideIpv6Cidr:)

Undocumented

Declaration

Swift

public init(dPDTimeoutAction: String? = nil, dPDTimeoutSeconds: Int? = nil, iKEVersions: [IKEVersionsRequestListValue]? = nil, phase1DHGroupNumbers: [Phase1DHGroupNumbersRequestListValue]? = nil, phase1EncryptionAlgorithms: [Phase1EncryptionAlgorithmsRequestListValue]? = nil, phase1IntegrityAlgorithms: [Phase1IntegrityAlgorithmsRequestListValue]? = nil, phase1LifetimeSeconds: Int? = nil, phase2DHGroupNumbers: [Phase2DHGroupNumbersRequestListValue]? = nil, phase2EncryptionAlgorithms: [Phase2EncryptionAlgorithmsRequestListValue]? = nil, phase2IntegrityAlgorithms: [Phase2IntegrityAlgorithmsRequestListValue]? = nil, phase2LifetimeSeconds: Int? = nil, preSharedKey: String? = nil, rekeyFuzzPercentage: Int? = nil, rekeyMarginTimeSeconds: Int? = nil, replayWindowSize: Int? = nil, startupAction: String? = nil, tunnelInsideCidr: String? = nil, tunnelInsideIpv6Cidr: String? = nil)