intersight 1.0.64 published on Wednesday, Apr 30, 2025 by ciscodevnet
intersight.getFabricMacSecPolicy
Explore with Pulumi AI
intersight 1.0.64 published on Wednesday, Apr 30, 2025 by ciscodevnet
A placeholder for MACSec (Media Access Control Security) configuration parameters, Primary/Fallback key chain and EAPol (Extensible Authentication Protocol over LAN) configurations.
Using getFabricMacSecPolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getFabricMacSecPolicy(args: GetFabricMacSecPolicyArgs, opts?: InvokeOptions): Promise<GetFabricMacSecPolicyResult>
function getFabricMacSecPolicyOutput(args: GetFabricMacSecPolicyOutputArgs, opts?: InvokeOptions): Output<GetFabricMacSecPolicyResult>
def get_fabric_mac_sec_policy(account_moid: Optional[str] = None,
additional_properties: Optional[str] = None,
ancestors: Optional[Sequence[GetFabricMacSecPolicyAncestor]] = None,
cipher_suite: Optional[str] = None,
class_id: Optional[str] = None,
confidentiality_offset: Optional[str] = None,
create_time: Optional[str] = None,
description: Optional[str] = None,
domain_group_moid: Optional[str] = None,
fallback_key_chain: Optional[GetFabricMacSecPolicyFallbackKeyChain] = None,
id: Optional[str] = None,
include_icv_indicator: Optional[bool] = None,
key_server_priority: Optional[float] = None,
mac_sec_ea_pol: Optional[GetFabricMacSecPolicyMacSecEaPol] = None,
mod_time: Optional[str] = None,
moid: Optional[str] = None,
name: Optional[str] = None,
object_type: Optional[str] = None,
organization: Optional[GetFabricMacSecPolicyOrganization] = None,
owners: Optional[Sequence[str]] = None,
parent: Optional[GetFabricMacSecPolicyParent] = None,
permission_resources: Optional[Sequence[GetFabricMacSecPolicyPermissionResource]] = None,
primary_key_chain: Optional[GetFabricMacSecPolicyPrimaryKeyChain] = None,
replay_window_size: Optional[float] = None,
sak_expiry_time: Optional[float] = None,
security_policy: Optional[str] = None,
shared_scope: Optional[str] = None,
tags: Optional[Sequence[GetFabricMacSecPolicyTag]] = None,
version_context: Optional[GetFabricMacSecPolicyVersionContext] = None,
opts: Optional[InvokeOptions] = None) -> GetFabricMacSecPolicyResult
def get_fabric_mac_sec_policy_output(account_moid: Optional[pulumi.Input[str]] = None,
additional_properties: Optional[pulumi.Input[str]] = None,
ancestors: Optional[pulumi.Input[Sequence[pulumi.Input[GetFabricMacSecPolicyAncestorArgs]]]] = None,
cipher_suite: Optional[pulumi.Input[str]] = None,
class_id: Optional[pulumi.Input[str]] = None,
confidentiality_offset: Optional[pulumi.Input[str]] = None,
create_time: Optional[pulumi.Input[str]] = None,
description: Optional[pulumi.Input[str]] = None,
domain_group_moid: Optional[pulumi.Input[str]] = None,
fallback_key_chain: Optional[pulumi.Input[GetFabricMacSecPolicyFallbackKeyChainArgs]] = None,
id: Optional[pulumi.Input[str]] = None,
include_icv_indicator: Optional[pulumi.Input[bool]] = None,
key_server_priority: Optional[pulumi.Input[float]] = None,
mac_sec_ea_pol: Optional[pulumi.Input[GetFabricMacSecPolicyMacSecEaPolArgs]] = None,
mod_time: Optional[pulumi.Input[str]] = None,
moid: Optional[pulumi.Input[str]] = None,
name: Optional[pulumi.Input[str]] = None,
object_type: Optional[pulumi.Input[str]] = None,
organization: Optional[pulumi.Input[GetFabricMacSecPolicyOrganizationArgs]] = None,
owners: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
parent: Optional[pulumi.Input[GetFabricMacSecPolicyParentArgs]] = None,
permission_resources: Optional[pulumi.Input[Sequence[pulumi.Input[GetFabricMacSecPolicyPermissionResourceArgs]]]] = None,
primary_key_chain: Optional[pulumi.Input[GetFabricMacSecPolicyPrimaryKeyChainArgs]] = None,
replay_window_size: Optional[pulumi.Input[float]] = None,
sak_expiry_time: Optional[pulumi.Input[float]] = None,
security_policy: Optional[pulumi.Input[str]] = None,
shared_scope: Optional[pulumi.Input[str]] = None,
tags: Optional[pulumi.Input[Sequence[pulumi.Input[GetFabricMacSecPolicyTagArgs]]]] = None,
version_context: Optional[pulumi.Input[GetFabricMacSecPolicyVersionContextArgs]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetFabricMacSecPolicyResult]
func LookupFabricMacSecPolicy(ctx *Context, args *LookupFabricMacSecPolicyArgs, opts ...InvokeOption) (*LookupFabricMacSecPolicyResult, error)
func LookupFabricMacSecPolicyOutput(ctx *Context, args *LookupFabricMacSecPolicyOutputArgs, opts ...InvokeOption) LookupFabricMacSecPolicyResultOutput
> Note: This function is named LookupFabricMacSecPolicy
in the Go SDK.
public static class GetFabricMacSecPolicy
{
public static Task<GetFabricMacSecPolicyResult> InvokeAsync(GetFabricMacSecPolicyArgs args, InvokeOptions? opts = null)
public static Output<GetFabricMacSecPolicyResult> Invoke(GetFabricMacSecPolicyInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetFabricMacSecPolicyResult> getFabricMacSecPolicy(GetFabricMacSecPolicyArgs args, InvokeOptions options)
public static Output<GetFabricMacSecPolicyResult> getFabricMacSecPolicy(GetFabricMacSecPolicyArgs args, InvokeOptions options)
fn::invoke:
function: intersight:index/getFabricMacSecPolicy:getFabricMacSecPolicy
arguments:
# arguments dictionary
The following arguments are supported:
- Account
Moid string - The Account ID for this managed object.
