HP StorageWorks MSA 2/8 HP StorageWorks Secure Fabric OS V1.0 User Guide (AA-R - Page 60

Creating an SNMP Policy, Table 4: Read and Write Behaviors of SNMP Policies (Continued)

Get HP StorageWorks MSA 2/8 - SAN Switch PDF manuals and user guides View all HP StorageWorks MSA 2/8 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 60 highlights

Creating Secure Fabric OS Policies Note: Providing fabric access to proxy servers is strongly discouraged. When a proxy server is included in a MAC policy for IP-based management, such as the HTTP_POLICY, all IP packets leaving the proxy server appear to originate from the proxy server. This could result in allowing any hosts that have access to the proxy server to access the fabric. By default, all access is allowed; no MAC policies exist until they are created by the administrator. Creating an SNMP Policy You can create read and write SNMP policies to specify which SNMP hosts are allowed read and write access to the fabric. The SNMP hosts must be identified by IP address. ■ RSNMP_POLICY (read access) Only the specified SNMP hosts can perform read operations on the fabric. ■ WSNMP_POLICY (write access) Only the specified SNMP hosts can perform write operations to the fabric. Any host granted write permission by the WSNMP policy is automatically granted read permission by the RSNMP policy. Note: Once an SNMP policy is created, it must contain all members of the FCS policy, to ensure consistent read/write access to the Primary FCS switch. Table 4 lists the expected read and write behaviors resulting from combinations of the RSNMP and WSNMP policies. Table 4: Read and Write Behaviors of SNMP Policies RSNMP Policy Non-existent Non-existent Non-existent WSNMP Policy Non-existent Empty Host B in policy Read Result Any host can read Any host can read Any host can read Write Result Any host can write No host can write Only B can write 60 Secure Fabric OS Version 1.0 User Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
Creating Secure Fabric OS Policies
60
Secure Fabric OS Version 1.0 User Guide
Note:
Providing fabric access to proxy servers is strongly discouraged. When a proxy
server is included in a MAC policy for IP-based management, such as the
HTTP_POLICY, all IP packets leaving the proxy server appear to originate from the
proxy server. This could result in allowing any hosts that have access to the proxy server
to access the fabric.
By default, all access is allowed; no MAC policies exist until they are created by
the administrator.
Creating an SNMP Policy
You can create read and write SNMP policies to specify which SNMP hosts are
allowed read and write access to the fabric. The SNMP hosts must be identified by
IP address.
■
RSNMP_POLICY (read access)
Only the specified SNMP hosts can perform read operations on the fabric.
■
WSNMP_POLICY (write access)
Only the specified SNMP hosts can perform write operations to the fabric.
Any host granted write permission by the WSNMP policy is automatically granted
read permission by the RSNMP policy.
Note:
Once an SNMP policy is created, it must contain all members of the FCS policy,
to ensure consistent read/write access to the Primary FCS switch.
Table 4
lists the expected read and write behaviors resulting from combinations of
the RSNMP and WSNMP policies.
Table 4:
Read and Write Behaviors of SNMP Policies
RSNMP Policy
WSNMP
Policy
Read Result
Write Result
Non-existent
Non-existent
Any host can read
Any host can write
Non-existent
Empty
Any host can read
No host can write
Non-existent
Host B in policy
Any host can read
Only B can write