Contents x
    Create static IPSec tunnel
    • 23 Jul 2025
    • 1 Minute to read
    • Contributors
      Contents

      Create static IPSec tunnel

      • Updated on 23 Jul 2025
      • 1 Minute to read
      • Contributors
        Article summary

        Post
        /v2.2/networks/enhanced/{networkId}/tunnels/ipsec/static

        Create a new static IPSec tunnel in an enhanced network

        Security
        HTTP
        Type bearer
        Path parameters
        networkId
        stringRequired
        Body parameters
        Expand All
        object
        regionID
        string Required

        Target region ID

        tunnelName
        string Required

        Name of the static tunnel

        p81GatewaySubnets
        Array of string Required

        Harmony Sase gateway subnets

        Min items1
        string
        remoteGatewaySubnets
        Array of string Required

        Remote gateway subnets

        Min items1
        string
        keyExchange
        string Required

        IKE version for key exchange

        Valid values[ "ikev1", "ikev2" ]
        Default"ikev2"
        ikeLifeTime
        string Required
        Pattern^((1[0-9]|[2-9][0-9]|[1-9][0-9]{2,3}|[1-7][0-9]{4}|8[0-5][0-9]{3}|86[0-3][0-9]{2}|86400)s)|(([1-9]|[1-9][0-9]|[1-9][0-9][0-9]|1[0-3][0-9][0-9]|14[0-3][0-9]|1440)m)|(([1-9]|1[0-9]|2[0-4])h)$
        lifetime
        string Required
        Pattern^((1[0-9]|[2-9][0-9]|[1-9][0-9]{2,3}|[1-7][0-9]{4}|8[0-5][0-9]{3}|86[0-3][0-9]{2}|86400)s)|(([1-9]|[1-9][0-9]|[1-9][0-9][0-9]|1[0-3][0-9][0-9]|14[0-3][0-9]|1440)m)|(([1-9]|1[0-9]|2[0-4])h)$
        dpdDelay
        string Required
        Pattern^([5-9]|[1-5][0-9]|60)s$
        dpdTimeout
        string Required
        Pattern^([5-9]|[1-5][0-9]|60)s$
        phase1
        object Required
        auth
        Array of string
        Min length1
        string
        Valid values[ "md5", "sha1", "sha384", "sha256", "sha512" ]
        encryption
        Array of string
        Min length1
        string
        Valid values[ "3des", "blowfish128", "blowfish192", "blowfish256", "aes128", "aes192", "aes256" ]
        dh
        Array of integer Required

        Diffie Helman encryption

        Min length1
        integer
        Valid values[ 2, 5, 14, 19, 20, 21 ]
        phase2
        object Required
        auth
        Array of string
        Min length1
        string
        Valid values[ "md5", "sha1", "sha384", "sha256", "sha512" ]
        encryption
        Array of string
        Min length1
        string
        Valid values[ "3des", "blowfish128", "blowfish192", "blowfish256", "aes128", "aes192", "aes256" ]
        dh
        Array of integer Required

        Diffie Helman encryption

        Min length1
        integer
        Valid values[ 2, 5, 14, 19, 20, 21 ]
        passphrase
        string Required

        Pre-shared key for tunnel authentication (8-64 characters)

        Min length8
        Max length64
        remotePublicIP
        string (ipv4) Required

        Remote gateway public IP address

        remoteID
        string Required

        Remote gateway ID

        description
        string

        Optional tunnel description

        features
        cloudSecurity
        object
        enabled
        boolean Required
        Defaultfalse
        symmetricInnerMesh
        object
        enabled
        boolean Required
        Defaultfalse
        DNSServices
        object
        redirectToResolver
        object Required
        enabled
        boolean Required
        Defaulttrue
        routingType
        string Required

        Routing mode for the tunnel

        Valid values[ "route", "policy" ]
        Default"route"
        Responses
        202

        Request accepted

        object
        statusUrl
        string
        samplingTime
        integer
        400

        Bad Request

        object
        id
        string
        message
        string
        401

        Unauthorized

        object
        id
        string
        message
        string
        403

        Forbidden

        object
        id
        string
        message
        string
        404

        Resource not found

        object
        id
        string
        message
        string
        422

        Unprocessable entity

        object
        id
        string
        message
        string
        Was this article helpful?
        What's Next