pulumi-alicloud-kotlin/com.pulumi.alicloud.cen.kotlin/TransitRouterVpnAttachment

TransitRouterVpnAttachment

class TransitRouterVpnAttachment : KotlinCustomResource

Provides a Cloud Enterprise Network (CEN) Transit Router Vpn Attachment resource. For information about Cloud Enterprise Network (CEN) Transit Router Vpn Attachment and how to use it, see What is Transit Router Vpn Attachment.

NOTE: Available since v1.183.0.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const config = new pulumi.Config();
const name = config.get("name") || "tf_example";
const default = alicloud.cen.getTransitRouterAvailableResources({});
const example = new alicloud.cen.Instance("example", {cenInstanceName: name});
const exampleTransitRouter = new alicloud.cen.TransitRouter("example", {
    cenId: example.id,
    transitRouterDescription: name,
    transitRouterName: name,
});
const exampleCustomerGateway = new alicloud.vpn.CustomerGateway("example", {
    name: name,
    ipAddress: "42.104.22.210",
    asn: "45014",
    description: name,
});
const exampleGatewayVpnAttachment = new alicloud.vpn.GatewayVpnAttachment("example", {
    customerGatewayId: exampleCustomerGateway.id,
    networkType: "public",
    localSubnet: "0.0.0.0/0",
    remoteSubnet: "0.0.0.0/0",
    effectImmediately: false,
    ikeConfig: {
        ikeAuthAlg: "md5",
        ikeEncAlg: "des",
        ikeVersion: "ikev2",
        ikeMode: "main",
        ikeLifetime: 86400,
        psk: "tf-testvpn2",
        ikePfs: "group1",
        remoteId: "testbob2",
        localId: "testalice2",
    },
    ipsecConfig: {
        ipsecPfs: "group5",
        ipsecEncAlg: "des",
        ipsecAuthAlg: "md5",
        ipsecLifetime: 86400,
    },
    bgpConfig: {
        enable: true,
        localAsn: 45014,
        tunnelCidr: "169.254.11.0/30",
        localBgpIp: "169.254.11.1",
    },
    healthCheckConfig: {
        enable: true,
        sip: "192.168.1.1",
        dip: "10.0.0.1",
        interval: 10,
        retry: 10,
        policy: "revoke_route",
    },
    enableDpd: true,
    enableNatTraversal: true,
    vpnAttachmentName: name,
});
const exampleTransitRouterCidr = new alicloud.cen.TransitRouterCidr("example", {
    transitRouterId: exampleTransitRouter.transitRouterId,
    cidr: "192.168.0.0/16",
    transitRouterCidrName: name,
    description: name,
    publishCidrRoute: true,
});
const exampleTransitRouterVpnAttachment = new alicloud.cen.TransitRouterVpnAttachment("example", {
    autoPublishRouteEnabled: false,
    transitRouterAttachmentDescription: name,
    transitRouterAttachmentName: name,
    cenId: exampleTransitRouter.cenId,
    transitRouterId: exampleTransitRouterCidr.transitRouterId,
    vpnId: exampleGatewayVpnAttachment.id,
    zones: [{
        zoneId: _default.then(_default => _default.resources?.[0]?.masterZones?.[0]),
    }],
});
Content copied to clipboard
import pulumi
import pulumi_alicloud as alicloud
config = pulumi.Config()
name = config.get("name")
if name is None:
    name = "tf_example"
default = alicloud.cen.get_transit_router_available_resources()
example = alicloud.cen.Instance("example", cen_instance_name=name)
example_transit_router = alicloud.cen.TransitRouter("example",
    cen_id=example.id,
    transit_router_description=name,
    transit_router_name=name)
example_customer_gateway = alicloud.vpn.CustomerGateway("example",
    name=name,
    ip_address="42.104.22.210",
    asn="45014",
    description=name)
example_gateway_vpn_attachment = alicloud.vpn.GatewayVpnAttachment("example",
    customer_gateway_id=example_customer_gateway.id,
    network_type="public",
    local_subnet="0.0.0.0/0",
    remote_subnet="0.0.0.0/0",
    effect_immediately=False,
    ike_config=alicloud.vpn.GatewayVpnAttachmentIkeConfigArgs(
        ike_auth_alg="md5",
        ike_enc_alg="des",
        ike_version="ikev2",
        ike_mode="main",
        ike_lifetime=86400,
        psk="tf-testvpn2",
        ike_pfs="group1",
