创建 iosikEv2VpnConfiguration

项目
08/01/2024

命名空间：microsoft.graph

重要： Microsoft /beta 版本下的 Graph API 可能会发生更改;不支持生产使用。

注意：适用于 Intune 的 Microsoft Graph API 需要适用于租户的活动 Intune 许可证。

全局服务	美国政府 L4	美国政府 L5 (DOD)	由世纪互联运营的中国
✅	✅	✅	✅

权限

要调用此 API，需要以下权限之一。若要了解详细信息，包括如何选择权限的信息，请参阅权限。

权限类型	权限（从最低特权到最高特权）
委派（工作或学校帐户）	DeviceManagementConfiguration.ReadWrite.All
委派（个人 Microsoft 帐户）	不支持。
应用程序	DeviceManagementConfiguration.ReadWrite.All

HTTP 请求

POST /deviceManagement/deviceConfigurations
POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/microsoft.graph.windowsDomainJoinConfiguration/networkAccessConfigurations

请求标头

标头	值
Authorization	持有者 {token}。必填。详细了解身份验证和授权。
接受	application/json

请求正文

在请求正文中，提供 iosikEv2VpnConfiguration 对象的 JSON 表示形式。

下表显示了创建 iosikEv2VpnConfiguration 时所需的属性。

属性	类型	说明
id	String	实体的键。继承自 deviceConfiguration
lastModifiedDateTime	DateTimeOffset	上次修改对象的日期/时间。继承自 deviceConfiguration
roleScopeTagIds	字符串集合	此实体实例的范围标记列表。继承自 deviceConfiguration
supportsScopeTags	布尔值	指示基础设备配置是否支持分配范围标记。如果此值为 false，并且实体对限定范围的用户不可见，则不允许向 ScopeTags 属性分配。这发生在 Silverlight 中创建的旧策略，可以通过在 Azure 门户中删除并重新创建策略来解决。此属性是只读的。继承自 deviceConfiguration
deviceManagementApplicabilityRuleOsEdition	deviceManagementApplicabilityRuleOsEdition	此策略的 OS 版本适用性。继承自 deviceConfiguration
deviceManagementApplicabilityRuleOsVersion	deviceManagementApplicabilityRuleOsVersion	此策略的 OS 版本适用性规则。继承自 deviceConfiguration
deviceManagementApplicabilityRuleDeviceMode	deviceManagementApplicabilityRuleDeviceMode	此策略的设备模式适用性规则。继承自 deviceConfiguration
createdDateTime	DateTimeOffset	创建对象的日期/时间。继承自 deviceConfiguration
description	String	管理员提供的设备配置的说明。继承自 deviceConfiguration
displayName	String	管理员提供的设备配置的名称。继承自 deviceConfiguration
version	Int32	设备配置的版本。继承自 deviceConfiguration
connectionName	String	向用户显示的连接名称。继承自 appleVpnConfiguration
connectionType	appleVpnConnectionType	连接类型。继承自 appleVpnConfiguration。可能的值为：、、、、`f5EdgeClientzscalerPrivateAccessciscoAnyConnectV2ciscoIPSeccitrixpaloAltoGlobalProtectcustomVpndellSonicWallMobileConnectcheckPointCapsuleVpn`、`f5Access2018alwaysOnikEv2paloAltoGlobalProtectV2citrixSso`、`microsoftTunnel`、`netMotionMobility`、。 `microsoftProtectpulseSecureciscoAnyConnect`
loginGroupOrDomain	String	当连接类型设置为 Dell SonicWALL Mobile Connection 时，登录组或域。继承自 appleVpnConfiguration
role	String	连接类型设置为 Pulse Secure 时的角色。继承自 appleVpnConfiguration
领域	String	连接类型设置为 Pulse Secure 时的领域。继承自 appleVpnConfiguration
服务器	vpnServer	网络上的 VPN 服务器。确保最终用户可以访问此网络位置。继承自 appleVpnConfiguration
标识符	String	当连接类型设置为“自定义 VPN”时，VPN 供应商提供的标识符。例如：Cisco AnyConnect 使用格式为 com.cisco.anyconnect.applevpn.plugin 继承自 appleVpnConfiguration 的标识符
customData	keyValue 集合	将连接类型设置为“自定义 VPN”时的自定义数据。使用此字段启用Intune不支持的功能，但在 VPN 解决方案中可用。请联系 VPN 供应商，了解如何添加这些键/值对。此集合最多可以包含 25 个元素。继承自 appleVpnConfiguration
customKeyValueData	keyValuePair 集合	将连接类型设置为“自定义 VPN”时的自定义数据。使用此字段启用Intune不支持的功能，但在 VPN 解决方案中可用。请联系 VPN 供应商，了解如何添加这些键/值对。此集合最多可以包含 25 个元素。继承自 appleVpnConfiguration
enableSplitTunneling	布尔值	通过 VPN 发送所有网络流量。继承自 appleVpnConfiguration
authenticationMethod	vpnAuthenticationMethod	此 VPN 连接的身份验证方法。继承自 appleVpnConfiguration。可取值为：`certificate`、`usernameAndPassword`、`sharedSecret`、`derivedCredential`、`azureAD`。
