Function

This API is used to create one or two VPN connections for a VPN gateway in batches.

Calling Method

For details, see Calling APIs.

URI

POST /v5/{project_id}/vpn-connections/batch-create

**Table 1** Parameter description
Parameter	Type	Mandatory	Description
project_id	String	Yes	Specifies a project ID. You can obtain the project ID by referring to Obtaining the Project ID.

Request

Request parameters

**Table 2** Request parameters
Parameter	Type	Mandatory	Description
vpn_connections	Array of CreateVpnConnectionRequestBodyContent object	Yes	Specifies the vpn_connection object array. One or two VPN connections can be created at a time.

**Table 3** CreateVpnConnectionRequestBodyContent
Parameter	Type	Mandatory	Description
name	String	No	Specifies the name of a VPN connection. If this parameter is not specified, a name in the format of vpn-** is automatically generated, for example, vpn-13be**. The value is a string of 1 to 64 characters, which can contain digits, letters, underscores (_), hyphens (-), and periods (.).
vgw_id	String	Yes	Specifies a VPN gateway ID. The value is a UUID containing 36 characters. When two VPN connections are to be created, the values of vgw_id must be the same. You can obtain the VPN gateway ID by querying the VPN gateway list.
vgw_ip	String	Yes	Function description: When network_type of the VPN gateway is set to public, set vgw_ip to the EIP IDs of the VPN gateway. When network_type of the VPN gateway is set to private, set vgw_ip to the private IP addresses of the VPN gateway. The value is a UUID containing 36 characters or an IPv4 address in dotted decimal notation (for example, 192.168.45.7). You can obtain the EIP IDs or private IP addresses of the VPN gateway by querying information about the VPN gateway.
style	String	No	Specifies the connection mode. Value range: policy: policy-based mode static: static routing mode bgp: BGP routing mode The default value is static.
cgw_id	String	Yes	Specifies a customer gateway ID. The value is a UUID containing 36 characters.
peer_subnets	Array of String	No	Specifies an IPv4 customer subnet. Constraints: This parameter is not required when attachment_type of the VPN gateway is set to er and style is set to policy or bgp. In other scenarios, this parameter is mandatory. Reserved VPC CIDR blocks such as 100.64.0.0/10, 100.64.0.0/12, and 214.0.0.0/8 cannot be used as customer subnets. The reserved CIDR blocks vary according to regions and are subject to those displayed on the console. If you need to use 100.64.0.0/10 or 100.64.0.0/12, submit a service ticket. A maximum of 50 customer subnets can be configured for each VPN connection.
tunnel_local_address	String	No	Specifies the tunnel interface address configured on the VPN gateway in route-based mode, for example, 169.254.76.1/30. Constraints: The first 16 bits must be 169.254, and the value cannot be 169.254.195.xxx. The mask length must be 30, and the address must be in the same CIDR block as the value of tunnel_peer_address. The address needs to be a host address in a CIDR block.
tunnel_peer_address	String	No	Specifies the tunnel interface address configured on the customer gateway device in route-based mode, for example, 169.254.76.2/30. Constraints: The first 16 bits must be 169.254, and the value cannot be 169.254.195.xxx. The mask length must be 30, and the address must be in the same CIDR block as the value of tunnel_local_address. The address needs to be a host address in a CIDR block.
enable_nqa	Boolean	No	Specifies whether NQA is enabled. The value can be true or false. The default value is false. Set this parameter only when style is set to static.
enable_hub	Boolean	No	Specifies whether to enable branch interconnection. The value can be true or false. The default value is false. Set this parameter only when style is set to BGP.
psk	String	No	Specifies a pre-shared key. The value is a string of 8 to 128 characters, which must contain at least three types of the following: uppercase letters, lowercase letters, digits, and special characters (~!@#$%^*()-_+={ },./:;).
policy_rules	Array of PolicyRule object	No	Specifies IPv4 policy rules. A maximum of five policy rules can be specified. This parameter is mandatory only when style is set to policy and ip_version of the VPN gateway is set to ipv4.
ikepolicy	IkePolicy object	No	Specifies the IKE policy object.
ipsecpolicy	IpsecPolicy object	No	Specifies the IPsec policy object.
ha_role	String	No	This parameter is optional when you create a connection for a VPN gateway in active-active mode. When you create a connection for a VPN gateway in active/standby mode, master indicates the active connection, and slave indicates the standby connection. The default value is master. Constraints: In active/standby mode, this field must be set to master for the connection established using the active EIP or active private IP address of the VPN gateway, and must be set to slave for the connection established using the standby EIP or standby private IP address of the VPN gateway.
tags	Array of VpnResourceTag object	No	Specifies a tag list. A maximum of 20 tags can be specified.

