HP A7533A HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, Dece - Page 111

Overview of FCS policy management

Page 111 highlights

Table 26 Switch operations (continued) Allowed on FCS switches Allowed on all switches Any fabric-wide commands All zoning commands except the show commands All AD commands secPolicyAbort SNMP commands configupload Any local-switch commands Any AD command that does not affect fabric-wide configuration FCS enforcement does not apply to pre-5.3.0 switches; they will be able to initiate all operations. Overview of FCS policy management Whether your intention is to create new FCS policies or manage your current FCS policies, you must follow certain steps to ensure the domains throughout your fabric have the same policy. The local-switch WWN cannot be deleted from the FCS policy. 1. Set the pre-5.3.0 switches in the fabric to accept the FCS policy using the fddcfg --localaccept/localreject command. 2. Create the FCS policy using the secPolicyCreate command. 3. Activate the policy using the secPolicyActivate command. 4. If your switches are set to accept distribution of the policies, you can use the distribute -p command to either sent the policies to intended domains, or the wild card (*) character to send the policies to all switches. To fail over to a new Primary switch, use the secPolicyFCSMove command to change the order in which switches are listed in the FCS policy. To create an FCS policy: 1. Connect to the switch and log in using an account assigned to the admin role. 2. Issue the command secPolicyCreate "FCS_POLICY", "member;...;member". where member indicates a switch that is eligible to become a primary or back-up FCS switch. Specify switches by WWN, Domain ID, or switch name. Enter the wild card (*) character to indicate all the switches in the fabric. For example, to create an FCS policy that allows a switch with Domain ID 2 to become a primary FCS and domain id 4 to become a backup FCS: switch:admin> secpolicycreate "FCS_POLICY", "2;4" FCS_POLICY has been created To save or activate the new policy, issue either the secPolicySave or the secPolicyActivate command. Once the policy has been activated you can distribute the policy. NOTE: FCS policy should be consistent across the fabric. If the policy is inconsistent in the fabric, you will not be able to perform any fabric-wide configurations from the primary FCS. Modifying the Primary FCS To modify the order of FCS switches: 1. Log in to the primary FCS switch using an account assigned to the admin role. 2. Issue the command: secPolicyShow "Defined", "FCS_POLICY". This displays the WWNs of the current primary FCS switch and backup FCS switches. Fabric OS 6.1.1 administrator guide 111

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457
  • 458
  • 459
  • 460
  • 461
  • 462
  • 463
  • 464
  • 465
  • 466
  • 467
  • 468
  • 469
  • 470
  • 471
  • 472
  • 473
  • 474
  • 475
  • 476
  • 477
  • 478
  • 479
  • 480
  • 481
  • 482
  • 483
  • 484
  • 485
  • 486
  • 487
  • 488
  • 489
  • 490
  • 491
  • 492
  • 493
  • 494
  • 495
  • 496

Fabric OS 6.1.1 administrator guide
111
FCS enforcement does not apply to pre-5.3.0 switches; they will be able to initiate all operations.
Overview of FCS policy management
Whether your intention is to create new FCS policies or manage your current FCS policies, you must follow
certain steps to ensure the domains throughout your fabric have the same policy.
The local-switch WWN cannot be deleted from the FCS policy.
1.
Set the pre-5.3.0 switches in the fabric to accept the FCS policy using the
fddcfg
--
localaccept/localreject
command.
2.
Create the FCS policy using the
secPolicyCreate
command.
3.
Activate the policy using the
secPolicyActivate
command.
4.
If your switches are set to accept distribution of the policies, you can use the
distribute -p
command to either sent the policies to intended domains, or the wild card (*) character to send the
policies to all switches.
To fail over to a new Primary switch, use the
secPolicyFCSMove
command to change the order in
which switches are listed in the FCS policy.
To create an FCS policy:
1.
Connect to the switch and log in using an account assigned to the admin role.
2.
Issue the command
secPolicyCreate “FCS_POLICY”,
member
;
...
;
member
.
where
member
indicates a switch that is eligible to become a primary or back-up FCS switch. Specify
switches by WWN, Domain ID, or switch name. Enter the wild card (*) character to indicate all the
switches in the fabric.
For example, to create an FCS policy that allows a switch with Domain ID 2 to become a primary FCS
and domain id 4 to become a backup FCS:
switch:admin>
secpolicycreate "FCS_POLICY", "2;4"
FCS_POLICY has been created
To save or activate the new policy, issue either the
secPolicySave
or the
secPolicyActivate
command. Once the policy has been activated you can distribute the policy.
NOTE:
FCS policy should be consistent across the fabric. If the policy is inconsistent in the fabric, you will
not be able to perform any fabric-wide configurations from the primary FCS.
Modifying the Primary FCS
To modify the order of FCS switches:
1.
Log in to the primary FCS switch using an account assigned to the admin role.
2.
Issue the command:
secPolicyShow
“Defined”, “FCS_POLICY”.
This displays the WWNs of the current primary FCS switch and backup FCS switches.
Any fabric-wide commands
secPolicyAbort
All zoning commands except the show commands
SNMP commands
All AD commands
configupload
Any local-switch commands
Any AD command that does not affect fabric-wide
configuration
Table 26
Switch operations (continued)
Allowed on FCS switches
Allowed on all switches