Partager via


Microsoft.Network vpnGateways 2018-06-01

Bicep resource definition

The vpnGateways resource type can be deployed with operations that target:

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Network/vpnGateways resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.Network/vpnGateways@2018-06-01' = {
  location: 'string'
  name: 'string'
  properties: {
    bgpSettings: {
      asn: int
      bgpPeeringAddress: 'string'
      peerWeight: int
    }
    connections: [
      {
        id: 'string'
        name: 'string'
        properties: {
          enableBgp: bool
          ipsecPolicies: [
            {
              dhGroup: 'string'
              ikeEncryption: 'string'
              ikeIntegrity: 'string'
              ipsecEncryption: 'string'
              ipsecIntegrity: 'string'
              pfsGroup: 'string'
              saDataSizeKilobytes: int
              saLifeTimeSeconds: int
            }
          ]
          provisioningState: 'string'
          remoteVpnSite: {
            id: 'string'
          }
          routingWeight: int
          sharedKey: 'string'
        }
      }
    ]
    policies: {
      allowBranchToBranchTraffic: bool
      allowVnetToVnetTraffic: bool
    }
    provisioningState: 'string'
    virtualHub: {
      id: 'string'
    }
  }
  tags: {
    {customized property}: 'string'
  }
}

Property values

BgpSettings

Name Description Value
asn The BGP speaker's ASN. int
bgpPeeringAddress The BGP peering address and BGP identifier of this BGP speaker. string
peerWeight The weight added to routes learned from this BGP speaker. int

IpsecPolicy

Name Description Value
dhGroup The DH Groups used in IKE Phase 1 for initial SA. 'DHGroup1'
'DHGroup14'
'DHGroup2'
'DHGroup2048'
'DHGroup24'
'ECP256'
'ECP384'
'None' (required)
ikeEncryption The IKE encryption algorithm (IKE phase 2). 'AES128'
'AES192'
'AES256'
'DES'
'DES3'
'GCMAES128'
'GCMAES256' (required)
ikeIntegrity The IKE integrity algorithm (IKE phase 2). 'GCMAES128'
'GCMAES256'
'MD5'
'SHA1'
'SHA256'
'SHA384' (required)
ipsecEncryption The IPSec encryption algorithm (IKE phase 1). 'AES128'
'AES192'
'AES256'
'DES'
'DES3'
'GCMAES128'
'GCMAES192'
'GCMAES256'
'None' (required)
ipsecIntegrity The IPSec integrity algorithm (IKE phase 1). 'GCMAES128'
'GCMAES192'
'GCMAES256'
'MD5'
'SHA1'
'SHA256' (required)
pfsGroup The Pfs Groups used in IKE Phase 2 for new child SA. 'ECP256'
'ECP384'
'None'
'PFS1'
'PFS14'
'PFS2'
'PFS2048'
'PFS24'
'PFSMM' (required)
saDataSizeKilobytes The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel. int (required)
saLifeTimeSeconds The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel. int (required)

Microsoft.Network/vpnGateways

Name Description Value
location Resource location. string
name The resource name string (required)
properties Parameters for VpnGateway VpnGatewayProperties
tags Resource tags Dictionary of tag names and values. See Tags in templates

Policies

Name Description Value
allowBranchToBranchTraffic True if branch to branch traffic is allowed. bool
allowVnetToVnetTraffic True if Vnet to Vnet traffic is allowed. bool

ResourceTags

Name Description Value

SubResource

Name Description Value
id Resource ID. string

VpnConnection

Name Description Value
id Resource ID. string
name The name of the resource that is unique within a resource group. This name can be used to access the resource. string
properties Parameters for VpnConnection VpnConnectionProperties

VpnConnectionProperties

Name Description Value
enableBgp EnableBgp flag bool
ipsecPolicies The IPSec Policies to be considered by this connection. IpsecPolicy[]
provisioningState The provisioning state of the resource. 'Deleting'
'Failed'
'Succeeded'
'Updating'
remoteVpnSite Id of the connected vpn site. SubResource
routingWeight routing weight for vpn connection. int
sharedKey SharedKey for the vpn connection. string

VpnGatewayProperties

Name Description Value
bgpSettings Local network gateway's BGP speaker settings. BgpSettings
connections list of all vpn connections to the gateway. VpnConnection[]
policies The policies applied to this vpn gateway. Policies
provisioningState The provisioning state of the resource. 'Deleting'
'Failed'
'Succeeded'
'Updating'
virtualHub The VirtualHub to which the gateway belongs SubResource

Quickstart samples

The following quickstart samples deploy this resource type.

Bicep File Description
Creates Virtual WAN resources This template allows you to create virtual WAN resources including Virtual WAN, Virtual Hub, VPN Gateway, VPN Site and a VPN Connecton.

ARM template resource definition

The vpnGateways resource type can be deployed with operations that target:

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Network/vpnGateways resource, add the following JSON to your template.

