Table of Contents
Advertisement
Configuring and Managing Zones
Zones provide a method for specifying access control, while zone sets are a grouping of zones to enforce
access control in the fabric. Either zone set A or zone set B can be activated (but not together).
Tip
Zone sets are configured with the names of the member zones and the VSAN (if the zone set is in a
configured VSAN).
Activating a Zone Set
You can activate or deactivate an existing zone set.
Changes to a zone set do not take effect in a full zone set until you activate it.
Procedure
Step 1
Step 2
Step 3
Default Zone
Each member of a fabric (in effect a device attached to an Nx port) can belong to any zone. If a member is
not part of any active zone, it is considered to be part of the default zone. Therefore, if no zone set is active
in the fabric, all devices are considered to be in the default zone. Even though a member can belong to multiple
zones, a member that is part of the default zone cannot be part of any other zone. The switch determines
whether a port is a member of the default zone when the attached port comes up.
Unlike configured zones, default zone information is not distributed to the other switches in the fabric.
Note
Traffic can either be permitted or denied among members of the default zone. This information is not distributed
to all switches; it must be configured in each switch.
OL-30895-01
Command or Action
configure terminal
Example:
switch# configure terminal
switch(config)#
zoneset activate name zoneset-name vsan vsan-id
Example:
switch(config)# zoneset activate name test vsan
34
no zoneset activate name zoneset-name vsan vsan-id
Example:
switch(config)# no zoneset activate name test
vsan 30
Cisco Nexus 5500 Series NX-OS SAN Switching Configuration Guide, Release 7.x
Zone Sets
Purpose
Enters global configuration mode.
Activates the specified zone set.
Deactivates the specified zone set.
135
Advertisement
Table of Contents
