intersight.FabricMacSecPolicy
Explore with Pulumi AI
A placeholder for MACSec (Media Access Control Security) configuration parameters, Primary/Fallback key chain and EAPol (Extensible Authentication Protocol over LAN) configurations.
Create FabricMacSecPolicy Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new FabricMacSecPolicy(name: string, args?: FabricMacSecPolicyArgs, opts?: CustomResourceOptions);
@overload
def FabricMacSecPolicy(resource_name: str,
args: Optional[FabricMacSecPolicyArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def FabricMacSecPolicy(resource_name: str,
opts: Optional[ResourceOptions] = None,
account_moid: Optional[str] = None,
additional_properties: Optional[str] = None,
ancestors: Optional[Sequence[FabricMacSecPolicyAncestorArgs]] = None,
cipher_suite: Optional[str] = None,
class_id: Optional[str] = None,
confidentiality_offset: Optional[str] = None,
create_time: Optional[str] = None,
description: Optional[str] = None,
domain_group_moid: Optional[str] = None,
fabric_mac_sec_policy_id: Optional[str] = None,
fallback_key_chains: Optional[Sequence[FabricMacSecPolicyFallbackKeyChainArgs]] = None,
include_icv_indicator: Optional[bool] = None,
key_server_priority: Optional[float] = None,
mac_sec_ea_pols: Optional[Sequence[FabricMacSecPolicyMacSecEaPolArgs]] = None,
mod_time: Optional[str] = None,
moid: Optional[str] = None,
name: Optional[str] = None,
object_type: Optional[str] = None,
organizations: Optional[Sequence[FabricMacSecPolicyOrganizationArgs]] = None,
owners: Optional[Sequence[str]] = None,
parents: Optional[Sequence[FabricMacSecPolicyParentArgs]] = None,
permission_resources: Optional[Sequence[FabricMacSecPolicyPermissionResourceArgs]] = None,
primary_key_chains: Optional[Sequence[FabricMacSecPolicyPrimaryKeyChainArgs]] = None,
replay_window_size: Optional[float] = None,
sak_expiry_time: Optional[float] = None,
security_policy: Optional[str] = None,
shared_scope: Optional[str] = None,
tags: Optional[Sequence[FabricMacSecPolicyTagArgs]] = None,
version_contexts: Optional[Sequence[FabricMacSecPolicyVersionContextArgs]] = None)
func NewFabricMacSecPolicy(ctx *Context, name string, args *FabricMacSecPolicyArgs, opts ...ResourceOption) (*FabricMacSecPolicy, error)
public FabricMacSecPolicy(string name, FabricMacSecPolicyArgs? args = null, CustomResourceOptions? opts = null)
public FabricMacSecPolicy(String name, FabricMacSecPolicyArgs args)
public FabricMacSecPolicy(String name, FabricMacSecPolicyArgs args, CustomResourceOptions options)
type: intersight:FabricMacSecPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args FabricMacSecPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args FabricMacSecPolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args FabricMacSecPolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args FabricMacSecPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args FabricMacSecPolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var fabricMacSecPolicyResource = new Intersight.FabricMacSecPolicy("fabricMacSecPolicyResource", new()
{
AccountMoid = "string",
AdditionalProperties = "string",
Ancestors = new[]
{
new Intersight.Inputs.FabricMacSecPolicyAncestorArgs
{
AdditionalProperties = "string",
ClassId = "string",
Moid = "string",
ObjectType = "string",
Selector = "string",
},
},
CipherSuite = "string",
ClassId = "string",
ConfidentialityOffset = "string",
CreateTime = "string",
Description = "string",
DomainGroupMoid = "string",
FabricMacSecPolicyId = "string",
FallbackKeyChains = new[]
{
new Intersight.Inputs.FabricMacSecPolicyFallbackKeyChainArgs
{
AdditionalProperties = "string",
ClassId = "string",
Name = "string",
ObjectType = "string",
SecKeys = new[]
{
new Intersight.Inputs.FabricMacSecPolicyFallbackKeyChainSecKeyArgs
{
AdditionalProperties = "string",
ClassId = "string",
CryptographicAlgorithm = "string",
Id = "string",
IsOctetStringSet = false,
KeyType = "string",
ObjectType = "string",
OctetString = "string",
SendLifetimeDuration = 0,
SendLifetimeEndTime = "string",
SendLifetimeInfinite = false,
SendLifetimeStartTime = "string",
SendLifetimeTimeZone = "string",
SendLifetimeUnlimited = false,
},
},
},
},
IncludeIcvIndicator = false,
KeyServerPriority = 0,
MacSecEaPols = new[]
{
new Intersight.Inputs.FabricMacSecPolicyMacSecEaPolArgs
{
AdditionalProperties = "string",
ClassId = "string",
EaPolEthertype = "string",
EaPolMacAddress = "string",
ObjectType = "string",
},
},
ModTime = "string",
Moid = "string",
Name = "string",
ObjectType = "string",
Organizations = new[]
{
new Intersight.Inputs.FabricMacSecPolicyOrganizationArgs
{
AdditionalProperties = "string",
ClassId = "string",
Moid = "string",
ObjectType = "string",
Selector = "string",
},
},
Owners = new[]
{
"string",
},
Parents = new[]
{
new Intersight.Inputs.FabricMacSecPolicyParentArgs
{
AdditionalProperties = "string",
ClassId = "string",
Moid = "string",
ObjectType = "string",
Selector = "string",
},
},
PermissionResources = new[]
{
new Intersight.Inputs.FabricMacSecPolicyPermissionResourceArgs
{
AdditionalProperties = "string",
ClassId = "string",
Moid = "string",
ObjectType = "string",
Selector = "string",
},
},
PrimaryKeyChains = new[]
{
new Intersight.Inputs.FabricMacSecPolicyPrimaryKeyChainArgs
{
AdditionalProperties = "string",
ClassId = "string",
Name = "string",
ObjectType = "string",
SecKeys = new[]
{
new Intersight.Inputs.FabricMacSecPolicyPrimaryKeyChainSecKeyArgs
{
AdditionalProperties = "string",
ClassId = "string",
CryptographicAlgorithm = "string",
Id = "string",
IsOctetStringSet = false,
KeyType = "string",
ObjectType = "string",
OctetString = "string",
SendLifetimeDuration = 0,
SendLifetimeEndTime = "string",
SendLifetimeInfinite = false,
SendLifetimeStartTime = "string",
SendLifetimeTimeZone = "string",
SendLifetimeUnlimited = false,
},
},
},
},
ReplayWindowSize = 0,
SakExpiryTime = 0,
SecurityPolicy = "string",
SharedScope = "string",
Tags = new[]
{
new Intersight.Inputs.FabricMacSecPolicyTagArgs
{
AdditionalProperties = "string",
Key = "string",
Value = "string",
},
},
VersionContexts = new[]
{
new Intersight.Inputs.FabricMacSecPolicyVersionContextArgs
{
AdditionalProperties = "string",
ClassId = "string",
InterestedMos = new[]
{
new Intersight.Inputs.FabricMacSecPolicyVersionContextInterestedMoArgs
{
AdditionalProperties = "string",
ClassId = "string",
Moid = "string",
ObjectType = "string",
Selector = "string",
},
},
MarkedForDeletion = false,
NrVersion = "string",
ObjectType = "string",
RefMos = new[]
{
new Intersight.Inputs.FabricMacSecPolicyVersionContextRefMoArgs
{
AdditionalProperties = "string",
ClassId = "string",
Moid = "string",
ObjectType = "string",
Selector = "string",
},
},
Timestamp = "string",
VersionType = "string",
},
},
});
example, err := intersight.NewFabricMacSecPolicy(ctx, "fabricMacSecPolicyResource", &intersight.FabricMacSecPolicyArgs{
AccountMoid: pulumi.String("string"),
AdditionalProperties: pulumi.String("string"),
Ancestors: intersight.FabricMacSecPolicyAncestorArray{
&intersight.FabricMacSecPolicyAncestorArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
Moid: pulumi.String("string"),
ObjectType: pulumi.String("string"),
Selector: pulumi.String("string"),
},
},
CipherSuite: pulumi.String("string"),
ClassId: pulumi.String("string"),
ConfidentialityOffset: pulumi.String("string"),
CreateTime: pulumi.String("string"),
Description: pulumi.String("string"),
DomainGroupMoid: pulumi.String("string"),
FabricMacSecPolicyId: pulumi.String("string"),
FallbackKeyChains: intersight.FabricMacSecPolicyFallbackKeyChainArray{
&intersight.FabricMacSecPolicyFallbackKeyChainArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
Name: pulumi.String("string"),
ObjectType: pulumi.String("string"),
SecKeys: intersight.FabricMacSecPolicyFallbackKeyChainSecKeyArray{
&intersight.FabricMacSecPolicyFallbackKeyChainSecKeyArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
CryptographicAlgorithm: pulumi.String("string"),
Id: pulumi.String("string"),
IsOctetStringSet: pulumi.Bool(false),
KeyType: pulumi.String("string"),
ObjectType: pulumi.String("string"),
OctetString: pulumi.String("string"),
SendLifetimeDuration: pulumi.Float64(0),
SendLifetimeEndTime: pulumi.String("string"),
SendLifetimeInfinite: pulumi.Bool(false),
SendLifetimeStartTime: pulumi.String("string"),
SendLifetimeTimeZone: pulumi.String("string"),
SendLifetimeUnlimited: pulumi.Bool(false),
},
},
},
},
IncludeIcvIndicator: pulumi.Bool(false),
KeyServerPriority: pulumi.Float64(0),
MacSecEaPols: intersight.FabricMacSecPolicyMacSecEaPolArray{
&intersight.FabricMacSecPolicyMacSecEaPolArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
EaPolEthertype: pulumi.String("string"),
EaPolMacAddress: pulumi.String("string"),
ObjectType: pulumi.String("string"),
},
},
ModTime: pulumi.String("string"),
Moid: pulumi.String("string"),
Name: pulumi.String("string"),
ObjectType: pulumi.String("string"),
Organizations: intersight.FabricMacSecPolicyOrganizationArray{
&intersight.FabricMacSecPolicyOrganizationArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
Moid: pulumi.String("string"),
ObjectType: pulumi.String("string"),
Selector: pulumi.String("string"),
},
},
Owners: pulumi.StringArray{
pulumi.String("string"),
},
Parents: intersight.FabricMacSecPolicyParentArray{
&intersight.FabricMacSecPolicyParentArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
Moid: pulumi.String("string"),
ObjectType: pulumi.String("string"),
Selector: pulumi.String("string"),
},
},
PermissionResources: intersight.FabricMacSecPolicyPermissionResourceArray{
&intersight.FabricMacSecPolicyPermissionResourceArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
Moid: pulumi.String("string"),
ObjectType: pulumi.String("string"),
Selector: pulumi.String("string"),
},
},
PrimaryKeyChains: intersight.FabricMacSecPolicyPrimaryKeyChainArray{
&intersight.FabricMacSecPolicyPrimaryKeyChainArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
Name: pulumi.String("string"),
ObjectType: pulumi.String("string"),
SecKeys: intersight.FabricMacSecPolicyPrimaryKeyChainSecKeyArray{
&intersight.FabricMacSecPolicyPrimaryKeyChainSecKeyArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
CryptographicAlgorithm: pulumi.String("string"),
Id: pulumi.String("string"),
IsOctetStringSet: pulumi.Bool(false),
KeyType: pulumi.String("string"),
ObjectType: pulumi.String("string"),
OctetString: pulumi.String("string"),
SendLifetimeDuration: pulumi.Float64(0),
SendLifetimeEndTime: pulumi.String("string"),
SendLifetimeInfinite: pulumi.Bool(false),
SendLifetimeStartTime: pulumi.String("string"),
SendLifetimeTimeZone: pulumi.String("string"),
SendLifetimeUnlimited: pulumi.Bool(false),
},
},
},
},
ReplayWindowSize: pulumi.Float64(0),
SakExpiryTime: pulumi.Float64(0),
SecurityPolicy: pulumi.String("string"),
SharedScope: pulumi.String("string"),
Tags: intersight.FabricMacSecPolicyTagArray{
&intersight.FabricMacSecPolicyTagArgs{
AdditionalProperties: pulumi.String("string"),
Key: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
VersionContexts: intersight.FabricMacSecPolicyVersionContextArray{
&intersight.FabricMacSecPolicyVersionContextArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
InterestedMos: intersight.FabricMacSecPolicyVersionContextInterestedMoArray{
&intersight.FabricMacSecPolicyVersionContextInterestedMoArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
Moid: pulumi.String("string"),
ObjectType: pulumi.String("string"),
Selector: pulumi.String("string"),
},
},
MarkedForDeletion: pulumi.Bool(false),
NrVersion: pulumi.String("string"),
ObjectType: pulumi.String("string"),
RefMos: intersight.FabricMacSecPolicyVersionContextRefMoArray{
&intersight.FabricMacSecPolicyVersionContextRefMoArgs{
AdditionalProperties: pulumi.String("string"),
ClassId: pulumi.String("string"),
Moid: pulumi.String("string"),
ObjectType: pulumi.String("string"),
Selector: pulumi.String("string"),
},
},
Timestamp: pulumi.String("string"),
VersionType: pulumi.String("string"),
},
},
})
var fabricMacSecPolicyResource = new FabricMacSecPolicy("fabricMacSecPolicyResource", FabricMacSecPolicyArgs.builder()
.accountMoid("string")
.additionalProperties("string")
.ancestors(FabricMacSecPolicyAncestorArgs.builder()
.additionalProperties("string")
.classId("string")
.moid("string")
.objectType("string")
.selector("string")
.build())
.cipherSuite("string")
.classId("string")
.confidentialityOffset("string")
.createTime("string")
.description("string")
.domainGroupMoid("string")
.fabricMacSecPolicyId("string")
.fallbackKeyChains(FabricMacSecPolicyFallbackKeyChainArgs.builder()
.additionalProperties("string")
.classId("string")
.name("string")
.objectType("string")
.secKeys(FabricMacSecPolicyFallbackKeyChainSecKeyArgs.builder()
.additionalProperties("string")
.classId("string")
.cryptographicAlgorithm("string")
.id("string")
.isOctetStringSet(false)
.keyType("string")
.objectType("string")
.octetString("string")
.sendLifetimeDuration(0)
.sendLifetimeEndTime("string")
.sendLifetimeInfinite(false)
.sendLifetimeStartTime("string")
.sendLifetimeTimeZone("string")
.sendLifetimeUnlimited(false)
.build())
.build())
.includeIcvIndicator(false)
.keyServerPriority(0)
.macSecEaPols(FabricMacSecPolicyMacSecEaPolArgs.builder()
.additionalProperties("string")
.classId("string")
.eaPolEthertype("string")
.eaPolMacAddress("string")
.objectType("string")
.build())
.modTime("string")
.moid("string")
.name("string")
.objectType("string")
.organizations(FabricMacSecPolicyOrganizationArgs.builder()
.additionalProperties("string")
.classId("string")
.moid("string")
.objectType("string")
.selector("string")
.build())
.owners("string")
.parents(FabricMacSecPolicyParentArgs.builder()
.additionalProperties("string")
.classId("string")
.moid("string")
.objectType("string")
.selector("string")
.build())
.permissionResources(FabricMacSecPolicyPermissionResourceArgs.builder()
.additionalProperties("string")
.classId("string")
.moid("string")
.objectType("string")
.selector("string")
.build())
