HP Cisco MDS 9020 Cisco MDS 9000 Family Fabric Manager Configuration Guide, Re - Page 917

Chapter 46 Configuring Port Security Port Security Manual Configuration Send documentation comments to [email protected] Table 46-2 Authorization Results for Scenario (continued) Device Connection Request P1, N1, F6 (auto-learning on) P5, N5, F1 (auto-learning on) S3, F4 (auto-learning on) S1, F3 (auto-learning on) P5, N3, F3 P7, N3, F9 Authorization Condition Reason Denied 2 P1 is bound to F1. Denied 7 Only P1 and P2 bound to F1. Denied 7 P3 paired with F4. Permitted 5 No conflict. Permitted 6 Wildcard ( * ) match for F3 and N3. Permitted 6 Wildcard ( * ) match for N3. Port Security Manual Configuration To configure port security on any switch in the Cisco MDS 9000 Family, follow these steps: Step 1 Step 2 Step 3 Step 4 Identify the WWN of the ports that need to be secured. Secure the fWWN to an authorized nWWN or pWWN. Activate the port security database. Verify your configuration. This section includes the following topics: • About WWN Identification, page 46-17 • Adding Authorized Port Pairs, page 46-18 • Deleting Port Security Setting, page 46-18 About WWN Identification If you decide to manually configure port security, be sure to adhere to the following guidelines: • Identify switch ports by the interface or by the fWWN. • Identify devices by the pWWN or by the nWWN. • If an Nx port is allowed to log in to SAN switch port Fx, then that Nx port can only log in through the specified Fx port.. • If an Nx port's nWWN is bound to an Fx port WWN, then all pWWNs in the Nx port are implicitly paired with the Fx port. • TE port checking is done on each VSAN in the allowed VSAN list of the trunk port. • All PortChannel xE ports must be configured with the same set of WWNs in the same PortChannel. • E port security is implemented in the port VSAN of the E port. In this case the sWWN is used to secure authorization checks. • Once activated, the config database can be modified without any effect on the active database. OL-16184-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family CLI Configuration Guide 46-17