Dell Brocade G620 Brocade 8.0.1 Fabric OS Administratiors Guide - Page 221

Configuring Security Policies The following example moves a backup FCS switch from position 2 to position 3 in the FCS list, using interactive mode: primaryfcs:admin> secpolicyfcsmove Pos Primary WWN DId swName. 1 Yes 10:00:00:60:69:10:02:18 1 switch5. 2 No 10:00:00:60:69:00:00:5a 2 switch60. 3 No 10:00:00:60:69:00:00:13 3 switch73. Please enter position you'd like to move from : (1..3) [1] 2 Please enter position you'd like to move to : (1..3) [1] 3 DEFINED POLICY SET FCS_POLICY Pos Primary WWN DId swName 1 Yes 10:00:00:60:69:10:02:18 1 switch5. 2 No 10:00:00:60:69:00:00:13 3 switch73. 3 No 10:00:00:60:69:00:00:5a 2 switch60. 4. Enter the secPolicyActivate command to activate and save the new order. FCS policy distribution The FCS policy can be automatically distributed using the fddCfg --fabwideset command or it can be manually distributed to the switches using the distribute -p command. Each switch that receives the FCS policy must be configured to receive the policy. To configure the switch to accept distribution of the FCS policy, refer to Database distribution settings on page 243. Database distributions may be initiated from only the Primary FCS switch. FCS policy configuration and management is performed using the command line or a manageability interface. Only the Primary FCS switch is allowed to distribute the database. The FCS policy can be manually distributed across the fabric using the distribute -p command. Since this policy is distributed manually, the command fddCfg --fabwideset is used to distribute a fabricwide consistency policy for FCS policy in an environment consisting of only Fabric OS v6.2.0 and later switches. FCS enforcement for the distribute command is handled differently for FCS and other databases in an FCS fabric: ∙ For an FCS database, the enforcement allows any switch to initiate the distribution. This is to support FCS policy creation specifying a remote switch as Primary. ∙ For other database distributions, only the Primary FCS switch can initiate the distribution. The FCS policy distribution is allowed to be distributed from a switch in the FCS list. However, if none of the FCS switches in the existing FCS list are reachable, receiving switches accept distribution from any switch in the fabric. To learn more about how to distribute policies, refer to ACL policy distribution to other switches on page 244. Local switch configuration parameters are needed to control whether a switch accepts or rejects distributions of FCS policy and whether the switch is allowed to initiate distribution of an FCS policy. A configuration parameter controls whether the distribution of the policy is accepted or rejected on the local switch. Setting the configuration parameter to accept indicates distribution of the policy will be accepted and distribution may be initiated using the distribute -p command. Setting the configuration parameter to reject indicates the policy distribution is rejected and the switch may not distribute the policy. The default value for the distribution configuration parameter is accept, which means the switch accepts all database distributions and is able to initiate a distribute operation for all databases. TABLE 41 Distribution policy states Fabric OS v6.2.0 and later configured to accept State Target switch accepts distribution and fabric state change occurs. Brocade Fabric OS Administration Guide, 8.0.1 53-1004111-02 221