        remote_id="testbob2",
        local_id="testalice2",
    ),
    ipsec_config=alicloud.vpn.GatewayVpnAttachmentIpsecConfigArgs(
        ipsec_pfs="group5",
        ipsec_enc_alg="des",
        ipsec_auth_alg="md5",
        ipsec_lifetime=86400,
    ),
    bgp_config=alicloud.vpn.GatewayVpnAttachmentBgpConfigArgs(
        enable=True,
        local_asn=45014,
        tunnel_cidr="169.254.11.0/30",
        local_bgp_ip="169.254.11.1",
    ),
    health_check_config=alicloud.vpn.GatewayVpnAttachmentHealthCheckConfigArgs(
        enable=True,
        sip="192.168.1.1",
        dip="10.0.0.1",
        interval=10,
        retry=10,
        policy="revoke_route",
    ),
    enable_dpd=True,
    enable_nat_traversal=True,
    vpn_attachment_name=name)
example_transit_router_cidr = alicloud.cen.TransitRouterCidr("example",
    transit_router_id=example_transit_router.transit_router_id,
    cidr="192.168.0.0/16",
    transit_router_cidr_name=name,
    description=name,
    publish_cidr_route=True)
example_transit_router_vpn_attachment = alicloud.cen.TransitRouterVpnAttachment("example",
    auto_publish_route_enabled=False,
    transit_router_attachment_description=name,
    transit_router_attachment_name=name,
    cen_id=example_transit_router.cen_id,
    transit_router_id=example_transit_router_cidr.transit_router_id,
    vpn_id=example_gateway_vpn_attachment.id,
    zones=[alicloud.cen.TransitRouterVpnAttachmentZoneArgs(
        zone_id=default.resources[0].master_zones[0],
    )])
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
    var config = new Config();
    var name = config.Get("name") ?? "tf_example";
    var @default = AliCloud.Cen.GetTransitRouterAvailableResources.Invoke();
    var example = new AliCloud.Cen.Instance("example", new()
    {
        CenInstanceName = name,
    });
    var exampleTransitRouter = new AliCloud.Cen.TransitRouter("example", new()
    {
        CenId = example.Id,
        TransitRouterDescription = name,
        TransitRouterName = name,
    });
    var exampleCustomerGateway = new AliCloud.Vpn.CustomerGateway("example", new()
    {
        Name = name,
        IpAddress = "42.104.22.210",
        Asn = "45014",
        Description = name,
    });
    var exampleGatewayVpnAttachment = new AliCloud.Vpn.GatewayVpnAttachment("example", new()
    {
        CustomerGatewayId = exampleCustomerGateway.Id,
        NetworkType = "public",
        LocalSubnet = "0.0.0.0/0",
        RemoteSubnet = "0.0.0.0/0",
        EffectImmediately = false,
        IkeConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentIkeConfigArgs
        {
            IkeAuthAlg = "md5",
            IkeEncAlg = "des",
            IkeVersion = "ikev2",
            IkeMode = "main",
            IkeLifetime = 86400,
            Psk = "tf-testvpn2",
            IkePfs = "group1",
            RemoteId = "testbob2",
            LocalId = "testalice2",
        },
        IpsecConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentIpsecConfigArgs
        {
            IpsecPfs = "group5",
            IpsecEncAlg = "des",
            IpsecAuthAlg = "md5",
            IpsecLifetime = 86400,
        },
        BgpConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentBgpConfigArgs
        {
            Enable = true,
            LocalAsn = 45014,
            TunnelCidr = "169.254.11.0/30",
            LocalBgpIp = "169.254.11.1",
        },
        HealthCheckConfig = new AliCloud.Vpn.Inputs.GatewayVpnAttachmentHealthCheckConfigArgs
        {
            Enable = true,
            Sip = "192.168.1.1",
            Dip = "10.0.0.1",
            Interval = 10,
            Retry = 10,
            Policy = "revoke_route",
        },
        EnableDpd = true,
        EnableNatTraversal = true,
        VpnAttachmentName = name,
    });
    var exampleTransitRouterCidr = new AliCloud.Cen.TransitRouterCidr("example", new()
    {
        TransitRouterId = exampleTransitRouter.TransitRouterId,