.primaryKeyChains(FabricMacSecPolicyPrimaryKeyChainArgs.builder()
.additionalProperties("string")
.classId("string")
.name("string")
.objectType("string")
.secKeys(FabricMacSecPolicyPrimaryKeyChainSecKeyArgs.builder()
.additionalProperties("string")
.classId("string")
.cryptographicAlgorithm("string")
.id("string")
.isOctetStringSet(false)
.keyType("string")
.objectType("string")
.octetString("string")
.sendLifetimeDuration(0)
.sendLifetimeEndTime("string")
.sendLifetimeInfinite(false)
.sendLifetimeStartTime("string")
.sendLifetimeTimeZone("string")
.sendLifetimeUnlimited(false)
.build())
.build())
.replayWindowSize(0)
.sakExpiryTime(0)
.securityPolicy("string")
.sharedScope("string")
.tags(FabricMacSecPolicyTagArgs.builder()
.additionalProperties("string")
.key("string")
.value("string")
.build())
.versionContexts(FabricMacSecPolicyVersionContextArgs.builder()
.additionalProperties("string")
.classId("string")
.interestedMos(FabricMacSecPolicyVersionContextInterestedMoArgs.builder()
.additionalProperties("string")
.classId("string")
.moid("string")
.objectType("string")
.selector("string")
.build())
.markedForDeletion(false)
.nrVersion("string")
.objectType("string")
.refMos(FabricMacSecPolicyVersionContextRefMoArgs.builder()
.additionalProperties("string")
.classId("string")
.moid("string")
.objectType("string")
.selector("string")
.build())
.timestamp("string")
.versionType("string")
.build())
.build());
fabric_mac_sec_policy_resource = intersight.FabricMacSecPolicy("fabricMacSecPolicyResource",
account_moid="string",
additional_properties="string",
ancestors=[{
"additional_properties": "string",
"class_id": "string",
"moid": "string",
"object_type": "string",
"selector": "string",
}],
cipher_suite="string",
class_id="string",
confidentiality_offset="string",
create_time="string",
description="string",
domain_group_moid="string",
fabric_mac_sec_policy_id="string",
fallback_key_chains=[{
"additional_properties": "string",
"class_id": "string",
"name": "string",
"object_type": "string",
"sec_keys": [{
"additional_properties": "string",
"class_id": "string",
"cryptographic_algorithm": "string",
"id": "string",
"is_octet_string_set": False,
"key_type": "string",
"object_type": "string",
"octet_string": "string",
"send_lifetime_duration": 0,
"send_lifetime_end_time": "string",
"send_lifetime_infinite": False,
"send_lifetime_start_time": "string",
"send_lifetime_time_zone": "string",
"send_lifetime_unlimited": False,
}],
}],
include_icv_indicator=False,
key_server_priority=0,
mac_sec_ea_pols=[{
"additional_properties": "string",
"class_id": "string",
"ea_pol_ethertype": "string",
"ea_pol_mac_address": "string",
"object_type": "string",
}],
mod_time="string",
moid="string",
name="string",
object_type="string",
organizations=[{
"additional_properties": "string",
"class_id": "string",
"moid": "string",
"object_type": "string",
"selector": "string",
}],
owners=["string"],
parents=[{
"additional_properties": "string",
"class_id": "string",
"moid": "string",
"object_type": "string",
"selector": "string",
}],
permission_resources=[{
"additional_properties": "string",
"class_id": "string",
"moid": "string",
"object_type": "string",
"selector": "string",
}],
primary_key_chains=[{
"additional_properties": "string",
"class_id": "string",
"name": "string",
"object_type": "string",
"sec_keys": [{
"additional_properties": "string",
"class_id": "string",
"cryptographic_algorithm": "string",
"id": "string",
"is_octet_string_set": False,
"key_type": "string",
"object_type": "string",
"octet_string": "string",
"send_lifetime_duration": 0,
"send_lifetime_end_time": "string",
"send_lifetime_infinite": False,
"send_lifetime_start_time": "string",
"send_lifetime_time_zone": "string",
"send_lifetime_unlimited": False,
}],
}],
replay_window_size=0,
sak_expiry_time=0,
security_policy="string",
shared_scope="string",
tags=[{
"additional_properties": "string",
"key": "string",
"value": "string",
}],
version_contexts=[{
"additional_properties": "string",
"class_id": "string",
"interested_mos": [{
"additional_properties": "string",
"class_id": "string",
"moid": "string",
"object_type": "string",
"selector": "string",
}],
"marked_for_deletion": False,
"nr_version": "string",
"object_type": "string",
"ref_mos": [{
"additional_properties": "string",
"class_id": "string",
"moid": "string",
"object_type": "string",
"selector": "string",
}],
"timestamp": "string",
"version_type": "string",
}])
const fabricMacSecPolicyResource = new intersight.FabricMacSecPolicy("fabricMacSecPolicyResource", {
accountMoid: "string",
additionalProperties: "string",
ancestors: [{
additionalProperties: "string",
classId: "string",
moid: "string",
objectType: "string",
selector: "string",
}],
cipherSuite: "string",
classId: "string",
confidentialityOffset: "string",
createTime: "string",
description: "string",
domainGroupMoid: "string",
fabricMacSecPolicyId: "string",
fallbackKeyChains: [{
additionalProperties: "string",
classId: "string",
name: "string",
objectType: "string",
secKeys: [{
additionalProperties: "string",
classId: "string",
cryptographicAlgorithm: "string",
id: "string",
isOctetStringSet: false,
keyType: "string",
objectType: "string",
octetString: "string",
sendLifetimeDuration: 0,
sendLifetimeEndTime: "string",
sendLifetimeInfinite: false,
sendLifetimeStartTime: "string",
sendLifetimeTimeZone: "string",
sendLifetimeUnlimited: false,
}],
}],
includeIcvIndicator: false,
keyServerPriority: 0,
macSecEaPols: [{
additionalProperties: "string",
classId: "string",
eaPolEthertype: "string",
eaPolMacAddress: "string",
objectType: "string",
}],
modTime: "string",
moid: "string",
name: "string",
objectType: "string",
organizations: [{
additionalProperties: "string",
classId: "string",
moid: "string",
objectType: "string",
selector: "string",
}],
owners: ["string"],
parents: [{
additionalProperties: "string",
classId: "string",
moid: "string",
objectType: "string",
selector: "string",
}],
permissionResources: [{
additionalProperties: "string",
classId: "string",
moid: "string",
objectType: "string",
selector: "string",
}],
primaryKeyChains: [{
additionalProperties: "string",
classId: "string",
name: "string",
objectType: "string",
secKeys: [{
additionalProperties: "string",
classId: "string",
cryptographicAlgorithm: "string",
id: "string",
isOctetStringSet: false,
keyType: "string",
objectType: "string",
octetString: "string",
sendLifetimeDuration: 0,
sendLifetimeEndTime: "string",
sendLifetimeInfinite: false,
sendLifetimeStartTime: "string",
sendLifetimeTimeZone: "string",
sendLifetimeUnlimited: false,
}],
}],
replayWindowSize: 0,
sakExpiryTime: 0,
securityPolicy: "string",
sharedScope: "string",
tags: [{
additionalProperties: "string",
key: "string",
value: "string",
}],
versionContexts: [{
additionalProperties: "string",
classId: "string",
interestedMos: [{
additionalProperties: "string",
classId: "string",
moid: "string",
objectType: "string",
selector: "string",
}],
markedForDeletion: false,
nrVersion: "string",
