HP Cisco MDS 9216 Cisco MDS 9000 Family Fabric Manager Configuration Guide - R - Page 994

Activating Port Security Chapter 46 Configuring Port Security Send documentation comments to [email protected] Step 3 Step 4 Step 5 Step 6 Step 7 Click in the Action column under Activation, next to the switch or VSAN on which you want to activate port security. You see a drop-down menu with the following options: • activate-Valid port security settings are activated. • activate (TurnLearningOff)-Valid port security settings are activated and auto-learn turned off. • forceActivate-Activation is forced. • forceActivate(TurnLearningOff)-Activation is forced and auto-learn is turned off. • deactivate-All currently active port security settings are deactivated. • NoSelection- No action is taken. Set the Action field you want for that switch. Uncheck the AutoLearn check box for each switch in the VSAN to disable auto-learning. Click the CFS tab and set the command column to commit on all participating switches in the VSAN. Click Apply Changes in Fabric Manager or Apply in Device Manager to save these changes. Note If required, you can disable auto-learning (see the "Disabling Auto-learning" section on page 46-13). Database Activation Rejection Database activation is rejected in the following cases: • Missing or conflicting entries exist in the configuration database but not in the active database. • The auto-learning feature was enabled before the activation. To reactivate a database in this state, disable auto-learning. • The exact security is not configured for each PortChannel member. • The configured database is empty but the active database is not. If the database activation is rejected due to one or more conflicts listed in the previous section, you may decide to proceed by forcing the port security activation. Forcing Port Security Activation If the port security activation request is rejected, you can force the activation. Note An activation using the force option can log out existing devices if they violate the active database. To forcefully activate the port security database using Fabric Manager, follow these steps: Step 1 Step 2 Expand a VSAN and select Port Security in the Logical Domains pane. You see the port security configuration for that VSAN in the Information pane. Click the Actions tab. 46-10 Cisco MDS 9000 Family Fabric Manager Configuration Guide OL-17256-03, Cisco MDS NX-OS Release 4.x