Class CIM_IKESecurityAssociation
extends CIM_SecurityAssociation

IKESecurityAssociation is the SA used by IKE to protect key negotiation traffic.

Class Hierarchy

CIM_ManagedElement
   |
   +--CIM_ManagedSystemElement
   |
   +--CIM_LogicalElement
   |
   +--CIM_ServiceAccessPoint
   |
   +--CIM_ProtocolEndpoint
   |
   +--CIM_SecurityAssociation
   |
   +--CIM_IKESecurityAssociation

Direct Known Subclasses

None.

Class Qualifiers

NameData TypeValueScopeFlavors
DescriptionstringIKESecurityAssociation is the SA used by IKE to protect key negotiation traffic.None TRANSLATABLE= true

Local Class Properties

NameData TypeQualifiers
NameData TypeValueScopeFlavors
CipherAlgorithmuint16
DescriptionstringCipherAlgorithm is an enumeration that specifies the proposed encryption algorithm.None TRANSLATABLE= true
ValueMapstring1, 2, 3, 4, 5, 6None None
ValuesstringDES, IDEA, Blowfish, RC5, 3DES, CASTNone TRANSLATABLE= true
DerivedKeyCountuint32
DescriptionstringHow many phase 2 derived keys have been negotiated with this SA.None TRANSLATABLE= true
GroupIduint16
DescriptionstringGroupId specifies the key exchange group ID. If the GroupID number is from the vendor-specific range (32768-65535), the VendorID qualifies the group number. Well-known group identifiers from RFC2412 are: 1='DH768', 2='DH1024', 3='ECC2N155', 4='ECC2N185', and 5='DH1536'None TRANSLATABLE= true
ModelCorrespondencestringCIM_IKESecurityAssociation.VendorIDNone None
HashAlgorithmuint16
DescriptionstringHashAlgorithm is an enumeration that specifies the proposed hash function.None TRANSLATABLE= true
ValueMapstring1, 2, 3None None
ValuesstringMD5, SHA-1, TigerNone TRANSLATABLE= true
InitiatorCookieuint64
DescriptionstringIdentifier of the IKE phase 1 negotiation initiator. Combined with the ResponderCookie, this value,in string form, may be used to construct the value of the key field 'Name'.None TRANSLATABLE= true
LifetimeDerivedKeysuint32
DescriptionstringDelete SA if more than LiftetimeDerivedKeys phase 2 keys derived. A zero value indicates that there isno limit to the number of phase 2 derived keys.None TRANSLATABLE= true
RefreshThresholdDerivedKeysuint8
DescriptionstringPercentage of LifetimeDerivedKeys at which SA should be refreshed.None TRANSLATABLE= true
ResponderCookieuint64
DescriptionstringIdentifier of the IKE phase 1 negotiation responder. Combined with the InitiatorCookie, this value,in string form, may be used to construct the value of the key field 'Name'.None TRANSLATABLE= true
VendorIDstring
DescriptionstringVendorID identifies the vendor ID for vendor-defined algorithms.None TRANSLATABLE= true
ModelCorrespondencestringCIM_IKESecurityAssociation.GroupIdNone None

Inherited Properties

NameData TypeClass Origin
ByteCountuint32CIM_SecurityAssociation
CaptionstringCIM_ManagedElement
CreationClassNamestringCIM_ServiceAccessPoint
DescriptionstringCIM_ManagedElement
DoPacketLoggingbooleanCIM_SecurityAssociation
IdleDurationSecondsuint32CIM_SecurityAssociation
InstallDatedatetimeCIM_ManagedSystemElement
LastAccesseddatetimeCIM_SecurityAssociation
LifetimeKilobytesuint32CIM_SecurityAssociation
LifetimeSecondsuint32CIM_SecurityAssociation
NamestringCIM_ProtocolEndpoint
NameFormatstringCIM_ProtocolEndpoint
OtherTypeDescriptionstringCIM_ProtocolEndpoint
ProtocolTypestringCIM_ProtocolEndpoint
RefreshThresholdKilobytesuint8CIM_SecurityAssociation
RefreshThresholdSecondsuint8CIM_SecurityAssociation
StatusstringCIM_ManagedSystemElement
SystemCreationClassNamestringCIM_ServiceAccessPoint
SystemNamestringCIM_ServiceAccessPoint
TimeOfCreationdatetimeCIM_SecurityAssociation