CreateIPSecConnection

POST {{baseUrl}}/ipsecConnections

Creates a new IPSec connection between the specified DRG and CPE. For more information, see Site-to-Site VPN Overview.

If you configure at least one tunnel to use static routing, then in the request you must provide at least one valid static route (you're allowed a maximum of 10). For example: 10.0.0.0/16. If you configure both tunnels to use BGP dynamic routing, you can provide an empty list for the static routes. For more information, see the important note in IPSecConnection.

For the purposes of access control, you must provide the OCID of the compartment where you want the IPSec connection to reside. Notice that the IPSec connection doesn't have to be in the same compartment as the DRG, CPE, or other Networking Service components. If you're not sure which compartment to use, put the IPSec connection in the same compartment as the DRG. For more information about compartments and access control, see Overview of the IAM Service.

You may optionally specify a display name for the IPSec connection, otherwise a default is provided. It does not have to be unique, and you can change it. Avoid entering confidential information.

After creating the IPSec connection, you need to configure your on-premises router with tunnel-specific information. For tunnel status and the required configuration information, see:

• IPSecConnectionTunnel
• IPSecConnectionTunnelSharedSecret

For each tunnel, you need the IP address of Oracle's VPN headend and the shared secret (that is, the pre-shared key). For more information, see CPE Configuration.

Request Body

{"compartmentId"=>"{{compartment_ocid}}", "drgId"=>"cillum minim ut fugiat", "cpeId"=>"et nostrud veniam eiusmod est", "staticRoutes"=>["id consectetur sed ad aute", "in esse"], "cpeLocalIdentifier"=>"tempor nisi", "cpeLocalIdentifierType"=>"HOSTNAME", "displayName"=>"et nulla esse nisi", "tunnelConfiguration"=>[{"value"=>"<Error: Too many levels of nesting to fake this schema>"}, {"value"=>"<Error: Too many levels of nesting to fake this schema>"}]}

HEADERS

RESPONSES

status: OK

{"compartmentId":"et deserunt exercitation","id":"dolore adipisicing dolor proident sed","drgId":"id enim ipsum","cpeId":"voluptate velit reprehenderit","lifecycleState":"PROVISIONING","staticRoutes":["dolor","a"],"cpeLocalIdentifier":"Ut ea adipisicing cillum","cpeLocalIdentifierType":"IP_ADDRESS","definedTags":{},"displayName":"esse enim quis consectetur","freeformTags":{},"timeCreated":"1978-07-23T18:57:03.593Z"}