cisco.meraki.meraki_mx_third_party_vpn_peers module -- Manage third party (IPSec) VPN peers for MX devices

Note

This module is part of the cisco.meraki collection (version 2.18.2).

To install it, use: ansible-galaxy collection install cisco.meraki.

To use it in a playbook, specify: cisco.meraki.meraki_mx_third_party_vpn_peers.

DEPRECATED

Removed in:

version 3.0.0

Why:

Updated modules released with increased functionality

Alternative:

cisco.meraki.organizations_appliance_vpn_third_party_vpnpeers

Synopsis

• Create, edit, query, or delete third party VPN peers in a Meraki environment.

Parameters

Parameter	Comments
auth_key string / required	Authentication key provided by the dashboard. Required if environmental variable MERAKI_KEY is not set.
host string	Hostname for Meraki dashboard. Can be used to access regional Meraki environments, such as China. Default: :ansible-option-default:`"api.meraki.com"`
internal_error_retry_time integer	Number of seconds to retry if server returns an internal server error. Default: :ansible-option-default:`60`
org_id string	ID of organization.
org_name aliases: organization string	Name of organization.
output_format string	Instructs module whether response keys should be snake case (ex. net_id) or camel case (ex. netId). Choices: :ansible-option-choices-entry-default:`"snakecase"` ← (default) :ansible-option-choices-entry:`"camelcase"`
output_level string	Set amount of debug output during module execution. Choices: :ansible-option-choices-entry:`"debug"` :ansible-option-choices-entry-default:`"normal"` ← (default)
peers list / elements=dictionary	The list of VPN peers.
ike_version string	The IKE version to be used for the IPsec VPN peer configuration. Choices: :ansible-option-choices-entry-default:`"1"` ← (default) :ansible-option-choices-entry:`"2"`
ipsec_policies dictionary	Custom IPSec policies for the VPN peer. If not included and a preset has not been chosen, the default preset for IPSec policies will be used.
child_auth_algo list / elements=string	This is the authentication algorithms to be used in Phase 2. Choices: :ansible-option-choices-entry:`"sha256"` :ansible-option-choices-entry:`"sha1"` :ansible-option-choices-entry:`"md5"`
child_cipher_algo list / elements=string	This is the cipher algorithms to be used in Phase 2. Choices: :ansible-option-choices-entry:`"aes256"` :ansible-option-choices-entry:`"aes192"` :ansible-option-choices-entry:`"aes128"` :ansible-option-choices-entry:`"tripledes"` :ansible-option-choices-entry:`"des"` :ansible-option-choices-entry:`"null"`
child_lifetime integer	The lifetime of the Phase 2 SA in seconds.
child_pfs_group list / elements=string	This is the Diffie-Hellman group to be used for Perfect Forward Secrecy in Phase 2. Choices: :ansible-option-choices-entry:`"disabled"` :ansible-option-choices-entry:`"group14"` :ansible-option-choices-entry:`"group5"` :ansible-option-choices-entry:`"group2"` :ansible-option-choices-entry:`"group1"`
ike_auth_algo list / elements=string	This is the authentication algorithm to be used in Phase 1. Choices: :ansible-option-choices-entry:`"sha256"` :ansible-option-choices-entry:`"sha1"` :ansible-option-choices-entry:`"md5"`
ike_cipher_algo list / elements=string	This is the cipher algorithm to be used in Phase 1. Choices: :ansible-option-choices-entry:`"aes256"` :ansible-option-choices-entry:`"aes192"` :ansible-option-choices-entry:`"aes128"` :ansible-option-choices-entry:`"tripledes"` :ansible-option-choices-entry:`"des"`
ike_diffie_hellman_group list / elements=string	This is the Diffie-Hellman group to be used in Phase 1. Choices: :ansible-option-choices-entry:`"group14"` :ansible-option-choices-entry:`"group5"` :ansible-option-choices-entry:`"group2"` :ansible-option-choices-entry:`"group1"`
ike_lifetime integer	The lifetime of the Phase 1 SA in seconds.
ike_prf_algo list / elements=string	This is the pseudo-random function to be used in IKE_SA. Choices: :ansible-option-choices-entry:`"prfsha256"` :ansible-option-choices-entry:`"prfsha1"` :ansible-option-choices-entry:`"prfmd5"` :ansible-option-choices-entry:`"default"`
ipsec_policies_preset string	Specifies IPsec preset values. If this is provided, the 'ipsecPolicies' parameter is ignored. Choices: :ansible-option-choices-entry:`"default"` :ansible-option-choices-entry:`"aws"` :ansible-option-choices-entry:`"azure"`
name string	The name of the VPN peer. Required when state is present.
network_tags list / elements=string	A list of network tags that will connect with this peer. If not included, the default is ['all'].
private_subnets list / elements=string	The list of the private subnets of the VPN peer. Required when state is present.
public_ip string	The public IP of the VPN peer. Required when state is present.
remote_id string	The remote ID is used to identify the connecting VPN peer. This can either be a valid IPv4 Address, FQDN or User FQDN.
secret string	The shared secret with the VPN peer. Required when state is present.
rate_limit_retry_time integer	Number of seconds to retry if rate limiter is triggered. Default: :ansible-option-default:`165`
state string	Specifies whether object should be queried, created/modified, or removed. Choices: :ansible-option-choices-entry:`"absent"` :ansible-option-choices-entry:`"present"` :ansible-option-choices-entry-default:`"query"` ← (default)
timeout integer	Time to timeout for HTTP requests. Default: :ansible-option-default:`30`
use_https boolean	If no, it will use HTTP. Otherwise it will use HTTPS. Only useful for internal Meraki developers. Choices: :ansible-option-choices-entry:`false` :ansible-option-choices-entry-default:`true` ← (default)
use_proxy boolean	If no, it will not use a proxy, even if one is defined in an environment variable on the target hosts. Choices: :ansible-option-choices-entry-default:`false` ← (default) :ansible-option-choices-entry:`true`
validate_certs boolean	Whether to validate HTTP certificates. Choices: :ansible-option-choices-entry:`false` :ansible-option-choices-entry-default:`true` ← (default)

Notes

Note

• More information about the Meraki API can be found at https://dashboard.meraki.com/api_docs.

