Overview  Naming  Diagram  Containers  Contained  Inheritance  Events  Faults  FSMs  Properties Summary  Properties Detail 

Class macsec:FabIf (CONCRETE)

Class ID:9902
Class Label: macsec Interface
Encrypted: false - Exportable: false - Persistent: true - Configurable: false - Subject to Quota: Disabled
Write Access: [NON CONFIGURABLE]
Read Access: [access-protocol-l1, access-protocol-l2, admin, fabric-protocol-l1, fabric-protocol-l2, tenant-ext-protocol-l2, tenant-protocol-l2]
Creatable/Deletable: no (see Container Mos for details)
Possible Semantic Scopes: Infra, Fabric,
Semantic Scope Evaluation Rule: Parent
Monitoring Policy Source: Relation
Monitoring Flags : [ IsObservable: false, HasStats: false, HasFaults: false, HasHealth: false, HasEventRules: false ]

NO COMMENTS

Naming Rules 
RN FORMAT: fabif-{[id]}

    [1] PREFIX=fabif- PROPERTY = id




DN FORMAT: 

[0] topology/pod-{id}/node-{id}/sys/macsec/inst/fabif-{[id]}

[1] sys/macsec/inst/fabif-{[id]}


Diagram

Super Mo: macsec:AIf,
Container Mos: macsec:Inst (deletable:no),
Relations From: nw:PathEp,
Relations To: l1:EthIf,
Relations: l2:RsEthIf, nw:RtPathToIf,


Containers Hierarchies
[V] top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.
 ├
 		[V] fabric:Topology The root for IFC topology.
 
 		 ├
 		[V] fabric:Pod A pod.
 
 		 
 		 ├
 		[V] fabric:Node The root node for the APIC.
 
 		 
 		 
 		 ├
 		[V] top:System The APIC uses a policy model to combine data into a health score. Health scores can be aggregated for a variety of areas such as for the infrastructure, applications, or services. The category health score is calculated using a Lp -Norm formula. The health score penalty equals 100 minus the health score. The health score penalty represents the overall health score penalties of a set of MOs that belong to a given category and are children or direc...
 
 		 
 		 
 		 
 		 ├
 		[V] macsec:Entity  Holds macsec control plane entity information
 
 		 
 		 
 		 
 		 
 		 ├
 		[V] macsec:Inst  This objects hold per macsec instance information. There is only one instance of macsec running in the system today
 
 		 
 		 
 		 
 		 
 		 
 		 ├
 		[V] macsec:FabIf 
[V] top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.
 ├
 		[V] top:System The APIC uses a policy model to combine data into a health score. Health scores can be aggregated for a variety of areas such as for the infrastructure, applications, or services. The category health score is calculated using a Lp -Norm formula. The health score penalty equals 100 minus the health score. The health score penalty represents the overall health score penalties of a set of MOs that belong to a given category and are children or direc...
 
 		 ├
 		[V] macsec:Entity  Holds macsec control plane entity information
 
 		 
 		 ├
 		[V] macsec:Inst  This objects hold per macsec instance information. There is only one instance of macsec running in the system today
 
 		 
 		 
 		 ├
 		[V] macsec:FabIf 


Contained Hierarchy
[V] macsec:FabIf 
 ├
 		[V] l2:RsEthIf A source relation to an L1 interface. This is an internal object.
 ├
 		[V] nw:RtPathToIf A target relation to the interface information.


Inheritance
[V] nw:Item Ignore.
 ├
 		[V] nw:Conn A connection abstraction.
 
 		 ├
 		[V] nw:Ep A static endpoint.
 
 		 
 		 ├
 		[V] nw:ConnEp A connection endpoint abstraction.
 
 		 
 		 
 		 ├
 		[V] nw:If The interface information.
 
 		 
 		 
 		 
 		 ├
 		[V] nw:LogicalIf A logical interface abstraction.
 
 		 
 		 
 		 
 		 
 		 ├
 		[V] nw:ProtIf A protocol interface abstraction.
 
 		 
 		 
 		 
 		 
 		 
 		 ├
 		[V] l2:ProtIf A protocol interface abstraction.
 
 		 
 		 
 		 
 		 
 		 
 		 
 		 ├
 		[V] macsec:AIf  This object holds macsec information that is operated at a interface level
 
 		 
 		 
 		 
 		 
 		 
 		 