objectType: "string",
refMos: [{
additionalProperties: "string",
classId: "string",
moid: "string",
objectType: "string",
selector: "string",
}],
timestamp: "string",
versionType: "string",
}],
});
type: intersight:FabricMacSecPolicy
properties:
accountMoid: string
additionalProperties: string
ancestors:
- additionalProperties: string
classId: string
moid: string
objectType: string
selector: string
cipherSuite: string
classId: string
confidentialityOffset: string
createTime: string
description: string
domainGroupMoid: string
fabricMacSecPolicyId: string
fallbackKeyChains:
- additionalProperties: string
classId: string
name: string
objectType: string
secKeys:
- additionalProperties: string
classId: string
cryptographicAlgorithm: string
id: string
isOctetStringSet: false
keyType: string
objectType: string
octetString: string
sendLifetimeDuration: 0
sendLifetimeEndTime: string
sendLifetimeInfinite: false
sendLifetimeStartTime: string
sendLifetimeTimeZone: string
sendLifetimeUnlimited: false
includeIcvIndicator: false
keyServerPriority: 0
macSecEaPols:
- additionalProperties: string
classId: string
eaPolEthertype: string
eaPolMacAddress: string
objectType: string
modTime: string
moid: string
name: string
objectType: string
organizations:
- additionalProperties: string
classId: string
moid: string
objectType: string
selector: string
owners:
- string
parents:
- additionalProperties: string
classId: string
moid: string
objectType: string
selector: string
permissionResources:
- additionalProperties: string
classId: string
moid: string
objectType: string
selector: string
primaryKeyChains:
- additionalProperties: string
classId: string
name: string
objectType: string
secKeys:
- additionalProperties: string
classId: string
cryptographicAlgorithm: string
id: string
isOctetStringSet: false
keyType: string
objectType: string
octetString: string
sendLifetimeDuration: 0
sendLifetimeEndTime: string
sendLifetimeInfinite: false
sendLifetimeStartTime: string
sendLifetimeTimeZone: string
sendLifetimeUnlimited: false
replayWindowSize: 0
sakExpiryTime: 0
securityPolicy: string
sharedScope: string
tags:
- additionalProperties: string
key: string
value: string
versionContexts:
- additionalProperties: string
classId: string
interestedMos:
- additionalProperties: string
classId: string
moid: string
objectType: string
selector: string
markedForDeletion: false
nrVersion: string
objectType: string
refMos:
- additionalProperties: string
classId: string
moid: string
objectType: string
selector: string
timestamp: string
versionType: string
FabricMacSecPolicy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The FabricMacSecPolicy resource accepts the following input properties:
- Account
Moid string - (ReadOnly) The Account ID for this managed object.
- Additional
Properties string - Ancestors
List<Fabric
Mac Sec Policy Ancestor> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- Cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - Create
Time string - (ReadOnly) The time when this managed object was created.
- Description string
- Description of the policy.
- Domain
Group stringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- Fabric
Mac stringSec Policy Id - Fallback
Key List<FabricChains Mac Sec Policy Fallback Key Chain> - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- Include
Icv boolIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- Key
Server doublePriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- Mac
Sec List<FabricEa Pols Mac Sec Policy Mac Sec Ea Pol> - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- Mod
Time string - (ReadOnly) The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Organizations
List<Fabric
Mac Sec Policy Organization> - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- Owners List<string>
- (Array of schema.TypeString) -(ReadOnly)
- Parents
List<Fabric
Mac Sec Policy Parent> - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- Permission
Resources List<FabricMac Sec Policy Permission Resource> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- Primary
Key List<FabricChains Mac Sec Policy Primary Key Chain> - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- Replay
Window doubleSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- Sak
Expiry doubleTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- Security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Fabric
Mac Sec Policy Tag> - This complex property has following sub-properties:
- Version
Contexts List<FabricMac Sec Policy Version Context> - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- Account
Moid string - (ReadOnly) The Account ID for this managed object.
- Additional
Properties string - Ancestors
[]Fabric
Mac Sec Policy Ancestor Args - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- Cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - Create
Time string - (ReadOnly) The time when this managed object was created.
- Description string
- Description of the policy.
- Domain
Group stringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- Fabric
Mac stringSec Policy Id - Fallback
Key []FabricChains Mac Sec Policy Fallback Key Chain Args - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- Include
Icv boolIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- Key
Server float64Priority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- Mac
Sec []FabricEa Pols Mac Sec Policy Mac Sec Ea Pol Args - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- Mod
Time string - (ReadOnly) The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Organizations
[]Fabric
Mac Sec Policy Organization Args - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- Owners []string
- (Array of schema.TypeString) -(ReadOnly)
- Parents
[]Fabric
Mac Sec Policy Parent Args - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- Permission
Resources []FabricMac Sec Policy Permission Resource Args - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- Primary
Key []FabricChains Mac Sec Policy Primary Key Chain Args - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- Replay
Window float64Size - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- Sak
Expiry float64Time - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- Security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- []Fabric
Mac Sec Policy Tag Args - This complex property has following sub-properties:
- Version
Contexts []FabricMac Sec Policy Version Context Args - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- account
Moid String - (ReadOnly) The Account ID for this managed object.
- additional
Properties String - ancestors
List<Fabric
Mac Sec Policy Ancestor> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- cipher
Suite String - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- confidentiality
Offset String - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time String - (ReadOnly) The time when this managed object was created.
- description String
- Description of the policy.
