1. Packages
  2. Intersight Provider
  3. API Docs
  4. getFabricMacSecPolicy
intersight 1.0.64 published on Wednesday, Apr 30, 2025 by ciscodevnet

intersight.getFabricMacSecPolicy

Explore with Pulumi AI

intersight logo
intersight 1.0.64 published on Wednesday, Apr 30, 2025 by ciscodevnet

    A placeholder for MACSec (Media Access Control Security) configuration parameters, Primary/Fallback key chain and EAPol (Extensible Authentication Protocol over LAN) configurations.

    Using getFabricMacSecPolicy

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getFabricMacSecPolicy(args: GetFabricMacSecPolicyArgs, opts?: InvokeOptions): Promise<GetFabricMacSecPolicyResult>
    function getFabricMacSecPolicyOutput(args: GetFabricMacSecPolicyOutputArgs, opts?: InvokeOptions): Output<GetFabricMacSecPolicyResult>
    def get_fabric_mac_sec_policy(account_moid: Optional[str] = None,
                                  additional_properties: Optional[str] = None,
                                  ancestors: Optional[Sequence[GetFabricMacSecPolicyAncestor]] = None,
                                  cipher_suite: Optional[str] = None,
                                  class_id: Optional[str] = None,
                                  confidentiality_offset: Optional[str] = None,
                                  create_time: Optional[str] = None,
                                  description: Optional[str] = None,
                                  domain_group_moid: Optional[str] = None,
                                  fallback_key_chain: Optional[GetFabricMacSecPolicyFallbackKeyChain] = None,
                                  id: Optional[str] = None,
                                  include_icv_indicator: Optional[bool] = None,
                                  key_server_priority: Optional[float] = None,
                                  mac_sec_ea_pol: Optional[GetFabricMacSecPolicyMacSecEaPol] = None,
                                  mod_time: Optional[str] = None,
                                  moid: Optional[str] = None,
                                  name: Optional[str] = None,
                                  object_type: Optional[str] = None,
                                  organization: Optional[GetFabricMacSecPolicyOrganization] = None,
                                  owners: Optional[Sequence[str]] = None,
                                  parent: Optional[GetFabricMacSecPolicyParent] = None,
                                  permission_resources: Optional[Sequence[GetFabricMacSecPolicyPermissionResource]] = None,
                                  primary_key_chain: Optional[GetFabricMacSecPolicyPrimaryKeyChain] = None,
                                  replay_window_size: Optional[float] = None,
                                  sak_expiry_time: Optional[float] = None,
                                  security_policy: Optional[str] = None,
                                  shared_scope: Optional[str] = None,
                                  tags: Optional[Sequence[GetFabricMacSecPolicyTag]] = None,
                                  version_context: Optional[GetFabricMacSecPolicyVersionContext] = None,
                                  opts: Optional[InvokeOptions] = None) -> GetFabricMacSecPolicyResult
    def get_fabric_mac_sec_policy_output(account_moid: Optional[pulumi.Input[str]] = None,
                                  additional_properties: Optional[pulumi.Input[str]] = None,
                                  ancestors: Optional[pulumi.Input[Sequence[pulumi.Input[GetFabricMacSecPolicyAncestorArgs]]]] = None,
                                  cipher_suite: Optional[pulumi.Input[str]] = None,
                                  class_id: Optional[pulumi.Input[str]] = None,
                                  confidentiality_offset: Optional[pulumi.Input[str]] = None,
                                  create_time: Optional[pulumi.Input[str]] = None,
                                  description: Optional[pulumi.Input[str]] = None,
                                  domain_group_moid: Optional[pulumi.Input[str]] = None,
                                  fallback_key_chain: Optional[pulumi.Input[GetFabricMacSecPolicyFallbackKeyChainArgs]] = None,
                                  id: Optional[pulumi.Input[str]] = None,
                                  include_icv_indicator: Optional[pulumi.Input[bool]] = None,
                                  key_server_priority: Optional[pulumi.Input[float]] = None,
                                  mac_sec_ea_pol: Optional[pulumi.Input[GetFabricMacSecPolicyMacSecEaPolArgs]] = None,
                                  mod_time: Optional[pulumi.Input[str]] = None,
                                  moid: Optional[pulumi.Input[str]] = None,
                                  name: Optional[pulumi.Input[str]] = None,
                                  object_type: Optional[pulumi.Input[str]] = None,
                                  organization: Optional[pulumi.Input[GetFabricMacSecPolicyOrganizationArgs]] = None,
                                  owners: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                                  parent: Optional[pulumi.Input[GetFabricMacSecPolicyParentArgs]] = None,
                                  permission_resources: Optional[pulumi.Input[Sequence[pulumi.Input[GetFabricMacSecPolicyPermissionResourceArgs]]]] = None,
                                  primary_key_chain: Optional[pulumi.Input[GetFabricMacSecPolicyPrimaryKeyChainArgs]] = None,
                                  replay_window_size: Optional[pulumi.Input[float]] = None,
                                  sak_expiry_time: Optional[pulumi.Input[float]] = None,
                                  security_policy: Optional[pulumi.Input[str]] = None,
                                  shared_scope: Optional[pulumi.Input[str]] = None,
                                  tags: Optional[pulumi.Input[Sequence[pulumi.Input[GetFabricMacSecPolicyTagArgs]]]] = None,
                                  version_context: Optional[pulumi.Input[GetFabricMacSecPolicyVersionContextArgs]] = None,
                                  opts: Optional[InvokeOptions] = None) -> Output[GetFabricMacSecPolicyResult]
    func LookupFabricMacSecPolicy(ctx *Context, args *LookupFabricMacSecPolicyArgs, opts ...InvokeOption) (*LookupFabricMacSecPolicyResult, error)
    func LookupFabricMacSecPolicyOutput(ctx *Context, args *LookupFabricMacSecPolicyOutputArgs, opts ...InvokeOption) LookupFabricMacSecPolicyResultOutput