- Additional
Properties string - Ancestors
List<Get
Fabric Mac Sec Policy Ancestor> - Cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - Class
Id string - Confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - Create
Time string - The time when this managed object was created.
- Description string
- Description of the policy.
- Domain
Group stringMoid - The DomainGroup ID for this managed object.
- Fallback
Key GetChain Fabric Mac Sec Policy Fallback Key Chain - Id string
- Include
Icv boolIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- Key
Server doublePriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- Mac
Sec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol - Mod
Time string - The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- Object
Type string - Organization
Get
Fabric Mac Sec Policy Organization - Owners List<string>
- Parent
Get
Fabric Mac Sec Policy Parent - Permission
Resources List<GetFabric Mac Sec Policy Permission Resource> - Primary
Key GetChain Fabric Mac Sec Policy Primary Key Chain - Replay
Window doubleSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- Sak
Expiry doubleTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- Security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Get
Fabric Mac Sec Policy Tag> - Version
Context GetFabric Mac Sec Policy Version Context
- Account
Moid string - The Account ID for this managed object.
- Additional
Properties string - Ancestors
[]Get
Fabric Mac Sec Policy Ancestor - Cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - Class
Id string - Confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - Create
Time string - The time when this managed object was created.
- Description string
- Description of the policy.
- Domain
Group stringMoid - The DomainGroup ID for this managed object.
- Fallback
Key GetChain Fabric Mac Sec Policy Fallback Key Chain - Id string
- Include
Icv boolIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- Key
Server float64Priority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- Mac
Sec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol - Mod
Time string - The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- Object
Type string - Organization
Get
Fabric Mac Sec Policy Organization - Owners []string
- Parent
Get
Fabric Mac Sec Policy Parent - Permission
Resources []GetFabric Mac Sec Policy Permission Resource - Primary
Key GetChain Fabric Mac Sec Policy Primary Key Chain - Replay
Window float64Size - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- Sak
Expiry float64Time - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- Security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- []Get
Fabric Mac Sec Policy Tag - Version
Context GetFabric Mac Sec Policy Version Context
- account
Moid String - The Account ID for this managed object.
- additional
Properties String - ancestors
List<Get
Fabric Mac Sec Policy Ancestor> - cipher
Suite String - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id String - confidentiality
Offset String - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time String - The time when this managed object was created.
- description String
- Description of the policy.
- domain
Group StringMoid - The DomainGroup ID for this managed object.
- fallback
Key GetChain Fabric Mac Sec Policy Fallback Key Chain - id String
- include
Icv BooleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server DoublePriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol - mod
Time String - The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- object
Type String - organization
Get
Fabric Mac Sec Policy Organization - owners List<String>
- parent
Get
Fabric Mac Sec Policy Parent - permission
Resources List<GetFabric Mac Sec Policy Permission Resource> - primary
Key GetChain Fabric Mac Sec Policy Primary Key Chain - replay
Window DoubleSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry DoubleTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy String - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - String
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Get
Fabric Mac Sec Policy Tag> - version
Context GetFabric Mac Sec Policy Version Context
- account
Moid string - The Account ID for this managed object.
- additional
Properties string - ancestors
Get
Fabric Mac Sec Policy Ancestor[] - cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id string - confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time string - The time when this managed object was created.
- description string
- Description of the policy.
- domain
Group stringMoid - The DomainGroup ID for this managed object.
- fallback
Key GetChain Fabric Mac Sec Policy Fallback Key Chain - id string
- include
Icv booleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server numberPriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol - mod
Time string - The time when this managed object was last modified.
- moid string
- The unique identifier of this Managed Object instance.
- name string
- Name of the concrete policy.
- object
Type string - organization
Get
Fabric Mac Sec Policy Organization - owners string[]
- parent
Get
Fabric Mac Sec Policy Parent - permission
Resources GetFabric Mac Sec Policy Permission Resource[] - primary
Key GetChain Fabric Mac Sec Policy Primary Key Chain - replay
Window numberSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry numberTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- Get
Fabric Mac Sec Policy Tag[] - version
Context GetFabric Mac Sec Policy Version Context
- account_
moid str - The Account ID for this managed object.
- additional_
properties str - ancestors
Sequence[Get
Fabric Mac Sec Policy Ancestor] - cipher_
suite str - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class_
id str - confidentiality_
offset str - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create_
time str - The time when this managed object was created.
- description str
- Description of the policy.
- domain_
group_ strmoid - The DomainGroup ID for this managed object.
- fallback_
key_ Getchain Fabric Mac Sec Policy Fallback Key Chain - id str
- include_
icv_ boolindicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key_
server_ floatpriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac_
sec_ Getea_ pol Fabric Mac Sec Policy Mac Sec Ea Pol - mod_
time str - The time when this managed object was last modified.
- moid str
- The unique identifier of this Managed Object instance.
- name str
- Name of the concrete policy.
- object_
type str - organization
Get
Fabric Mac Sec Policy Organization - owners Sequence[str]
- parent
Get
Fabric Mac Sec Policy Parent - permission_
resources Sequence[GetFabric Mac Sec Policy Permission Resource] - primary_
key_ Getchain Fabric Mac Sec Policy Primary Key Chain - replay_
window_ floatsize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak_
expiry_ floattime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security_
policy str - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - str
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- Sequence[Get
Fabric Mac Sec Policy Tag] - version_
context GetFabric Mac Sec Policy Version Context
- account
Moid String - The Account ID for this managed object.
- additional
Properties String - ancestors List<Property Map>
- cipher
Suite String - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id String - confidentiality
Offset String - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time String - The time when this managed object was created.
- description String
- Description of the policy.
- domain
Group StringMoid - The DomainGroup ID for this managed object.
