HP StorageWorks 8/80 HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 106

and active sets but they have different values, then the policy has been modified but the changes have not been activated. Admin Domain considerations: ACL management can be done on AD255 and in AD0 only if other there are no user-defined Admin Domains. Both AD0 (when no other user-defined Admin Domains exist) and AD255 provide an unfiltered view of the fabric. Identifying policy members Specify the FCS, DCC and SCC policy members by device port WWN, switch WWN, Domain IDs, or switch names, depending on the policy. The valid methods for specifying policy members are listed in Table 24. Table 24 Valid methods for specifying policy members Policy name Device port WWN Switch WWN Domain ID Switch name FCS_POLICY No Yes Yes Yes DCC_POLICY_nnn Yes Yes Yes Yes SCC_POLICY No Yes Yes Yes Configuring ACL policies All policy modifications are saved in volatile memory until those changes are saved or activated. You can create multiple sessions to the switch from one or more hosts. It is recommended to make changes from one switch only to avoid having multiple transactions from occurring. The FCS, SCC and DCC policies in Secure Fabric OS are not interchangeable with Fabric OS FCS, SCC and DCC policies. Uploading and saving a copy of the Fabric OS configuration after creating policies is strongly recommended. Use the configUpload command to upload a copy of the configuration file. For more information on how to use this command, see the "Maintaining the Switch Configuration File" on page 143. Use the secPolicyShow command to display the active and defined policy sets. Additionally, in a defined policy set, policies created in the same login session also appear but these policies are automatically deleted if the user logs out without saving. The following example shows a switch that has no SCC, DCC, and FCS policies. NOTE: All changes, including the creation of new policies, are saved and activated on the local switch only-unless the switch is in a fabric that has a strict or tolerant fabric-wide consistency policy for the ACL policy type for SCC or DCC. See "Distributing the policy database" on page 128 for more information on the database settings and fabric-wide consistency policy. Use the instructions in the following sections to manage common settings between two or more of the DCC, FCS, and SCC policies. For instructions relating to a specific policy, refer to the appropriate section. • "Displaying ACL policies" on page 107 Displays a list of all active and defined ACL policies on the switch. • "Saving changes to ACL policies" on page 114 Save changes to memory without actually implementing the changes within the fabric or to the switch. This saved but inactive information is known as the "defined policy set." Simultaneously save and implement all the policy changes made since the last time changes were activated. The activated policies are known as the "active policy set." Delete an entire policy; deleting a policy opens up that aspect of the fabric to all access. • "Activating changes to ACL policies" on page 115 Simultaneously save and implement all the policy changes made since the last time changes were activated. The activated policies are known as the "active policy set." 106 Configuring advanced security features