enablePerApp	布尔值	将其设置为 true 会创建 Per-App VPN 有效负载，该有效负载稍后可与可在最终用户的 iOS 设备上触发此 VPN 连接的应用相关联。继承自 appleVpnConfiguration
safariDomains	字符串集合	启用此 VPN 时启用“按应用”设置的 Safari 域。除了与此 VPN 关联的应用外，此处指定的 Safari 域还可以触发此 VPN 连接。继承自 appleVpnConfiguration
onDemandRules	vpnOnDemandRule 集合	按需规则。该集合最多可包含 500 个元素。继承自 appleVpnConfiguration
providerType	vpnProviderType	每应用 VPN 的提供程序类型。继承自 appleVpnConfiguration。可取值为：`notConfigured`、`appProxy`、`packetTunnel`。
associatedDomains	字符串集合	从 appleVpnConfiguration 继承的关联域
excludedDomains	字符串集合	通过公共 Internet 而不是通过 VPN 访问的域，即使激活了从 appleVpnConfiguration 继承的按应用 VPN 也是如此
disableOnDemandUserOverride	布尔值	切换以防止用户在“设置”应用中禁用自动 VPN，该应用继承自 appleVpnConfiguration
disconnectOnIdle	布尔值	是否在按需连接空闲后断开连接继承自 appleVpnConfiguration
disconnectOnIdleTimerInSeconds	Int32	断开按需连接之前等待的时间长度（以秒为单位）。有效值 0 到 65535 继承自 appleVpnConfiguration
proxyServer	vpnProxyServer	代理服务器。继承自 appleVpnConfiguration
optInToDeviceIdSharing	布尔值	Opt-In 将设备的 ID 共享给第三方 vpn 客户端，以便在网络访问控制验证期间使用。继承自 appleVpnConfiguration
userDomain	String	仅限 Zscaler。输入静态域以在 Zscaler 应用中预填充登录字段。如果留空，将改用用户的 Azure Active Directory 域。继承自 iosVpnConfiguration
strictEnforcement	布尔值	仅限 Zscaler。阻止网络流量，直到用户登录到 Zscaler 应用。 “True”表示流量被阻止。继承自 iosVpnConfiguration
cloudName	String	仅限 Zscaler。用户分配到的 Zscaler 云。继承自 iosVpnConfiguration
excludeList	字符串集合	仅限 Zscaler。未通过 Zscaler 云发送的网络地址列表。继承自 iosVpnConfiguration
targetedMobileApps	appListItem 集合	目标移动应用。该集合最多可包含 500 个元素。继承自 iosVpnConfiguration
microsoftTunnelSiteId	String	Microsoft Tunnel 站点 ID。继承自 iosVpnConfiguration
childSecurityAssociationParameters	iosVpnSecurityAssociationParameters	子安全关联参数
clientAuthenticationType	vpnClientAuthenticationType	VPN 客户端将使用的客户端身份验证类型。可取值为：`userAuthentication`、`deviceAuthentication`。
deadPeerDetectionRate	vpnDeadPeerDetectionRate	确定检查对等连接是否仍然处于活动状态的频率。 . 可能的值是：`medium`、`none`、`low`、`high`。
disableMobilityAndMultihoming	布尔值	禁用 MOBIKE
disableRedirect	布尔值	禁用重定向
enableCertificateRevocationCheck	布尔值	启用尽最大努力检查吊销;服务器响应超时不会导致它失败
enableEAP	布尔值	启用仅 EAP 身份验证
enablePerfectForwardSecrecy	布尔值	(PFS) 启用完美正向保密。
enableUseInternalSubnetAttributes	布尔值	启用“使用内部子网属性”。
localIdentifier	vpnLocalIdentifier	标识尝试通过 VPN 进行连接的客户端的方法。 . 可取值为：`deviceFQDN`、`empty`、`clientCertificateSubjectName`。
remoteIdentifier	String	IKEv2 服务器的地址。必须是 FQDN、UserFQDN、网络地址或 ASN1DN
securityAssociationParameters	iosVpnSecurityAssociationParameters	安全关联参数
serverCertificateCommonName	String	服务器身份验证中使用的 IKEv2 服务器证书的公用名称
serverCertificateIssuerCommonName	String	颁发者身份验证中使用的 IKEv2 服务器证书颁发者的公用名称
serverCertificateType	vpnServerCertificateType	VPN 服务器将呈现给 VPN 客户端进行身份验证的证书类型。可能的值是：`rsa`、`ecdsa256`、`ecdsa384`、`ecdsa521`。
sharedSecret	String	在选择“共享机密身份验证”时使用
tlsMaximumVersion	String	用于 EAP-TLS 身份验证的最大 TLS 版本
tlsMinimumVersion	String	用于 EAP-TLS 身份验证的最低 TLS 版本
allowDefaultSecurityAssociationParameters	布尔值	允许使用安全关联参数，方法是将所有参数设置为设备的默认值，除非显式指定。
allowDefaultChildSecurityAssociationParameters	布尔值	允许使用子安全关联参数，方法是将所有参数设置为设备的默认值，除非显式指定。
alwaysOnConfiguration	appleVpnAlwaysOnConfiguration	AlwaysOn 配置
enableAlwaysOnConfiguration	布尔值	确定是否启用了 Always on VPN
mtuSizeInBytes	Int32	最大传输单位。有效值 1280 到 1400

