
162 Managing administrative domains
How to create a new physical fabric administrator user account
1.
Connect to the switch and log in as admin.
2.
Enter the
userconfig --add
command using the
-r
option to set the role to admin and the
-a
option to provide access to Admin Domains 0 through 255.
userconfig --add
username
-r
admin
-h
home_AD
-a "
0-255
"
where
username
is the name of the account and
home_AD
is the home Admin Domain.
The following example creates new user account pf_admin1 with an admin role, access to all Admin
Domains (AD0 through AD255), and home Admin Domain set to 255. This user account is now a
physical fabric administrator.
Activating and deactivating admin domains
An Admin Domain can be in either an active or inactive state. When you create an Admin Domain, it is
automatically in the active state.
If you deactivate an Admin Domain, the members assigned to the Admin Domain can no longer access
their hosts or storage unless those members are part of another Admin Domain.
You cannot log in to an Admin Domain that has been deactivated. You must activate an Admin Domain
before you can log in to it.
How to activate an Admin Domain
1.
Connect to the switch and log in as
admin
.
2.
Switch to the AD255 context, if you are not already in that context.
ad --select 255
3.
Enter the
ad --activate
option. The activate option prompts for confirmation.
On default, after the Admin Domain is activated, the devices specified under that AD are not able to
see each other until they are zoned together.
4.
To end the transaction now, enter
ad --save
to save the Admin Domain definition or enter
ad
--apply
to save the Admin Domain definition and directly apply the definitions to the fabric.
The following example activates Admin Domain AD_B5.
How to deactivate an Admin Domain
1.
Connect to the switch and log in as
admin
.
2.
Disable the zone configuration under the Admin Domain you want to deactivate.
3.
Switch to the AD255 context, if you are not already in that context.
ad --select 255
4.
Enter the
ad --deactivate
option.
The
ad --deactivate
option prompts for confirmation.
5.
To end the transaction now, enter
ad --save
to save the Admin Domain definition or enter
ad
--apply
to save the Admin Domain definition and directly apply the definitions to the fabric.
All active user sessions associated with the Admin Domain are terminated. The deactivate option does
not disable ports.
The following example deactivates Admin Domain AD_B4.
sw5:admin>
userconfig --add pf_admin1 -r admin -h 255 -a "0-255"
sw5:AD255:admin>
ad --activate AD_B5
You are about to activate a new admin domain.
Do you want to activate ’AD_B5’ admin domain (yes, y, no, n): [no]:
y
sw5:AD255:admin>
sw5:AD255:admin>
ad --deactivate AD_B4
You are about to deactivate an AD.
This operation will fail if an effective zone configuration exists in the AD
Do you want to deactivate ’AD_B5’ admin domain (yes, y, no, n): [no]
y
sw5:AD255:admin>
Summary of Contents for AA979A - StorageWorks SAN Switch 2/8V
Page 1: ...HP StorageWorks Fabric OS 5 3 x administrator guide Part number 5697 0244 November 2009 ...
Page 16: ...16 ...
Page 20: ...18 ...
Page 24: ...24 Introducing Fabric OS CLI procedures ...
Page 116: ...118 Maintaining configurations ...
Page 170: ...172 Managing administrative domains ...
Page 200: ...202 Installing and maintaining firmware ...
Page 222: ...224 Routing traffic ...
Page 274: ...286 Administering FICON fabrics ...
Page 294: ...306 Working with diagnostic features ...
Page 350: ...362 Administering Extended Fabrics ...
Page 438: ...440 Configuring the PID format ...
Page 444: ...446 Configuring McData Open Fabric mode ...
Page 450: ...452 Understanding legacy password behaviour ...