Dell PowerEdge M420 8/4 Gbps FC SAN Module Administrator's Guide - Page 47

Understanding Admin Domain restrictions, Using the command line interface

Page 47 highlights

Understanding Admin Domain restrictions B Understanding Admin Domain restrictions A subset of commands is subject to Admin Domain restrictions that may be in place. In order to execute an AD-restricted command on a switch or device, the switch or device must be part of a given Admin domain, and the user must be logged into that Admin Domain. Six Admin Domain types are supported, as defined in Table 9. TABLE 9 AD types AD Type Definition Allowed Allowed to execute in all ADs. PhysFabricOnly Allowed to execute only in AD255 context (and the user should own access to AD0-AD255 and have admin RBAC privilege). Disallowed Only allowed to execute in AD0 or AD255 context, not allowed in AD1-AD254 context. PortMember All control operations allowed only if the port or the local switch is part of the current AD. View access allowed if the device attached to the port is part of current AD. AD0Disallowed Allowed to execute only in AD255 and AD0 (if no ADs are configured). AD0Only Allowed to execute only in AD0 when ADs are not configured. Using the command line interface This appendix describes using the command line interface (accessed via Telnet, SSH, or serial console) to manage the Dell 8/4Gbps FC SAN Module. The command line interface (CLI) enables an administrator to monitor and manage the FC SAN Module from a standard workstation. Selected commands must be issued from a secure Telnet or SSH session, as indicated in the command description in this manual. Access is controlled by a switch-level password for each access level. The commands available through the CLI are based on the user's login role and the license keys used to unlock certain features. The documentation for each command includes a synopsis of its syntax, a description of command use, and a set of examples. The same information can be accessed by issuing help command for the module. This command displays the help page for the specified command. For example, to display the help page for ad, type: switch:admin> help ad Dell 8/4Gbps FC SAN Module Administrator's Guide 33 53-1001345-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86

Dell 8/4Gbps FC SAN Module Administrator’s Guide
33
53-1001345-01
Understanding Admin Domain restrictions
B
Understanding Admin Domain restrictions
A subset of commands is subject to Admin Domain restrictions that may be in place. In order to
execute an AD-restricted command on a switch or device, the switch or device must be part of a
given Admin domain, and the user must be logged into that Admin Domain.
Six Admin Domain types are supported, as defined in
Table 9
.
Using the command line interface
This appendix describes using the command line interface (accessed via Telnet, SSH, or serial
console) to manage the Dell 8/4Gbps FC SAN Module. The command line interface (CLI) enables
an administrator to monitor and manage the FC SAN Module from a standard workstation.
Selected commands must be issued from a secure Telnet or SSH session, as indicated in the
command description in this manual. Access is controlled by a switch-level password for each
access level. The commands available through the CLI are based on the user’s login role and the
license keys used to unlock certain features.
The documentation for each command includes a synopsis of its syntax, a description of command
use, and a set of examples. The same information can be accessed by issuing help command for
the module. This command displays the help page for the specified command. For example, to
display the help page for ad, type:
switch:admin>
help ad
TABLE 9
AD types
AD Type
Definition
Allowed
Allowed to execute in all ADs.
PhysFabricOnly
Allowed to execute only in AD255 context (and the user
should own access to AD0-AD255 and have admin RBAC
privilege).
Disallowed
Only allowed to execute in AD0 or AD255 context, not
allowed in AD1-AD254 context.
PortMember
All control operations allowed only if the port or the local
switch is part of the current AD. View access allowed if the
device attached to the port is part of current AD.
AD0Disallowed
Allowed to execute only in AD255 and AD0 (if no ADs are
configured).
AD0Only
Allowed to execute only in AD0 when ADs are not
configured.