intersight 1.0.65 published on Wednesday, May 7, 2025 by ciscodevnet
intersight.getFabricMacSecPolicy
Explore with Pulumi AI
intersight 1.0.65 published on Wednesday, May 7, 2025 by ciscodevnet
A placeholder for MACSec (Media Access Control Security) configuration parameters, Primary/Fallback key chain and EAPol (Extensible Authentication Protocol over LAN) configurations.
Using getFabricMacSecPolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getFabricMacSecPolicy(args: GetFabricMacSecPolicyArgs, opts?: InvokeOptions): Promise<GetFabricMacSecPolicyResult>
function getFabricMacSecPolicyOutput(args: GetFabricMacSecPolicyOutputArgs, opts?: InvokeOptions): Output<GetFabricMacSecPolicyResult>def get_fabric_mac_sec_policy(account_moid: Optional[str] = None,
                              additional_properties: Optional[str] = None,
                              ancestors: Optional[Sequence[GetFabricMacSecPolicyAncestor]] = None,
                              cipher_suite: Optional[str] = None,
                              class_id: Optional[str] = None,
                              confidentiality_offset: Optional[str] = None,
                              create_time: Optional[str] = None,
                              description: Optional[str] = None,
                              domain_group_moid: Optional[str] = None,
                              fallback_key_chain: Optional[GetFabricMacSecPolicyFallbackKeyChain] = None,
                              id: Optional[str] = None,
                              include_icv_indicator: Optional[bool] = None,
                              key_server_priority: Optional[float] = None,
                              mac_sec_ea_pol: Optional[GetFabricMacSecPolicyMacSecEaPol] = None,
                              mod_time: Optional[str] = None,
                              moid: Optional[str] = None,
                              name: Optional[str] = None,
                              object_type: Optional[str] = None,
                              organization: Optional[GetFabricMacSecPolicyOrganization] = None,
                              owners: Optional[Sequence[str]] = None,
                              parent: Optional[GetFabricMacSecPolicyParent] = None,
                              permission_resources: Optional[Sequence[GetFabricMacSecPolicyPermissionResource]] = None,
                              primary_key_chain: Optional[GetFabricMacSecPolicyPrimaryKeyChain] = None,
                              replay_window_size: Optional[float] = None,
                              sak_expiry_time: Optional[float] = None,
                              security_policy: Optional[str] = None,
                              shared_scope: Optional[str] = None,
                              tags: Optional[Sequence[GetFabricMacSecPolicyTag]] = None,
                              version_context: Optional[GetFabricMacSecPolicyVersionContext] = None,
                              opts: Optional[InvokeOptions] = None) -> GetFabricMacSecPolicyResult
def get_fabric_mac_sec_policy_output(account_moid: Optional[pulumi.Input[str]] = None,
                              additional_properties: Optional[pulumi.Input[str]] = None,
                              ancestors: Optional[pulumi.Input[Sequence[pulumi.Input[GetFabricMacSecPolicyAncestorArgs]]]] = None,
                              cipher_suite: Optional[pulumi.Input[str]] = None,
                              class_id: Optional[pulumi.Input[str]] = None,
                              confidentiality_offset: Optional[pulumi.Input[str]] = None,
                              create_time: Optional[pulumi.Input[str]] = None,
                              description: Optional[pulumi.Input[str]] = None,
                              domain_group_moid: Optional[pulumi.Input[str]] = None,
                              fallback_key_chain: Optional[pulumi.Input[GetFabricMacSecPolicyFallbackKeyChainArgs]] = None,
                              id: Optional[pulumi.Input[str]] = None,
                              include_icv_indicator: Optional[pulumi.Input[bool]] = None,
                              key_server_priority: Optional[pulumi.Input[float]] = None,
                              mac_sec_ea_pol: Optional[pulumi.Input[GetFabricMacSecPolicyMacSecEaPolArgs]] = None,
                              mod_time: Optional[pulumi.Input[str]] = None,
                              moid: Optional[pulumi.Input[str]] = None,
                              name: Optional[pulumi.Input[str]] = None,
                              object_type: Optional[pulumi.Input[str]] = None,
                              organization: Optional[pulumi.Input[GetFabricMacSecPolicyOrganizationArgs]] = None,
                              owners: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                              parent: Optional[pulumi.Input[GetFabricMacSecPolicyParentArgs]] = None,
                              permission_resources: Optional[pulumi.Input[Sequence[pulumi.Input[GetFabricMacSecPolicyPermissionResourceArgs]]]] = None,
                              primary_key_chain: Optional[pulumi.Input[GetFabricMacSecPolicyPrimaryKeyChainArgs]] = None,
                              replay_window_size: Optional[pulumi.Input[float]] = None,
                              sak_expiry_time: Optional[pulumi.Input[float]] = None,
                              security_policy: Optional[pulumi.Input[str]] = None,
                              shared_scope: Optional[pulumi.Input[str]] = None,
                              tags: Optional[pulumi.Input[Sequence[pulumi.Input[GetFabricMacSecPolicyTagArgs]]]] = None,
                              version_context: Optional[pulumi.Input[GetFabricMacSecPolicyVersionContextArgs]] = None,
                              opts: Optional[InvokeOptions] = None) -> Output[GetFabricMacSecPolicyResult]func LookupFabricMacSecPolicy(ctx *Context, args *LookupFabricMacSecPolicyArgs, opts ...InvokeOption) (*LookupFabricMacSecPolicyResult, error)
func LookupFabricMacSecPolicyOutput(ctx *Context, args *LookupFabricMacSecPolicyOutputArgs, opts ...InvokeOption) LookupFabricMacSecPolicyResultOutput> Note: This function is named LookupFabricMacSecPolicy in the Go SDK.
public static class GetFabricMacSecPolicy 
{
    public static Task<GetFabricMacSecPolicyResult> InvokeAsync(GetFabricMacSecPolicyArgs args, InvokeOptions? opts = null)
    public static Output<GetFabricMacSecPolicyResult> Invoke(GetFabricMacSecPolicyInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetFabricMacSecPolicyResult> getFabricMacSecPolicy(GetFabricMacSecPolicyArgs args, InvokeOptions options)
public static Output<GetFabricMacSecPolicyResult> getFabricMacSecPolicy(GetFabricMacSecPolicyArgs args, InvokeOptions options)
fn::invoke:
  function: intersight:index/getFabricMacSecPolicy:getFabricMacSecPolicy
  arguments:
    # arguments dictionaryThe following arguments are supported:
- AccountMoid string
- The Account ID for this managed object.
- AdditionalProperties string
- Ancestors
List<GetFabric Mac Sec Policy Ancestor> 
- CipherSuite string
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- ClassId string
- ConfidentialityOffset string
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- CreateTime string
- The time when this managed object was created.
- Description string
- Description of the policy.
- DomainGroup stringMoid 
- The DomainGroup ID for this managed object.
