Red Hat Training

A Red Hat training course is available for Red Hat OpenStack Platform

8.75. neutron ipsec-site-connection-create

usage: neutron ipsec-site-connection-create [-h]
                                            [-f {json,shell,table,value,yaml}]
                                            [-c COLUMN]
                                            [--max-width <integer>]
                                            [--noindent] [--prefix PREFIX]
                                            [--request-format {json}]
                                            [--tenant-id TENANT_ID]
                                            [--admin-state-down]
                                            --vpnservice-id VPNSERVICE
                                            --ikepolicy-id IKEPOLICY
                                            --ipsecpolicy-id IPSECPOLICY
                                            [--name NAME]
                                            [--description DESCRIPTION]
                                            [--dpd action=ACTION,interval=INTERVAL,timeout=TIMEOUT]
                                            [--local-ep-group LOCAL_EP_GROUP]
                                            [--peer-ep-group PEER_EP_GROUP]
                                            [--peer-cidr PEER_CIDRS] --peer-id
                                            PEER_ID --peer-address
                                            PEER_ADDRESS --psk PSK [--mtu MTU]
                                            [--initiator {bi-directional,response-only}]
Create an IPsec site connection.

Optional arguments

-h, --help


        show this help message and exit

--request-format {json}


      DEPRECATED! Only JSON request format is supported.

--tenant-id TENANT_ID


      The owner tenant ID.

--admin-state-down


        Set admin state up to false.

--vpnservice-id VPNSERVICE


      VPN service instance ID associated with this
      connection.

--ikepolicy-id IKEPOLICY


      IKE policy ID associated with this connection.

--ipsecpolicy-id IPSECPOLICY


      IPsec policy ID associated with this connection.

--name NAME


        Set friendly name for the connection.

--description DESCRIPTION


      Set a description for the connection.

--dpd


        action=ACTION,interval=INTERVAL,timeout=TIMEOUT
      Ipsec connection. Dead Peer Detection attributes.
      'action'-hold,clear,disabled,restart,restart-by-peer.
      'interval' and 'timeout' are non negative integers.
      'interval' should be less than 'timeout' value.
      'action', default:hold 'interval', default:30,
      'timeout', default:120.

--local-ep-group LOCAL_EP_GROUP


      Local endpoint group ID/name with subnet(s) for IPSec
      connection.

--peer-ep-group PEER_EP_GROUP


      Peer endpoint group ID/name with CIDR(s) for IPSec
      connection.

--peer-cidr PEER_CIDRS


      [DEPRECATED in Mitaka] Remote subnet(s) in CIDR
      format. Cannot be specified when using endpoint
      groups. Only applicable, if subnet provided for VPN
      service.

--peer-id PEER_ID


        Peer router identity for authentication. Can be
      IPv4/IPv6 address, e-mail address, key id, or FQDN.

--peer-address PEER_ADDRESS


      Peer gateway public IPv4/IPv6 address or FQDN.

--psk PSK


        Pre-shared key string.

--mtu MTU MTU


        size for the connection, default:1500.

--initiator {bi-directional,response-only}


      Initiator state in lowercase, default:bi-directional