    > Note: This function is named LookupFabricMacSecPolicy in the Go SDK.

    public static class GetFabricMacSecPolicy 
    {
        public static Task<GetFabricMacSecPolicyResult> InvokeAsync(GetFabricMacSecPolicyArgs args, InvokeOptions? opts = null)
        public static Output<GetFabricMacSecPolicyResult> Invoke(GetFabricMacSecPolicyInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetFabricMacSecPolicyResult> getFabricMacSecPolicy(GetFabricMacSecPolicyArgs args, InvokeOptions options)
    public static Output<GetFabricMacSecPolicyResult> getFabricMacSecPolicy(GetFabricMacSecPolicyArgs args, InvokeOptions options)
    
    fn::invoke:
      function: intersight:index/getFabricMacSecPolicy:getFabricMacSecPolicy
      arguments:
        # arguments dictionary

    The following arguments are supported:

    AccountMoid string
    The Account ID for this managed object.
    AdditionalProperties string
    Ancestors List<GetFabricMacSecPolicyAncestor>
    CipherSuite string
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    ClassId string
    ConfidentialityOffset string
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    CreateTime string
    The time when this managed object was created.
    Description string
    Description of the policy.
    DomainGroupMoid string
    The DomainGroup ID for this managed object.
    FallbackKeyChain GetFabricMacSecPolicyFallbackKeyChain
    Id string
    IncludeIcvIndicator bool
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    KeyServerPriority double
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    MacSecEaPol GetFabricMacSecPolicyMacSecEaPol
    ModTime string
    The time when this managed object was last modified.
    Moid string
    The unique identifier of this Managed Object instance.
    Name string
    Name of the concrete policy.
    ObjectType string
    Organization GetFabricMacSecPolicyOrganization
    Owners List<string>
    Parent GetFabricMacSecPolicyParent
    PermissionResources List<GetFabricMacSecPolicyPermissionResource>
    PrimaryKeyChain GetFabricMacSecPolicyPrimaryKeyChain
    ReplayWindowSize double
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    SakExpiryTime double
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    SecurityPolicy string
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    SharedScope string
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    Tags List<GetFabricMacSecPolicyTag>
    VersionContext GetFabricMacSecPolicyVersionContext
    AccountMoid string
    The Account ID for this managed object.
    AdditionalProperties string
    Ancestors []GetFabricMacSecPolicyAncestor
    CipherSuite string
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    ClassId string
    ConfidentialityOffset string
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    CreateTime string
    The time when this managed object was created.
    Description string
    Description of the policy.
    DomainGroupMoid string
    The DomainGroup ID for this managed object.
    FallbackKeyChain GetFabricMacSecPolicyFallbackKeyChain
    Id string
    IncludeIcvIndicator bool
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    KeyServerPriority float64
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    MacSecEaPol GetFabricMacSecPolicyMacSecEaPol
    ModTime string
    The time when this managed object was last modified.
    Moid string
    The unique identifier of this Managed Object instance.
    Name string
    Name of the concrete policy.
    ObjectType string
    Organization GetFabricMacSecPolicyOrganization
    Owners []string
    Parent GetFabricMacSecPolicyParent
    PermissionResources []GetFabricMacSecPolicyPermissionResource
    PrimaryKeyChain GetFabricMacSecPolicyPrimaryKeyChain
    ReplayWindowSize float64
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    SakExpiryTime float64
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    SecurityPolicy string
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    SharedScope string
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    Tags []GetFabricMacSecPolicyTag
    VersionContext GetFabricMacSecPolicyVersionContext
    accountMoid String
    The Account ID for this managed object.
    additionalProperties String
    ancestors List<GetFabricMacSecPolicyAncestor>
    cipherSuite String
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    classId String
    confidentialityOffset String
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    createTime String
    The time when this managed object was created.
    description String
    Description of the policy.
    domainGroupMoid String
    The DomainGroup ID for this managed object.
    fallbackKeyChain GetFabricMacSecPolicyFallbackKeyChain
    id String
    includeIcvIndicator Boolean
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    keyServerPriority Double
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    macSecEaPol GetFabricMacSecPolicyMacSecEaPol
    modTime String
    The time when this managed object was last modified.
    moid String
    The unique identifier of this Managed Object instance.
    name String
    Name of the concrete policy.
    objectType String
    organization GetFabricMacSecPolicyOrganization
    owners List<String>
    parent GetFabricMacSecPolicyParent
    permissionResources List<GetFabricMacSecPolicyPermissionResource>
    primaryKeyChain GetFabricMacSecPolicyPrimaryKeyChain
    replayWindowSize Double
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    sakExpiryTime Double
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    securityPolicy String
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    sharedScope String
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    tags List<GetFabricMacSecPolicyTag>
    versionContext GetFabricMacSecPolicyVersionContext
    accountMoid string
    The Account ID for this managed object.
    additionalProperties string
    ancestors GetFabricMacSecPolicyAncestor[]
    cipherSuite string
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    classId string
    confidentialityOffset string
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    createTime string
    The time when this managed object was created.
    description string
    Description of the policy.
    domainGroupMoid string
    The DomainGroup ID for this managed object.
    fallbackKeyChain GetFabricMacSecPolicyFallbackKeyChain
    id string
    includeIcvIndicator boolean
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    keyServerPriority number
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    macSecEaPol GetFabricMacSecPolicyMacSecEaPol
    modTime string
    The time when this managed object was last modified.
    moid string
    The unique identifier of this Managed Object instance.
    name string
    Name of the concrete policy.
    objectType string
    organization GetFabricMacSecPolicyOrganization
    owners string[]
    parent GetFabricMacSecPolicyParent
    permissionResources GetFabricMacSecPolicyPermissionResource[]
    primaryKeyChain GetFabricMacSecPolicyPrimaryKeyChain
    replayWindowSize number
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    sakExpiryTime number
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    securityPolicy string
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    sharedScope string
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    tags GetFabricMacSecPolicyTag[]
    versionContext GetFabricMacSecPolicyVersionContext
    account_moid str
    The Account ID for this managed object.
    additional_properties str
    ancestors Sequence[GetFabricMacSecPolicyAncestor]
    cipher_suite str
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    class_id str
    confidentiality_offset str
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    create_time str
    The time when this managed object was created.
    description str
    Description of the policy.
    domain_group_moid str
    The DomainGroup ID for this managed object.
    fallback_key_chain GetFabricMacSecPolicyFallbackKeyChain
    id str
    include_icv_indicator bool
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    key_server_priority float
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    mac_sec_ea_pol GetFabricMacSecPolicyMacSecEaPol
    mod_time str
    The time when this managed object was last modified.
    moid str
    The unique identifier of this Managed Object instance.
    name str
    Name of the concrete policy.
    object_type str
    organization GetFabricMacSecPolicyOrganization
    owners Sequence[str]
    parent GetFabricMacSecPolicyParent
    permission_resources Sequence[GetFabricMacSecPolicyPermissionResource]
    primary_key_chain GetFabricMacSecPolicyPrimaryKeyChain
    replay_window_size float
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    sak_expiry_time float
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    security_policy str
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    shared_scope str
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    tags Sequence[GetFabricMacSecPolicyTag]
    version_context GetFabricMacSecPolicyVersionContext
    accountMoid String
    The Account ID for this managed object.
    additionalProperties String
    ancestors List<Property Map>
    cipherSuite String
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    classId String
    confidentialityOffset String
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    createTime String
    The time when this managed object was created.
    description String
    Description of the policy.
    domainGroupMoid String
    The DomainGroup ID for this managed object.
    fallbackKeyChain Property Map
    id String
    includeIcvIndicator Boolean
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    keyServerPriority Number
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    macSecEaPol Property Map
    modTime String
    The time when this managed object was last modified.
    moid String
    The unique identifier of this Managed Object instance.
    name String
    Name of the concrete policy.
    objectType String
    organization Property Map
    owners List<String>
    parent Property Map
    permissionResources List<Property Map>
    primaryKeyChain Property Map
    replayWindowSize Number
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    sakExpiryTime Number
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    securityPolicy String
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    sharedScope String
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    tags List<Property Map>
    versionContext Property Map

