ModifyVpnTunnelOptionsSpecification¶
Structure Class¶
dataclass
¶
Bases: _SerdeShape
The Amazon Web Services Site-to-Site VPN tunnel options to modify.
Attributes¶
class-attribute
instance-attribute
¶
dpd_timeout_action: str | None = ...
The action to take after DPD timeout occurs. Specify restart to
restart the IKE initiation. Specify clear to end the IKE session.
Valid Values: clear | none | restart
Default: clear
class-attribute
instance-attribute
¶
dpd_timeout_seconds: int | None = ...
The number of seconds after which a DPD timeout occurs. A DPD timeout of 40 seconds means that the VPN endpoint will consider the peer dead 30 seconds after the first failed keep-alive.
Constraints: A value greater than or equal to 30.
Default: 40
class-attribute
instance-attribute
¶
enable_tunnel_lifecycle_control: bool | None = ...
Turn on or off tunnel endpoint lifecycle control feature.
class-attribute
instance-attribute
¶
ike_versions: list[IKEVersionsRequestListValue] | None = ...
The IKE versions that are permitted for the VPN tunnel.
Valid values: ikev1 | ikev2
class-attribute
instance-attribute
¶
log_options: VpnTunnelLogOptionsSpecification | None = ...
Options for logging VPN tunnel activity.
class-attribute
instance-attribute
¶
phase1_dh_group_numbers: list[Phase1DHGroupNumbersRequestListValue] | None = ...
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.
Valid values: 2 | 14 | 15 | 16 | 17 | 18 | 19 |
20 | 21 | 22 | 23 | 24
class-attribute
instance-attribute
¶
phase1_encryption_algorithms: list[Phase1EncryptionAlgorithmsRequestListValue] | None = ...
One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
Valid values: AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16
class-attribute
instance-attribute
¶
phase1_integrity_algorithms: list[Phase1IntegrityAlgorithmsRequestListValue] | None = ...
One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
Valid values: SHA1 | SHA2-256 | SHA2-384 | SHA2-512
class-attribute
instance-attribute
¶
phase1_lifetime_seconds: int | None = ...
The lifetime for phase 1 of the IKE negotiation, in seconds.
Constraints: A value between 900 and 28,800.
Default: 28800
class-attribute
instance-attribute
¶
phase2_dh_group_numbers: list[Phase2DHGroupNumbersRequestListValue] | None = ...
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.
Valid values: 2 | 5 | 14 | 15 | 16 | 17 | 18 | 19
| 20 | 21 | 22 | 23 | 24
class-attribute
instance-attribute
¶
phase2_encryption_algorithms: list[Phase2EncryptionAlgorithmsRequestListValue] | None = ...
One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
Valid values: AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16
class-attribute
instance-attribute
¶
phase2_integrity_algorithms: list[Phase2IntegrityAlgorithmsRequestListValue] | None = ...
One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
Valid values: SHA1 | SHA2-256 | SHA2-384 | SHA2-512
class-attribute
instance-attribute
¶
phase2_lifetime_seconds: int | None = ...
The lifetime for phase 2 of the IKE negotiation, in seconds.
Constraints: A value between 900 and 3,600. The value must be less than
the value for Phase1LifetimeSeconds.
Default: 3600
class-attribute
instance-attribute
¶
pre_shared_key: str | None = ...
The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and the customer gateway.
Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).
class-attribute
instance-attribute
¶
rekey_fuzz_percentage: int | None = ...
The percentage of the rekey window (determined by
RekeyMarginTimeSeconds) during which the rekey time is randomly
selected.
Constraints: A value between 0 and 100.
Default: 100
class-attribute
instance-attribute
¶
rekey_margin_time_seconds: int | None = ...
The margin time, in seconds, before the phase 2 lifetime expires, during
which the Amazon Web Services side of the VPN connection performs an IKE
rekey. The exact time of the rekey is randomly selected based on the
value for RekeyFuzzPercentage.
Constraints: A value between 60 and half of Phase2LifetimeSeconds.
Default: 270
class-attribute
instance-attribute
¶
replay_window_size: int | None = ...
The number of packets in an IKE replay window.
Constraints: A value between 64 and 2048.
Default: 1024
class-attribute
instance-attribute
¶
startup_action: str | None = ...
The action to take when the establishing the tunnel for the VPN
connection. By default, your customer gateway device must initiate the
IKE negotiation and bring up the tunnel. Specify start for Amazon Web
Services to initiate the IKE negotiation.
Valid Values: add | start
Default: add
class-attribute
instance-attribute
¶
tunnel_inside_cidr: str | None = ...
The range of inside IPv4 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway.
Constraints: A size /30 CIDR block from the 169.254.0.0/16 range. The
following CIDR blocks are reserved and cannot be used:
-
169.254.0.0/30 -
169.254.1.0/30 -
169.254.2.0/30 -
169.254.3.0/30 -
169.254.4.0/30 -
169.254.5.0/30 -
169.254.169.252/30
class-attribute
instance-attribute
¶
tunnel_inside_ipv6_cidr: str | None = ...
The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same transit gateway.
Constraints: A size /126 CIDR block from the local fd00::/8 range.