Deleting A Dcc Policy; Scc Policies; Scc Policy States - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

• To save and activate the policy, enter the secPolicyActivate command.
If neither of these commands is entered, the changes are lost when the session is logged out. For more
information about these commands, see
E
xamples: Creating DCC policies
To create the DCC policy DCC_POLICY_server that includes device 1 1:22:33:44:55:66:77:aa and port
1 and port 3 of switch domain 1:
switch:admin> secpolicycreate
"DCC_POLICY_server","11:22:33:44:55:66:77:aa;1(1,3)"
DCC_POLICY_server has been created
To create the DCC policy DCC_POLICY_storage that includes device port WWN
22:33:44:55:66:77:1 1:bb, all ports of switch domain 2, and all currently connected devices of switch
domain 2:
switch:admin> secpolicycreate "DCC_POLICY_storage",
"22:33:44:55:66:77:11:bb;2[*]"
DCC_POLICY_storage has been created
To create the DCC policy DCC_POLICY_abc that includes device 33:44:55:66:77:1 1:22:cc and ports 1
through 6 and port 9 of switch domain 3:
switch:admin> secpolicycreate "DCC_POLICY_abc",
"33:44:55:66:77:11:22:cc;3(1-6,9)"
DCC_POLICY_xxx has been created
To create the DCC policy DCC_POLICY_example that includes devices 44:55:66:77:22:33:44:dd and
33:44:55:66:77:1 1:22:cc, ports 1 through 4 of switch domain 4, and all devices currently connected to
ports 1 through 4 of switch domain 4:
switch:admin> secpolicycreate "DCC_POLICY_example",
"44:55:66:77:22:33:44:dd;33:44:55:66:77:11:22:cc;4[1-4]"
DCC_POLICY_xxx has been created

Deleting a DCC policy

1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the secPolicyDelete ALL_STALE_DCC_POLICY command.
switch:admin> secpolicydelete ALL_STALE_DCC_POLICY
About to clear all STALE DCC policies
ARE YOU SURE

SCC policies

The switch connection control (SCC) policy is used to restrict which switches can join the fabric. Switches
are checked against the policy each time an E_Port-to-E_Port connection is made. The policy is named
SCC_POLICY and accepts members listed as WWNs, domain IDs, or switch names. Only one SCC policy
can be created.
By default, any switch is allowed to join the fabric; the SCC policy does not exist until it is created. When
connecting a Fibre Channel router to a fabric or switch that has an active SCC policy, the front domain of
the Fibre Channel router must be included in the SCC policy.
SCC policy states are shown in
Table 30

SCC policy states

Policy state
No active policy
Active policy that has no members
Active policy that has members
"ACL policy
(yes, y, no, n): [no] y
Table 30.
SCC policy enforcement
All switches can connect to the switch with the specified policy.
All neighboring switches are segmented.
The neighboring switches not specified in the SCC policy are
segmented.
modifications" on page 126.
Fabric OS 6.2 administrator guide 125