8/20q Fibre Channel Switch command line interface guide
95
Configuring the security database
You can configure how the security database is applied to the switch and exchanged with the fabric
through the security configuration parameters. The following security configuration parameters are
available through the
set config security
command:
•
AutoSave
—This parameter enables or disables the saving of changes to active security set in the
switch’s non-volatile security database.
•
FabricBindingEnabled
—This parameter enables or disables the configuration and enforcement of
fabric binding on all switches in the fabric. Fabric binding associates switch worldwide names with a
domain ID in the creation of ISL groups.
If
AutoSave
is False, you can reverse device security changes that have been received from another
switch through the activation of a security set or the merging of fabrics. To replace the volatile security
database with the contents of the non-volatile security database, enter the
security restore
command.
To restore the security configuration to its factory values, you can enter the
reset config
or
reset factory
command. Notice however, that these commands restore other aspects of the switch
configuration as well.
To modify the security configuration, you must open an Admin session with the
admin start
command.
An Admin session prevents other accounts from making changes at the same time either through Telnet,
QuickTools, or Simple SAN Connection Manager. In addition, you must open a Config Edit session with
the
config edit
command and indicate which configuration you want to modify. If you do not specify a
configuration name, the active configuration is assumed. The Config Edit session provides access to the
set config security
command, as shown in the following example:
8/20q FC Switch #> admin start
8/20q FC Switch (admin) #> config edit
8/20q FC Switch (admin-config) #> set config security
A list of attributes with formatting and current values will follow.
Enter a new value or simply press the ENTER key to accept the current value.
If you wish to terminate this process before reaching the end of the list
press 'q' or 'Q' and the ENTER key to do so.
FabricBindingEnabled (True / False) [False]
AutoSave (True / False) [True ]
Finished configuring attributes.
This configuration must be saved (see config save command) and
activated (see config activate command) before it can take effect.
To discard this configuration use the config cancel command.
8/20q FC Switch (admin-config)#> config save
8/20q FC Switch (admin)#> config activate
8/20q FC Switch (admin)#> admin end
Содержание 8/20q
Страница 14: ...14 About this guide ...
Страница 20: ...20 Command line interface usage ...
Страница 24: ...24 User account configuration ...
Страница 38: ...38 Network configuration ...
Страница 90: ...90 Connection security configuration ...
Страница 100: ...100 Device security configuration ...
Страница 104: ...104 RADIUS server configuration ...
Страница 110: ...110 Event log configuration ...
Страница 130: ...130 Simple Network Management Protocol configuration ...
Страница 322: ...322 Command reference ...
Страница 332: ...332 Index ...