S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
37-15
Cisco MDS 9000 Family CLI Configuration Guide
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Chapter 37 Configuring Port Security
Database Interaction
Note
You can overwrite the configuration database with the active database using the
port-security database
copy vsan
command. The
port-security database diff active vsa
n command in EXEC mode lists the
differences between the active database and the configuration database.
This section includes the following topics:
•
Database Scenarios, page 37-15
•
Port Security Database Copy, page 37-16
•
Port Security Database Deletion, page 37-17
•
Port Security Database Cleanup, page 37-17
Database Scenarios
Figure 37-1
depicts various scenarios to depict the active database and the configuration database status
based on port security configurations.
Figure 37-1
Port Security Database Scenarios
Once activated, all devices that have already
logged into the VSAN are also learned and added
to the active database.
Once activated, the configuration database can be
modified without any effect on the active
database.
You can overwrite the active database with the
configured database by activating the port
security database. Forcing an activation may
violate the entries already configured in the active
database.
You can overwrite the configuration database with
the active database.
Table 37-4
Active and Configuration Port Security Databases (continued)
Active Database
Configuration Database
