Cisco N5010P-N2K-BE, Software Configuration Manual

Page: 629 / 704

S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
45-13
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 45 Configuring Port Security
Port Security Configuration Distribution
Locking the Fabric
The first action that modifies the existing configuration creates the pending database and locks the
feature in the VSAN. Once you lock the fabric, the following situations apply:
•
No other user can make any configuration changes to this feature.
• A copy of the configuration database becomes the pending database.
Committing the Changes
If you commit the changes made to the configurations, the configurations in the pending database are
distributed to other switches. On a successful commit, the configuration change is applied throughout
the fabric and the lock is released.
To commit the port security configuration changes for the specified VSAN, perform this task:
Discarding the Changes
If you discard (abort) the changes made to the pending database, the configuration remains unaffected
and the lock is released.
To discard the port security configuration changes for the specified VSAN, perform this task:
Activation and Auto-Learning Configuration Distribution
Activation and auto-learning configurations in distributed mode are remembered as actions to be
performed when you commit the changes in the pending database.
Learned entries are temporary and do not have any role in determining if a login is authorized or not. As
such, learned entries do not participate in distribution. When you disable learning and commit the
changes in the pending database, the learned entries become static entries in the active database and are
distributed to all switches in the fabric. After the commit, the active database on all switches are identical
and learning can be disabled.
Command Purpose
Step 1
switch# configuration terminal
switch(config)#
Enters configuration mode.
Step 2
switch(config)# port-security commit vsan
vsan-id
Commits the port security changes in the specified
VSAN.
Command Purpose
Step 1
switch# configuration terminal
switch(config)#
Enters configuration mode.
Step 2
switch(config)# port-security abort vsan
vsan-id
Discards the port security changes in the specified
VSAN and clears the pending configuration
database.