// This is an automatically generated code sample.
// To make this code sample work in your Oracle Cloud tenancy,
// please replace the values for any parameters whose current values do not fit
// your use case (such as resource IDs, strings containing ‘EXAMPLE’ or ‘unique_id’, and
// boolean, number, and enum parameters with values not fitting your use case).

import * as core from "oci-core";
import common = require("oci-common");

// Create a default authentication provider that uses the DEFAULT
// profile in the configuration file.
// Refer to <see href="https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/sdkconfig.htm#SDK_and_CLI_Configuration_File>the public documentation</see> on how to prepare a configuration file.

const provider: common.ConfigFileAuthenticationDetailsProvider = new common.ConfigFileAuthenticationDetailsProvider();

(async () => {
  try {
    // Create a service client
    const client = new core.VirtualNetworkClient({ authenticationDetailsProvider: provider });

    // Create a request and dependent object(s).
    const createIPSecConnectionDetails = {
      compartmentId: "ocid1.test.oc1..<unique_ID>EXAMPLE-compartmentId-Value",
      cpeId: "ocid1.test.oc1..<unique_ID>EXAMPLE-cpeId-Value",
      definedTags: {
        EXAMPLE_KEY_hLPqe: {
          EXAMPLE_KEY_Gf4Pb: "EXAMPLE--Value"
        }
      },
      displayName: "EXAMPLE-displayName-Value",
      drgId: "ocid1.test.oc1..<unique_ID>EXAMPLE-drgId-Value",
      freeformTags: {
        EXAMPLE_KEY_eUmuL: "EXAMPLE_VALUE_BToxKsrgkMXtJMemCkIy"
      },
      cpeLocalIdentifier: "EXAMPLE-cpeLocalIdentifier-Value",
      cpeLocalIdentifierType:
        core.models.CreateIPSecConnectionDetails.CpeLocalIdentifierType.Hostname,
      staticRoutes: ["EXAMPLE--Value"],
      tunnelConfiguration: [
        {
          displayName: "EXAMPLE-displayName-Value",
          routing: core.models.CreateIPSecConnectionTunnelDetails.Routing.Bgp,
          ikeVersion: core.models.CreateIPSecConnectionTunnelDetails.IkeVersion.V1,
          sharedSecret: "EXAMPLE-sharedSecret-Value",
          bgpSessionConfig: {
            oracleInterfaceIp: "EXAMPLE-oracleInterfaceIp-Value",
            customerInterfaceIp: "EXAMPLE-customerInterfaceIp-Value",
            oracleInterfaceIpv6: "EXAMPLE-oracleInterfaceIpv6-Value",
            customerInterfaceIpv6: "EXAMPLE-customerInterfaceIpv6-Value",
            customerBgpAsn: "EXAMPLE-customerBgpAsn-Value"
          },
          oracleInitiation:
            core.models.CreateIPSecConnectionTunnelDetails.OracleInitiation.ResponderOnly,
          natTranslationEnabled:
            core.models.CreateIPSecConnectionTunnelDetails.NatTranslationEnabled.Disabled,
          phaseOneConfig: {
            isCustomPhaseOneConfig: false,
            authenticationAlgorithm:
              core.models.PhaseOneConfigDetails.AuthenticationAlgorithm.Sha2384,
            encryptionAlgorithm: core.models.PhaseOneConfigDetails.EncryptionAlgorithm.Aes256Cbc,
            diffieHelmanGroup: core.models.PhaseOneConfigDetails.DiffieHelmanGroup.Group14,
            lifetimeInSeconds: 876
          },
          phaseTwoConfig: {
            isCustomPhaseTwoConfig: true,
            authenticationAlgorithm:
              core.models.PhaseTwoConfigDetails.AuthenticationAlgorithm.HmacSha1128,
            encryptionAlgorithm: core.models.PhaseTwoConfigDetails.EncryptionAlgorithm.Aes192Gcm,
            lifetimeInSeconds: 380,
            isPfsEnabled: true,
            pfsDhGroup: core.models.PhaseTwoConfigDetails.PfsDhGroup.Group19
          },
          dpdConfig: {
            dpdMode: core.models.DpdConfig.DpdMode.RespondOnly,
            dpdTimeoutInSec: 22
          },
          oracleTunnelIp: "EXAMPLE-oracleTunnelIp-Value",
          associatedVirtualCircuits: ["EXAMPLE--Value"],
          drgRouteTableId: "ocid1.test.oc1..<unique_ID>EXAMPLE-drgRouteTableId-Value",
          encryptionDomainConfig: {
            oracleTrafficSelector: ["EXAMPLE--Value"],
            cpeTrafficSelector: ["EXAMPLE--Value"]
          }
        }
      ]
    };

    const createIPSecConnectionRequest: core.requests.CreateIPSecConnectionRequest = {
      createIPSecConnectionDetails: createIPSecConnectionDetails,
      opcRetryToken: "EXAMPLE-opcRetryToken-Value"
    };

    // Send request to the Client.
    const createIPSecConnectionResponse = await client.createIPSecConnection(
      createIPSecConnectionRequest
    );
  } catch (error) {
    console.log("createIPSecConnection Failed with error  " + error);
  }
})();