Configuring Port Security With Auto-Learning Without Cfs; Configuring Port Security With Manual Database Configuration - HP Cisco MDS 9216 - Fabric Switch Configuration Manual

Port Security Configuration Guidelines
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Activate port security on each VSAN. This turns on auto-learning by default. See the
Step 3
Security" section on page
Step 4 Issue a CFS commit to copy this configuration to all switches in the fabric. See the
Changes" section on page
Step 5 Wait until all switches and all hosts are automatically learned.
Step 6 Disable auto-learn on each VSAN. See
Step 7 Issue a CFS commit to copy this configuration to all switches in the fabric. See the
Changes" section on page
into a static active database that is distributed to all switches.
Step 8 Copy the active database to the configure database on each VSAN. See the
Copy" section on page
Step 9 Issue a CFS commit to copy this configuration to all switches in the fabric. See the
Changes" section on page
the fabric.
Copy the running configuration to the startup configuration, using the fabric option. This saves the port
Step 10
security configure database to the startup configuration on all switches in the fabric.

Configuring Port Security with Auto-Learning without CFS

To configure port security using auto-learning without CFS, follow these steps:
Step 1 Enable port security. See the
Step 2 Activate port security on each VSAN. This turns on auto-learning by default. See the
Security" section on page
Step 3 Wait until all switches and all hosts are automatically learned.
Step 4 Disable auto-learn on each VSAN. See the
Step 5 Copy the active database to the configure database on each VSAN. See the
Copy" section on page
Step 6 Copy the running configuration to the startup configuration This saves the port security configure
database to the startup configuration.
Step 7 Repeat

Configuring Port Security with Manual Database Configuration

To configure port security and manually configure the port security database, follow these steps:
Enable port security. See the
Step 1
Manually configure all port security entries into the configure database on each VSAN. See the
Step 2
Security Manual Configuration" section on page
Cisco MDS 9000 Family CLI Configuration Guide
46-4
46-10.
46-20. At this point, all switches are activated, and auto-learning.
46-20. At this point, the auto-learned entries from every switch are combined
46-23.
46-20. This ensures that the configure database is the same on all switches in
"Enabling Port Security" section on page
46-10.
46-23.
Step 1 through Step 6 for all switches in the fabric.
"Enabling Port Security" section on page
the"Disabling Auto-learning" section on page
"Disabling Auto-learning" section on page
46-17.
Chapter 46 Configuring Port Security
"Activating Port
"Committing the
46-15.
"Committing the
"Port Security Database
"Committing the
46-9.
"Activating Port
46-15.
"Port Security Database
46-9.
OL-16184-01, Cisco MDS SAN-OS Release 3.x
"Port