1 a.dunfey 1.1 // ===================================================================
2 // Title: Network_Filtering
3 // $State: Exp $
4 // $Date: 2004/11/29 18:31:42 $
5 // $RCSfile: Network_Filtering.mof,v $
6 // $Revision: 1.3.2.3 $
7 // ===================================================================
8 //#pragma inLine ("Includes/copyright.inc")
9 // Copyright 1998-2005 Distributed Management Task Force, Inc. (DMTF).
10 // All rights reserved.
11 // DMTF is a not-for-profit association of industry members dedicated
12 // to promoting enterprise and systems management and interoperability.
13 // DMTF specifications and documents may be reproduced for uses
14 // consistent with this purpose by members and non-members,
15 // provided that correct attribution is given.
16 // As DMTF specifications may be revised from time to time,
17 // the particular version and release date should always be noted.
18 //
19 // Implementation of certain elements of this standard or proposed
20 // standard may be subject to third party patent rights, including
21 // provisional patent rights (herein "patent rights"). DMTF makes
22 a.dunfey 1.1 // no representations to users of the standard as to the existence
23 // of such rights, and is not responsible to recognize, disclose, or
24 // identify any or all such third party patent right, owners or
25 // claimants, nor for any incomplete or inaccurate identification or
26 // disclosure of such rights, owners or claimants. DMTF shall have no
27 // liability to any party, in any manner or circumstance, under any
28 // legal theory whatsoever, for failure to recognize, disclose, or
29 // identify any such third party patent rights, or for such party's
30 // reliance on the standard or incorporation thereof in its product,
31 // protocols or testing procedures. DMTF shall have no liability to
32 // any party implementing such standard, whether such implementation
33 // is foreseeable or not, nor to any patent owner or claimant, and shall
34 // have no liability or responsibility for costs or losses incurred if
35 // a standard is withdrawn or modified after publication, and shall be
36 // indemnified and held harmless by any party implementing the
37 // standard from any and all claims of infringement by a patent owner
38 // for such implementations.
39 //
40 // For information about patents held by third-parties which have
41 // notified the DMTF that, in their opinion, such patent may relate to
42 // or impact implementations of DMTF standards, visit
43 a.dunfey 1.1 // http://www.dmtf.org/about/policies/disclosures.php.
44 //#pragma inLine
45 // ===================================================================
46 // Description: The Network Model extends the management concepts to
47 // represent protocol interfaces and network/protocol
48 // services. This file defines filtering - filter lists
49 // and filter entries.
50 //
51 // The object classes below are listed in an order that
52 // avoids forward references. Required objects, defined
53 // by other working groups, are omitted.
54 // ==================================================================
55 // Change Log for v2.7
56 // CR793 - Add the Abstract qualifier to FilterEntryBase and update
57 // the description
58 // - Update the description for EntriesInFilterList.EntrySequence
59 // - Deprecate FilterEntriesInSystem and FilterListInSystem
60 // - Add HostedFilterEntryBase and HostedFilterList
61 // - Add 8021Filter and PreambleFilter
62 // - FilterEntry.TrafficType needs an Other value in its
63 // enumerated list, and an OtherTrafficType property should be
64 a.dunfey 1.1 // defined
65 // CR800 - Remove FilterEntry.TrafficClass' ModelCorrespondence
66 // CR849 - 8021Filter property names must be changed from 8021HdrXXX to
67 // HdrXXX8021 to comply with the CIM Spec
68 // CR867 - Add Override qualifier to FilterEntryBase and
69 // FilterList.Name
70 // CR982 - Removal of Experimental for preliminary to final
71 // CR983 - Deprecations for v2.7 made final
72 // New Log for V2.8
73 // CR1026 - Add class definitions for IPSec
74 // CR1089 - Clarify IsNegated in FilterEntryBase
75 // CR1128 - Change subclassing from CIM_Dependency to
76 // CIM_HostedDependency for identified classes. This is
77 // needed as a result of the introduction of HostedDependency
78 // in SysDev
79 // CR1194 - Classes in the _Filters MOF to be promoted to FINAL status
80 // and their Version qualifiers set to "2.8.0":
81 // X509CredentialFilterEntry
82 // IPSOFilterEntry
83 // PeerIDPayloadFilterEntry
84 //
85 a.dunfey 1.1 // CR1226 - Change all references to CIM_8021Filter to
86 // CIM_Hdr8021Filter.
87 // CR1238 - Fix model correspondece reference problems in final version
88 // ===================================================================
89
90 #pragma Locale ("en_US")
91
92
93 // ===================================================================
94 // FilterEntryBase
95 // ===================================================================
96 [Abstract, Version ( "2.7.0" ), Description (
97 "A FilterList aggregates instances of (subclasses of) "
98 "FilterEntryBase via the aggregation EntriesInFilterList. The "
99 "filter entries are always ANDed together when grouped by the "
100 "FilterList. Note that it is possible to aggregate different "
101 "types of filters into a single FilterList - for example, "
102 "packet header filters (represented by the IpHeadersFilter "
103 "class) and IPsec security filters. \n"
104 "\n"
105 "A FilterList is weak to the network device (e.g., the "
106 a.dunfey 1.1 "ComputerSystem) that contains it. Hence, the ComputerSystem "
107 "keys are propagated to this class.")]
108 class CIM_FilterEntryBase : CIM_LogicalElement {
109
110 [Key, Propagated ( "CIM_ComputerSystem.CreationClassName" ),
111 Description (
112 "The scoping ComputerSystem's CreationClassName."),
113 MaxLen ( 256 )]
114 string SystemCreationClassName;
115
116 [Key, Propagated ( "CIM_ComputerSystem.Name" ), Description (
117 "The scoping ComputerSystem's Name."),
118 MaxLen ( 256 )]
119 string SystemName;
120
121 [Key, Description (
122 "CreationClassName indicates the name of the class or the "
123 "subclass used in the creation of an instance. When used "
124 "with the other key properties of this class, this property "
125 "allows all instances of this class and its subclasses to be "
126 "uniquely identified."),
127 a.dunfey 1.1 MaxLen ( 256 )]
128 string CreationClassName;
129
130 [Key, Override ( "Name" ), Description (
131 "The Name property defines the label by which the Filter "
132 "Entry is known and uniquely identified."),
133 MaxLen ( 256 )]
134 string Name;
135
136 [Description (
137 "Boolean indicating that the match condition described in "
138 "the properties of the FilterEntryBase subclass should be "
139 "negated. This property is defined for ease of use when "
140 "filtering on simple negations - for example, to select all "
141 "source ports except 162. It is not recommended that this "
142 "Boolean be set to True when filtering on multiple criteria, "
143 "such as defining an IPHeadersFilter based on "
144 "source/destination addresses, ports, and DiffServ Code "
145 "Points.")]