- FallbackKey GetChain Fabric Mac Sec Policy Fallback Key Chain 
- Id string
- IncludeIcv boolIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- KeyServer doublePriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- MacSec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- ModTime string
- The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- ObjectType string
- Organization
GetFabric Mac Sec Policy Organization 
- Owners List<string>
- Parent
GetFabric Mac Sec Policy Parent 
- PermissionResources List<GetFabric Mac Sec Policy Permission Resource> 
- PrimaryKey GetChain Fabric Mac Sec Policy Primary Key Chain 
- ReplayWindow doubleSize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- SakExpiry doubleTime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- SecurityPolicy string
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
List<GetFabric Mac Sec Policy Tag> 
- VersionContext GetFabric Mac Sec Policy Version Context 
- AccountMoid string
- The Account ID for this managed object.
- AdditionalProperties string
- Ancestors
[]GetFabric Mac Sec Policy Ancestor 
- CipherSuite string
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- ClassId string
- ConfidentialityOffset string
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- CreateTime string
- The time when this managed object was created.
- Description string
- Description of the policy.
- DomainGroup stringMoid 
- The DomainGroup ID for this managed object.
- FallbackKey GetChain Fabric Mac Sec Policy Fallback Key Chain 
- Id string
- IncludeIcv boolIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- KeyServer float64Priority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- MacSec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- ModTime string
- The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- ObjectType string
- Organization
GetFabric Mac Sec Policy Organization 
- Owners []string
- Parent
GetFabric Mac Sec Policy Parent 
- PermissionResources []GetFabric Mac Sec Policy Permission Resource 
- PrimaryKey GetChain Fabric Mac Sec Policy Primary Key Chain 
- ReplayWindow float64Size 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- SakExpiry float64Time 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- SecurityPolicy string
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
[]GetFabric Mac Sec Policy Tag 
- VersionContext GetFabric Mac Sec Policy Version Context 
- accountMoid String
- The Account ID for this managed object.
- additionalProperties String
- ancestors
List<GetFabric Mac Sec Policy Ancestor> 
- cipherSuite String
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- classId String
- confidentialityOffset String
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- createTime String
- The time when this managed object was created.
- description String
- Description of the policy.
- domainGroup StringMoid 
- The DomainGroup ID for this managed object.
- fallbackKey GetChain Fabric Mac Sec Policy Fallback Key Chain 
- id String
- includeIcv BooleanIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- keyServer DoublePriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- macSec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- modTime String
- The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- objectType String
- organization
GetFabric Mac Sec Policy Organization 
- owners List<String>
- parent
GetFabric Mac Sec Policy Parent 
- permissionResources List<GetFabric Mac Sec Policy Permission Resource> 
- primaryKey GetChain Fabric Mac Sec Policy Primary Key Chain 
- replayWindow DoubleSize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sakExpiry DoubleTime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- securityPolicy String
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- String
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
List<GetFabric Mac Sec Policy Tag> 
- versionContext GetFabric Mac Sec Policy Version Context 
- accountMoid string
- The Account ID for this managed object.
- additionalProperties string
- ancestors
GetFabric Mac Sec Policy Ancestor[] 
- cipherSuite string
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- classId string
- confidentialityOffset string
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- createTime string
- The time when this managed object was created.
- description string
- Description of the policy.
- domainGroup stringMoid 
- The DomainGroup ID for this managed object.
- fallbackKey GetChain Fabric Mac Sec Policy Fallback Key Chain 
- id string
- includeIcv booleanIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- keyServer numberPriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- macSec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- modTime string
- The time when this managed object was last modified.
- moid string
- The unique identifier of this Managed Object instance.
- name string
- Name of the concrete policy.
- objectType string
- organization
GetFabric Mac Sec Policy Organization 
- owners string[]
- parent
GetFabric Mac Sec Policy Parent 
- permissionResources GetFabric Mac Sec Policy Permission Resource[] 
- primaryKey GetChain Fabric Mac Sec Policy Primary Key Chain 
- replayWindow numberSize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sakExpiry numberTime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- securityPolicy string
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
GetFabric Mac Sec Policy Tag[] 
- versionContext GetFabric Mac Sec Policy Version Context 
- account_moid str
- The Account ID for this managed object.
- additional_properties str
- ancestors
Sequence[GetFabric Mac Sec Policy Ancestor] 
- cipher_suite str
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- class_id str
- confidentiality_offset str
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- create_time str
- The time when this managed object was created.
- description str
- Description of the policy.
- domain_group_ strmoid 
- The DomainGroup ID for this managed object.
- fallback_key_ Getchain Fabric Mac Sec Policy Fallback Key Chain 
- id str
- include_icv_ boolindicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key_server_ floatpriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac_sec_ Getea_ pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- mod_time str
- The time when this managed object was last modified.
- moid str
- The unique identifier of this Managed Object instance.
- name str
- Name of the concrete policy.
- object_type str
- organization
GetFabric Mac Sec Policy Organization 
- owners Sequence[str]
- parent
GetFabric Mac Sec Policy Parent 
- permission_resources Sequence[GetFabric Mac Sec Policy Permission Resource] 
- primary_key_ Getchain Fabric Mac Sec Policy Primary Key Chain 
- replay_window_ floatsize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak_expiry_ floattime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security_policy str
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- str
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
Sequence[GetFabric Mac Sec Policy Tag] 
- version_context GetFabric Mac Sec Policy Version Context 
- accountMoid String
- The Account ID for this managed object.
- additionalProperties String
- ancestors List<Property Map>
- cipherSuite String
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- classId String
- confidentialityOffset String
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- createTime String
- The time when this managed object was created.
- description String
- Description of the policy.
- domainGroup StringMoid 
- The DomainGroup ID for this managed object.
