HP StorageWorks 4/256 HP StorageWorks Fabric OS 5.2.x administrator guide (569 - Page 110
Aborting all uncommitted changes, Distributing the policy database
View all HP StorageWorks 4/256 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 110 highlights
Aborting all uncommitted changes Use the secPolicyAbort command to abort all ACL policy changes that have not yet been saved. To abort all unsaved changes 1. Connect to the switch and log in. 2. Type the secPolicyAbort command: switch:admin> secpolicyabort Unsaved data has been aborted. All changes since the last time the secPolicySave or secPolicyActivate commands were entered are aborted. Distributing the policy database Fabric OS lets you manage and enforce the ACL policy database on either a per-switch or fabric-wide basis. The local switch distribution setting and the fabric-wide consistency policy affect the switch's ACL policy database and related distribution behavior. The ACL policy database is managed as follows: • Switch database distribution setting-Controls whether or not the switch accepts or rejects databases distributed from other switches in the fabric. The distribution command sends the database from one switch to another, overwriting the target switches database with the distributed one. To send or receive a database the setting must be accept. For configuration instructions, see "Configuring the database distribution settings" on page 111. • Manually distribute an ACL policy database-Run the distribute command to push the local database of the specified policy type to target switches. "Distributing ACL policies to other switches" on page 112 • Fabric-wide consistency policy-Use to ensure that switches in the fabric enforce the same policies. Set a strict or tolerant fabric-wide consistency policy for each ACL policy type to automatically distribute that database when a policy change is activated. If a fabric-wide consistency policy is not set, then the policies are managed on per switch basis. For configuration instructions, see"Setting the consistency policy fabric-wide" on page 113 Table 27 explains the how the local database distribution settings and the fabric-wide consistency policy affect the local database when the switch is the target of a distribution command. Table 27 Interaction between fabric-wide consistency policy and distribution settings Distribution setting Reject Accept (default) Fabric-wide consistency policy Absent (default) Tolerant Database is protected, it cannot be overwritten. Might not match other databases in the fabric. Invalid configuration.1 Database is not protected, the database can be overwritten. If the switch initiating a distribute command has a strict or tolerant fabric-wide consistency policy, the fabric-wide policy is also overwritten. Might not match other databases in the fabric. Database is not protected. Automatically distributes activated changes to other 55.20 switches in fabric. Allows switches running Fabric OS 5.1.x and earlier in fabric. Might not match other databases in the fabric. Strict Invalid configuration.a Database is not protected. Automatically distributes activated changes to all switches in the fabric. Fabric can only contain switches running Fabric OS 5.2.x or higher. Active database is the same for all switches in fabric. 110 Configuring advanced security