Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Changes related to setting VpnClient AAD authentication options to Virtual network gateway resource & Advertising virtual Wan 2 released APIs. #5935

Merged
Merged
Original file line number Diff line number Diff line change
@@ -0,0 +1,50 @@
{
"parameters": {
"gatewayName": "p2sVpnGateway1",
"resourceGroupName": "rg1",
"api-version": "2019-04-01",
"subscriptionId": "subid"
},
"responses": {
"200": {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please also add entry for 202 response code

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done.

"body": {
"name": "p2sVpnGateway1",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/P2SvpnGateways/p2sVpnGateway1",
"etag": "w/\\00000000-0000-0000-0000-000000000000\\",
"location": "West US",
"type": "Microsoft.Network/p2sVpnGateways",
"properties": {
"provisioningState": "Succeeded",
"virtualHub": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualHubs/virtualHub1"
},
"p2SVpnServerConfiguration": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualWans/virtualWan1/p2sVpnServerConfigurations/p2sVpnServerConfiguration1"
},
"vpnClientAddressPool": {
"addressPrefixes": [
"101.3.0.0/16"
]
},
"customRoutes": {
"addressPrefixes": [
"101.168.0.6/32"
]
},
"vpnGatewayScaleUnit": 1,
"vpnClientConnectionHealth": {
"vpnClientConnectionsCount": 2,
"allocatedIpAddresses": [
"1.1.1.1",
"2.2.2.2"
],
"totalIngressBytesTransferred":2000,
"totalEgressBytesTransferred":3000
}
}
}
},
"202": {
}
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,16 @@
"vpnType": "RouteBased",
"enableBgp": false,
"activeActive": false,
"vpnClientConfiguration": {
"vpnClientProtocols": [
"OpenVPN"
],
"vpnClientRootCertificates": [],
"vpnClientRevokedCertificates": [],
"aadTenant": "https://login.microsoftonline.com/99163270-c9ab-4279-bb12-5353ed9bf6e1",
"aadAudience": "fd11706c-e78c-4828-8be7-ac7dcefd4b17",
"aadIssuer": "https://sts.windows.net/99163270-c9ab-4279-bb12-5353ed9bf6e1/"
},
"bgpSettings": {
"asn": 65514,
"bgpPeeringAddress": "10.0.1.30",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -96,9 +96,14 @@
"enableBgp": false,
"activeActive": false,
"vpnClientConfiguration": {
"vpnClientProtocols": [],
"vpnClientRootCertificates": [],
"vpnClientRevokedCertificates": []
"vpnClientProtocols": [
"OpenVPN"
],
"vpnClientRootCertificates": [],
"vpnClientRevokedCertificates": [],
"aadTenant": "https://login.microsoftonline.com/99163270-c9ab-4279-bb12-5353ed9bf6e1",
"aadAudience": "fd11706c-e78c-4828-8be7-ac7dcefd4b17",
"aadIssuer": "https://sts.windows.net/99163270-c9ab-4279-bb12-5353ed9bf6e1/"
},
"bgpSettings": {
"asn": 65515,
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -81,11 +81,13 @@
"activeActive": false,
"vpnClientConfiguration": {
"vpnClientProtocols": [
"SSTP",
"IkeV2"
"OpenVPN"
],
"vpnClientRootCertificates": [],
"vpnClientRevokedCertificates": []
"vpnClientRevokedCertificates": [],
"aadTenant": "",
"aadAudience": "",
"aadIssuer": ""
},
"bgpSettings": {
"asn": 65515,
Expand Down Expand Up @@ -138,11 +140,13 @@
"activeActive": false,
"vpnClientConfiguration": {
"vpnClientProtocols": [
"SSTP",
"IkeV2"
"OpenVPN"
],
"vpnClientRootCertificates": [],
"vpnClientRevokedCertificates": []
"vpnClientRevokedCertificates": [],
"aadTenant": "https://login.microsoftonline.com/99163270-c9ab-4279-bb12-5353ed9bf6e1",
"aadAudience": "fd11706c-e78c-4828-8be7-ac7dcefd4b17",
"aadIssuer": "https://sts.windows.net/99163270-c9ab-4279-bb12-5353ed9bf6e1/"
},
"bgpSettings": {
"asn": 65515,
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,7 @@
"connectionBandwidth": 100,
"sharedKey": "key",
"enableBgp": false,
"usePolicyBasedTrafficSelectors": false,
"useLocalAzureIpAddress": false,
"ipsecPolicies": [ ]
}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,7 @@
"connectionBandwidth": 100,
"sharedKey": "key",
"enableBgp": false,
"usePolicyBasedTrafficSelectors": false,
"useLocalAzureIpAddress": false,
"ipsecPolicies": [ ]
}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,7 @@
"connectionBandwidth": 100,
"sharedKey": "key",
"enableBgp": false,
"usePolicyBasedTrafficSelectors": false,
"useLocalAzureIpAddress": false,
"ipsecPolicies": [ ]
}
Expand All @@ -54,6 +55,7 @@
"connectionBandwidth": 100,
"sharedKey": "key",
"enableBgp": false,
"usePolicyBasedTrafficSelectors": false,
"useLocalAzureIpAddress": false,
"ipsecPolicies": [ ]
}
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
{
"parameters": {
"gatewayName": "vpngw",
"resourceGroupName": "rg1",
"api-version": "2019-04-01",
"subscriptionId": "subid"
},
"responses": {
"202" : { },
"200": {
"body": {