- fallback
Key Property MapChain - id String
- include
Icv BooleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server NumberPriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec Property MapEa Pol - mod
Time String - The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- object
Type String - organization Property Map
- owners List<String>
- parent Property Map
- permission
Resources List<Property Map> - primary
Key Property MapChain - replay
Window NumberSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry NumberTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy String - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - String
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Property Map>
- version
Context Property Map
getFabricMacSecPolicy Result
The following output properties are available:
- Id string
- Results
List<Get
Fabric Mac Sec Policy Result> - Account
Moid string - Additional
Properties string - Ancestors
List<Get
Fabric Mac Sec Policy Ancestor> - Cipher
Suite string - Class
Id string - Confidentiality
Offset string - Create
Time string - Description string
- Domain
Group stringMoid - Fallback
Key GetChain Fabric Mac Sec Policy Fallback Key Chain - Include
Icv boolIndicator - Key
Server doublePriority - Mac
Sec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol - Mod
Time string - Moid string
- Name string
- Object
Type string - Organization
Get
Fabric Mac Sec Policy Organization - Owners List<string>
- Parent
Get
Fabric Mac Sec Policy Parent - Permission
Resources List<GetFabric Mac Sec Policy Permission Resource> - Primary
Key GetChain Fabric Mac Sec Policy Primary Key Chain - Replay
Window doubleSize - Sak
Expiry doubleTime - Security
Policy string - string
- List<Get
Fabric Mac Sec Policy Tag> - Version
Context GetFabric Mac Sec Policy Version Context
- Id string
- Results
[]Get
Fabric Mac Sec Policy Result - Account
Moid string - Additional
Properties string - Ancestors
[]Get
Fabric Mac Sec Policy Ancestor - Cipher
Suite string - Class
Id string - Confidentiality
Offset string - Create
Time string - Description string
- Domain
Group stringMoid - Fallback
Key GetChain Fabric Mac Sec Policy Fallback Key Chain - Include
Icv boolIndicator - Key
Server float64Priority - Mac
Sec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol - Mod
Time string - Moid string
- Name string
- Object
Type string - Organization
Get
Fabric Mac Sec Policy Organization - Owners []string
- Parent
Get
Fabric Mac Sec Policy Parent - Permission
Resources []GetFabric Mac Sec Policy Permission Resource - Primary
Key GetChain Fabric Mac Sec Policy Primary Key Chain - Replay
Window float64Size - Sak
Expiry float64Time - Security
Policy string - string
- []Get
Fabric Mac Sec Policy Tag - Version
Context GetFabric Mac Sec Policy Version Context
- id String
- results
List<Get
Fabric Mac Sec Policy Result> - account
Moid String - additional
Properties String - ancestors
List<Get
Fabric Mac Sec Policy Ancestor> - cipher
Suite String - class
Id String - confidentiality
Offset String - create
Time String - description String
- domain
Group StringMoid - fallback
Key GetChain Fabric Mac Sec Policy Fallback Key Chain - include
Icv BooleanIndicator - key
Server DoublePriority - mac
Sec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol - mod
Time String - moid String
- name String
- object
Type String - organization
Get
Fabric Mac Sec Policy Organization - owners List<String>
- parent
Get
Fabric Mac Sec Policy Parent - permission
Resources List<GetFabric Mac Sec Policy Permission Resource> - primary
Key GetChain Fabric Mac Sec Policy Primary Key Chain - replay
Window DoubleSize - sak
Expiry DoubleTime - security
Policy String - String
- List<Get
Fabric Mac Sec Policy Tag> - version
Context GetFabric Mac Sec Policy Version Context
- id string
- results
Get
Fabric Mac Sec Policy Result[] - account
Moid string - additional
Properties string - ancestors
Get
Fabric Mac Sec Policy Ancestor[] - cipher
Suite string - class
Id string - confidentiality
Offset string - create
Time string - description string
- domain
Group stringMoid - fallback
Key GetChain Fabric Mac Sec Policy Fallback Key Chain - include
Icv booleanIndicator - key
Server numberPriority - mac
Sec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol - mod
Time string - moid string
- name string
- object
Type string - organization
Get
Fabric Mac Sec Policy Organization - owners string[]
- parent
Get
Fabric Mac Sec Policy Parent - permission
Resources GetFabric Mac Sec Policy Permission Resource[] - primary
Key GetChain Fabric Mac Sec Policy Primary Key Chain - replay
Window numberSize - sak
Expiry numberTime - security
Policy string - string
- Get
Fabric Mac Sec Policy Tag[] - version
Context GetFabric Mac Sec Policy Version Context
- id str
- results
Sequence[Get
Fabric Mac Sec Policy Result] - account_
moid str - additional_
properties str - ancestors
Sequence[Get
Fabric Mac Sec Policy Ancestor] - cipher_
suite str - class_
id str - confidentiality_
offset str - create_
time str - description str
- domain_
group_ strmoid - fallback_
key_ Getchain Fabric Mac Sec Policy Fallback Key Chain - include_
icv_ boolindicator - key_
server_ floatpriority - mac_
sec_ Getea_ pol Fabric Mac Sec Policy Mac Sec Ea Pol - mod_
time str - moid str
- name str
- object_
type str - organization
Get
Fabric Mac Sec Policy Organization - owners Sequence[str]
- parent
Get
Fabric Mac Sec Policy Parent - permission_
resources Sequence[GetFabric Mac Sec Policy Permission Resource] - primary_
key_ Getchain Fabric Mac Sec Policy Primary Key Chain - replay_
window_ floatsize - sak_
expiry_ floattime - security_
policy str - str
- Sequence[Get
Fabric Mac Sec Policy Tag] - version_
context GetFabric Mac Sec Policy Version Context
- id String
- results List<Property Map>
- account
Moid String - additional
Properties String - ancestors List<Property Map>
- cipher
Suite String - class
Id String - confidentiality
Offset String - create
Time String - description String
- domain
Group StringMoid - fallback
Key Property MapChain - include
Icv BooleanIndicator - key
Server NumberPriority - mac
Sec Property MapEa Pol - mod
Time String - moid String
- name String
- object
Type String - organization Property Map
- owners List<String>
- parent Property Map
- permission
Resources List<Property Map> - primary
Key Property MapChain - replay
Window NumberSize - sak
Expiry NumberTime - security
Policy String - String
- List<Property Map>
- version
Context Property Map
Supporting Types
GetFabricMacSecPolicyAncestor
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
GetFabricMacSecPolicyFallbackKeyChain
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Name string
- Name of the concrete policy.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Sec
Keys List<GetFabric Mac Sec Policy Fallback Key Chain Sec Key>
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Name string
- Name of the concrete policy.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Sec
Keys []GetFabric Mac Sec Policy Fallback Key Chain Sec Key
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name String
- Name of the concrete policy.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec
Keys List<GetFabric Mac Sec Policy Fallback Key Chain Sec Key>
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name string
- Name of the concrete policy.
