Cisco DS-C9216I-K9, Руководство по настройке

Страница: 229 / 436

20-5
Cisco MDS 9000 Fabric Manager Switch Configuration Guide
OL-7753-01
Chapter 20 Configuring Port Security
About Auto-Learn
Authorization Scenario
Assuming that the port security feature is activated and the following conditions are specified in the
active database:
• A pWWN (P1) is allowed access through interface fc1/1 (F1)
•
A pWWN (P2) is allowed access through interface fc1/1 (F1)
•
A nWWN (N1) is allowed access through interface fc1/2 (F2)
•
Any WWN is allowed access through interface fc1/3 (F3)
• A nWWN (N3) is allowed access through any interface
•
A pWWN (P3) is allowed access through interface fc1/4 (F4)
• A sWWN (S1) is allowed access through interface fc1/10-13 (F10 to F13)
•
A pWWN (P10) is allowed access through interface fc1/11 (F11)
Table 20-2 summarizes the port security authorization results for this active database.
Configured or not
configured A switch port that
allows any device Permitted 5
Configured to login to
any switch port Any port on the switch Permitted 6
Not configured A port configured with
some other device Denied 7
Table 20-1 Auto-learn Device Authorization (continued)
Table 20-2 Authorization Results for Scenario
Scenario
Device
Connection
Request
Authorization Condition Reason
1 P1, N2, F1 Permitted 1 No conflict
2 P2, N2, F1 Permitted 1 No conflict
3 P3, N2, F1 Denied 2 F1 is bound to
P1/P2
4 P1, N3, F1 Permitted 6 Wildcard match
for N3
5 P1, N1, F3 Permitted 5 Wildcard match
for F3
6 P1, N4, F5 Denied 2 P1 is bound to F1
7 P5, N1, F5 Denied 2 N1 is only
allowed on F2
8 P3, N3, F4 Permitted 1 No conflict
9 S1, F10 Permitted 1 No conflict
10 S2, F11 Denied 7 P10 is bound to
F11