Port Security Configuration Distribution; Enabling Port Security Distribution - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Configuring Port Security
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
This example enters the port security database mode for VSAN 2:
switch(config)# port-security database vsan 2
This example configures the specified sWWN to only log in through SAN port channel 5:
switch(config-port-security)# swwn 20:01:33:11:00:2a:4a:66 interface san-port-channel 5
This example configures the specified pWWN to log in through the specified interface in the specified switch:
switch(config-port-security)# pwwn 20:11:33:11:00:2a:4a:66 swwn 20:00:00:0c:85:90:3e:80
interface fc 3/2
This example configures any WWN to log in through the specified interface in any switch:
switch(config-port-security)# any-wwn interface fc 3/2

Port Security Configuration Distribution

The port security feature uses the Cisco Fabric Services (CFS) infrastructure to enable efficient database
management, provide a single point of configuration for the entire fabric in the VSAN, and enforce the port
security policies throughout the fabric.
Related Topics
•

Enabling Port Security Distribution

All the configurations performed in distributed mode are stored in a pending (temporary) database. If you
modify the configuration, you need to commit or discard the pending database changes to the configurations.
The fabric remains locked during this period. Changes to the pending database are not reflected in the
configurations until you commit the changes.
Port activation or deactivation and auto-learning enable or disable do not take effect until after a CFS
Note
commit if CFS distribution is enabled. Always follow any one of these operations with a CFS commit to
ensure proper configuration.
OL-16597-01
Command or Action
switch# configuration terminal
switch(config)# port-security database vsan
vsan-id
switch(config)# no port-security database
vsan vsan-id
switch(config-port-security)# swwn swwn-id
interface san-port-channel 5
switch(config-port-security)# any-wwn
interface fc slot/port - fc slot/port
Using Cisco Fabric Services, page 299
Purpose
Enters configuration mode.
Enters the port security database mode for the
specified VSAN.
Deletes the port security configuration database
from the specified VSAN.
Configures the specified sWWN to only log in
through SAN port channel 5.
Configures any WWN to log in through the
specified interfaces.
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Port Security Configuration Distribution
645