HP AA979A - StorageWorks SAN Switch 2/8V, Administrator'S Manual, Page: 126 / 465

128 Configuring advanced security
Saving changes to ACL policies
You can save changes to ACL policies without activating them by entering the
secPolicySave
command. This saves the changes to the defined policy set. Until the
secPolicySave
or
secPolicyActivate
command is issued, all policy changes are in volatile memory only and are lost if
the switch reboots or the current session is logged out.
To save changes without activating the policies
1. Connect to the switch and log in.
2. Type the
secPolicySave
command.
switch:admin> secpolicysave
Activating changes to ACL policies
Implement changes to the ACL policies using the
secPolicyActivate
command. This saves the
changes to the active policy set and activates all policy changes since the last time the command was
issued. You cannot activate policies on an individual basis; all changes to the entire policy set are
activated by the command. Until a
secPolicySave
or
secPolicyActivate
command is issued, all
policy changes are in volatile memory only and are lost upon rebooting.
To activate changes
1. Connect to the switch and log in.
2. Type the
secPolicyActivate
command:
switch:admin> secpolicyactivate
About to overwrite the current Active data.
ARE YOU SURE (yes, y, no, n): [no] y
Adding a member to an existing policy
Add members to the ACL policies by using the
secPolicyAdd
command. As soon as a policy has been
activated, the aspect of the fabric managed by that policy is enforced.
To add a member to an existing ACL policy
1. Connect to the switch and log in.
2. Type
secPolicyAdd
“
policy_name
”, “
member;...;member
”.
where policy_name is the name of the ACL policy, member is the item to be added to the policy as
identified by IP address, switch domain ID, device or switch WWN, or switch name.
3. To implement the change immediately, enter the
secPolicyActivate
command.
For example, to add a member to the SCC_POLICY using the switch WWN:
switch:admin> secpolicyadd "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been added to SCC_POLICY.
To add two devices to the DCC policy, and to attach domain 3 ports 1 and 3 (WWNs of devices are
11:22:33:44:55:66:77:aa and 11:22:33:44:55:66:77:bb):
switch:admin> secpolicyadd "DCC_POLICY_abc",
"11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3(1,3)"