Port Security Configuration Distribution - Cisco Nexus 5000 Series Configuration Manual

Configuring Port Security
Tip Remote switch binding can be specified at the local switch. To specify the remote interfaces, you can use
either the fWWN or sWWN-interface combination.
To add authorized port pairs for port security, perform this task:
SUMMARY STEPS
1. switch# configuration terminal
2. switch(config)# port-security database vsan vsan-id
3. switch(config)# no port-security database vsan vsan-id
4. switch(config-port-security)# swwn swwn-id interface san-port-channel 5
5. switch(config-port-security)# any-wwn interface fc slot/port - fc slot/port
DETAILED STEPS
Command or Action
Step 1 switch# configuration terminal
Step 2 switch(config)# port-security database vsan vsan-id
Step 3 switch(config)# no port-security database vsan vsan-id
Step 4
switch(config-port-security)# swwn swwn-id interface
san-port-channel 5
Step 5 switch(config-port-security)# any-wwn interface fc
slot/port - fc slot/port
This example enters the port security database mode for VSAN 2:
switch(config)# port-security database vsan 2
This example configures the specified sWWN to only log in through SAN port channel 5:
switch(config-port-security)# swwn 20:01:33:11:00:2a:4a:66 interface san-port-channel 5
This example configures the specified pWWN to log in through the specified interface in the specified switch:
switch(config-port-security)# pwwn 20:11:33:11:00:2a:4a:66 swwn 20:00:00:0c:85:90:3e:80
interface fc 3/2
This example configures any WWN to log in through the specified interface in any switch:
switch(config-port-security)# any-wwn interface fc 3/2

Port Security Configuration Distribution

The port security feature uses the Cisco Fabric Services (CFS) infrastructure to enable efficient database
management, provide a single point of configuration for the entire fabric in the VSAN, and enforce the port
security policies throughout the fabric.
OL-xxxxx-xx
Purpose
Enters configuration mode.
Enters the port security database mode for the specified
VSAN.
Deletes the port security configuration database from the
specified VSAN.
Configures the specified sWWN to only log in through
SAN port channel 5.
Configures any WWN to log in through the specified
interfaces.
Cisco Nexus 5000 Series NX-OS SAN Switching Configuration Guide
Port Security Configuration Distribution
225