Fabric OS 5.2.x administrator guide 143
Using Admin Domains
This section is for users and administrators and describes how you use Admin Domains. If you are a
physical fabric administrator and you want to create, modify, or otherwise manage Admin Domains, see
”
Managing admin domains
” on page 136.
The Admin Domain looks like a virtual switch or fabric to a user. However, based on the user role and type
(User_ID), users are presented with only their relevant AD-based views (see
Figure 2
and
Figure 3
). Any
devices and switch ports that are not defined as part of the Admin Domain are not shown and are not
available to that AD user.
Each Admin Domain can also have its own zone configurations (defined and effective) with zones and
aliases under them.
Using CLI commands in an AD context
The CLI command input arguments are validated against the AD member list; they do not work with input
arguments that specify resources that are not members of the current Admin Domain. All commands
present filtered output—showing only the members of the current Admin Domain.
For example,
switchShow
displays details for the list of AD members present in that switch.
•
Since all E_Ports and EX_Ports are shared across all Admin Domains, they are shown under all Admin
Domains.
•
Other ports are displayed without any attribute details (with an explanation that they are not part of the
your Admin Domain).
Table 40
A port or device appears in CLI command output or other management tool outputs if any one of
the conditions listed in is met:
RASlog and SYSlog output is not filtered based on AD membership.
See the
Fabric OS Command Reference Manual
for more detailed information about command syntax and
usage and to understand how existing commands behave in an AD context.
Executing a command in a different AD context
The
ad --exec
option executes a command in a different Admin Domain. The Admin Domain must be
one to which you can access. This option creates a new shell with the current user_id, switches to the
specified Admin Domain, performs the specified command, and exits out of the shell.
To execute a command in a different Admin Domain context
1.
Connect to the switch and log in.
2.
Enter the
ad --exec
command, specifying the Admin Domain and the command you want to
execute.
ad --exec
ad_id
"
command
"
The following example executes the
switchShow
command in the AD7 context.
Table 40
Ports and devices in CLI output
For
Condition
(Domain, Port)
•
The port is specified in the (domain, port) member list of the Admin
Domain.
•
One or more WWNs specified in the AD member list is attached to the
(domain, port).
Device WWN
•
The device WWN is specified in the AD WWN member list.
•
The device WWN is attached to one of the (domain, port) specified in the
AD member list.
sw5:AD255:admin>
ad --exec 7 "switchshow"
Summary of Contents for AE370A - Brocade 4Gb SAN Switch 4/12
Page 18: ...18 ...
Page 82: ...82 Managing user accounts ...
Page 102: ...102 Configuring standard security features ...
Page 126: ...126 Maintaining configurations ...
Page 198: ...198 Routing traffic ...
Page 238: ...238 Using the FC FC routing service ...
Page 260: ...260 Administering FICON fabrics ...
Page 280: ...280 Working with diagnostic features ...
Page 332: ...332 Administering Extended Fabrics ...
Page 414: ...398 Configuring the PID format ...
Page 420: ...404 Configuring interoperability mode ...
Page 426: ...410 Understanding legacy password behaviour ...
Page 442: ...426 ...
Page 444: ......
Page 447: ......