- object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec
Keys GetFabric Mac Sec Policy Fallback Key Chain Sec Key[]
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name str
- Name of the concrete policy.
- object_
type str - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec_
keys Sequence[GetFabric Mac Sec Policy Fallback Key Chain Sec Key]
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name String
- Name of the concrete policy.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec
Keys List<Property Map>
GetFabricMacSecPolicyFallbackKeyChainSecKey
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- Is
Octet boolString Set - Indicates whether the value of the 'octetString' property has been set.
- Key
Type string - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- Send
Lifetime doubleDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- Send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- Send
Lifetime boolInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- Send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- Send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- Send
Lifetime boolUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- Is
Octet boolString Set - Indicates whether the value of the 'octetString' property has been set.
- Key
Type string - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- Send
Lifetime float64Duration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- Send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- Send
Lifetime boolInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- Send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- Send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- Send
Lifetime boolUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic
Algorithm String - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is
Octet BooleanString Set - Indicates whether the value of the 'octetString' property has been set.
- key
Type String - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet
String String - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime DoubleDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime StringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime BooleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime StringStart Time - The time of day and date when the key becomes active.
- send
Lifetime StringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- send
Lifetime BooleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is
Octet booleanString Set - Indicates whether the value of the 'octetString' property has been set.
- key
Type string - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime numberDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime booleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- send
Lifetime booleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic_
algorithm str - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- id str
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is_
octet_ boolstring_ set - Indicates whether the value of the 'octetString' property has been set.
- key_
type str - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- object_
type str - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet_
string str - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send_
lifetime_ floatduration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send_
lifetime_ strend_ time - The time of day and date when the key becomes inactive.
- send_
lifetime_ boolinfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send_
lifetime_ strstart_ time - The time of day and date when the key becomes active.
- send_
lifetime_ strtime_ zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- send_
lifetime_ boolunlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic
Algorithm String - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is
Octet BooleanString Set - Indicates whether the value of the 'octetString' property has been set.
- key
Type String - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet
String String - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime NumberDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime StringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime BooleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime StringStart Time - The time of day and date when the key becomes active.
- send
Lifetime StringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- send
Lifetime BooleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
GetFabricMacSecPolicyMacSecEaPol
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Ea
Pol stringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- Ea
Pol stringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Ea
Pol stringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- Ea
Pol stringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- ea
Pol StringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- ea
Pol StringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- ea
Pol stringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- ea
Pol stringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- ea_
pol_ strethertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- ea_
pol_ strmac_ address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- object_
type str - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- ea
Pol StringEthertype - Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- ea
Pol StringMac Address - MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
GetFabricMacSecPolicyOrganization
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
GetFabricMacSecPolicyParent
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
GetFabricMacSecPolicyPermissionResource
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
GetFabricMacSecPolicyPrimaryKeyChain
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Name string
- Name of the concrete policy.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Sec
Keys List<GetFabric Mac Sec Policy Primary Key Chain Sec Key>
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Name string
- Name of the concrete policy.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Sec
Keys []GetFabric Mac Sec Policy Primary Key Chain Sec Key
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name String
- Name of the concrete policy.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec
Keys List<GetFabric Mac Sec Policy Primary Key Chain Sec Key>
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name string
- Name of the concrete policy.
- object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec
Keys GetFabric Mac Sec Policy Primary Key Chain Sec Key[]
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name str
- Name of the concrete policy.
- object_
type str - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec_
keys Sequence[GetFabric Mac Sec Policy Primary Key Chain Sec Key]
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name String
- Name of the concrete policy.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec
Keys List<Property Map>
GetFabricMacSecPolicyPrimaryKeyChainSecKey
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- Is
Octet boolString Set - Indicates whether the value of the 'octetString' property has been set.
- Key
Type string - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- Send
Lifetime doubleDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- Send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- Send
Lifetime boolInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- Send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- Send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- Send
Lifetime boolUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- Is
Octet boolString Set - Indicates whether the value of the 'octetString' property has been set.
- Key
Type string - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- Send
Lifetime float64Duration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- Send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- Send
Lifetime boolInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- Send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- Send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- Send
Lifetime boolUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic
Algorithm String - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is
Octet BooleanString Set - Indicates whether the value of the 'octetString' property has been set.
- key
Type String - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet
String String - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime DoubleDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime StringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime BooleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime StringStart Time - The time of day and date when the key becomes active.
- send
Lifetime StringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- send
Lifetime BooleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic
Algorithm string - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is
Octet booleanString Set - Indicates whether the value of the 'octetString' property has been set.
- key
Type string - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet
String string - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime numberDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime stringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime booleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime stringStart Time - The time of day and date when the key becomes active.
- send
Lifetime stringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- send
Lifetime booleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic_
algorithm str - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- id str
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is_
octet_ boolstring_ set - Indicates whether the value of the 'octetString' property has been set.
