HP Cisco MDS 9120 Cisco MDS 9000 Family Fabric Manager Configuration Guide - R - Page 172

Controlling Administrator Access with Users and Roles Chapter 5 Fabric Manager Client Send documentation comments to [email protected] Note Fabric Manager uses the regular expressions to convert multiple alias names into one enclosure. The alias names should be in the same expression pattern rule. You can create enclosure names from selected aliases using the regular expresssions list. Controlling Administrator Access with Users and Roles Cisco MDS 9000 Family switches support role-based management access whether using the CLI or Cisco Fabric Manager. This lets you assign specific management privileges to particular roles and then assign one or more users to each role. The default-role contains the access permissions needed by a user to access the GUI (Fabric Manager and Device Manager). These access permissions are automatically granted to all users in order for them to use the GUI. Cisco Fabric Manager uses SNMPv3 to establish role-based management access. After completing the setup routine, a single role, user name, and password are established. The role assigned to this user allows the highest level of privileges, which includes creating users and roles. Use the Cisco Fabric Manager to create roles and users and to assign passwords as required for secure management access in your network. Using Fabric Manager Wizards Fabric Manager Client provides the following wizards to facilitate common configuration tasks: • VSAN-Creates VSANs on multiple switches in the fabric and sets VSAN attributes including interop mode, load balancing, and FICON. • Zone Edit Tool-Creates zone sets, zones, and aliases. Adds members to zones and edits the zone database. • IVR Zone-Creates IVR zone sets, zones, and aliases. Enables IVR NAT and auto-topology. Adds members to IVR zones, and edits the IVR zone database. • PortChannel-Creates PortChannels from selected ISLs either manually or automatically. Sets PortChannel attributes such as channel ID and trunking mode. • FCIP-Creates FCIP links between Gigabit Ethernet ports. Enables Fibre Channel write acceleration and IP compression. • DPVM-Establishes dynamic port VSAN membership, enables autolearning, and activates the DPVM database. • Port Security-Prevents unauthorized access to Cisco MDS switches and reports these intrusions to the administrator. • iSCSI-Creates zones for iSCSI initiators and adds a VSAN to a target-allowed VSAN list. • NPV-Reduces the number of Fibre Channel domain IDs in SANs. • QoS-Sets QoS attributes for zones in the selected VSAN. • IP ACL-Creates ordered IP access control lists and distributes to selected switches in the fabric. • License Install-Facilitates download and installation of licenses in selected switches in the fabric. 5-34 Cisco MDS 9000 Family Fabric Manager Configuration Guide OL-17256-03, Cisco MDS NX-OS Release 4.x