        Cidr = "192.168.0.0/16",
        TransitRouterCidrName = name,
        Description = name,
        PublishCidrRoute = true,
    });
    var exampleTransitRouterVpnAttachment = new AliCloud.Cen.TransitRouterVpnAttachment("example", new()
    {
        AutoPublishRouteEnabled = false,
        TransitRouterAttachmentDescription = name,
        TransitRouterAttachmentName = name,
        CenId = exampleTransitRouter.CenId,
        TransitRouterId = exampleTransitRouterCidr.TransitRouterId,
        VpnId = exampleGatewayVpnAttachment.Id,
        Zones = new[]
        {
            new AliCloud.Cen.Inputs.TransitRouterVpnAttachmentZoneArgs
            {
                ZoneId = @default.Apply(@default => @default.Apply(getTransitRouterAvailableResourcesResult => getTransitRouterAvailableResourcesResult.Resources[0]?.MasterZones[0])),
            },
        },
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cen"
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpn"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		name := "tf_example"
		if param := cfg.Get("name"); param != "" {
			name = param
		}
		_default, err := cen.GetTransitRouterAvailableResources(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := cen.NewInstance(ctx, "example", &cen.InstanceArgs{
			CenInstanceName: pulumi.String(name),
		})
		if err != nil {
			return err
		}
		exampleTransitRouter, err := cen.NewTransitRouter(ctx, "example", &cen.TransitRouterArgs{
			CenId:                    example.ID(),
			TransitRouterDescription: pulumi.String(name),
			TransitRouterName:        pulumi.String(name),
		})
		if err != nil {
			return err
		}
		exampleCustomerGateway, err := vpn.NewCustomerGateway(ctx, "example", &vpn.CustomerGatewayArgs{
			Name:        pulumi.String(name),
			IpAddress:   pulumi.String("42.104.22.210"),
			Asn:         pulumi.String("45014"),
			Description: pulumi.String(name),
		})
		if err != nil {
			return err
		}
		exampleGatewayVpnAttachment, err := vpn.NewGatewayVpnAttachment(ctx, "example", &vpn.GatewayVpnAttachmentArgs{
			CustomerGatewayId: exampleCustomerGateway.ID(),
			NetworkType:       pulumi.String("public"),
			LocalSubnet:       pulumi.String("0.0.0.0/0"),
			RemoteSubnet:      pulumi.String("0.0.0.0/0"),
			EffectImmediately: pulumi.Bool(false),
			IkeConfig: &vpn.GatewayVpnAttachmentIkeConfigArgs{
				IkeAuthAlg:  pulumi.String("md5"),
				IkeEncAlg:   pulumi.String("des"),
				IkeVersion:  pulumi.String("ikev2"),
				IkeMode:     pulumi.String("main"),
				IkeLifetime: pulumi.Int(86400),
				Psk:         pulumi.String("tf-testvpn2"),
				IkePfs:      pulumi.String("group1"),
				RemoteId:    pulumi.String("testbob2"),
				LocalId:     pulumi.String("testalice2"),
			},
			IpsecConfig: &vpn.GatewayVpnAttachmentIpsecConfigArgs{
				IpsecPfs:      pulumi.String("group5"),
				IpsecEncAlg:   pulumi.String("des"),
				IpsecAuthAlg:  pulumi.String("md5"),
				IpsecLifetime: pulumi.Int(86400),
			},
			BgpConfig: &vpn.GatewayVpnAttachmentBgpConfigArgs{
				Enable:     pulumi.Bool(true),
				LocalAsn:   pulumi.Int(45014),
				TunnelCidr: pulumi.String("169.254.11.0/30"),
				LocalBgpIp: pulumi.String("169.254.11.1"),
			},
			HealthCheckConfig: &vpn.GatewayVpnAttachmentHealthCheckConfigArgs{
				Enable:   pulumi.Bool(true),
				Sip:      pulumi.String("192.168.1.1"),
				Dip:      pulumi.String("10.0.0.1"),
				Interval: pulumi.Int(10),
				Retry:    pulumi.Int(10),
				Policy:   pulumi.String("revoke_route"),
			},
			EnableDpd:          pulumi.Bool(true),
			EnableNatTraversal: pulumi.Bool(true),
			VpnAttachmentName:  pulumi.String(name),
		})
		if err != nil {
			return err
		}
		exampleTransitRouterCidr, err := cen.NewTransitRouterCidr(ctx, "example", &cen.TransitRouterCidrArgs{
			TransitRouterId:       exampleTransitRouter.TransitRouterId,
			Cidr:                  pulumi.String("192.168.0.0/16"),
			TransitRouterCidrName: pulumi.String(name),
