@pulumi/sdwan
Version:
A Pulumi package for managing resources on Cisco Catalyst SD-WAN.. Based on terraform-provider-sdwan: version v0.4.1
595 lines (594 loc) • 22.8 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
/**
* This resource can manage a System Remote Access Feature.
* - Minimum SD-WAN Manager version: `20.12.0`
*
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as sdwan from "@pulumi/sdwan";
*
* const example = new sdwan.SystemRemoteAccessFeature("example", {
* name: "Example",
* description: "My Example",
* featureProfileId: "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac",
* connectionTypeSsl: false,
* anyConnectEapAuthenticationType: "user",
* ipv4PoolSize: 50,
* ipv6PoolSize: 1024,
* enableCertificateListCheck: false,
* pskAuthenticationType: "aaa",
* radiusGroupName: "radius-1",
* aaaDeriveNameFromPeerIdentity: "MyPassword",
* aaaEnableAccounting: false,
* ikev2LocalIkeIdentityType: "EMAIL",
* ikev2LocalIkeIdentityValue: "abc@xyz.com",
* ikev2SecurityAssociationLifetime: 86400,
* ikev2AntiDosThreshold: 99,
* ipsecEnableAntiReplay: false,
* ipsecSecurityAssociationLifetime: 3600,
* ipsecEnablePerfectFowardSecrecy: false,
* });
* ```
*
* ## Import
*
* The `pulumi import` command can be used, for example:
*
* Expected import identifier with the format: "system_remote_access_feature_id,feature_profile_id"
*
* ```sh
* $ pulumi import sdwan:index/systemRemoteAccessFeature:SystemRemoteAccessFeature example "f6b2c44c-693c-4763-b010-895aa3d236bd,f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"
* ```
*/
export declare class SystemRemoteAccessFeature extends pulumi.CustomResource {
/**
* Get an existing SystemRemoteAccessFeature resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SystemRemoteAccessFeatureState, opts?: pulumi.CustomResourceOptions): SystemRemoteAccessFeature;
/**
* Returns true if the given object is an instance of SystemRemoteAccessFeature. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is SystemRemoteAccessFeature;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly aaaDeriveNameFromPeerDomain: pulumi.Output<string | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly aaaDeriveNameFromPeerDomainVariable: pulumi.Output<string | undefined>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly aaaDeriveNameFromPeerIdentity: pulumi.Output<string | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly aaaDeriveNameFromPeerIdentityVariable: pulumi.Output<string | undefined>;
/**
* Enable Accounting - Default value: `true`
*/
readonly aaaEnableAccounting: pulumi.Output<boolean | undefined>;
/**
* Variable name
*/
readonly aaaEnableAccountingVariable: pulumi.Output<string | undefined>;
readonly aaaSpecifyNamePolicyName: pulumi.Output<string | undefined>;
/**
* Variable name
*/
readonly aaaSpecifyNamePolicyNameVariable: pulumi.Output<string | undefined>;
readonly aaaSpecifyNamePolicyPassword: pulumi.Output<string | undefined>;
/**
* Variable name
*/
readonly aaaSpecifyNamePolicyPasswordVariable: pulumi.Output<string | undefined>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false` - Choices: `user`, `device`
*/
readonly anyConnectEapAuthenticationType: pulumi.Output<string | undefined>;
/**
* Enabled SSL VPN - Default value: `false`
*/
readonly connectionTypeSsl: pulumi.Output<boolean | undefined>;
/**
* The description of the Feature
*/
readonly description: pulumi.Output<string | undefined>;
/**
* - Default value: `false`
*/
readonly enableCertificateListCheck: pulumi.Output<boolean | undefined>;
/**
* Variable name
*/
readonly enableCertificateListCheckVariable: pulumi.Output<string | undefined>;
/**
* Feature Profile ID
*/
readonly featureProfileId: pulumi.Output<string>;
/**
* Anti-DOS Threshold, Attribute conditional on `connectionTypeSsl` being equal to `false` - Range: `10`-`1000` - Default
* value: `100`
*/