**Table 4** PolicyRule
Parameter	Type	Mandatory	Description
source	String	No	Specifies a source CIDR block. The IP protocol version (IPv4) of the CIDR block must be the same as that of the VPN gateway. The value of source in each policy rule must be unique.
destination	Array of String	No	Specifies a destination CIDR block. The IP protocol version (IPv4) of the CIDR block must be the same as that of the VPN gateway. An example IPv4 CIDR block is 192.168.52.0/24. A maximum of 50 destination CIDR blocks can be configured in each policy rule.

**Table 5** IkePolicy
Parameter	Type	Mandatory	Description
ike_version	String	No	Specifies the IKE version. Value range: v1 and v2 Default value: v2
phase1_negotiation_mode	String	No	Specifies the negotiation mode. Value range: main: ensures high security during negotiation. aggressive: ensures fast negotiation and a high negotiation success rate. The default value is main. This parameter is mandatory only when the IKE version is v1.
authentication_algorithm	String	No	Specifies an authentication algorithm. Value range: sha2-512, sha2-384, sha2-256, sha1, md5 Exercise caution when using sha1 and md5 as they have low security. Default value: sha2-256
encryption_algorithm	String	No	Specifies an encryption algorithm. Value range: aes-256-gcm-16, aes-128-gcm-16, aes-256, aes-192, aes-128, 3des Exercise caution when using 3des, aes-128, aes-192, and aes-256 as they have low security. Default value: aes-128
dh_group	String	No	Specifies the DH group used for key exchange in phase 1. The value can be group1, group2, group5, group14, group15, group16, group19, group20, or group21. Exercise caution when using group1, group2, group5, or group14 as they have low security. The default value is group15.
authentication_method	String	No	Specifies the authentication method used during IKE negotiation. Value range: pre-share: pre-shared key The default value is pre-share.
lifetime_seconds	Integer	No	Specifies the SA lifetime. When the lifetime expires, an IKE SA is automatically updated. The value ranges from 60 to 604800, in seconds. The default value is 86400.
local_id_type	String	No	Specifies the local ID type. Value range: ip fqdn (currently not supported) The default value is ip.
local_id	String	No	Specifies the local ID. Constraints: When local_id_type is set to ip, this parameter is optional. If it is set, the value must be an IPv4 address.
peer_id_type	String	No	Specifies the peer ID type. Value range: ip fqdn (currently not supported) The default value is ip.
peer_id	String	No	Specifies the peer ID. Constraints: When local_id_type is set to ip, this parameter is optional. If it is set, the value must be an IPv4 address.
dpd	Dpd object	No	Specifies the DPD object.

**Table 6** Dpd
Parameter	Type	Mandatory	Description
timeout	Integer	No	Specifies the interval for retransmitting DPD packets. The value ranges from 2 to 60, in seconds. The default value is 15.
interval	Integer	No	Specifies the DPD idle timeout period. The value ranges from 10 to 3600, in seconds. The default value is 30.
msg	String	No	Specifies the format of DPD packets. Value range: seq-hash-notify: indicates that the payload of DPD packets is in the sequence of hash-notify. seq-notify-hash: indicates that the payload of DPD packets is in the sequence of notify-hash. The default value is seq-hash-notify.

