value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.12
NAME ’pcelsValueDN’
DESC ’DN of a pcelsValueAuxClass entry’
EQUALITY distinguishedNameMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
SINGLE-VALUE
)
Note: An instance of pcelsSimpleActionAuxClass and an instance of
pcelsSimpleConditionAuxClass MUST NOT be attached to the same entry.
Because the two classes use the same mechanisms to associate
Variables and Values, this restriction is necessary in order to avoid
ambiguities.
5.8. The Auxiliary Class pcelsCompoundConditionAuxClass
The pcelsCompoundConditionAuxClass class represents a compound policy
condition formed by the aggregation of other policy conditions. It
is mapped from the CompoundPolicyCondition class [PCIM_EXT]. The
pcelsCompoundConditionAuxClass class is an auxiliary object class and
it is derived from the pcimConditionAuxClass class [PCLS].
The pcelsCompoundConditionAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.12
NAME ’pcelsCompoundConditionAuxClass’
DESC ’Boolean combination of simpler conditions’
SUP pcimConditionAuxClass
AUXILIARY
MAY ( pcelsConditionListType
$ pcelsConditionList )
)
If the pcelsConditionListType attribute is missing from a
pcelsCompoundConditionAuxClass instance, applications MUST assume
that the set of aggregated conditions is in disjunctive normal form.
In a pcelsCompoundConditionAuxClass instance, the pcelsConditionList
attribute represents the associations between this compound policy
condition and the compounded conditions.
These attribute types are defined in section 5.4.
Like pcelsRule, instances of pcelsCompoundConditionAuxClass use
pcelsConditionList values and subordinated pcelsConditionAssociation
entries to aggregate policy conditions.
5.9. The Auxiliary Class pcelsCompoundFilterConditionAuxClass
The pcelsCompoundFilterConditionAuxClass class represents a domain-
level filter. It is mapped from the CompoundFilterCondition class
[PCIM_EXT]. The pcelsCompoundFilterConditionAuxClass class is an
auxiliary object class and it is derived from the
pcelsCompoundConditionAuxClass class.
The pcelsCompoundFilterConditionAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.13
NAME ’pcelsCompoundFilterConditionAuxClass’
DESC ’A compound condition with mirroring capabilities’
SUP pcelsCompoundConditionAuxClass
AUXILIARY
MAY ( pcelsIsMirrored )
)
The pcelsIsMirrored attribute type indicates whether the traffic that
mirrors the specified filter is to be treated as matching the filter.
It is mapped from the CompoundFilterCondition.IsMirrored property
[PCIM_EXT]. This attribute type is of syntax Boolean [LDAP_SYNTAX].
It has an equality matching rule of booleanMatch [LDAP_MATCH].
Attributes of this type can only have a single value. If this
attribute is missing from a pcelsCompoundFilterConditionAuxClass
instance, applications MUST assume that the filter is not mirrored.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.13
NAME ’pcelsIsMirrored’
DESC ’Indicates whether the mirrored traffic matches’
EQUALITY booleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE
)
5.10. The Auxiliary Class pcelsSimpleActionAuxClass
The pcelsSimpleActionAuxClass class implements the action of
assigning a Value to a Variable. It is mapped from the
SimplePolicyAction class [PCIM_EXT]. The pcelsSimpleActionAuxClass
class is an auxiliary object class and it is derived from the
pcimActionAuxClass class [PCLS].
A reusable variable/value is associated to a
pcelsSimpleActionAuxClass via the pcelsVariableDN/pcelsValueDN
reference from the simple action instance. A non-reusable
variable/value is associated directly as auxiliary object class to
the same entry as the pcelsSimpleActionAuxClass instance.
When reading a pcelsSimpleActionAuxClass instance that has an
instance of pcelsVariable attached, the attribute pcelsVariableDN
MUST be ignored. Applications SHOULD remove the pcelsVariableDN
value from a pcelsSimpleActionAuxClass instance upon attachment of a
pcelsVariable instance to the same entry.