    getFabricMacSecPolicy Result

    The following output properties are available:

    Id string
    Results List<GetFabricMacSecPolicyResult>
    AccountMoid string
    AdditionalProperties string
    Ancestors List<GetFabricMacSecPolicyAncestor>
    CipherSuite string
    ClassId string
    ConfidentialityOffset string
    CreateTime string
    Description string
    DomainGroupMoid string
    FallbackKeyChain GetFabricMacSecPolicyFallbackKeyChain
    IncludeIcvIndicator bool
    KeyServerPriority double
    MacSecEaPol GetFabricMacSecPolicyMacSecEaPol
    ModTime string
    Moid string
    Name string
    ObjectType string
    Organization GetFabricMacSecPolicyOrganization
    Owners List<string>
    Parent GetFabricMacSecPolicyParent
    PermissionResources List<GetFabricMacSecPolicyPermissionResource>
    PrimaryKeyChain GetFabricMacSecPolicyPrimaryKeyChain
    ReplayWindowSize double
    SakExpiryTime double
    SecurityPolicy string
    SharedScope string
    Tags List<GetFabricMacSecPolicyTag>
    VersionContext GetFabricMacSecPolicyVersionContext
    Id string
    Results []GetFabricMacSecPolicyResult
    AccountMoid string
    AdditionalProperties string
    Ancestors []GetFabricMacSecPolicyAncestor
    CipherSuite string
    ClassId string
    ConfidentialityOffset string
    CreateTime string
    Description string
    DomainGroupMoid string
    FallbackKeyChain GetFabricMacSecPolicyFallbackKeyChain
    IncludeIcvIndicator bool
    KeyServerPriority float64
    MacSecEaPol GetFabricMacSecPolicyMacSecEaPol
    ModTime string
    Moid string
    Name string
    ObjectType string
    Organization GetFabricMacSecPolicyOrganization
    Owners []string
    Parent GetFabricMacSecPolicyParent
    PermissionResources []GetFabricMacSecPolicyPermissionResource
    PrimaryKeyChain GetFabricMacSecPolicyPrimaryKeyChain
    ReplayWindowSize float64
    SakExpiryTime float64
    SecurityPolicy string
    SharedScope string
    Tags []GetFabricMacSecPolicyTag
    VersionContext GetFabricMacSecPolicyVersionContext
    id String
    results List<GetFabricMacSecPolicyResult>
    accountMoid String
    additionalProperties String
    ancestors List<GetFabricMacSecPolicyAncestor>
    cipherSuite String
    classId String
    confidentialityOffset String
    createTime String
    description String
    domainGroupMoid String
    fallbackKeyChain GetFabricMacSecPolicyFallbackKeyChain
    includeIcvIndicator Boolean
    keyServerPriority Double
    macSecEaPol GetFabricMacSecPolicyMacSecEaPol
    modTime String
    moid String
    name String
    objectType String
    organization GetFabricMacSecPolicyOrganization
    owners List<String>
    parent GetFabricMacSecPolicyParent
    permissionResources List<GetFabricMacSecPolicyPermissionResource>
    primaryKeyChain GetFabricMacSecPolicyPrimaryKeyChain
    replayWindowSize Double
    sakExpiryTime Double
    securityPolicy String
    sharedScope String
    tags List<GetFabricMacSecPolicyTag>
    versionContext GetFabricMacSecPolicyVersionContext
    id string
    results GetFabricMacSecPolicyResult[]
    accountMoid string
    additionalProperties string
    ancestors GetFabricMacSecPolicyAncestor[]
    cipherSuite string
    classId string
    confidentialityOffset string
    createTime string
    description string
    domainGroupMoid string
    fallbackKeyChain GetFabricMacSecPolicyFallbackKeyChain
    includeIcvIndicator boolean
    keyServerPriority number
    macSecEaPol GetFabricMacSecPolicyMacSecEaPol
    modTime string
    moid string
    name string
    objectType string
    organization GetFabricMacSecPolicyOrganization
    owners string[]
    parent GetFabricMacSecPolicyParent
    permissionResources GetFabricMacSecPolicyPermissionResource[]
    primaryKeyChain GetFabricMacSecPolicyPrimaryKeyChain
    replayWindowSize number
    sakExpiryTime number
    securityPolicy string
    sharedScope string
    tags GetFabricMacSecPolicyTag[]
    versionContext GetFabricMacSecPolicyVersionContext
    id str
    results Sequence[GetFabricMacSecPolicyResult]
    account_moid str
    additional_properties str
    ancestors Sequence[GetFabricMacSecPolicyAncestor]
    cipher_suite str
    class_id str
    confidentiality_offset str
    create_time str
    description str
    domain_group_moid str
    fallback_key_chain GetFabricMacSecPolicyFallbackKeyChain
    include_icv_indicator bool
    key_server_priority float
    mac_sec_ea_pol GetFabricMacSecPolicyMacSecEaPol
    mod_time str
    moid str
    name str
    object_type str
    organization GetFabricMacSecPolicyOrganization
    owners Sequence[str]
    parent GetFabricMacSecPolicyParent
    permission_resources Sequence[GetFabricMacSecPolicyPermissionResource]
    primary_key_chain GetFabricMacSecPolicyPrimaryKeyChain
    replay_window_size float
    sak_expiry_time float
    security_policy str
    shared_scope str
    tags Sequence[GetFabricMacSecPolicyTag]
    version_context GetFabricMacSecPolicyVersionContext

    Supporting Types

    GetFabricMacSecPolicyAncestor

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.

    GetFabricMacSecPolicyFallbackKeyChain

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Name string
    Name of the concrete policy.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    SecKeys List<GetFabricMacSecPolicyFallbackKeyChainSecKey>
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Name string
    Name of the concrete policy.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    SecKeys []GetFabricMacSecPolicyFallbackKeyChainSecKey
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    name String
    Name of the concrete policy.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    secKeys List<GetFabricMacSecPolicyFallbackKeyChainSecKey>
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    name string
    Name of the concrete policy.
    objectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    secKeys GetFabricMacSecPolicyFallbackKeyChainSecKey[]
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    name str
    Name of the concrete policy.
