Secpolicycreate - Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Command Reference Manual

secPolicyCreate

Creates a new security policy.
Synopsis secpolicycreate "name"[, "member[;member...]"]
Description Use this command to create a new policy and to edit SCC, DCC, and FCS policies on the local
switch. All policies can be created only once, except for the DCC_POLICY_nnn. Each
DCC_POLICY_nnn must each have a unique name. This command can be issued on all switches in
the current fabric for SCC and DCC policies if it is not fabric-wide.
Adding members while creating a policy is optional. You can add members to a policy later, using
the secPolicyAdd command.
Each policy corresponds to a management method.The list of members of a policy acts as an
access control list for that management method. The FCS_POLICY can only be created when
enabling security mode using the secModeEnable command. When secure mode is enabled or FCS
Policy is enabled in non-secure mode, this command can be issued only from the Primary FCS
switch.
Before a policy is created, there is no enforcement for that management method, which is all
access is granted. After a policy is created and a member is added to the policy, that policy is
closed to all access except to included members. If all members are then deleted from the policy,
all access is denied for that management access method.
NOTE
If a TELNET_POLICY or SERIAL_POLICY is created, that ends the current sectelnet or serial session
and a warning is issued.
Operands This command has the following operands:
"name"
Valid values for this operand are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Fabric OS Command Reference Manual
53-1000436-01
Specify the name of a policy you want to create.
DCC_POLICY_nnn
TELNET_POLICY
HTTP_POLICY
API_POLICY
RSNMP_POLICY
WSNMP_POLICY
SES_POLICY
MS_POLICY
SERIAL_POLICY
FRONTPANEL_POLICY
SCC_POLICY
OPTIONS_POLICY
AUTH_POLICY
IPF_POLICY
FCS_POLICY
2
secPolicyCreate
579