Class CIM_SARule
extends CIM_PolicyRule

SARule is a base class for defining IKE and IPsec Rules. Although concrete (because it subclasses from a concrete class), it is not intended to be instantiated. It defines a common connection point for associating conditions and actions for both types of rules. Note that each valid PolicyGroup containing SARules MUST use a unique priority number for the Rule in the aggregation, PolicySetComponent.Priority.

Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods


Class Hierarchy

CIM_ManagedElement
   |
   +--CIM_Policy
   |
   +--CIM_PolicySet
   |
   +--CIM_PolicyRule
   |
   +--CIM_SARule

Direct Known Subclasses

CIM_IKERule
CIM_IPsecRule

Class Qualifiers

NameData TypeValue
DescriptionstringSARule is a base class for defining IKE and IPsec Rules. Although concrete (because it subclasses from a concrete class), it is not intended to be instantiated. It defines a common connection point for associating conditions and actions for both types of rules. Note that each valid PolicyGroup containing SARules MUST use a unique priority number for the Rule in the aggregation, PolicySetComponent.Priority.
MappingStringsstringIPSP Policy Model.IETF|SARule
UMLPackagePathstringCIM::IPsecPolicy
Versionstring2.8.0

Class Properties

Local Class Properties

NameData TypeDefault ValueQualifiers
NameData TypeValue
LimitNegotiationuint16
DescriptionstringLimitNegotiation is used as part of processing either a key exchange or IPsec Rule. Before proceeding with either a phase 1 or a phase 2 negotiation, this property is checked to determine if the negotiation role of the Rule matches that defined for the negotiation being undertaken (e.g., Initiator, Responder, or Both). If this check fails, then the negotiation is stopped. Note that this only applies to new negotiations and has no effect on either renegotiation or refresh operations with peers for which an established Security Association already exists.
MappingStringsstringIPSP Policy Model.IETF|SARule.LimitNegotiation
ValueMapstring1, 2, 3
ValuesstringInitiator-Only, Responder-Only, Either

Inherited Properties

NameData Type
Captionstring
CommonNamestring
ConditionListTypeuint16
CreationClassNamestring
Descriptionstring
ElementNamestring
Enableduint16
ExecutionStrategyuint16
Generationuint64
InstanceIDstring
Mandatoryboolean
PolicyDecisionStrategyuint16
PolicyRuleNamestring
Priorityuint16
RuleUsagestring
SequencedActionsuint16
SystemCreationClassNamestring
SystemNamestring
PolicyKeywordsstring[]
PolicyRolesstring[]

Class Methods