    object_type str
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    sec_keys Sequence[GetFabricMacSecPolicyFallbackKeyChainSecKey]
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    name String
    Name of the concrete policy.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    secKeys List<Property Map>

    GetFabricMacSecPolicyFallbackKeyChainSecKey

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    CryptographicAlgorithm string
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    Id string
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    IsOctetStringSet bool
    Indicates whether the value of the 'octetString' property has been set.
    KeyType string
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    OctetString string
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    SendLifetimeDuration double
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    SendLifetimeEndTime string
    The time of day and date when the key becomes inactive.
    SendLifetimeInfinite bool
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    SendLifetimeStartTime string
    The time of day and date when the key becomes active.
    SendLifetimeTimeZone string
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    SendLifetimeUnlimited bool
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    CryptographicAlgorithm string
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    Id string
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    IsOctetStringSet bool
    Indicates whether the value of the 'octetString' property has been set.
    KeyType string
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    OctetString string
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    SendLifetimeDuration float64
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    SendLifetimeEndTime string
    The time of day and date when the key becomes inactive.
    SendLifetimeInfinite bool
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    SendLifetimeStartTime string
    The time of day and date when the key becomes active.
    SendLifetimeTimeZone string
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    SendLifetimeUnlimited bool
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    cryptographicAlgorithm String
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    id String
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    isOctetStringSet Boolean
    Indicates whether the value of the 'octetString' property has been set.
    keyType String
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    octetString String
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    sendLifetimeDuration Double
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    sendLifetimeEndTime String
    The time of day and date when the key becomes inactive.
    sendLifetimeInfinite Boolean
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    sendLifetimeStartTime String
    The time of day and date when the key becomes active.
    sendLifetimeTimeZone String
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    sendLifetimeUnlimited Boolean
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    cryptographicAlgorithm string
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    id string
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    isOctetStringSet boolean
    Indicates whether the value of the 'octetString' property has been set.
    keyType string
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    objectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    octetString string
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    sendLifetimeDuration number
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    sendLifetimeEndTime string
    The time of day and date when the key becomes inactive.
    sendLifetimeInfinite boolean
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    sendLifetimeStartTime string
    The time of day and date when the key becomes active.
    sendLifetimeTimeZone string
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    sendLifetimeUnlimited boolean
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    cryptographic_algorithm str
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    id str
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    is_octet_string_set bool
    Indicates whether the value of the 'octetString' property has been set.
    key_type str
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    object_type str
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    octet_string str
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    send_lifetime_duration float
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    send_lifetime_end_time str
    The time of day and date when the key becomes inactive.
    send_lifetime_infinite bool
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    send_lifetime_start_time str
    The time of day and date when the key becomes active.
    send_lifetime_time_zone str
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    send_lifetime_unlimited bool
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    cryptographicAlgorithm String
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    id String
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    isOctetStringSet Boolean
    Indicates whether the value of the 'octetString' property has been set.
    keyType String
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    octetString String
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    sendLifetimeDuration Number
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    sendLifetimeEndTime String
    The time of day and date when the key becomes inactive.
    sendLifetimeInfinite Boolean
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    sendLifetimeStartTime String
    The time of day and date when the key becomes active.
    sendLifetimeTimeZone String
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    sendLifetimeUnlimited Boolean
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.

