HP Cisco Nexus 5000 Cisco Nexus 5000 Series Switch CLI Software Configuration - Page 692

Locking the Fabric Configuring Port Security For example, if you activate port security, follow up by disabling auto-learning, and finally commit the changes in the pending database, then the net result of your actions is the same as entering a port-security activate vsan vsan-id no-auto-learn command. Tip We recommend that you perform a commit after you activate port security and after you enable auto learning. To enable the port security distribution, perform this task: Procedure Step 1 Step 2 Step 3 Command or Action switch# configuration terminal switch(config)# port-security distribute switch(config)# no port-security distribute Purpose Enters configuration mode. Enables distribution. Disables distribution. Related Topics • Activation and Auto-Learning Configuration Distribution, page 647 Locking the Fabric The first action that modifies the existing configuration creates the pending database and locks the feature in the VSAN. Once you lock the fabric, the following situations apply: • No other user can make any configuration changes to this feature. • A copy of the configuration database becomes the pending database. Committing the Changes If you commit the changes made to the configurations, the configurations in the pending database are distributed to other switches. On a successful commit, the configuration change is applied throughout the fabric and the lock is released. To commit the port security configuration changes for the specified VSAN, perform this task: Procedure Step 1 Step 2 Command or Action switch# configuration terminal Purpose Enters configuration mode. switch(config)# port-security commit vsan Commits the port security changes in the vsan-id specified VSAN. Cisco Nexus 5000 Series Switch CLI Software Configuration Guide 646 OL-16597-01