			Description:           pulumi.String(name),
			PublishCidrRoute:      pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = cen.NewTransitRouterVpnAttachment(ctx, "example", &cen.TransitRouterVpnAttachmentArgs{
			AutoPublishRouteEnabled:            pulumi.Bool(false),
			TransitRouterAttachmentDescription: pulumi.String(name),
			TransitRouterAttachmentName:        pulumi.String(name),
			CenId:                              exampleTransitRouter.CenId,
			TransitRouterId:                    exampleTransitRouterCidr.TransitRouterId,
			VpnId:                              exampleGatewayVpnAttachment.ID(),
			Zones: cen.TransitRouterVpnAttachmentZoneArray{
				&cen.TransitRouterVpnAttachmentZoneArgs{
					ZoneId: pulumi.String(_default.Resources[0].MasterZones[0]),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.cen.CenFunctions;
import com.pulumi.alicloud.cen.inputs.GetTransitRouterAvailableResourcesArgs;
import com.pulumi.alicloud.cen.Instance;
import com.pulumi.alicloud.cen.InstanceArgs;
import com.pulumi.alicloud.cen.TransitRouter;
import com.pulumi.alicloud.cen.TransitRouterArgs;
import com.pulumi.alicloud.vpn.CustomerGateway;
import com.pulumi.alicloud.vpn.CustomerGatewayArgs;
import com.pulumi.alicloud.vpn.GatewayVpnAttachment;
import com.pulumi.alicloud.vpn.GatewayVpnAttachmentArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentIkeConfigArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentIpsecConfigArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentBgpConfigArgs;
import com.pulumi.alicloud.vpn.inputs.GatewayVpnAttachmentHealthCheckConfigArgs;
import com.pulumi.alicloud.cen.TransitRouterCidr;
import com.pulumi.alicloud.cen.TransitRouterCidrArgs;
import com.pulumi.alicloud.cen.TransitRouterVpnAttachment;
import com.pulumi.alicloud.cen.TransitRouterVpnAttachmentArgs;
import com.pulumi.alicloud.cen.inputs.TransitRouterVpnAttachmentZoneArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var name = config.get("name").orElse("tf_example");
        final var default = CenFunctions.getTransitRouterAvailableResources();
        var example = new Instance("example", InstanceArgs.builder()
            .cenInstanceName(name)
            .build());
        var exampleTransitRouter = new TransitRouter("exampleTransitRouter", TransitRouterArgs.builder()
            .cenId(example.id())
            .transitRouterDescription(name)
            .transitRouterName(name)
            .build());
        var exampleCustomerGateway = new CustomerGateway("exampleCustomerGateway", CustomerGatewayArgs.builder()
            .name(name)
            .ipAddress("42.104.22.210")
            .asn("45014")
            .description(name)
            .build());
        var exampleGatewayVpnAttachment = new GatewayVpnAttachment("exampleGatewayVpnAttachment", GatewayVpnAttachmentArgs.builder()
            .customerGatewayId(exampleCustomerGateway.id())
            .networkType("public")
            .localSubnet("0.0.0.0/0")
            .remoteSubnet("0.0.0.0/0")
            .effectImmediately(false)
            .ikeConfig(GatewayVpnAttachmentIkeConfigArgs.builder()
                .ikeAuthAlg("md5")
                .ikeEncAlg("des")
                .ikeVersion("ikev2")
                .ikeMode("main")
                .ikeLifetime(86400)
                .psk("tf-testvpn2")
                .ikePfs("group1")
                .remoteId("testbob2")
                .localId("testalice2")
                .build())
            .ipsecConfig(GatewayVpnAttachmentIpsecConfigArgs.builder()
                .ipsecPfs("group5")
                .ipsecEncAlg("des")
                .ipsecAuthAlg("md5")
                .ipsecLifetime(86400)
                .build())
            .bgpConfig(GatewayVpnAttachmentBgpConfigArgs.builder()
                .enable(true)
                .localAsn(45014)
                .tunnelCidr("169.254.11.0/30")
                .localBgpIp("169.254.11.1")
                .build())
