--- title: "Create a new IPSec Redundant tunnel" slug: "create-a-new-ipsec-redundant-tunnel" updated: 2026-02-18T12:52:40Z published: 2026-02-18T12:52:58Z canonical: "support.perimeter81.com/create-a-new-ipsec-redundant-tunnel" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.perimeter81.com/llms.txt > Use this file to discover all available pages before exploring further. # Create a new IPSec Redundant tunnel Post/v2.3/networks/{networkId}/tunnels/ipsec/redundant Required permissions: `["network:write]` SecurityHTTPType bearer Path parametersnetworkIdstringRequired Body parametersExpand Allobject tunnelNamestring Required The name of the tunnel Min length3Max length15Pattern^[a-zA-Z0-9]*$ regionIDstring Required tunnel1object Requiredpassphrasestring RequiredPattern^[a-zA-Z1-9._][a-zA-Z0-9._]{7,63}$ p81GWInternalIPstring (ipv4) Required remoteGWInternalIPstring (ipv4) Required remotePublicIPstring (ipv4) Required remoteASNinteger #deprecatedtemplate# #additional-property-template#RequiredOneOfintegerintegerMinimum1Maximum23455 integerintegerMinimum23457Maximum64495 integerintegerMinimum64512Maximum65534 integerintegerMinimum131072Maximum4294967294 remoteIDOneOfstring (ipv4)string stringstringPattern^[a-zA-Z0-9]{3,25}$ gatewayIDstring Required tunnel2object Requiredpassphrasestring RequiredPattern^[a-zA-Z1-9._][a-zA-Z0-9._]{7,63}$ p81GWInternalIPstring (ipv4) Required remoteGWInternalIPstring (ipv4) Required remotePublicIPstring (ipv4) Required remoteASNinteger #deprecatedtemplate# #additional-property-template#RequiredOneOfintegerintegerMinimum1Maximum23455 integerintegerMinimum23457Maximum64495 integerintegerMinimum64512Maximum65534 integerintegerMinimum131072Maximum4294967294 remoteIDOneOfstring (ipv4)string stringstringPattern^[a-zA-Z0-9]{3,25}$ gatewayIDstring Required sharedSettingsobject Requiredp81GatewaySubnets Array of string RequiredMin length1string remoteGatewaySubnets Array of string RequiredMin length1string peakBandwidthinteger Expected peak throughput of the tunnel communication in Mbps. Typical connection will be of 1000Mbps. Minimum10Maximum8000Default1000 p81ASNinteger #deprecatedtemplate# #additional-property-template#OneOfintegerintegerMinimum1Maximum23455 integerintegerMinimum23457Maximum64495 integerintegerMinimum64512Maximum65534 integerintegerMinimum131072Maximum4294967294 featuresobject symmetricInnerMeshobject enabledboolean Defaultfalse advancedSettingsobject (IPSecAdvancedSettings) RequiredkeyExchangestring RequiredValid values[ "ikev1", "ikev2" ] ikeLifeTimestring RequiredPattern^((1[0-9]|[2-9][0-9]|[1-9][0-9]{2,3}|[1-7][0-9]{4}|8[0-5][0-9]{3}|86[0-3][0-9]{2}|86400)s)|(([1-9]|[1-9][0-9]|[1-9][0-9][0-9]|1[0-3][0-9][0-9]|14[0-3][0-9]|1440)m)|(([1-9]|1[0-9]|2[0-4])h)$ lifetimestring RequiredPattern^((1[0-9]|[2-9][0-9]|[1-9][0-9]{2,3}|[1-7][0-9]{4}|8[0-5][0-9]{3}|86[0-3][0-9]{2}|86400)s)|(([1-9]|[1-9][0-9]|[1-9][0-9][0-9]|1[0-3][0-9][0-9]|14[0-3][0-9]|1440)m)|(([1-9]|1[0-9]|2[0-4])h)$ dpdDelaystring RequiredPattern^([5-9]|[1-5][0-9]|60)s$ dpdTimeoutstring RequiredPattern^([5-9]|[1-5][0-9]|60)s$ phase1object Requiredauth Array of string Min length1string Valid values[ "md5", "sha1", "sha384", "sha256", "sha512", "aesxcbc", "aescmac", "prfmd5", "prfsha1", "prfaesxcbc", "prfaescmac", "prfsha256", "prfsha384", "prfsha512" ] encryption Array of string Min length1string Valid values[ "3des", "blowfish128", "blowfish192", "blowfish256", "aes128", "aes192", "aes256", "aes128ctr", "aes192ctr", "aes256ctr", "camellia128", "camellia192", "camellia256", "camellia128ctr", "camellia192ctr", "camellia256ctr", "aes128ccm8", "aes192ccm8", "aes256ccm8", "aes128ccm16", "aes192ccm16", "aes256ccm16", "aes128gcm8", "aes192gcm8", "aes256gcm8", "aes128gcm16", "aes192gcm16", "aes256gcm16", "camellia128ccm16", "camellia192ccm16", "camellia256ccm16", "chacha20poly1305" ] dh Array of integer Required Diffie Helman encryption Min length0integer Valid values[ 2, 5, 14, 19, 20, 21, 31 ] phase2object Requiredauth Array of string Min length1string Valid values[ "md5", "sha1", "sha384", "sha256", "sha512", "aesxcbc", "aescmac", "prfmd5", "prfsha1", "prfaesxcbc", "prfaescmac", "prfsha256", "prfsha384", "prfsha512" ] encryption Array of string Min length1string Valid values[ "3des", "blowfish128", "blowfish192", "blowfish256", "aes128", "aes192", "aes256", "aes128ctr", "aes192ctr", "aes256ctr", "camellia128", "camellia192", "camellia256", "camellia128ctr", "camellia192ctr", "camellia256ctr", "aes128ccm8", "aes192ccm8", "aes256ccm8", "aes128ccm16", "aes192ccm16", "aes256ccm16", "aes128gcm8", "aes192gcm8", "aes256gcm8", "aes128gcm16", "aes192gcm16", "aes256gcm16", "camellia128ccm16", "camellia192ccm16", "camellia256ccm16", "chacha20poly1305" ] dh Array of integer Required Diffie Helman encryption Min length0integer Valid values[ 2, 5, 14, 19, 20, 21, 31 ] Responses202 Request accepted object statusUrlstring samplingTimeinteger 401 Unauthorized object idstring messagestring 402 Insufficient licenses object idstring messagestring 403 Forbidden object idstring messagestring 404 Resource not found object idstring messagestring 422 Unprocessable entity object idstring messagestring