**Table 7** IpsecPolicy
Parameter	Type	Mandatory	Description
authentication_algorithm	String	No	Specifies an authentication algorithm. Value range: sha2-512, sha2-384, sha2-256, sha1, md5 Exercise caution when using sha1 and md5 as they have low security. Default value: sha2-256
encryption_algorithm	String	No	Specifies an encryption algorithm. Value range: aes-256-gcm-16, aes-128-gcm-16, aes-256, aes-192, aes-128, 3des Exercise caution when using 3des, aes-128, aes-192, and aes-256 as they have low security. Default value: aes-128
pfs	String	No	Specifies the DH key group used by PFS. The value can be group1, group2, group5, group14, group15, group16, group19, group20, group21, or disable. Exercise caution when using group1, group2, group5, or group14 as they have low security. The default value is group15.
transform_protocol	String	No	Specifies the transfer protocol. Value range: esp: encapsulating security payload protocol The default value is esp.
lifetime_seconds	Integer	No	Specifies the lifetime of a tunnel established over an IPsec connection. The value ranges from 30 to 604800, in seconds. The default value is 3600.
encapsulation_mode	String	No	Specifies the packet encapsulation mode. Value range: tunnel: encapsulates packets in tunnel mode. The default value is tunnel.

**Table 8** VpnResourceTag
Parameter	Type	Mandatory	Description
key	String	Yes	Specifies a tag key. The value is a string of 1 to 128 characters that can contain digits, letters, Spanish characters, Portuguese characters, spaces, and special characters (_ . : = + - @).
value	String	Yes	Specifies a tag value. The value is a string of 0 to 255 characters that can contain digits, letters, Spanish characters, Portuguese characters, spaces, and special characters (_ . : = + - @).

Example request

Create VPN connections in static routing mode in batches.

POST https://{Endpoint}/v5/{project_id}/vpn-connections/batch-create

{
    "vpn_connections": [
        {
            "vgw_ip": "0d0f4af1-42b9-41eb-97b9-b4d41a0bf9c4",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "psk": "abcd****"
        },
        {
            "vgw_ip": "1fb97767-d780-4d8b-83bb-6f878f662005",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "psk": "abcd****"
        }
    ]
}

Create VPN connections in policy-based mode in batches.

POST https://{Endpoint}/v5/{project_id}/vpn-connections/batch-create

{
    "vpn_connections": [
        {
            "vgw_ip": "0d0f4af1-42b9-41eb-97b9-b4d41a0bf9c4",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "style": "policy",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "psk": "abcd****",
            "policy_rules": [
                {
                    "source": "10.0.0.0/24",
                    "destination": [
                        "192.168.0.0/24"
                    ]
                }
            ]
        },
        {
            "vgw_ip": "1fb97767-d780-4d8b-83bb-6f878f662005",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "style": "policy",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "psk": "abcd****",
            "policy_rules": [
                {
                    "source": "10.0.0.0/24",
                    "destination": [
                        "192.168.0.0/24"
                    ]
                }
            ]
        }
    ]
}

Create VPN connections in BGP routing mode in batches.

POST https://{Endpoint}/v5/{project_id}/vpn-connections/batch-create

{
    "vpn_connections": [
        {
            "name": "vpn-1655",
            "vgw_ip": "0d0f4af1-42b9-41eb-97b9-b4d41a0bf9c4",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "style": "bgp",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "tunnel_local_address": "169.254.56.225/30",
            "tunnel_peer_address": "169.254.56.226/30",
            "psk": "abcd****",
            "ikepolicy": {
                "ike_version": "v2",
                "authentication_algorithm": "sha2-512",
                "encryption_algorithm": "aes-256",
                "dh_group": "group16",
                "lifetime_seconds": 172800,
                "local_id": "123***",
                "peer_id": "456***",
                "dpd": {
                    "timeout": 30,
                    "interval": 60,
                    "msg": "seq-notify-hash"
                }
            },
            "ipsecpolicy": {
                "authentication_algorithm": "sha2-512",
                "encryption_algorithm": "aes-256",
                "pfs": "group16",
                "transform_protocol": "esp",
                "lifetime_seconds": 7200,
                "encapsulation_mode": "tunnel"
            }
        },
        {
            "name": "vpn-1341",
            "vgw_ip": "1fb97767-d780-4d8b-83bb-6f878f662005",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "style": "bgp",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "tunnel_local_address": "169.254.56.225/30",
            "tunnel_peer_address": "169.254.56.226/30",
            "psk": "abcd****",
            "ikepolicy": {
                "ike_version": "v2",
                "authentication_algorithm": "sha2-512",
                "encryption_algorithm": "aes-256",
                "dh_group": "group16",
                "lifetime_seconds": 172800,
                "local_id": "123***",
                "peer_id": "456***",
                "dpd": {
                    "timeout": 30,
                    "interval": 60,
                    "msg": "seq-notify-hash"
                }
            },
            "ipsecpolicy": {
                "authentication_algorithm": "sha2-512",
                "encryption_algorithm": "aes-256",
                "pfs": "group16",
                "transform_protocol": "esp",
                "lifetime_seconds": 7200,
                "encapsulation_mode": "tunnel"
            }
        }
    ]
}