            .healthCheckConfig(GatewayVpnAttachmentHealthCheckConfigArgs.builder()
                .enable(true)
                .sip("192.168.1.1")
                .dip("10.0.0.1")
                .interval(10)
                .retry(10)
                .policy("revoke_route")
                .build())
            .enableDpd(true)
            .enableNatTraversal(true)
            .vpnAttachmentName(name)
            .build());
        var exampleTransitRouterCidr = new TransitRouterCidr("exampleTransitRouterCidr", TransitRouterCidrArgs.builder()
            .transitRouterId(exampleTransitRouter.transitRouterId())
            .cidr("192.168.0.0/16")
            .transitRouterCidrName(name)
            .description(name)
            .publishCidrRoute(true)
            .build());
        var exampleTransitRouterVpnAttachment = new TransitRouterVpnAttachment("exampleTransitRouterVpnAttachment", TransitRouterVpnAttachmentArgs.builder()
            .autoPublishRouteEnabled(false)
            .transitRouterAttachmentDescription(name)
            .transitRouterAttachmentName(name)
            .cenId(exampleTransitRouter.cenId())
            .transitRouterId(exampleTransitRouterCidr.transitRouterId())
            .vpnId(exampleGatewayVpnAttachment.id())
            .zones(TransitRouterVpnAttachmentZoneArgs.builder()
                .zoneId(default_.resources()[0].masterZones()[0])
                .build())
            .build());
    }
}
Content copied to clipboard
configuration:
  name:
    type: string
    default: tf_example
resources:
  example:
    type: alicloud:cen:Instance
    properties:
      cenInstanceName: ${name}
  exampleTransitRouter:
    type: alicloud:cen:TransitRouter
    name: example
    properties:
      cenId: ${example.id}
      transitRouterDescription: ${name}
      transitRouterName: ${name}
  exampleCustomerGateway:
    type: alicloud:vpn:CustomerGateway
    name: example
    properties:
      name: ${name}
      ipAddress: 42.104.22.210
      asn: '45014'
      description: ${name}
  exampleGatewayVpnAttachment:
    type: alicloud:vpn:GatewayVpnAttachment
    name: example
    properties:
      customerGatewayId: ${exampleCustomerGateway.id}
      networkType: public
      localSubnet: 0.0.0.0/0
      remoteSubnet: 0.0.0.0/0
      effectImmediately: false
      ikeConfig:
        ikeAuthAlg: md5
        ikeEncAlg: des
        ikeVersion: ikev2
        ikeMode: main
        ikeLifetime: 86400
        psk: tf-testvpn2
        ikePfs: group1
        remoteId: testbob2
        localId: testalice2
      ipsecConfig:
        ipsecPfs: group5
        ipsecEncAlg: des
        ipsecAuthAlg: md5
        ipsecLifetime: 86400
      bgpConfig:
        enable: true
        localAsn: 45014
        tunnelCidr: 169.254.11.0/30
        localBgpIp: 169.254.11.1
      healthCheckConfig:
        enable: true
        sip: 192.168.1.1
        dip: 10.0.0.1
        interval: 10
        retry: 10
        policy: revoke_route
      enableDpd: true
      enableNatTraversal: true
      vpnAttachmentName: ${name}
  exampleTransitRouterCidr:
    type: alicloud:cen:TransitRouterCidr
    name: example
    properties:
      transitRouterId: ${exampleTransitRouter.transitRouterId}
      cidr: 192.168.0.0/16
      transitRouterCidrName: ${name}
      description: ${name}
      publishCidrRoute: true
  exampleTransitRouterVpnAttachment:
    type: alicloud:cen:TransitRouterVpnAttachment
    name: example
    properties:
      autoPublishRouteEnabled: false
      transitRouterAttachmentDescription: ${name}
      transitRouterAttachmentName: ${name}
      cenId: ${exampleTransitRouter.cenId}
      transitRouterId: ${exampleTransitRouterCidr.transitRouterId}
      vpnId: ${exampleGatewayVpnAttachment.id}
      zones:
        - zoneId: ${default.resources[0].masterZones[0]}
variables:
  default:
    fn::invoke:
      Function: alicloud:cen:getTransitRouterAvailableResources
      Arguments: {}
Content copied to clipboard

