Adding A Member To An Existing Acl Policy; Removing A Member From An Acl Policy; Aborting Unsaved Policy Changes - HP SN3000B Administrator's Manual

7
ACL policy management
Example of deleting an ACL policy

Adding a member to an existing ACL policy

As soon as a policy has been activated, the aspect of the fabric managed by that policy is enforced.
1. Connect to the switch and log in using an account with admin permissions, or an account with
2. Enter the secPolicyAdd command.
3. To implement the change immediately, enter the secPolicyActivate command.
Example of adding to an ACL policy
Example of adding members to the DCC policy

Removing a member from an ACL policy

As soon as a policy has been activated, the aspect of the fabric managed by that policy is enforced.
1. Connect to the switch and log in using an account with admin permissions, or an account with
2. Enter the secPolicyRemove command.
3. To implement the change immediately, enter the secPolicyActivate command.
Example of removing a member

Aborting unsaved policy changes

You can abort all ACL policy changes that have not yet been saved.
1. Connect to the switch and log in using an account with admin permissions, or an account with
2. Enter the secPolicyAbort command.
134
switch:admin> secpolicydelete "DCC_POLICY_010"
About to delete policy Finance_Policy.
Are you sure (yes, y, no, n):[no] y
Finance_Policy has been deleted.
OM permissions for the Security RBAC class of commands.
For example, to add a member to the SCC_POLICY using the switch WWN:
switch:admin> secpolicyadd "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been added to SCC_POLICY.
To add two devices to the DCC policy, and to attach domain 3 ports 1 and 3 (WWNs of devices
are 11:22:33:44:55:66:77:aa and 11:22:33:44:55:66:77:bb):
switch:admin> secpolicyadd "DCC_POLICY_abc",
"11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3(1,3)"
OM permissions for the Security RBAC class of commands.
For example, to remove a member that has a WWN of 12:24:45:10:0a:67:00:40 from the
SCC_POLICY:
switch:admin> secpolicyremove "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been removed from SCC_POLICY.
OM permissions for the Security RBAC class of commands.
Fabric OS Administrator's Guide
53-1002446-01