CfnVPNConnectionProps Struct
Properties for defining a CfnVPNConnection.
Example
ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ec2 as ec2 } from 'aws-cdk-lib';
const cfnVPNConnectionProps: ec2.CfnVPNConnectionProps = {
customerGatewayId: 'customerGatewayId',
type: 'type',
// the properties below are optional
enableAcceleration: false,
localIpv4NetworkCidr: 'localIpv4NetworkCidr',
localIpv6NetworkCidr: 'localIpv6NetworkCidr',
outsideIpAddressType: 'outsideIpAddressType',
preSharedKeyStorage: 'preSharedKeyStorage',
remoteIpv4NetworkCidr: 'remoteIpv4NetworkCidr',
remoteIpv6NetworkCidr: 'remoteIpv6NetworkCidr',
staticRoutesOnly: false,
tags: [{
key: 'key',
value: 'value',
}],
transitGatewayId: 'transitGatewayId',
transportTransitGatewayAttachmentId: 'transportTransitGatewayAttachmentId',
tunnelBandwidth: 'tunnelBandwidth',
tunnelInsideIpVersion: 'tunnelInsideIpVersion',
vpnConcentratorId: 'vpnConcentratorId',
vpnGatewayId: 'vpnGatewayId',
vpnTunnelOptionsSpecifications: [{
dpdTimeoutAction: 'dpdTimeoutAction',
dpdTimeoutSeconds: 123,
enableTunnelLifecycleControl: false,
ikeVersions: [{
value: 'value',
}],
logOptions: {
cloudwatchLogOptions: {
bgpLogEnabled: false,
bgpLogGroupArn: 'bgpLogGroupArn',
bgpLogOutputFormat: 'bgpLogOutputFormat',
logEnabled: false,
logGroupArn: 'logGroupArn',
logOutputFormat: 'logOutputFormat',
},
},
phase1DhGroupNumbers: [{
value: 123,
}],
phase1EncryptionAlgorithms: [{
value: 'value',
}],
phase1IntegrityAlgorithms: [{
value: 'value',
}],
phase1LifetimeSeconds: 123,
phase2DhGroupNumbers: [{
value: 123,
}],
phase2EncryptionAlgorithms: [{
value: 'value',
}],
phase2IntegrityAlgorithms: [{
value: 'value',
}],
phase2LifetimeSeconds: 123,
preSharedKey: 'preSharedKey',
rekeyFuzzPercentage: 123,
rekeyMarginTimeSeconds: 123,
replayWindowSize: 123,
startupAction: 'startupAction',
tunnelInsideCidr: 'tunnelInsideCidr',
tunnelInsideIpv6Cidr: 'tunnelInsideIpv6Cidr',
}],
};
Properties
customerGatewayIdstring | ICustomerGatewayRefcustomer_gateway_idtyping.Union[str, ICustomerGatewayRef]customerGatewayIdStringCustomerGatewayIdstringCustomerGatewayIdinterface{}required#The ID of the customer gateway at your end of the VPN connection.
enableAccelerationboolean | IResolvableenable_accelerationtyping.Union[bool, IResolvable]enableAccelerationBooleanEnableAccelerationboolEnableAccelerationinterface{}#Indicate whether to enable acceleration for the VPN connection.
Default: false
localIpv4NetworkCidrstringlocal_ipv4_network_cidrstrlocalIpv4NetworkCidrStringLocalIpv4NetworkCidrstringLocalIpv4NetworkCidr*string#The IPv4 CIDR on the customer gateway (on-premises) side of the VPN connection.
Default: 0.0.0.0/0
localIpv6NetworkCidrstringlocal_ipv6_network_cidrstrlocalIpv6NetworkCidrStringLocalIpv6NetworkCidrstringLocalIpv6NetworkCidr*string#The IPv6 CIDR on the customer gateway (on-premises) side of the VPN connection.