When reading a pcelsSimpleActionAuxClass instance that has an
instance of pcelsValue attached, the attribute pcelsValueDN MUST be
ignored. Applications SHOULD remove the pcelsValueDN value from a
pcelsSimpleActionAuxClass instance upon attachment of a pcelsValue
instance to the same entry.
The pcelsSimpleActionAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.14
NAME ’pcelsSimpleActionAuxClass’
DESC ’Value assignment action for a policy variable’
SUP pcimActionAuxClass
AUXILIARY
MAY ( pcelsVariableDN
$ pcelsValueDN )
)
In a pcelsSimpleActionAuxClass, the pcelsVariableDN attribute
represents the association between this simple policy action and its
policy variable. It realizes the PolicyVariableInSimplePolicyAction
association [PCIM_EXT].
In a pcelsSimpleActionAuxClass, the pcelsValueDN attribute represents
the association between this simple policy action and its policy
value. It realizes the PolicyValueInSimplePolicyAction association
[PCIM_EXT].
These attributes are defined in section 5.7.
Note: An instance of pcelsSimpleActionAuxClass and an instance of
pcelsSimpleConditionAuxClass MUST NOT be attached to the same entry.
Because the two classes use the same mechanisms to associate
Variables and Values, this restriction is necessary in order to avoid
ambiguities.
5.11. The Auxiliary Class pcelsCompoundActionAuxClass
The pcelsCompoundActionAuxClass class represents a compound policy
action formed by the aggregation of other policy actions. It is
mapped from the CompoundPolicyCondition class [PCIM_EXT]. The
pcelsCompoundActionAuxClass class is an auxiliary object class and it
is derived from the pcimActionAuxClass class [PCLS].
The pcelsCompoundActionAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.15
NAME ’pcelsCompoundActionAuxClass’
DESC ’Sequence of actions with specific execution strategy’
SUP pcimActionAuxClass
AUXILIARY
MAY ( pcelsActionList
$ pcelsSequencedActions
$ pcelsExecutionStrategy )
)
In a pcelsCompoundActionAuxClass instance, the pcelsActionList
attribute represents the associations between this policy rule and
its actions.
If the pcelsSequencedActions attribute is missing from a
pcelsCompoundActionAuxClass instance, applications MUST assume that
the ordered execution of actions in this compound policy action is
not important (DontCare).
If the pcelsExecutionStrategy attribute is missing from a
pcelsCompoundActionAuxClass instance, applications MUST assume that
all the actions are to be executed (Do all).
These attribute types are defined in section 5.4.
Like pcelsRule, instances of pcelsCompoundActionAuxClass use
pcelsActionList values and subordinated pcelsActionAssociation
entries to aggregate policy actions.
5.12. The Abstract Class pcelsVariable
The pcelsVariable class is mapped from the PolicyVariable class
[PCIM_EXT]. The pcelsVariable is an abstract object class and it is
derived directly from the ’top’ object class [LDAP_SCHEMA].
A pcelsVariable instance may be associated to a set of
pcelsValueAuxClass instances that represent its expected values. The
expected values for a variable may be indicated by:
(1) pcelsExpectedValueList references to reusable instances of
pcelsValueAuxClass, or
(2) pcelsExpectedValueList references to subordinated non-
reusable instances of pcelsValueAuxClass
The pcelsVariable class is defined as follows:
( 1.3.6.1.1.9.1.16
NAME ’pcelsVariable’
DESC ’Base class for representing a policy variable’
SUP top
ABSTRACT
MAY ( pcelsVariableName
$ pcelsExpectedValueList )
)
The pcelsVariableName attribute type may be used as naming attribute
for pcelsVariable entries. This attribute type is of syntax
Directory String [LDAP_SYNTAX]. It has an equality matching rule of
caseIgnoreMatch, an ordering matching rule of caseIgnoreOrderingMatch
and a substrings matching rule of caseIgnoreSubstringsMatch
[LDAP_SYNTAX]. Attributes of this type can only have a single value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.14
NAME ’pcelsVariableName’
DESC ’The user-friendly name of a variable.’
