openstack_vpnaas_ike_policy_v2

Manages a V2 Neutron IKE policy resource within OpenStack.

Example Usage

resource "openstack_vpnaas_ike_policy_v2" "policy_1" {
  name = "my_policy"
}

Argument Reference

The following arguments are supported:

  • region - (Optional) The region in which to obtain the V2 Networking client. A Networking client is needed to create a VPN service. If omitted, the region argument of the provider is used. Changing this creates a new service.

  • name - (Optional) The name of the policy. Changing this updates the name of the existing policy.

  • tenant_id - (Optional) The owner of the policy. Required if admin wants to create a service for another policy. Changing this creates a new policy.

  • description - (Optional) The human-readable description for the policy. Changing this updates the description of the existing policy.

  • auth_algorithm - (Optional) The authentication hash algorithm. Valid values are sha1, sha256, sha384, sha512. Default is sha1. Changing this updates the algorithm of the existing policy.

  • encryption_algorithm - (Optional) The encryption algorithm. Valid values are 3des, aes-128, aes-192 and so on. The default value is aes-128. Changing this updates the existing policy.

  • pfs - (Optional) The perfect forward secrecy mode. Valid values are Group2, Group5 and Group14. Default is Group5. Changing this updates the existing policy.

  • phase1_negotiation_mode - (Optional) The IKE mode. A valid value is main, which is the default. Changing this updates the existing policy.

  • ike_version - (Optional) The IKE mode. A valid value is v1 or v2. Default is v1. Changing this updates the existing policy.

  • lifetime - (Optional) The lifetime of the security association. Consists of Unit and Value.

    • unit - (Optional) The units for the lifetime of the security association. Can be either seconds or kilobytes. Default is seconds.
    • value - (Optional) The value for the lifetime of the security association. Must be a positive integer. Default is 3600.
  • value_specs - (Optional) Map of additional options.

Attributes Reference

The following attributes are exported:

Import

Services can be imported using the id, e.g.

$ terraform import openstack_vpnaas_ike_policy_v2.policy_1 832cb7f3-59fe-40cf-8f64-8350ffc03272

© 2018 HashiCorp
Licensed under the MPL 2.0 License.
https://www.terraform.io/docs/providers/openstack/r/vpnaas_ike_policy_v2.html