HP A7533A - Brocade 4Gb SAN Switch Base, Руководство администратора

Страница: 196 / 576

194 Managing administrative domains
Table 51 lists each Admin Domain user type and describes its administrative access and capabilities.
User-defined Administrative Domains
AD1 through AD254 are user-defined Admin Domains. These user-defined Admin Domains can be created
only by a physical fabric administrator (see ” Admin Domain access levels ” on page 193 for more
information).
In
Figure 20 on page 192, AD1 and AD2 are user-defined Admin Domains.
System-defined Administrative Domains
AD0 and AD255 are special, system-defined Admin Domains. When you install Fabric OS 6.1.0, the
switch enters AD-capable mode with domains AD0 and AD255 automatically created. AD0 and AD255
always exist and cannot be deleted or renamed. They are reserved for use in creation and management of
Admin Domains.
AD0
AD0 is a system-defined Admin Domain that contains all online devices, switch ports, and switches that are
not assigned to any user-defined Admin Domain. AD0 also contains members that you explicitly add
(similar to user-defined Admin Domains).
Unlike user-defined Admin Domains, AD0 has an implicit and an explicit membership list. User-defined
Admin Domains have explicit members only.
• The implicit membership list contains all devices, switch ports, and switches that have not been
assigned to any other Admin Domain.
Initially, the AD0 implicit membership list contains all devices, switch ports, and switches in the fabric.
This list includes all non-AD-capable switches and the devices attached to them. When you explicitly
create AD1 through AD254, the devices, switch ports, and switches used to create these user-defined
Admin Domains disappear from the AD0 implicit membership list.
• The explicit membership list contains all devices, switch ports, and switches that you explicitly add to
AD0 and that can be used to force device and switch sharing between AD0 and other Admin
Domains.
AD0 can be managed like any user-defined Admin Domain. The only difference between AD0 and
user-defined Admin Domains is the implicit membership list.
The list of implicit members of AD0 change dynamically as the membership of other Admin Domains
changes. The explicit members of AD0 are not deleted unless you explicitly remove them.
For example, if you explicitly add DeviceA to AD0 and it is not a member of any other Admin Domain,
DeviceA is both an implicit and an explicit member of AD0. If you add DeviceA to AD2, DeviceA is
deleted from the AD0 implicit membership list, but is not deleted from the AD0 explicit membership list. If
you then remove DeviceA from AD2, DeviceA is added back to the AD0 implicit membership list (assuming
DeviceA is not in any other Admin Domain).
Table 51 AD user types
User type Description
Physical fabric
administrator
User account with admin role and with access to all Admin Domains (AD0 through
AD255).
Creates and manages all Admin Domains.
Assigns other administrators or users to each Admin Domain.
Only a physical fabric administrator can create other physical fabric administrators.
Administrative
Domain user
Can be assigned to one or more Admin Domains.
Manages the resources within their Admin Domains.
If its role permits, can create user accounts and assign them to Admin Domains on their
list.
Cannot view other Admin Domain definitions. Can view only members of their own
Admin Domains.