Discarding The Changes; Activation And Auto-Learning Configuration Distribution - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Chapter 39 Configuring Port Security
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

Discarding the Changes

If you discard (abort) the changes made to the pending database, the configuration remains unaffected
and the lock is released.
To discard the port security configuration changes for the specified VSAN, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# port-security abort vsan 5

Activation and Auto-learning Configuration Distribution

Activation and auto-learning configurations in distributed mode are remembered as actions to be
performed when you commit the changes in the pending database.
Learned entries are temporary and do not have any role in determining if a login is authorized or not. As
such, learned entries do not participate in distribution. When you disable learning and commit the
changes in the pending database, the learned entries become static entries in the active database and are
distributed to all switches in the fabric. After the commit, the active database on all switches are identical
and learning can be disabled.
If the pending database contains more than one activation and auto-learning configuration when you
commit the changes, then the activation and auto-learning changes are consolidated and the behavior
may change (see
Table 39-3 Scenarios for Activation and Auto-Learning learning Configurations in Distributed Mode
Scenario Actions
A and B exist in the
1.
configuration
database,
activation is not
done and devices
C,D are logged in.
2.
3.
OL-18084-01, Cisco MDS NX-OS Release 4.x
Table 39-3).
Distribution = OFF
You activate the port configuration database = {A,B}
security database and
active database = {A,B, C
enable auto-learning.
A new entry E is configuration database = {A,B,
added to the E}
configuration
active database = {A,B, C*, D*}
database.
You issue a commit. Not applicable
Port Security Configuration Distribution
Purpose
Enters configuration mode.
Discards the port security changes in the specified
VSAN and clears the pending configuration
database.
Distribution = ON
configuration database = {A,B}
1
, D*} active database = {null}
pending database = {A,B + activation to
be enabled}
configuration database = {A,B}
active database = {null}
pending database = {A,B, E + activation
to be enabled}
configuration database = {A,B, E}
active database = {A,B, E, C*, D*}
pending database = empty
Cisco MDS 9000 Family CLI Configuration Guide
39-13