Dell Brocade G620 Brocade 8.0.1 Fabric OS Administratiors Guide - Page 223

Configuring Security Policies ∙ DCC policies cannot manage or restrict iSCSI connections, that is, an FC Initiator connection from an iSCSI gateway. ∙ You cannot manage proxy devices with DCC policies. Proxy devices are always granted full access, even if the DCC policy has an entry that restricts or limits access of a proxy device. Creating a DCC policy DCC policies must follow the naming convention "DCC_POLICY_nnn", where nnn represents a unique string. The maximum length is 30 characters, including the prefix DCC_POLICY_. Device ports must be specified by port WWN. Switch ports can be identified by the switch WWN, domain ID, or switch name followed by the port or area number. To specify an allowed connection, enter the device port WWN, a semicolon, and the switch port identification. The following methods of specifying an allowed connection are possible: ∙ deviceportWWN;switchWWN (port or area number) ∙ deviceportWWN;domainID (port or area number) ∙ deviceportWWN;switchname (port or area number) 1. Connect to the switch and log in using an account with admin permissions, or an account with OM permissions for the Security RBAC class of commands. 2. Enter the secPolicyCreate command, specifying the name of the DCC policy. secpolicycreate "DCC_POLICY_nnn " 3. To save or activate the new policy, enter the appropriate command: ∙ To save the policy, enter the secPolicySave command. ∙ To save and activate the policy, enter the secPolicyActivate command. If neither of these commands is entered, the changes are lost when the session is logged out. Brocade Fabric OS Administration Guide, 8.0.1 53-1004111-02 223