- domain
Group StringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- fabric
Mac StringSec Policy Id - fallback
Key List<FabricChains Mac Sec Policy Fallback Key Chain> - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- include
Icv BooleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server DoublePriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec List<FabricEa Pols Mac Sec Policy Mac Sec Ea Pol> - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- mod
Time String - (ReadOnly) The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- organizations
List<Fabric
Mac Sec Policy Organization> - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- owners List<String>
- (Array of schema.TypeString) -(ReadOnly)
- parents
List<Fabric
Mac Sec Policy Parent> - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- permission
Resources List<FabricMac Sec Policy Permission Resource> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- primary
Key List<FabricChains Mac Sec Policy Primary Key Chain> - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- replay
Window DoubleSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry DoubleTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy String - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - String
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Fabric
Mac Sec Policy Tag> - This complex property has following sub-properties:
- version
Contexts List<FabricMac Sec Policy Version Context> - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- account
Moid string - (ReadOnly) The Account ID for this managed object.
- additional
Properties string - ancestors
Fabric
Mac Sec Policy Ancestor[] - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time string - (ReadOnly) The time when this managed object was created.
- description string
- Description of the policy.
- domain
Group stringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- fabric
Mac stringSec Policy Id - fallback
Key FabricChains Mac Sec Policy Fallback Key Chain[] - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- include
Icv booleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server numberPriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec FabricEa Pols Mac Sec Policy Mac Sec Ea Pol[] - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- mod
Time string - (ReadOnly) The time when this managed object was last modified.
- moid string
- The unique identifier of this Managed Object instance.
- name string
- Name of the concrete policy.
- object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- organizations
Fabric
Mac Sec Policy Organization[] - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- owners string[]
- (Array of schema.TypeString) -(ReadOnly)
- parents
Fabric
Mac Sec Policy Parent[] - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- permission
Resources FabricMac Sec Policy Permission Resource[] - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- primary
Key FabricChains Mac Sec Policy Primary Key Chain[] - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- replay
Window numberSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry numberTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- Fabric
Mac Sec Policy Tag[] - This complex property has following sub-properties:
- version
Contexts FabricMac Sec Policy Version Context[] - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- account_
moid str - (ReadOnly) The Account ID for this managed object.
- additional_
properties str - ancestors
Sequence[Fabric
Mac Sec Policy Ancestor Args] - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- cipher_
suite str - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- confidentiality_
offset str - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create_
time str - (ReadOnly) The time when this managed object was created.
- description str
- Description of the policy.
- domain_
group_ strmoid - (ReadOnly) The DomainGroup ID for this managed object.
- fabric_
mac_ strsec_ policy_ id - fallback_
key_ Sequence[Fabricchains Mac Sec Policy Fallback Key Chain Args] - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- include_
icv_ boolindicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key_
server_ floatpriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac_
sec_ Sequence[Fabricea_ pols Mac Sec Policy Mac Sec Ea Pol Args] - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- mod_
time str - (ReadOnly) The time when this managed object was last modified.
- moid str
- The unique identifier of this Managed Object instance.
- name str
- Name of the concrete policy.
- object_
type str - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- organizations
Sequence[Fabric
Mac Sec Policy Organization Args] - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- owners Sequence[str]
- (Array of schema.TypeString) -(ReadOnly)
- parents
Sequence[Fabric
Mac Sec Policy Parent Args] - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- permission_
resources Sequence[FabricMac Sec Policy Permission Resource Args] - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- primary_
key_ Sequence[Fabricchains Mac Sec Policy Primary Key Chain Args] - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- replay_
window_ floatsize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak_
expiry_ floattime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security_
policy str - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - str
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- Sequence[Fabric
Mac Sec Policy Tag Args] - This complex property has following sub-properties:
- version_
contexts Sequence[FabricMac Sec Policy Version Context Args] - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- account
Moid String - (ReadOnly) The Account ID for this managed object.
- additional
Properties String - ancestors List<Property Map>
- (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- cipher
Suite String - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- confidentiality
Offset String - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time String - (ReadOnly) The time when this managed object was created.
- description String
- Description of the policy.
- domain
Group StringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- fabric
Mac StringSec Policy Id - fallback
Key List<Property Map>Chains - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- include
Icv BooleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server NumberPriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec List<Property Map>Ea Pols - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- mod
Time String - (ReadOnly) The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- organizations List<Property Map>
- A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- owners List<String>
- (Array of schema.TypeString) -(ReadOnly)
- parents List<Property Map>
- (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- permission
Resources List<Property Map> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- primary
Key List<Property Map>Chains - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- replay
Window NumberSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry NumberTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy String - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - String
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Property Map>
- This complex property has following sub-properties:
- version
Contexts List<Property Map> - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
Outputs
All input properties are implicitly available as output properties. Additionally, the FabricMacSecPolicy resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing FabricMacSecPolicy Resource
Get an existing FabricMacSecPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: FabricMacSecPolicyState, opts?: CustomResourceOptions): FabricMacSecPolicy
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_moid: Optional[str] = None,
additional_properties: Optional[str] = None,
ancestors: Optional[Sequence[FabricMacSecPolicyAncestorArgs]] = None,
cipher_suite: Optional[str] = None,
class_id: Optional[str] = None,
confidentiality_offset: Optional[str] = None,
create_time: Optional[str] = None,
description: Optional[str] = None,
domain_group_moid: Optional[str] = None,
fabric_mac_sec_policy_id: Optional[str] = None,
fallback_key_chains: Optional[Sequence[FabricMacSecPolicyFallbackKeyChainArgs]] = None,
include_icv_indicator: Optional[bool] = None,
key_server_priority: Optional[float] = None,
mac_sec_ea_pols: Optional[Sequence[FabricMacSecPolicyMacSecEaPolArgs]] = None,
mod_time: Optional[str] = None,
moid: Optional[str] = None,
name: Optional[str] = None,
object_type: Optional[str] = None,
organizations: Optional[Sequence[FabricMacSecPolicyOrganizationArgs]] = None,
owners: Optional[Sequence[str]] = None,
parents: Optional[Sequence[FabricMacSecPolicyParentArgs]] = None,
permission_resources: Optional[Sequence[FabricMacSecPolicyPermissionResourceArgs]] = None,
primary_key_chains: Optional[Sequence[FabricMacSecPolicyPrimaryKeyChainArgs]] = None,
replay_window_size: Optional[float] = None,
sak_expiry_time: Optional[float] = None,
security_policy: Optional[str] = None,
shared_scope: Optional[str] = None,
tags: Optional[Sequence[FabricMacSecPolicyTagArgs]] = None,
version_contexts: Optional[Sequence[FabricMacSecPolicyVersionContextArgs]] = None) -> FabricMacSecPolicy
func GetFabricMacSecPolicy(ctx *Context, name string, id IDInput, state *FabricMacSecPolicyState, opts ...ResourceOption) (*FabricMacSecPolicy, error)
public static FabricMacSecPolicy Get(string name, Input<string> id, FabricMacSecPolicyState? state, CustomResourceOptions? opts = null)
public static FabricMacSecPolicy get(String name, Output<String> id, FabricMacSecPolicyState state, CustomResourceOptions options)
resources: _: type: intersight:FabricMacSecPolicy get: id: ${id}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Moid string - (ReadOnly) The Account ID for this managed object.
