The Default Zone; Zone Set Distribution - Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual

Chapter 19 Configuring and Managing Zones
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .

The Default Zone

Each member of a fabric (in effect a device attached to an Nx port) can belong to any zone. If a member
is not part of any active zone, it is considered to be part of the default zone. Therefore, if no zone set is
active in the fabric, all devices are considered to be in the default zone. Even though a member can
belong to multiple zones, a member that is part of the default zone cannot be part of any other zone. The
switch determines whether a port is a member of the default zone when the attached port comes up.
Unlike configured zones, default zone information is not distributed to the other switches in the fabric.
Note
Traffic can either be permitted or denied among members of the default zone. This information is not
distributed to all switches; it must be configured in each switch.
When the switch is initialized for the first time, no zones are configured and all members are considered
Note
to be part of the default zone. Members are not permitted to talk to each other.
Configure the default zone policy on each switch in the fabric. If you change the default zone policy on
one switch in a fabric, be sure to change it on all the other switches in the fabric.
The default settings for default zone configurations can be changed.
Note
The default zone members are explicitly listed when the default policy is configured as permit or when
a zone set is active. When the default policy is configured as deny, the members of this zone are not
explicitly enumerated when you issue the show zoneset active command.
To permit or deny traffic in the default zone, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# zone default-zone permit vsan 1
switch(config)# no zone default-zone permit vsan 1

Zone Set Distribution

You can distribute full zone sets using one of two methods: at the EXEC mode level or at the
configuration mode level.
OL-6973-03, Cisco MDS SAN-OS Release 2.x
Table 19-1 lists the differences.
Purpose
Enters configuration mode.
Permits traffic flow to default zone
members.
Denies traffic flow to default zone
members and reverts to factory default.
Cisco MDS 9000 Family Configuration Guide
The Default Zone
19-11