Table of Contents
Advertisement
Port Security Configuration Distribution
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Locking The Fabric
The first action that modifies the existing configuration creates the pending database and locks the
feature in the VSAN. Once you lock the fabric, the following situations apply:
•
•
Committing the Changes
If you commit the changes made to the configurations, the configurations in the pending database are
distributed to other switches. On a successful commit, the configuration change is applied throughout
the fabric and the lock is released.
To commit the port security configuration changes for the specified VSAN, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# port-security commit vsan 3
Discarding the Changes
If you discard (abort) the changes made to the pending database, the configurations remains unaffected
and the lock is released.
To discard the port security configuration changes for the specified VSAN, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# port-security abort vsan 5
Activation and Autolearning Configuration Distribution
Activation and autolearning configurations in distributed mode are remembered merely as actions to be
performed when you commit the changes in the pending database.
Learned entries are temporary and do not have any role in determining if a login is authorized or not. As
such, learned entries do not participate in distribution. When you disable learning and commit the
changes in the pending database, the learned entries become static entries in the active database and are
distributed to all switches in the fabric. After the commit, the active database on all switches are identical
and learning can be disabled.
If the pending database contains more than one activation and autolearning configuration when you
commit the changes, then the activation and autolearning changes are consolidated and the behavior may
change (see
Cisco MDS 9000 Family Configuration Guide
32-10
No other user can make any configuration changes to this feature.
A copy of the configuration database becomes the pending database.
Table
32-3).
Chapter 32
Purpose
Enters configuration mode.
Commits the port security changes in the specified
VSAN.
Purpose
Enters configuration mode.
Discards the port security changes in the specified
VSAN and clears the pending configuration
database.
OL-6973-03, Cisco MDS SAN-OS Release 2.x
Configuring Port Security
Advertisement
Table of Contents
