Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for Listing IKE Security Associations for Virtual Network Gateway Connections #11572

Merged
merged 12 commits into from
Dec 14, 2020
2 changes: 2 additions & 0 deletions custom-words.txt
Original file line number Diff line number Diff line change
Expand Up @@ -527,6 +527,7 @@ EDMX
Einsteinweg
Ekaterinburg
ekus
elapsedTimeInseconds
Eloqua
enableautoscale
enablelog
Expand Down Expand Up @@ -656,6 +657,7 @@ getcertificate
getconsumergroup
GETCONTENTSUMMARY
GETFILESTATUS
getikesas
getissuers
getitems
getjob
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
{
"parameters": {
"api-version": "2020-08-01",
"subscriptionId": "subid",
"resourceGroupName": "rg1",
"virtualNetworkGatewayConnectionName": "vpngwcn1"
},
"responses": {
"202": {
"headers": {
"azure-async-operation": "/subscriptions/{subscriptionId}/providers/Microsoft.Network/locations/westus/operations/{operationId}?api-version=2020-08-01"
}
},
"200": {
"body": "\"{\"Status\":\"Successful\",\"Data\":null}\""
}
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -1825,6 +1825,63 @@
}
}
},
"/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/connections/{virtualNetworkGatewayConnectionName}/getikesas": {
"post": {
"tags": [
"VirtualNetworkGatewayConnections"
],
"operationId": "VirtualNetworkGatewayConnections_GetIkeSas",
"description": "Lists IKE Security Associations for the virtual network gateway connection in the specified resource group.",
"parameters": [
{
"name": "resourceGroupName",
"in": "path",
"required": true,
"type": "string",
"description": "The name of the resource group."
},
{
"name": "virtualNetworkGatewayConnectionName",
"in": "path",
"required": true,
"type": "string",
"description": "The name of the virtual network gateway Connection."
},
{
"$ref": "./network.json#/parameters/ApiVersionParameter"
},
{
"$ref": "./network.json#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"202": {
"description": "Accepted and the operation GetIkeSas will complete asynchronously."
},
"200": {
"description": "Request successful. The operation getikesas completed on virtual network gateway connection.",
"schema": {
"$ref": "#/definitions/IkeSaParameters"
}
},
"default": {
"description": "The operation GetIkeSas could not be completed.",
"schema": {
"$ref": "./networkWatcher.json#/definitions/ErrorResponse"
}
}
},
"x-ms-examples": {
"List IKE Security Associations for virtual network gateway connection": {
"$ref": "./examples/VirtualNetworkGatewayConnectionGetIkeSas.json"
}
},
"x-ms-long-running-operation": true,
"x-ms-long-running-operation-options": {
"final-state-via": "azure-async-operation"
}
}
},
"/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/localNetworkGateways/{localNetworkGatewayName}": {
"put": {
"tags": [
Expand Down Expand Up @@ -3212,6 +3269,142 @@
],
"description": "An IPSec parameters for a virtual network gateway P2S connection."
},
"IkeSaParameters": {
"properties": {
"mainModeSa": {
"properties": {
"localEndpoint": {
"type": "string",
"description": "The local endpoint."
},
"remoteEndpoint": {
"type": "string",
"description": "The remote endpoint."
},
"initiatorCookie": {
"type": "integer",
"format": "int64",
"description": "The initiator cookie."
},
"responderCookie": {
"type": "integer",
"format": "int64",
"description": "The responder cookie."
},
"localUdpEncapsulationPort": {
"type": "integer",
"format": "int32",
"description": "The local UDP encapsulation port."
},
"remoteUdpEncapsulationPort": {
"type": "integer",
"format": "int32",
"description": "The remote UDP encapsulation port."
},
"encryption": {
"type": "string",
"description": "The IKE encryption algorithm (IKE phase 1)."
},
"integrity": {
"type": "string",
"description": "The IKE integrity algorithm (IKE phase 1)."
},
"dhGroup": {
"type": "string",
"description": "The DH Group."
},
"lifeTimeSeconds": {
"type": "integer",
"format": "int32",
"description": "The MM SA Lifetime in seconds."
},
"isSaInitiator": {
"type": "boolean",
"description": "Flag to check if SA Initiator or not."
},
"elapsedTimeInseconds": {
"type": "integer",
"format": "int32",
"description": "The time elapsed in seconds."
},
"quickModeSa": {
"properties": {
"localEndpoint": {
"type": "string",
"description": "The local endpoint."
},
"remoteEndpoint": {
"type": "string",
"description": "The remote endpoint."
},
"encryption": {
"type": "string",
"description": "The IPSec encryption algorithm (IKE phase 2)."
},
"integrity": {
"type": "string",
"description": "The IPSec integrity algorithm (IKE phase 2)."
},
"pfsGroupId": {
"type": "string",
"description": "The PFS Group."
},
"inboundSPI": {
"type": "integer",
"format": "int32",
"description": "The Inbound SPI SA."
},
"outboundSPI": {
"type": "integer",
"format": "int32",
"description": "The Outbound SPI SA."
},
"localTrafficSelectors": {
"type": "array",
"items": {
"type": "string"
},
"description": "The local traffic selectors."
},
"remoteTrafficSelectors": {
"type": "array",
"items": {
"type": "string"
},
"description": "The remote traffic selectors."
},
"lifetimeKilobytes": {
"type": "integer",
"format": "int64",
"minimum": 1024,
"maximum": 102400000,
"description": "The QM SA Lifetime KBytes."
},
"lifeTimeSeconds": {
"type": "integer",
"format": "int64",
"minimum": 300,
"maximum": 27000,
"description": "The QM SA Lifetime Seconds."
},
"isSaInitiator": {
"type": "boolean",
"description": "Flag to check if SA Initiator or not."
},
"elapsedTimeInseconds": {
"type": "integer",
"format": "int32",
"description": "The time elapsed in seconds."
}
},
"description": "A list of quick mode security associations."
}
},
"description": "A list of main mode security associations."
}
},
"description": "IKE security association parameters for virtual network gateway connection. Response for GetIkeSas API service call."
},
"LocalNetworkGatewayPropertiesFormat": {
"properties": {
"localNetworkAddressSpace": {
Expand Down