146 boolean IsNegated;
147 };
148 a.dunfey 1.1
149
150 // ==================================================================
151 // FilterEntry
152 // ==================================================================
153 [Version ( "2.7.0" ), Description (
154 "A FilterEntry is used by network devices to identify traffic "
155 "and either forward it (with possibly further processing) to "
156 "its destination, or to deny its forwarding. It is one of the "
157 "building block of FilterLists. \n"
158 "\n"
159 "This class is oriented towards packet filtering. Other "
160 "subclasses of FilterEntryBase can be defined to do other types "
161 "of filtering. \n"
162 "\n"
163 "A FilterEntry is weak to the network device (i.e., the "
164 "ComputerSystem) that contains it. Hence, the ComputerSystem "
165 "keys are propagated to this class.")]
166 class CIM_FilterEntry : CIM_FilterEntryBase {
167
168 [Description (
169 a.dunfey 1.1 "This defines the type of traffic that is being filtered. "
170 "This will affect the filtering rules in the MatchCondition "
171 "property of this class."),
172 ValueMap { "0", "1", "2", "3", "4", "5" },
173 Values { "Unknown", "IPv4", "IPX", "IPv6", "Any", "Other" },
174 ModelCorrespondence { "CIM_FilterEntry.OtherTrafficType" }]
175 uint16 TrafficType;
176
177 [Description (
178 "If the value of the TrafficType property in this class is 5 "
179 "(i.e., \"Other\"), then the specific type of traffic is "
180 "specified in this property."),
181 ModelCorrespondence { "CIM_FilterEntry.TrafficType" }]
182 string OtherTrafficType;
183
184 [Description (
185 "This specifies one of a set of ways to identify traffic. If "
186 "the value is 1 (i.e., \"Other\"), then the specific type of "
187 "filtering is specified in the OtherMatchConditionType "
188 "property of this class."),
189 ValueMap { "1", "2", "3", "4", "5", "6", "7", "8", "9", "10",
190 a.dunfey 1.1 "11", "12", "13" },
191 Values { "Other", "Source Address and Mask",
192 "Destination Address and Mask", "Source Port",
193 "Source Port Range", "Destination Port",
194 "Destination Port Range", "Protocol Type",
195 "Protocol Type and Option", "DSCP", "ToS Value",
196 "802.1P Priority Value", "Any" },
197 ModelCorrespondence { "CIM_FilterEntry.OtherMatchConditionType"
198 }]
199 uint16 MatchConditionType;
200
201 [Description (
202 "If the value of the MatchConditionType property in this "
203 "class is 1 (i.e., \"Other\"), then the specific type of "
204 "filtering is specified in this property."),
205 ModelCorrespondence { "CIM_FilterEntry.MatchConditionType" }]
206 string OtherMatchConditionType;
207
208 [Description (
209 "This is the value of the condition that filters the "
210 "traffic. It corresponds to the condition specified in the "
211 a.dunfey 1.1 "MatchConditionType property. If, however, the value of the "
212 "MatchConditionProperty is 1, then it corresponds to the "
213 "condition specified in the OtherMatchConditionType "
214 "property.")]
215 string MatchConditionValue;
216
217 [Description (
218 "This defines whether the action should be to forward or "
219 "deny traffic meeting the match condition specified in this "
220 "filter."),
221 ValueMap { "1", "2" },
222 Values { "Permit", "Deny" }]
223 uint16 Action;
224
225 [Description (
226 "This defines whether this FilterEntry is the default entry "
227 "to use by its FilterList.")]
228 boolean DefaultFilter;
229
230 [Description (
231 "This defines the traffic class that is being matched by "
232 a.dunfey 1.1 "this FilterEntry. Note that FilterEntries are aggregated "
233 "into FilterLists by the EntriesInFilterList relationship. "
234 "If the EntrySequence property of the aggregation is set to "
235 "0, this means that all the Filter Entries should be ANDed "
236 "together. Consequently, the TrafficClass property of each "
237 "of the aggregated Entries should be set to the same value.")]
238 string TrafficClass;
239 };
240
241
242 // ===================================================================
243 // IPHeadersFilter
244 // ===================================================================
245 [Version ( "2.6.0" ), Description (
246 "IPHeadersFilter contains the most commonly required properties "
247 "for performing filtering on IP, TCP or UDP headers. Properties "
248 "not present in an instance of the IPHeadersFilter are treated "
249 "as 'all values'.")]