- Additional
Properties string - Ancestors
List<Fabric
Mac Sec Policy Ancestor> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- Cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - Create
Time string - (ReadOnly) The time when this managed object was created.
- Description string
- Description of the policy.
- Domain
Group stringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- Fabric
Mac stringSec Policy Id - Fallback
Key List<FabricChains Mac Sec Policy Fallback Key Chain> - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- Include
Icv boolIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- Key
Server doublePriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- Mac
Sec List<FabricEa Pols Mac Sec Policy Mac Sec Ea Pol> - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- Mod
Time string - (ReadOnly) The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Organizations
List<Fabric
Mac Sec Policy Organization> - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- Owners List<string>
- (Array of schema.TypeString) -(ReadOnly)
- Parents
List<Fabric
Mac Sec Policy Parent> - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- Permission
Resources List<FabricMac Sec Policy Permission Resource> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- Primary
Key List<FabricChains Mac Sec Policy Primary Key Chain> - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- Replay
Window doubleSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- Sak
Expiry doubleTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- Security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Fabric
Mac Sec Policy Tag> - This complex property has following sub-properties:
- Version
Contexts List<FabricMac Sec Policy Version Context> - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- Account
Moid string - (ReadOnly) The Account ID for this managed object.
- Additional
Properties string - Ancestors
[]Fabric
Mac Sec Policy Ancestor Args - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- Cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - Create
Time string - (ReadOnly) The time when this managed object was created.
- Description string
- Description of the policy.
- Domain
Group stringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- Fabric
Mac stringSec Policy Id - Fallback
Key []FabricChains Mac Sec Policy Fallback Key Chain Args - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- Include
Icv boolIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- Key
Server float64Priority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- Mac
Sec []FabricEa Pols Mac Sec Policy Mac Sec Ea Pol Args - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- Mod
Time string - (ReadOnly) The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Organizations
[]Fabric
Mac Sec Policy Organization Args - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- Owners []string
- (Array of schema.TypeString) -(ReadOnly)
- Parents
[]Fabric
Mac Sec Policy Parent Args - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- Permission
Resources []FabricMac Sec Policy Permission Resource Args - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- Primary
Key []FabricChains Mac Sec Policy Primary Key Chain Args - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- Replay
Window float64Size - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- Sak
Expiry float64Time - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- Security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- []Fabric
Mac Sec Policy Tag Args - This complex property has following sub-properties:
- Version
Contexts []FabricMac Sec Policy Version Context Args - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- account
Moid String - (ReadOnly) The Account ID for this managed object.
- additional
Properties String - ancestors
List<Fabric
Mac Sec Policy Ancestor> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- cipher
Suite String - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- confidentiality
Offset String - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time String - (ReadOnly) The time when this managed object was created.
- description String
- Description of the policy.
- domain
Group StringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- fabric
Mac StringSec Policy Id - fallback
Key List<FabricChains Mac Sec Policy Fallback Key Chain> - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- include
Icv BooleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server DoublePriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec List<FabricEa Pols Mac Sec Policy Mac Sec Ea Pol> - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- mod
Time String - (ReadOnly) The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- organizations
List<Fabric
Mac Sec Policy Organization> - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- owners List<String>
- (Array of schema.TypeString) -(ReadOnly)
- parents
List<Fabric
Mac Sec Policy Parent> - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- permission
Resources List<FabricMac Sec Policy Permission Resource> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- primary
Key List<FabricChains Mac Sec Policy Primary Key Chain> - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- replay
Window DoubleSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry DoubleTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy String - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - String
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Fabric
Mac Sec Policy Tag> - This complex property has following sub-properties:
- version
Contexts List<FabricMac Sec Policy Version Context> - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- account
Moid string - (ReadOnly) The Account ID for this managed object.
- additional
Properties string - ancestors
Fabric
Mac Sec Policy Ancestor[] - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time string - (ReadOnly) The time when this managed object was created.
- description string
- Description of the policy.
- domain
Group stringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- fabric
Mac stringSec Policy Id - fallback
Key FabricChains Mac Sec Policy Fallback Key Chain[] - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- include
Icv booleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server numberPriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec FabricEa Pols Mac Sec Policy Mac Sec Ea Pol[] - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- mod
Time string - (ReadOnly) The time when this managed object was last modified.
- moid string
- The unique identifier of this Managed Object instance.
- name string
- Name of the concrete policy.
- object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- organizations
Fabric
Mac Sec Policy Organization[] - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- owners string[]
- (Array of schema.TypeString) -(ReadOnly)
- parents
Fabric
Mac Sec Policy Parent[] - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- permission
Resources FabricMac Sec Policy Permission Resource[] - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- primary
Key FabricChains Mac Sec Policy Primary Key Chain[] - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- replay
Window numberSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry numberTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- Fabric
Mac Sec Policy Tag[] - This complex property has following sub-properties:
- version
Contexts FabricMac Sec Policy Version Context[] - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- account_
moid str - (ReadOnly) The Account ID for this managed object.
- additional_
properties str - ancestors
Sequence[Fabric
Mac Sec Policy Ancestor Args] - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- cipher_
suite str - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- confidentiality_
offset str - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create_
time str - (ReadOnly) The time when this managed object was created.
- description str
- Description of the policy.
- domain_
group_ strmoid - (ReadOnly) The DomainGroup ID for this managed object.
- fabric_
mac_ strsec_ policy_ id - fallback_
key_ Sequence[Fabricchains Mac Sec Policy Fallback Key Chain Args] - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- include_
icv_ boolindicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key_
server_ floatpriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac_
sec_ Sequence[Fabricea_ pols Mac Sec Policy Mac Sec Ea Pol Args] - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- mod_
time str - (ReadOnly) The time when this managed object was last modified.
- moid str
- The unique identifier of this Managed Object instance.
- name str
- Name of the concrete policy.
- object_
type str - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- organizations
Sequence[Fabric
Mac Sec Policy Organization Args] - A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- owners Sequence[str]
- (Array of schema.TypeString) -(ReadOnly)
- parents
Sequence[Fabric
Mac Sec Policy Parent Args] - (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- permission_
resources Sequence[FabricMac Sec Policy Permission Resource Args] - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- primary_
key_ Sequence[Fabricchains Mac Sec Policy Primary Key Chain Args] - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- replay_
window_ floatsize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak_
expiry_ floattime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security_
policy str - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - str
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- Sequence[Fabric
Mac Sec Policy Tag Args] - This complex property has following sub-properties:
- version_
contexts Sequence[FabricMac Sec Policy Version Context Args] - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
- account
Moid String - (ReadOnly) The Account ID for this managed object.
- additional
Properties String - ancestors List<Property Map>
- (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- cipher
Suite String - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- confidentiality
Offset String - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time String - (ReadOnly) The time when this managed object was created.
- description String
- Description of the policy.
- domain
Group StringMoid - (ReadOnly) The DomainGroup ID for this managed object.
