Class macsec:If (CONCRETE)

Class ID:9901
Class Label: macsec Interface
Encrypted: false - Exportable: false - Persistent: true - Configurable: false - Subject to Quota: Disabled - Abstraction Layer: Concrete Model - APIC NX Processing: Disabled
Write Access: [NON CONFIGURABLE]
Read Access: [access-protocol, admin, fabric-protocol, tenant-ext-protocol, tenant-protocol]
Creatable/Deletable: no (see Container Mos for details)
Possible Semantic Scopes: Infra, Fabric,
Semantic Scope Evaluation Rule: Parent
Monitoring Policy Source: Relation
Monitoring Flags : [ IsObservable: true, HasStats: false, HasFaults: true, HasHealth: true, HasEventRules: false ]

RN FORMAT: if-{[id]}

    [1] PREFIX=if- PROPERTY = id




DN FORMAT: 

[0] topology/pod-{id}/node-{id}/sys/macsec/inst/if-{[id]}

[1] sys/macsec/inst/if-{[id]}

                

Diagram

Super Mo: macsec:AIf, Container Mos: macsec:Inst (deletable:no), Contained Mos: macsec:CAStats, macsec:IfStats, macsec:Mgmt, Relations From: nw:PathEp, Relations To: l1:EthIf, mgmt:MgmtIf, Relations: l2:RsEthIf, l2:RsMgmtIf, nw:RtPathToIf,

Containers Hierarchies

top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ fabric:Topology The root for IFC topology.    ├ fabric:Pod A pod.      ├ fabric:Node The root node for the APIC.        ├ top:System The APIC uses a policy model to combine data into a health score. Health scores can be aggregated for a variety of areas such as for the infrastructure, applications, or services. The category health score is calculated using a Lp -Norm formula. The health score penalty equals 100 minus the health score. The health score penalty represents the overall health score penalties of a set of MOs that belong to a given category and are children or direc...          ├ macsec:Entity  Holds macsec control plane entity information            ├ macsec:Inst  This objects hold per macsec instance information. There is only one instance of macsec running in the system today              ├ macsec:If  top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ top:System The APIC uses a policy model to combine data into a health score. Health scores can be aggregated for a variety of areas such as for the infrastructure, applications, or services. The category health score is calculated using a Lp -Norm formula. The health score penalty equals 100 minus the health score. The health score penalty represents the overall health score penalties of a set of MOs that belong to a given category and are children or direc...    ├ macsec:Entity  Holds macsec control plane entity information      ├ macsec:Inst  This objects hold per macsec instance information. There is only one instance of macsec running in the system today        ├ macsec:If

Contained Hierarchy

macsec:If   ├ fault:Counts An immutable object that provides the number of critical, major, minor, and warning faults raised on its parent object and its subtree.  ├ fault:Inst Contains detailed information of a fault. This object is attached as a child of the object on which the fault condition occurred. One instance object is created for each fault condition of the parent object. A fault instance object is identified by a fault code.    ├ aaa:RbacAnnotation  RbacAnnotation is used for capturing rbac properties of any apic object Objects can append rbacannotations as Object->RbacAnnotation which is then checked for domain eligibility    ├ tag:Annotation     ├ tag:Tag   ├ health:Inst A base class for a health score instance.(Switch only)  ├ l2:RsEthIf A source relation to an L1 interface. This is an internal object.  ├ l2:RsMgmtIf  Association to the corresponding mgmt::MgmtIf  ├ macsec:CAStats     ├ aaa:RbacAnnotation  RbacAnnotation is used for capturing rbac properties of any apic object Objects can append rbacannotations as Object->RbacAnnotation which is then checked for domain eligibility    ├ tag:Annotation     ├ tag:Tag   ├ macsec:IfStats  MACSEC MKA Interface Statistics    ├ aaa:RbacAnnotation  RbacAnnotation is used for capturing rbac properties of any apic object Objects can append rbacannotations as Object->RbacAnnotation which is then checked for domain eligibility    ├ tag:Annotation     ├ tag:Tag   ├ macsec:Mgmt     ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.  ├ nw:RtPathToIf A target relation to the interface information.

