Displaying Acl Policies; Configuring An Fcs Policy - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Displaying ACL policies

Use the secPolicyShow command to display the active and defined policy sets. Additionally, in a
defined policy set, policies created in the same login session also appear but these policies are
automatically deleted if the user logs out without saving. The following example shows a switch that has no
SCC, DCC, and FCS policies.
To display the ACL policies
1. Connect to the switch and log in.
2. Type the secPolicyShow command:
switch:admin> secPolicyShow
____________________________________________________
____________________________________________________
switch:admin>

Configuring an FCS policy

Fabric Configuration Server (FCS) policy in base Fabric OS is functionally equivalent to the FCS policy
which is in Secure Fabric OS. Unlike in Secure Fabric OS, the FCS policy configuration in base Fabric OS
may be performed on a local switch basis and may be performed on any switch in the fabric with a Fabric
OS of 5.3.0 or later. Any switch with a pre-5.3.0 version of Fabric OS cannot be included in the FCS list.
The FCS policy is not present by default, but must be created using the secPolicyCreate command or
management interface. When the FCS policy is created, the WWN of the local switch is automatically
included in the FCS list. Additional switches can be included in the FCS list by invoking the
secPolicyAdd command or using a manageability interface. The first switch in the list becomes the
Primary FCS switch.
Only the Primary FCS switch is allowed to modify and distribute the database within the fabric. Automatic
distribution is not supported and it is required to manually distribute the FCS policy using the
distribute -p command. Refer to
made to the FCS policy are saved to permanent memory only after the changes have been saved or
activated; they can be aborted later if needed.
Table 31 FCS policy states
Policy state
No active policy
Active policy with one entry
Active policy with multiple entries A Primary FCS switch and one or more backup FCS switches are
The FCS policy is designed to accommodate mixed fabric environments that contain switches with
pre-5.3.0 and later versions of Fabric OS. By setting the configuration parameters to accept fabric
distribution, 5.3.0 switches may enforce FCS policy and perform database distribution among 5.3.0
switches while still allowing pre-5.3.0 switches to join the fabric.
• Distribution to pre-5.3.0 switches with specific domain IDs
When specific domain IDs are given for the distribution, all domains must be on a switch with Fabric OS
5.3.0 or later. If one of the domains is pre-5.3.0 the distribution operation will fail.
ACTIVE POLICY SET
DEFINED POLICY SET
"Adding a member to an existing policy"
Characteristics
Any switch can perform fabric wide configuration changes.
A Primary FCS switch is designated (local switch), but there are no backup
FCS switches. If the Primary FCS switch becomes unavailable for any
reason, the fabric is left without an FCS switch.
designated. If the Primary FCS switch becomes unavailable, the next switch
in the list becomes the Primary FCS switch.
on page 107. Changes
Fabric OS 5.3.0 administrator guide 121