250 class CIM_IPHeadersFilter : CIM_FilterEntryBase {
251
252 [Description (
253 a.dunfey 1.1 "HdrIPVersion identifies the version of the IP addresses for "
254 "IP header filters. It is also used to determine the sizes "
255 "of the OctetStrings in the six properties HdrSrcAddress, "
256 "HdrSrcAddressEndOfRange, HdrSrcMask, HdrDestAddress, "
257 "HdrDestAddressEndOfRange and HdrDestMask, as follows: \n"
258 "ipv4(4): OctetString(SIZE (4)) \n"
259 "ipv6(6): OctetString(SIZE (16|20)), \n"
260 "depending on whether a scope identifier is present. \n"
261 "\n"
262 "If a value for this property is not provided, then the "
263 "filter does not consider IP version in selecting matching "
264 "packets, i.e., IP version matches for all values. In this "
265 "case, the HdrSrcAddress, HdrSrcAddressEndOfRange, "
266 "HdrSrcMask, HdrDestAddress, HdrDestAddressEndOfRange and "
267 "HdrDestMask must also be not present."),
268 ValueMap { "4", "6" },
269 Values { "IPv4", "IPv6" },
270 ModelCorrespondence { "CIM_IPHeadersFilter.HdrSrcAddress",
271 "CIM_IPHeadersFilter.HdrSrcAddressEndOfRange",
272 "CIM_IPHeadersFilter.HdrSrcMask",
273 "CIM_IPHeadersFilter.HdrDestAddress",
274 a.dunfey 1.1 "CIM_IPHeadersFilter.HdrDestAddressEndOfRange",
275 "CIM_IPHeadersFilter.HdrDestMask" }]
276 uint8 HdrIPVersion;
277
278 [Description (
279 "HdrSrcAddress is an OctetString, of a size determined by "
280 "the value of the HdrIPVersion property, representing a "
281 "source IP address. When there is no HdrSrcAddressEndOfRange "
282 "value, this value is compared to the source address in the "
283 "IP header, subject to the mask represented in the "
284 "HdrSrcMask property. (Note that the mask is ANDed with the "
285 "address.) When there is a HdrSrcAddressEndOfRange value, "
286 "this value is the start of the specified range (i.e., the "
287 "HdrSrcAddress is lower than the HdrSrcAddressEndOfRange) "
288 "that is compared to the source address in the IP header and "
289 "matches on any value in the range. \n"
290 "\n"
291 "If a value for this property is not provided, then the "
292 "filter does not consider HdrSrcAddress in selecting "
293 "matching packets, i.e., HdrSrcAddress matches for all "
294 "values."),
295 a.dunfey 1.1 OctetString,
296 ModelCorrespondence { "CIM_IPHeadersFilter.HdrIPVersion" }]
297 uint8 HdrSrcAddress[];
298
299 [Description (
300 "HdrSrcAddressEndOfRange is an OctetString, of a size "
301 "determined by the value of the HdrIPVersion property, "
302 "representing the end of a range of source IP addresses "
303 "(inclusive), where the start of the range is the "
304 "HdrSrcAddress property value. \n"
305 "\n"
306 "If a value for HdrSrcAddress is not provided, then this "
307 "property also MUST NOT be provided. If a value for this "
308 "property is provided, then HdrSrcMask MUST NOT be provided."),
309 OctetString,
310 ModelCorrespondence { "CIM_IPHeadersFilter.HdrIPVersion" }]
311 uint8 HdrSrcAddressEndOfRange[];
312
313 [Description (
314 "HdrSrcMask is an OctetString, of a size determined by the "
315 "value of the HdrIPVersion property, representing a mask to "
316 a.dunfey 1.1 "be used in comparing the source address in the IP header "
317 "with the value represented in the HdrSrcAddress property. \n"
318 "\n"
319 "If a value for this property is not provided, then the "
320 "filter does not consider HdrSrcMask in selecting matching "
321 "packets, i.e., the value of the HdrSrcAddress or the source "
322 "address range must match the source address in the packet "
323 "exactly. If a value for this property is provided, then "
324 "HdrSrcAddressEndOfRange MUST NOT be provided."),
325 OctetString,
326 ModelCorrespondence { "CIM_IPHeadersFilter.HdrIPVersion" }]
327 uint8 HdrSrcMask[];
328
329 [Description (
330 "HdrDestAddress is an OctetString, of a size determined by "
331 "the value of the HdrIPVersion property, representing a "
332 "destination IP address. When there is no "
333 "HdrDestAddressEndOfRange value, this value is compared to "
334 "the destination address in the IP header, subject to the "
335 "mask represented in the HdrDestMask property. (Note that "
336 "the mask is ANDed with the address.) When there is a "
337 a.dunfey 1.1 "HdrDestAddressEndOfRange value, this value is the start of "
338 "the specified range (i.e., the HdrDestAddress is lower than "
339 "the HdrDestAddressEndOfRange) that is compared to the "
340 "source address in the IP header and matches on any value in "
341 "the range. \n"
342 "\n"
343 "If a value for this property is not provided, then the "
344 "filter does not consider HdrDestAddress in selecting "
345 "matching packets, i.e., HdrDestAddress matches for all "
346 "values."),
347 OctetString,
348 ModelCorrespondence { "CIM_IPHeadersFilter.HdrIPVersion" }]
349 uint8 HdrDestAddress[];
350
351 [Description (
352 "HdrDestAddressEndOfRange is an OctetString, of a size "
353 "determined by the value of the HdrIPVersion property, "
354 "representing the end of a range of destination IP addresses "
355 "(inclusive), where the start of the range is the "
356 "HdrDestAddress property value. \n"
357 "\n"
358 a.dunfey 1.1 "If a value for HdrDestAddress is not provided, then this "
359 "property also MUST NOT be provided. If a value for this "
360 "property is provided, then HdrDestMask MUST NOT be "
361 "provided."),
362 OctetString,
363 ModelCorrespondence { "CIM_IPHeadersFilter.HdrIPVersion" }]
364 uint8 HdrDestAddressEndOfRange[];
365
366 [Description (
367 "HdrDestMask is an OctetString, of a size determined by the "
368 "value of the HdrIPVersion property, representing a mask to "
369 "be used in comparing the destination address in the IP "
370 "header with the value represented in the HdrDestAddress "
371 "property. \n"
372 "\n"
373 "If a value for this property is not provided, then the "
374 "filter does not consider HdrDestMask in selecting matching "
375 "packets, i.e., the value of the HdrDestAddress or the "
376 "destination address range must match the destination "
377 "address in the packet exactly. If a value for this property "
378 "is provided, then HdrDestAddressEndOfRange MUST NOT be "
379 a.dunfey 1.1 "provided."),
380 OctetString,
381 ModelCorrespondence { "CIM_IPHeadersFilter.HdrIPVersion" }]
382 uint8 HdrDestMask[];
383
384 [Description (
385 "HdrProtocolID is an 8-bit unsigned integer, representing an "
386 "IP protocol type. This value is compared to the Protocol "
387 "field in the IP header. \n"
388 "\n"
389 "If a value for this property is not provided, then the "
390 "filter does not consider HdrProtocolID in selecting "
391 "matching packets, i.e., HdrProtocolID matches for all "
392 "values.")]
393 uint8 HdrProtocolID;
394
395 [Description (
396 "HdrSrcPortStart represents the lower end of a range of UDP "
397 "or TCP source ports. The upper end of the range is "
398 "represented by the HdrSrcPortEnd property. The value of "
399 "HdrSrcPortStart MUST be no greater than the value of "
400 a.dunfey 1.1 "HdrSrcPortEnd. \n"
401 "\n"
402 "A source port filter is evaluated by testing whether the "
403 "source port identified in the IP header falls within the "
404 "range of values between HdrSrcPortStart and HdrSrcPortEnd, "
405 "INCLUDING these two end points. \n"
406 "\n"
407 "If a value for this property is not provided, then the "
408 "filter does not consider HdrSrcPortStart in selecting "
409 "matching packets, i.e., there is no lower bound in matching "
410 "source port values.")]