- fallbackKey Property MapChain 
- id String
- includeIcv BooleanIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- keyServer NumberPriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- macSec Property MapEa Pol 
- modTime String
- The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- objectType String
- organization Property Map
- owners List<String>
- parent Property Map
- permissionResources List<Property Map>
- primaryKey Property MapChain 
- replayWindow NumberSize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sakExpiry NumberTime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- securityPolicy String
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- String
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Property Map>
- versionContext Property Map
getFabricMacSecPolicy Result
The following output properties are available:
- Id string
- Results
List<GetFabric Mac Sec Policy Result> 
- AccountMoid string
- AdditionalProperties string
- Ancestors
List<GetFabric Mac Sec Policy Ancestor> 
- CipherSuite string
- ClassId string
- ConfidentialityOffset string
- CreateTime string
- Description string
- DomainGroup stringMoid 
- FallbackKey GetChain Fabric Mac Sec Policy Fallback Key Chain 
- IncludeIcv boolIndicator 
- KeyServer doublePriority 
- MacSec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- ModTime string
- Moid string
- Name string
- ObjectType string
- Organization
GetFabric Mac Sec Policy Organization 
- Owners List<string>
- Parent
GetFabric Mac Sec Policy Parent 
- PermissionResources List<GetFabric Mac Sec Policy Permission Resource> 
- PrimaryKey GetChain Fabric Mac Sec Policy Primary Key Chain 
- ReplayWindow doubleSize 
- SakExpiry doubleTime 
- SecurityPolicy string
- string
- 
List<GetFabric Mac Sec Policy Tag> 
- VersionContext GetFabric Mac Sec Policy Version Context 
- Id string
- Results
[]GetFabric Mac Sec Policy Result 
- AccountMoid string
- AdditionalProperties string
- Ancestors
[]GetFabric Mac Sec Policy Ancestor 
- CipherSuite string
- ClassId string
- ConfidentialityOffset string
- CreateTime string
- Description string
- DomainGroup stringMoid 
- FallbackKey GetChain Fabric Mac Sec Policy Fallback Key Chain 
- IncludeIcv boolIndicator 
- KeyServer float64Priority 
- MacSec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- ModTime string
- Moid string
- Name string
- ObjectType string
- Organization
GetFabric Mac Sec Policy Organization 
- Owners []string
- Parent
GetFabric Mac Sec Policy Parent 
- PermissionResources []GetFabric Mac Sec Policy Permission Resource 
- PrimaryKey GetChain Fabric Mac Sec Policy Primary Key Chain 
- ReplayWindow float64Size 
- SakExpiry float64Time 
- SecurityPolicy string
- string
- 
[]GetFabric Mac Sec Policy Tag 
- VersionContext GetFabric Mac Sec Policy Version Context 
- id String
- results
List<GetFabric Mac Sec Policy Result> 
- accountMoid String
- additionalProperties String
- ancestors
List<GetFabric Mac Sec Policy Ancestor> 
- cipherSuite String
- classId String
- confidentialityOffset String
- createTime String
- description String
- domainGroup StringMoid 
- fallbackKey GetChain Fabric Mac Sec Policy Fallback Key Chain 
- includeIcv BooleanIndicator 
- keyServer DoublePriority 
- macSec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- modTime String
- moid String
- name String
- objectType String
- organization
GetFabric Mac Sec Policy Organization 
- owners List<String>
- parent
GetFabric Mac Sec Policy Parent 
- permissionResources List<GetFabric Mac Sec Policy Permission Resource> 
- primaryKey GetChain Fabric Mac Sec Policy Primary Key Chain 
- replayWindow DoubleSize 
- sakExpiry DoubleTime 
- securityPolicy String
- String
- 
List<GetFabric Mac Sec Policy Tag> 
- versionContext GetFabric Mac Sec Policy Version Context 
- id string
- results
GetFabric Mac Sec Policy Result[] 
- accountMoid string
- additionalProperties string
- ancestors
GetFabric Mac Sec Policy Ancestor[] 
- cipherSuite string
- classId string
- confidentialityOffset string
- createTime string
- description string
- domainGroup stringMoid 
- fallbackKey GetChain Fabric Mac Sec Policy Fallback Key Chain 
- includeIcv booleanIndicator 
- keyServer numberPriority 
- macSec GetEa Pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- modTime string
- moid string
- name string
- objectType string
- organization
GetFabric Mac Sec Policy Organization 
- owners string[]
- parent
GetFabric Mac Sec Policy Parent 
- permissionResources GetFabric Mac Sec Policy Permission Resource[] 
- primaryKey GetChain Fabric Mac Sec Policy Primary Key Chain 
- replayWindow numberSize 
- sakExpiry numberTime 
- securityPolicy string
- string
- 
GetFabric Mac Sec Policy Tag[] 
- versionContext GetFabric Mac Sec Policy Version Context 
- id str
- results
Sequence[GetFabric Mac Sec Policy Result] 
- account_moid str
- additional_properties str
- ancestors
Sequence[GetFabric Mac Sec Policy Ancestor] 
- cipher_suite str
- class_id str
- confidentiality_offset str
- create_time str
- description str
- domain_group_ strmoid 
- fallback_key_ Getchain Fabric Mac Sec Policy Fallback Key Chain 
- include_icv_ boolindicator 
- key_server_ floatpriority 
- mac_sec_ Getea_ pol Fabric Mac Sec Policy Mac Sec Ea Pol 
- mod_time str
- moid str
- name str
- object_type str
- organization
GetFabric Mac Sec Policy Organization 
- owners Sequence[str]
- parent
GetFabric Mac Sec Policy Parent 
- permission_resources Sequence[GetFabric Mac Sec Policy Permission Resource] 
- primary_key_ Getchain Fabric Mac Sec Policy Primary Key Chain 
- replay_window_ floatsize 
- sak_expiry_ floattime 
- security_policy str
- str
- 
Sequence[GetFabric Mac Sec Policy Tag] 
- version_context GetFabric Mac Sec Policy Version Context 
- id String
- results List<Property Map>
- accountMoid String
- additionalProperties String
- ancestors List<Property Map>
- cipherSuite String
- classId String
- confidentialityOffset String
- createTime String
- description String
- domainGroup StringMoid 
- fallbackKey Property MapChain 
- includeIcv BooleanIndicator 
- keyServer NumberPriority 
- macSec Property MapEa Pol 
- modTime String
- moid String
- name String
- objectType String
- organization Property Map
- owners List<String>
- parent Property Map
- permissionResources List<Property Map>
- primaryKey Property MapChain 
- replayWindow NumberSize 
- sakExpiry NumberTime 
- securityPolicy String
- String
- List<Property Map>
- versionContext Property Map
Supporting Types
GetFabricMacSecPolicyAncestor     
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
GetFabricMacSecPolicyFallbackKeyChain       
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Name string
- Name of the concrete policy.
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- SecKeys List<GetFabric Mac Sec Policy Fallback Key Chain Sec Key> 
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Name string
- Name of the concrete policy.
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- SecKeys []GetFabric Mac Sec Policy Fallback Key Chain Sec Key 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name String
- Name of the concrete policy.
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- secKeys List<GetFabric Mac Sec Policy Fallback Key Chain Sec Key> 
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name string
- Name of the concrete policy.
- objectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- secKeys GetFabric Mac Sec Policy Fallback Key Chain Sec Key[] 
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name str
- Name of the concrete policy.
- object_type str
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec_keys Sequence[GetFabric Mac Sec Policy Fallback Key Chain Sec Key] 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name String
- Name of the concrete policy.
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- secKeys List<Property Map>
GetFabricMacSecPolicyFallbackKeyChainSecKey         
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- CryptographicAlgorithm string
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- IsOctet boolString Set 
- Indicates whether the value of the 'octetString' property has been set.
- KeyType string
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- OctetString string
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- SendLifetime doubleDuration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- SendLifetime stringEnd Time 
- The time of day and date when the key becomes inactive.
