HP StorageWorks 8/80 HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 109

Overview of steps to create and manage the FCS policies

Page 109 highlights

Table 26 Switch operations Allowed on FCS switches secPolicyRemove (Allowed on all switches for SCC/DCC policies as long as its not fabric-wide) Allowed on all switches secPolicyActivate fddcfg --fabwideset Any fabric-wide commands All zoning commands except the show commands All AD commands secPolicySave secPolicyAbort SNMP commands configupload Any local-switch commands Any AD command that does not affect fabric-wide configuration FCS enforcement does not apply to pre-5.3.0 switches and they will be able to initiate all operations. Overview of steps to create and manage the FCS policies Whether your intention is to create new FCS policies or manage your current FCS policies, you must follow certain steps to ensure the domains throughout your fabric have the same policy. The local-switch WWN cannot be deleted from the FCS policy. 1. Set the pre-6.0 switches in the fabric to accept the FCS policy using the fddcfg --localaccept/localreject command. 2. Create the FCS policy using the secPolicyCreate command. 3. Activate the policy using the secPolicyActivate command. 4. If your switches are set to accept distribution of the policies, you can use the distribute -p command to either sent the policies to intended domains, or the wild card (*) character to send the policies to all switches. To create an FCS policy: 1. Connect to the switch and log in using an account assigned to the admin role. 2. Type secPolicyCreate "FCS_POLICY", "member;...;member". member indicates a switch that is eligible to become a primary or back-up FCS switch. Specify switches by WWN, Domain ID, or switch name. Enter the wild card (*) character to indicate all the switches in the fabric. For example, to create an FCS policy that allows a switch with Domain ID 2 to become a primary FCS and domain id 4 to become a backup FCS: switch:admin> secpolicycreate "FCS_POLICY", "2;4" FCS_POLICY has been created To save or activate the new policy, enter either the secPolicySave or the secPolicyActivate command. Once the policy has been activated you can distribute the policy. NOTE: FCS policy should be consistent across the fabric. If the policy is inconsistent in the fabric, then you will not be able to perform any fabric-wide configurations from the primary FCS. Modifying the Primary FCS To fail over to a new Primary switch, use the secPolicyFCSMove command to change the order in which switches are listed in the FCS policy. To modify the order of FCS switches: 1. Log in to the primary FCS switch using an account assigned to the admin role. 2. Type secPolicyShow "Defined", "FCS_POLICY". Fabric OS 6.1.x administrator guide 109

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457
  • 458
  • 459
  • 460
  • 461
  • 462
  • 463
  • 464
  • 465
  • 466
  • 467
  • 468
  • 469
  • 470
  • 471
  • 472
  • 473
  • 474
  • 475
  • 476
  • 477
  • 478
  • 479
  • 480
  • 481
  • 482
  • 483
  • 484
  • 485
  • 486
  • 487
  • 488
  • 489
  • 490
  • 491
  • 492

Fabric OS 6.1.x administrator guide
109
FCS enforcement does not apply to pre-5.3.0 switches and they will be able to initiate all operations.
Overview of steps to create and manage the FCS policies
Whether your intention is to create new FCS policies or manage your current FCS policies, you must follow
certain steps to ensure the domains throughout your fabric have the same policy.
The local-switch WWN cannot be deleted from the FCS policy.
1.
Set the pre-6.0 switches in the fabric to accept the FCS policy using the
fddcfg
--
localaccept/localreject
command.
2.
Create the FCS policy using the
secPolicyCreate
command.
3.
Activate the policy using the
secPolicyActivate
command.
4.
If your switches are set to accept distribution of the policies, you can use the
distribute -p
command to either sent the policies to intended domains, or the wild card (*) character to send the
policies to all switches.
To create an FCS policy:
1.
Connect to the switch and log in using an account assigned to the admin role.
2.
Type
secPolicyCreate “FCS_POLICY”,
member
;
...
;
member
”.
member
indicates a switch that is eligible to become a primary or back-up FCS switch. Specify switches
by WWN, Domain ID, or switch name. Enter the wild card (*) character to indicate all the switches in
the fabric.
For example, to create an FCS policy that allows a switch with Domain ID 2 to become a primary FCS
and domain id 4 to become a backup FCS:
switch:admin>
secpolicycreate "FCS_POLICY", "2;4"
FCS_POLICY has been created
To save or activate the new policy, enter either the
secPolicySave
or the
secPolicyActivate
command. Once the policy has been activated you can distribute the policy.
NOTE:
FCS policy should be consistent across the fabric. If the policy is inconsistent in the fabric, then
you will not be able to perform any fabric-wide configurations from the primary FCS.
Modifying the Primary FCS
To fail over to a new Primary switch, use the
secPolicyFCSMove
command to change the order in
which switches are listed in the FCS policy.
To modify the order of FCS switches:
1.
Log in to the primary FCS switch using an account assigned to the admin role.
2.
Type
secPolicyShow
“Defined”, “FCS_POLICY”
.
secPolicyRemove
(Allowed on all switches for
SCC/DCC policies as long as its not fabric-wide)
secPolicyActivate
fddcfg –-fabwideset
secPolicySave
Any fabric-wide commands
secPolicyAbort
All zoning commands except the show commands
SNMP commands
All AD commands
configupload
Any local-switch commands
Any AD command that does not affect fabric-wide
configuration
Table 26
Switch operations
Allowed on FCS switches
Allowed on all switches