HP StorageWorks MSA 2/8 HP StorageWorks Secure Fabric OS V1.0 User Guide (AA-R - Page 65

API Policy, Table 7: API Policy States, is API_POLICY.

Get HP StorageWorks MSA 2/8 - SAN Switch PDF manuals and user guides View all HP StorageWorks MSA 2/8 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 65 highlights

Creating Secure Fabric OS Policies Example, creating an HTTP policy to allow anyone on a network "192.168.5.0/24" to establish an HTTP connection to any switch in the fabric: primaryfcs:admin> secPolicyCreate "HTTP_POLICY", "192.168.5.0" HTTP_POLICY has been created. primaryfcs:admin> API Policy The API policy can be used to specify which workstations can use API to access the fabric and to limit write access to the Primary FCS. The policy is named API_POLICY and contains a list of the IP addresses that are allowed to establish an API connection to switches in the fabric. The possible API policy states are shown in Table 7. Table 7: API Policy States Policy State No policy Policy with no entries Policy with entries Characteristics All workstations can establish an API connection to any switch in the fabric. No host can establish an API connection to any switch in the fabric. Only specified hosts can establish an API connection to any switch in the fabric, and write operations can only be performed on the Primary FCS switch. To create an API policy: 1. From a sectelnet or SSH session, log into the Primary FCS switch as Admin. 2. Enter the following: secpolicycreate policy_name, "member;...;member" Where: ■ policy_name is API_POLICY. ■ member is one or more IP addresses in dot-decimal notation. You can enter "0" in an octet to indicate that any number can be matched in that octet. Secure Fabric OS Version 1.0 User Guide 65

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
Creating Secure Fabric OS Policies
65
Secure Fabric OS Version 1.0 User Guide
Example, creating an HTTP policy to allow anyone on a network
“192.168.5.0/24” to establish an HTTP connection to any switch in the fabric:
API Policy
The API policy can be used to specify which workstations can use API to access
the fabric and to limit write access to the Primary FCS.
The policy is named API_POLICY and contains a list of the IP addresses that are
allowed to establish an API connection to switches in the fabric.
The possible API policy states are shown in
Table 7
.
To create an API policy:
1.
From a sectelnet or SSH session, log into the Primary FCS switch as Admin.
2.
Enter the following:
secpolicycreate
policy_name, “member;...;member”
Where:
■
policy_name
is API_POLICY.
■
member
is one or more IP addresses in dot-decimal notation. You can
enter “0” in an octet to indicate that any number can be matched in that
octet.
primaryfcs:admin> secPolicyCreate "HTTP_POLICY", "192.168.5.0"
HTTP_POLICY has been created.
primaryfcs:admin>
Table 7:
API Policy States
Policy State
Characteristics
No policy
All workstations can establish an API connection to any
switch in the fabric.
Policy with no entries
No host can establish an API connection to any switch in the
fabric.
Policy with entries
Only specified hosts can establish an API connection to any
switch in the fabric, and write operations can only be
performed on the Primary FCS switch.