- key_
type str - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- object_
type str - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet_
string str - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send_
lifetime_ floatduration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send_
lifetime_ strend_ time - The time of day and date when the key becomes inactive.
- send_
lifetime_ boolinfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send_
lifetime_ strstart_ time - The time of day and date when the key becomes active.
- send_
lifetime_ strtime_ zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- send_
lifetime_ boolunlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic
Algorithm String - The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).
AES_256_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.AES_128_CMAC
- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
- id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is
Octet BooleanString Set - Indicates whether the value of the 'octetString' property has been set.
- key
Type String - The type of encryption used for the specified key.
Type-0
- No encryption for the specified octetString.Type-6
- Proprietary advanced encryption standard for the specified octetString.Type-7
- Proprietary insecure encryption for the specified octetString.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet
String String - The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send
Lifetime NumberDuration - The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send
Lifetime StringEnd Time - The time of day and date when the key becomes inactive.
- send
Lifetime BooleanInfinite - Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send
Lifetime StringStart Time - The time of day and date when the key becomes active.
- send
Lifetime StringTime Zone - The time zone used for key lifetime configurations.
UTC
- The Universal Time (UTC) for key lifetime configurations.Local
- The local time zone of the device for key lifetime configurations.
- send
Lifetime BooleanUnlimited - Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
GetFabricMacSecPolicyResult
- Account
Moid string - The Account ID for this managed object.
- Additional
Properties string - Ancestors
List<Get
Fabric Mac Sec Policy Result Ancestor> - Cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - Class
Id string - Confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - Create
Time string - The time when this managed object was created.
- Description string
- Description of the policy.
- Domain
Group stringMoid - The DomainGroup ID for this managed object.
- Fallback
Key List<GetChains Fabric Mac Sec Policy Result Fallback Key Chain> - Include
Icv boolIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- Key
Server doublePriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- Mac
Sec List<GetEa Pols Fabric Mac Sec Policy Result Mac Sec Ea Pol> - Mod
Time string - The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- Object
Type string - Organizations
List<Get
Fabric Mac Sec Policy Result Organization> - Owners List<string>
- Parents
List<Get
Fabric Mac Sec Policy Result Parent> - Permission
Resources List<GetFabric Mac Sec Policy Result Permission Resource> - Primary
Key List<GetChains Fabric Mac Sec Policy Result Primary Key Chain> - Replay
Window doubleSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- Sak
Expiry doubleTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- Security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Get
Fabric Mac Sec Policy Result Tag> - Version
Contexts List<GetFabric Mac Sec Policy Result Version Context>
- Account
Moid string - The Account ID for this managed object.
- Additional
Properties string - Ancestors
[]Get
Fabric Mac Sec Policy Result Ancestor - Cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - Class
Id string - Confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - Create
Time string - The time when this managed object was created.
- Description string
- Description of the policy.
- Domain
Group stringMoid - The DomainGroup ID for this managed object.
- Fallback
Key []GetChains Fabric Mac Sec Policy Result Fallback Key Chain - Include
Icv boolIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- Key
Server float64Priority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- Mac
Sec []GetEa Pols Fabric Mac Sec Policy Result Mac Sec Ea Pol - Mod
Time string - The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- Object
Type string - Organizations
[]Get
Fabric Mac Sec Policy Result Organization - Owners []string
- Parents
[]Get
Fabric Mac Sec Policy Result Parent - Permission
Resources []GetFabric Mac Sec Policy Result Permission Resource - Primary
Key []GetChains Fabric Mac Sec Policy Result Primary Key Chain - Replay
Window float64Size - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- Sak
Expiry float64Time - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- Security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- []Get
Fabric Mac Sec Policy Result Tag - Version
Contexts []GetFabric Mac Sec Policy Result Version Context
- account
Moid String - The Account ID for this managed object.
- additional
Properties String - ancestors
List<Get
Fabric Mac Sec Policy Result Ancestor> - cipher
Suite String - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id String - confidentiality
Offset String - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time String - The time when this managed object was created.
- description String
- Description of the policy.
- domain
Group StringMoid - The DomainGroup ID for this managed object.
- fallback
Key List<GetChains Fabric Mac Sec Policy Result Fallback Key Chain> - include
Icv BooleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server DoublePriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec List<GetEa Pols Fabric Mac Sec Policy Result Mac Sec Ea Pol> - mod
Time String - The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- object
Type String - organizations
List<Get
Fabric Mac Sec Policy Result Organization> - owners List<String>
- parents
List<Get
Fabric Mac Sec Policy Result Parent> - permission
Resources List<GetFabric Mac Sec Policy Result Permission Resource> - primary
Key List<GetChains Fabric Mac Sec Policy Result Primary Key Chain> - replay
Window DoubleSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry DoubleTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy String - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - String
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Get
Fabric Mac Sec Policy Result Tag> - version
Contexts List<GetFabric Mac Sec Policy Result Version Context>
- account
Moid string - The Account ID for this managed object.
- additional
Properties string - ancestors
Get
Fabric Mac Sec Policy Result Ancestor[] - cipher
Suite string - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id string - confidentiality
Offset string - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time string - The time when this managed object was created.
- description string
- Description of the policy.
- domain
Group stringMoid - The DomainGroup ID for this managed object.
- fallback
Key GetChains Fabric Mac Sec Policy Result Fallback Key Chain[] - include
Icv booleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server numberPriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec GetEa Pols Fabric Mac Sec Policy Result Mac Sec Ea Pol[] - mod
Time string - The time when this managed object was last modified.
- moid string
- The unique identifier of this Managed Object instance.
- name string
- Name of the concrete policy.
- object
Type string - organizations
Get
Fabric Mac Sec Policy Result Organization[] - owners string[]
- parents
Get
Fabric Mac Sec Policy Result Parent[] - permission
Resources GetFabric Mac Sec Policy Result Permission Resource[] - primary
Key GetChains Fabric Mac Sec Policy Result Primary Key Chain[] - replay
Window numberSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry numberTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy string - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- Get
Fabric Mac Sec Policy Result Tag[] - version
Contexts GetFabric Mac Sec Policy Result Version Context[]
- account_
moid str - The Account ID for this managed object.
