HP StorageWorks 2/16V Brocade Fabric OS Command Reference Manual - Supporting - Page 613

secPolicyCreate 2 The following examples illustrate several ways to specify the port values: (1-6)Selects ports 1 through 6. (*) Selects all ports on the switch. [3, 9]Selects ports 3 and 9 and all devices attached to those ports. [1-3, 5]Selects ports 1 through 3 and 5 and all devices attached to those ports. [*] Selects all ports on the switch and devices currently attached to those ports. OPTIONS_POLICY members "NoNodeWWNZoning" is the only option. SCC_POLICY Members This policy type requires member IDs to be specified as WWN strings, domains, or switch names. If domain or switch names are used, the switches associated must be present in the fabric or the command fails. To add all switches in the current fabric as members of the SCC_POLICY, enter an asterisk (*) as the member value. This feature cannot be used by the other security telnet commands. Examples To create a new, single MS_POLICY that enables access through a device that has WWN of 12:24:45:10:0a:67:00:40 primaryfcs:admin> secpolicycreate "MS_POLICY", "12:24:45:10:0a:67:00:40" MS_POLICY has been created. To create a new front panel policy that only enables domains 3 and 4 to use the front panel: primaryfcs:admin> secpolicycreate "FRONTPANEL_POLICY", "3; 4" FRONTPANEL_POLICY has been created. To create a the FCS policy: primaryfcs:admin> secpolicycreate "FCS_POLICY", "3; 4" FCS_POLICY has been created. While creating the FCS policy, the local switch WWN is automatically included in the list. Switches included in the FCS list are FCS swtches and the remaining switches in the fabric are non-FCS switches. Out of the FCS list, the switch that is in the first position becomes the Primary FCS switch and the remaining switches become back-up FCS switches. If the first switch in the FCS list is not reachable, the next switch becomes the Primary. To create a device policy to allow two devices to attach to domain 3 ports 1 and 3 (the WWN of first device is 11:22:33:44:55:66:77:aa and the WWN of second device is 11:22:33:44:55:66:77:bb): primaryfcs:admin> secpolicycreate "DCC_POLICY_aB_7", "11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3[1,3]" DCC_POLICY_abc has been created. To create a telnet policy to allow anyone on the 192.168.5.0/24 network to access the fabric through sectelnet: primaryfcs:admin> secpolicycreate "TELNET_POLICY", "192.168.5.0" TELNET_POLICY has been created. See Also fddCfg, distribute, secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyDelete, secPolicyDump, secPolicyRemove, secPolicySave, secStatsShow Fabric OS Command Reference Manual 581 53-1000436-01