411 uint16 HdrSrcPortStart;
412
413 [Description (
414 "HdrSrcPortEnd represents the upper end of a range of UDP or "
415 "TCP source ports. The lower end of the range is represented "
416 "by the HdrSrcPortStart property. The value of HdrSrcPortEnd "
417 "MUST be no less than the value of HdrSrcPortStart. A single "
418 "port is indicated by equal values for HdrSrcPortStart and "
419 "HdrSrcPortEnd. \n"
420 "\n"
421 a.dunfey 1.1 "A source port filter is evaluated by testing whether the "
422 "source port identified in the IP header falls within the "
423 "range of values between HdrSrcPortStart and HdrSrcPortEnd, "
424 "INCLUDING these two end points. \n"
425 "\n"
426 "If a value for this property is not provided, then the "
427 "filter does not consider HdrSrcPortEnd in selecting "
428 "matching packets, i.e., there is no upper bound in matching "
429 "source port values.")]
430 uint16 HdrSrcPortEnd;
431
432 [Description (
433 "HdrDestPortStart represents the lower end of a range of UDP "
434 "or TCP destination ports. The upper end of the range is "
435 "represented by the HdrDestPortEnd property. The value of "
436 "HdrDestPortStart MUST be no greater than the value of "
437 "HdrDestPortEnd. A single port is indicated by equal values "
438 "for HdrDestPortStart and HdrDestPortEnd. \n"
439 "\n"
440 "A destination port filter is evaluated by testing whether "
441 "the destination port identified in the IP header falls "
442 a.dunfey 1.1 "within the range of values between HdrDestPortStart and "
443 "HdrDestPortEnd, INCLUDING these two end points. \n"
444 "\n"
445 "If a value for this property is not provided, then the "
446 "filter does not consider HdrDestPortStart in selecting "
447 "matching packets, i.e., there is no lower bound in matching "
448 "destination port values.")]
449 uint16 HdrDestPortStart;
450
451 [Description (
452 "HdrDestPortEnd represents the upper end of a range of UDP "
453 "or TCP destination ports. The lower end of the range is "
454 "represented by the HdrDestPortStart property. The value of "
455 "HdrDestPortEnd MUST be no less than the value of "
456 "HdrDestPortStart. A single port is indicated by equal "
457 "values for HdrDestPortStart and HdrDestPortEnd. \n"
458 "\n"
459 "A destination port filter is evaluated by testing whether "
460 "the destination port identified in the IP header falls "
461 "within the range of values between HdrDestPortStart and "
462 "HdrDestPortEnd, INCLUDING these two end points. \n"
463 a.dunfey 1.1 "\n"
464 "If a value for this property is not provided, then the "
465 "filter does not consider HdrDestPortEnd in selecting "
466 "matching packets, i.e., there is no upper bound in matching "
467 "destination port values.")]
468 uint16 HdrDestPortEnd;
469
470 [Description (
471 "HdrDSCP is defined as a set of discrete DiffServ code "
472 "points, with no inherent structure. There is no "
473 "semantically significant relationship between different "
474 "HdrDSCPs. Consequently, there is no provision for "
475 "specifying a range of HdrDSCPs. \n"
476 "\n"
477 "Since, in IPv4, the HdrDSCP field may contain bits to be "
478 "interpreted as the TOS IP Precedence, this property is also "
479 "used to filter on IP Precedence. Similarly, the IPv6 "
480 "Traffic Class field is also filtered using the value(s) in "
481 "this property. \n"
482 "\n"
483 "HdrDSCP is defined as an array, to provide the ability to "
484 a.dunfey 1.1 "specify several discrete DSCPs in a single instance of "
485 "IPHeadersFilter, that would be OR'ed together to define the "
486 "filter criteria. \n"
487 "\n"
488 "If a value for this property is not provided, then the "
489 "filter does not consider HdrDSCP in selecting matching "
490 "packets, i.e., HdrDSCP matches for all values."),
491 MaxValue ( 63 )]
492 uint8 HdrDSCP[];
493
494 [Description (
495 "The 20-bit Flow Label field in the IPv6 header may be used "
496 "by a source to label sequences of packets for which it "
497 "requests special handling by the IPv6 devices, such as "
498 "non-default quality of service or 'real-time' service. In "
499 "the filter, this 20-bit string is encoded in a 24-bit "
500 "octetstring by right-adjusting the value and padding on the "
501 "left with b'0000'. \n"
502 "\n"
503 "If a value for this property is not provided, then the "
504 "filter does not consider HdrFlowLabel in selecting matching "
505 a.dunfey 1.1 "packets, i.e., HdrFlowLabel matches for all values."),
506 OctetString]
507 uint8 HdrFlowLabel[];
508 };
509
510
511 // ==================================================================
512 // Hdr8021Filter
513 // ==================================================================
514 [Version ( "2.7.0" ), Description (
515 "8021Filter allows 802.1.source and destination MAC addresses, "
516 "as well as the 802.1 protocol ID, priority, and VLAN "
517 "identifier fields, to be expressed in a single object to "
518 "classify and identify traffic.")]