- fabric
Mac StringSec Policy Id - fallback
Key List<Property Map>Chains - Fallback keychain for managing an alternative set of security keys to be used when a secure session cannot be established using the primary keychain. This complex property has following sub-properties:
- include
Icv BooleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server NumberPriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec List<Property Map>Ea Pols - Extensible authentication protocol over LAN (EAPoL). MACsec transmits MACsec key agreement (MKA) protocol data units (PDUs) using EAPoL packets to establish a secure session. This complex property has following sub-properties:
- mod
Time String - (ReadOnly) The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- organizations List<Property Map>
- A reference to a organizationOrganization resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- owners List<String>
- (Array of schema.TypeString) -(ReadOnly)
- parents List<Property Map>
- (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
- permission
Resources List<Property Map> - (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
- primary
Key List<Property Map>Chains - Primary keychain for managing the default set of security keys for encryption and decryption. This complex property has following sub-properties:
- replay
Window NumberSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry NumberTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy String - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - String
- (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Property Map>
- This complex property has following sub-properties:
- version
Contexts List<Property Map> - (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
Supporting Types
FabricMacSecPolicyAncestor, FabricMacSecPolicyAncestorArgs
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - moid string
- The Moid of the referenced REST resource.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - moid str
- The Moid of the referenced REST resource.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
FabricMacSecPolicyFallbackKeyChain, FabricMacSecPolicyFallbackKeyChainArgs
- Additional
Properties string - Class
Id string - Name string
- Must be a maximum of 63 characters, without spacing.
- Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Sec
Keys List<FabricMac Sec Policy Fallback Key Chain Sec Key> - This complex property has following sub-properties:
- Additional
Properties string - Class
Id string - Name string
- Must be a maximum of 63 characters, without spacing.
- Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Sec
Keys []FabricMac Sec Policy Fallback Key Chain Sec Key - This complex property has following sub-properties:
- additional
Properties String - class
Id String - name String
- Must be a maximum of 63 characters, without spacing.
- object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- sec
Keys List<FabricMac Sec Policy Fallback Key Chain Sec Key> - This complex property has following sub-properties:
- additional
Properties string - class
Id string - name string
- Must be a maximum of 63 characters, without spacing.
- object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- sec
Keys FabricMac Sec Policy Fallback Key Chain Sec Key[] - This complex property has following sub-properties:
- additional_
properties str - class_
id str - name str
- Must be a maximum of 63 characters, without spacing.
- object_
type str - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- sec_
keys Sequence[FabricMac Sec Policy Fallback Key Chain Sec Key] - This complex property has following sub-properties:
- additional
Properties String - class
Id String - name String
- Must be a maximum of 63 characters, without spacing.
- object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- sec
Keys List<Property Map> - This complex property has following sub-properties:
FabricMacSecPolicyFallbackKeyChainSecKey, FabricMacSecPolicyFallbackKeyChainSecKeyArgs
- Additional
Properties string - Class
Id string - Cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- Is
Octet boolString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- Key
Type string - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- Send
Lifetime doubleDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- Send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- Send
Lifetime boolInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- Send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- Send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - Send
Lifetime boolUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- Additional
Properties string - Class
Id string - Cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- Is
Octet boolString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- Key
Type string - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- Send
Lifetime float64Duration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- Send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- Send
Lifetime boolInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- Send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- Send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - Send
Lifetime boolUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties String - class
Id String - cryptographic
Algorithm String - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- is
Octet BooleanString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- key
Type String - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- octet
String String - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime DoubleDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime StringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime BooleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime StringStart Time - The time of day and date when the key becomes active.
- send
Lifetime StringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - send
Lifetime BooleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties string - class
Id string - cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- is
Octet booleanString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- key
Type string - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime numberDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime booleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - send
Lifetime booleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional_
properties str - class_
id str - cryptographic_
algorithm str - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - id str
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- is_
octet_ boolstring_ set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- key_
type str - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - object_
type str - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- octet_
string str - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send_
lifetime_ floatduration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send_
lifetime_ strend_ time - The time of day and date when the key becomes inactive.
- send_
lifetime_ boolinfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send_
lifetime_ strstart_ time - The time of day and date when the key becomes active.
- send_
lifetime_ strtime_ zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - send_
lifetime_ boolunlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties String - class
Id String - cryptographic
Algorithm String - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- is
Octet BooleanString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- key
Type String - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- octet
String String - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime NumberDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime StringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime BooleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime StringStart Time - The time of day and date when the key becomes active.
- send
Lifetime StringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - send
Lifetime BooleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
FabricMacSecPolicyMacSecEaPol, FabricMacSecPolicyMacSecEaPolArgs
- Additional
Properties string - Class
Id string - Ea
Pol stringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- Ea
Pol stringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Additional
Properties string - Class
Id string - Ea
Pol stringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- Ea
Pol stringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- additional
Properties String - class
Id String - ea
Pol StringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- ea
Pol StringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- additional
Properties string - class
Id string - ea
Pol stringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- ea
Pol stringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- additional_
properties str - class_
id str - ea_
pol_ strethertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- ea_
pol_ strmac_ address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- object_
type str - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- additional
Properties String - class
Id String - ea
Pol StringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- ea
Pol StringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
FabricMacSecPolicyOrganization, FabricMacSecPolicyOrganizationArgs
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - moid string
- The Moid of the referenced REST resource.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - moid str
- The Moid of the referenced REST resource.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
FabricMacSecPolicyParent, FabricMacSecPolicyParentArgs
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - moid string
- The Moid of the referenced REST resource.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - moid str
- The Moid of the referenced REST resource.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
FabricMacSecPolicyPermissionResource, FabricMacSecPolicyPermissionResourceArgs
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - moid string
- The Moid of the referenced REST resource.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - moid str
- The Moid of the referenced REST resource.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
FabricMacSecPolicyPrimaryKeyChain, FabricMacSecPolicyPrimaryKeyChainArgs
- Additional
Properties string - Class
Id string - Name string
- Must be a maximum of 63 characters, without spacing.
- Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Sec
Keys List<FabricMac Sec Policy Primary Key Chain Sec Key> - This complex property has following sub-properties:
- Additional
Properties string - Class
Id string - Name string
- Must be a maximum of 63 characters, without spacing.
- Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Sec
Keys []FabricMac Sec Policy Primary Key Chain Sec Key - This complex property has following sub-properties:
- additional
Properties String - class
Id String - name String
- Must be a maximum of 63 characters, without spacing.
- object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- sec
Keys List<FabricMac Sec Policy Primary Key Chain Sec Key> - This complex property has following sub-properties:
- additional
Properties string - class
Id string - name string
- Must be a maximum of 63 characters, without spacing.
- object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- sec
Keys FabricMac Sec Policy Primary Key Chain Sec Key[] - This complex property has following sub-properties:
- additional_
properties str - class_
id str - name str
- Must be a maximum of 63 characters, without spacing.
- object_
type str - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- sec_
keys Sequence[FabricMac Sec Policy Primary Key Chain Sec Key] - This complex property has following sub-properties:
- additional
Properties String - class
Id String - name String
- Must be a maximum of 63 characters, without spacing.