readonly ikev2AntiDosThreshold: pulumi.Output<number | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly ikev2AntiDosThresholdVariable: pulumi.Output<string | undefined>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false` - Choices: `EMAIL`, `FQDN`, `KEYID`, `IPv4
* ADDRESS`, `IPv6 ADDRESS`
*/
readonly ikev2LocalIkeIdentityType: pulumi.Output<string | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly ikev2LocalIkeIdentityTypeVariable: pulumi.Output<string | undefined>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly ikev2LocalIkeIdentityValue: pulumi.Output<string | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly ikev2LocalIkeIdentityValueVariable: pulumi.Output<string | undefined>;
/**
* Security Association Lifetime in Seconds, Attribute conditional on `connectionTypeSsl` being equal to `false` - Range:
* `3600`-`86400` - Default value: `86400`
*/
readonly ikev2SecurityAssociationLifetime: pulumi.Output<number | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly ikev2SecurityAssociationLifetimeVariable: pulumi.Output<string | undefined>;
/**
* security Association Lifetime, Attribute conditional on `ipsecEnableAntiReplay` being equal to `true` - Default value:
* `64`
*/
readonly ipsecAntiReplayWindowSize: pulumi.Output<number | undefined>;
/**
* Variable name, Attribute conditional on `ipsecEnableAntiReplay` being equal to `true`
*/
readonly ipsecAntiReplayWindowSizeVariable: pulumi.Output<string | undefined>;
/**
* Enable Anti-Replay, Attribute conditional on `connectionTypeSsl` being equal to `false` - Default value: `true`
*/
readonly ipsecEnableAntiReplay: pulumi.Output<boolean | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly ipsecEnableAntiReplayVariable: pulumi.Output<string | undefined>;
/**
* security Association Lifetime, Attribute conditional on `connectionTypeSsl` being equal to `false` - Default value:
* `false`
*/
readonly ipsecEnablePerfectFowardSecrecy: pulumi.Output<boolean | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly ipsecEnablePerfectFowardSecrecyVariable: pulumi.Output<string | undefined>;
/**
* Security Association Lifetime in Seconds, Attribute conditional on `connectionTypeSsl` being equal to `false` - Range:
* `3600`-`86400` - Default value: `3600`
*/
readonly ipsecSecurityAssociationLifetime: pulumi.Output<number | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly ipsecSecurityAssociationLifetimeVariable: pulumi.Output<string | undefined>;
/**
* IPv4 Pool Size - Default value: `1000`
*/
readonly ipv4PoolSize: pulumi.Output<number | undefined>;
/**
* Variable name
*/
readonly ipv4PoolSizeVariable: pulumi.Output<string | undefined>;
/**
* IPv6 Pool Size - Default value: `1024`
*/
readonly ipv6PoolSize: pulumi.Output<number | undefined>;
/**
* Variable name
*/
readonly ipv6PoolSizeVariable: pulumi.Output<string | undefined>;
/**
* The name of the Feature
*/
readonly name: pulumi.Output<string>;
/**
* PSK Pre Shared Key, Attribute conditional on `pskAuthenticationType` being equal to `group`
*/
readonly pskAuthenticationPreSharedKey: pulumi.Output<string | undefined>;
/**
* Variable name, Attribute conditional on `pskAuthenticationType` being equal to `group`
*/
readonly pskAuthenticationPreSharedKeyVariable: pulumi.Output<string | undefined>;
/**
* PSK Selection, Attribute conditional on `connectionTypeSsl` being equal to `false` - Choices: `aaa`, `group`
*/
readonly pskAuthenticationType: pulumi.Output<string | undefined>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
readonly pskAuthenticationTypeVariable: pulumi.Output<string | undefined>;
readonly radiusGroupName: pulumi.Output<string>;
/**
* Variable name
*/
readonly radiusGroupNameVariable: pulumi.Output<string | undefined>;
/**
* The version of the Feature
*/
readonly version: pulumi.Output<number>;
/**
* Create a SystemRemoteAccessFeature resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: SystemRemoteAccessFeatureArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering SystemRemoteAccessFeature resources.