519 class CIM_Hdr8021Filter : CIM_FilterEntryBase {
520
521 [Description (
522 "This property is an OctetString of size 6, representing a "
523 "48-bit source MAC address in canonical format. This value "
524 "is compared to the SourceAddress field in the MAC header, "
525 "subject to the mask represented in the 8021HdrSrcMACMask "
526 a.dunfey 1.1 "property. If a value for this property is not provided, "
527 "then the filter does not consider 8021HdrSrcMACAddr in "
528 "selecting matching packets, i.e., 8021HdrSrcMACAddr matches "
529 "for all values."),
530 OctetString]
531 uint8 HdrSrcMACAddr8021[6];
532
533 [Description (
534 "This property is an OctetString of size 6, representing a "
535 "48-bit mask to be used in comparing the SourceAddress field "
536 "in the MAC header with the value represented in the "
537 "8021HdrSrcMACAddr property. If a value for this property is "
538 "not provided, then the filter does not consider "
539 "8021HdrSrcMACMask in selecting matching packets, i.e., the "
540 "value of 8021HdrSrcMACAddr must match the source MAC "
541 "address in the packet exactly."),
542 OctetString]
543 uint8 HdrSrcMACMask8021[6];
544
545 [Description (
546 "This property is an OctetString of size 6, representing a "
547 a.dunfey 1.1 "48-bit destination MAC address in canonical format. This "
548 "value is compared to the DestinationAddress field in the "
549 "MAC header, subject to the mask represented in the "
550 "8021HdrDestMACMask property. If a value for this property "
551 "is not provided, then the filter does not consider "
552 "8021HdrDestMACAddr in selecting matching packets, i.e., "
553 "8021HdrDestMACAddr matches for all values."),
554 OctetString]
555 uint8 HdrDestMACAddr8021[6];
556
557 [Description (
558 "This property is an OctetString of size 6, representing a "
559 "48-bit mask to be used in comparing the DestinationAddress "
560 "field in the MAC header with the value represented in the "
561 "8021HdrDestMACAddr property. If a value for this property "
562 "is not provided, then the filter does not consider "
563 "8021HdrDestMACMask in selecting matching packets, i.e., the "
564 "value of 8021HdrDestMACAddr must match the destination MAC "
565 "address in the packet exactly."),
566 OctetString]
567 uint8 HdrDestMACMask8021[6];
568 a.dunfey 1.1
569 [Description (
570 "This property is a 16-bit unsigned integer, representing an "
571 "Ethernet protocol type. This value is compared to the "
572 "Ethernet Type field in the 802.3 MAC header. If a value for "
573 "this property is not provided, then the filter does not "
574 "consider 8021HdrProtocolID in selecting matching packets, "
575 "i.e., 8021HdrProtocolID matches for all values.")]
576 uint16 HdrProtocolID8021;
577
578 [Description (
579 "This property is an 8-bit unsigned integer, representing an "
580 "802.1Q priority. This value is compared to the Priority "
581 "field in the 802.1Q header. Since the 802.1Q Priority field "
582 "consists of 3 bits, the values for this property are "
583 "limited to the range 0..7. If a value for this property is "
584 "not provided, then the filter does not consider "
585 "8021HdrPriorityValue in selecting matching packets, i.e., "
586 "8021HdrPriorityValue matches for all values."),
587 MinValue ( 0 ), MaxValue ( 7 )]
588 uint8 HdrPriorityValue8021;
589 a.dunfey 1.1
590 [Description (
591 "This property is an 32-bit unsigned integer, representing "
592 "an 802.1Q VLAN Identifier. This value is compared to the "
593 "VLAN ID field in the 802.1Q header. Since the 802.1Q VLAN "
594 "ID field consists of 12 bits, the values for this property "
595 "are limited to the range 0..4095. If a value for this "
596 "property is not provided, then the filter does not consider "
597 "8021HdrVLANID in selecting matching packets, i.e., "
598 "8021HdrVLANID matches for all values."),
599 MinValue ( 0 ), MaxValue ( 4095 )]
600 uint32 HdrVLANID8021;
601 };
602
603
604 // ==================================================================
605 // PreambleFilter
606 // ==================================================================
607 [Version ( "2.7.0" ), Description (
608 "PreambleFilter allows the classification of packets using "
609 "traffic-conditioning results (where the results are determined "
610 a.dunfey 1.1 "by a PreambleMarkerService and stored in a 'packet preamble'). "
611 "This permits information about the treatment that a packet "
612 "receives on an ingress interface to be communicated along with "
613 "the packet to the egress interface. An instance of "
614 "PreambleFilter selects packets based on a two-part string "
615 "(type and value pair) identifying a specific entry in the "
616 "preamble. The logic for this match is 'at least one.' That is, "
617 "a packet with multiple entries/results in its preamble matches "
618 "a filter if at least one of these matches the filter.")]
619 class CIM_PreambleFilter : CIM_FilterEntryBase {
620
621 [Description (
622 "To foster interoperability, the basic format of the "
623 "information captured by a PreambleMarker is specified. That "
624 "information is contained in the FilterItemList property (an "
625 "ordered, string array). Each entry in the array takes the "
626 "form 'type,value'. When entries are added, they are "
627 "appended to the end of the list. \n"
628 "\n"
629 "A limited set of standardized 'type's exist. They are: \n"
630 "- ConformingFromMeter, NonConformingFromMeter and "
631 a.dunfey 1.1 "PartConformingFromMeter to convey metering results (where "
632 "the 'value' is the name of the meter) \n"
633 "- VlanId to describe the traffic's VLAN information (where "
634 "the 'value' is the VLAN ID). \n"
635 "An implementation is free to define and use other preamble "
636 "'types'. \n"
637 "\n"
638 "Note that a wildcard value of \"any\" is allowed to "
639 "indicate that the preamble entry matches for any 'value' of "
640 "the specified 'type'. For example, using the wildcard, an "
641 "administrator can define a filter to select all packets "
642 "that were found to be conforming ('type' = "
643 "\"ConformingFromMeter\") without having to name each meter "
644 "individually."),
645 ArrayType ( "Ordered" )]
646 string FilterItemList[];
647 };
648
649
650 // ==================================================================
651 // FilterList
652 a.dunfey 1.1 // ==================================================================
653 [Version ( "2.7.0" ), Description (
654 "A FilterList is used by network devices to identify routes by "
655 "aggregating a set of FilterEntries into a unit, called a "
656 "FilterList. FilterLists can also be used to accept or deny "
657 "routing updates. \n"
658 "\n"
659 "A FilterList is weak to the network device (i.e., the "
660 "ComputerSystem) that contains it. Hence, the ComputerSystem "
661 "keys are propagated to this class.")]
662 class CIM_FilterList : CIM_LogicalElement {
663
664 [Key, Propagated ( "CIM_ComputerSystem.CreationClassName" ),
665 Description (
666 "The scoping ComputerSystem's CreationClassName."),
667 MaxLen ( 256 )]
668 string SystemCreationClassName;
669
670 [Key, Propagated ( "CIM_ComputerSystem.Name" ), Description (
671 "The scoping ComputerSystem's Name."),
672 MaxLen ( 256 )]
673 a.dunfey 1.1 string SystemName;
674
675 [Key, Description (
676 "The type of class that this instance is.")]