Default: ::/0
outsideIpAddressTypestringoutside_ip_address_typestroutsideIpAddressTypeStringOutsideIpAddressTypestringOutsideIpAddressType*string#The type of IP address assigned to the outside interface of the customer gateway device.
Valid values: PrivateIpv4 | PublicIpv4 | Ipv6
Default: PublicIpv4
remoteIpv4NetworkCidrstringremote_ipv4_network_cidrstrremoteIpv4NetworkCidrStringRemoteIpv4NetworkCidrstringRemoteIpv4NetworkCidr*string#The IPv4 CIDR on the AWS side of the VPN connection.
Default: 0.0.0.0/0
remoteIpv6NetworkCidrstringremote_ipv6_network_cidrstrremoteIpv6NetworkCidrStringRemoteIpv6NetworkCidrstringRemoteIpv6NetworkCidr*string#The IPv6 CIDR on the AWS side of the VPN connection.
Default: ::/0
staticRoutesOnlyboolean | IResolvablestatic_routes_onlytyping.Union[bool, IResolvable]staticRoutesOnlyBooleanStaticRoutesOnlyboolStaticRoutesOnlyinterface{}#Indicates whether the VPN connection uses static routes only.
Static routes must be used for devices that don't support BGP.
If you are creating a VPN connection for a device that does not support Border Gateway Protocol (BGP), you must specify true .
Any tags assigned to the VPN connection.
transitGatewayIdstring | ITransitGatewayReftransit_gateway_idtyping.Union[str, ITransitGatewayRef]transitGatewayIdStringTransitGatewayIdstringTransitGatewayIdinterface{}#The ID of the transit gateway associated with the VPN connection.
You must specify either TransitGatewayId or VpnGatewayId , but not both.
transportTransitGatewayAttachmentIdstringtransport_transit_gateway_attachment_idstrtransportTransitGatewayAttachmentIdStringTransportTransitGatewayAttachmentIdstringTransportTransitGatewayAttachmentId*string#The transit gateway attachment ID to use for the VPN tunnel.
Required if OutsideIpAddressType is set to PrivateIpv4 .
tunnelBandwidthstringtunnel_bandwidthstrtunnelBandwidthStringTunnelBandwidthstringTunnelBandwidth*string= "standard"#The desired bandwidth specification for the VPN tunnel, used when creating or modifying VPN connection options to set the tunnel's throughput capacity.
standard supports up to 1.25 Gbps per tunnel, while large supports up to 5 Gbps per tunnel. The default value is standard . Existing VPN connections without a bandwidth setting will automatically default to standard .
tunnelInsideIpVersionstringtunnel_inside_ip_versionstrtunnelInsideIpVersionStringTunnelInsideIpVersionstringTunnelInsideIpVersion*string#Indicate whether the VPN tunnels process IPv4 or IPv6 traffic.
Default: ipv4
The type of VPN connection.
vpnConcentratorIdstringvpn_concentrator_idstrvpnConcentratorIdStringVpnConcentratorIdstringVpnConcentratorId*string#The ID of the VPN concentrator to associate with the VPN connection.
vpnGatewayIdstring | IVPNGatewayRefvpn_gateway_idtyping.Union[str, IVPNGatewayRef]vpnGatewayIdStringVpnGatewayIdstringVpnGatewayIdinterface{}#The ID of the virtual private gateway at the AWS side of the VPN connection.
You must specify either TransitGatewayId or VpnGatewayId , but not both.
vpnTunnelOptionsSpecificationsIResolvable | IResolvable | CfnVPNConnection.VpnTunnelOptionsSpecificationProperty[]vpn_tunnel_options_specificationstyping.Union[IResolvable, typing.List[typing.Union[IResolvable, VpnTunnelOptionsSpecificationProperty]]]vpnTunnelOptionsSpecificationsIResolvableVpnTunnelOptionsSpecificationsIResolvableVpnTunnelOptionsSpecificationsinterface{}#The tunnel options for the VPN connection.