    GetFabricMacSecPolicyMacSecEaPol

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    EaPolEthertype string
    Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
    EaPolMacAddress string
    MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    EaPolEthertype string
    Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
    EaPolMacAddress string
    MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    eaPolEthertype String
    Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
    eaPolMacAddress String
    MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    eaPolEthertype string
    Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
    eaPolMacAddress string
    MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
    objectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    ea_pol_ethertype str
    Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
    ea_pol_mac_address str
    MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
    object_type str
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    eaPolEthertype String
    Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
    eaPolMacAddress String
    MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.

    GetFabricMacSecPolicyOrganization

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.

    GetFabricMacSecPolicyParent

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.

    GetFabricMacSecPolicyPermissionResource

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.

    GetFabricMacSecPolicyPrimaryKeyChain

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Name string
    Name of the concrete policy.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    SecKeys List<GetFabricMacSecPolicyPrimaryKeyChainSecKey>
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Name string
    Name of the concrete policy.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    SecKeys []GetFabricMacSecPolicyPrimaryKeyChainSecKey
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    name String
    Name of the concrete policy.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    secKeys List<GetFabricMacSecPolicyPrimaryKeyChainSecKey>
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    name string
    Name of the concrete policy.
    objectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    secKeys GetFabricMacSecPolicyPrimaryKeyChainSecKey[]
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    name str
    Name of the concrete policy.
    object_type str
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    sec_keys Sequence[GetFabricMacSecPolicyPrimaryKeyChainSecKey]
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    name String
    Name of the concrete policy.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    secKeys List<Property Map>

    GetFabricMacSecPolicyPrimaryKeyChainSecKey

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    CryptographicAlgorithm string
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    Id string
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    IsOctetStringSet bool
    Indicates whether the value of the 'octetString' property has been set.
    KeyType string
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    OctetString string
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    SendLifetimeDuration double
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    SendLifetimeEndTime string
    The time of day and date when the key becomes inactive.
    SendLifetimeInfinite bool
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    SendLifetimeStartTime string
    The time of day and date when the key becomes active.
    SendLifetimeTimeZone string
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    SendLifetimeUnlimited bool
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    CryptographicAlgorithm string
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    Id string
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    IsOctetStringSet bool
    Indicates whether the value of the 'octetString' property has been set.
    KeyType string
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    OctetString string
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    SendLifetimeDuration float64
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    SendLifetimeEndTime string
    The time of day and date when the key becomes inactive.
    SendLifetimeInfinite bool
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    SendLifetimeStartTime string
    The time of day and date when the key becomes active.
    SendLifetimeTimeZone string
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    SendLifetimeUnlimited bool
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    cryptographicAlgorithm String
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    id String
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    isOctetStringSet Boolean
    Indicates whether the value of the 'octetString' property has been set.
    keyType String
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    octetString String
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    sendLifetimeDuration Double
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    sendLifetimeEndTime String
    The time of day and date when the key becomes inactive.
    sendLifetimeInfinite Boolean
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    sendLifetimeStartTime String
    The time of day and date when the key becomes active.
    sendLifetimeTimeZone String
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    sendLifetimeUnlimited Boolean
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    cryptographicAlgorithm string
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    id string
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    isOctetStringSet boolean
    Indicates whether the value of the 'octetString' property has been set.
    keyType string
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    objectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    octetString string
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    sendLifetimeDuration number
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    sendLifetimeEndTime string
    The time of day and date when the key becomes inactive.
    sendLifetimeInfinite boolean
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    sendLifetimeStartTime string
    The time of day and date when the key becomes active.
    sendLifetimeTimeZone string
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    sendLifetimeUnlimited boolean
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    cryptographic_algorithm str
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    id str
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    is_octet_string_set bool
    Indicates whether the value of the 'octetString' property has been set.
    key_type str
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    object_type str
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    octet_string str
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    send_lifetime_duration float
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    send_lifetime_end_time str
    The time of day and date when the key becomes inactive.
    send_lifetime_infinite bool
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    send_lifetime_start_time str
    The time of day and date when the key becomes active.
    send_lifetime_time_zone str
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    send_lifetime_unlimited bool
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    cryptographicAlgorithm String
    The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).

    • AES_256_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
    • AES_128_CMAC - Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
    id String
    Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
    isOctetStringSet Boolean
    Indicates whether the value of the 'octetString' property has been set.
    keyType String
    The type of encryption used for the specified key.