Response

Response parameters

Returned status code 201: successful operation

**Table 9** Parameters in the response body
Parameter	Type	Description
vpn_connections	Array of CreateResponseVpnConnection object	Specifies the vpn_connections object array.
request_id	String	Specifies a request ID.

**Table 10** CreateResponseVpnConnection
Parameter	Type	Description
id	String	Specifies a VPN connection ID. The value is a UUID containing 36 characters.
name	String	Specifies the name of a VPN connection. The value is a string of 1 to 64 characters, which can contain digits, letters, underscores (_), and hyphens (-).
vgw_id	String	Specifies a VPN gateway ID. The value is a UUID containing 36 characters.
vgw_ip	String	Specifies an EIP ID or private IP address of the VPN gateway. The value is a UUID containing 36 characters or an IPv4 address in dotted decimal notation (for example, 192.168.45.7).
style	String	Specifies the connection mode. Value range: POLICY: policy-based mode STATIC: static routing mode BGP: BGP routing mode
cgw_id	String	Specifies a customer gateway ID. The value is a UUID containing 36 characters.
peer_subnets	Array of String	Specifies an IPv4 customer subnet. This parameter is not returned when attachment_type of the VPN gateway is set to ER and style is set to BGP or POLICY.
tunnel_local_address	String	Specifies the tunnel interface address configured on the VPN gateway in route-based mode. This parameter is valid only when style is STATIC or BGP.
tunnel_peer_address	String	Specifies the tunnel interface address configured on the customer gateway device in route-based mode. This parameter is valid only when style is STATIC or BGP.
enable_nqa	Boolean	Specifies whether NQA is enabled. This parameter is returned only when style is STATIC. The value can be true or false.
policy_rules	Array of PolicyRule objects	Specifies IPv4 policy rules, which are returned only when style is set to POLICY and ip_version of the VPN gateway is set to ipv4.
ikepolicy	IkePolicy object	Specifies the IKE policy object.
ipsecpolicy	IpsecPolicy object	Specifies the IPsec policy object.
created_at	String	Specifies the time when the VPN connection is created. The UTC time format is yyyy-MM-ddTHH:mm:ss.SSSZ.
updated_at	String	Specifies the last update time. The UTC time format is yyyy-MM-ddTHH:mm:ss.SSSZ.
enterprise_project_id	String	Specifies an enterprise project ID. The value is a UUID containing 36 characters. The value must be the same as the enterprise project ID of the VPN gateway specified by vgw_id.
ha_role	String	For a VPN gateway in active/standby mode, master indicates the active connection, and slave indicates the standby connection. For a VPN gateway in active-active mode, the value of ha_role can only be master. The default value is master.
tags	Array of VpnResourceTag objects	Specifies a tag list.

**Table 11** PolicyRule
Parameter	Type	Description
source	String	Specifies a source CIDR block.
destination	Array of String	Specifies a destination CIDR block. An example IPv4 CIDR block is 192.168.52.0/24. A maximum of 50 destination CIDR blocks can be returned for each policy rule.