- SendLifetime boolInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- SendLifetime stringStart Time 
- The time of day and date when the key becomes active.
- SendLifetime stringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- SendLifetime boolUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- CryptographicAlgorithm string
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- IsOctet boolString Set 
- Indicates whether the value of the 'octetString' property has been set.
- KeyType string
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- OctetString string
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- SendLifetime float64Duration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- SendLifetime stringEnd Time 
- The time of day and date when the key becomes inactive.
- SendLifetime boolInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- SendLifetime stringStart Time 
- The time of day and date when the key becomes active.
- SendLifetime stringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- SendLifetime boolUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographicAlgorithm String
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- isOctet BooleanString Set 
- Indicates whether the value of the 'octetString' property has been set.
- keyType String
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octetString String
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- sendLifetime DoubleDuration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- sendLifetime StringEnd Time 
- The time of day and date when the key becomes inactive.
- sendLifetime BooleanInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- sendLifetime StringStart Time 
- The time of day and date when the key becomes active.
- sendLifetime StringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- sendLifetime BooleanUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographicAlgorithm string
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- isOctet booleanString Set 
- Indicates whether the value of the 'octetString' property has been set.
- keyType string
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- objectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octetString string
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- sendLifetime numberDuration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- sendLifetime stringEnd Time 
- The time of day and date when the key becomes inactive.
- sendLifetime booleanInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- sendLifetime stringStart Time 
- The time of day and date when the key becomes active.
- sendLifetime stringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- sendLifetime booleanUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic_algorithm str
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- id str
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is_octet_ boolstring_ set 
- Indicates whether the value of the 'octetString' property has been set.
- key_type str
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- object_type str
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet_string str
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send_lifetime_ floatduration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send_lifetime_ strend_ time 
- The time of day and date when the key becomes inactive.
- send_lifetime_ boolinfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send_lifetime_ strstart_ time 
- The time of day and date when the key becomes active.
- send_lifetime_ strtime_ zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- send_lifetime_ boolunlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographicAlgorithm String
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- isOctet BooleanString Set 
- Indicates whether the value of the 'octetString' property has been set.
- keyType String
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octetString String
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- sendLifetime NumberDuration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- sendLifetime StringEnd Time 
- The time of day and date when the key becomes inactive.
- sendLifetime BooleanInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- sendLifetime StringStart Time 
- The time of day and date when the key becomes active.
- sendLifetime StringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- sendLifetime BooleanUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
GetFabricMacSecPolicyMacSecEaPol        
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- EaPol stringEthertype 
- Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- EaPol stringMac Address 
- MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- EaPol stringEthertype 
- Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- EaPol stringMac Address 
- MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- eaPol StringEthertype 
- Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- eaPol StringMac Address 
- MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- eaPol stringEthertype 
- Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- eaPol stringMac Address 
- MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- objectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- ea_pol_ strethertype 
- Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- ea_pol_ strmac_ address 
- MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- object_type str
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- eaPol StringEthertype 
- Ethertype to use in extensible authentication protocol over LAN (EAPoL) frames for MACsec key agreement (MKA) protocol data units (PDUs). The range is between 0x600 - 0xffff.
- eaPol StringMac Address 
- MAC address to use in extensible authentication protocol over LAN (EAPoL) for MACsec key agreement (MKA) protocol data units (PDUs). EAPol mac address should not be equal to all-zero (0000.0000.0000).
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
GetFabricMacSecPolicyOrganization     
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
GetFabricMacSecPolicyParent     
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
GetFabricMacSecPolicyPermissionResource      
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
GetFabricMacSecPolicyPrimaryKeyChain       
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Name string
- Name of the concrete policy.
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- SecKeys List<GetFabric Mac Sec Policy Primary Key Chain Sec Key> 
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Name string
- Name of the concrete policy.
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- SecKeys []GetFabric Mac Sec Policy Primary Key Chain Sec Key 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name String
- Name of the concrete policy.
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- secKeys List<GetFabric Mac Sec Policy Primary Key Chain Sec Key> 
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name string
- Name of the concrete policy.
- objectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- secKeys GetFabric Mac Sec Policy Primary Key Chain Sec Key[] 
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name str
- Name of the concrete policy.
- object_type str
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- sec_keys Sequence[GetFabric Mac Sec Policy Primary Key Chain Sec Key] 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- name String
- Name of the concrete policy.
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- secKeys List<Property Map>
GetFabricMacSecPolicyPrimaryKeyChainSecKey         
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- CryptographicAlgorithm string
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- IsOctet boolString Set 
- Indicates whether the value of the 'octetString' property has been set.
- KeyType string
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- OctetString string
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- SendLifetime doubleDuration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- SendLifetime stringEnd Time 
- The time of day and date when the key becomes inactive.
- SendLifetime boolInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- SendLifetime stringStart Time 
- The time of day and date when the key becomes active.
- SendLifetime stringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- SendLifetime boolUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- CryptographicAlgorithm string
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- Id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- IsOctet boolString Set 
- Indicates whether the value of the 'octetString' property has been set.
- KeyType string
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- OctetString string
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- SendLifetime float64Duration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- SendLifetime stringEnd Time 
- The time of day and date when the key becomes inactive.
- SendLifetime boolInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- SendLifetime stringStart Time 
- The time of day and date when the key becomes active.
- SendLifetime stringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- SendLifetime boolUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographicAlgorithm String
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- isOctet BooleanString Set 
- Indicates whether the value of the 'octetString' property has been set.
- keyType String
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octetString String
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- sendLifetime DoubleDuration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- sendLifetime StringEnd Time 
- The time of day and date when the key becomes inactive.
- sendLifetime BooleanInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- sendLifetime StringStart Time 
- The time of day and date when the key becomes active.
- sendLifetime StringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- sendLifetime BooleanUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographicAlgorithm string
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- id string
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- isOctet booleanString Set 
- Indicates whether the value of the 'octetString' property has been set.
- keyType string
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- objectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octetString string
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- sendLifetime numberDuration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- sendLifetime stringEnd Time 
- The time of day and date when the key becomes inactive.
- sendLifetime booleanInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- sendLifetime stringStart Time 
- The time of day and date when the key becomes active.
- sendLifetime stringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- sendLifetime booleanUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographic_algorithm str
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- id str
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- is_octet_ boolstring_ set 
- Indicates whether the value of the 'octetString' property has been set.
- key_type str
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- object_type str
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octet_string str
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- send_lifetime_ floatduration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- send_lifetime_ strend_ time 
- The time of day and date when the key becomes inactive.
- send_lifetime_ boolinfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- send_lifetime_ strstart_ time 
- The time of day and date when the key becomes active.
- send_lifetime_ strtime_ zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- send_lifetime_ boolunlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- cryptographicAlgorithm String
- The cryptographic algorithm that employs the cipher-based message authentication code (CMAC) mode of operation with advanced encryption standard (AES).- AES_256_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 256-bit key to generate a CMAC.