- additional_
properties str - ancestors
Sequence[Get
Fabric Mac Sec Policy Result Ancestor] - cipher_
suite str - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class_
id str - confidentiality_
offset str - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create_
time str - The time when this managed object was created.
- description str
- Description of the policy.
- domain_
group_ strmoid - The DomainGroup ID for this managed object.
- fallback_
key_ Sequence[Getchains Fabric Mac Sec Policy Result Fallback Key Chain] - include_
icv_ boolindicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key_
server_ floatpriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac_
sec_ Sequence[Getea_ pols Fabric Mac Sec Policy Result Mac Sec Ea Pol] - mod_
time str - The time when this managed object was last modified.
- moid str
- The unique identifier of this Managed Object instance.
- name str
- Name of the concrete policy.
- object_
type str - organizations
Sequence[Get
Fabric Mac Sec Policy Result Organization] - owners Sequence[str]
- parents
Sequence[Get
Fabric Mac Sec Policy Result Parent] - permission_
resources Sequence[GetFabric Mac Sec Policy Result Permission Resource] - primary_
key_ Sequence[Getchains Fabric Mac Sec Policy Result Primary Key Chain] - replay_
window_ floatsize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak_
expiry_ floattime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security_
policy str - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - str
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- Sequence[Get
Fabric Mac Sec Policy Result Tag] - version_
contexts Sequence[GetFabric Mac Sec Policy Result Version Context]
- account
Moid String - The Account ID for this managed object.
- additional
Properties String - ancestors List<Property Map>
- cipher
Suite String - Cipher suite to be used for MACsec encryption.*
GCM-AES-XPN-256
- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128
- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256
- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128
- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability. - class
Id String - confidentiality
Offset String - The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.*
CONF-OFFSET-0
- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30
- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50
- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted. - create
Time String - The time when this managed object was created.
- description String
- Description of the policy.
- domain
Group StringMoid - The DomainGroup ID for this managed object.
- fallback
Key List<Property Map>Chains - include
Icv BooleanIndicator - Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key
Server NumberPriority - The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac
Sec List<Property Map>Ea Pols - mod
Time String - The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- object
Type String - organizations List<Property Map>
- owners List<String>
- parents List<Property Map>
- permission
Resources List<Property Map> - primary
Key List<Property Map>Chains - replay
Window NumberSize - Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak
Expiry NumberTime - Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security
Policy String - The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.*
Should-secure
- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure
- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured. - String
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Property Map>
- version
Contexts List<Property Map>
GetFabricMacSecPolicyResultAncestor
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
- additional
Properties string - class
Id string - moid string
- The unique identifier of this Managed Object instance.
- object
Type string - selector string
- additional_
properties str - class_
id str - moid str
- The unique identifier of this Managed Object instance.
- object_
type str - selector str
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
GetFabricMacSecPolicyResultFallbackKeyChain
- Additional
Properties string - Class
Id string - Name string
- Name of the concrete policy.
- Object
Type string - Sec
Keys List<GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key>
- Additional
Properties string - Class
Id string - Name string
- Name of the concrete policy.
- Object
Type string - Sec
Keys []GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key
- additional
Properties String - class
Id String - name String
- Name of the concrete policy.
- object
Type String - sec
Keys List<GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key>
- additional
Properties string - class
Id string - name string
- Name of the concrete policy.
- object
Type string - sec
Keys GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key[]
- additional_
properties str - class_
id str - name str
- Name of the concrete policy.
- object_
type str - sec_
keys Sequence[GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key]
- additional
Properties String - class
Id String - name String
- Name of the concrete policy.
- object
Type String - sec
Keys List<Property Map>
GetFabricMacSecPolicyResultFallbackKeyChainSecKey
- Additional
Properties string - Class
Id string - Cryptographic
Algorithm string - Id string
- Is
Octet boolString Set - Key
Type string - Object
Type string - Octet
String string - Send
Lifetime doubleDuration - Send
Lifetime stringEnd Time - Send
Lifetime boolInfinite - Send
Lifetime stringStart Time - Send
Lifetime stringTime Zone - Send
Lifetime boolUnlimited
- Additional
Properties string - Class
Id string - Cryptographic
Algorithm string - Id string
- Is
Octet boolString Set - Key
Type string - Object
Type string - Octet
String string - Send
Lifetime float64Duration - Send
Lifetime stringEnd Time - Send
Lifetime boolInfinite - Send
Lifetime stringStart Time - Send
Lifetime stringTime Zone - Send
Lifetime boolUnlimited
- additional
Properties String - class
Id String - cryptographic
Algorithm String - id String
- is
Octet BooleanString Set - key
Type String - object
Type String - octet
String String - send
Lifetime DoubleDuration - send
Lifetime StringEnd Time - send
Lifetime BooleanInfinite - send
Lifetime StringStart Time - send
Lifetime StringTime Zone - send
Lifetime BooleanUnlimited
- additional
Properties string - class
Id string - cryptographic
Algorithm string - id string
- is
Octet booleanString Set - key
Type string - object
Type string - octet
String string - send
Lifetime numberDuration - send
Lifetime stringEnd Time - send
Lifetime booleanInfinite - send
Lifetime stringStart Time - send
Lifetime stringTime Zone - send
Lifetime booleanUnlimited
- additional_
properties str - class_
id str - cryptographic_
algorithm str - id str
- is_
octet_ boolstring_ set - key_
type str - object_
type str - octet_
string str - send_
lifetime_ floatduration - send_
lifetime_ strend_ time - send_
lifetime_ boolinfinite - send_
lifetime_ strstart_ time - send_
lifetime_ strtime_ zone - send_
lifetime_ boolunlimited
- additional
Properties String - class
Id String - cryptographic
Algorithm String - id String
- is
Octet BooleanString Set - key
Type String - object
Type String - octet
String String - send
Lifetime NumberDuration - send
Lifetime StringEnd Time - send
Lifetime BooleanInfinite - send
Lifetime StringStart Time - send
Lifetime StringTime Zone - send
Lifetime BooleanUnlimited
GetFabricMacSecPolicyResultMacSecEaPol
- Additional
Properties string - Class
Id string - Ea
Pol stringEthertype - Ea
Pol stringMac Address - Object
Type string
- Additional
Properties string - Class
Id string - Ea
Pol stringEthertype - Ea
Pol stringMac Address - Object
Type string
- additional
Properties String - class
Id String - ea
Pol StringEthertype - ea
Pol StringMac Address - object
Type String
- additional
Properties string - class
Id string - ea
Pol stringEthertype - ea
Pol stringMac Address - object
Type string
- additional_
properties str - class_
id str - ea_
pol_ strethertype - ea_
pol_ strmac_ address - object_
type str
- additional
Properties String - class
Id String - ea
Pol StringEthertype - ea
Pol StringMac Address - object
Type String
GetFabricMacSecPolicyResultOrganization
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
- additional
Properties string - class
Id string - moid string
- The unique identifier of this Managed Object instance.
