Aborting All Uncommitted Changes; Distributing The Policy Database - HP AA979A - StorageWorks SAN Switch 2/8V Administrator's Manual

Aborting all uncommitted changes

Use the secPolicyAbort command to abort all ACL policy changes that have not yet been saved.
To abort all unsaved changes
1. Connect to the switch and log in.
2. Type the secPolicyAbort command:
switch:admin> secpolicyabort
Unsaved data has been aborted.
All changes since the last time the secPolicySave or secPolicyActivate commands were entered
are aborted.

Distributing the policy database

Fabric OS lets you manage and enforce the ACL policy database on either a per-switch or fabric-wide
basis. The local switch distribution setting and the fabric-wide consistency policy affect the switch's ACL
policy database and related distribution behavior.
The ACL policy database is managed as follows:
Switch database distribution setting—Controls whether or not the switch accepts or rejects
•
databases distributed from other switches in the fabric. The distribution command sends the database
from one switch to another, overwriting the target switches database with the distributed one. To send
or receive a database the setting must be accept. For configuration instructions, see
database distribution
Manually distribute an ACL policy database—Run the distribute command to push the local
•
database of the specified policy type to target switches.
page 1 12
• Fabric-wide consistency policy—Use to ensure that switches in the fabric enforce the same
policies. Set a strict or tolerant fabric-wide consistency policy for each ACL policy type to automatically
distribute that database when a policy change is activated. If a fabric-wide consistency policy is not set,
then the policies are managed on per switch basis. For configuration instructions,
consistency policy
Table 27 explains the how the local database distribution settings and the fabric-wide consistency policy
affect the local database when the switch is the target of a distribution command.
Table 27 Interaction between fabric-wide consistency policy and distribution settings
Distribution
setting
Reject
Accept
(default)
110 Configuring advanced security
settings" on page 1 1 1.
fabric-wide" on page 1 13
Fabric-wide consistency policy
Absent (default)
Database is protected, it
cannot be overwritten.
Might not match other
databases in the fabric.
Database is not protected,
the database can be
overwritten.
If the switch initiating a
distribute command has a
strict or tolerant
fabric-wide consistency
policy, the fabric-wide
policy is also overwritten.
Might not match other
databases in the fabric.
"Distributing ACL policies to other
Tolerant
1
Invalid configuration.
Database is not protected.
Automatically distributes
activated changes to other
55.20 switches in fabric.
Allows switches running
Fabric OS 5.1.x and earlier
in fabric.
Might not match other
databases in the fabric.
"Configuring the
switches" on
see"Setting the
Strict
a
Invalid configuration.
Database is not protected.
Automatically distributes
activated changes to all
switches in the fabric.
Fabric can only contain
switches running Fabric OS
5.2.x or higher.
Active database is the same
for all switches in fabric.