HP Cisco Nexus 5000 Cisco MDS 9000 Family CLI Configuration Guide - Release 4. - Page 975

Chapter 39 Configuring Port Security Port Security Configuration Distribution Send documentation comments to [email protected] Discarding the Changes If you discard (abort) the changes made to the pending database, the configuration remains unaffected and the lock is released. To discard the port security configuration changes for the specified VSAN, follow these steps: Step 1 Step 2 Command switch# config t switch(config)# switch(config)# port-security abort vsan 5 Purpose Enters configuration mode. Discards the port security changes in the specified VSAN and clears the pending configuration database. Activation and Auto-learning Configuration Distribution Activation and auto-learning configurations in distributed mode are remembered as actions to be performed when you commit the changes in the pending database. Learned entries are temporary and do not have any role in determining if a login is authorized or not. As such, learned entries do not participate in distribution. When you disable learning and commit the changes in the pending database, the learned entries become static entries in the active database and are distributed to all switches in the fabric. After the commit, the active database on all switches are identical and learning can be disabled. If the pending database contains more than one activation and auto-learning configuration when you commit the changes, then the activation and auto-learning changes are consolidated and the behavior may change (see Table 39-3). Table 39-3 Scenarios for Activation and Auto-Learning learning Configurations in Distributed Mode Scenario Actions Distribution = OFF A and B exist in the configuration database, activation is not done and devices C,D are logged in. 1. You activate the port configuration database = {A,B} security database and active database = {A,B, C1, D*} enable auto-learning. 2. A new entry E is added to the configuration database. configuration database = {A,B, E} active database = {A,B, C*, D*} 3. You issue a commit. Not applicable Distribution = ON configuration database = {A,B} active database = {null} pending database = {A,B + activation to be enabled} configuration database = {A,B} active database = {null} pending database = {A,B, E + activation to be enabled} configuration database = {A,B, E} active database = {A,B, E, C*, D*} pending database = empty OL-18084-01, Cisco MDS NX-OS Release 4.x Cisco MDS 9000 Family CLI Configuration Guide 39-13