Table of Contents
Advertisement
Chapter 32
Configuring Port Security
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Port Security Manual Configuration
To configure port security on any switch in the Cisco MDS 9000 Family, follow these steps:
Identify the WWN of the ports that need to be secured.
Step 1
Secure the fWWN to an authorized nWWN or pWWN.
Step 2
Activate the port security database.
Step 3
Verify your configuration.
Step 4
WWN Identification
If you decide to manually configure port security, be sure to adhere to the following guidelines:
•
•
•
•
•
•
•
•
Authorized Port Pair Addition
After identifying the WWN pairs that need to be bound, add those pairs to the port security database.
Remote switch binding can be specified at the local switch. To specify the remote interfaces, you can
Tip
use either the fWWN or sWWN-interface combination.
OL-6973-03, Cisco MDS SAN-OS Release 2.x
Identify switch ports by the interface or by the fWWN.
Identify devices by the pWWN or by the nWWN.
If an Nx port:
is allowed to login to SAN switch port Fx, then that Nx port can only log in through the specified
–
Fx port.
nWWN is bound to a Fx port WWN, then all pWWNs in the Nx port are implicitly paired with
–
the Fx port.
TE port checking is done on each VSAN in the allowed VSAN list of the trunk port.
All PortChannel xE ports must be configured with the same set of WWNs in the same PortChannel.
E port security is implemented in the port VSAN of the E port. In this case the sWWN is used to
secure authorization checks.
Once activated, the config database can be modified without any effect on the active database.
By saving the running configuration, you save the configuration database and activated entries in the
active database. Learned entries in the active database are not saved.
Port Security Manual Configuration
Cisco MDS 9000 Family Configuration Guide
32-3
Advertisement
Table of Contents
