HP Cisco MDS 9020 Cisco MDS 9000 Family Fabric Manager Configuration Guide - R - Page 1000

Port Security Manual Configuration Chapter 46 Configuring Port Security Send documentation comments to [email protected] • Deleting Port Security Setting, page 46-17 About WWN Identification If you decide to manually configure port security, be sure to adhere to the following guidelines: • Identify switch ports by the interface or by the fWWN. • Identify devices by the pWWN or by the nWWN. • If an Nx port is allowed to log in to SAN switch port Fx, then that Nx port can only log in through the specified Fx port.. • If an Nx port's nWWN is bound to an Fx port WWN, then all pWWNs in the Nx port are implicitly paired with the Fx port. • TE port checking is done on each VSAN in the allowed VSAN list of the trunk port. • All PortChannel xE ports must be configured with the same set of WWNs in the same PortChannel. • E port security is implemented in the port VSAN of the E port. In this case the sWWN is used to secure authorization checks. • Once activated, the config database can be modified without any effect on the active database. • By saving the running configuration, you save the configuration database and activated entries in the active database. Learned entries in the active database are not saved. Adding Authorized Port Pairs After identifying the WWN pairs that need to be bound, add those pairs to the port security database. Tip Remote switch binding can be specified at the local switch. To specify the remote interfaces, you can use either the fWWN or sWWN-interface combination. To add authorized port pairs for port security using Fabric Manager, follow these steps: Step 1 Step 2 Step 3 Expand a VSAN and select Port Security in the Logical Domains pane. Click the Config Database tab. Click Create Row to add an authorized port pair. You see the Create Port Security dialog box shown in Figure 46-9. 46-16 Cisco MDS 9000 Family Fabric Manager Configuration Guide OL-17256-03, Cisco MDS NX-OS Release 4.x