 		 
 		 ├
 		[V] macsec:FabIf 


Events


Faults


Fsms


Properties Summary
Defined in: macsec:FabIf
nw:IfId
          base:IfIndex 		id  (macsec:FabIf:id)
           Overrides:nw:If:id
           An object identifier.
Defined in: macsec:AIf
macsec:CipherSuite
          scalar:Enum8 		cipherSuite  (macsec:AIf:cipherSuite)
           Cipher Suite
macsec:ConfOffset
          scalar:Enum8 		confOffset  (macsec:AIf:confOffset)
           Confidentiality Offset
string:Basic keyChain  (macsec:AIf:keyChain)
           Key Chain Name
macsec:KeySvrPrio
          scalar:UByte 		keySvrPrio  (macsec:AIf:keySvrPrio)
           Key Server Priority
macsec:MkaIfNegSt
          scalar:Enum8 		mkaNegSt  (macsec:AIf:mkaNegSt)
           MKA negotiation interface status information
macsec:OperSt
          scalar:Enum8 		operSt  (macsec:AIf:operSt)
           The runtime state of the object or policy.
macsec:OperStQual
          scalar:Enum8 		operStQual  (macsec:AIf:operStQual)
           The chassis operational status qualifier.
macsec:ReplayWindow
          scalar:Uint32 		replayWindow  (macsec:AIf:replayWindow)
           Replay Protection Window Size
macsec:SakExpiryTime
          scalar:Uint32 		sakExpiryTime  (macsec:AIf:sakExpiryTime)
           SAK expiry time
macsec:SecPolicy
          scalar:Enum8 		secPolicy  (macsec:AIf:secPolicy)
           Security Policy
macsec:VlanTagCtrl
          scalar:Enum8 		vlanTagCtrl  (macsec:AIf:vlanTagCtrl)
           Vlan Tag Ctrl
Defined in: nw:ProtIf
nw:IfAdminSt
          scalar:Enum8 		adminSt  (nw:ProtIf:adminSt)
           The administrative state of the object or policy.
Defined in: nw:If
naming:Descr
          string:Basic 		descr  (nw:If:descr)
          
Defined in: nw:Ep
naming:Name
          string:Basic 		name  (nw:Ep:name)
           Overrides:nw:Conn:name
           The name of the object.
Defined in: mo:Resolvable
mo:Owner
          scalar:Enum8 		lcOwn  (mo:Resolvable:lcOwn)
           A value that indicates how this object was created. For internal use only.
Defined in: mo:TopProps
mo:ModificationChildAction
          scalar:Bitmask32 		childAction  (mo:TopProps:childAction)
           Delete or ignore. For internal use only.
reference:BinRef dn  (mo:TopProps:dn)
           A tag or metadata is a non-hierarchical keyword or term assigned to the fabric module.
reference:BinRN rn  (mo:TopProps:rn)
           Identifies an object from its siblings within the context of its parent object. The distinguished name contains a sequence of relative names.
mo:ModificationStatus
          scalar:Bitmask32 		status  (mo:TopProps:status)
           The upgrade status. This property is for internal use only.
Defined in: mo:Modifiable
mo:TStamp
          scalar:Date 		modTs  (mo:Modifiable:modTs)
           The time when this object was last modified.
Properties Detail

adminSt

Type: nw:IfAdminSt
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
The administrative state of the object or policy.
Constants
enabled 1 Enabled Enabled
disabled 2 Disabled Disabled
DEFAULT enabled(1) Enabled Enabled




childAction

Type: mo:ModificationChildAction
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelChildAction
    Comments:
Delete or ignore. For internal use only.
Constants
deleteAll 16384u deleteAll NO COMMENTS
ignore 4096u ignore NO COMMENTS
deleteNonPresent 8192u deleteNonPresent NO COMMENTS
DEFAULT 0 --- This type is used to




cipherSuite

Type: macsec:CipherSuite
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
Cipher Suite
Constants
gcm-aes-128 1 128 bit GCM-AES Suite gcm-aes-128
gcm-aes-256 2 256 bit GCM-AES Suite gcm-aes-256
gcm-aes-xpn-128 3 128 bit GCM-AES Suite with Extended Packet Numbering gcm-aes-xpn-128
gcm-aes-xpn-256 4 256 bit GCM-AES Suite with Extended Packet Numbering gcm-aes-xpn-256
DEFAULT gcm-aes-xpn-256(4) 256 bit GCM-AES Suite with Extended Packet Numbering gcm-aes-xpn-256




confOffset

Type: macsec:ConfOffset
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
Confidentiality Offset
Constants
offset-0 1 Skip 0 bytes 0
offset-30 2 Skip 30 bytes 30
offset-50 3 Skip 50 bytes 50
DEFAULT offset-0(1) Skip 0 bytes 0




descr

Type: naming:Descr
Primitive Type: string:Basic

Like: naming:Described:descr
Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular
    Comments:


dn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelDn
    Comments:
A tag or metadata is a non-hierarchical keyword or term assigned to the fabric module.


id

Type: nw:IfId
Primitive Type: base:IfIndex

Overrides:nw:If:id

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular
    Comments:
An object identifier.


