Brocade Communications Systems A7990A - StorageWorks SAN Director 4/16 Blade Switch Command Reference Manual page 598

Note: Enter commands in lowercase only; mixed case is for readability.
2
secModeEnable
Note
Ensure that all users (using Fabric OS CLI or Web Tools) are logged off the fabric before enabling secure
mode; otherwise, users on non-FCS switches lose their telnet sessions.
It is recommended that a maximum of 80 WWNs be specified in the FCS policy using the
secModeEnable
User accounts that are forcefully expired while in non-secure mode cannot be used when secure mode is
enabled. Passwords of such user accounts can be changed only after secure mode is disabled.
Use the
on the local switch if the following error message displays after you issue the
Switch does not have all default account names.
Operands This command has the following operand:
list_of_switches
--fcs list_of_switches Specify a list of switches for the FCS policy. Specifying "*" defaults this to all
--currentpwd
--lockdown[=scc |=dcc]
2-564
command. To add more WWNs use the
userRename command to change the user-level ID to "user" and the admin-level ID to "admin"
Specify a list of switches for the FCS policy. The list of switches must be enclosed
in quotation marks, and each member switch must be separated from the others by
semicolons. The members can be specified using domain, WWN, or switch name
format, as follows:
"
5; 10:00:00:60:69:00:00:20; star1"
If a member is specified by domain or switch name, the switch must be in the
fabric or the command fails.
This operand is optional. If no operand is specified, the session becomes
interactive and you are prompted to enter FCS member values.
the switches currently present in the fabric. If a member is specified by domain or
switch name, the switch must be in the fabric or the command fails.
If the list of FCS switches is not specified, the session becomes interactive and the
user is prompted to enter FCS members.
Use the current passwords of the switch the command is run on (the primary FCS
switch) for root, factory, admin and user accounts. Non-FCS admin account
password is set the same as FCS admin account password. The command does not
prompt for new passwords. Only sessions whose account password has changed
are logged out. This option can be used only on a fabric with secure mode disabled
and only when the command is run on the switch specified as the primary FCS
switch.
Create SCC and DCC policies to lockdown the fabric. SCC policy is populated
with all the switches present in the fabric when the command is executed. DCC
policies are populated with the devices present in the fabric when the command is
executed, locking down devices on a per port basis. Ports with no devices attached
to them also are locked down with an empty DCC policy so no device can be
connected to them, preserving the fabric as is. The lockdown operand creates both
SCC and DCC policies, with the optional argument of --lockdown=scc or
--lockdown=dcc, only the specified policy is created. This operand can be used
only on a fabric with secure mode disabled and only when the command is run on
the switch specified as the primary FCS switch.
secPolicyAdd command.
secModeEnable
Fabric OS Command Reference Manual
Publication Number: 53-1000240-01
command: