Fabric OS 5.2.x administrator guide 115
disabled. If the strict SCC and DCC fabric-wide consistency policies match, the corresponding SCC and
DCC ACL policies are compared.
The enforcement of fabric-wide consistency policy involves comparison of only the Active policy set.If the
ACL polices match, the switch joins the fabric successfully. If the ACL policies are absent either on the
switch or on the fabric, the switch joins the fabric successfully, and the ACL policies are copied
automatically from where they are present to where they are absent. The Active policy set where it is
present overwrites the Active and Defined policy set where it is absent. If the ACL policies do not match, the
switch cannot join the fabric and the neighboring E_ports will be disabled.
Use the
fddcfg –fabwideset
command on either this switch or the fabric to set a matching strict SCC
or DCC fabric-wide consistency policy. Use ACL policy commands to delete the conflicting ACL policy from
one side to resolve ACL policy conflict. If neither the fabric nor the joining switch is configured with a
fabric-wide consistency policy, there are no ACL merge checks required.
The descriptions above also applies to joining two fabrics. In this context, the joining switch in the above
descriptions becomes a joining fabric.
NOTE:
The existing SCC policy in the adjacent or joining switch are enforced before the fabric-wide
consistency policy is applied.
The next sections describe the interaction between the databases with active SCC and DCC policies and
combinations of fabric-wide consistency policy settings when fabrics are merged.
Matching fabric-wide consistency policies
For example: Fabric A with SCC:S;DCC (strict SCC and tolerant DCC) joins Fabric B with SCC:S;DCC
(strict SCC and tolerant DCC), the fabrics can merge as long as the SCC policies match (both are strict).
Table 31
describes the impact of merging fabrics with the same fabric-wide consistency policy that have
SCC and/or DCC policies.
Table 31
Merging fabrics with matching fabric-wide consistency policies
Fabric-wide
consistency policy
Fabric A
ACL policies
Fabric B
ACL policies
Merge
results
Database copied
None
None
None
Succeeds
No ACL policies copied.
None
SCC/DCC
Succeeds
No ACL policies copied.
Tolerant
None
None
Succeeds
No ACL policies copied.
None
SCC/DCC
Succeeds
ACL policies are copied
from B to A.
SCC/DCC
SCC/DCC
Succeeds
If A and B policies don't
match, a warning
displays and policy
commands are
disabled
1
.
1.
To resolve the policy conflict, manually distribute the database you want to use to the switch with
the mismatched database. Until the conflict is resolved commands such as fddcfg --fabwideset and
secpolicy activate are blocked.
Strict
None
None
Succeeds
No ACL policies copied.
None
SCC/DCC
Succeeds
ACL policies are copied
from B to A.
Matching
SCC/DCC
Matching
SCC/DCC
Succeeds
No ACL policies copied.
Different
SCC/DCC
policies
Different
SCC/DCC
policies
Fails
Ports are disabled.
Summary of Contents for AE370A - Brocade 4Gb SAN Switch 4/12
Page 18: ...18 ...
Page 82: ...82 Managing user accounts ...
Page 102: ...102 Configuring standard security features ...
Page 126: ...126 Maintaining configurations ...
Page 198: ...198 Routing traffic ...
Page 238: ...238 Using the FC FC routing service ...
Page 260: ...260 Administering FICON fabrics ...
Page 280: ...280 Working with diagnostic features ...
Page 332: ...332 Administering Extended Fabrics ...
Page 414: ...398 Configuring the PID format ...
Page 420: ...404 Configuring interoperability mode ...
Page 426: ...410 Understanding legacy password behaviour ...
Page 442: ...426 ...
Page 444: ......
Page 447: ......