Fabric OS 5.2.x administrator guide 109
To activate changes
1.
Connect to the switch and log in.
2.
Type the
secPolicyActivate
command:
Adding a member to an existing policy
Add members to the ACL policies by using the
secPolicyAdd
command. As soon as a policy has been
activated, the aspect of the fabric managed by that policy is enforced.
To add a member to an existing ACL policy
1.
Connect to the switch and log in.
2.
Type
secPolicyAdd
“
policy_name
”, “
member;...;member
”
.
where
policy_name
is the name of the ACL policy,
member
is the item to be added to the policy as
identified by IP address, switch domain ID, device or switch WWN, or switch name.
3.
To implement the change immediately, enter the
secPolicyActivate
command.
For example, to add a member to the SCC_POLICY using the switch WWN:
To add two devices to the DCC policy, and to attach domain 3 ports 1 and 3 (WWNs of devices are
11:22:33:44:55:66:77:aa and 11:22:33:44:55:66:77:bb):
Removing a member from a policy
To remove a member from an ACL policy
1.
Connect to the switch and log in.
2.
Type
secPolicyRemove
“
policy_name
”, “
member
;
...
;
member
”
.
where
policy_name
is the name of the ACL policy.
member
is the device or switch to be removed from
the policy, identified by IP address, switch domain ID, device or switch WWN, or switch name.
3.
To implement the change immediately, enter the
secPolicyActivate
command.
For example, to remove a member that has a WWN of 12:24:45:10:0a:67:00:40 from SCC_POLICY:
Deleting a policy
To delete an ACL policy
1.
Connect to the switch and log in.
2.
Type
secPolicyDelete
“
policy_name
”
.
where
policy_name
is the name of the ACL policy.
3.
To implement the change immediately, enter the
secPolicyActivate
command.
switch:admin>
secpolicyactivate
About to overwrite the current Active data.
ARE YOU SURE (yes, y, no, n): [no]
y
switch:admin>
secpolicyadd "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been added to SCC_POLICY.
switch:admin>
secpolicyadd "DCC_POLICY_abc",
"11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3(1,3)"
switch:admin>
secpolicyremove "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been removed from SCC_POLICY.
switch:admin>
secpolicydelete "DCC_POLICY_ALL"
About to delete policy Finance_Policy.
Are you sure (yes, y, no, n):[no]
y
Finance_Policy has been deleted.
Summary of Contents for AE370A - Brocade 4Gb SAN Switch 4/12
Page 18: ...18 ...
Page 82: ...82 Managing user accounts ...
Page 102: ...102 Configuring standard security features ...
Page 126: ...126 Maintaining configurations ...
Page 198: ...198 Routing traffic ...
Page 238: ...238 Using the FC FC routing service ...
Page 260: ...260 Administering FICON fabrics ...
Page 280: ...280 Working with diagnostic features ...
Page 332: ...332 Administering Extended Fabrics ...
Page 414: ...398 Configuring the PID format ...
Page 420: ...404 Configuring interoperability mode ...
Page 426: ...410 Understanding legacy password behaviour ...
Page 442: ...426 ...
Page 444: ......
Page 447: ......