EQUALITY caseIgnoreMatch
ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
The pcelsExpectedValueList attribute type realizes the
ExpectedPolicyValuesForVariable association [PCIM_EXT]. This
attribute type is of syntax DN [LDAP_SYNTAX]. It has an equality
matching rule of distinguishedNameMatch [LDAP_SYNTAX]. Attributes of
this type can have multiple values. The only allowed values for
pcelsExpectedValueList attributes are DNs of pcelsValueAuxClass
entries. In a pcelsVariable, the pcelsExpectedValueList attribute
represents the associations between this policy variable and its
expected values.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.15
NAME ’pcelsExpectedValueList’
DESC ’Unordered set of DNs of pcelsValueAuxClass entries
representing expected values for a policy variable’
EQUALITY distinguishedNameMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
)
5.13. The Auxiliary Class pcelsExplicitVariableAuxClass
The pcelsExplicitVariableAuxClass class is mapped from the
PolicyExplicitVariable class [PCIM_EXT]. The
pcelsExplicitVariableAuxClass is an auxiliary object class and it is
derived from the pcelsVariable class.
The pcelsExplicitVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.17
NAME ’pcelsExplicitVariableAuxClass’
DESC ’Explicitly defined policy variable’
SUP pcelsVariable
AUXILIARY
MUST ( pcelsVariableModelClass
$ pcelsVariableModelProperty )
)
The pcelsVariableModelClass attribute type identifies a [CIM] class
whose property is evaluated or set as a variable. It is mapped from
the PolicyExplicitVariable.ModelClass property [PCIM_EXT]. This
attribute type is of syntax Directory String [LDAP_SYNTAX]. It has
an equality matching rule of caseIgnoreMatch [LDAP_SYNTAX].
Attributes of this type can only have a single value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.16
NAME ’pcelsVariableModelClass’
DESC ’Identifies a CIM class’
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
The pcelsVariableModelProperty attribute type identifies the
attribute of a [CIM] class, which is evaluated or set as a variable.
It is mapped from the PolicyExplicitVariable.ModelProperty property
[PCIM_EXT]. This attribute type is of syntax Directory String
[LDAP_SYNTAX]. It has an equality matching rule of caseIgnoreMatch
[LDAP_SYNTAX]. Attributes of this type can only have a single value.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.17
NAME ’pcelsVariableModelProperty’
DESC ’Identifies the property of a CIM class.’
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE
)
5.14. The Auxiliary Class pcelsImplicitVariableAuxClass
The pcelsImplicitVariableAuxClass class is mapped from the
PolicyImplicitVariable class [PCIM_EXT]. The
pcelsImplicitVariableAuxClass is an auxiliary object class and it is
derived from the pcelsVariable class.
The pcelsImplicitVariableAuxClass class does not represent actual
variables; these are introduced by its subclasses.
pcelsImplicitVariableAuxClass introduces the semantics of being an
implicitly defined policy variable and these semantics are inherited
by all its subclasses. These semantics include those inherited from
pcelsVariable that possibly represent either rule-specific or
reusable policy variables.
In order to preserve the ability to represent rule-specific or
reusable variables, all the subclasses of
pcelsImplicitVariableAuxClass MUST also be auxiliary classes.
The pcelsImplicitVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.18
NAME ’pcelsImplicitVariableAuxClass’
DESC ’Implicitly defined policy variable’
SUP pcelsVariable
AUXILIARY
MAY ( pcelsExpectedValueTypes )
)
The pcelsExpectedValueTypes attribute type represents the set of
policy value types that may be used with this policy variable. It is
mapped from the PolicyImplicitVariable.ValueTypes property
[PCIM_EXT]. This attribute type is of syntax Directory String
[LDAP_SYNTAX]. It has an equality matching rule of caseIgnoreMatch
[LDAP_SYNTAX]. Attributes of this type can have multiple values.
