| Name | Data Type | Qualifiers |
| Name | Data Type | Value | Scope | Flavors |
| Caption | string |
| Description | string | The Caption property is a short textual description (one- line string) of the object. | None | TRANSLATABLE= true |
| MaxLen | uint32 | 64 | None | None |
| CommonName | string |
| Description | string | A user-friendly name of this policy-related object. | None | TRANSLATABLE= true |
| CreationClassName | string |
| Description | string | CreationClassName indicates the name of the class or the subclass used in the creation of an instance. When used with the other key properties of this class, this property allows all instances of this class and its subclasses to be uniquely identified. | None | TRANSLATABLE= true |
| Key | boolean | true | None | OVERRIDABLE= false
|
| MaxLen | uint32 | 256 | None | None |
| Description | string |
| Description | string | The Description property provides a textual description of the object. | None | TRANSLATABLE= true |
| DFHandling | uint16 |
| Description | string | DFHandling controls how the Don't Fragment bit is managed by the tunnel. | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|PreconfiguredTunnelAction.DFHandling | None | None |
| ModelCorrespondence | string | CIM_IPsecSAEndpoint.DFHandling | None | None |
| ValueMap | string | 2, 3, 4 | None | None |
| Values | string | Copy from Internal to External IP Header, Set DF Bit in External Header to 1, Set DF Bit in External Header to 0 | None | TRANSLATABLE= true |
| DoActionLogging | boolean |
| Description | string | DoActionLogging causes a log message to be generated when the action is performed. | None | TRANSLATABLE= true |
| DoPacketLogging | boolean |
| Description | string | DoPacketLogging causes a log message to be generated when the action is applied to a packet. | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|SAAction.DoPacketLogging | None | None |
| ModelCorrespondence | string | CIM_SecurityAssociationEndpoint.PacketLoggingActive | None | None |
| ElementName | string |
| Description | string | A user-friendly name for the object. This property allows each instance to define a user-friendly name in addition to its key properties, identity data, and description information.
Note that the Name property of ManagedSystemElement is also defined as a user-friendly name. But, it is often subclassed to be a Key. It is not reasonable that the same property can convey both identity and a user-friendly name, without inconsistencies. Where Name exists and is not a Key (such as for instances of LogicalDevice), the same information can be present in both the Name and ElementName properties. Note that if there is an associated instance of CIM_EnabledLogicalElementCapabilities, restrictions on this properties may exist as defined in ElementNameMask and MaxElementNameLen properties defined in that class. | None | TRANSLATABLE= true |
| Granularity | uint16 |
| Description | string | The property Granularity is an enumeration that specifies how the selector for the SA should be derived from the traffic that triggered the negotiation. Its values are:
1=Other; See the OtherGranularity property for more information
2=Subnet; The source and destination subnet masks are used
3=Address; The source and destination IP addresses of the triggering packet are used
4=Protocol; The source and destination IP addresses and the IP protocol of the triggering packet are used
5=Port; The source and destination IP addresses, IP protocol and the source and destination layer 4 ports of the triggering packet are used. | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|IPsecAction.Granularity | None | None |
| ModelCorrespondence | string | CIM_IPsecAction.OtherGranularity | None | None |
| ValueMap | string | 1, 2, 3, 4, 5 | None | None |
| Values | string | Other, Subnet, Address, Protocol, Port | None | TRANSLATABLE= true |
| GroupId | uint16 |
| Description | string | GroupId specifies the PFS group ID to use. This value is only used if PFS is True and UsePhase1Group is False. If the GroupID number is from the vendor-specific range (32768-65535), the VendorID qualifies the group number. Well-known group identifiers from RFC2412, Appendix E, are: Group 1='768 bit prime', Group 2='1024 bit prime', Group 3='Elliptic Curve Group with 155 bit field element', Group 4='Large Elliptic Curve Group with 185 bit field element', and Group 5='1536 bit prime'. | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|IPsecAction.GroupID, RFC2412.IETF|Appendix E | None | None |
| ModelCorrespondence | string | CIM_IPsecAction.VendorID, CIM_IKESAEndpoint.GroupID | None | None |
| ValueMap | string | 0, 1, 2, 3, 4, 5, .., 0x8000.. | None | None |
| Values | string | No Group/Non-Diffie-Hellman Exchange, DH-768 bit prime, DH-1024 bit prime, EC2N-155 bit field element, EC2N-185 bit field element, DH-1536 bit prime, Standard Group - Reserved, Vendor Reserved | None | TRANSLATABLE= true |
| IdleDurationSeconds | uint64 |
| Description | string | IdleDurationSeconds is the time an SA can remain idle (i.e., no traffic protected using the security association) before it is automatically deleted. The default (zero) value indicates that there is no idle duration timer and that the SA is deleted based upon the SA seconds and kilobyte lifetimes. Any non-zero value indicates the number of seconds that the SA may remain unused. | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|IKENegotiationAction.IdleDurationSeconds | None | None |
| ModelCorrespondence | string | CIM_SecurityAssociationEndpoint.IdleDurationSeconds | None | None |
| PUnit | string | second | None | None |
| Units | string | Seconds | None | TRANSLATABLE= true |
| InstanceID | string |
| Description | string | InstanceID is an optional property that may be used to opaquely and uniquely identify an instance of this class within the scope of the instantiating Namespace. Various subclasses of this class may override this property to make it required, or a key. Such subclasses may also modify the preferred algorithms for ensuring uniqueness that are defined below.
