NAME
Paws::EC2::ModifyVpnTunnelOptionsSpecification
USAGE
This class represents one of two things:
Arguments in a call to a service
Use the attributes of this class as arguments to methods. You shouldn't make instances of this class. Each attribute should be used as a named argument in the calls that expect this type of object.
As an example, if Att1 is expected to be a Paws::EC2::ModifyVpnTunnelOptionsSpecification object:
$service_obj->Method(Att1 => { DPDTimeoutAction => $value, ..., TunnelInsideIpv6Cidr => $value });
Results returned from an API call
Use accessors for each attribute. If Att1 is expected to be an Paws::EC2::ModifyVpnTunnelOptionsSpecification object:
$result = $service_obj->Method(...);
$result->Att1->DPDTimeoutAction
DESCRIPTION
This class has no description
ATTRIBUTES
DPDTimeoutAction => Str
The action to take after DPD timeout occurs. Specify restart
to restart the IKE initiation. Specify clear
to end the IKE session.
Valid Values: clear
| none
| restart
Default: clear
DPDTimeoutSeconds => Int
The number of seconds after which a DPD timeout occurs.
Constraints: A value between 0 and 30.
Default: 30
IKEVersions => ArrayRef[Paws::EC2::IKEVersionsRequestListValue]
The IKE versions that are permitted for the VPN tunnel.
Valid values: ikev1
| ikev2
Phase1DHGroupNumbers => ArrayRef[Paws::EC2::Phase1DHGroupNumbersRequestListValue]
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.
Valid values: 2
| 14
| 15
| 16
| 17
| 18
| 19
| 20
| 21
| 22
| 23
| 24
Phase1EncryptionAlgorithms => ArrayRef[Paws::EC2::Phase1EncryptionAlgorithmsRequestListValue]
One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
Valid values: AES128
| AES256
| AES128-GCM-16
| AES256-GCM-16
Phase1IntegrityAlgorithms => ArrayRef[Paws::EC2::Phase1IntegrityAlgorithmsRequestListValue]
One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
Valid values: SHA1
| SHA2-256
| SHA2-384
| SHA2-512
Phase1LifetimeSeconds => Int
The lifetime for phase 1 of the IKE negotiation, in seconds.
Constraints: A value between 900 and 28,800.
Default: 28800
Phase2DHGroupNumbers => ArrayRef[Paws::EC2::Phase2DHGroupNumbersRequestListValue]
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.
Valid values: 2
| 5
| 14
| 15
| 16
| 17
| 18
| 19
| 20
| 21
| 22
| 23
| 24
Phase2EncryptionAlgorithms => ArrayRef[Paws::EC2::Phase2EncryptionAlgorithmsRequestListValue]
One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
Valid values: AES128
| AES256
| AES128-GCM-16
| AES256-GCM-16
Phase2IntegrityAlgorithms => ArrayRef[Paws::EC2::Phase2IntegrityAlgorithmsRequestListValue]
One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
Valid values: SHA1
| SHA2-256
| SHA2-384
| SHA2-512
Phase2LifetimeSeconds => Int
The lifetime for phase 2 of the IKE negotiation, in seconds.
Constraints: A value between 900 and 3,600. The value must be less than the value for Phase1LifetimeSeconds
.
Default: 3600
PreSharedKey => Str
The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and the customer gateway.
Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).
RekeyFuzzPercentage => Int
The percentage of the rekey window (determined by RekeyMarginTimeSeconds
) during which the rekey time is randomly selected.
Constraints: A value between 0 and 100.
Default: 100
RekeyMarginTimeSeconds => Int
The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for RekeyFuzzPercentage
.
Constraints: A value between 60 and half of Phase2LifetimeSeconds
.
Default: 540
ReplayWindowSize => Int
The number of packets in an IKE replay window.
Constraints: A value between 64 and 2048.
Default: 1024
StartupAction => Str
The action to take when the establishing the tunnel for the VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify start
for AWS to initiate the IKE negotiation.
Valid Values: add
| start
Default: add
TunnelInsideCidr => Str
The range of inside IPv4 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway.
Constraints: A size /30 CIDR block from the 169.254.0.0/16
range. The following CIDR blocks are reserved and cannot be used:
169.254.0.0/30
169.254.1.0/30
169.254.2.0/30
169.254.3.0/30
169.254.4.0/30
169.254.5.0/30
169.254.169.252/30
TunnelInsideIpv6Cidr => Str
The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same transit gateway.
Constraints: A size /126 CIDR block from the local fd00::/8
range.
SEE ALSO
This class forms part of Paws, describing an object used in Paws::EC2
BUGS and CONTRIBUTIONS
The source code is located here: https://github.com/pplu/aws-sdk-perl
Please report bugs to: https://github.com/pplu/aws-sdk-perl/issues