Class ipsec:StSecAssoc (CONCRETE)

Class ID:10700
Class Label: Static Security Association Policy
Encrypted: false - Exportable: false - Persistent: true - Configurable: false - Subject to Quota: Disabled - Abstraction Layer: Concrete Model - APIC NX Processing: Disabled
Write Access: [NON CONFIGURABLE]
Read Access: [access-protocol-l3, admin, fabric-protocol-l3, tenant-ext-protocol-l3, tenant-protocol-l3]
Creatable/Deletable: yes (see Container Mos for details)
Semantic Scope: Fabric
Semantic Scope Evaluation Rule: Parent
Monitoring Policy Source: Parent
Monitoring Flags : [ IsObservable: false, HasStats: false, HasFaults: false, HasHealth: false, HasEventRules: false ]

This object holds Static Security association policy information

Naming Rules
RN FORMAT: sa-{spi}

    [1] PREFIX=sa- PROPERTY = spi




DN FORMAT: 

[0] topology/pod-{id}/node-{id}/sys/ipsec/inst/sa-{spi}

[1] sys/ipsec/inst/sa-{spi}

                


Diagram

Super Mo: ipsec:SecAssoc,
Container Mos: ipsec:Inst (deletable:yes),
Contained Mos: ipsec:AuthP, ipsec:EncrP,
Relations From: ospfv3:Area, ospfv3:Dom, ospfv3:If,
Relations: ipsec:RtAreaSecAssocAtt, ipsec:RtDomSecAssocAtt, ipsec:RtIfSecAssocAtt,


Containers Hierarchies
[V] top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.
 ├
[V] fabric:Topology The root for IFC topology.
 
 ├
[V] fabric:Pod A pod.
 
 
 ├
[V] fabric:Node The root node for the APIC.
 
 
 
 ├
[V] top:System The APIC uses a policy model to combine data into a health score. Health scores can be aggregated for a variety of areas such as for the infrastructure, applications, or services. The category health score is calculated using a Lp -Norm formula. The health score penalty equals 100 minus the health score. The health score penalty represents the overall health score penalties of a set of MOs that belong to a given category and are children or direc...
 
 
 
 
 ├
[V] ipsec:Entity  Holds IPSec entity information
 
 
 
 
 
 ├
[V] ipsec:Inst  This objects holds IPSEC instance information. There is only one instance of IPSEC supported currently
 
 
 
 
 
 
 ├
[V] ipsec:StSecAssoc  This object holds Static Security association policy information
[V] top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.
 ├
[V] top:System The APIC uses a policy model to combine data into a health score. Health scores can be aggregated for a variety of areas such as for the infrastructure, applications, or services. The category health score is calculated using a Lp -Norm formula. The health score penalty equals 100 minus the health score. The health score penalty represents the overall health score penalties of a set of MOs that belong to a given category and are children or direc...
 
 ├
[V] ipsec:Entity  Holds IPSec entity information
 
 
 ├
[V] ipsec:Inst  This objects holds IPSEC instance information. There is only one instance of IPSEC supported currently
 
 
 
 ├
[V] ipsec:StSecAssoc  This object holds Static Security association policy information


Contained Hierarchy
[V] ipsec:StSecAssoc  This object holds Static Security association policy information
 ├
[V] ipsec:AuthP  Authentication Policy assocaited to the SA
 ├
[V] ipsec:EncrP  Encryption Policy for ESP
 ├
[V] ipsec:RtAreaSecAssocAtt  ipsec SA
 ├
[V] ipsec:RtDomSecAssocAtt  ipsec SA
 ├
[V] ipsec:RtIfSecAssocAtt  ipsec SA


Inheritance
[V] ipsec:SecAssoc  This object holds Security association policy information
 ├
[V] ipsec:StSecAssoc  This object holds Static Security association policy information


