HP Cisco MDS 9222i Cisco MDS 9000 Family Fabric Manager Configuration Guide - - Page 1003

Chapter 46 Configuring Port Security Port Security Configuration Distribution Send documentation comments to [email protected] Committing the Changes If you commit the changes made to the configurations, the configurations in the pending database are distributed to other switches. On a successful commit, the configuration change is applied throughout the fabric and the lock is released. Activation and Auto-learning Configuration Distribution Activation and auto-learning configurations in distributed mode are remembered as actions to be performed when you commit the changes in the pending database. Learned entries are temporary and do not have any role in determining if a login is authorized or not. As such, learned entries do not participate in distribution. When you disable learning and commit the changes in the pending database, the learned entries become static entries in the active database and are distributed to all switches in the fabric. After the commit, the active database on all switches are identical and learning can be disabled. If the pending database contains more than one activation and auto-learning configuration when you commit the changes, then the activation and auto-learning changes are consolidated and the behavior may change (see Table 46-3). Table 46-3 Scenarios for Activation and Auto-learning Configurations in Distributed Mode Scenario Actions Distribution = OFF A and B exist in the configuration database, activation is not done and devices C,D are logged in. 1. You activate the port configuration database = {A,B} security database and active database = {A,B, C1, D*} enable auto-learning. 2. A new entry E is added to the configuration database. configuration database = {A,B, E} active database = {A,B, C*, D*} 3. You issue a commit. Not applicable Distribution = ON configuration database = {A,B} active database = {null} pending database = {A,B + activation to be enabled} configuration database = {A,B} active database = {null} pending database = {A,B, E + activation to be enabled} configuration database = {A,B, E} active database = {A,B, E, C*, D*} pending database = empty OL-17256-03, Cisco MDS NX-OS Release 4.x Cisco MDS 9000 Family Fabric Manager Configuration Guide 46-19