Inheritance

nw:Item Ignore.  ├ nw:Conn A connection abstraction.    ├ nw:Ep A static endpoint.      ├ nw:ConnEp A connection endpoint abstraction.        ├ nw:If The interface information.          ├ nw:LogicalIf A logical interface abstraction.            ├ nw:ProtIf A protocol interface abstraction.              ├ l2:ProtIf A protocol interface abstraction.                ├ macsec:AIf  This object holds macsec information that is operated at a interface level                  ├ macsec:If

                macsec:If:operStDown

                macsec:If:operStSessionNotSecured

                macsec:If:polConfigStConfigConflict

                

adminSt

Type: nw:IfAdminSt
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The administrative state of the object or policy.

cakName

Type: macsec:CakName
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Connectivity Association Key Name (CKN)

childAction

Type: mo:ModificationChildAction
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelChildAction

Delete or ignore. For internal use only.

cipherSuite

Type: macsec:CipherSuite
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Cipher Suite

cipherSuiteOper

Type: macsec:CipherSuite
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Cipher Suite Operational

confOffset

Type: macsec:ConfOffset
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Confidentiality Offset

confOffsetOper

Type: macsec:ConfOffset
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Confidentiality Offset Operational

descr

Type: naming:Descr
Primitive Type: string:Basic

Like: naming:Described:descr
Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular

dn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelDn

A tag or metadata is a non-hierarchical keyword or term assigned to the fabric module.

id

Type: nw:IfId
Primitive Type: base:IfIndex

Overrides:nw:If:id

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular

An object identifier.

keyChain

Type: kc:EntryName
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Key Chain Name

keySvrPrio

Type: macsec:KeySvrPrio
Primitive Type: scalar:UByte

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Key Server Priority

lastSakKeyTime

Type: macsec:Timestamp
Primitive Type: scalar:Date

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Last Secure Association Key (SAK) Key Time

latestSakAN

Type: macsec:AssocNum
Primitive Type: scalar:Uint16

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Latest Secure Association Key (SAK) Association Number

latestSakKI

Type: macsec:SakKiKn
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Latest Secure Association Key (SAK) KI

latestSakKN

Type: macsec:SakKiKn
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Latest Secure Association Key (SAK) KN

lcOwn

Type: mo:Owner
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

A value that indicates how this object was created. For internal use only.

mac

Type: address:MAC

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

The MAC address.

mbrId

Type: macsec:MbrId
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Member Identifier

mkaNegSt

Type: macsec:MkaIfNegSt
Primitive Type: scalar:Enum16

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

MKA negotiation interface status information

modTs

Type: mo:TStamp
Primitive Type: scalar:Date

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The time when this object was last modified.

monPolDn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The monitoring policy attached to this observable object.

msgNumber

Type: macsec:MsgNum
Primitive Type: scalar:Uint32

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Message Number (MN)

name

Type: naming:Name
Primitive Type: string:Basic

Overrides:nw:Conn:name

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular

The name of the object.

operSt

Type: macsec:OperSt
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

The runtime state of the object or policy.

operStQual

Type: macsec:OperStQual
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

The chassis operational status qualifier.

peerCount

Type: nw:Counter64
Primitive Type: scalar:Uint64

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Peer Count

polConfigStatus

Type: macsec:PolConfigStatus
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Policy Config status

policyDn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

A property that indicates if the heartbeat has been delayed on this node.

portId

Type: l4:Port
Primitive Type: scalar:Uint16

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

The port identifier.

replayWindow

Type: macsec:ReplayWindow
Primitive Type: scalar:Uint32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Replay Protection Window Size

rn

Type: reference:BinRN

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRn

Identifies an object from its siblings within the context of its parent object. The distinguished name contains a sequence of relative names.

sakExpiryTime

Type: macsec:SakExpiryTime
Primitive Type: scalar:Uint32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

SAK expiry time

sakStatus

Type: macsec:SakStatus
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Secure Association Key (SAK) Status

secPolicy

Type: macsec:SecPolicy
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Security Policy

sessOperSt

Type: macsec:SessOperSt
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Session Status

srvStatusFlags

Type: macsec:SrvFlags
Primitive Type: scalar:Bitmask8

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Server Status Flags

status

Type: mo:ModificationStatus
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelStatus

The upgrade status. This property is for internal use only.

txSCI

Type: macsec:TxSCI
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Tx-SCI (Secure Channel Identifier)

txSSCI

Type: macsec:TxSSCI
Primitive Type: scalar:Uint32

Units: null
Encrypted: false
Access: oper
Category: TopLevelRegular

Tx-SSCI (Short Secure Channel Identifier)

vlanTagCtrl

Type: macsec:VlanTagCtrl
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Vlan Tag Ctrl