HP 8/20q, Руководство CLI

Страница: 96 / 332

96 Device security configuration
Modifying the security database
To modify the security database:
1. Open an Admin session with the
admin start
command.
8/20q FC Switch #> admin start
An Admin session prevents other accounts from making changes at the same time either through Telnet,
QuickTools, or Simple SAN Connection Manager.
2. To open a Security Edit session, enter the
security edit
command. The Security Edit session
provides access to the
securityset
,
group
, and
security
commands used to make modifications
to the security database.
8/20q FC Switch (admin) #> security edit
8/20q FC Switch (admin-security)#> securityset . . .
8/20q FC Switch (admin-security)#> group . . .
8/20q FC Switch (admin-security)#> security . . .
3. When you finish making changes, take one of the following actions:
• To save the changes and close the Security Edit session, enter the
security save
command.
8/20q FC Switch (admin-security)#> security save
• To close the Security Edit session without saving changes, enter the
security cancel
command.
8/20q FC Switch (admin-security)#> security cancel
4. To activate the changes to the active security set, enter the
security activate
command.
8/20q FC Switch (admin)#> security activate
5. To release the Admin session for other administrators, enter the
admin end
command.
8/20q FC Switch (admin)#> admin end
Resetting the security database
There are two ways to remove all groups and security sets from the security database:
• Enter the
security clear
command, as shown in the following example:
8/20q FC Switch (admin-security) #> security clear
All security information will be cleared. Please confirm (y/n): [n] y
8/20q FC Switch (admin-security) #> security save
• Enter the
reset security
command, as shown in the following example.
8/20q FC Switch (admin) #> reset security
The security configuration values,
Autosave
and
FabricBindingEnabled
, remain unchanged.
Managing security sets
Managing security sets consists of the following tasks:
• Creating a security set , page 96
• Deleting a security set , page 97
• Renaming a security set , page 97
• Copying a security set , page 97
• Adding groups to a security set , page 97
• Removing groups from a security set , page 97
• Activating a security set , page 97
• Deactivating a security set , page 97
All of these tasks except Activating a security set , page 97 and Deactivating a security set , page 97
require a Security Edit session.
Creating a security set
To create a new security set, enter the
securityset create
command, as shown in the following
example:
8/20q FC Switch (admin-security) #> securityset create securityset_1