Import

Cloud Enterprise Network (CEN) Transit Router Vpn Attachment can be imported using the id, e.g.

$ pulumi import alicloud:cen/transitRouterVpnAttachment:TransitRouterVpnAttachment example <id>
Content copied to clipboard

Properties

Link copied to clipboard
val autoPublishRouteEnabled: Output<Boolean>

Whether to allow the forwarding router instance to automatically publish routing entries to IPsec connections.

Link copied to clipboard
val cenId: Output<String>?

The id of the cen.

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val status: Output<String>

The associating status of the network.

Link copied to clipboard
val tags: Output<Map<String, Any>>?

A mapping of tags to assign to the resource.

Link copied to clipboard
val transitRouterAttachmentDescription: Output<String>?

The description of the VPN connection. The description can contain 2 to 256 characters. The description must start with English letters, but cannot start with http:// or https://.

Link copied to clipboard
val transitRouterAttachmentName: Output<String>?

The name of the VPN connection. The name must be 2 to 128 characters in length, and can contain digits, underscores (_), and hyphens (-). It must start with a letter.

Link copied to clipboard
val transitRouterId: Output<String>

The ID of the forwarding router instance.

Link copied to clipboard
val urn: Output<String>
Link copied to clipboard
val vpnId: Output<String>

The id of the vpn.

Link copied to clipboard
val vpnOwnerId: Output<String>

The owner id of vpn. NOTE: You must set vpn_owner_id, if you want to connect the transit router to an IPsec-VPN connection that belongs to another Alibaba Cloud account.

Link copied to clipboard
val zones: Output<List<TransitRouterVpnAttachmentZone>>

The list of zone mapping. See zone below.