响应

如果成功，此方法在 201 Created 响应正文中返回响应代码和 iosikEv2VpnConfiguration 对象。

示例

请求

下面是一个请求示例。

POST https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
Content-type: application/json
Content-length: 5689

{
  "@odata.type": "#microsoft.graph.iosikEv2VpnConfiguration",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "deviceManagementApplicabilityRuleOsEdition": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
    "osEditionTypes": [
      "windows10EnterpriseN"
    ],
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleOsVersion": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
    "minOSVersion": "Min OSVersion value",
    "maxOSVersion": "Max OSVersion value",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleDeviceMode": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
    "deviceMode": "sModeConfiguration",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "connectionName": "Connection Name value",
  "connectionType": "pulseSecure",
  "loginGroupOrDomain": "Login Group Or Domain value",
  "role": "Role value",
  "realm": "Realm value",
  "server": {
    "@odata.type": "microsoft.graph.vpnServer",
    "description": "Description value",
    "address": "Address value",
    "isDefaultServer": true
  },
  "identifier": "Identifier value",
  "customData": [
    {
      "@odata.type": "microsoft.graph.keyValue",
      "key": "Key value",
      "value": "Value value"
    }
  ],
  "customKeyValueData": [
    {
      "@odata.type": "microsoft.graph.keyValuePair",
      "name": "Name value",
      "value": "Value value"
    }
  ],
  "enableSplitTunneling": true,
  "authenticationMethod": "usernameAndPassword",
  "enablePerApp": true,
  "safariDomains": [
    "Safari Domains value"
  ],
  "onDemandRules": [
    {
      "@odata.type": "microsoft.graph.vpnOnDemandRule",
      "ssids": [
        "Ssids value"
      ],
      "dnsSearchDomains": [
        "Dns Search Domains value"
      ],
      "probeUrl": "https://example.com/probeUrl/",
      "action": "evaluateConnection",
      "domainAction": "neverConnect",
      "domains": [
        "Domains value"
      ],
      "probeRequiredUrl": "https://example.com/probeRequiredUrl/",
      "interfaceTypeMatch": "ethernet",
      "dnsServerAddressMatch": [
        "Dns Server Address Match value"
      ]
    }
  ],
  "providerType": "appProxy",
  "associatedDomains": [
    "Associated Domains value"
  ],
  "excludedDomains": [
    "Excluded Domains value"
  ],
  "disableOnDemandUserOverride": true,
  "disconnectOnIdle": true,
  "disconnectOnIdleTimerInSeconds": 14,
  "proxyServer": {
    "@odata.type": "microsoft.graph.vpnProxyServer",
    "automaticConfigurationScriptUrl": "https://example.com/automaticConfigurationScriptUrl/",
    "address": "Address value",
    "port": 4
  },
  "optInToDeviceIdSharing": true,
  "userDomain": "User Domain value",
  "strictEnforcement": true,
  "cloudName": "Cloud Name value",
  "excludeList": [
    "Exclude List value"
  ],
  "targetedMobileApps": [
    {
      "@odata.type": "microsoft.graph.appListItem",
      "name": "Name value",
      "publisher": "Publisher value",
      "appStoreUrl": "https://example.com/appStoreUrl/",
      "appId": "App Id value"
    }
  ],
  "microsoftTunnelSiteId": "Microsoft Tunnel Site Id value",
  "childSecurityAssociationParameters": {
    "@odata.type": "microsoft.graph.iosVpnSecurityAssociationParameters",
    "securityEncryptionAlgorithm": "des",
    "securityIntegrityAlgorithm": "sha1_96",
    "securityDiffieHellmanGroup": 10,
    "lifetimeInMinutes": 1
  },
  "clientAuthenticationType": "deviceAuthentication",
  "deadPeerDetectionRate": "none",
  "disableMobilityAndMultihoming": true,
  "disableRedirect": true,
  "enableCertificateRevocationCheck": true,
  "enableEAP": true,
  "enablePerfectForwardSecrecy": true,
  "enableUseInternalSubnetAttributes": true,
  "localIdentifier": "empty",
  "remoteIdentifier": "Remote Identifier value",
  "securityAssociationParameters": {
    "@odata.type": "microsoft.graph.iosVpnSecurityAssociationParameters",
    "securityEncryptionAlgorithm": "des",
    "securityIntegrityAlgorithm": "sha1_96",
    "securityDiffieHellmanGroup": 10,
    "lifetimeInMinutes": 1
  },
  "serverCertificateCommonName": "Server Certificate Common Name value",
  "serverCertificateIssuerCommonName": "Server Certificate Issuer Common Name value",
  "serverCertificateType": "ecdsa256",
  "sharedSecret": "Shared Secret value",
  "tlsMaximumVersion": "Tls Maximum Version value",
  "tlsMinimumVersion": "Tls Minimum Version value",
  "allowDefaultSecurityAssociationParameters": true,
  "allowDefaultChildSecurityAssociationParameters": true,
  "alwaysOnConfiguration": {
    "@odata.type": "microsoft.graph.appleVpnAlwaysOnConfiguration",
    "tunnelConfiguration": "cellular",
    "userToggleEnabled": true,
    "voicemailExceptionAction": "allowTrafficOutside",
    "airPrintExceptionAction": "allowTrafficOutside",
    "cellularExceptionAction": "allowTrafficOutside",
    "allowAllCaptiveNetworkPlugins": true,
    "allowedCaptiveNetworkPlugins": {
      "@odata.type": "microsoft.graph.specifiedCaptiveNetworkPlugins",
      "allowedBundleIdentifiers": [
        "Allowed Bundle Identifiers value"
      ]
    },
    "allowCaptiveWebSheet": true,
    "natKeepAliveIntervalInSeconds": 13,
    "natKeepAliveOffloadEnable": true
  },
  "enableAlwaysOnConfiguration": true,
  "mtuSizeInBytes": 14
}

