Brocade Communications Systems A7990A - StorageWorks SAN Director 4/16 Blade Switch Command Reference Manual page 610

Note: Enter commands in lowercase only; mixed case is for readability.
2
secPolicyCreate
"member"
2-576
The DCC_POLICY_nnn name has the common prefix DCC_POLICY_ followed
by a string of user-defined characters. These characters do not have to be
capitalized like regular policy names. Valid values for DCC_POLICY_nnn are
user defined alphanumeric or underscore characters. The maximum length is 30
characters, including the prefix DCC_POLICY_.
When the switch is in non-secure mode this command can be used to manage only
SCC and DCC policies.
Note
When in non-secure mode secpolicycreate DCC_POLICY "*" may be used to
indicate DCC lockdown. This will create a unique policy for each port in the fabric
locking it down to the device connected or creating an empty policy to disallow
any device to be connected to it. This can be done only when there are no other
DCC policies defined on the switch.
Specify a list of members for the security policy. The members must be enclosed
in quotation marks and separated by semicolons. Depending on the policy type,
members can be specified using IP address, WWN, domain, or switch name.
IP Address Member Policy Types
The following policy types require members be specified by IP address:
• TELNET_POLICY
• HTTP_POLICY
• API_POLICY
• RSNMP_POLICY
• WSNMP_POLICY
These policy types require member IDs in dot notation (for example,
124.23.56.122). If 0 is specified in one of the octets, any number can be matched.
WWN Member Policy Types
The following policy types require members be specified by WWN address:
• SES_POLICY
• MS_POLICY
• SERIAL_POLICY
• FRONTPANEL_POLICY
These policy types require member IDs be specified as WWN strings, domains, or
switch names. If domain, or switch names are used, the switches associated must
be present in the fabric or the command fails.
DCC_POLICY Members
The DCC_Policy_nnn is a list of devices associated with a specific switch and port
combination. An empty DCC_POLICY does not stop access to the switch. The
device is specified with a WWN string. The switch and port combination must be
in the following format:
<switch><port>
Fabric OS Command Reference Manual
Publication Number: 53-1000240-01