677 string CreationClassName;
678
679 [Key, Override ( "Name" ), Description (
680 "This is the name of the FilterList."),
681 MaxLen ( 256 )]
682 string Name;
683
684 [Description (
685 "This defines whether the FilterList is used for input, "
686 "output, or both input and output filtering. All values are "
687 "used with respect to the interface for which the FilterList "
688 "applies. \n"
689 "\n"
690 "\"Not Applicable\" (0) is used when there is no direction "
691 "applicable to the FilterList. \"Input\" (1) is used when "
692 "the FilterList applies to packets that are inbound on the "
693 "related interface. \"Output\" (2) is used when the "
694 a.dunfey 1.1 "FilterList applies to packets that are outbound on the "
695 "related interface. \"Both\" (3) is used to indicate that "
696 "the direction is immaterial, e.g., to filter on a source "
697 "subnet regardless of whether the flow is inbound or "
698 "outbound. \"Mirrored\" (4) is also applicable to both "
699 "inbound and outbound flow processing, but indicates that "
700 "the filter criteria are applied asymmetrically to traffic "
701 "in both directions and, thus, specifies the reversal of "
702 "source and destination criteria (as opposed to the equality "
703 "of these criteria as indicated by \"Both\"). The match "
704 "conditions in the aggregated FilterEntryBase subclass "
705 "instances are defined from the perspective of outbound "
706 "flows and applied to inbound flows as well by reversing the "
707 "source and destination criteria. So, for example, consider "
708 "a FilterList with 3 FilterEntries indicating destination "
709 "port = 80, and source and destination addresses of a and b, "
710 "respectively. Then, for the outbound direction, the filter "
711 "entries match as specified and the 'mirror' (for the "
712 "inbound direction) matches on source port = 80 and source "
713 "and destination addresses of b and a, respectively."),
714 ValueMap { "0", "1", "2", "3", "4" },
715 a.dunfey 1.1 Values { "Not Applicable", "Input", "Output", "Both",
716 "Mirrored" }]
717 uint16 Direction;
718 };
719
720
721 // ==================================================================
722 // FilterEntryInSystem
723 // ==================================================================
724 [Association, Deprecated { "CIM_HostedFilterEntryBase" },
725 Aggregation, Version ( "2.7.0" ), Description (
726 "All filter entries (FilterEntryBase and its subclasses) are "
727 "defined in the context of a ComputerSystem/network device, "
728 "where they are used to identify and act on network traffic. "
729 "Note that this class is deprecated since its subclassing is "
730 "not correct. It subclasses from System Component, but a "
731 "FilterEntryBase is NOT a Component of a System. Instead, it is "
732 "hosted/scoped by the System. In versions up to CIM 2.6, "
733 "FilterEntryInSystem was a mandatory, Weak relationship. This "
734 "is no longer true, beginning with CIM V2.7.")]
735 class CIM_FilterEntryInSystem : CIM_SystemComponent {
736 a.dunfey 1.1
737 [Deprecated { "CIM_HostedFilterEntryBase.Antecedent" }, Aggregate,
738 Override ( "GroupComponent" ), Max ( 1 ), Description (
739 "The ComputerSystem/network device that scopes the "
740 "FilterEntryBase.")]
741 CIM_ComputerSystem REF GroupComponent;
742
743 [Deprecated { "CIM_HostedFilterEntryBase.Dependent" },
744 Override ( "PartComponent" ), Description (
745 "The FilterEntryBase on the System.")]
746 CIM_FilterEntryBase REF PartComponent;
747 };
748
749
750 // ==================================================================
751 // FilterListInSystem
752 // ==================================================================
753 [Association, Deprecated { "CIM_HostedFilterList" }, Aggregation,
754 Version ( "2.7.0" ), Description (
755 "FilterLists are defined in the context of a ComputerSystem "
756 "(e.g., a router, firewall or host). Note that this class is "
757 a.dunfey 1.1 "deprecated since its subclassing is not correct. It subclasses "
758 "from SystemComponent, but a FilterList is NOT a Component of a "
759 "System. Instead, it is hosted/scoped by the System. In "
760 "versions up to CIM 2.6, FilterListInSystem was a mandatory, "
761 "Weak relationship. This is no longer true, beginning with CIM "
762 "V2.7.")]
763 class CIM_FilterListInSystem : CIM_SystemComponent {
764
765 [Deprecated { "CIM_HostedFilterList.Antecedent" }, Aggregate,
766 Override ( "GroupComponent" ), Max ( 1 ), Description (
767 "The ComputerSystem/network device that scopes the "
768 "FilterList and administers it.")]
769 CIM_ComputerSystem REF GroupComponent;
770
771 [Deprecated { "CIM_HostedFilterList.Dependent" },
772 Override ( "PartComponent" ), Description (
773 "The FilterList on the System.")]
774 CIM_FilterList REF PartComponent;
775 };
776
777
778 a.dunfey 1.1 // ==================================================================
779 // HostedFilterEntryBase
780 // ==================================================================
781 [Association, Version ( "2.7.0" ), Description (
782 "All filter entries (FilterEntryBase and its subclasses) are "
783 "defined in the context of a ComputerSystem/network device, "
784 "where the filter entries are used and administered.")]
785 class CIM_HostedFilterEntryBase : CIM_HostedDependency {
786
787 [Override ( "Antecedent" ), Min ( 1 ), Max ( 1 ), Description (
788 "The ComputerSystem/network device that scopes the "
789 "FilterEntryBase.")]
790 CIM_ComputerSystem REF Antecedent;
791
792 [Override ( "Dependent" ), Weak, Description (
793 "The FilterEntryBase on the System.")]
794 CIM_FilterEntryBase REF Dependent;
795 };
796
797
798 // ==================================================================
799 a.dunfey 1.1 // HostedFilterList
800 // ==================================================================
801 [Association, Version ( "2.7.0" ), Description (
802 "FilterLists are defined in the context of a ComputerSystem/ "
803 "network device, where the list is used and administered.")]
804 class CIM_HostedFilterList : CIM_HostedDependency {
805
806 [Override ( "Antecedent" ), Min ( 1 ), Max ( 1 ), Description (
807 "The ComputerSystem/network device that scopes the "
808 "FilterList.")]
809 CIM_ComputerSystem REF Antecedent;
810
811 [Override ( "Dependent" ), Weak, Description (
812 "The FilterList on the System.")]
813 CIM_FilterList REF Dependent;
814 };
815
816
817 // ==================================================================
818 // EntriesInFilterList
819 // ==================================================================
820 a.dunfey 1.1 [Association, Aggregation, Version ( "2.7.0" ), Description (
821 "This is a specialization of the CIM_Component aggregation "
822 "which is used to define a set of filter entries (subclasses of "
823 "FilterEntryBase) that are aggregated by a particular "
824 "FilterList.")]
