HP StorageWorks 2/16V Brocade Secure Fabric OS Administrator's Guide (53-10002 - Page 66

To create an HTTP policy, Table 3-5, Policy State, Characteristics

Get HP StorageWorks 2/16V - SAN Switch PDF manuals and user guides View all HP StorageWorks 2/16V manuals
Add to My Manuals
Save this manual to your list of manuals

Page 66 highlights

3 Table 3-5 displays the possible HTTP policy states. Table 3-5 HTTP Policy States Policy State Characteristics No policy All hosts can establish an HTTP/HTTPS connection to any switch in the fabric. Policy with no entries No host can establish an HTTP/HTTPS connection to any switch in the fabric. Note: An empty policy causes the message "The page cannot be displayed" to display when HTTP/HTTPS access is attempted. Policy with entries Only specified hosts can establish an HTTP/HTTPS connection to any switch in the fabric. To create an HTTP policy 1. From a sectelnet or SSH session, log in to the primary FCS switch as admin. 2. Type secPolicyCreate "HTTP_POLICY", "member;...;member". member is one or more IP addresses in dot-decimal notation. "0" can be entered in an octet to indicate that any number can be matched in that octet. 3. To save or activate the new policy, enter either the secPolicySave or the secPolicyActivate command. If neither of these commands is entered, the changes are lost when the session is logged out. For more information about these commands, see "Saving Changes to Secure Fabric OS Policies" on page 3-26 and "Activating Changes to Secure Fabric OS Policies" on page 3-27. For example, to create an HTTP policy to allow anyone on the network with IP address of 192.168.5.0 (where "0" can be any number) to establish an HTTP connection to any switch in the fabric: primaryfcs:admin> secpolicycreate "HTTP_POLICY", "192.168.5.0" HTTP_POLICY has been created. 3-16 Secure Fabric OS Administrator's Guide Publication Number: 53-1000244-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
3-16
Secure Fabric OS Administrator’s Guide
Publication Number: 53-1000244-01
3
Table 3-5
displays the possible HTTP policy states.
To create an HTTP policy
1.
From a sectelnet or SSH session, log in to the
primary FCS switch as admin.
2.
Type
secPolicyCreate “HTTP_POLICY”, “
member
;
...
;
member
”
.
member
is one or more IP addresses in dot-decimal notation. “0” can be entered in an octet to
indicate that any number can be matched in that octet.
3.
To save or activate the new policy, enter either the
secPolicySave
or the
secPolicyActivate
command.
If neither of these commands is entered, the changes are lost when the session is logged out. For
more information about these commands, see
“Saving Changes to Secure Fabric OS Policies”
on
page 3-26 and
“Activating Changes to Secure Fabric OS Policies”
on page 3-27.
For example, to create an HTTP policy to allow anyone on the network with IP address of
192.168.5.0 (where “0” can be any number) to establish an HTTP connection to any switch in the
fabric:
Table 3-5
HTTP Policy States
Policy State
Characteristics
No policy
All hosts can establish an HTTP/HTTPS connection to any switch in the
fabric.
Policy with no entries
No host can establish an HTTP/HTTPS connection to any switch in the
fabric.
Note:
An empty policy causes the message “The page cannot be
displayed” to display when HTTP/HTTPS access is attempted.
Policy with entries
Only specified hosts can establish an HTTP/HTTPS connection to any
switch in the fabric.
primaryfcs:admin>
secpolicycreate "HTTP_POLICY", "192.168.5.0"
HTTP_POLICY has been created.