Retrieves information about the IPsec VPN tunnel configured for the specified edge gateway.

Prerequisites
1

Log in to vCloud Air as an administrator. See Log in to vCloud Air for information.

2

Create a login session with vCloud Director. See Create a Session for a Virtual Data Center in a Service for information.

3

Using the vCloud API, query vCloud Director for the ID of the edge gateway you require IPsec VPN configuration details about. See Querying the vCloud API for information.

Procedure
♦

To get the details for the IPsec VPN configuration, issue the following request:

GET https://vchs.vmware.com/hybridity/api/gateways/gatewayId/ipsec/config

In the request header, include the OATH token and the Accept header that you obtained when creating a login session: 

Accept: application/json
Content-Type: application/json
X-Vcloud-Authorization: "vcloud-auth-token"

If the request is successful, the server returns HTTP response code 200 and the details of the IPsec VPN configuration.

Example: Request and Response to Get the IPSec VPN Configuration

Request Header – Get the IPsec VPN Configuration 

GET https://vchs.vmware.com/hybridity/api/gateways/gw-5/ipsec/config
Accept: application/json
Content-Type: application/json
X-Vcloud-Authorization: "d6eFLOqQYfuEn2MJTp7BQ2ISEO+ZYaEgTcqBy8wZQ6js="

Request body not required.

Response Body – Get the IPsec VPN Configuration 

{
  "featureType" : "ipsec_4.0"
  "version" : 2,
  "enabled" : false,
  "logging" : {
    "enable" : false,
    "logLevel" : "info"
  },
  "sites" : {
    "sites" : {
       "enabled" : true,
       "name" : "VPN to edge-pa-1",
       "description" : "psk VPN to edge-pa-1 192.168.11.0/24 == 192.168.1.0/24",
       "localId" : "11.0.0.12",
       "localIp" : "11.0.0.11",
       "peerId" : "11.0.0.1",
       "peerIp" : "any",
       "encryptionAlgorithm" : "aes256",
       "mtu" : null,
       "enablePfs" : true,
       "dhGroup" : "dh2"
       "localSubnets: [{
          "subnet" : "192.168.11.0/24"
        }
       "peerSubnets: [{
          "subnet" : "192.168.1.0/24"
        }
       "psk" : "******",
       "certificate" : null,
       "authenticationMode" : "psk,"
       "extension" : null
      }, 
  },
  "global" : {
    "psk" : "******",
    "serviceCertificate" : "certificate-4",
    "caCertificates" : {
      "caCertificate" : [ ]
    },
    "crlCertificates" : {
      "crlCertificate" : "crl-1"
    },
    "extension" : null
  }
}