Creating An Scc Policy - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

To create the DCC policy "DCC_POLICY_abc" that includes device 33:44:55:66:77:1 1:22:cc and ports 1
through 6 and port 9 of switch domain 3:
switch:admin> secpolicycreate "DCC_POLICY_abc", "33:44:55:66:77:11:22:cc;3(1-6,9)"
DCC_POLICY_xxx has been created
To create the DCC policy "DCC_POLICY_example" that includes devices 44:55:66:77:22:33:44:dd and
33:44:55:66:77:1 1:22:cc, ports 1 through 4 of switch domain 4, and all devices currently connected to
ports 1 through 4 of switch domain 4:
switch:admin> secpolicycreate "DCC_POLICY_example",
"44:55:66:77:22:33:44:dd;33:44:55:66:77:11:22:cc;4[1-4]"
DCC_POLICY_xxx has been created

Creating an SCC policy

Fabric OS 5.2.0 and later supports SCC policy in Fabric OS. An SCC policy created in Secure Fabric OS
cannot transfer to Fabric OS. Policies created in Secure Fabric OS are deleted when Secure Fabric OS is
disabled; policies created in Fabric OS are deleted when Secure Fabric OS is enabled. Back up SCC
policies before enabling or disabling Secure Fabric OS.
The SCC policy is used to restrict which switches can join the fabric. Switches are checked against the
policy each time an E_Port-to-E_Port connection is made. The policy is named SCC_POLICY and accepts
members listed as WWNs, domain IDs, or switch names. Only one SCC policy can be created.
By default, any switch is allowed to join the fabric; the SCC policy does not exist until it is created. When
connecting a Fibre Channel router to a fabric or switch that has an active SCC policy, the front domain of
the Fibre Channel router must be included in the SCC policy.
SCC policy states are shown in
Table 35 SCC policy states
Policy state
No active policy
Active policy that has no members
Active policy that has members
To create an SCC policy
1. Connect to the switch and log in.
2. Type secPolicyCreate "SCC_POLICY", "member;...;member".
member indicates a switch that is permitted to join the fabric. Specify switches by WWN, domain ID,
or switch name. Enter an asterisk (*) to indicate all the switches in the fabric.
For example, to create an SCC policy that allows switches that have domain IDs 2 and 4 to join the
fabric:
switch:admin> secpolicycreate "SCC_POLICY", "2;4"
SCC_POLICY has been created
3. To save or activate the new policy, enter either the secPolicySave or the secPolicyActivate
command.
If neither of these commands is entered, the changes are lost when the session is logged out. For more
information about these commands, see
"Activating changes to ACL policies"
Table 27.
SCC policy enforcement
All switches can connect to the switch with the specified policy.
All neighboring switches are segmented.
The neighboring switches not specified in the SCC policy are
segmented.
"Saving changes to ACL policies"
on page 107.
on page 107 and
Fabric OS 5.3.0 administrator guide 127