**Table 12** IkePolicy
Parameter	Type	Description
ike_version	String	Specifies the IKE version. The value can be v1 or v2.
phase1_negotiation_mode	String	Specifies the negotiation mode. This parameter is available only when the IKE version is v1. Value range: main: ensures high security during negotiation. aggressive: ensures fast negotiation and a high negotiation success rate.
authentication_algorithm	String	Specifies an authentication algorithm. The value can be sha2-512, sha2-384, sha2-256, sha1, or md5.
encryption_algorithm	String	Specifies an encryption algorithm. The value can be aes-256-gcm-16, aes-128-gcm-16, aes-256, aes-192, aes-128, or 3des.
dh_group	String	Specifies the DH group used for key exchange in phase 1. The value can be group1, group2, group5, group14, group15, group16, group19, group20, or group21.
authentication_method	String	Specifies the authentication method used during IKE negotiation. Value range: pre-share: pre-shared key
lifetime_seconds	Integer	Specifies the SA lifetime. When the lifetime expires, an IKE SA is automatically updated. The value ranges from 60 to 604800, in seconds.
local_id_type	String	Specifies the local ID type. Value range: ip fqdn (currently not supported)
local_id	String	Specifies the local ID. When local_id_type is set to ip, the local ID specified when the VPN connection is created or updated is returned. If no local ID is specified, the VPN gateway IP address corresponding to the VPN connection is returned.
peer_id_type	String	Specifies the peer ID type. Value range: ip fqdn (currently not supported)
peer_id	String	Specifies the peer ID. When peer_id_type is set to ip, the peer ID specified when the VPN connection is created or updated is returned. If no peer ID is specified, the IP address of the customer gateway is returned.
dpd	Dpd object	Specifies the DPD object.

**Table 13** Dpd
Parameter	Type	Description
timeout	Integer	Specifies the interval for retransmitting DPD packets. The value ranges from 2 to 60, in seconds.
interval	Integer	Specifies the DPD idle timeout period. The value ranges from 10 to 3600, in seconds.
msg	String	Specifies the format of DPD packets. Value range: seq-hash-notify: indicates that the payload of DPD packets is in the sequence of hash-notify. seq-notify-hash: indicates that the payload of DPD packets is in the sequence of notify-hash.

**Table 14** IpsecPolicy
Parameter	Type	Description
authentication_algorithm	String	Specifies an authentication algorithm. The value can be sha2-512, sha2-384, sha2-256, sha1, or md5.
encryption_algorithm	String	Specifies an encryption algorithm. The value can be aes-256-gcm-16, aes-128-gcm-16, aes-256, aes-192, aes-128, or 3des.
pfs	String	Specifies the DH key group used by PFS. The value can be group1, group2, group5, group14, group15, group16, group19, group20, group21, or disable.
transform_protocol	String	Specifies the transfer protocol. Value range: esp: encapsulating security payload protocol
lifetime_seconds	Integer	Specifies the lifetime of a tunnel established over an IPsec connection. The value ranges from 30 to 604800, in seconds.
encapsulation_mode	String	Specifies the packet encapsulation mode. Value range: tunnel: encapsulates packets in tunnel mode.

**Table 15** VpnResourceTag
Parameter	Type	Description
key	String	Specifies a tag key. The value is a string of 1 to 128 characters that can contain digits, letters, Spanish characters, Portuguese characters, spaces, and special characters (_ . : = + - @).
value	String	Specifies a tag value. The value is a string of 0 to 255 characters that can contain digits, letters, Spanish characters, Portuguese characters, spaces, and special characters (_ . : = + - @).

Example response

Response to the request for creating VPN connections in static routing mode in batches

