Zone Enforcement - Cisco Nexus 5000 Series Configuration Manual

Zone Sets
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2 zone set name zoneset-name vsan vsan-id
Example:
switch(config)# zone set name new vsan 23
Step 3 member name
Example:
switch(config-zoneset)# member new
Step 4 zone name zone-name
Example:
switch(config-zoneset)# zone name trial
Step 5 member fcid fcid
Example:
switch(config-zoneset-zone)# member fcid
0x222222
You do not have to copy the running configuration to the startup configuration to store the active zone
Tip
set. However, you need to copy the running configuration to the startup configuration to explicitly store
full zone sets.

Zone Enforcement

Zoning can be enforced in two ways: soft and hard. Each end device (N port) discovers other devices in the
fabric by querying the name server. When a device logs in to the name server, the name server returns the list
of other devices that can be accessed by the querying device. If an N port does not know about the FC IDs of
other devices outside its zone, it cannot access those devices.
In soft zoning, zoning restrictions are applied only during interaction between the name server and the end
device. If an end device somehow knows the FC ID of a device outside its zone, it can access that device.
Hard zoning is enforced by the hardware on each frame sent by an N port. As frames enter the switch,
source-destination IDs are compared with permitted combinations to allow the frame at wire speed. Hard
zoning is applied to all forms of zoning.
Cisco Nexus 5000 Series NX-OS SAN Switching Configuration Guide, Release 5.2(1)N1(1)
144
Purpose
Enters global configuration mode.
Configures a zone set with the configured zoneset-name.
Tip To activate a zone set, you must first create the zone and
a zone set.
Adds a zone as a member of the previously specified zone set.
If the specified zone name was not previously configured,
Tip
this command will return a "zone not present" error
message:
Adds a zone to the specified zone set.
Execute this step only if you need to create a zone from a
Tip
zone set prompt.
Adds a new member to the new zone.
Tip Execute this step only if you need to add a member to a
zone from a zone set prompt.
Configuring and Managing Zones
OL-27583-01