HP StorageWorks SN6000, Command Line Interface Manual

Page: 92 / 330

92 Device Security Configuration
Modifying the security database
To modify the security database:
1. Open an Admin session with the
admin start
command.
SN6000 FC Switch #> admin start
An Admin session prevents other accounts from making changes at the same time either through Telnet,
QuickTools, Enterprise Fabric Management Suite, or Simple SAN Connection Manager.
2. To open a Security Edit session, enter the
security edit
command. The Security Edit session
provides access to the
securityset
,
group
, and
security
commands used to make modifications
to the security database.
SN6000 FC Switch (admin) #> security edit
SN6000 FC Switch (admin-security)#> securityset . . .
SN6000 FC Switch (admin-security)#> group . . .
SN6000 FC Switch (admin-security)#> security . . .
3. When you finish making changes, take one of the following actions:
• To save the changes and close the Security Edit session, enter the
security save
command.
SN6000 FC Switch (admin-security)#> security save
• To close the Security Edit session without saving changes, enter the
security cancel
command.
SN6000 FC Switch (admin-security)#> security cancel
4. To activate the changes to the active security set, enter the
security activate
command.
SN6000 FC Switch (admin)#> security activate
5. To release the Admin session for other administrators, enter the
admin end
command.
SN6000 FC Switch (admin)#> admin end
Resetting the security database
There are two ways to remove all groups and security sets from the security database:
• Enter the
security clear
command, as shown in the following example:
SN6000 FC Switch (admin-security) #> security clear
All security information will be cleared. Please confirm (y/n): [n] y
SN6000 FC Switch (admin-security) #> security save
• Enter the
reset security
command, as shown in the following example.
SN6000 FC Switch (admin) #> reset security
The security configuration values,
Autosave
and
FabricBindingEnabled
, remain unchanged.
Managing security sets
All security set management tasks except Activating a security set , page 93 and Deactivating a security set ,
page 93 require a Security Edit session.
Creating a security set
To create a new security set, enter the
securityset create
command, as shown in the following
example:
SN6000 FC Switch (admin-security) #> securityset create securityset_1
Deleting a security set
To delete a security set, enter the
securityset delete
command, as shown in the following example:
SN6000 FC Switch (admin-security) #> securityset delete securityset_1
Renaming a security set
To rename a security set. enter the
securityset rename
command, as shown in the following
example:
SN6000 FC Switch (admin-security) #> securityset rename securityset_old
securityset_new