1 karl  1.1.2.2 // Copyright (c) 2005 DMTF.  All rights reserved.
 2                  [Abstract, Version ( "2.8.0" ), 
 3                   UMLPackagePath ( "CIM::IPsecPolicy" ), 
 4                   Description ( 
 5                      "SANegotiationAction is the base class for negotiated SAs. It "
 6                      "is abstract, specifying the common parameters that control the "
 7                      "IPsec phase 1 and phase 2 negotiations." ), 
 8                   MappingStrings { "IPSP Policy Model.IETF|SANegotiationAction", 
 9                      "IPSP Policy Model.IETF|IKENegotiationAction" }]
10               class CIM_SANegotiationAction : CIM_SAAction {
11               
12                     [Description ( 
13                         "MinLifetimeSeconds prevents certain denial of service "
14                         "attacks where the peer requests an arbitrarily low "
15                         "lifetime value, causing renegotiations with expensive "
16                         "Diffie-Hellman operations. The property specifies the "
17                         "minimum lifetime, in seconds, that will be accepted from "
18                         "the peer. A value of zero (the default) indicates that "
19                         "there is no minimum value. A non-zero value specifies "
20                         "the minimum seconds lifetime." ), 
21                      Units ( "Seconds" ), 
22 karl  1.1.2.2        MappingStrings { 
23                         "IPSP Policy Model.IETF|IKENegotiationAction.MinLifetimeSeconds" }, 
24                      ModelCorrespondence { 
25                         "CIM_SecurityAssociationEndpoint.LifetimeSeconds" }, 
26                      PUnit ( "second" )]
27                  uint64 MinLifetimeSeconds = 0;
28               
29                     [Description ( 
30                         "IdleDurationSeconds is the time an SA can remain idle "
31                         "(i.e., no traffic protected using the security "
32                         "association) before it is automatically deleted. The "
33                         "default (zero) value indicates that there is no idle "
34                         "duration timer and that the SA is deleted based upon the "
35                         "SA seconds and kilobyte lifetimes. Any non-zero value "
36                         "indicates the number of seconds that the SA may remain "
37                         "unused." ), 
38                      Units ( "Seconds" ), 
39                      MappingStrings { 
40                         "IPSP Policy Model.IETF|IKENegotiationAction.IdleDurationSeconds" }, 
41                      ModelCorrespondence { 
42                         "CIM_SecurityAssociationEndpoint.IdleDurationSeconds" }, 
43 karl  1.1.2.2        PUnit ( "second" )]
44                  uint64 IdleDurationSeconds = 0;
45               
46                     [Description ( 
47                         "MinLifetimeKilobytes prevents certain denial of service "
48                         "attacks where the peer requests an arbitrarily low "
49                         "lifetime value, causing renegotiations with expensive "
50                         "Diffie-Hellman operations. The property specifies the "
51                         "minimum lifetime, in kilobytes, that will be accepted "
52                         "from the peer. A value of zero (the default) indicates "
53                         "that there is no minimum value. A non-zero value "
54                         "specifies the minimum kilobytes lifetime. Note that "
55                         "there has been considerable debate regarding the "
56                         "usefulness of applying kilobyte lifetimes to phase 1 "
57                         "security associations, so it is likely that this "
58                         "property will only apply to the subclass, IPsecAction." ), 
59                      Units ( "KiloBytes" ), 
60                      MappingStrings { 
61                         "IPSP Policy Model.IETF|IKENegotiationAction.MinLifetimeKilobytes" }, 
62                      ModelCorrespondence { 
63                         "CIM_SecurityAssociationEndpoint.LifetimeKilobytes" }, 
64 karl  1.1.2.2        PUnit ( "byte * 10^3" )]
65                  uint64 MinLifetimeKilobytes = 0;
66               
67               
68               };