{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "RemoteNetwork",
  "description": "RemoteNetwork schema from Palo Alto Networks SASE Configuration Orchestration API",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/sase-config-orchestration-api-remote-network-schema.json",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "Unique identifier of the remote network."
    },
    "name": {
      "type": "string",
      "description": "Display name of the remote network."
    },
    "description": {
      "type": "string",
      "description": "Description of the remote network's location or purpose."
    },
    "location": {
      "type": "string",
      "description": "Prisma Access gateway location for this tunnel."
    },
    "subnets": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Network subnets at the remote site (CIDR notation)."
    },
    "ike_gateway": {
      "type": "object",
      "properties": {
        "peer_ip": {
          "type": "string",
          "description": "Public IP address of the remote peer gateway."
        },
        "peer_id": {
          "type": "string",
          "description": "IKE peer identity."
        },
        "local_ip": {
          "type": "string",
          "description": "Prisma Access local IKE gateway IP address."
        },
        "ike_version": {
          "type": "string",
          "enum": [
            "IKEv1",
            "IKEv2"
          ],
          "description": "IKE protocol version."
        },
        "authentication_type": {
          "type": "string",
          "enum": [
            "pre-shared-key",
            "certificate"
          ],
          "description": "IKE authentication method."
        }
      }
    },
    "ipsec_tunnel": {
      "type": "object",
      "properties": {
        "local_address": {
          "type": "string",
          "description": "Local tunnel IP address assigned by Prisma Access."
        },
        "remote_address": {
          "type": "string",
          "description": "Remote tunnel IP address."
        },
        "tunnel_interface": {
          "type": "string",
          "description": "Tunnel interface name."
        }
      }
    },
    "tunnel_status": {
      "type": "string",
      "enum": [
        "connected",
        "disconnected",
        "pending",
        "error"
      ],
      "description": "Current IPsec tunnel connection status."
    },
    "bandwidth_mbps": {
      "type": "integer",
      "description": "Allocated bandwidth in Mbps for this remote network."
    },
    "created_at": {
      "type": "string",
      "format": "date-time"
    },
    "updated_at": {
      "type": "string",
      "format": "date-time"
    }
  }
}