Class CIM_ESPTransform
extends CIM_SATransform

ESPTransform defines the parameters used for a phase 2 ESP (Encapsulating Security Protocol) Security Association.

Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods


Class Hierarchy

CIM_ManagedElement
   |
   +--CIM_SettingData
   |
   +--CIM_ScopedSettingData
   |
   +--CIM_SATransform
   |
   +--CIM_ESPTransform

Direct Known Subclasses

Class Qualifiers

NameData TypeValue
DescriptionstringESPTransform defines the parameters used for a phase 2 ESP (Encapsulating Security Protocol) Security Association.
MappingStringsstringIPSP Model.IETF|ESPTransform
UMLPackagePathstringCIM::Network::IPsec
Versionstring2.8.0

Class Properties

Local Class Properties

NameData TypeDefault ValueQualifiers
NameData TypeValue
CipherKeyLengthuint16
DescriptionstringCipherKeyLength specifies, in bits, the key length for the encryption algorithm. For algorithms with fixed key lengths, this value is ignored.
MappingStringsstringIPSP Model.IETF|ESPTransform.CipherKeyLength
PUnitstringbit
UnitsstringBits
CipherKeyRoundsuint16
DescriptionstringCipherKeyRounds specifies the key rounds for the encryption algorithm. For algorithms with a fixed number of key rounds, this value is ignored. Currently, key rounds are NOT defined for any ESP encryption algorithms.
MappingStringsstringIPSP Model.IETF|ESPTransform.CipherKeyRounds
CipherTransformIduint16
DescriptionstringCipherTransformId is an enumeration that specifies the ESP encrypion algorithm to be used. The list of values is defined in RFC2407, Section 4.4.4, where the RFC's NULL value maps to 2-"None". Note that the enumeration is different than the RFC list, since 'Other' is added to the enumeration.
MappingStringsstringIPSP Model.IETF|ESPTransform.CipherTransformId, RFC2407.IETF|Section 4.4.4
ModelCorrespondencestringCIM_ESPTransform.OtherCipherTransformId
ValueMapstring1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12
ValuesstringOther, None, DES_IV64, DES, 3DES, RC5, IDEA, CAST, Blowfish, 3-IDEA, DES_IV32, RC4
IntegrityTransformIduint16
DescriptionstringIntegrityTransformId is an enumeration that specifies the ESP integrity algorithm to be used. The list of values is generated from the enumeration defined in RFC2407, Section 4.5. Note that the enumeration is different than the RFC list, since the values of Other and None are taken into account. Also, note that 2 ("None") is used when ESP is negotiated without authentication.
MappingStringsstringIPSP Model.IETF|ESPTransform.IntegrityTransformId, RFC2407.IETF|Section 4.5
ModelCorrespondencestringCIM_ESPTransform.OtherIntegrityTransformId
ValueMapstring1, 2, 3, 4, 5, 6, 7..61439, 61440..65535
ValuesstringOther, None, MD5, SHA-1, DES, KPDK, DMTF/IANA Reserved, Vendor Reserved
OtherCipherTransformIdstring
DescriptionstringDescription of the encryption algorithm when the value 1 ("Other") is specified for the property, CipherTransformId.
ModelCorrespondencestringCIM_ESPTransform.CipherTransformId
OtherIntegrityTransformIdstring
DescriptionstringDescription of the integrity algorithm when the value 1 ("Other") is specified for the property, IntegrityTransformId.
ModelCorrespondencestringCIM_ESPTransform.IntegrityTransformId
ReplayPreventionWindowSizeuint32
DescriptionstringReplayPreventionWindowsSize specifies, in bits, the length of the sliding window used by the replay prevention mechanism. The value of this property is meaningless if UseReplayPrevention is false. The window size MUST be a power of 2.
MappingStringsstringIPSP Model.IETF|ESPTransform.ReplayPreventionWindowSize
PUnitstringbit
UnitsstringBits
UseReplayPreventionboolean
DescriptionstringUseReplayPrevention causes the local peer to enable replay prevention detection. This can be accomplished by using a sequence number when sending a packet or checking the sequence number upon receipt of a packet.
MappingStringsstringIPSP Model.IETF|ESPTransform.UseReplayPrevention

Inherited Properties

NameData Type
Captionstring
ChangeableTypeuint16
ConfigurationNamestring
Descriptionstring
ElementNamestring
Generationuint64
InstanceIDstring
MaxLifetimeKilobytesuint64
MaxLifetimeSecondsuint64
SoIDstring
SoOrgIDstring
VendorIDstring
ComponentSettingstring[]

Class Methods