HP Cisco MDS 9216i Cisco MDS 9000 Family Fabric Manager Configuration Guide, R - Page 905

Chapter 46 Configuring Port Security Port Security Configuration Guidelines Send documentation comments to [email protected] Step 3 Step 4 Step 5 Step 6 Activate port security on each VSAN. This turns on auto-learning by default. See the "Activating Port Security" section on page 46-10. Disable auto-learn on each VSAN. See the "Disabling Auto-learning" section on page 46-15. Copy the running configuration to the startup configuration This saves the port security configure database to the startup configuration. Repeat Step 1 through Step 5 for all switches in the fabric. Configuring Port Security Using Wizard The Port Security Configuration wizard provides step-by-step procedures for setting up the Port Security Policy for a selected VSAN. The Port Security Configuration wizard also supports the central management through CFS,making it possible to complete the entire configuration at one place. The wizard automatically conducts few essential operations. For example, if you want central management, the wizard conducts operations to check CFS capability, enable CFS, and issue CFS commit at the proper stages. • To manage security at a particular port, you do not need to run through the wizard to configure the port security policy from the VSAN wide, but you can directly edit accesses on the port itself. This operation can be done through the Port Binding dialog box. If the port's belonging switch has not enabled port security yet, the dialog box enables security first. If the port security is enabled, the dialog box will edit the policy database based on user operations. Prerequisites The prerequisites for configuring Port Security are as follows: • Port Security enabled on the switch. • Port Security Policy should be defined either manually by editing bound devices or switches or ports or by using autolearning. • Port Security Policy activated. • Activated and configured database synchronized through copy. • Activated database copied to be the startup configuration. • CFS should be enabled on all switches in the VSAN. A CFS master switch is selected to do all configurations. All changes will be distributed to the VSAN through the CFS commit command To Configure Port Security follow these steps: Step 1 Select the Port Security Setup menu from the Fabric Manager tools menu, as shown in Figure 46-1. OL-16184-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family CLI Configuration Guide 46-5