Table of Contents
Advertisement
Chapter 32
Configuring Port Security
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
If you activate port security, follow up by disabling auto-learning , and finally commit the changes in the
pending database, then the net result of your actions is the same as issuing a port-security activate vsan
vsan-id no-auto-learn command.
Table 32-3
Scenarios for Activation and Autolearning Configurations in Distributed Mode
Scenario
Actions
A and B exist in the
1.
You activate the port
configuration
security database and
database,
enable autolearning.
activation is not
done and devices
C,D are logged in.
A new entry E is
2.
added to the
configuration
database.
3.
You issue a commit.
A and B exist in the
You activate the port
1.
configuration
security database and
database,
enable autolearning.
activation is not
done and devices
C,D are logged in.
You disable learning. configuration database = {A,B}
2.
3.
You issue a commit.
1. The * (asterisk) indicates learned entries.
In this case, we recommend that you perform a commit at the end of each operation: after you activate
Tip
port security and after you enable auto learning.
Database Merge Guidelines
A database merge refers to a union of the configuration database and static (unlearned) entries in the
active database. See the
OL-6973-03, Cisco MDS SAN-OS Release 2.x
Distribution = OFF
configuration database = {A,B}
active database = {A,B, C
configuration database = {A,B,
E}
active database = {A,B, C*, D*}
Not applicable
configuration database = {A,B}
active database = {A,B, C*, D*}
active database = {A,B, C, D}
Not applicable
"CFS Merge Support" section on page 5-7
Database Merge Guidelines
Distribution = ON
configuration database = {A,B}
1
, D*}
active database = {null}
pending database = {A,B + activation to
be enabled}
configuration database = {A,B}
active database = {null}
pending database = {A,B, E + activation
to be enabled}
configuration database = {A,B, E}
active database = {A,B, E, C*, D*}
pending database = empty
configuration database = {A,B}
active database = {null}
pending database = {A,B + activation to
be enabled}
configuration database = {A,B}
active database = {null}
pending database = {A,B + activation to
be enabled +
learning to be disabled}
configuration database = {A,B}
active database = {A,B} and devices C
and D are logged out. This is equal to an
activation with autolearning disabled.
pending database = empty
for detailed concepts.
Cisco MDS 9000 Family Configuration Guide
32-11
Advertisement
Table of Contents