- AES_128_CMAC- Uses the AES (Advanced Encryption Standard) algorithm with a 128-bit key to generate a CMAC.
 
- id String
- Must have an even number of hexadecimal characters (including 0-9 and A-F, only) with a length between 2 and 64 characters. For example, "10", "2000", "ABCD1234".
- isOctet BooleanString Set 
- Indicates whether the value of the 'octetString' property has been set.
- keyType String
- The type of encryption used for the specified key.- Type-0- No encryption for the specified octetString.
- Type-6- Proprietary advanced encryption standard for the specified octetString.
- Type-7- Proprietary insecure encryption for the specified octetString.
 
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- octetString String
- The key octet string is a shared secret used in cryptographic operations. The valid size and format of the octet string depend on the selected KeyCryptographicAlgorithm and KeyEncryptionType. It should start with the character 'J'.
- sendLifetime NumberDuration 
- The key lifetime duration in seconds after the start time. If a non-zero value is configured for the duration, the end time configuration for the key lifetime is ignored.
- sendLifetime StringEnd Time 
- The time of day and date when the key becomes inactive.
- sendLifetime BooleanInfinite 
- Indicates that the key remains active indefinitely after the specified start time. When this parameter is set, the end time and duration configurations for the key lifetime are ignored.
- sendLifetime StringStart Time 
- The time of day and date when the key becomes active.
- sendLifetime StringTime Zone 
- The time zone used for key lifetime configurations.- UTC- The Universal Time (UTC) for key lifetime configurations.
- Local- The local time zone of the device for key lifetime configurations.
 
- sendLifetime BooleanUnlimited 
- Indicates that the key is always active. When this parameter is set, all other key lifetime configurations are ignored.
GetFabricMacSecPolicyResult     
- AccountMoid string
- The Account ID for this managed object.
- AdditionalProperties string
- Ancestors
List<GetFabric Mac Sec Policy Result Ancestor> 
- CipherSuite string
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- ClassId string
- ConfidentialityOffset string
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- CreateTime string
- The time when this managed object was created.
- Description string
- Description of the policy.
- DomainGroup stringMoid 
- The DomainGroup ID for this managed object.
- FallbackKey List<GetChains Fabric Mac Sec Policy Result Fallback Key Chain> 
- IncludeIcv boolIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- KeyServer doublePriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- MacSec List<GetEa Pols Fabric Mac Sec Policy Result Mac Sec Ea Pol> 
- ModTime string
- The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- ObjectType string
- Organizations
List<GetFabric Mac Sec Policy Result Organization> 
- Owners List<string>
- Parents
List<GetFabric Mac Sec Policy Result Parent> 
- PermissionResources List<GetFabric Mac Sec Policy Result Permission Resource> 
- PrimaryKey List<GetChains Fabric Mac Sec Policy Result Primary Key Chain> 
- ReplayWindow doubleSize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- SakExpiry doubleTime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- SecurityPolicy string
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
List<GetFabric Mac Sec Policy Result Tag> 
- VersionContexts List<GetFabric Mac Sec Policy Result Version Context> 
- AccountMoid string
- The Account ID for this managed object.
- AdditionalProperties string
- Ancestors
[]GetFabric Mac Sec Policy Result Ancestor 
- CipherSuite string
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- ClassId string
- ConfidentialityOffset string
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- CreateTime string
- The time when this managed object was created.
- Description string
- Description of the policy.
- DomainGroup stringMoid 
- The DomainGroup ID for this managed object.
- FallbackKey []GetChains Fabric Mac Sec Policy Result Fallback Key Chain 
- IncludeIcv boolIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- KeyServer float64Priority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- MacSec []GetEa Pols Fabric Mac Sec Policy Result Mac Sec Ea Pol 
- ModTime string
- The time when this managed object was last modified.
- Moid string
- The unique identifier of this Managed Object instance.
- Name string
- Name of the concrete policy.
- ObjectType string
- Organizations
[]GetFabric Mac Sec Policy Result Organization 
- Owners []string
- Parents
[]GetFabric Mac Sec Policy Result Parent 
- PermissionResources []GetFabric Mac Sec Policy Result Permission Resource 
- PrimaryKey []GetChains Fabric Mac Sec Policy Result Primary Key Chain 
- ReplayWindow float64Size 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- SakExpiry float64Time 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- SecurityPolicy string
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
[]GetFabric Mac Sec Policy Result Tag 
- VersionContexts []GetFabric Mac Sec Policy Result Version Context 
- accountMoid String
- The Account ID for this managed object.
- additionalProperties String
- ancestors
List<GetFabric Mac Sec Policy Result Ancestor> 
- cipherSuite String
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- classId String
- confidentialityOffset String
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- createTime String
- The time when this managed object was created.
- description String
- Description of the policy.
- domainGroup StringMoid 
- The DomainGroup ID for this managed object.
- fallbackKey List<GetChains Fabric Mac Sec Policy Result Fallback Key Chain> 
- includeIcv BooleanIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- keyServer DoublePriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- macSec List<GetEa Pols Fabric Mac Sec Policy Result Mac Sec Ea Pol> 
- modTime String
- The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- objectType String
- organizations
List<GetFabric Mac Sec Policy Result Organization> 
- owners List<String>
- parents
List<GetFabric Mac Sec Policy Result Parent> 
- permissionResources List<GetFabric Mac Sec Policy Result Permission Resource> 
- primaryKey List<GetChains Fabric Mac Sec Policy Result Primary Key Chain> 
- replayWindow DoubleSize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sakExpiry DoubleTime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- securityPolicy String
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- String
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
List<GetFabric Mac Sec Policy Result Tag> 
- versionContexts List<GetFabric Mac Sec Policy Result Version Context> 
- accountMoid string
- The Account ID for this managed object.
- additionalProperties string
- ancestors
GetFabric Mac Sec Policy Result Ancestor[] 
- cipherSuite string
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- classId string
- confidentialityOffset string
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- createTime string
- The time when this managed object was created.
- description string
- Description of the policy.
- domainGroup stringMoid 
- The DomainGroup ID for this managed object.
- fallbackKey GetChains Fabric Mac Sec Policy Result Fallback Key Chain[] 
- includeIcv booleanIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- keyServer numberPriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- macSec GetEa Pols Fabric Mac Sec Policy Result Mac Sec Ea Pol[] 
- modTime string
- The time when this managed object was last modified.
- moid string
- The unique identifier of this Managed Object instance.
- name string
- Name of the concrete policy.