- object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- sec
Keys List<Property Map> - This complex property has following sub-properties:
FabricMacSecPolicyPrimaryKeyChainSecKey, FabricMacSecPolicyPrimaryKeyChainSecKeyArgs
- Additional
Properties string - Class
Id string - Cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- Is
Octet boolString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- Key
Type string - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- Send
Lifetime doubleDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- Send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- Send
Lifetime boolInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- Send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- Send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - Send
Lifetime boolUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- Additional
Properties string - Class
Id string - Cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- Is
Octet boolString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- Key
Type string - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- Send
Lifetime float64Duration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- Send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- Send
Lifetime boolInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- Send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- Send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - Send
Lifetime boolUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties String - class
Id String - cryptographic
Algorithm String - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- is
Octet BooleanString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- key
Type String - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- octet
String String - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime DoubleDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime StringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime BooleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime StringStart Time - The time of day and date when the key becomes active.
- send
Lifetime StringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - send
Lifetime BooleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties string - class
Id string - cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- is
Octet booleanString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- key
Type string - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime numberDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime booleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - send
Lifetime booleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional_
properties str - class_
id str - cryptographic_
algorithm str - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - id str
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- is_
octet_ boolstring_ set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- key_
type str - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - object_
type str - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- octet_
string str - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send_
lifetime_ floatduration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send_
lifetime_ strend_ time - The time of day and date when the key becomes inactive.
- send_
lifetime_ boolinfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send_
lifetime_ strstart_ time - The time of day and date when the key becomes active.
- send_
lifetime_ strtime_ zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - send_
lifetime_ boolunlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties String - class
Id String - cryptographic
Algorithm String - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).*
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.*AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC. - id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, \ 10\ , \ 2000\ , \ ABCD1234\ .
- is
Octet BooleanString Set - (ReadOnly) Indicates whether the value of the 'octetString' property has been set.
- key
Type String - The type of encryption used for the specified key.*
Type-0
- No encryption for the specified octetString.*Type-6
- Proprietary advanced encryption standard for the specified octetString.*Type-7
- Proprietary insecure encryption for the specified octetString. - object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- octet
String String - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime NumberDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime StringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime BooleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime StringStart Time - The time of day and date when the key becomes active.
- send
Lifetime StringTime Zone - The time zone used for key lifetime configurations.*
UTC
- The Universal Time (UTC) for key lifetime configurations.*Local
- The local time zone of the device for key lifetime configurations. - send
Lifetime BooleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
FabricMacSecPolicyTag, FabricMacSecPolicyTagArgs
- Additional
Properties string - Key string
- The string representation of a tag key.
- Value string
- The string representation of a tag value.
- Additional
Properties string - Key string
- The string representation of a tag key.
- Value string
- The string representation of a tag value.
- additional
Properties String - key String
- The string representation of a tag key.
- value String
- The string representation of a tag value.
- additional
Properties string - key string
- The string representation of a tag key.
- value string
- The string representation of a tag value.
- additional_
properties str - key str
- The string representation of a tag key.
- value str
- The string representation of a tag value.
- additional
Properties String - key String
- The string representation of a tag key.
- value String
- The string representation of a tag value.
FabricMacSecPolicyVersionContext, FabricMacSecPolicyVersionContextArgs
- Additional
Properties string - Class
Id string - Interested
Mos List<FabricMac Sec Policy Version Context Interested Mo> - This complex property has following sub-properties:
- Marked
For boolDeletion - (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- Nr
Version string - (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
- Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Ref
Mos List<FabricMac Sec Policy Version Context Ref Mo> - (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
- Timestamp string
- (ReadOnly) The time this versioned Managed Object was created.
- Version
Type string - (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.*
Modified
- Version created every time an object is modified.*Configured
- Version created every time an object is configured to the service profile.*Deployed
- Version created for objects related to a service profile when it is deployed.
- Additional
Properties string - Class
Id string - Interested
Mos []FabricMac Sec Policy Version Context Interested Mo - This complex property has following sub-properties:
- Marked
For boolDeletion - (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- Nr
Version string - (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
- Object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- Ref
Mos []FabricMac Sec Policy Version Context Ref Mo - (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
- Timestamp string
- (ReadOnly) The time this versioned Managed Object was created.
- Version
Type string - (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.*
Modified
- Version created every time an object is modified.*Configured
- Version created every time an object is configured to the service profile.*Deployed
- Version created for objects related to a service profile when it is deployed.
- additional
Properties String - class
Id String - interested
Mos List<FabricMac Sec Policy Version Context Interested Mo> - This complex property has following sub-properties:
- marked
For BooleanDeletion - (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nr
Version String - (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
- object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- ref
Mos List<FabricMac Sec Policy Version Context Ref Mo> - (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
- timestamp String
- (ReadOnly) The time this versioned Managed Object was created.
- version
Type String - (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.*
Modified
- Version created every time an object is modified.*Configured
- Version created every time an object is configured to the service profile.*Deployed
- Version created for objects related to a service profile when it is deployed.
- additional
Properties string - class
Id string - interested
Mos FabricMac Sec Policy Version Context Interested Mo[] - This complex property has following sub-properties:
- marked
For booleanDeletion - (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nr
Version string - (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
- object
Type string - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- ref
Mos FabricMac Sec Policy Version Context Ref Mo[] - (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
- timestamp string
- (ReadOnly) The time this versioned Managed Object was created.
- version
Type string - (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.*
Modified
- Version created every time an object is modified.*Configured
- Version created every time an object is configured to the service profile.*Deployed
- Version created for objects related to a service profile when it is deployed.
- additional_
properties str - class_
id str - interested_
mos Sequence[FabricMac Sec Policy Version Context Interested Mo] - This complex property has following sub-properties:
- marked_
for_ booldeletion - (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nr_
version str - (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
- object_
type str - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- ref_
mos Sequence[FabricMac Sec Policy Version Context Ref Mo] - (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
- timestamp str
- (ReadOnly) The time this versioned Managed Object was created.
- version_
type str - (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.*
Modified
- Version created every time an object is modified.*Configured
- Version created every time an object is configured to the service profile.*Deployed
- Version created for objects related to a service profile when it is deployed.
- additional
Properties String - class
Id String - interested
Mos List<Property Map> - This complex property has following sub-properties:
- marked
For BooleanDeletion - (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nr
Version String - (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
- object
Type String - The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
- ref
Mos List<Property Map> - (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
- timestamp String
- (ReadOnly) The time this versioned Managed Object was created.
- version
Type String - (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.*
Modified
- Version created every time an object is modified.*Configured
- Version created every time an object is configured to the service profile.*Deployed
- Version created for objects related to a service profile when it is deployed.
FabricMacSecPolicyVersionContextInterestedMo, FabricMacSecPolicyVersionContextInterestedMoArgs
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - moid string
- The Moid of the referenced REST resource.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - moid str
- The Moid of the referenced REST resource.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
FabricMacSecPolicyVersionContextRefMo, FabricMacSecPolicyVersionContextRefMoArgs
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - Moid string
- The Moid of the referenced REST resource.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - moid string
- The Moid of the referenced REST resource.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - moid str
- The Moid of the referenced REST resource.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - moid String
- The Moid of the referenced REST resource.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
Import
intersight_fabric_mac_sec_policy
can be imported using the Moid of the object, e.g.
$ pulumi import intersight:index/fabricMacSecPolicy:FabricMacSecPolicy example 1234567890987654321abcde
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- intersight ciscodevnet/terraform-provider-intersight
- License
- Notes
- This Pulumi package is based on the
intersight
Terraform Provider.