Distributing An Fcs Policy - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

3. Issue the secPolicyFCSMove command; then provide the current position of the switch in the list and
the desired position at the prompts.
Alternatively, issue the secPolicyFCSMove "From, To" command, where From is the current
position in the list of the FCS switch and To is the desired position in the list for this switch.
For example, to move a backup FCS switch from position 2 to position 3 in the FCS list, using
interactive mode:
primaryfcs:admin> secpolicyfcsmove
Pos Primary WWN
=================================================
1 Yes
2 No
3 No
Please enter position you'd like to move from : (1..3) [1] 2
Please enter position you'd like to move to : (1..3) [1] 3
____________________________________________________
DEFINED POLICY SET
FCS_POLICY
Pos PrimaryWWN
__________________________________________________
1 Yes
2 No
3 No
____________________________________________________
4. Issue the secPolicyActivate command.

Distributing an FCS policy

The FCS policy can be automatically distributed using the fddcfg
be manually distributed to the switches using the distribute -p command. Each switch that receives the FCS
policy must be configured to receive the policy. To configure the switch to accept distribution of the FCS
policy, see "Configuring the database distribution
Switches in the fabric are designated as either a Primary FCS, backup FCS, or non-FCS switch. Database
distributions may be initiated from only the primary FCS switch. FCS policy configuration and management
is performed using the command line or a manageability interface.
Only the primary FCS switch is allowed to distribute the database. The FCS policy may need to be
manually distributed across the fabric using the distribute -p command if there is no support for automatic
distribution in a mixed environment with 5.3.0 and pre-5.3.0 switches. Since this policy is distributed
manually, the command fddcfg –-fabwideset is used to distribute a fabric-wide consistency policy for
FCS policy in an environment consisting of only Fabric OS 6.0 and later switches.
FCS enforcement for the distribute command is handled differently for FCS and other databases in an
FCS fabric:
• For an FCS database, the enforcement allows any switch to initiate the distribution. This is to support
FCS policy creation specifying a remote switch as Primary.
• For other database distributions, only the primary FCS switch can initiate the distribution.
There is an FCS enforcement at the receiving switch, so the switch verifies whether the distribution is coming
from the primary FCS switch before accepting it. Distribution is accepted only if it is coming from a primary
FCS switch. Distribution of FCS policy can still be accepted from a backup FCS switch if the Primary is not
reachable or from a non-FCS switch if the Primary FCS and none of the backup FCS switches are
reachable. To learn more about how to distribute policies, see
on page 131.
112 Configuring advanced security features
DIdswName.
10:00:00:60:69:10:02:181switch5.
10:00:00:60:69:00:00:5a2switch60.
10:00:00:60:69:00:00:133switch73.
DIdswName
10:00:00:60:69:10:02:181switch5.
10:00:00:60:69:00:00:133switch73.
10:00:00:60:69:00:00:5a2switch60.
fabswideset command or it can
--
settings" on page 130.
"Distributing ACL policies to other switches"