HP StorageWorks 2/16V Brocade Secure Fabric OS Administrator's Guide (53-10002 - Page 22

Front Panel policy. Use to restrict which switches can be accessed by front panel.

Page 22 highlights

1 Secure Fabric OS supports the following policies: • FCS policy-Use to specify the primary FCS and backup FCS switches. This is the only required policy. • Management access control (MAC) policies-Use to restrict management access to switches. The following specific MAC policies are provided: - Read and Write SNMP policies. Use to restrict which SNMP hosts are allowed read and write access to the fabric. - Telnet policy. Use to restrict which workstations can use sectelnet or SSH to connect to the fabric (telnet is not available when Secure Fabric OS is enabled). - HTTP policy. Use to restrict which workstations can use HTTP to access the fabric. - API policy. Use to restrict which workstations can use API to access the fabric. - SES policy. Use to restrict which devices can be managed by SES. - Management Server policy. Use to restrict which devices can be accessed by management server. - Serial Port policy. Use to restrict which switches can be accessed by serial port. - Front Panel policy. Use to restrict which switches can be accessed by front panel. • Options policy-Use to restrict the types of WWNs that can be used for zoning. • Device Connection Control (DCC) policies-Use to restrict which Fibre Channel device ports can connect to which Fibre Channel switch ports. • Switch Connection Control (SCC) policy-Use to restrict which switches can join the fabric. Note An SCC policy is required if FICON is enabled. 1-6 Secure Fabric OS Administrator's Guide Publication Number 53-1000244-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118

1-6
Secure Fabric OS Administrator’s Guide
Publication Number 53-1000244-01
1
Secure Fabric OS supports the following policies:
FCS
policy—Use to specify the primary FCS and backup FCS switches. This is the only required
policy.
Management access control (MAC) policies—Use to restrict management access to switches. The
following specific MAC policies are provided:
-
Read and Write SNMP policies. Use to restrict which SNMP hosts are allowed read and write
access to the fabric.
-
Telnet policy. Use to restrict which workstations can use sectelnet or SSH to connect to the
fabric (telnet is not available when Secure Fabric OS is enabled).
-
HTTP policy. Use to restrict which workstations can use HTTP to access the fabric.
-
API policy. Use to restrict which workstations can use API to access the fabric.
-
SES policy. Use to restrict which devices can be managed by SES.
-
Management Server policy. Use to restrict which devices can be accessed by management
server.
-
Serial Port policy. Use to restrict which switches can be accessed by serial port.
-
Front Panel policy. Use to restrict which switches can be accessed by front panel.
Options policy—Use to restrict the types of WWNs that can be used for zoning.
Device Connection Control (DCC) policies—Use to restrict which Fibre Channel device ports can
connect to which Fibre Channel switch ports.
Switch Connection Control (SCC) policy—Use to restrict which switches can join the fabric.
Note
An SCC policy is required if FICON is enabled.