- objectType string
- organizations
GetFabric Mac Sec Policy Result Organization[] 
- owners string[]
- parents
GetFabric Mac Sec Policy Result Parent[] 
- permissionResources GetFabric Mac Sec Policy Result Permission Resource[] 
- primaryKey GetChains Fabric Mac Sec Policy Result Primary Key Chain[] 
- replayWindow numberSize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sakExpiry numberTime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- securityPolicy string
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- string
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
GetFabric Mac Sec Policy Result Tag[] 
- versionContexts GetFabric Mac Sec Policy Result Version Context[] 
- account_moid str
- The Account ID for this managed object.
- additional_properties str
- ancestors
Sequence[GetFabric Mac Sec Policy Result Ancestor] 
- cipher_suite str
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- class_id str
- confidentiality_offset str
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- create_time str
- The time when this managed object was created.
- description str
- Description of the policy.
- domain_group_ strmoid 
- The DomainGroup ID for this managed object.
- fallback_key_ Sequence[Getchains Fabric Mac Sec Policy Result Fallback Key Chain] 
- include_icv_ boolindicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- key_server_ floatpriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- mac_sec_ Sequence[Getea_ pols Fabric Mac Sec Policy Result Mac Sec Ea Pol] 
- mod_time str
- The time when this managed object was last modified.
- moid str
- The unique identifier of this Managed Object instance.
- name str
- Name of the concrete policy.
- object_type str
- organizations
Sequence[GetFabric Mac Sec Policy Result Organization] 
- owners Sequence[str]
- parents
Sequence[GetFabric Mac Sec Policy Result Parent] 
- permission_resources Sequence[GetFabric Mac Sec Policy Result Permission Resource] 
- primary_key_ Sequence[Getchains Fabric Mac Sec Policy Result Primary Key Chain] 
- replay_window_ floatsize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sak_expiry_ floattime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- security_policy str
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- str
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- 
Sequence[GetFabric Mac Sec Policy Result Tag] 
- version_contexts Sequence[GetFabric Mac Sec Policy Result Version Context] 
- accountMoid String
- The Account ID for this managed object.
- additionalProperties String
- ancestors List<Property Map>
- cipherSuite String
- Cipher suite to be used for MACsec encryption.* GCM-AES-XPN-256- An extended Cipher Suite of GCM-AES-256 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) for enhanced security and scalability.*GCM-AES-128- This Cipher Suite employs the Advanced Encryption Standard (AES) with a 128-bit key in Galois/Counter Mode, offering both encryption and authentication.*GCM-AES-256- This Cipher Suite utilizes Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode, offering a higher level of security compared to GCM-AES-128 due to the larger key size.*GCM-AES-XPN-128- An extended Cipher Suite of GCM-AES-128 used in MACsec (Media Access Control Security) that incorporates Extended Packet Numbering (XPN) to enhance security and scalability.
- classId String
- confidentialityOffset String
- The MACsec confidentiality offset specifies the number of bytes starting from the frame header. MACsec encrypts only the bytes after the offset in a frame.* CONF-OFFSET-0- A value of 0 means the entire ethernet frame is encrypted.*CONF-OFFSET-30- The first 30 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.*CONF-OFFSET-50- The first 50 bytes of the ethernet frame are not encrypted, and the rest of the frame is encrypted.
- createTime String
- The time when this managed object was created.
- description String
- Description of the policy.
- domainGroup StringMoid 
- The DomainGroup ID for this managed object.
- fallbackKey List<Property Map>Chains 
- includeIcv BooleanIndicator 
- Configures inclusion of the optional integrity check value (ICV) indicator as part of the transmitted MACsec key agreement protocol data unit (PDU).
- keyServer NumberPriority 
- The key server is selected by comparing key-server priority values during MACsec key agreement (MKA) message exchange between peer devices. Valid values range from 0 to 255. The lower the value, the higher the chance it will be selected as the key server.
- macSec List<Property Map>Ea Pols 
- modTime String
- The time when this managed object was last modified.
- moid String
- The unique identifier of this Managed Object instance.
- name String
- Name of the concrete policy.
- objectType String
- organizations List<Property Map>
- owners List<String>
- parents List<Property Map>
- permissionResources List<Property Map>
- primaryKey List<Property Map>Chains 
- replayWindow NumberSize 
- Defines the size of the replay protection window. It determines the number of packets that can be received out of order without being considered replay attacks.
- sakExpiry NumberTime 
- Time in seconds to force secure association key (SAK) rekey. Valid range is from 60 to 2592000 seconds when configured. When not configured, the SAK rekey interval is determined based on the interface speed.
- securityPolicy String
- The security policy specifies the level of MACsec enforcement on network traffic passing through a given interface.Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow. Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.* Should-secure- Should secure allows unencrypted traffic to flow until the MACsec key agreement (MKA) session is secured. After the MKA session is secured, the policy switches to only allow encrypted traffic to flow.*Must-secure- Must secure imposes only MACsec encrypted traffic to flow. Traffic will be dropped, until the MKA session is not secured.
- String
- Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
- List<Property Map>
- versionContexts List<Property Map>
GetFabricMacSecPolicyResultAncestor      
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
- additionalProperties string
- classId string
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- selector string
- additional_properties str
- class_id str
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- selector str
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
GetFabricMacSecPolicyResultFallbackKeyChain        
- AdditionalProperties string
- ClassId string
- Name string
- Name of the concrete policy.
- ObjectType string
- SecKeys List<GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key> 
- AdditionalProperties string
- ClassId string
- Name string
- Name of the concrete policy.
- ObjectType string
- SecKeys []GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key 
- additionalProperties String
- classId String
- name String
- Name of the concrete policy.
- objectType String
- secKeys List<GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key> 
- additionalProperties string
- classId string
- name string
- Name of the concrete policy.
- objectType string
- secKeys GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key[] 
- additional_properties str
- class_id str
- name str
- Name of the concrete policy.
- object_type str
- sec_keys Sequence[GetFabric Mac Sec Policy Result Fallback Key Chain Sec Key] 
- additionalProperties String
- classId String
- name String
- Name of the concrete policy.
