» openstack_vpnaas_site_connection_v2

Manages a V2 Neutron IPSec site connection resource within OpenStack.

» Example Usage 

resource "openstack_vpnaas_site_connection_v2" "conn_1" {
        name = "connection_1"
        ikepolicy_id = "${openstack_vpnaas_ike_policy_v2.policy_2.id}"
        ipsecpolicy_id = "${openstack_vpnaas_ipsec_policy_v2.policy_1.id}"
        vpnservice_id = "${openstack_vpnaas_service_v2.service_1.id}"
        psk = "secret"
        peer_address = "192.168.10.1"
        local_ep_group_id = "${openstack_vpnaas_endpoint_group_v2.group_2.id}"
        peer_ep_group_id = "${openstack_vpnaas_endpoint_group_v2.group_1.id}"
}

» Argument Reference

The following arguments are supported:

  • region - (Optional) The region in which to obtain the V2 Networking client. A Networking client is needed to create an IPSec site connection. If omitted, the region argument of the provider is used. Changing this creates a new site connection.

  • name - (Optional) The name of the connection. Changing this updates the name of the existing connection.

  • tenant_id - (Optional) The owner of the connection. Required if admin wants to create a connection for another project. Changing this creates a new connection.

  • description - (Optional) The human-readable description for the connection. Changing this updates the description of the existing connection.

  • admin_state_up - (Optional) The administrative state of the resource. Can either be up(true) or down(false). Changing this updates the administrative state of the existing connection.

  • ikepolicy_id - (Required) The ID of the IKE policy. Changing this creates a new connection.

  • vpnservice_id - (Required) The ID of the VPN service. Changing this creates a new connection.

  • local_ep_group_id - (Optional) The ID for the endpoint group that contains private subnets for the local side of the connection. You must specify this parameter with the peer_ep_group_id parameter unless in backward- compatible mode where peer_cidrs is provided with a subnet_id for the VPN service. Changing this updates the existing connection.

  • ipsecpolicy_id - (Required) The ID of the IPsec policy. Changing this creates a new connection.

  • peer_id - (Required) The peer router identity for authentication. A valid value is an IPv4 address, IPv6 address, e-mail address, key ID, or FQDN. Typically, this value matches the peer_address value. Changing this updates the existing policy.

  • peer_ep_group_id - (Optional) The ID for the endpoint group that contains private CIDRs in the form < net_address > / < prefix > for the peer side of the connection. You must specify this parameter with the local_ep_group_id parameter unless in backward-compatible mode where peer_cidrs is provided with a subnet_id for the VPN service.

  • local_id - (Optional) An ID to be used instead of the external IP address for a virtual router used in traffic between instances on different networks in east-west traffic. Most often, local ID would be domain name, email address, etc. If this is not configured then the external IP address will be used as the ID.

  • peer_address - (Required) The peer gateway public IPv4 or IPv6 address or FQDN.

  • psk - (Required) The pre-shared key. A valid value is any string.

  • initiator - (Optional) A valid value is response-only or bi-directional. Default is bi-directional.

  • peer_cidrs - (Optional) Unique list of valid peer private CIDRs in the form < net_address > / < prefix > .

  • dpd - (Optional) A dictionary with dead peer detection (DPD) protocol controls.

    • action - (Optional) The dead peer detection (DPD) action. A valid value is clear, hold, restart, disabled, or restart-by-peer. Default value is hold.
    • timeout - (Optional) The dead peer detection (DPD) timeout in seconds. A valid value is a positive integer that is greater than the DPD interval value. Default is 120.
    • interval - (Optional) The dead peer detection (DPD) interval, in seconds. A valid value is a positive integer. Default is 30.

  • mtu - (Optional) The maximum transmission unit (MTU) value to address fragmentation. Minimum value is 68 for IPv4, and 1280 for IPv6.

  • value_specs - (Optional) Map of additional options.

» Attributes Reference

The following attributes are exported:

» Import

Site Connections can be imported using the id, e.g.

$ terraform import openstack_vpnaas_site_connection_v2.conn_1 832cb7f3-59fe-40cf-8f64-8350ffc03272