"name": "vpngw",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/vpnGateways/vpngw",
"etag": "w/\\00000000-0000-0000-0000-000000000000\\",
"location": "West US",
"type": "Microsoft.Network/vpnGateways",
"properties": {
"provisioningState": "Succeeded",
"virtualHub": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualHubs/virtualHub1"
},
"connections": [
{
"name": "vpnConnection1",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/vpnGateways/vpngw/vpnConnections/vpnConnection1",
"etag": "w/\\00000000-0000-0000-0000-000000000000\\",
"properties": {
"provisioningState": "Succeeded",
"remoteVpnSite": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/vpnSites/vpnSite1"
},
"connectionStatus": "Connected",
"ingressBytesTransferred": 0,
"egressBytesTransferred": 0,
"routingWeight": 0,
"connectionBandwidth": 100,
"sharedKey": "key",
"enableBgp": false,
"useLocalAzureIpAddress": false,
"ipsecPolicies": [ ]
}
}
],
"bgpSettings": {
"asn": 65514,
"bgpPeeringAddress": "10.0.1.30",
"peerWeight": 0
}
}
}
}
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -1873,6 +1873,18 @@
"radiusServerSecret": {
"type": "string",
"description": "The radius secret property of the VirtualNetworkGateway resource for vpn client connection."
},
"aadTenant": {
"type": "string",
"description": "The AADTenant property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication."
},
"aadAudience": {
"type": "string",
"description": "The AADAudience property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication."
},
"aadIssuer": {
"type": "string",
"description": "The AADIssuer property of the VirtualNetworkGateway resource for vpn client connection used for AAD authentication."
}
},
"description": "VpnClientConfiguration for P2S client."
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -1390,6 +1390,55 @@
}
}
},
"/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/vpnGateways/{gatewayName}/reset": {
"post": {
"tags": [
"VpnGateways"
],
"operationId": "VpnGateways_Reset",
"description": "Resets the primary of the vpn gateway in the specified resource group.",
"parameters": [
{
"name": "resourceGroupName",
"in": "path",
"required": true,
"type": "string",
"description": "The resource group name of the VpnGateway."
},
{
"name": "gatewayName",
"in": "path",
"required": true,
"type": "string",
"description": "The name of the gateway."
},
{
"$ref": "./network.json#/parameters/ApiVersionParameter"
},
{
"$ref": "./network.json#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"202": {
"description": "Accepted and the operation will complete asynchronously."
},
"200": {
"description": "Request successful. The operation reset the primary of the VpnGateway.",
"schema": {
"$ref": "#/definitions/VpnGateway"
}
}
},
"x-ms-examples": {
"ResetVpnGateway": { "$ref": "./examples/VpnGatewayReset.json" }
},
"x-ms-long-running-operation": true,
"x-ms-long-running-operation-options": {
"final-state-via": "location"
}
}
},
"/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/vpnGateways": {
"get": {
"operationId": "VpnGateways_ListByResourceGroup",
Expand Down Expand Up @@ -2300,7 +2349,56 @@
"final-state-via": "location"
}
}
}
},
"/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/p2svpnGateways/{gatewayName}/getP2sVpnConnectionHealth": {
"post": {
"tags": [
"P2SVpnGateways"
],
"operationId": "P2sVpnGateways_GetP2sVpnConnectionHealth",
"description": "Gets the connection health of P2S clients of the virtual wan P2SVpnGateway in the specified resource group.",
"parameters": [
{
"name": "resourceGroupName",
"in": "path",
"required": true,
"type": "string",
"description": "The name of the resource group."
},
{
"name": "gatewayName",
"in": "path",
"required": true,
"type": "string",
"description": "The name of the P2SVpnGateway."
},
{
"$ref": "./network.json#/parameters/ApiVersionParameter"
},
{
"$ref": "./network.json#/parameters/SubscriptionIdParameter"
}
],
"responses": {
"200": {
"description": "P2S Vpn Gateway with P2S connection health details.",
"schema": {
"$ref": "#/definitions/P2SVpnGateway"
}
},
"202": {
"description": "Accepted and the operation will complete asynchronously."
}
},
"x-ms-examples": {
"P2SVpnGatewayGetConnectionHealth": { "$ref": "./examples/P2SVpnGatewayGetConnectionHealth.json" }
},
"x-ms-long-running-operation": true,
"x-ms-long-running-operation-options": {
"final-state-via": "location"
}
}
}
},
"definitions": {
"VirtualWanProperties": {
Expand Down Expand Up @@ -2708,6 +2806,10 @@
"type": "boolean",
"description": "EnableBgp flag"
},
"usePolicyBasedTrafficSelectors": {
"type": "boolean",
"description": "Enable policy-based traffic selectors."
},
"ipsecPolicies": {
"type": "array",
"items": {
Expand Down