{
    "vpn_connections": [
        {
            "id": "cf91c03c-9679-495f-a201-3622a1aec817",
            "name": "vpn-b8fa",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "vgw_ip": "0d0f4af1-42b9-41eb-97b9-b4d41a0bf9c4",
            "style": "STATIC",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "tunnel_local_address": "169.254.12.37/30",
            "tunnel_peer_address": "169.254.12.38/30",
            "enable_nqa": false,
            "policy_rules": [],
            "ikepolicy": {
                "ike_version": "v2",
                "authentication_algorithm": "sha2-256",
                "encryption_algorithm": "aes-128",
                "dh_group": "group15",
                "authentication_method": "pre-share",
                "lifetime_seconds": 86400,
                "local_id_type": "ip",
                "local_id": "10.***.***.173",
                "peer_id_type": "ip",
                "peer_id": "2.***.***.2",
                "dpd": {
                    "interval": 30,
                    "timeout": 15,
                    "msg": "seq-hash-notify"
                }
            },
            "ipsecpolicy": {
                "authentication_algorithm": "sha2-256",
                "encryption_algorithm": "aes-128",
                "pfs": "group15",
                "transform_protocol": "esp",
                "lifetime_seconds": 3600,
                "encapsulation_mode": "tunnel"
            },
            "created_at": "2025-02-21T03:53:23.557Z",
            "updated_at": "2025-02-21T03:53:23.557Z",
            "enterprise_project_id": "0",
            "ha_role": "master",
            "tags": [],
        },
        {
            "id": "64c09578-a23c-4d9d-9c64-56b2f9a74695",
            "name": "vpn-ec21",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "vgw_ip": "1fb97767-d780-4d8b-83bb-6f878f662005",
            "style": "STATIC",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "tunnel_local_address": "169.254.60.229/30",
            "tunnel_peer_address": "169.254.60.230/30",
            "enable_nqa": false,
            "policy_rules": [],
            "ikepolicy": {
                "ike_version": "v2",
                "authentication_algorithm": "sha2-256",
                "encryption_algorithm": "aes-128",
                "dh_group": "group15",
                "authentication_method": "pre-share",
                "lifetime_seconds": 86400,
                "local_id_type": "ip",
                "local_id": "215.***.***.55",
                "peer_id_type": "ip",
                "peer_id": "2.***.***.2",
                "dpd": {
                    "interval": 30,
                    "timeout": 15,
                    "msg": "seq-hash-notify"
                }
            },
            "ipsecpolicy": {
                "authentication_algorithm": "sha2-256",
                "encryption_algorithm": "aes-128",
                "pfs": "group15",
                "transform_protocol": "esp",
                "lifetime_seconds": 3600,
                "encapsulation_mode": "tunnel"
            },
            "created_at": "2025-02-21T03:53:23.226Z",
            "updated_at": "2025-02-21T03:53:23.226Z",
            "enterprise_project_id": "0",
            "ha_role": "master",
            "tags": [],
        }
    ],
    "request_id": "3c53db019753c69323303c198af58a85"
}

Response to the request for creating VPN connections in policy-based mode in batches

{
    "vpn_connections": [
        {
            "id": "db06a7cb-e3b5-4c8c-b682-40ed54e8eb54",
            "name": "vpn-ed37",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "vgw_ip": "1fb97767-d780-4d8b-83bb-6f878f662005",
            "style": "POLICY",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "tunnel_local_address": "169.254.44.197/30",
            "tunnel_peer_address": "169.254.44.198/30",
            "policy_rules": [
                {
                    "rule_index": 1,
                    "source": "192.168.37.0/24",
                    "destination": [
                        "192.168.2.0/24"
                    ]
                }
            ],
            "ikepolicy": {
                "ike_version": "v2",
                "authentication_algorithm": "sha2-256",
                "encryption_algorithm": "aes-128",
                "dh_group": "group15",
                "authentication_method": "pre-share",
                "lifetime_seconds": 86400,
                "local_id_type": "ip",
                "local_id": "215.***.***.55",
                "peer_id_type": "ip",
                "peer_id": "2.***.***.2",
                "dpd": {
                    "interval": 30,
                    "timeout": 15,
                    "msg": "seq-hash-notify"
                }
            },
            "ipsecpolicy": {
                "authentication_algorithm": "sha2-256",
                "encryption_algorithm": "aes-128",
                "pfs": "group15",
                "transform_protocol": "esp",
                "lifetime_seconds": 3600,
                "encapsulation_mode": "tunnel"
            },
            "created_at": "2025-02-21T03:59:50.341Z",
            "updated_at": "2025-02-21T03:59:50.341Z",
            "enterprise_project_id": "0",
            "ha_role": "master",
            "tags": [],
        },
        {
            "id": "9f5220fd-f674-420c-9df7-6b6420a3ae99",
            "name": "vpn-d0c2",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "vgw_ip": "0d0f4af1-42b9-41eb-97b9-b4d41a0bf9c4",
            "style": "POLICY",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "tunnel_local_address": "169.254.192.61/30",
            "tunnel_peer_address": "169.254.192.62/30",
            "policy_rules": [
                {
                    "rule_index": 1,
                    "source": "192.168.37.0/24",
                    "destination": [
                        "192.168.2.0/24"
                    ]
                }
            ],
            "ikepolicy": {
                "ike_version": "v2",
                "authentication_algorithm": "sha2-256",
                "encryption_algorithm": "aes-128",
                "dh_group": "group15",
                "authentication_method": "pre-share",
                "lifetime_seconds": 86400,
                "local_id_type": "ip",
                "local_id": "10.***.***.173",
                "peer_id_type": "ip",
                "peer_id": "2.***.***.2",
                "dpd": {
                    "interval": 30,
                    "timeout": 15,
                    "msg": "seq-hash-notify"
                }
            },
            "ipsecpolicy": {
                "authentication_algorithm": "sha2-256",
                "encryption_algorithm": "aes-128",
                "pfs": "group15",
                "transform_protocol": "esp",
                "lifetime_seconds": 3600,
                "encapsulation_mode": "tunnel"
            },
            "created_at": "2025-02-21T03:59:50.651Z",
            "updated_at": "2025-02-21T03:59:50.651Z",
            "enterprise_project_id": "0",
            "ha_role": "master",
            "tags": [],
        }
    ],
    "request_id": "81237dad5e1338b1818cd6582781b610"
}