825 class CIM_EntriesInFilterList : CIM_Component {
826
827 [Aggregate, Override ( "GroupComponent" ), Max ( 1 ),
828 Description (
829 "The FilterList, which aggregates the set of FilterEntries.")]
830 CIM_FilterList REF GroupComponent;
831
832 [Override ( "PartComponent" ), Description (
833 "Any subclass of FilterEntryBase which is a part of the "
834 "FilterList.")]
835 CIM_FilterEntryBase REF PartComponent;
836
837 [Description (
838 "The order of the Entry relative to all others in the "
839 "FilterList. The only permissible value is zero - indicating "
840 "that all the Entries are ANDed together."),
841 a.dunfey 1.1 ValueMap { "0" }]
842 uint16 EntrySequence = 0;
843 };
844
845 // ==================================================================
846 // X509CredentialFilterEntry
847 // ==================================================================
848 [Version ( "2.8.0" ), Description (
849 "An X509CredentialFilterEntry allows filtering on the "
850 "attributes of an X.509 certificate. Each instance includes a "
851 "value for MatchFieldName that specifies the particular X.509 "
852 "attribute that is being matched."),
853 MappingStrings { "IPSP Policy Model.IETF|CredentialFilterEntry" }]
854 class CIM_X509CredentialFilterEntry : CIM_FilterEntryBase {
855
856 [Required, Description (
857 "MatchFieldName specifies the X.509 attribute to match "
858 "against MatchFieldValue. Note that this enumeration is "
859 "modified from the IETF's IPSP Policy Model to explicitly "
860 "list the 'standard' X.509 attributes."),
861 ValueMap { "1", "2", "3", "4", "5", "6", "7", "8", "9", "10",
862 a.dunfey 1.1 "..", "x8000.." },
863 Values { "Other", "Version", "Serial Number",
864 "Signature Algorithm Identifier", "Issuer Name",
865 "Validity Period", "Subject Name", "Subject Public Key Info",
866 "Key Usage", "Alternate Name", "DMTF Reserved",
867 "Vendor Reserved" },
868 MappingStrings { "IPSP Policy Model.IETF|"
869 "CredentialFilterEntry.MatchFieldName" },
870 ModelCorrespondence {
871 "CIM_X509CredentialFilterEntry.MatchFieldValue" }]
872 string MatchFieldName;
873
874 [Required, Description (
875 "MatchFieldValue specifies the value to compare with the "
876 "credential attribute (defined in MatchFieldName), to "
877 "determine if the credential matches this filter entry. An "
878 "implementation must convert this string to a DER- encoded "
879 "string before matching against the values extracted from "
880 "credentials at runtime. \n"
881 "\n"
882 "Note that a wildcard mechanism may be used when "
883 a.dunfey 1.1 "MatchFieldName specifies a general character string (for "
884 "example, if MatchFieldName=7, 'Subject Name'). "
885 "MatchFieldValue may contain a wildcard character, '*', in "
886 "the pattern match specification. For example, for 'Subject "
887 "Name', a MatchFieldValue of "
888 "'cn=*,ou=engineering,o=foo,c=be' will successfully match a "
889 "certificate whose subject attribute is "
890 "'cn=JaneDoe,ou=engineering,o=foo,c=be'. A wildcard can be "
891 "used to represent 0 or more characters as would be "
892 "displayed to the user (i.e., a wildcard pattern match "
893 "operates on displayable character boundaries)."),
894 MappingStrings { "IPSP Policy Model.IETF|"
895 "CredentialFilterEntry.MatchFieldName" },
896 ModelCorrespondence {
897 "CIM_X509CredentialFilterEntry.MatchFieldName" }]
898 string MatchFieldValue;
899 };
900
901 // (Note that the IPSOFilterEntry is changed from the IPSP Model
902 // definition -
903 // since the IPSP class allows matching on either classification level
904 a.dunfey 1.1 // or
905 // protection authority, but not both - and is confusing wrt the
906 // enumerated
907 // "values" (combining both classification level and protection
908 // authority into
909 // a single enum). Also, the enumerations start at 1 which is reserved
910 // for 'Other',
911 // and should be an array for ProtectionAuthority. These problems are
912 // corrected
913 // in the class below
914
915 // ==================================================================
916 // IPSOFilterEntry
917 // ==================================================================
918 [Version ( "2.8.0" ), Description (
919 "An IPSOFilterEntry is used to match traffic based on the IP "
920 "Security Options header values (ClassificationLevel and "
921 "ProtectionAuthority) as defined in RFC1108. This type of "
922 "FilterEntry is used to adjust the IPsec encryption level "
923 "according to the IPSO classification of the traffic (e.g., "
924 "secret, confidential, restricted, etc.)."),
925 a.dunfey 1.1 MappingStrings { "IPSP Policy Model.IETF|IPSOFilterEntry" }]
926 class CIM_IPSOFilterEntry : CIM_FilterEntryBase {
927
928 [Required, Description (
929 "MatchConditionType specifies whether to match based on "
930 "traffic classification level, protection authority or both. "
931 "Note that this enumeration is modified from its definition "
932 "in the IETF's IPSP Policy Model to allow for both "
933 "classification level and protection authority checking, and "
934 "to allow the enumerated value, \"Other\", to be added in "
935 "the future."),
936 ValueMap { "2", "3", "4" },
937 Values { "Classification Level", "Protection Authority",
938 "Both Classification Level and Protection Authority" },
939 MappingStrings { "IPSP Policy Model.IETF|"
940 "IPSOFilterEntry.MatchConditionType" },
941 ModelCorrespondence { "CIM_IPSOFilterEntry.ClassificationLevel",
942 "CIM_IPSOFilterEntry.ProtectionAuthorities" }]
943 uint16 MatchConditionType;
944
945 [Required, Description (
946 a.dunfey 1.1 "This is the value to be matched when MatchConditionType is "
947 "1 or 3 - meaning that \"Classification Level\" should be "
948 "filtered. In RFC1108, the following semantics are "
949 "specified: TopSecret, Secret, Confidential, and "