This attribute type is defined as follows:
( 1.3.6.1.1.9.2.18
NAME ’pcelsExpectedValueTypes’
DESC ’Identifies subclasses of pcelsValueAuxClass by name’
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
5.15. The Subclasses of pcelsImplicitVariableAuxClass
The following classes are derived from the
pcelsImplicitVariableAuxClass class. They are mapped from the
corresponding subclasses of the PolicyImplicitVariable class
[PCIM_EXT]. All the classes defined below are auxiliary object
classes.
Each one of the classes defined in this section introduces specific
restrictions for the values of the pcelsExpectedValueTypes attribute.
If this attribute is missing, applications MUST assume that all
allowed value types are expected for the policy variable.
Some of these classes have additional restrictions on the actual
values of the associated policy value instances (e.g., only integers
in the range 0..65535 must be used with a SourcePort variable). The
association between a pcelsImplicitVariableAuxClass instance and a
pcelsValueAuxClass instance that contains values outside the valid
range or set for that variable SHOULD be considered invalid. The
entry that realizes such association SHOULD be treated as invalid and
the policy rules or groups that refer to it SHOULD be treated as
being disabled, meaning that the execution of such policy rules or
groups SHOULD be stopped.
The pcelsSourceIPv4VariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.19
NAME ’pcelsSourceIPv4VariableAuxClass’
DESC ’Source IP v4 address’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsSourceIPv4VariableAuxClass instance, the only allowed value
for the pcelsExpectedValueTypes attribute is
’pcelsIPv4AddrValueAuxClass’.
The pcelsSourceIPv6VariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.20
NAME ’pcelsSourceIPv6VariableAuxClass’
DESC ’Source IP v6 address’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsSourceIPv6VariableAuxClass instance, the only allowed value
for the pcelsExpectedValueTypes attribute is
’pcelsIPv6AddrValueAuxClass’.
The pcelsDestinationIPv4VariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.21
NAME ’pcelsDestinationIPv4VariableAuxClass’
DESC ’Destination IP v4 address’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsDestinationIPv4VariableAuxClass instance, the only allowed
value for the pcelsExpectedValueTypes attribute is
’pcelsIPv4AddrValueAuxClass’.
The pcelsDestinationIPv6VariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.22
NAME ’pcelsDestinationIPv6VariableAuxClass’
DESC ’Destination IP v6 address’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsDestinationIPv6VariableAuxClass instance, the only allowed
value for the pcelsExpectedValueTypes attribute is
’pcelsIPv6AddrValueAuxClass’.
The pcelsSourcePortVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.23
NAME ’pcelsSourcePortVariableAuxClass’
DESC ’Source port’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsSourcePortVariableAuxClass instance, the only allowed value
for the pcelsExpectedValueTypes attribute is
’pcelsIntegerValueAuxClass’. Additionally, only policy values that
represent integers in the range 0..65535 (inclusive) SHOULD be used
with pcelsSourcePortVariableAuxClass instances.
The pcelsDestinationPortVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.24
NAME ’pcelsDestinationPortVariableAuxClass’
DESC ’Destination port’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsDestinationPortVariableAuxClass instance, the only allowed
value for the pcelsExpectedValueTypes attribute is
’pcelsIntegerValueAuxClass’. Additionally, only policy values that
represent integers in the range 0..65535 (inclusive) SHOULD be used
with pcelsDestinationPortVariableAuxClass instances.
The pcelsIPProtocolVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.25
NAME ’pcelsIPProtocolVariableAuxClass’
DESC ’IP protocol number’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsIPProtocolVariableAuxClass instance, the only allowed value
for the pcelsExpectedValueTypes attribute is
’pcelsIntegerValueAuxClass’. Additionally, only policy values that
represent integers in the range 0..255 (inclusive) SHOULD be used
with pcelsIPProtocolVariableAuxClass instances.
The pcelsIPVersionVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.26
NAME ’pcelsIPVersionVariableAuxClass’
DESC ’IP version number’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsIPVersionVariableAuxClass instance, the only allowed value
for the pcelsExpectedValueTypes attribute is
’pcelsIntegerValueAuxClass’. Additionally, only policy values that
represent integers in the range 0..15 (inclusive) SHOULD be used with
pcelsIPVersionVariableAuxClass instances.
The pcelsIPToSVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.27
NAME ’pcelsIPToSVariableAuxClass’
DESC ’IP ToS octet’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsIPToSVariableAuxClass instance, the only allowed values for
the pcelsExpectedValueTypes attribute are ’pcelsIntegerValueAuxClass’
and ’pcelsBitStringValueAuxClass’. Additionally, only policy values
that represent integers in the range 0..255 (inclusive) or 8-bit
bitStrings SHOULD be used with pcelsIPToSVariableAuxClass instances.
The pcelsDSCPVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.28
NAME ’pcelsDSCPVariableAuxClass’
DESC ’DiffServ code point’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsDSCPVariableAuxClass instance, the only allowed values for
the pcelsExpectedValueTypes attribute are ’pcelsIntegerValueAuxClass’
and ’pcelsBitStringValueAuxClass’. Additionally, only policy values
that represent integers in the range 0..63 (inclusive) or 6-bit
bitStrings SHOULD be used with pcelsDSCPVariableAuxClass instances.
The pcelsFlowIdVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.29
NAME ’pcelsFlowIdVariableAuxClass’
DESC ’Flow Identifier’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsFlowIdVariableAuxClass instance, the only allowed values
for the pcelsExpectedValueTypes attribute are
’pcelsIntegerValueAuxClass’ and ’pcelsBitStringValueAuxClass’.
Additionally, only policy values that represent integers in the range
0..1048575 (inclusive) or 20-bit bitStrings SHOULD be used with
pcelsFlowIdVariableAuxClass instances.
The pcelsSourceMACVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.30
NAME ’pcelsSourceMACVariableAuxClass’
DESC ’Source MAC address’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsSourceMACVariableAuxClass instance, the only allowed value
for the pcelsExpectedValueTypes attribute is
’pcelsMACAddrValueAuxClass’.
The pcelsDestinationMACVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.31
NAME ’pcelsDestinationMACVariableAuxClass’
DESC ’Destination MAC address’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsDestinationMACVariableAuxClass instance, the only allowed
value for the pcelsExpectedValueTypes attribute is
’pcelsMACAddrValueAuxClass’.
The pcelsVLANVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.32
NAME ’pcelsVLANVariableAuxClass’
DESC ’VLAN’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsVLANVariableAuxClass instance, the only allowed values for
the pcelsExpectedValueTypes attribute are ’pcelsIntegerValueAuxClass’
and ’pcelsBitStringValueAuxClass’. Additionally, only policy values
that represent integers in the range 0..4095 (inclusive) or 12-bit
bitStrings SHOULD be used with pcelsVLANVariableAuxClass instances.
The pcelsCoSVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.33
NAME ’pcelsCoSVariableAuxClass’
DESC ’Class of service’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsCoSVariableAuxClass instance, the only allowed values for
the pcelsExpectedValueTypes attribute are ’pcelsIntegerValueAuxClass’
and ’pcelsBitStringValueAuxClass’. Additionally, only policy values
that represent integers in the range 0..7 (inclusive) or 3-bit
bitStrings SHOULD be used with pcelsCoSVariableAuxClass instances.
The pcelsEthertypeVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.34
NAME ’pcelsEthertypeVariableAuxClass’
DESC ’Ethertype’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsEthertypeVariableAuxClass instance, the only allowed values
for the pcelsExpectedValueTypes attribute are
’pcelsIntegerValueAuxClass’ and ’pcelsBitStringValueAuxClass’.
