HP StorageWorks SN6000 HP StorageWorks 8/20q Fibre Channel Switch command line - Page 94
Modifying the security database, Managing security sets, Creating a security set
View all HP StorageWorks SN6000 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 94 highlights
Modifying the security database To modify the security database: 1. Open an Admin session with the admin start command. 8/20q FC Switch #> admin start An Admin session prevents other accounts from making changes at the same time either through Telnet, QuickTools, or Simple SAN Connection Manager. 2. To open a Security Edit session, enter the security edit command. The Security Edit session provides access to the securityset, group, and security commands used to make modifications to the security database. 8/20q FC Switch (admin) #> security edit 8/20q FC Switch (admin-security)#> securityset . . . 8/20q FC Switch (admin-security)#> group . . . 8/20q FC Switch (admin-security)#> security . . . 3. When you finish making changes, take one of the following actions: • To save the changes and close the Security Edit session, enter the security save command. 8/20q FC Switch (admin-security)#> security save • To close the Security Edit session without saving changes, enter the security cancel command. 8/20q FC Switch (admin-security)#> security cancel 4. To activate the changes to the active security set, enter the security activate command. 8/20q FC Switch (admin)#> security activate 5. To release the Admin session for other administrators, enter the admin end command. 8/20q FC Switch (admin)#> admin end Resetting the security database There are two ways to remove all groups and security sets from the security database: • Enter the security clear command, as shown in the following example: 8/20q FC Switch (admin-security) #> security clear All security information will be cleared. Please confirm (y/n): [n] y 8/20q FC Switch (admin-security) #> security save • Enter the reset security command, as shown in the following example. 8/20q FC Switch (admin) #> reset security The security configuration values, Autosave and FabricBindingEnabled, remain unchanged. Managing security sets Managing security sets consists of the following tasks: • Creating a security set, page 94 • Deleting a security set, page 95 • Renaming a security set, page 95 • Copying a security set, page 95 • Adding groups to a security set, page 95 • Removing groups from a security set, page 95 • Activating a security set, page 95 • Deactivating a security set, page 95 All of these tasks except Activating a security set, page 95 and Deactivating a security set, page 95 require a Security Edit session. Creating a security set To create a new security set, enter the securityset create command, as shown in the following example: 8/20q FC Switch (admin-security) #> securityset create securityset_1 94 Device security configuration