• Some of the options are likely only used for developers within Meraki.

• As of Ansible 2.9, Meraki modules output keys as snake case. To use camel case, set the ANSIBLE_MERAKI_FORMAT environment variable to camelcase.

• Ansible's Meraki modules will stop supporting camel case output in Ansible 2.13. Please update your playbooks.

• Check Mode downloads the current configuration from the dashboard, then compares changes against this download. Check Mode will report changed if there are differences in the configurations, but does not submit changes to the API for validation of change.

Examples

- name: Query all VPN peers
  meraki_mx_third_party_vpn_peers:
    auth_key: abc123
    state: query
    org_name: orgName

- name: Create VPN peer with an IPsec policy
  meraki_mx_third_party_vpn_peers:
    auth_key: abc123
    state: present
    org_name: orgName
    peers:
      - name: "Test peer"
        public_ip: "198.51.100.1"
        secret: "s3cret"
        private_subnets:
          - "192.0.2.0/24"
        ike_version: "2"
        network_tags:
          - none
        remote_id: "192.0.2.0"
        ipsec_policies:
          child_lifetime: 600
          ike_lifetime: 600
          child_auth_algo:
            - "md5"
          child_cipher_algo:
            - "tripledes"
            - "aes192"
          child_pfs_group:
            - "disabled"
          ike_auth_algo:
            - "sha256"
          ike_cipher_algo:
            - "tripledes"
          ike_diffie_hellman_group:
            - "group2"
          ike_prf_algo:
            - "prfmd5"

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key	Description
response complex	Information about the organization which was created or modified Returned: success
appliance_ip string	IP address of Meraki appliance in the VLAN Returned: success Sample: :ansible-rv-sample-value:`"192.0.1.1"`
dnsnamservers string	IP address or Meraki defined DNS servers which VLAN should use by default Returned: success Sample: :ansible-rv-sample-value:`"upstream\_dns"`
peers complex	The list of VPN peers. Returned: success
ike_version string	The IKE version to be used for the IPsec VPN peer configuration. Returned: success Sample: :ansible-rv-sample-value:`"1"`
ipsec_policies complex	Custom IPSec policies for the VPN peer. Returned: success
child_auth_algo list / elements=string	This is the authentication algorithms to be used in Phase 2. Returned: success Sample: :ansible-rv-sample-value:`["sha1"]`
child_cipher_algo list / elements=string	This is the cipher algorithms to be used in Phase 2. Returned: success Sample: :ansible-rv-sample-value:`["aes192"]`
child_lifetime string	The lifetime of the Phase 2 SA in seconds. Returned: success Sample: :ansible-rv-sample-value:`"60"`
child_pfs_group list / elements=string	This is the Diffie-Hellman group to be used for Perfect Forward Secrecy in Phase 2. Returned: success Sample: :ansible-rv-sample-value:`["group14"]`
ike_auth_algo list / elements=string	This is the authentication algorithm to be used in Phase 1. Returned: success Sample: :ansible-rv-sample-value:`["sha1"]`
ike_cipher_algo list / elements=string	This is the cipher algorithm to be used in Phase 1. Returned: success Sample: :ansible-rv-sample-value:`["aes128"]`
ike_diffie_hellman_group list / elements=string	This is the Diffie-Hellman group to be used in Phase 1. Returned: success Sample: :ansible-rv-sample-value:`["group14"]`
ike_lifetime string	The lifetime of the Phase 1 SA in seconds. Returned: success Sample: :ansible-rv-sample-value:`"60"`
ike_prf_algo list / elements=string	This is the pseudo-random function to be used in IKE_SA. Returned: success Sample: :ansible-rv-sample-value:`["prfmd5"]`
ipsec_policies_preset string	Preconfigured IPsec settings. Returned: success Sample: :ansible-rv-sample-value:`"aws"`
name string	The name of the VPN peer. Returned: success Sample: :ansible-rv-sample-value:`"MyVPNPeer"`
network_tags list / elements=string	A list of network tags that will connect with this peer. Returned: success Sample: :ansible-rv-sample-value:`["all"]`
private_subnets list / elements=string	The list of the private subnets of the VPN peer. Returned: success Sample: :ansible-rv-sample-value:`["192.0.2.0/24"]`
public_ip string	The public IP of the VPN peer. Returned: success Sample: :ansible-rv-sample-value:`"198.51.100.1"`
remote_id string	The remote ID is used to identify the connecting VPN peer. Returned: success Sample: :ansible-rv-sample-value:`"s3cret"`

Status

• This module will be removed in version 3.0.0. [deprecated]

• For more information see DEPRECATED.

Authors

• Kevin Breit (@kbreit)

Collection links

Issue Tracker Repository (Sources)