HP StorageWorks 2/16V Brocade Fabric OS Command Reference Manual - Supporting - Page 611

secPolicyCreate 2 secPolicyCreate Creates a new security policy. Synopsis secpolicycreate "name"[, "member[;member...]"] Description Use this command to create a new policy and to edit SCC, DCC, and FCS policies on the local switch. All policies can be created only once, except for the DCC_POLICY_nnn. Each DCC_POLICY_nnn must each have a unique name. This command can be issued on all switches in the current fabric for SCC and DCC policies if it is not fabric-wide. Adding members while creating a policy is optional. You can add members to a policy later, using the secPolicyAdd command. Each policy corresponds to a management method.The list of members of a policy acts as an access control list for that management method. The FCS_POLICY can only be created when enabling security mode using the secModeEnable command. When secure mode is enabled or FCS Policy is enabled in non-secure mode, this command can be issued only from the Primary FCS switch. Before a policy is created, there is no enforcement for that management method, which is all access is granted. After a policy is created and a member is added to the policy, that policy is closed to all access except to included members. If all members are then deleted from the policy, all access is denied for that management access method. NOTE If a TELNET_POLICY or SERIAL_POLICY is created, that ends the current sectelnet or serial session and a warning is issued. Operands This command has the following operands: "name" Specify the name of a policy you want to create. Valid values for this operand are: • DCC_POLICY_nnn • TELNET_POLICY • HTTP_POLICY • API_POLICY • RSNMP_POLICY • WSNMP_POLICY • SES_POLICY • MS_POLICY • SERIAL_POLICY • FRONTPANEL_POLICY • SCC_POLICY • OPTIONS_POLICY • AUTH_POLICY • IPF_POLICY • FCS_POLICY Fabric OS Command Reference Manual 579 53-1000436-01