    • Type-0 - No encryption for the specified octetString.
    • Type-6 - Proprietary advanced encryption standard for the specified octetString.
    • Type-7 - Proprietary insecure encryption for the specified octetString.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    octetString String
    The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
    sendLifetimeDuration Number
    The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
    sendLifetimeEndTime String
    The time of day and date when the key becomes inactive.
    sendLifetimeInfinite Boolean
    Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
    sendLifetimeStartTime String
    The time of day and date when the key becomes active.
    sendLifetimeTimeZone String
    The time zone used for key lifetime configurations.

    • UTC - The Universal Time (UTC) for key lifetime configurations.
    • Local - The local time zone of the device for key lifetime configurations.
    sendLifetimeUnlimited Boolean
    Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.

    GetFabricMacSecPolicyResult

    AccountMoid string
    The Account ID for this managed object.
    AdditionalProperties string
    Ancestors List<GetFabricMacSecPolicyResultAncestor>
    CipherSuite string
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    ClassId string
    ConfidentialityOffset string
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    CreateTime string
    The time when this managed object was created.
    Description string
    Description of the policy.
    DomainGroupMoid string
    The DomainGroup ID for this managed object.
    FallbackKeyChains List<GetFabricMacSecPolicyResultFallbackKeyChain>
    IncludeIcvIndicator bool
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    KeyServerPriority double
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    MacSecEaPols List<GetFabricMacSecPolicyResultMacSecEaPol>
    ModTime string
    The time when this managed object was last modified.
    Moid string
    The unique identifier of this Managed Object instance.
    Name string
    Name of the concrete policy.
    ObjectType string
    Organizations List<GetFabricMacSecPolicyResultOrganization>
    Owners List<string>
    Parents List<GetFabricMacSecPolicyResultParent>
    PermissionResources List<GetFabricMacSecPolicyResultPermissionResource>
    PrimaryKeyChains List<GetFabricMacSecPolicyResultPrimaryKeyChain>
    ReplayWindowSize double
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    SakExpiryTime double
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    SecurityPolicy string
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    SharedScope string
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    Tags List<GetFabricMacSecPolicyResultTag>
    VersionContexts List<GetFabricMacSecPolicyResultVersionContext>
    AccountMoid string
    The Account ID for this managed object.
    AdditionalProperties string
    Ancestors []GetFabricMacSecPolicyResultAncestor
    CipherSuite string
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    ClassId string
    ConfidentialityOffset string
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    CreateTime string
    The time when this managed object was created.
    Description string
    Description of the policy.
    DomainGroupMoid string
    The DomainGroup ID for this managed object.
    FallbackKeyChains []GetFabricMacSecPolicyResultFallbackKeyChain
    IncludeIcvIndicator bool
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    KeyServerPriority float64
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    MacSecEaPols []GetFabricMacSecPolicyResultMacSecEaPol
    ModTime string
    The time when this managed object was last modified.
    Moid string
    The unique identifier of this Managed Object instance.
    Name string
    Name of the concrete policy.
    ObjectType string
    Organizations []GetFabricMacSecPolicyResultOrganization
    Owners []string
    Parents []GetFabricMacSecPolicyResultParent
    PermissionResources []GetFabricMacSecPolicyResultPermissionResource
    PrimaryKeyChains []GetFabricMacSecPolicyResultPrimaryKeyChain
    ReplayWindowSize float64
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    SakExpiryTime float64
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    SecurityPolicy string
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    SharedScope string
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    Tags []GetFabricMacSecPolicyResultTag
    VersionContexts []GetFabricMacSecPolicyResultVersionContext
    accountMoid String
    The Account ID for this managed object.
    additionalProperties String
    ancestors List<GetFabricMacSecPolicyResultAncestor>
    cipherSuite String
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    classId String
    confidentialityOffset String
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    createTime String
    The time when this managed object was created.
    description String
    Description of the policy.
    domainGroupMoid String
    The DomainGroup ID for this managed object.
    fallbackKeyChains List<GetFabricMacSecPolicyResultFallbackKeyChain>
    includeIcvIndicator Boolean
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    keyServerPriority Double
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    macSecEaPols List<GetFabricMacSecPolicyResultMacSecEaPol>
    modTime String
    The time when this managed object was last modified.
    moid String
    The unique identifier of this Managed Object instance.
    name String
    Name of the concrete policy.
    objectType String
    organizations List<GetFabricMacSecPolicyResultOrganization>
    owners List<String>
    parents List<GetFabricMacSecPolicyResultParent>
    permissionResources List<GetFabricMacSecPolicyResultPermissionResource>
    primaryKeyChains List<GetFabricMacSecPolicyResultPrimaryKeyChain>
    replayWindowSize Double
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    sakExpiryTime Double
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    securityPolicy String
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    sharedScope String
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    tags List<GetFabricMacSecPolicyResultTag>
    versionContexts List<GetFabricMacSecPolicyResultVersionContext>
    accountMoid string
    The Account ID for this managed object.
    additionalProperties string
    ancestors GetFabricMacSecPolicyResultAncestor[]
    cipherSuite string
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    classId string
    confidentialityOffset string
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    createTime string
    The time when this managed object was created.
    description string
    Description of the policy.
    domainGroupMoid string
    The DomainGroup ID for this managed object.
    fallbackKeyChains GetFabricMacSecPolicyResultFallbackKeyChain[]
    includeIcvIndicator boolean
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    keyServerPriority number
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    macSecEaPols GetFabricMacSecPolicyResultMacSecEaPol[]
    modTime string
    The time when this managed object was last modified.
    moid string
    The unique identifier of this Managed Object instance.
    name string
    Name of the concrete policy.
    objectType string
    organizations GetFabricMacSecPolicyResultOrganization[]
    owners string[]
    parents GetFabricMacSecPolicyResultParent[]
    permissionResources GetFabricMacSecPolicyResultPermissionResource[]
    primaryKeyChains GetFabricMacSecPolicyResultPrimaryKeyChain[]
    replayWindowSize number
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    sakExpiryTime number
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    securityPolicy string
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    sharedScope string
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    tags GetFabricMacSecPolicyResultTag[]
    versionContexts GetFabricMacSecPolicyResultVersionContext[]
    account_moid str
    The Account ID for this managed object.
    additional_properties str
    ancestors Sequence[GetFabricMacSecPolicyResultAncestor]
    cipher_suite str
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    class_id str
    confidentiality_offset str
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    create_time str
    The time when this managed object was created.
    description str
    Description of the policy.
    domain_group_moid str
    The DomainGroup ID for this managed object.
    fallback_key_chains Sequence[GetFabricMacSecPolicyResultFallbackKeyChain]
    include_icv_indicator bool
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    key_server_priority float
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    mac_sec_ea_pols Sequence[GetFabricMacSecPolicyResultMacSecEaPol]
    mod_time str
    The time when this managed object was last modified.
    moid str
    The unique identifier of this Managed Object instance.
    name str
    Name of the concrete policy.
    object_type str
    organizations Sequence[GetFabricMacSecPolicyResultOrganization]
    owners Sequence[str]
    parents Sequence[GetFabricMacSecPolicyResultParent]
    permission_resources Sequence[GetFabricMacSecPolicyResultPermissionResource]
    primary_key_chains Sequence[GetFabricMacSecPolicyResultPrimaryKeyChain]
    replay_window_size float
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    sak_expiry_time float
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    security_policy str
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    shared_scope str
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    tags Sequence[GetFabricMacSecPolicyResultTag]
    version_contexts Sequence[GetFabricMacSecPolicyResultVersionContext]
    accountMoid String
    The Account ID for this managed object.
    additionalProperties String
    ancestors List<Property Map>
    cipherSuite String
    Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256 - An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.* GCM-AES-128 - This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.* GCM-AES-256 - This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.* GCM-AES-XPN-128 - An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
    classId String
    confidentialityOffset String
    The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0 - A value of 0 means the entire ethernet frame is encrypted.* CONF-OFFSET-30 - The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.* CONF-OFFSET-50 - The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
    createTime String
    The time when this managed object was created.
    description String
    Description of the policy.
    domainGroupMoid String
    The DomainGroup ID for this managed object.
    fallbackKeyChains List<Property Map>
    includeIcvIndicator Boolean
    Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
    keyServerPriority Number
    The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
    macSecEaPols List<Property Map>
    modTime String
    The time when this managed object was last modified.
    moid String
    The unique identifier of this Managed Object instance.
    name String
    Name of the concrete policy.
    objectType String
    organizations List<Property Map>
    owners List<String>
    parents List<Property Map>
    permissionResources List<Property Map>
    primaryKeyChains List<Property Map>
    replayWindowSize Number
    Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
    sakExpiryTime Number
    Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
    securityPolicy String
    The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure - Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.* Must-secure - Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
    sharedScope String
    Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    tags List<Property Map>
    versionContexts List<Property Map>