To ensure uniqueness within the NameSpace, the value of InstanceID should be constructed using the following "preferred" algorithm:
<OrgID>:<LocalID>
Where <OrgID> and <LocalID> are separated by a colon (:), and where <OrgID> must include a copyrighted, trademarked, or otherwise unique name that is owned by the business entity that is creating or defining the InstanceID or that is a registered ID assigned to the business entity by a recognized global authority. (This requirement is similar to the <Schema Name>_<Class Name> structure of Schema class names.) In addition, to ensure uniqueness, <OrgID> must not contain a colon (:). When using this algorithm, the first colon to appear in InstanceID must appear between <OrgID> and <LocalID>.
<LocalID> is chosen by the business entity and should not be reused to identify different underlying (real-world) elements. If not null and the above "preferred" algorithm is not used, the defining entity must assure that the resulting InstanceID is not reused across any InstanceIDs produced by this or other providers for the NameSpace of this instance.
If not set to null for DMTF-defined instances, the "preferred" algorithm must be used with the <OrgID> set to CIM. | None | TRANSLATABLE= true |
| MinLifetimeKilobytes | uint64 |
| Description | string | MinLifetimeKilobytes prevents certain denial of service attacks where the peer requests an arbitrarily low lifetime value, causing renegotiations with expensive Diffie-Hellman operations. The property specifies the minimum lifetime, in kilobytes, that will be accepted from the peer. A value of zero (the default) indicates that there is no minimum value. A non-zero value specifies the minimum kilobytes lifetime. Note that there has been considerable debate regarding the usefulness of applying kilobyte lifetimes to phase 1 security associations, so it is likely that this property will only apply to the subclass, IPsecAction. | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|IKENegotiationAction.MinLifetimeKilobytes | None | None |
| ModelCorrespondence | string | CIM_SecurityAssociationEndpoint.LifetimeKilobytes | None | None |
| PUnit | string | byte * 10^3 | None | None |
| Units | string | KiloBytes | None | TRANSLATABLE= true |
| MinLifetimeSeconds | uint64 |
| Description | string | MinLifetimeSeconds prevents certain denial of service attacks where the peer requests an arbitrarily low lifetime value, causing renegotiations with expensive Diffie-Hellman operations. The property specifies the minimum lifetime, in seconds, that will be accepted from the peer. A value of zero (the default) indicates that there is no minimum value. A non-zero value specifies the minimum seconds lifetime. | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|IKENegotiationAction.MinLifetimeSeconds | None | None |
| ModelCorrespondence | string | CIM_SecurityAssociationEndpoint.LifetimeSeconds | None | None |
| PUnit | string | second | None | None |
| Units | string | Seconds | None | TRANSLATABLE= true |
| OtherGranularity | string |
| Description | string | Description of the granularity when the value 1 ("Other") is specified for the property, Granularity. | None | TRANSLATABLE= true |
| ModelCorrespondence | string | CIM_IPsecAction.Granularity | None | None |
| PolicyActionName | string |
| Description | string | A user-friendly name of this PolicyAction. | None | TRANSLATABLE= true |
| Key | boolean | true | None | OVERRIDABLE= false
|
| MaxLen | uint32 | 256 | None | None |
| PolicyKeywords | string |
| Description | string | An array of keywords for characterizing / categorizing policy objects. Keywords are of one of two types:
- Keywords defined in this and other MOFs, or in DMTF white papers. These keywords provide a vendor- independent, installation-independent way of characterizing policy objects.
