// Copyright (c) 2005 DMTF.  All rights reserved.
   [Version ( "2.8.0" ), 
    UMLPackagePath ( "CIM::Network::IPsec" ), 
    Description ( 
       "IPsecSAEndpoints are types of SecurityAssociationEndpoints "
       "representing both negotiated and static SAs that correspond to "
       "AH, ESP, or IPCOMP transforms." )]
class CIM_IPsecSAEndpoint : CIM_SecurityAssociationEndpoint {

      [Description ( 
          "SPI contains the Security Parameter Index of the SA. "
          "This value in string form may also be used in the key "
          "field \'Name\' inherited from ServiceAccessPoint." )]
   uint32 SPI;

      [Description ( 
          "InboundDirection specifies whether the SA applies to "
          "inbound (TRUE) or outbound (FALSE) traffic." )]
   boolean InboundDirection;

      [Description ( 
          "EncapsulationMode indicates whether the IPsecSAEndpoint "
          "uses transport or tunnel encapsulation." ), 
       ValueMap { "0", "2", "3" }, 
       Values { "Unknown", "Tunnel", "Transport" }]
   uint16 EncapsulationMode;

      [Description ( 
          "DFHandling controls how the \'Don\'t Fragment\' bit is "
          "managed by the IPsecSAEndpoint." ), 
       ValueMap { "0", "2", "3", "4" }, 
       Values { "Unknown", 
          "Copy from Internal to External IP Header", 
          "Set DF Bit in External Header to 1", 
          "Set DF Bit in External Header to 0" }]
   uint16 DFHandling;

      [Description ( 
          "PFSInUse indicates whether perfect forward secrecy is "
          "required when refreshing keys." )]
   boolean PFSInUse;


};