    GetFabricMacSecPolicyResultAncestor

    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String
    additionalProperties string
    classId string
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    selector string
    additional_properties str
    class_id str
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    selector str
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String

    GetFabricMacSecPolicyResultFallbackKeyChain

    additionalProperties String
    classId String
    name String
    Name of the concrete policy.
    objectType String
    secKeys List<Property Map>

    GetFabricMacSecPolicyResultFallbackKeyChainSecKey

    GetFabricMacSecPolicyResultMacSecEaPol

    GetFabricMacSecPolicyResultOrganization

    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String
    additionalProperties string
    classId string
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    selector string
    additional_properties str
    class_id str
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    selector str
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String

    GetFabricMacSecPolicyResultParent

    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String
    additionalProperties string
    classId string
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    selector string
    additional_properties str
    class_id str
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    selector str
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String

    GetFabricMacSecPolicyResultPermissionResource

    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String
    additionalProperties string
    classId string
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    selector string
    additional_properties str
    class_id str
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    selector str
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String

    GetFabricMacSecPolicyResultPrimaryKeyChain

    additionalProperties String
    classId String
    name String
    Name of the concrete policy.
    objectType String
    secKeys List<Property Map>

    GetFabricMacSecPolicyResultPrimaryKeyChainSecKey

    GetFabricMacSecPolicyResultTag

    AdditionalProperties string
    Key string
    Value string
    AdditionalProperties string
    Key string
    Value string
    additionalProperties String
    key String
    value String
    additionalProperties string
    key string
    value string
    additionalProperties String
    key String
    value String

    GetFabricMacSecPolicyResultVersionContext

    GetFabricMacSecPolicyResultVersionContextInterestedMo

    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String
    additionalProperties string
    classId string
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    selector string
    additional_properties str
    class_id str
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    selector str
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String

    GetFabricMacSecPolicyResultVersionContextRefMo

    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    AdditionalProperties string
    ClassId string
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    Selector string
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String
    additionalProperties string
    classId string
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    selector string
    additional_properties str
    class_id str
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    selector str
    additionalProperties String
    classId String
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    selector String

    GetFabricMacSecPolicyTag

    AdditionalProperties string
    Key string
    The string representation of a tag key.
    Value string
    The string representation of a tag value.
    AdditionalProperties string
    Key string
    The string representation of a tag key.
    Value string
    The string representation of a tag value.
    additionalProperties String
    key String
    The string representation of a tag key.
    value String
    The string representation of a tag value.
    additionalProperties string
    key string
    The string representation of a tag key.
    value string
    The string representation of a tag value.
    additional_properties str
    key str
    The string representation of a tag key.
    value str
    The string representation of a tag value.
    additionalProperties String
    key String
    The string representation of a tag key.
    value String
    The string representation of a tag value.