- object
Type string - selector string
- additional_
properties str - class_
id str - moid str
- The unique identifier of this Managed Object instance.
- object_
type str - selector str
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
GetFabricMacSecPolicyResultParent
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
- additional
Properties string - class
Id string - moid string
- The unique identifier of this Managed Object instance.
- object
Type string - selector string
- additional_
properties str - class_
id str - moid str
- The unique identifier of this Managed Object instance.
- object_
type str - selector str
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
GetFabricMacSecPolicyResultPermissionResource
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
- additional
Properties string - class
Id string - moid string
- The unique identifier of this Managed Object instance.
- object
Type string - selector string
- additional_
properties str - class_
id str - moid str
- The unique identifier of this Managed Object instance.
- object_
type str - selector str
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
GetFabricMacSecPolicyResultPrimaryKeyChain
- Additional
Properties string - Class
Id string - Name string
- Name of the concrete policy.
- Object
Type string - Sec
Keys List<GetFabric Mac Sec Policy Result Primary Key Chain Sec Key>
- Additional
Properties string - Class
Id string - Name string
- Name of the concrete policy.
- Object
Type string - Sec
Keys []GetFabric Mac Sec Policy Result Primary Key Chain Sec Key
- additional
Properties String - class
Id String - name String
- Name of the concrete policy.
- object
Type String - sec
Keys List<GetFabric Mac Sec Policy Result Primary Key Chain Sec Key>
- additional
Properties string - class
Id string - name string
- Name of the concrete policy.
- object
Type string - sec
Keys GetFabric Mac Sec Policy Result Primary Key Chain Sec Key[]
- additional_
properties str - class_
id str - name str
- Name of the concrete policy.
- object_
type str - sec_
keys Sequence[GetFabric Mac Sec Policy Result Primary Key Chain Sec Key]
- additional
Properties String - class
Id String - name String
- Name of the concrete policy.
- object
Type String - sec
Keys List<Property Map>
GetFabricMacSecPolicyResultPrimaryKeyChainSecKey
- Additional
Properties string - Class
Id string - Cryptographic
Algorithm string - Id string
- Is
Octet boolString Set - Key
Type string - Object
Type string - Octet
String string - Send
Lifetime doubleDuration - Send
Lifetime stringEnd Time - Send
Lifetime boolInfinite - Send
Lifetime stringStart Time - Send
Lifetime stringTime Zone - Send
Lifetime boolUnlimited
- Additional
Properties string - Class
Id string - Cryptographic
Algorithm string - Id string
- Is
Octet boolString Set - Key
Type string - Object
Type string - Octet
String string - Send
Lifetime float64Duration - Send
Lifetime stringEnd Time - Send
Lifetime boolInfinite - Send
Lifetime stringStart Time - Send
Lifetime stringTime Zone - Send
Lifetime boolUnlimited
- additional
Properties String - class
Id String - cryptographic
Algorithm String - id String
- is
Octet BooleanString Set - key
Type String - object
Type String - octet
String String - send
Lifetime DoubleDuration - send
Lifetime StringEnd Time - send
Lifetime BooleanInfinite - send
Lifetime StringStart Time - send
Lifetime StringTime Zone - send
Lifetime BooleanUnlimited
- additional
Properties string - class
Id string - cryptographic
Algorithm string - id string
- is
Octet booleanString Set - key
Type string - object
Type string - octet
String string - send
Lifetime numberDuration - send
Lifetime stringEnd Time - send
Lifetime booleanInfinite - send
Lifetime stringStart Time - send
Lifetime stringTime Zone - send
Lifetime booleanUnlimited
- additional_
properties str - class_
id str - cryptographic_
algorithm str - id str
- is_
octet_ boolstring_ set - key_
type str - object_
type str - octet_
string str - send_
lifetime_ floatduration - send_
lifetime_ strend_ time - send_
lifetime_ boolinfinite - send_
lifetime_ strstart_ time - send_
lifetime_ strtime_ zone - send_
lifetime_ boolunlimited
- additional
Properties String - class
Id String - cryptographic
Algorithm String - id String
- is
Octet BooleanString Set - key
Type String - object
Type String - octet
String String - send
Lifetime NumberDuration - send
Lifetime StringEnd Time - send
Lifetime BooleanInfinite - send
Lifetime StringStart Time - send
Lifetime StringTime Zone - send
Lifetime BooleanUnlimited
GetFabricMacSecPolicyResultTag
- Additional
Properties string - Key string
- Value string
- Additional
Properties string - Key string
- Value string
- additional
Properties String - key String
- value String
- additional
Properties string - key string
- value string
- additional_
properties str - key str
- value str
- additional
Properties String - key String
- value String
GetFabricMacSecPolicyResultVersionContext
- additional
Properties string - class
Id string - interested
Mos GetFabric Mac Sec Policy Result Version Context Interested Mo[] - marked
For booleanDeletion - nr
Version string - object
Type string - ref
Mos GetFabric Mac Sec Policy Result Version Context Ref Mo[] - timestamp string
- version
Type string
- additional
Properties String - class
Id String - interested
Mos List<Property Map> - marked
For BooleanDeletion - nr
Version String - object
Type String - ref
Mos List<Property Map> - timestamp String
- version
Type String
GetFabricMacSecPolicyResultVersionContextInterestedMo
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
- additional
Properties string - class
Id string - moid string
- The unique identifier of this Managed Object instance.