响应

下面是一个响应示例。注意：为简洁起见，可能会截断此处显示的响应对象。将从实际调用中返回所有属性。

HTTP/1.1 201 Created
Content-Type: application/json
Content-Length: 5861

{
  "@odata.type": "#microsoft.graph.iosikEv2VpnConfiguration",
  "id": "b87b0327-0327-b87b-2703-7bb827037bb8",
  "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "deviceManagementApplicabilityRuleOsEdition": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
    "osEditionTypes": [
      "windows10EnterpriseN"
    ],
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleOsVersion": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
    "minOSVersion": "Min OSVersion value",
    "maxOSVersion": "Max OSVersion value",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleDeviceMode": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
    "deviceMode": "sModeConfiguration",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "connectionName": "Connection Name value",
  "connectionType": "pulseSecure",
  "loginGroupOrDomain": "Login Group Or Domain value",
  "role": "Role value",
  "realm": "Realm value",
  "server": {
    "@odata.type": "microsoft.graph.vpnServer",
    "description": "Description value",
    "address": "Address value",
    "isDefaultServer": true
  },
  "identifier": "Identifier value",
  "customData": [
    {
      "@odata.type": "microsoft.graph.keyValue",
      "key": "Key value",
      "value": "Value value"
    }
  ],
  "customKeyValueData": [
    {
      "@odata.type": "microsoft.graph.keyValuePair",
      "name": "Name value",
      "value": "Value value"
    }
  ],
  "enableSplitTunneling": true,
  "authenticationMethod": "usernameAndPassword",
  "enablePerApp": true,
  "safariDomains": [
    "Safari Domains value"
  ],
  "onDemandRules": [
    {
      "@odata.type": "microsoft.graph.vpnOnDemandRule",
      "ssids": [
        "Ssids value"
      ],
      "dnsSearchDomains": [
        "Dns Search Domains value"
      ],
      "probeUrl": "https://example.com/probeUrl/",
      "action": "evaluateConnection",
      "domainAction": "neverConnect",
      "domains": [
        "Domains value"
      ],
      "probeRequiredUrl": "https://example.com/probeRequiredUrl/",
      "interfaceTypeMatch": "ethernet",
      "dnsServerAddressMatch": [
        "Dns Server Address Match value"
      ]
    }
  ],
  "providerType": "appProxy",
  "associatedDomains": [
    "Associated Domains value"
  ],
  "excludedDomains": [
    "Excluded Domains value"
  ],
  "disableOnDemandUserOverride": true,
  "disconnectOnIdle": true,
  "disconnectOnIdleTimerInSeconds": 14,
  "proxyServer": {
    "@odata.type": "microsoft.graph.vpnProxyServer",
    "automaticConfigurationScriptUrl": "https://example.com/automaticConfigurationScriptUrl/",
    "address": "Address value",
