The following parameters are displayed in the AWS CloudFormation console during deployment.
| Parameter | Description | Default | Required When |
|---|---|---|---|
| KeyPair | EC2 key pair for SSH access to the appliance. | (none) | Always |
| ApplianceVpcCidr | IPv4 CIDR for the appliance VPC. | 10.100.0.0/16 | Always |
| ApplianceSubnetCidr | IPv4 CIDR for the appliance subnet. | 10.100.1.0/24 | Always |
| RedirectAll | Enable redirect-all tunnel mode via AWS NAT Gateway. Incompatible with Ipv6. | false | Optional |
| Ipv6 | Enable IPv6. Incompatible with RedirectAll. | false | Optional |
| StaticPoolCidr | IPv4 CIDR for Connect Tunnel static IP pool. Must not overlap VPC or remote CIDRs. | 10.101.0.0/16 | Always |
| StaticPoolV6Cidr | IPv6 CIDR for static pool. Required when IPv6 is enabled. | (none) | If Ipv6=true |
| SiteToSiteVpn | Create an IPsec site-to-site VPN to a remote gateway. | false | Optional |
| SiteToSiteRemoteGatewayPublicIp | Public IP of the remote gateway (NSv or other). | (none) | If VPN=true |
| SiteToSiteRemoteGatewayBgpAsn | BGP ASN of the remote gateway. | 65000 | If VPN=true |
| SiteToSitePreSharedKey | IPsec pre-shared key. 8-64 alphanumeric characters, periods, underscores. Cannot start with zero. | (none) | If VPN=true |
| SiteToSiteRemoteCidr | IPv4 CIDR of the remote network. Traffic to this CIDR routes through the VPN. | (none) | If VPN=true |
RedirectAll and IPv6 cannot both be set to true in the same deployment.