*/
export interface SystemRemoteAccessFeatureState {
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
aaaDeriveNameFromPeerDomain?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
aaaDeriveNameFromPeerDomainVariable?: pulumi.Input<string>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
aaaDeriveNameFromPeerIdentity?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
aaaDeriveNameFromPeerIdentityVariable?: pulumi.Input<string>;
/**
* Enable Accounting - Default value: `true`
*/
aaaEnableAccounting?: pulumi.Input<boolean>;
/**
* Variable name
*/
aaaEnableAccountingVariable?: pulumi.Input<string>;
aaaSpecifyNamePolicyName?: pulumi.Input<string>;
/**
* Variable name
*/
aaaSpecifyNamePolicyNameVariable?: pulumi.Input<string>;
aaaSpecifyNamePolicyPassword?: pulumi.Input<string>;
/**
* Variable name
*/
aaaSpecifyNamePolicyPasswordVariable?: pulumi.Input<string>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false` - Choices: `user`, `device`
*/
anyConnectEapAuthenticationType?: pulumi.Input<string>;
/**
* Enabled SSL VPN - Default value: `false`
*/
connectionTypeSsl?: pulumi.Input<boolean>;
/**
* The description of the Feature
*/
description?: pulumi.Input<string>;
/**
* - Default value: `false`
*/
enableCertificateListCheck?: pulumi.Input<boolean>;
/**
* Variable name
*/
enableCertificateListCheckVariable?: pulumi.Input<string>;
/**
* Feature Profile ID
*/
featureProfileId?: pulumi.Input<string>;
/**
* Anti-DOS Threshold, Attribute conditional on `connectionTypeSsl` being equal to `false` - Range: `10`-`1000` - Default
* value: `100`
*/
ikev2AntiDosThreshold?: pulumi.Input<number>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2AntiDosThresholdVariable?: pulumi.Input<string>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false` - Choices: `EMAIL`, `FQDN`, `KEYID`, `IPv4
* ADDRESS`, `IPv6 ADDRESS`
*/
ikev2LocalIkeIdentityType?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2LocalIkeIdentityTypeVariable?: pulumi.Input<string>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2LocalIkeIdentityValue?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2LocalIkeIdentityValueVariable?: pulumi.Input<string>;
/**
* Security Association Lifetime in Seconds, Attribute conditional on `connectionTypeSsl` being equal to `false` - Range:
* `3600`-`86400` - Default value: `86400`
*/
ikev2SecurityAssociationLifetime?: pulumi.Input<number>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2SecurityAssociationLifetimeVariable?: pulumi.Input<string>;
/**
* security Association Lifetime, Attribute conditional on `ipsecEnableAntiReplay` being equal to `true` - Default value:
* `64`
*/
ipsecAntiReplayWindowSize?: pulumi.Input<number>;
/**
* Variable name, Attribute conditional on `ipsecEnableAntiReplay` being equal to `true`
*/
ipsecAntiReplayWindowSizeVariable?: pulumi.Input<string>;
/**
* Enable Anti-Replay, Attribute conditional on `connectionTypeSsl` being equal to `false` - Default value: `true`
*/
ipsecEnableAntiReplay?: pulumi.Input<boolean>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ipsecEnableAntiReplayVariable?: pulumi.Input<string>;
/**
* security Association Lifetime, Attribute conditional on `connectionTypeSsl` being equal to `false` - Default value:
* `false`
*/
ipsecEnablePerfectFowardSecrecy?: pulumi.Input<boolean>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ipsecEnablePerfectFowardSecrecyVariable?: pulumi.Input<string>;
/**
* Security Association Lifetime in Seconds, Attribute conditional on `connectionTypeSsl` being equal to `false` - Range:
* `3600`-`86400` - Default value: `3600`
*/
ipsecSecurityAssociationLifetime?: pulumi.Input<number>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ipsecSecurityAssociationLifetimeVariable?: pulumi.Input<string>;
/**
* IPv4 Pool Size - Default value: `1000`
*/
ipv4PoolSize?: pulumi.Input<number>;
/**
* Variable name
*/
ipv4PoolSizeVariable?: pulumi.Input<string>;
/**
* IPv6 Pool Size - Default value: `1024`
*/
ipv6PoolSize?: pulumi.Input<number>;
/**
* Variable name
*/
ipv6PoolSizeVariable?: pulumi.Input<string>;
/**
* The name of the Feature
*/
name?: pulumi.Input<string>;
/**
* PSK Pre Shared Key, Attribute conditional on `pskAuthenticationType` being equal to `group`
*/
pskAuthenticationPreSharedKey?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `pskAuthenticationType` being equal to `group`
*/
pskAuthenticationPreSharedKeyVariable?: pulumi.Input<string>;
/**
* PSK Selection, Attribute conditional on `connectionTypeSsl` being equal to `false` - Choices: `aaa`, `group`
*/
pskAuthenticationType?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
pskAuthenticationTypeVariable?: pulumi.Input<string>;
radiusGroupName?: pulumi.Input<string>;
/**
* Variable name
*/
radiusGroupNameVariable?: pulumi.Input<string>;
/**
* The version of the Feature
*/
version?: pulumi.Input<number>;
}
/**
* The set of arguments for constructing a SystemRemoteAccessFeature resource.
