Class CfnVPNConnection.VpnTunnelOptionsSpecificationProperty.Jsii$Proxy
- All Implemented Interfaces:
CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
,software.amazon.jsii.JsiiSerializable
- Enclosing interface:
CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
-
Nested Class Summary
Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationMode
Nested classes/interfaces inherited from interface software.amazon.awscdk.services.ec2.CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
CfnVPNConnection.VpnTunnelOptionsSpecificationProperty.Builder, CfnVPNConnection.VpnTunnelOptionsSpecificationProperty.Jsii$Proxy
-
Constructor Summary
ModifierConstructorDescriptionprotected
Constructor that initializes the object based on literal property values passed by theCfnVPNConnection.VpnTunnelOptionsSpecificationProperty.Builder
.protected
Jsii$Proxy
(software.amazon.jsii.JsiiObjectRef objRef) Constructor that initializes the object based on values retrieved from the JsiiObject. -
Method Summary
Modifier and TypeMethodDescriptioncom.fasterxml.jackson.databind.JsonNode
final boolean
final String
The action to take after DPD timeout occurs.final Number
The number of seconds after which a DPD timeout occurs.final Object
Turn on or off tunnel endpoint lifecycle control feature.final Object
The IKE versions that are permitted for the VPN tunnel.final Object
Options for logging VPN tunnel activity.final Object
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.final Object
One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.final Object
One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.final Number
The lifetime for phase 1 of the IKE negotiation, in seconds.final Object
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.final Object
One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.final Object
One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.final Number
The lifetime for phase 2 of the IKE negotiation, in seconds.final String
The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and customer gateway.final Number
The percentage of the rekey window (determined byRekeyMarginTimeSeconds
) during which the rekey time is randomly selected.final Number
The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey.final Number
The number of packets in an IKE replay window.final String
The action to take when the establishing the tunnel for the VPN connection.final String
The range of inside IP addresses for the tunnel.final String
The range of inside IPv6 addresses for the tunnel.final int
hashCode()
Methods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet
-
Constructor Details
-
Jsii$Proxy
protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef) Constructor that initializes the object based on values retrieved from the JsiiObject.- Parameters:
objRef
- Reference to the JSII managed object.
-
Jsii$Proxy
Constructor that initializes the object based on literal property values passed by theCfnVPNConnection.VpnTunnelOptionsSpecificationProperty.Builder
.
-
-
Method Details
-
getDpdTimeoutAction
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The action to take after DPD timeout occurs.Specify
restart
to restart the IKE initiation. Specifyclear
to end the IKE session.Valid Values:
clear
|none
|restart
Default:
clear
- Specified by:
getDpdTimeoutAction
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getDpdTimeoutSeconds
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The number of seconds after which a DPD timeout occurs.Constraints: A value greater than or equal to 30.
Default:
30
- Specified by:
getDpdTimeoutSeconds
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getEnableTunnelLifecycleControl
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
Turn on or off tunnel endpoint lifecycle control feature.- Specified by:
getEnableTunnelLifecycleControl
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getIkeVersions
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The IKE versions that are permitted for the VPN tunnel.Valid values:
ikev1
|ikev2
- Specified by:
getIkeVersions
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getLogOptions
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
Options for logging VPN tunnel activity.- Specified by:
getLogOptions
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getPhase1DhGroupNumbers
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.Valid values:
2
|14
|15
|16
|17
|18
|19
|20
|21
|22
|23
|24
- Specified by:
getPhase1DhGroupNumbers
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getPhase1EncryptionAlgorithms
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.Valid values:
AES128
|AES256
|AES128-GCM-16
|AES256-GCM-16
- Specified by:
getPhase1EncryptionAlgorithms
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getPhase1IntegrityAlgorithms
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.Valid values:
SHA1
|SHA2-256
|SHA2-384
|SHA2-512
- Specified by:
getPhase1IntegrityAlgorithms
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getPhase1LifetimeSeconds
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The lifetime for phase 1 of the IKE negotiation, in seconds.Constraints: A value between 900 and 28,800.
Default:
28800
- Specified by:
getPhase1LifetimeSeconds
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getPhase2DhGroupNumbers
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.Valid values:
2
|5
|14
|15
|16
|17
|18
|19
|20
|21
|22
|23
|24
- Specified by:
getPhase2DhGroupNumbers
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getPhase2EncryptionAlgorithms
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.Valid values:
AES128
|AES256
|AES128-GCM-16
|AES256-GCM-16
- Specified by:
getPhase2EncryptionAlgorithms
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getPhase2IntegrityAlgorithms
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.Valid values:
SHA1
|SHA2-256
|SHA2-384
|SHA2-512
- Specified by:
getPhase2IntegrityAlgorithms
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getPhase2LifetimeSeconds
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The lifetime for phase 2 of the IKE negotiation, in seconds.Constraints: A value between 900 and 3,600. The value must be less than the value for
Phase1LifetimeSeconds
.Default:
3600
- Specified by:
getPhase2LifetimeSeconds
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getRekeyFuzzPercentage
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The percentage of the rekey window (determined byRekeyMarginTimeSeconds
) during which the rekey time is randomly selected.Constraints: A value between 0 and 100.
Default:
100
- Specified by:
getRekeyFuzzPercentage
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getRekeyMarginTimeSeconds
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey.The exact time of the rekey is randomly selected based on the value for
RekeyFuzzPercentage
.Constraints: A value between 60 and half of
Phase2LifetimeSeconds
.Default:
270
- Specified by:
getRekeyMarginTimeSeconds
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getReplayWindowSize
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The number of packets in an IKE replay window.Constraints: A value between 64 and 2048.
Default:
1024
- Specified by:
getReplayWindowSize
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getStartupAction
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The action to take when the establishing the tunnel for the VPN connection.By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify
start
for AWS to initiate the IKE negotiation.Valid Values:
add
|start
Default:
add
- Specified by:
getStartupAction
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getTunnelInsideCidr
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The range of inside IP addresses for the tunnel.Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway.
Constraints: A size /30 CIDR block from the
169.254.0.0/16
range. The following CIDR blocks are reserved and cannot be used:169.254.0.0/30
169.254.1.0/30
169.254.2.0/30
169.254.3.0/30
169.254.4.0/30
169.254.5.0/30
169.254.169.252/30
- Specified by:
getTunnelInsideCidr
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
getTunnelInsideIpv6Cidr
Description copied from interface:CfnVPNConnection.VpnTunnelOptionsSpecificationProperty
The range of inside IPv6 addresses for the tunnel.Any specified CIDR blocks must be unique across all VPN connections that use the same transit gateway.
Constraints: A size /126 CIDR block from the local
fd00::/8
range.- Specified by:
getTunnelInsideIpv6Cidr
in interfaceCfnVPNConnection.VpnTunnelOptionsSpecificationProperty
- See Also:
-
$jsii$toJson
@Internal public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()- Specified by:
$jsii$toJson
in interfacesoftware.amazon.jsii.JsiiSerializable
-
equals
-
hashCode
public final int hashCode()
-