HP AE370A HP StorageWorks Fabric OS 6.x administrator guide (5697-0015, May 20 - Page 108
Saving changes to ACL policies, Activating changes to ACL policies, Adding a member to an existing
UPC - 882780362611
View all HP AE370A manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 108 highlights
For example, to create an SCC policy that allows switches that have Domain IDs 2 and 4 to join the fabric: switch:admin> secpolicycreate "SCC_POLICY", "2;4" SCC_POLICY has been created 3. To save or activate the new policy, enter either the secPolicySave or the secPolicyActivate command. If neither of these commands is entered, the changes are lost when the session is logged out. For more information about these commands, see "Saving changes to ACL policies" on page 108 and "Activating changes to ACL policies" on page 108. Saving changes to ACL policies You can save changes to ACL policies without activating them by entering the secPolicySave command. This saves the changes to the defined policy set. Until the secPolicySave or secPolicyActivate command is issued, all policy changes are in volatile memory only and are lost if the switch reboots or the current session is logged out. To save changes without activating the policies: 1. Connect to the switch and log in using an account assigned to the admin role. 2. Type the secPolicySave command. switch:admin> secpolicysave Activating changes to ACL policies Implement changes to the ACL policies using the secPolicyActivate command. This saves the changes to the active policy set and activates all policy changes since the last time the command was issued. You cannot activate policies on an individual basis; all changes to the entire policy set are activated by the command. Until a secPolicySave or secPolicyActivate command is issued, all policy changes are in volatile memory only and are lost upon rebooting. To activate changes: 1. Connect to the switch and log in using an account assigned to the admin role. 2. Type the secPolicyActivate command: switch:admin> secpolicyactivate About to overwrite the current Active data. ARE YOU SURE (yes, y, no, n): [no] y Adding a member to an existing policy Add members to the ACL policies by using the secPolicyAdd command. As soon as a policy has been activated, the aspect of the fabric managed by that policy is enforced. To add a member to an existing ACL policy: 1. Connect to the switch and log in using an account assigned to the admin role. 2. Type secPolicyAdd "policy_name", "member;...;member". where policy_name is the name of the ACL policy, member is the item to be added to the policy as identified by IP address, switch Domain ID, device or switch WWN, or switch name. 3. To implement the change immediately, enter the secPolicyActivate command. For example, to add a member to the SCC_POLICY using the switch WWN: switch:admin> secpolicyadd "SCC_POLICY", "12:24:45:10:0a:67:00:40" Member(s) have been added to SCC_POLICY. To add two devices to the DCC policy, and to attach domain 3 ports 1 and 3 (WWNs of devices are 11:22:33:44:55:66:77:aa and 11:22:33:44:55:66:77:bb): switch:admin> secpolicyadd "DCC_POLICY_abc", "11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3(1,3)" 108 Configuring advanced security features