*/
export interface SystemRemoteAccessFeatureArgs {
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
aaaDeriveNameFromPeerDomain?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
aaaDeriveNameFromPeerDomainVariable?: pulumi.Input<string>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
aaaDeriveNameFromPeerIdentity?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
aaaDeriveNameFromPeerIdentityVariable?: pulumi.Input<string>;
/**
* Enable Accounting - Default value: `true`
*/
aaaEnableAccounting?: pulumi.Input<boolean>;
/**
* Variable name
*/
aaaEnableAccountingVariable?: pulumi.Input<string>;
aaaSpecifyNamePolicyName?: pulumi.Input<string>;
/**
* Variable name
*/
aaaSpecifyNamePolicyNameVariable?: pulumi.Input<string>;
aaaSpecifyNamePolicyPassword?: pulumi.Input<string>;
/**
* Variable name
*/
aaaSpecifyNamePolicyPasswordVariable?: pulumi.Input<string>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false` - Choices: `user`, `device`
*/
anyConnectEapAuthenticationType?: pulumi.Input<string>;
/**
* Enabled SSL VPN - Default value: `false`
*/
connectionTypeSsl?: pulumi.Input<boolean>;
/**
* The description of the Feature
*/
description?: pulumi.Input<string>;
/**
* - Default value: `false`
*/
enableCertificateListCheck?: pulumi.Input<boolean>;
/**
* Variable name
*/
enableCertificateListCheckVariable?: pulumi.Input<string>;
/**
* Feature Profile ID
*/
featureProfileId: pulumi.Input<string>;
/**
* Anti-DOS Threshold, Attribute conditional on `connectionTypeSsl` being equal to `false` - Range: `10`-`1000` - Default
* value: `100`
*/
ikev2AntiDosThreshold?: pulumi.Input<number>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2AntiDosThresholdVariable?: pulumi.Input<string>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false` - Choices: `EMAIL`, `FQDN`, `KEYID`, `IPv4
* ADDRESS`, `IPv6 ADDRESS`
*/
ikev2LocalIkeIdentityType?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2LocalIkeIdentityTypeVariable?: pulumi.Input<string>;
/**
* , Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2LocalIkeIdentityValue?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2LocalIkeIdentityValueVariable?: pulumi.Input<string>;
/**
* Security Association Lifetime in Seconds, Attribute conditional on `connectionTypeSsl` being equal to `false` - Range:
* `3600`-`86400` - Default value: `86400`
*/
ikev2SecurityAssociationLifetime?: pulumi.Input<number>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ikev2SecurityAssociationLifetimeVariable?: pulumi.Input<string>;
/**
* security Association Lifetime, Attribute conditional on `ipsecEnableAntiReplay` being equal to `true` - Default value:
* `64`
*/
ipsecAntiReplayWindowSize?: pulumi.Input<number>;
/**
* Variable name, Attribute conditional on `ipsecEnableAntiReplay` being equal to `true`
*/
ipsecAntiReplayWindowSizeVariable?: pulumi.Input<string>;
/**
* Enable Anti-Replay, Attribute conditional on `connectionTypeSsl` being equal to `false` - Default value: `true`
*/
ipsecEnableAntiReplay?: pulumi.Input<boolean>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ipsecEnableAntiReplayVariable?: pulumi.Input<string>;
/**
* security Association Lifetime, Attribute conditional on `connectionTypeSsl` being equal to `false` - Default value:
* `false`
*/
ipsecEnablePerfectFowardSecrecy?: pulumi.Input<boolean>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ipsecEnablePerfectFowardSecrecyVariable?: pulumi.Input<string>;
/**
* Security Association Lifetime in Seconds, Attribute conditional on `connectionTypeSsl` being equal to `false` - Range:
* `3600`-`86400` - Default value: `3600`
*/
ipsecSecurityAssociationLifetime?: pulumi.Input<number>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
ipsecSecurityAssociationLifetimeVariable?: pulumi.Input<string>;
/**
* IPv4 Pool Size - Default value: `1000`
*/
ipv4PoolSize?: pulumi.Input<number>;
/**
* Variable name
*/
ipv4PoolSizeVariable?: pulumi.Input<string>;
/**
* IPv6 Pool Size - Default value: `1024`
*/
ipv6PoolSize?: pulumi.Input<number>;
/**
* Variable name
*/
ipv6PoolSizeVariable?: pulumi.Input<string>;
/**
* The name of the Feature
*/
name?: pulumi.Input<string>;
/**
* PSK Pre Shared Key, Attribute conditional on `pskAuthenticationType` being equal to `group`
*/
pskAuthenticationPreSharedKey?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `pskAuthenticationType` being equal to `group`
*/
pskAuthenticationPreSharedKeyVariable?: pulumi.Input<string>;
/**
* PSK Selection, Attribute conditional on `connectionTypeSsl` being equal to `false` - Choices: `aaa`, `group`
*/
pskAuthenticationType?: pulumi.Input<string>;
/**
* Variable name, Attribute conditional on `connectionTypeSsl` being equal to `false`
*/
pskAuthenticationTypeVariable?: pulumi.Input<string>;
radiusGroupName: pulumi.Input<string>;
/**
* Variable name
*/
radiusGroupNameVariable?: pulumi.Input<string>;
}