- objectType String
- secKeys List<Property Map>
GetFabricMacSecPolicyResultFallbackKeyChainSecKey          
- AdditionalProperties string
- ClassId string
- CryptographicAlgorithm string
- Id string
- IsOctet boolString Set 
- KeyType string
- ObjectType string
- OctetString string
- SendLifetime doubleDuration 
- SendLifetime stringEnd Time 
- SendLifetime boolInfinite 
- SendLifetime stringStart Time 
- SendLifetime stringTime Zone 
- SendLifetime boolUnlimited 
- AdditionalProperties string
- ClassId string
- CryptographicAlgorithm string
- Id string
- IsOctet boolString Set 
- KeyType string
- ObjectType string
- OctetString string
- SendLifetime float64Duration 
- SendLifetime stringEnd Time 
- SendLifetime boolInfinite 
- SendLifetime stringStart Time 
- SendLifetime stringTime Zone 
- SendLifetime boolUnlimited 
- additionalProperties String
- classId String
- cryptographicAlgorithm String
- id String
- isOctet BooleanString Set 
- keyType String
- objectType String
- octetString String
- sendLifetime DoubleDuration 
- sendLifetime StringEnd Time 
- sendLifetime BooleanInfinite 
- sendLifetime StringStart Time 
- sendLifetime StringTime Zone 
- sendLifetime BooleanUnlimited 
- additionalProperties string
- classId string
- cryptographicAlgorithm string
- id string
- isOctet booleanString Set 
- keyType string
- objectType string
- octetString string
- sendLifetime numberDuration 
- sendLifetime stringEnd Time 
- sendLifetime booleanInfinite 
- sendLifetime stringStart Time 
- sendLifetime stringTime Zone 
- sendLifetime booleanUnlimited 
- additional_properties str
- class_id str
- cryptographic_algorithm str
- id str
- is_octet_ boolstring_ set 
- key_type str
- object_type str
- octet_string str
- send_lifetime_ floatduration 
- send_lifetime_ strend_ time 
- send_lifetime_ boolinfinite 
- send_lifetime_ strstart_ time 
- send_lifetime_ strtime_ zone 
- send_lifetime_ boolunlimited 
- additionalProperties String
- classId String
- cryptographicAlgorithm String
- id String
- isOctet BooleanString Set 
- keyType String
- objectType String
- octetString String
- sendLifetime NumberDuration 
- sendLifetime StringEnd Time 
- sendLifetime BooleanInfinite 
- sendLifetime StringStart Time 
- sendLifetime StringTime Zone 
- sendLifetime BooleanUnlimited 
GetFabricMacSecPolicyResultMacSecEaPol         
- AdditionalProperties string
- ClassId string
- EaPol stringEthertype 
- EaPol stringMac Address 
- ObjectType string
- AdditionalProperties string
- ClassId string
- EaPol stringEthertype 
- EaPol stringMac Address 
- ObjectType string
- additionalProperties String
- classId String
- eaPol StringEthertype 
- eaPol StringMac Address 
- objectType String
- additionalProperties string
- classId string
- eaPol stringEthertype 
- eaPol stringMac Address 
- objectType string
- additional_properties str
- class_id str
- ea_pol_ strethertype 
- ea_pol_ strmac_ address 
- object_type str
- additionalProperties String
- classId String
- eaPol StringEthertype 
- eaPol StringMac Address 
- objectType String
GetFabricMacSecPolicyResultOrganization      
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
- additionalProperties string
- classId string
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- selector string
- additional_properties str
- class_id str
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- selector str
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
GetFabricMacSecPolicyResultParent      
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
- additionalProperties string
- classId string
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- selector string
- additional_properties str
- class_id str
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- selector str
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
GetFabricMacSecPolicyResultPermissionResource       
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
- additionalProperties string
- classId string
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- selector string
- additional_properties str
- class_id str
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- selector str
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
GetFabricMacSecPolicyResultPrimaryKeyChain        
- AdditionalProperties string
- ClassId string
- Name string
- Name of the concrete policy.
- ObjectType string
- SecKeys List<GetFabric Mac Sec Policy Result Primary Key Chain Sec Key> 
- AdditionalProperties string
- ClassId string
- Name string
- Name of the concrete policy.
- ObjectType string
- SecKeys []GetFabric Mac Sec Policy Result Primary Key Chain Sec Key 
- additionalProperties String
- classId String
- name String
- Name of the concrete policy.
- objectType String
- secKeys List<GetFabric Mac Sec Policy Result Primary Key Chain Sec Key> 
- additionalProperties string
- classId string
- name string
- Name of the concrete policy.
- objectType string
- secKeys GetFabric Mac Sec Policy Result Primary Key Chain Sec Key[] 
- additional_properties str
- class_id str
- name str
- Name of the concrete policy.
- object_type str
- sec_keys Sequence[GetFabric Mac Sec Policy Result Primary Key Chain Sec Key] 
- additionalProperties String
- classId String
- name String
- Name of the concrete policy.
- objectType String
- secKeys List<Property Map>
GetFabricMacSecPolicyResultPrimaryKeyChainSecKey          
- AdditionalProperties string
- ClassId string
- CryptographicAlgorithm string
- Id string
- IsOctet boolString Set 
- KeyType string
- ObjectType string
- OctetString string
- SendLifetime doubleDuration 
- SendLifetime stringEnd Time 
- SendLifetime boolInfinite 
- SendLifetime stringStart Time 
- SendLifetime stringTime Zone 
- SendLifetime boolUnlimited 
- AdditionalProperties string
- ClassId string
- CryptographicAlgorithm string
- Id string
- IsOctet boolString Set 
- KeyType string
- ObjectType string
- OctetString string
- SendLifetime float64Duration 
- SendLifetime stringEnd Time 
- SendLifetime boolInfinite 
- SendLifetime stringStart Time 
- SendLifetime stringTime Zone 
- SendLifetime boolUnlimited 
- additionalProperties String
- classId String
- cryptographicAlgorithm String
- id String
- isOctet BooleanString Set 
- keyType String
- objectType String
- octetString String
- sendLifetime DoubleDuration 
- sendLifetime StringEnd Time 
- sendLifetime BooleanInfinite 
- sendLifetime StringStart Time 
- sendLifetime StringTime Zone 
- sendLifetime BooleanUnlimited 
- additionalProperties string
- classId string
- cryptographicAlgorithm string
- id string
- isOctet booleanString Set 
- keyType string
- objectType string
- octetString string
- sendLifetime numberDuration 
- sendLifetime stringEnd Time 
- sendLifetime booleanInfinite 
- sendLifetime stringStart Time 
- sendLifetime stringTime Zone 
- sendLifetime booleanUnlimited 
- additional_properties str
- class_id str
- cryptographic_algorithm str
- id str
- is_octet_ boolstring_ set 
- key_type str
- object_type str
- octet_string str
- send_lifetime_ floatduration 
- send_lifetime_ strend_ time 
- send_lifetime_ boolinfinite 
- send_lifetime_ strstart_ time 
- send_lifetime_ strtime_ zone 
- send_lifetime_ boolunlimited 
- additionalProperties String
- classId String
- cryptographicAlgorithm String
- id String
- isOctet BooleanString Set 
- keyType String
- objectType String
- octetString String
- sendLifetime NumberDuration 
- sendLifetime StringEnd Time 
- sendLifetime BooleanInfinite 
- sendLifetime StringStart Time 
- sendLifetime StringTime Zone 
- sendLifetime BooleanUnlimited 
GetFabricMacSecPolicyResultTag      
- AdditionalProperties string
- Key string
- Value string
- AdditionalProperties string
- Key string
- Value string
- additionalProperties String
- key String
- value String
- additionalProperties string
- key string
- value string
- additional_properties str
- key str
- value str
- additionalProperties String
- key String
- value String
GetFabricMacSecPolicyResultVersionContext       
- additionalProperties string
- classId string
- interestedMos GetFabric Mac Sec Policy Result Version Context Interested Mo[] 
- markedFor booleanDeletion 
- nrVersion string
- objectType string
- refMos GetFabric Mac Sec Policy Result Version Context Ref Mo[] 
- timestamp string
- versionType string
- additionalProperties String
- classId String
- interestedMos List<Property Map>
- markedFor BooleanDeletion 
- nrVersion String
- objectType String
- refMos List<Property Map>
- timestamp String
- versionType String
GetFabricMacSecPolicyResultVersionContextInterestedMo         
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
- additionalProperties string
- classId string
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- selector string
- additional_properties str
- class_id str
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- selector str
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
GetFabricMacSecPolicyResultVersionContextRefMo         
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- AdditionalProperties string
- ClassId string
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- Selector string
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
- additionalProperties string
- classId string
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- selector string
- additional_properties str
- class_id str
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- selector str
- additionalProperties String
- classId String
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- selector String
GetFabricMacSecPolicyTag     
- AdditionalProperties string
- Key string
- The string representation of a tag key.