Response to the request for creating VPN connections in BGP routing mode in batches

{
    "vpn_connections": [
        {
            "id": "5ddf5d02-c746-4075-be4b-95e9213e1c3c",
            "name": "vpn-1655",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "vgw_ip": "0d0f4af1-42b9-41eb-97b9-b4d41a0bf9c4",
            "style": "BGP",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "tunnel_local_address": "169.254.56.225/30",
            "tunnel_peer_address": "169.254.56.226/30",
            "enable_hub": false,
            "policy_rules": [],
            "ikepolicy": {
                "ike_version": "v2",
                "authentication_algorithm": "sha2-512",
                "encryption_algorithm": "aes-256",
                "dh_group": "group16",
                "authentication_method": "pre-share",
                "lifetime_seconds": 172800,
                "local_id": "123***",
                "peer_id": "456***",
                "dpd": {
                    "interval": 60,
                    "timeout": 30,
                    "msg": "seq-notify-hash"
                }
            },
            "ipsecpolicy": {
                "authentication_algorithm": "sha2-512",
                "encryption_algorithm": "aes-256",
                "pfs": "group16",
                "transform_protocol": "esp",
                "lifetime_seconds": 7200,
                "encapsulation_mode": "tunnel"
            },
            "created_at": "2025-02-21T06:50:25.238Z",
            "updated_at": "2025-02-21T06:50:25.238Z",
            "enterprise_project_id": "0",
            "ha_role": "master",
            "tags": [],
        },
        {
            "id": "bb3632dd-f517-4e94-96b7-977c70d28966",
            "name": "vpn-1341",
            "vgw_id": "8030f6d6-32a8-4d20-a7f8-50a7a826e2f8",
            "vgw_ip": "1fb97767-d780-4d8b-83bb-6f878f662005",
            "style": "BGP",
            "cgw_id": "12f3577a-cbd8-4602-b68c-ecbf792fcec5",
            "peer_subnets": [
                "192.168.2.0/24"
            ],
            "tunnel_local_address": "169.254.56.225/30",
            "tunnel_peer_address": "169.254.56.226/30",
            "enable_hub": false,
            "policy_rules": [],
            "ikepolicy": {
                "ike_version": "v2",
                "authentication_algorithm": "sha2-512",
                "encryption_algorithm": "aes-256",
                "dh_group": "group16",
                "authentication_method": "pre-share",
                "lifetime_seconds": 172800,
                "local_id": "123***",
                "peer_id": "456***",
                "dpd": {
                    "interval": 60,
                    "timeout": 30,
                    "msg": "seq-notify-hash"
                }
            },
            "ipsecpolicy": {
                "authentication_algorithm": "sha2-512",
                "encryption_algorithm": "aes-256",
                "pfs": "group16",
                "transform_protocol": "esp",
                "lifetime_seconds": 7200,
                "encapsulation_mode": "tunnel"
            },
            "created_at": "2025-02-21T06:50:25.5Z",
            "updated_at": "2025-02-21T06:50:25.5Z",
            "enterprise_project_id": "0",
            "ha_role": "master",
            "tags": [],
        }
    ],
    "request_id": "938ea2bba48836a429c741bd6f7627a4"
}

Status Codes

For details, see Status Codes.

Creating VPN Connections in Batches

Function

Calling Method

URI

Request

Response

Status Codes