950 "Unclassified. Note that this enumeration's values are "
951 "different than the RFC list and the IETF's IPSP Policy "
952 "Model since those lists are simply bit maps, and do not "
953 "include specific values for \"Other\" or \"No Filtering\"."),
954 ValueMap { "1", "2", "3", "4", "5", "6", "..", "0x8000.." },
955 Values { "Other", "No Filtering on Classification Level",
956 "Top Secret", "Secret", "Confidential", "Unclassified",
957 "DMTF Reserved", "Vendor Reserved" },
958 MappingStrings { "IPSP Policy Model.IETF|"
959 "IPSOFilterEntry.MatchConditionValue",
960 "RFC1108.IETF|Section 2.3" },
961 ModelCorrespondence { "CIM_IPSOFilterEntry.MatchConditionType",
962 "CIM_IPSOFilterEntry.OtherClassificationLevel" }]
963 uint16 ClassificationLevel;
964
965 [Description (
966 "Description of the level when the value 1 (\"Other\") is "
967 a.dunfey 1.1 "specified for the property, ClassificationLevel."),
968 ModelCorrespondence { "CIM_IPSOFilterEntry.ClassificationLevel"
969 }]
970 string OtherClassificationLevel;
971
972 [Required, Description (
973 "These are the values to be matched when MatchConditionType "
974 "is 2 or 3 - meaning that \"Protection Authority\" should be "
975 "filtered. In RFC1108, the following authorities are "
976 "specified: GENSER, SIOP-ESI, SCI, NSA and DOE. Note that "
977 "multiple authorities may be specified. \n"
978 "\n"
979 "This enumeration is modified from its definition in the RFC "
980 "and IETF's IPSP Policy Model. Those lists are simply bit "
981 "maps, and do not include specific values for \"Other\" or "
982 "\"No Filtering\"."),
983 ValueMap { "1", "2", "3", "4", "5", "6", "7", "..", "0x8000.." },
984 Values { "Other", "No Filtering on Protection Authority",
985 "GENSER", "SIOP-ESI", "SCI", "NSA", "DOE", "DMTF Reserved",
986 "Vendor Reserved" },
987 MappingStrings { "IPSP Policy Model.IETF|"
988 a.dunfey 1.1 "IPSOFilterEntry.MatchConditionValue",
989 "RFC1108.IETF|Section 2.4" },
990 ModelCorrespondence { "CIM_IPSOFilterEntry.MatchConditionType",
991 "CIM_IPSOFilterEntry.OtherProtectionAuthorities" }]
992 uint16 ProtectionAuthorities[];
993
994 [Description (
995 "Description of the authority when the value 1 (\"Other\") "
996 "is specified for the property, ProtectionAuthorities."),
997 ModelCorrespondence {
998 "CIM_IPSOFilterEntry.ProtectionAuthorities" }]
999 string OtherProtectionAuthorities[];
1000 };
1001
1002
1003 // Note that the PeerIDPayloadFilterEntry is changed from the IPSP Model
1004 // definition - since the 'Type' enumeration starts at 1 in the IPSP
1005 // draft,
1006 // which is reserved for 'Other'
1007
1008
1009 a.dunfey 1.1 // ==================================================================
1010 // PeerIDPayloadFilterEntry
1011 // ==================================================================
1012 [Version ( "2.8.0" ), Description (
1013 "PeerIDPayloadFilterEntry defines filters used to match the "
1014 "Identification Type field in the ID Payload of the IKE "
1015 "protocol exchange. It permits the specification of ID values "
1016 "such as \"*@example.com\" or \"192.0.2.0/24\"."),
1017 MappingStrings { "IPSP Policy Model.IETF|PeerIDPayloadFilterEntry"
1018 }]
1019 class CIM_PeerIDPayloadFilterEntry : CIM_FilterEntryBase {
1020
1021 [Required, Description (
1022 "MatchIdentityType specifies the Identification Type "
1023 "provided by the peer in the payload. The list of identities "
1024 "was generated from Section 4.6.2.1 of RFC2407. Note that "
1025 "the enumeration is different than the RFC list, since the "
1026 "value 'Other' is taken into account."),
1027 ValueMap { "1", "2", "3", "4", "5", "6", "7", "8", "9", "10",
1028 "11", "12", "..", "0x8000.." },
1029 Values { "Other", "IPV4 Address", "FQDN", "User FQDN",
1030 a.dunfey 1.1 "IPV4 Subnet Address", "IPV6 Address", "IPV6 Subnet Address",
1031 "IPV4 Address Range", "IPV6 Address Range", "DER ASN1 DN",
1032 "DER ASN1 GN", "KEY ID", "DMTF Reserved", "Vendor Reserved" },
1033 MappingStrings { "IPSP Policy Model.IETF|"
1034 "PeerIDPayloadFilterEntry.MatchIdentityType",
1035 "RFC2407.IETF|Section 4.6.2.1" },
1036 ModelCorrespondence {
1037 "CIM_PeerIDPayloadFilterEntry.MatchIdentityValue" }]
1038 uint16 MatchIdentityType;
1039
1040 [Required, Description (
1041 "MatchIdentityValue is the filter value for comparison with "
1042 "the ID payload, e,g, \"*@company.com\". The syntax may need "
1043 "to be converted for comparison. For example, if the type of "
1044 "identity is a DER-encoded distinguished name, (for example, "
1045 "MatchIdentityType = 10, \"DER_ASN1_DN\"), the "
1046 "MatchIdentityValue MUST be converted into a DER-encoded "
1047 "string. This allows it to be matched against the values "
1048 "extracted from the ID payload at runtime. \n"
1049 "\n"
1050 "Note that a wildcard mechanism may be used when "
1051 a.dunfey 1.1 "MatchIdentityType specifies a general character string (for "
1052 "example, if MatchIdentityType=3, 'FQDN'). MatchFieldValue "
1053 "may contain a wildcard character, '*', in the pattern match "
1054 "specification. For example, for 'FQDN', a MatchFieldValue "
1055 "of '*@example.com' will successfully match an ID payload of "
1056 "'janedoe@example.com'. A wildcard can be used to represent "
1057 "0 or more characters as is appropriate for the type "
1058 "specified in MatchIdentityType."),
1059 MappingStrings { "IPSP Policy Model.IETF|"
1060 "PeerIDPayloadFilterEntry.MatchIdentityValue" },
1061 ModelCorrespondence {
1062 "CIM_PeerIDPayloadFilterEntry.MatchIdentityType" }]
1063 string MatchIdentityValue;
1064 };
1065
1066 // ===================================================================
1067 // end of file
1068 // ===================================================================
|
Return to
Network_Filtering.mof
CVS log
Up to [Pegasus] / pegasus / Schemas / CIM29