AWSEC2ModifyVpnTunnelOptionsSpecification

@interface AWSEC2ModifyVpnTunnelOptionsSpecification

The AWS Site-to-Site VPN tunnel options to modify.

  • The number of seconds after which a DPD timeout occurs.

    Constraints: A value between 0 and 30.

    Default: 30

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic) NSNumber *_Nullable DPDTimeoutSeconds;

    Swift

    var dpdTimeoutSeconds: NSNumber? { get set }
  • The IKE versions that are permitted for the VPN tunnel.

    Valid values: ikev1 | ikev2

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSArray<AWSEC2IKEVersionsRequestListValue *> *_Nullable IKEVersions;

    Swift

    var ikeVersions: [AWSEC2IKEVersionsRequestListValue]? { get set }
  • One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.

    Valid values: 2 | 14 | 15 | 16 | 17 | 18 | 22 | 23 | 24

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSArray<AWSEC2Phase1DHGroupNumbersRequestListValue *>
            *_Nullable phase1DHGroupNumbers;

    Swift

    var phase1DHGroupNumbers: [AWSEC2Phase1DHGroupNumbersRequestListValue]? { get set }
  • One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.

    Valid values: AES128 | AES256

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSArray<AWSEC2Phase1EncryptionAlgorithmsRequestListValue *>
            *_Nullable phase1EncryptionAlgorithms;

    Swift

    var phase1EncryptionAlgorithms: [AWSEC2Phase1EncryptionAlgorithmsRequestListValue]? { get set }
  • One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.

    Valid values: SHA1 | SHA2-256

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSArray<AWSEC2Phase1IntegrityAlgorithmsRequestListValue *>
            *_Nullable phase1IntegrityAlgorithms;

    Swift

    var phase1IntegrityAlgorithms: [AWSEC2Phase1IntegrityAlgorithmsRequestListValue]? { get set }
  • The lifetime for phase 1 of the IKE negotiation, in seconds.

    Constraints: A value between 900 and 28,800.

    Default: 28800

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSNumber *_Nullable phase1LifetimeSeconds;

    Swift

    var phase1LifetimeSeconds: NSNumber? { get set }
  • One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.

    Valid values: 2 | 5 | 14 | 15 | 16 | 17 | 18 | 22 | 23 | 24

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSArray<AWSEC2Phase2DHGroupNumbersRequestListValue *>
            *_Nullable phase2DHGroupNumbers;

    Swift

    var phase2DHGroupNumbers: [AWSEC2Phase2DHGroupNumbersRequestListValue]? { get set }
  • One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.

    Valid values: AES128 | AES256

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSArray<AWSEC2Phase2EncryptionAlgorithmsRequestListValue *>
            *_Nullable phase2EncryptionAlgorithms;

    Swift

    var phase2EncryptionAlgorithms: [AWSEC2Phase2EncryptionAlgorithmsRequestListValue]? { get set }
  • One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.

    Valid values: SHA1 | SHA2-256

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSArray<AWSEC2Phase2IntegrityAlgorithmsRequestListValue *>
            *_Nullable phase2IntegrityAlgorithms;

    Swift

    var phase2IntegrityAlgorithms: [AWSEC2Phase2IntegrityAlgorithmsRequestListValue]? { get set }
  • The lifetime for phase 2 of the IKE negotiation, in seconds.

    Constraints: A value between 900 and 3,600. The value must be less than the value for Phase1LifetimeSeconds.

    Default: 3600

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSNumber *_Nullable phase2LifetimeSeconds;

    Swift

    var phase2LifetimeSeconds: NSNumber? { get set }
  • The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and the customer gateway.

    Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic) NSString *_Nullable preSharedKey;

    Swift

    var preSharedKey: String? { get set }
  • The percentage of the rekey window (determined by RekeyMarginTimeSeconds) during which the rekey time is randomly selected.

    Constraints: A value between 0 and 100.

    Default: 100

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic) NSNumber *_Nullable rekeyFuzzPercentage;

    Swift

    var rekeyFuzzPercentage: NSNumber? { get set }
  • The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for RekeyFuzzPercentage.

    Constraints: A value between 60 and half of Phase2LifetimeSeconds.

    Default: 540

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic)
        NSNumber *_Nullable rekeyMarginTimeSeconds;

    Swift

    var rekeyMarginTimeSeconds: NSNumber? { get set }
  • The number of packets in an IKE replay window.

    Constraints: A value between 64 and 2048.

    Default: 1024

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic) NSNumber *_Nullable replayWindowSize;

    Swift

    var replayWindowSize: NSNumber? { get set }
  • The range of inside IP addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway.

    Constraints: A size /30 CIDR block from the 169.254.0.0/16 range. The following CIDR blocks are reserved and cannot be used:

    • 169.254.0.0/30

    • 169.254.1.0/30

    • 169.254.2.0/30

    • 169.254.3.0/30

    • 169.254.4.0/30

    • 169.254.5.0/30

    • 169.254.169.252/30

    Declaration

    Objective-C

    @property (readwrite, strong, nonatomic) NSString *_Nullable tunnelInsideCidr;

    Swift

    var tunnelInsideCidr: String? { get set }