HP Cisco Nexus 5000 Cisco Nexus 5000 Series Switch CLI Software Configuration - Page 627

Chapter 45 Configuring Port Security Database Interaction Send feedback to [email protected] Caution If you do not follow these two conditions, the merge will fail. The next distribution will forcefully synchronize the databases and the activation states in the fabric. Database Interaction Table 45-4 lists the differences and interaction between the active and configuration databases. Table 45-4 Active and Configuration Port Security Databases Active Database Configuration Database Read-only. Read-write. Saving the configuration only saves the activated Saving the configuration saves all the entries in entries. Learned entries are not saved. the configuration database. Once activated, all devices that have already Once activated, the configuration database can be logged into the VSAN are also learned and added modified without any effect on the active to the active database. database. You can overwrite the active database with the configured database by activating the port security database. Forcing an activation may violate the entries already configured in the active database. You can overwrite the configuration database with the active database. Note You can overwrite the configuration database with the active database using the port-security database copy vsan command. The port-security database diff active vsan command in EXEC mode lists the differences between the active database and the configuration database. This section includes the following topics: • Database Scenarios, page 45-15 • Copying the Port Security Database, page 45-17 • Deleting the Port Security Database, page 45-18 • Clearing the Port Security Database, page 45-18 Database Scenarios Figure 45-1 illustrates various scenarios showing the active database and the configuration database status based on port security configurations. OL-16597-01 Cisco Nexus 5000 Series Switch CLI Software Configuration Guide 45-15