- object
Type string - selector string
- additional_
properties str - class_
id str - moid str
- The unique identifier of this Managed Object instance.
- object_
type str - selector str
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
GetFabricMacSecPolicyResultVersionContextRefMo
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- Additional
Properties string - Class
Id string - Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - Selector string
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
- additional
Properties string - class
Id string - moid string
- The unique identifier of this Managed Object instance.
- object
Type string - selector string
- additional_
properties str - class_
id str - moid str
- The unique identifier of this Managed Object instance.
- object_
type str - selector str
- additional
Properties String - class
Id String - moid String
- The unique identifier of this Managed Object instance.
- object
Type String - selector String
GetFabricMacSecPolicyTag
- Additional
Properties string - Key string
- The string representation of a tag key.
- Value string
- The string representation of a tag value.
- Additional
Properties string - Key string
- The string representation of a tag key.
- Value string
- The string representation of a tag value.
- additional
Properties String - key String
- The string representation of a tag key.
- value String
- The string representation of a tag value.
- additional
Properties string - key string
- The string representation of a tag key.
- value string
- The string representation of a tag value.
- additional_
properties str - key str
- The string representation of a tag key.
- value str
- The string representation of a tag value.
- additional
Properties String - key String
- The string representation of a tag key.
- value String
- The string representation of a tag value.
GetFabricMacSecPolicyVersionContext
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Interested
Mos List<GetFabric Mac Sec Policy Version Context Interested Mo> - Marked
For boolDeletion - The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- Nr
Version string - The version of the Managed Object, e.g. an incrementing number or a hash id.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Ref
Mo GetFabric Mac Sec Policy Version Context Ref Mo - A reference to the original Managed Object.
- Timestamp string
- The time this versioned Managed Object was created.
- Version
Type string - Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.
Modified
- Version created every time an object is modified.Configured
- Version created every time an object is configured to the service profile.Deployed
- Version created for objects related to a service profile when it is deployed.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Interested
Mos []GetFabric Mac Sec Policy Version Context Interested Mo - Marked
For boolDeletion - The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- Nr
Version string - The version of the Managed Object, e.g. an incrementing number or a hash id.
- Object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- Ref
Mo GetFabric Mac Sec Policy Version Context Ref Mo - A reference to the original Managed Object.
- Timestamp string
- The time this versioned Managed Object was created.
- Version
Type string - Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.
Modified
- Version created every time an object is modified.Configured
- Version created every time an object is configured to the service profile.Deployed
- Version created for objects related to a service profile when it is deployed.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- interested
Mos List<GetFabric Mac Sec Policy Version Context Interested Mo> - marked
For BooleanDeletion - The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nr
Version String - The version of the Managed Object, e.g. an incrementing number or a hash id.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- ref
Mo GetFabric Mac Sec Policy Version Context Ref Mo - A reference to the original Managed Object.
- timestamp String
- The time this versioned Managed Object was created.
- version
Type String - Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.
Modified
- Version created every time an object is modified.Configured
- Version created every time an object is configured to the service profile.Deployed
- Version created for objects related to a service profile when it is deployed.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- interested
Mos GetFabric Mac Sec Policy Version Context Interested Mo[] - marked
For booleanDeletion - The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nr
Version string - The version of the Managed Object, e.g. an incrementing number or a hash id.
- object
Type string - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- ref
Mo GetFabric Mac Sec Policy Version Context Ref Mo - A reference to the original Managed Object.
- timestamp string
- The time this versioned Managed Object was created.
- version
Type string - Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.
Modified
- Version created every time an object is modified.Configured
- Version created every time an object is configured to the service profile.Deployed
- Version created for objects related to a service profile when it is deployed.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- interested_
mos Sequence[GetFabric Mac Sec Policy Version Context Interested Mo] - marked_
for_ booldeletion - The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nr_
version str - The version of the Managed Object, e.g. an incrementing number or a hash id.
- object_
type str - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- ref_
mo GetFabric Mac Sec Policy Version Context Ref Mo - A reference to the original Managed Object.
- timestamp str
- The time this versioned Managed Object was created.
- version_
type str - Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.
Modified
- Version created every time an object is modified.Configured
- Version created every time an object is configured to the service profile.Deployed
- Version created for objects related to a service profile when it is deployed.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- interested
Mos List<Property Map> - marked
For BooleanDeletion - The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nr
Version String - The version of the Managed Object, e.g. an incrementing number or a hash id.
- object
Type String - The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- ref
Mo Property Map - A reference to the original Managed Object.
- timestamp String
- The time this versioned Managed Object was created.
- version
Type String - Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.
Modified
- Version created every time an object is modified.Configured
- Version created every time an object is configured to the service profile.Deployed
- Version created for objects related to a service profile when it is deployed.
GetFabricMacSecPolicyVersionContextInterestedMo
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
GetFabricMacSecPolicyVersionContextRefMo
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- Additional
Properties string - Class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- Object
Type string - The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties string - class
Id string - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- object
Type string - The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional_
properties str - class_
id str - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_
type str - The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
- additional
Properties String - class
Id String - The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- object
Type String - The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.
- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
Package Details
- Repository
- intersight ciscodevnet/terraform-provider-intersight
- License
- Notes
- This Pulumi package is based on the
intersight
Terraform Provider.
intersight 1.0.64 published on Wednesday, Apr 30, 2025 by ciscodevnet