HP StorageWorks 2/16V Brocade Secure Fabric OS Administrator's Guide (53-10002 - Page 55

Advanced Zoning User's Guide, Fabric OS Procedures Guide, Fabric OS Administrator's, Guide, fcsmember

Get HP StorageWorks 2/16V - SAN Switch PDF manuals and user guides View all HP StorageWorks 2/16V manuals
Add to My Manuals
Save this manual to your list of manuals

Page 55 highlights

3 2. Ensure that any zoning configuration downloads have completed on all switches in the fabric. For information specific to zoning, see the Advanced Zoning User's Guide for Fabric OS v2.6.x and v3.2.x, the Fabric OS Procedures Guide for Fabric OS v4.4.x, or the Fabric OS Administrator's Guide for Fabric OS v5.0.1, v5.1.0, or v5.2.0. 3. Open a sectelnet or SSH connection to the switch that will be the primary FCS switch. The login prompt is displayed. Note Most Secure Fabric OS commands must be executed on the primary FCS switch. The secModeEnable command must be entered from a sectelnet or SSH connection. 4. Log in to the switch. 5. Terminate any other sectelnet or SSH connections to the fabric (when using the secModeEnable command, no other sessions should be active) and ensure that any other commands entered in the current session have completed. 6. Use the secModeEnable command to enable secure mode. Several optional arguments are available. This step illustrates three forms of the command: • Type secmodeenable --quickmode. Note The secModeEnable command might fail if a switch running Fabric OS v2.6.x is in the fabric. Fabric OS v2.6.x supports a maximum security database size of 16 Kb. If you use --lockdown=dcc or --quickmode, a security database greater than 16 Kb can be created. Enable security successful using other secModeEnable operands. See the Fabric OS Command Reference for detailed command and operand information. Do not use the secModeEnable --currentpwd command until the passwords are changed from the factory defaults by answering the password prompts during the login. Do not use secModeEnable --quickmode in Fabrics with a fibre channel router connected. • Type secmodeenable. This version invokes the command's interactive mode; then, identify each FCS switch at the prompts (as shown in the next example). Press Enter with no data to end the FCS list. • Type secmodeenable "fcsmember;...;fcsmember". fcsmember is the domain ID, WWN, or switch name of the primary and backup FCS switches, with the primary FCS switch listed first. See the Fabric OS Command Reference for other forms of the secModeEnable command. Secure Fabric OS Administrator's Guide 3-5 Publication Number: 53-1000244-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
Secure Fabric OS Administrator’s Guide
3-5
Publication Number: 53-1000244-01
3
2.
Ensure that any zoning configuration downloads have completed on all switches in the fabric.
For information specific to zoning, see the
Advanced Zoning User’s Guide
for Fabric OS v2.6.x and
v3.2.x, the
Fabric OS Procedures Guide
for Fabric OS v4.4.x, or the
Fabric OS Administrator’s
Guide
for Fabric OS v5.0.1, v5.1.0, or v5.2.0.
3.
Open a sectelnet or SSH connection to the switch that will be the primary FCS switch.
The login prompt is displayed.
4.
Log in to the switch.
5.
Terminate any other sectelnet or SSH connections to the fabric (when using the
secModeEnable
command, no other sessions should be active) and ensure that any other commands entered in the
current session have completed.
6.
Use the
secModeEnable
command to enable secure mode.
Several optional arguments are available. This step illustrates three forms of the command:
•
Type
secmodeenable --quickmode
.
•
Type
secmodeenable
.
This version invokes the command’s interactive mode; then, identify each FCS switch at the
prompts (as shown in the next example). Press
Enter
with no data to end the FCS list.
•
Type
secmodeenable "
fcsmember;...;fcsmember
"
.
fcsmember
is the domain ID, WWN, or switch name of the primary and backup FCS switches,
with the primary FCS switch listed first.
See the
Fabric OS Command Reference
for other forms of the
secModeEnable
command.
Note
Most Secure Fabric OS commands must be executed on the primary FCS switch. The
secModeEnable
command must be entered from a sectelnet or SSH connection.
Note
The
secModeEnable
command might fail if a switch running Fabric OS v2.6.x is in
the fabric. Fabric OS v2.6.x supports a maximum security database size of 16 Kb. If
you use
--lockdown=dcc
or
--quickmode
, a security database greater than 16 Kb
can be created. Enable security successful using other
secModeEnable
operands.
See the
Fabric OS Command Reference
for detailed command and operand
information.
Do not use the
secModeEnable --currentpwd
command until the passwords are
changed from the factory defaults by answering the password prompts during the
login.
Do not use
secModeEnable --quickmode
in Fabrics with a fibre channel router
connected.