Cisco SFS7000P-SK9 Command Reference - Page 137

Chapter 3 Fibre Channel Commands fc srp-global lun-policy restricted fc srp-global lun-policy restricted Enable LUN masking on all new ITs and ITLs, with the fc srp-global lun-policy restricted command in Global Configuration mode. Disable default LUN masking with the no form of the command. fc srp-global lun-policy restricted no fc srp-global lun-policy restricted Syntax Description This command has no arguments or keywords. Command Modes Global Configuration (config) mode. Usage Guidelines Platform Availability: Cisco SFS 3001, Cisco SFS 3012 Privilege Level: Unrestricted read-write user or Fibre Channel read-write user. Enable global LUN masking to deny LUN access to new initiators so that they cannot communicate with SAN nodes until you grant them access on an individual basis. Disable LUN masking to grant new ITLs immediate access to all LUNs. Note An initiator requires both port and LUN access before it can successfully access a LUN. To grant port access, use the fc srp-global gateway-portmask-policy restricted, fc srp it and fc srp itl commands. Note Policies only apply to ITs and ITLs that you create after you configure the policies. Examples The following example denies all new initiators access to all LUNs: SFS-7000P(config)# fc srp-global lun-policy restricted Defaults Restricted. OL-9163-02 Cisco SFS 7000 Series Product Family Command Reference Guide 3-23