{
  "type": "Microsoft.Network/vpnGateways",
  "apiVersion": "2018-06-01",
  "name": "string",
  "location": "string",
  "properties": {
    "bgpSettings": {
      "asn": "int",
      "bgpPeeringAddress": "string",
      "peerWeight": "int"
    },
    "connections": [
      {
        "id": "string",
        "name": "string",
        "properties": {
          "enableBgp": "bool",
          "ipsecPolicies": [
            {
              "dhGroup": "string",
              "ikeEncryption": "string",
              "ikeIntegrity": "string",
              "ipsecEncryption": "string",
              "ipsecIntegrity": "string",
              "pfsGroup": "string",
              "saDataSizeKilobytes": "int",
              "saLifeTimeSeconds": "int"
            }
          ],
          "provisioningState": "string",
          "remoteVpnSite": {
            "id": "string"
          },
          "routingWeight": "int",
          "sharedKey": "string"
        }
      }
    ],
    "policies": {
      "allowBranchToBranchTraffic": "bool",
      "allowVnetToVnetTraffic": "bool"
    },
    "provisioningState": "string",
    "virtualHub": {
      "id": "string"
    }
  },
  "tags": {
    "{customized property}": "string"
  }
}

Property values

BgpSettings

Name Description Value
asn The BGP speaker's ASN. int
bgpPeeringAddress The BGP peering address and BGP identifier of this BGP speaker. string
peerWeight The weight added to routes learned from this BGP speaker. int

IpsecPolicy

Name Description Value
dhGroup The DH Groups used in IKE Phase 1 for initial SA. 'DHGroup1'
'DHGroup14'
'DHGroup2'
'DHGroup2048'
'DHGroup24'
'ECP256'
'ECP384'
'None' (required)
ikeEncryption The IKE encryption algorithm (IKE phase 2). 'AES128'
'AES192'
'AES256'
'DES'
'DES3'
'GCMAES128'
'GCMAES256' (required)
ikeIntegrity The IKE integrity algorithm (IKE phase 2). 'GCMAES128'
'GCMAES256'
'MD5'
'SHA1'
'SHA256'
'SHA384' (required)
ipsecEncryption The IPSec encryption algorithm (IKE phase 1). 'AES128'
'AES192'
'AES256'
'DES'
'DES3'
'GCMAES128'
'GCMAES192'
'GCMAES256'
'None' (required)
ipsecIntegrity The IPSec integrity algorithm (IKE phase 1). 'GCMAES128'
'GCMAES192'
'GCMAES256'
'MD5'
'SHA1'
'SHA256' (required)
pfsGroup The Pfs Groups used in IKE Phase 2 for new child SA. 'ECP256'
'ECP384'
'None'
'PFS1'
'PFS14'
'PFS2'
'PFS2048'
'PFS24'
'PFSMM' (required)
saDataSizeKilobytes The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel. int (required)
saLifeTimeSeconds The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel. int (required)

Microsoft.Network/vpnGateways

Name Description Value
apiVersion The api version '2018-06-01'
location Resource location. string
name The resource name string (required)
properties Parameters for VpnGateway VpnGatewayProperties
tags Resource tags Dictionary of tag names and values. See Tags in templates
type The resource type 'Microsoft.Network/vpnGateways'

Policies

Name Description Value
allowBranchToBranchTraffic True if branch to branch traffic is allowed. bool
allowVnetToVnetTraffic True if Vnet to Vnet traffic is allowed. bool

ResourceTags

Name Description Value

SubResource

Name Description Value
id Resource ID. string

VpnConnection

Name Description Value
id Resource ID. string
name The name of the resource that is unique within a resource group. This name can be used to access the resource. string
properties Parameters for VpnConnection VpnConnectionProperties

VpnConnectionProperties

Name Description Value
enableBgp EnableBgp flag bool
ipsecPolicies The IPSec Policies to be considered by this connection. IpsecPolicy[]
provisioningState The provisioning state of the resource. 'Deleting'
'Failed'
'Succeeded'
'Updating'
remoteVpnSite Id of the connected vpn site. SubResource
routingWeight routing weight for vpn connection. int
sharedKey SharedKey for the vpn connection. string

VpnGatewayProperties

Name Description Value
bgpSettings Local network gateway's BGP speaker settings. BgpSettings
connections list of all vpn connections to the gateway. VpnConnection[]
policies The policies applied to this vpn gateway. Policies
provisioningState The provisioning state of the resource. 'Deleting'
'Failed'
'Succeeded'
'Updating'
virtualHub The VirtualHub to which the gateway belongs SubResource

Quickstart templates

The following quickstart templates deploy this resource type.