- Value string
- The string representation of a tag value.
- AdditionalProperties string
- Key string
- The string representation of a tag key.
- Value string
- The string representation of a tag value.
- additionalProperties String
- key String
- The string representation of a tag key.
- value String
- The string representation of a tag value.
- additionalProperties string
- key string
- The string representation of a tag key.
- value string
- The string representation of a tag value.
- additional_properties str
- key str
- The string representation of a tag key.
- value str
- The string representation of a tag value.
- additionalProperties String
- key String
- The string representation of a tag key.
- value String
- The string representation of a tag value.
GetFabricMacSecPolicyVersionContext      
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- InterestedMos List<GetFabric Mac Sec Policy Version Context Interested Mo> 
- MarkedFor boolDeletion 
- The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- NrVersion string
- The version of the Managed Object, e.g. an incrementing number or a hash id.
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- RefMo GetFabric Mac Sec Policy Version Context Ref Mo 
- A reference to the original Managed Object.
- Timestamp string
- The time this versioned Managed Object was created.
- VersionType string
- Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.- Modified- Version created every time an object is modified.
- Configured- Version created every time an object is configured to the service profile.
- Deployed- Version created for objects related to a service profile when it is deployed.
 
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- InterestedMos []GetFabric Mac Sec Policy Version Context Interested Mo 
- MarkedFor boolDeletion 
- The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- NrVersion string
- The version of the Managed Object, e.g. an incrementing number or a hash id.
- ObjectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- RefMo GetFabric Mac Sec Policy Version Context Ref Mo 
- A reference to the original Managed Object.
- Timestamp string
- The time this versioned Managed Object was created.
- VersionType string
- Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.- Modified- Version created every time an object is modified.
- Configured- Version created every time an object is configured to the service profile.
- Deployed- Version created for objects related to a service profile when it is deployed.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- interestedMos List<GetFabric Mac Sec Policy Version Context Interested Mo> 
- markedFor BooleanDeletion 
- The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nrVersion String
- The version of the Managed Object, e.g. an incrementing number or a hash id.
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- refMo GetFabric Mac Sec Policy Version Context Ref Mo 
- A reference to the original Managed Object.
- timestamp String
- The time this versioned Managed Object was created.
- versionType String
- Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.- Modified- Version created every time an object is modified.
- Configured- Version created every time an object is configured to the service profile.
- Deployed- Version created for objects related to a service profile when it is deployed.
 
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- interestedMos GetFabric Mac Sec Policy Version Context Interested Mo[] 
- markedFor booleanDeletion 
- The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nrVersion string
- The version of the Managed Object, e.g. an incrementing number or a hash id.
- objectType string
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- refMo GetFabric Mac Sec Policy Version Context Ref Mo 
- A reference to the original Managed Object.
- timestamp string
- The time this versioned Managed Object was created.
- versionType string
- Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.- Modified- Version created every time an object is modified.
- Configured- Version created every time an object is configured to the service profile.
- Deployed- Version created for objects related to a service profile when it is deployed.
 
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- interested_mos Sequence[GetFabric Mac Sec Policy Version Context Interested Mo] 
- marked_for_ booldeletion 
- The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nr_version str
- The version of the Managed Object, e.g. an incrementing number or a hash id.
- object_type str
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- ref_mo GetFabric Mac Sec Policy Version Context Ref Mo 
- A reference to the original Managed Object.
- timestamp str
- The time this versioned Managed Object was created.
- version_type str
- Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.- Modified- Version created every time an object is modified.
- Configured- Version created every time an object is configured to the service profile.
- Deployed- Version created for objects related to a service profile when it is deployed.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- interestedMos List<Property Map>
- markedFor BooleanDeletion 
- The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
- nrVersion String
- The version of the Managed Object, e.g. an incrementing number or a hash id.
- objectType String
- The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
- refMo Property Map
- A reference to the original Managed Object.
- timestamp String
- The time this versioned Managed Object was created.
- versionType String
- Specifies type of version. Currently the only supported value is "Configured"
that is used to keep track of snapshots of policies and profiles that are intended
to be configured to target endpoints.- Modified- Version created every time an object is modified.
- Configured- Version created every time an object is configured to the service profile.
- Deployed- Version created for objects related to a service profile when it is deployed.
 
GetFabricMacSecPolicyVersionContextInterestedMo        
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
GetFabricMacSecPolicyVersionContextRefMo        
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- AdditionalProperties string
- ClassId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- Moid string
- The unique identifier of this Managed Object instance.
- ObjectType string
- The fully-qualified name of the remote type referred by this relationship.
- Selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties string
- classId string
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid string
- The unique identifier of this Managed Object instance.
- objectType string
- The fully-qualified name of the remote type referred by this relationship.
- selector string
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additional_properties str
- class_id str
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid str
- The unique identifier of this Managed Object instance.
- object_type str
- The fully-qualified name of the remote type referred by this relationship.
- selector str
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
- additionalProperties String
- classId String
- The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
- moid String
- The unique identifier of this Managed Object instance.
- objectType String
- The fully-qualified name of the remote type referred by this relationship.
- selector String
- An OData $filter expression which describes the REST resource to be referenced. This field may
be set instead of 'moid' by clients.- If 'moid' is set this field is ignored.
- If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of the resource matching the filter expression and populates it in the MoRef that is part of the object instance being inserted/updated to fulfill the REST request. An error is returned if the filter matches zero or more than one REST resource. An example filter string is: Serial eq '3AA8B7T11'.
 
Package Details
- Repository
- intersight ciscodevnet/terraform-provider-intersight
- License
- Notes
- This Pulumi package is based on the intersightTerraform Provider.
intersight 1.0.65 published on Wednesday, May 7, 2025 by ciscodevnet