{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-structure/prisma-access-api-ip-sec-tunnel-structure.json",
  "name": "IPSecTunnel",
  "description": "IPSecTunnel schema from Palo Alto Networks Prisma Access Configuration API",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "Unique identifier for the IPSec tunnel."
    },
    "name": {
      "type": "string",
      "description": "Name of the IPSec tunnel."
    },
    "auto_key": {
      "type": "object",
      "description": "Auto-key IKE configuration for the tunnel.",
      "properties": {
        "ike_gateway": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "name": {
                "type": "string",
                "description": "Name of the IKE gateway to use."
              }
            }
          }
        },
        "ipsec_crypto_profile": {
          "type": "string",
          "description": "IPSec crypto profile name."
        }
      }
    },
    "tunnel_monitor": {
      "type": "object",
      "properties": {
        "enable": {
          "type": "boolean"
        },
        "destination_ip": {
          "type": "string"
        },
        "proxy_id": {
          "type": "string"
        }
      }
    },
    "anti_replay": {
      "type": "boolean",
      "description": "Whether anti-replay protection is enabled.",
      "default": true
    },
    "folder": {
      "type": "string"
    }
  },
  "required": [
    "name",
    "auto_key"
  ]
}