- Installation-dependent keywords for characterizing policy objects. Examples include 'Engineering', 'Billing', and 'Review in December 2000'.
This MOF defines the following keywords: 'UNKNOWN', 'CONFIGURATION', 'USAGE', 'SECURITY', 'SERVICE', 'MOTIVATIONAL', 'INSTALLATION', and 'EVENT'. These concepts are self-explanatory and are further discussed in the SLA/Policy White Paper. One additional keyword is defined: 'POLICY'. The role of this keyword is to identify policy-related instances that may not be otherwise identifiable, in some implementations. The keyword 'POLICY' is NOT mutually exclusive of the other keywords specified above. | None | TRANSLATABLE= true |
| PolicyRuleCreationClassName | string |
| Description | string | For a rule-specific PolicyAction, the CreationClassName of the PolicyRule object with which this Action is associated. For a reusable PolicyAction, a special value, 'NO RULE', should be used to indicate that this Action is reusable and not associated with a single PolicyRule. | None | TRANSLATABLE= true |
| Key | boolean | true | None | OVERRIDABLE= false
|
| MaxLen | uint32 | 256 | None | None |
| PolicyRuleName | string |
| Description | string | For a rule-specific PolicyAction, the name of the PolicyRule object with which this Action is associated. For a reusable PolicyAction, a special value, 'NO RULE', should be used to indicate that this Action is reusable and not associated with a single PolicyRule. | None | TRANSLATABLE= true |
| Key | boolean | true | None | OVERRIDABLE= false
|
| MaxLen | uint32 | 256 | None | None |
| SystemCreationClassName | string |
| Description | string | The name of the class or the subclass used in the creation of the System object in whose scope this PolicyAction is defined.
This property helps to identify the System object in whose scope this instance of PolicyAction exists. For a rule-specific PolicyAction, this is the System in whose context the PolicyRule is defined. For a reusable PolicyAction, this is the instance of PolicyRepository (which is a subclass of System) that holds the Action.
Note that this property, and the analogous property SystemName, do not represent propagated keys from an instance of the class System. Instead, they are properties defined in the context of this class, which repeat the values from the instance of System to which this PolicyAction is related, either directly via the PolicyActionInPolicyRepository association or indirectly via the PolicyActionInPolicyRule aggregation. | None | TRANSLATABLE= true |
| Key | boolean | true | None | OVERRIDABLE= false
|
| MaxLen | uint32 | 256 | None | None |
| SystemName | string |
| Description | string | The name of the System object in whose scope this PolicyAction is defined.
This property completes the identification of the System object in whose scope this instance of PolicyAction exists. For a rule-specific PolicyAction, this is the System in whose context the PolicyRule is defined. For a reusable PolicyAction, this is the instance of PolicyRepository (which is a subclass of System) that holds the Action. | None | TRANSLATABLE= true |
| Key | boolean | true | None | OVERRIDABLE= false
|
| MaxLen | uint32 | 256 | None | None |
| UsePFS | boolean |
| Description | string | UsePFS indicates whether perfect forward secrecy is required when refreshing keys. | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|IPsecAction.UsePFS | None | None |
| ModelCorrespondence | string | CIM_IPsecSAEndpoint.PFSInUse | None | None |
| UsePhase1Group | boolean |
| Description | string | UsePhase1Group indicates that the phase 2 GroupId should be the same as that used in the phase 1 key exchange. If UsePFS is False, then this property is ignored. Note that a value of False indicates that the property GroupId will contain the key exchange group to use for phase 2. | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|IPsecAction.UseIKEGroup | None | None |
| VendorID | string |
| Description | string | The property VendorID is used together with the property GroupID (when it is in the vendor-specific range) to identify the key exchange group. VendorID is ignored unless UsePFS is true, AND UsePhase1Group is False, AND GroupID is in the vendor-specific range (32768-65535). | None | TRANSLATABLE= true |
| MappingStrings | string | IPSP Policy Model.IETF|IPsecAction.VendorID | None | None |
| ModelCorrespondence | string | CIM_IPsecAction.GroupId, CIM_IKESAEndpoint.VendorID | None | None |
Copyright © 2008-2020 VMware, Inc. All rights reserved.