Template Description
Azure Virtual WAN (vWAN) Multi-Hub Deployment

Deploy to Azure
This template allows you to create an Azure Virtual WAN (vWAN) multi-hub deployment including all gateways and VNET connections.
Azure vWAN Multi-Hub Deployment with Custom Routing Tables

Deploy to Azure
This template allows you to create an Azure Virtual WAN (vWAN) multi-hub deployment, including all gateways and VNET connections, and demonstrate the usage of Route Tables for custom routing.
Creates Virtual WAN resources

Deploy to Azure
This template allows you to create virtual WAN resources including Virtual WAN, Virtual Hub, VPN Gateway, VPN Site and a VPN Connecton.

Terraform (AzAPI provider) resource definition

The vpnGateways resource type can be deployed with operations that target:

  • Resource groups

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Network/vpnGateways resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.Network/vpnGateways@2018-06-01"
  name = "string"
  location = "string"
  body = jsonencode({
    properties = {
      bgpSettings = {
        asn = int
        bgpPeeringAddress = "string"
        peerWeight = int
      }
      connections = [
        {
          id = "string"
          name = "string"
          properties = {
            enableBgp = bool
            ipsecPolicies = [
              {
                dhGroup = "string"
                ikeEncryption = "string"
                ikeIntegrity = "string"
                ipsecEncryption = "string"
                ipsecIntegrity = "string"
                pfsGroup = "string"
                saDataSizeKilobytes = int
                saLifeTimeSeconds = int
              }
            ]
            provisioningState = "string"
            remoteVpnSite = {
              id = "string"
            }
            routingWeight = int
            sharedKey = "string"
          }
        }
      ]
      policies = {
        allowBranchToBranchTraffic = bool
        allowVnetToVnetTraffic = bool
      }
      provisioningState = "string"
      virtualHub = {
        id = "string"
      }
    }
  })
  tags = {
    {customized property} = "string"
  }
}

Property values

BgpSettings

Name Description Value
asn The BGP speaker's ASN. int
bgpPeeringAddress The BGP peering address and BGP identifier of this BGP speaker. string
peerWeight The weight added to routes learned from this BGP speaker. int

IpsecPolicy

Name Description Value
dhGroup The DH Groups used in IKE Phase 1 for initial SA. 'DHGroup1'
'DHGroup14'
'DHGroup2'
'DHGroup2048'
'DHGroup24'
'ECP256'
'ECP384'
'None' (required)
ikeEncryption The IKE encryption algorithm (IKE phase 2). 'AES128'
'AES192'
'AES256'
'DES'
'DES3'
'GCMAES128'
'GCMAES256' (required)
ikeIntegrity The IKE integrity algorithm (IKE phase 2). 'GCMAES128'
'GCMAES256'
'MD5'
'SHA1'
'SHA256'
'SHA384' (required)
ipsecEncryption The IPSec encryption algorithm (IKE phase 1). 'AES128'
'AES192'
'AES256'
'DES'
'DES3'
'GCMAES128'
'GCMAES192'
'GCMAES256'
'None' (required)
ipsecIntegrity The IPSec integrity algorithm (IKE phase 1). 'GCMAES128'
'GCMAES192'
'GCMAES256'
'MD5'
'SHA1'
'SHA256' (required)
pfsGroup The Pfs Groups used in IKE Phase 2 for new child SA. 'ECP256'
'ECP384'
'None'
'PFS1'
'PFS14'
'PFS2'
'PFS2048'
'PFS24'
'PFSMM' (required)
saDataSizeKilobytes The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel. int (required)
saLifeTimeSeconds The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel. int (required)

Microsoft.Network/vpnGateways

Name Description Value
location Resource location. string
name The resource name string (required)
properties Parameters for VpnGateway VpnGatewayProperties
tags Resource tags Dictionary of tag names and values.
type The resource type "Microsoft.Network/vpnGateways@2018-06-01"

Policies

Name Description Value
allowBranchToBranchTraffic True if branch to branch traffic is allowed. bool
allowVnetToVnetTraffic True if Vnet to Vnet traffic is allowed. bool

ResourceTags

Name Description Value

SubResource

Name Description Value
id Resource ID. string

VpnConnection

Name Description Value
id Resource ID. string
name The name of the resource that is unique within a resource group. This name can be used to access the resource. string
properties Parameters for VpnConnection VpnConnectionProperties

VpnConnectionProperties

Name Description Value
enableBgp EnableBgp flag bool
ipsecPolicies The IPSec Policies to be considered by this connection. IpsecPolicy[]
provisioningState The provisioning state of the resource. 'Deleting'
'Failed'
'Succeeded'
'Updating'
remoteVpnSite Id of the connected vpn site. SubResource
routingWeight routing weight for vpn connection. int
sharedKey SharedKey for the vpn connection. string

VpnGatewayProperties

Name Description Value
bgpSettings Local network gateway's BGP speaker settings. BgpSettings
connections list of all vpn connections to the gateway. VpnConnection[]
policies The policies applied to this vpn gateway. Policies
provisioningState The provisioning state of the resource. 'Deleting'
'Failed'
'Succeeded'
'Updating'
virtualHub The VirtualHub to which the gateway belongs SubResource