Npv And Port Security - HP Cisco MDS 9216 - Fabric Switch Configuration Manual

Configuring NPV
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•
•
For details about DPVM configuration, see

NPV and Port Security

Port security is enabled on the NPV core switch on a per interface basis. To enable port security on the
NPV core switch for devices logging in via NPV, you must adhere to the following requirements:
•
•
Once these requirements are met, you can enable port security as you would in any other context. For
details about enabling port security, see
Cisco MDS 9000 Family CLI Configuration Guide
21-22
You must explicitly configure the WWN of the internal FLOGI in DPVM.If DPVM is configured on
the NPV core switch for an end device that is connected to the NPV device, then that end device
must be configured to be in the same VSAN. Logins from a device connected to an NPV device will
fail if the device is configured to be in a different VSAN. To avoid VSAN mismatches, ensure that
the internal FLOGI VSAN matches the port VSAN of the NP port.
The first login from an NP port determines the VSAN of that port. If DPVM is configured for this
first login–which is the internal login of the NPV device–then the NPV core switch's VSAN F port
is located in that VSAN. Otherwise, the port VSAN remains unchanged.
The internal FLOGI must be in the port security database; in this way, the port on the NPV core
switch will allow communications/links.
All the end device pWWNs must also be in the port security database.
Chapter 21
Chapter 28, "Creating Dynamic VSANs."
Chapter 46, "Configuring Port Security."
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Configuring N Port Virtualization