HP A7533A - Brocade 4Gb SAN Switch Base, Administrator'S Manual

Page: 129 / 576

Fabric OS 6.2 administrator guide 127
3. Save and activate the policy deletion by entering the
secPolicyActivate
command.
switch:admin> secpolicydelete "DCC_POLICY_010"
About to delete policy Finance_Policy.
Are you sure (yes, y, no, n):[no] y
Finance_Policy has been deleted.
Member modification to existing policies
You can add and members to and remove members from the ACL policies by using the
secPolicyAdd
command. As soon as a policy has been activated, it is enforced in the aspect of the fabric managed by
that policy.
Adding a member to an existing ACL policy
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the
secPolicyAdd “ policy_name ”, “ member;...;member ”
command.
where
policy_name
is the name of the ACL policy
member
is the item to be added to the policy as identified by IP address, switch domain ID, device or
switch WWN, or switch name.
3. To implement the change immediately, enter the
secPolicyActivate
command.
For example, to add a member to the SCC_POLICY using the switch WWN:
switch:admin> secpolicyadd "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been added to SCC_POLICY.
To add two devices to the DCC policy, and to attach domain 3 ports 1 and 3 (WWNs of devices are
11:22:33:44:55:66:77:aa and 11:22:33:44:55:66:77:bb):
switch:admin> secpolicyadd "DCC_POLICY_abc",
"11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3(1,3)"
Removing a member from an ACL policy
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the
secPolicyRemove “ policy_name ”, “ member ; ... ; member ”
command.
where
policy_name
is the name of the ACL policy
member
is the device or switch to be removed from the policy, identified by IP address, switch domain
ID, device or switch WWN, or switch name.
3. To implement the change immediately, enter the
secPolicyActivate
command.
For example, to remove a member that has a WWN of 12:24:45:10:0a:67:00:40 from the
SCC_POLICY:
switch:admin> secpolicyremove "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been removed from SCC_POLICY.
Aborting all unsaved changes
Use the
secPolicyAbort
command to abort all ACL policy changes that have not yet been saved.
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the
secPolicyAbort
command:
switch:admin> secpolicyabort
Unsaved data has been aborted.
All changes since the last time the
secPolicySave
or
secPolicyActivate
commands were
entered are aborted.
Authentication policy for fabric elements
By default, Fabric OS 6.1.0 and later use DH-CHAP or FCAP protocols for authentication. These protocols
use shared secrets and digital certificates, based on switch WWN and public key infrastructure (PKI)
technology, to authenticate switches. Authentication automatically defaults to FCAP if both switches are