HP Cisco MDS 9120 Cisco MDS 9000 Family CLI Configuration Guide, Release 3.x ( - Page 914

Port Security Configuration Distribution Chapter 37 Configuring Port Security Send documentation comments to [email protected] Enabling Distribution All the configurations performed in distributed mode are stored in a pending (temporary) database. If you modify the configuration, you need to commit or discard the pending database changes to the configurations. The fabric remains locked during this period. Changes to the pending database are not reflected in the configurations until you commit the changes. Note Port Activation or deactivation and auto-learning enable or disable do not take effect until after a CFS commit if CFS distribution is enabled. Always follow any one of these operations with a CFS commit to ensure proper configuration. See the "Activation and Auto-learning Configuration Distribution" section on page 37-13. For example, if you activate port security, follow up by disabling auto-learning, and finally commit the changes in the pending database, then the net result of your actions is the same as issuing a port-security activate vsan vsan-id no-auto-learn command. Tip In this case, we recommend that you perform a commit at the end of each operation: after After you activate port security and after you enable auto learning. To enable the port security distribution, follow these steps: Step 1 Step 2 Command Purpose switch# config t switch(config)# Enters configuration mode. switch(config)# port-security distribute Enables distribution. switch(config)# no port-security distribute Disables distribution. Locking The Fabric The first action that modifies the existing configuration creates the pending database and locks the feature in the VSAN. Once you lock the fabric, the following situations apply: • No other user can make any configuration changes to this feature. • A copy of the configuration database becomes the pending database. Committing the Changes If you commit the changes made to the configurations, the configurations in the pending database are distributed to other switches. On a successful commit, the configuration change is applied throughout the fabric and the lock is released. To commit the port security configuration changes for the specified VSAN, follow these steps: Step 1 Step 2 Command Purpose switch# config t switch(config)# Enters configuration mode. switch(config)# port-security commit vsan 3 Commits the port security changes in the specified VSAN. 37-12 Cisco MDS 9000 Family CLI Configuration Guide OL-16184-01, Cisco MDS SAN-OS Release 3.x