Events
                


Faults
                


Fsms
                


Properties Summary
Defined in: ipsec:StSecAssoc
ipsec:Spi
          scalar:Uint32
spi  (ipsec:StSecAssoc:spi)
           Overrides:ipsec:SecAssoc:spi
           NO COMMENTS
Defined in: ipsec:SecAssoc
ipsec:Proto
          scalar:Enum8
proto  (ipsec:SecAssoc:proto)
           The list of protocols to match.
Defined in: mo:Resolvable
mo:Owner
          scalar:Enum8
lcOwn  (mo:Resolvable:lcOwn)
           A value that indicates how this object was created. For internal use only.
Defined in: mo:Modifiable
mo:TStamp
          scalar:Date
modTs  (mo:Modifiable:modTs)
           The time when this object was last modified.
Defined in: mo:TopProps
mo:ModificationChildAction
          scalar:Bitmask32
childAction  (mo:TopProps:childAction)
           Delete or ignore. For internal use only.
reference:BinRef dn  (mo:TopProps:dn)
           A tag or metadata is a non-hierarchical keyword or term assigned to the fabric module.
reference:BinRN rn  (mo:TopProps:rn)
           Identifies an object from its siblings within the context of its parent object. The distinguished name contains a sequence of relative names.
mo:ModificationStatus
          scalar:Bitmask32
status  (mo:TopProps:status)
           The upgrade status. This property is for internal use only.
Properties Detail

childAction

Type: mo:ModificationChildAction
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelChildAction
    Comments:
Delete or ignore. For internal use only.
Constants
deleteAll 16384u deleteAll NO COMMENTS
ignore 4096u ignore NO COMMENTS
deleteNonPresent 8192u deleteNonPresent NO COMMENTS
DEFAULT 0 --- This type is used to





dn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelDn
    Comments:
A tag or metadata is a non-hierarchical keyword or term assigned to the fabric module.



lcOwn

Type: mo:Owner
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
A value that indicates how this object was created. For internal use only.
Constants
local 0 Local NO COMMENTS
policy 1 Policy NO COMMENTS
replica 2 Replica NO COMMENTS
resolveOnBehalf 3 ResolvedOnBehalf NO COMMENTS
implicit 4 Implicit NO COMMENTS
DEFAULT local(0) Local NO COMMENTS





modTs

Type: mo:TStamp
Primitive Type: scalar:Date

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
The time when this object was last modified.
Constants
never 0ull never NO COMMENTS
DEFAULT never(0ull) never NO COMMENTS





proto

Type: ipsec:Proto
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular
    Comments:
The list of protocols to match.
Constants
ah 0 Authentication Header Authentication Header
esp 1 Encapsulating Security Payload ESP
DEFAULT ah(0) Authentication Header Authentication Header





rn

Type: reference:BinRN

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRn
    Comments:
Identifies an object from its siblings within the context of its parent object. The distinguished name contains a sequence of relative names.



spi

Type: ipsec:Spi
Primitive Type: scalar:Uint32

Overrides:ipsec:SecAssoc:spi
Units: null Encrypted: false Naming Property -- [NAMING RULES] Access: naming Category: TopLevelRegular
    Comments:
NO COMMENTS
Constants
defaultValue 256u --- NO COMMENTS





status

Type: mo:ModificationStatus
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelStatus
    Comments:
The upgrade status. This property is for internal use only.
Constants
created 2u created In a setter method: specifies that an object should be created. An error is returned if the object already exists.
In the return value of a setter method: indicates that an object has been created.
modified 4u modified In a setter method: specifies that an object should be modified
In the return value of a setter method: indicates that an object has been modified.
deleted 8u deleted In a setter method: specifies that an object should be deleted.
In the return value of a setter method: indicates that an object has been deleted.
DEFAULT 0 --- This type controls the life cycle of objects passed in the XML API.

When used in a setter method (such as configConfMo), the ModificationStatus specifies whether an object should be created, modified, deleted or removed.
In the return value of a setter method, the ModificationStatus indicates the actual operation that was performed. For example, the ModificationStatus is set to "created" if the object was created. The ModificationStatus is not set if the object was neither created, modified, deleted or removed.

When invoking a setter method, the ModificationStatus is optional:
If a setter method such as configConfMo is invoked and the ModificationStatus is not set, the system automatically determines if the object should be created or modified.