az network vpn-gateway connection ipsec-policy

Manage VPN gateway connection IPSec policies.

Commands

az network vpn-gateway connection ipsec-policy add

Add an IPSec policy to a VPN gateway connection.

az network vpn-gateway connection ipsec-policy list

List VPN gateway connection IPSec policies.

az network vpn-gateway connection ipsec-policy remove

Remove an IPSec policy from a VPN gateway connection.

az network vpn-gateway connection ipsec-policy add

Add an IPSec policy to a VPN gateway connection.

az network vpn-gateway connection ipsec-policy add --connection-name
                                                   --dh-group {DHGroup1, DHGroup14, DHGroup2, DHGroup2048, DHGroup24, ECP256, ECP384, None}
                                                   --gateway-name
                                                   --ike-encryption {AES128, AES192, AES256, DES, DES3, GCMAES128, GCMAES256}
                                                   --ike-integrity {GCMAES128, GCMAES256, MD5, SHA1, SHA256, SHA384}
                                                   --ipsec-encryption {AES128, AES192, AES256, DES, DES3, GCMAES128, GCMAES192, GCMAES256, None}
                                                   --ipsec-integrity {GCMAES128, GCMAES192, GCMAES256, MD5, SHA1, SHA256}
                                                   --pfs-group {ECP256, ECP384, None, PFS1, PFS14, PFS2, PFS2048, PFS24, PFSMM}
                                                   --resource-group
                                                   --sa-data-size
                                                   --sa-lifetime
                                                   [--no-wait]

Required Parameters

--connection-name

Name of the VPN gateway connection.

--dh-group

DH Groups used in IKE Phase 1 for initial SA.

accepted values: DHGroup1, DHGroup14, DHGroup2, DHGroup2048, DHGroup24, ECP256, ECP384, None
--gateway-name

Name of the VPN gateway.

--ike-encryption

IKE encryption algorithm (IKE phase 2).

accepted values: AES128, AES192, AES256, DES, DES3, GCMAES128, GCMAES256
--ike-integrity

IKE integrity algorithm (IKE phase 2).

accepted values: GCMAES128, GCMAES256, MD5, SHA1, SHA256, SHA384
--ipsec-encryption

IPSec encryption algorithm (IKE phase 1).

accepted values: AES128, AES192, AES256, DES, DES3, GCMAES128, GCMAES192, GCMAES256, None
--ipsec-integrity

IPSec integrity algorithm (IKE phase 1).

accepted values: GCMAES128, GCMAES192, GCMAES256, MD5, SHA1, SHA256
--pfs-group

The Pfs Groups used in IKE Phase 2 for new child SA.

accepted values: ECP256, ECP384, None, PFS1, PFS14, PFS2, PFS2048, PFS24, PFSMM
--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--sa-data-size

IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site-to-site VPN tunnel.

--sa-lifetime

IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site-to-site VPN tunnel.

Optional Parameters

--no-wait

Do not wait for the long-running operation to finish.

az network vpn-gateway connection ipsec-policy list

List VPN gateway connection IPSec policies.

az network vpn-gateway connection ipsec-policy list --connection-name
                                                    --gateway-name
                                                    --resource-group

Required Parameters

--connection-name

Name of the VPN gateway connection.

--gateway-name

Name of the VPN gateway.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

az network vpn-gateway connection ipsec-policy remove

Remove an IPSec policy from a VPN gateway connection.

az network vpn-gateway connection ipsec-policy remove --connection-name
                                                      --gateway-name
                                                      --index
                                                      --resource-group
                                                      [--no-wait]

Required Parameters

--connection-name

Name of the VPN gateway connection.

--gateway-name

Name of the VPN gateway.

--index

List index of the item (starting with 1).

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--no-wait

Do not wait for the long-running operation to finish.