Additionally, only policy values that represent integers in the range
0..65535 (inclusive) or 16-bit bitStrings SHOULD be used with
pcelsEthertypeVariableAuxClass instances.
The pcelsSourceSAPVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.35
NAME ’pcelsSourceSAPVariableAuxClass’
DESC ’Source SAP’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsSourceSAPVariableAuxClass instance, the only allowed values
for the pcelsExpectedValueTypes attribute are
’pcelsIntegerValueAuxClass’ and ’pcelsBitStringValueAuxClass’.
Additionally, only policy values that represent integers in the range
0..255 (inclusive) or 8-bit bitStrings SHOULD be used with
pcelsSourceSAPVariableAuxClass instances.
The pcelsDestinationSAPVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.36
NAME ’pcelsDestinationSAPVariableAuxClass’
DESC ’Destination SAP’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsDestinationSAPVariableAuxClass instance, the only allowed
values for the pcelsExpectedValueTypes attribute are
’pcelsIntegerValueAuxClass’ and ’pcelsBitStringValueAuxClass’.
Additionally, only policy values that represent integers in the range
0..255 (inclusive) or 8-bit bitStrings SHOULD be used with
pcelsDestinationSAPVariableAuxClass instances.
The pcelsSNAPOUIVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.37
NAME ’pcelsSNAPOUIVariableAuxClass’
DESC ’SNAP OUI’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsSNAPOUIVariableAuxClass instance, the only allowed values
for the pcelsExpectedValueTypes attribute are
’pcelsIntegerValueAuxClass’ and ’pcelsBitStringValueAuxClass’.
Additionally, only policy values that represent integers in the range
0..16777215 (inclusive) or 24-bit bitStrings SHOULD be used with
pcelsSNAPOUIVariableAuxClass instances.
The pcelsSNAPTypeVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.38
NAME ’pcelsSNAPTypeVariableAuxClass’
DESC ’SNAP type’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsSNAPTypeVariableAuxClass instance, the only allowed values
for the pcelsExpectedValueTypes attribute are
’pcelsIntegerValueAuxClass’ and ’pcelsBitStringValueAuxClass’.
Additionally, only policy values that represent integers in the range
0..65535 (inclusive) or 16-bit bitStrings SHOULD be used with
pcelsSNAPTypeVariableAuxClass instances.
The pcelsFlowDirectionVariableAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.39
NAME ’pcelsFlowDirectionVariableAuxClass’
DESC ’Flow direction’
SUP pcelsImplicitVariableAuxClass
AUXILIARY
)
In a pcelsFlowDirectionVariableAuxClass instance, the only allowed
value for the pcelsExpectedValueTypes attribute is
’pcelsStringValueAuxClass’. Additionally, only policy values that
represent the strings ’IN’ and ’OUT’ SHOULD be used with
pcelsFlowDirectionVariableAuxClass instances.
5.16. The Auxiliary Class pcelsValueAuxClass
The pcelsValueAuxClass class is the base class for representing a
policy value. It is mapped from the PolicyValue class [PCIM_EXT].
The pcelsValueAuxClass is an auxiliary object class and it is derived
directly from the ’top’ object class [LDAP_SCHEMA].
The pcelsValueAuxClass class does not represent actual values; these
are introduced by its subclasses. pcelsValueAuxClass introduces the
semantics of being a policy value that are inherited by all its
subclasses. Among these semantics are those of representing either
rule-specific or reusable policy values.
In order to preserve the ability to represent rule-specific or
reusable values, all the subclasses of pcelsValueAuxClass MUST also
be auxiliary classes.
The pcelsValueAuxClass class is defined as follows:
( 1.3.6.1.1.9.1.40
NAME ’pcelsValueAuxClass’
DESC ’Base class for representing a policy value’
SUP top
AUXILIARY