    GetFabricMacSecPolicyVersionContext

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    InterestedMos List<GetFabricMacSecPolicyVersionContextInterestedMo>
    MarkedForDeletion bool
    The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    NrVersion string
    The version of the Managed Object, e.g. an incrementing number or a hash id.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    RefMo GetFabricMacSecPolicyVersionContextRefMo
    A reference to the original Managed Object.
    Timestamp string
    The time this versioned Managed Object was created.
    VersionType string
    Specifies type of version. Currently the only supported value is "Configured" that is used to keep track of snapshots of policies and profiles that are intended to be configured to target endpoints.

    • Modified - Version created every time an object is modified.
    • Configured - Version created every time an object is configured to the service profile.
    • Deployed - Version created for objects related to a service profile when it is deployed.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    InterestedMos []GetFabricMacSecPolicyVersionContextInterestedMo
    MarkedForDeletion bool
    The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    NrVersion string
    The version of the Managed Object, e.g. an incrementing number or a hash id.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    RefMo GetFabricMacSecPolicyVersionContextRefMo
    A reference to the original Managed Object.
    Timestamp string
    The time this versioned Managed Object was created.
    VersionType string
    Specifies type of version. Currently the only supported value is "Configured" that is used to keep track of snapshots of policies and profiles that are intended to be configured to target endpoints.

    • Modified - Version created every time an object is modified.
    • Configured - Version created every time an object is configured to the service profile.
    • Deployed - Version created for objects related to a service profile when it is deployed.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    interestedMos List<GetFabricMacSecPolicyVersionContextInterestedMo>
    markedForDeletion Boolean
    The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    nrVersion String
    The version of the Managed Object, e.g. an incrementing number or a hash id.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    refMo GetFabricMacSecPolicyVersionContextRefMo
    A reference to the original Managed Object.
    timestamp String
    The time this versioned Managed Object was created.
    versionType String
    Specifies type of version. Currently the only supported value is "Configured" that is used to keep track of snapshots of policies and profiles that are intended to be configured to target endpoints.

    • Modified - Version created every time an object is modified.
    • Configured - Version created every time an object is configured to the service profile.
    • Deployed - Version created for objects related to a service profile when it is deployed.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    interestedMos GetFabricMacSecPolicyVersionContextInterestedMo[]
    markedForDeletion boolean
    The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    nrVersion string
    The version of the Managed Object, e.g. an incrementing number or a hash id.
    objectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    refMo GetFabricMacSecPolicyVersionContextRefMo
    A reference to the original Managed Object.
    timestamp string
    The time this versioned Managed Object was created.
    versionType string
    Specifies type of version. Currently the only supported value is "Configured" that is used to keep track of snapshots of policies and profiles that are intended to be configured to target endpoints.

    • Modified - Version created every time an object is modified.
    • Configured - Version created every time an object is configured to the service profile.
    • Deployed - Version created for objects related to a service profile when it is deployed.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    interested_mos Sequence[GetFabricMacSecPolicyVersionContextInterestedMo]
    marked_for_deletion bool
    The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    nr_version str
    The version of the Managed Object, e.g. an incrementing number or a hash id.
    object_type str
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    ref_mo GetFabricMacSecPolicyVersionContextRefMo
    A reference to the original Managed Object.
    timestamp str
    The time this versioned Managed Object was created.
    version_type str
    Specifies type of version. Currently the only supported value is "Configured" that is used to keep track of snapshots of policies and profiles that are intended to be configured to target endpoints.

    • Modified - Version created every time an object is modified.
    • Configured - Version created every time an object is configured to the service profile.
    • Deployed - Version created for objects related to a service profile when it is deployed.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    interestedMos List<Property Map>
    markedForDeletion Boolean
    The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    nrVersion String
    The version of the Managed Object, e.g. an incrementing number or a hash id.
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    refMo Property Map
    A reference to the original Managed Object.
    timestamp String
    The time this versioned Managed Object was created.
    versionType String
    Specifies type of version. Currently the only supported value is "Configured" that is used to keep track of snapshots of policies and profiles that are intended to be configured to target endpoints.

    • Modified - Version created every time an object is modified.
    • Configured - Version created every time an object is configured to the service profile.
    • Deployed - Version created for objects related to a service profile when it is deployed.

    GetFabricMacSecPolicyVersionContextInterestedMo

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.

    GetFabricMacSecPolicyVersionContextRefMo

    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    Moid string
    The unique identifier of this Managed Object instance.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid string
    The unique identifier of this Managed Object instance.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid str
    The unique identifier of this Managed Object instance.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    moid String
    The unique identifier of this Managed Object instance.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field may be set instead of 'moid' by clients.

    1. If 'moid' is set this field is ignored.
    2. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.

    Package Details

    Repository
    intersight ciscodevnet/terraform-provider-intersight
    License
    Notes
    This Pulumi package is based on the intersight Terraform Provider.
    intersight logo
    intersight 1.0.64 published on Wednesday, Apr 30, 2025 by ciscodevnet