    "port": 4
  },
  "optInToDeviceIdSharing": true,
  "userDomain": "User Domain value",
  "strictEnforcement": true,
  "cloudName": "Cloud Name value",
  "excludeList": [
    "Exclude List value"
  ],
  "targetedMobileApps": [
    {
      "@odata.type": "microsoft.graph.appListItem",
      "name": "Name value",
      "publisher": "Publisher value",
      "appStoreUrl": "https://example.com/appStoreUrl/",
      "appId": "App Id value"
    }
  ],
  "microsoftTunnelSiteId": "Microsoft Tunnel Site Id value",
  "childSecurityAssociationParameters": {
    "@odata.type": "microsoft.graph.iosVpnSecurityAssociationParameters",
    "securityEncryptionAlgorithm": "des",
    "securityIntegrityAlgorithm": "sha1_96",
    "securityDiffieHellmanGroup": 10,
    "lifetimeInMinutes": 1
  },
  "clientAuthenticationType": "deviceAuthentication",
  "deadPeerDetectionRate": "none",
  "disableMobilityAndMultihoming": true,
  "disableRedirect": true,
  "enableCertificateRevocationCheck": true,
  "enableEAP": true,
  "enablePerfectForwardSecrecy": true,
  "enableUseInternalSubnetAttributes": true,
  "localIdentifier": "empty",
  "remoteIdentifier": "Remote Identifier value",
  "securityAssociationParameters": {
    "@odata.type": "microsoft.graph.iosVpnSecurityAssociationParameters",
    "securityEncryptionAlgorithm": "des",
    "securityIntegrityAlgorithm": "sha1_96",
    "securityDiffieHellmanGroup": 10,
    "lifetimeInMinutes": 1
  },
  "serverCertificateCommonName": "Server Certificate Common Name value",
  "serverCertificateIssuerCommonName": "Server Certificate Issuer Common Name value",
  "serverCertificateType": "ecdsa256",
  "sharedSecret": "Shared Secret value",
  "tlsMaximumVersion": "Tls Maximum Version value",
  "tlsMinimumVersion": "Tls Minimum Version value",
  "allowDefaultSecurityAssociationParameters": true,
  "allowDefaultChildSecurityAssociationParameters": true,
  "alwaysOnConfiguration": {
    "@odata.type": "microsoft.graph.appleVpnAlwaysOnConfiguration",
    "tunnelConfiguration": "cellular",
    "userToggleEnabled": true,
    "voicemailExceptionAction": "allowTrafficOutside",
    "airPrintExceptionAction": "allowTrafficOutside",
    "cellularExceptionAction": "allowTrafficOutside",
    "allowAllCaptiveNetworkPlugins": true,
    "allowedCaptiveNetworkPlugins": {
      "@odata.type": "microsoft.graph.specifiedCaptiveNetworkPlugins",
      "allowedBundleIdentifiers": [
        "Allowed Bundle Identifiers value"
      ]
    },
    "allowCaptiveWebSheet": true,
    "natKeepAliveIntervalInSeconds": 13,
    "natKeepAliveOffloadEnable": true
  },
  "enableAlwaysOnConfiguration": true,
  "mtuSizeInBytes": 14
}

通过

创建 iosikEv2VpnConfiguration

权限

HTTP 请求

请求标头

请求正文

响应

示例

请求

响应

反馈

其他资源