{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "RemoteNetworkRequest",
  "description": "RemoteNetworkRequest schema from Palo Alto Networks SASE Configuration Orchestration API",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/sase-config-orchestration-api-remote-network-request-schema.json",
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Display name for the remote network."
    },
    "description": {
      "type": "string",
      "description": "Optional description."
    },
    "location": {
      "type": "string",
      "description": "Prisma Access gateway location name."
    },
    "subnets": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Network subnets at the remote site in CIDR notation."
    },
    "ike_gateway": {
      "type": "object",
      "required": [
        "peer_ip"
      ],
      "properties": {
        "peer_ip": {
          "type": "string",
          "description": "Public IP address of the remote peer gateway."
        },
        "peer_id": {
          "type": "string",
          "description": "IKE peer identity. Defaults to the peer IP if omitted."
        },
        "ike_version": {
          "type": "string",
          "enum": [
            "IKEv1",
            "IKEv2"
          ],
          "default": "IKEv2"
        },
        "authentication_type": {
          "type": "string",
          "enum": [
            "pre-shared-key",
            "certificate"
          ],
          "default": "pre-shared-key"
        },
        "pre_shared_key": {
          "type": "string",
          "description": "Pre-shared key for IKE authentication.",
          "writeOnly": true
        }
      }
    },
    "bandwidth_mbps": {
      "type": "integer",
      "description": "Requested bandwidth allocation in Mbps."
    }
  },
  "required": [
    "name",
    "location",
    "subnets",
    "ike_gateway"
  ]
}