keyChain

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
Key Chain Name


keySvrPrio

Type: macsec:KeySvrPrio
Primitive Type: scalar:UByte

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
Key Server Priority
Constants
defaultValue 16 --- NO COMMENTS




lcOwn

Type: mo:Owner
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
A value that indicates how this object was created. For internal use only.
Constants
local 0 Local NO COMMENTS
policy 1 Policy NO COMMENTS
replica 2 Replica NO COMMENTS
resolveOnBehalf 3 ResolvedOnBehalf NO COMMENTS
implicit 4 Implicit NO COMMENTS
DEFAULT local(0) Local NO COMMENTS




mkaNegSt

Type: macsec:MkaIfNegSt
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular
    Comments:
MKA negotiation interface status information
Constants
if-neg-succ 0 MKA negotiation success on the interface Successful MKA negotition
rx-val-fail 1 MKPDUs Rx Validation Failed MKPDUs Rx Validation
rx-bad-peer-mn 2 MKPDUs Rx Bad Peer Message Number MKPDUs Rx Bad Peer MN
rx-non-recent-peerlist-mn 3 MKPDUs Rx Non Recent Peerlist Message Number MKPDUs Rx Non Recent Peerlist MN
rx-drop-sakuse-kn-mismatch 4 MKPDUs Rx Drop SAKUSE, KN mismatch MKPDUs Rx Drop SAKUSE, KN mismatch
rx-not-set 5 MKPDUs Rx Drop SAKUSE, Rx Not Set MKPDUs Rx Drop SAKUSE, Rx Not Set
rx-key-mi-mismatch 6 MKPDUs Rx Drop SAKUSE, Key Member Identifier mismatch MKPDUs Rx Drop SAKUSE, Key MI mismatch
rx-an-not-inuse 7 MKPDUs Rx Drop SAKUSE, Association Number not in use MKPDUs Rx Drop SAKUSE, AN Not in Use
ks-rx-tx-notset 8 MKPDUs Rx Drop SAKUSE, Key Server Rx/Tx Not Set MKPDUs Rx Drop SAKUSE, KS Rx/Tx Not Set
rx-ethertype-mismatch 9 MKPDUs Rx Drop, Ethertype Mismatch MKPDUs Rx Drop, Ethertype Mismatch
DEFAULT if-neg-succ(0) MKA negotiation success on the interface Successful MKA negotition




modTs

Type: mo:TStamp
Primitive Type: scalar:Date

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
The time when this object was last modified.
Constants
never 0ull never NO COMMENTS
DEFAULT never(0ull) never NO COMMENTS




name

Type: naming:Name
Primitive Type: string:Basic

Overrides:nw:Conn:name

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular
    Comments:
The name of the object.


operSt

Type: macsec:OperSt
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular
    Comments:
The runtime state of the object or policy.
Constants
up 1 Up up
down 2 Down down
DEFAULT down(2) Down down




operStQual

Type: macsec:OperStQual
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular
    Comments:
The chassis operational status qualifier.
Constants
up 1 Up up
admin-down 2 Administratively down Down administratively
if-down 3 Interface down Interface down
unsupported 4 Unsupported Unsupported
DEFAULT unsupported(4) Unsupported Unsupported




replayWindow

Type: macsec:ReplayWindow
Primitive Type: scalar:Uint32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
Replay Protection Window Size
Constants
defaultValue 148809600u --- NO COMMENTS




rn

Type: reference:BinRN

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRn
    Comments:
Identifies an object from its siblings within the context of its parent object. The distinguished name contains a sequence of relative names.


sakExpiryTime

Type: macsec:SakExpiryTime
Primitive Type: scalar:Uint32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
SAK expiry time
Constants
disabled 0u disabled NO COMMENTS
DEFAULT disabled(0u) disabled NO COMMENTS




secPolicy

Type: macsec:SecPolicy
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
Security Policy
Constants
must-secure 1 Must secure mode must-secure
should-secure 2 Should secure mode should-secure
DEFAULT must-secure(1) Must secure mode must-secure




status

Type: mo:ModificationStatus
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelStatus
    Comments:
The upgrade status. This property is for internal use only.
Constants
created 2u created In a setter method: specifies that an object should be created. An error is returned if the object already exists.
In the return value of a setter method: indicates that an object has been created.
modified 4u modified In a setter method: specifies that an object should be modified
In the return value of a setter method: indicates that an object has been modified.
deleted 8u deleted In a setter method: specifies that an object should be deleted.
In the return value of a setter method: indicates that an object has been deleted.
DEFAULT 0 --- This type controls the life cycle of objects passed in the XML API.

When used in a setter method (such as configConfMo), the ModificationStatus specifies whether an object should be created, modified, deleted or removed.
In the return value of a setter method, the ModificationStatus indicates the actual operation that was performed. For example, the ModificationStatus is set to "created" if the object was created. The ModificationStatus is not set if the object was neither created, modified, deleted or removed.

When invoking a setter method, the ModificationStatus is optional:
If a setter method such as configConfMo is invoked and the ModificationStatus is not set, the system automatically determines if the object should be created or modified.





vlanTagCtrl

Type: macsec:VlanTagCtrl
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
Vlan Tag Ctrl
Constants
skip-0 0 Skip 0 VlanTag 0
skip-1 1 Skip 1 VlanTag 1
skip-2 2 Skip 2 VlanTags 2
skip-3 3 Skip 3 VlanTags 3
DEFAULT skip-0(0) Skip 0 VlanTag 0






Overview  Naming  Diagram  Containers  Contained  Inheritance  Events  Faults  FSMs  Properties Summary  Properties Detail