Class CIM_SARule
extends CIM_PolicyRule

SARule is a base class for defining IKE and IPsec Rules. Although concrete, it is not intended to be instantiated. It defines a common anchor point for defining associations and aggregations to conditions, actions, and security associations (SAs) for both types of rules. Each valid IPsecPolicyGroup must contain SARules that each have a unique associated priority number in PolicySetComponent.Priority.

Class Hierarchy

CIM_ManagedElement
   |
   +--CIM_Policy
   |
   +--CIM_PolicySet
   |
   +--CIM_PolicyRule
   |
   +--CIM_SARule

Direct Known Subclasses

CIM_IKERule
CIM_IPsecRule

Class Qualifiers

NameData TypeValueScopeFlavors
DescriptionstringSARule is a base class for defining IKE and IPsec Rules. Although concrete, it is not intended to be instantiated. It defines a common anchor point for defining associations and aggregations to conditions, actions, and security associations (SAs) for both types of rules. Each valid IPsecPolicyGroup must contain SARules that each have a unique associated priority number in PolicySetComponent.Priority. None TRANSLATABLE= true

Local Class Properties

NameData TypeQualifiers
NameData TypeValueScopeFlavors
ExecutionStrategyuint16
DescriptionstringExecutionStrategy defines the strategy to be used in executing the sequenced actions aggregated by this PolicyRule. In SARule, ExecutionStrategy MUST be set to 'Do All'. SAActionInRule.FallbackAction is used to control the fallback behavior.None TRANSLATABLE= true
OverridestringExecutionStrategyNone OVERRIDABLE= false
ValueMapstringDo AllNone None
Valuesstring2None TRANSLATABLE= true
LimitNegotiationuint16
DescriptionstringLimitNegotiation is used as part of processing either an IKE or an IPsec rule. Before proceeding with either a phase 1 or a phase 2 negotiation, this property is checked to determine if the negotiation role of the rule matches that defined for the negotiation being undertaken (e.g., Initiator, Responder, or Both). If this check fails, then the IKE negotiation is stopped. Note that this only applies to new IKE negotiations and has no effect on either renegotiation or refresh operations with peers for which an established SA already exists. None TRANSLATABLE= true
ValueMapstring1, 2, 3None None
ValuesstringInitiator-only, Responder-Only, EitherNone TRANSLATABLE= true

Inherited Properties

NameData TypeClass Origin
CaptionstringCIM_ManagedElement
CommonNamestringCIM_Policy
ConditionListTypeuint16CIM_PolicyRule
CreationClassNamestringCIM_PolicyRule
DescriptionstringCIM_ManagedElement
Enableduint16CIM_PolicyRule
MandatorybooleanCIM_PolicyRule
PolicyDecisionStrategyuint16CIM_PolicySet
PolicyRuleNamestringCIM_PolicyRule
Priorityuint16CIM_PolicyRule
RuleUsagestringCIM_PolicyRule
SequencedActionsuint16CIM_PolicyRule
SystemCreationClassNamestringCIM_PolicyRule
SystemNamestringCIM_PolicyRule