vpn_ipsec_phase2_create
Add a new Phase 2 selector for an IPsec VPN tunnel, configuring encryption proposals, PFS, and subnet selectors.
Instructions
Create a new IPsec VPN Phase 2 selector.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Phase 2 selector name. | |
| phase1_name | Yes | Name of the parent Phase 1 interface. | |
| proposal | No | Phase 2 encryption/hash proposal (e.g. 'aes256-sha256 aes128-sha256'). | aes256-sha256 |
| pfs | No | Perfect Forward Secrecy: enable or disable. | enable |
| dhgrp | No | DH group(s) for PFS. | 14 |
| src_subnet | No | Local (source) subnet (e.g. '10.0.0.0/24'). Leave empty for 0.0.0.0/0. | |
| dst_subnet | No | Remote (destination) subnet. Leave empty for 0.0.0.0/0. | |
| comments | No | Comment. | |
| vdom | No | Target VDOM name. Defaults to the server default VDOM. Use '*' for all VDOMs (super-admin required). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||