AWS SDK Version 3 for .NET
API Reference

AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.

The tunnel options for a single VPN tunnel.

Inheritance Hierarchy

System.Object
  Amazon.EC2.Model.VpnTunnelOptionsSpecification

Namespace: Amazon.EC2.Model
Assembly: AWSSDK.EC2.dll
Version: 3.x.y.z

Syntax

C#
public class VpnTunnelOptionsSpecification

The VpnTunnelOptionsSpecification type exposes the following members

Constructors

Properties

NameTypeDescription
Public Property DPDTimeoutAction System.String

Gets and sets the property DPDTimeoutAction.

The action to take after DPD timeout occurs. Specify restart to restart the IKE initiation. Specify clear to end the IKE session.

Valid Values: clear | none | restart

Default: clear

Public Property DPDTimeoutSeconds System.Int32

Gets and sets the property DPDTimeoutSeconds.

The number of seconds after which a DPD timeout occurs.

Constraints: A value greater than or equal to 30.

Default: 30

Public Property IKEVersions System.Collections.Generic.List<Amazon.EC2.Model.IKEVersionsRequestListValue>

Gets and sets the property IKEVersions.

The IKE versions that are permitted for the VPN tunnel.

Valid values: ikev1 | ikev2

Public Property LogOptions Amazon.EC2.Model.VpnTunnelLogOptionsSpecification

Gets and sets the property LogOptions.

Options for logging VPN tunnel activity.

Public Property Phase1DHGroupNumbers System.Collections.Generic.List<Amazon.EC2.Model.Phase1DHGroupNumbersRequestListValue>

Gets and sets the property Phase1DHGroupNumbers.

One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.

Valid values: 2 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24

Public Property Phase1EncryptionAlgorithms System.Collections.Generic.List<Amazon.EC2.Model.Phase1EncryptionAlgorithmsRequestListValue>

Gets and sets the property Phase1EncryptionAlgorithms.

One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.

Valid values: AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16

Public Property Phase1IntegrityAlgorithms System.Collections.Generic.List<Amazon.EC2.Model.Phase1IntegrityAlgorithmsRequestListValue>

Gets and sets the property Phase1IntegrityAlgorithms.

One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.

Valid values: SHA1 | SHA2-256 | SHA2-384 | SHA2-512

Public Property Phase1LifetimeSeconds System.Int32

Gets and sets the property Phase1LifetimeSeconds.

The lifetime for phase 1 of the IKE negotiation, in seconds.

Constraints: A value between 900 and 28,800.

Default: 28800

Public Property Phase2DHGroupNumbers System.Collections.Generic.List<Amazon.EC2.Model.Phase2DHGroupNumbersRequestListValue>

Gets and sets the property Phase2DHGroupNumbers.

One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.

Valid values: 2 | 5 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24

Public Property Phase2EncryptionAlgorithms System.Collections.Generic.List<Amazon.EC2.Model.Phase2EncryptionAlgorithmsRequestListValue>

Gets and sets the property Phase2EncryptionAlgorithms.

One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.

Valid values: AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16

Public Property Phase2IntegrityAlgorithms System.Collections.Generic.List<Amazon.EC2.Model.Phase2IntegrityAlgorithmsRequestListValue>

Gets and sets the property Phase2IntegrityAlgorithms.

One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.

Valid values: SHA1 | SHA2-256 | SHA2-384 | SHA2-512

Public Property Phase2LifetimeSeconds System.Int32

Gets and sets the property Phase2LifetimeSeconds.

The lifetime for phase 2 of the IKE negotiation, in seconds.

Constraints: A value between 900 and 3,600. The value must be less than the value for Phase1LifetimeSeconds.

Default: 3600

Public Property PreSharedKey System.String

Gets and sets the property PreSharedKey.

The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and customer gateway.

Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).

Public Property RekeyFuzzPercentage System.Int32

Gets and sets the property RekeyFuzzPercentage.

The percentage of the rekey window (determined by RekeyMarginTimeSeconds) during which the rekey time is randomly selected.

Constraints: A value between 0 and 100.

Default: 100

Public Property RekeyMarginTimeSeconds System.Int32

Gets and sets the property RekeyMarginTimeSeconds.

The margin time, in seconds, before the phase 2 lifetime expires, during which the Amazon Web Services side of the VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for RekeyFuzzPercentage.

Constraints: A value between 60 and half of Phase2LifetimeSeconds.

Default: 540

Public Property ReplayWindowSize System.Int32

Gets and sets the property ReplayWindowSize.

The number of packets in an IKE replay window.

Constraints: A value between 64 and 2048.

Default: 1024

Public Property StartupAction System.String

Gets and sets the property StartupAction.

The action to take when the establishing the tunnel for the VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify start for Amazon Web Services to initiate the IKE negotiation.

Valid Values: add | start

Default: add

Public Property TunnelInsideCidr System.String

Gets and sets the property TunnelInsideCidr.

The range of inside IPv4 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway.

Constraints: A size /30 CIDR block from the 169.254.0.0/16 range. The following CIDR blocks are reserved and cannot be used:

  • 169.254.0.0/30

  • 169.254.1.0/30

  • 169.254.2.0/30

  • 169.254.3.0/30

  • 169.254.4.0/30

  • 169.254.5.0/30

  • 169.254.169.252/30

Public Property TunnelInsideIpv6Cidr System.String

Gets and sets the property TunnelInsideIpv6Cidr.

The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same transit gateway.

Constraints: A size /126 CIDR block from the local fd00::/8 range.

Version Information

.NET Core App:
Supported in: 3.1

.NET Standard:
Supported in: 2.0

.NET Framework:
Supported in: 4.5, 4.0, 3.5