Zone Enforcement; Zone Set Distribution - Cisco AJ732A - MDS 9134 Fabric Switch Configuration Manual

Cisco nexus 5000 series switch cli software configuration guide, nx-os 4.0(1a)n1 (ol-16597-01, january 2009)
Hide thumbs Also See for AJ732A - Cisco MDS 9134 Fabric Switch:
Table of Contents

Advertisement

Chapter 38
Configuring and Managing Zones
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
Be sure you understand how device alias modes work before enabling them. See
Note
"Distributing Device Alias Services"

Zone Enforcement

Zoning can be enforced in two ways: soft and hard. Each end device (N port) discovers other devices in
the fabric by querying the name server. When a device logs in to the name server, the name server returns
the list of other devices that can be accessed by the querying device. If an N port does not know about
the FC IDs of other devices outside its zone, it cannot access those devices.
In soft zoning, zoning restrictions are applied only during interaction between the name server and the
end device. If an end device somehow knows the FC ID of a device outside its zone, it can access that
device.
Hard zoning is enforced by the hardware on each frame sent by an N port. As frames enter the switch,
source-destination IDs are compared with permitted combinations to allow the frame at wire speed. Hard
zoning is applied to all forms of zoning.
Note
Hard zoning enforces zoning restrictions on every frame, and prevents unauthorized access.
Cisco Nexus 5000 Series switches support both hard and soft zoning.

Zone Set Distribution

You can distribute full zone sets using one of two methods: one-time distribution using the zoneset
distribute vsan command at the EXEC mode level or full zone set distribution using the zoneset
distribute full vsan command at the configuration mode level.
the methods.
Table 38-3
One-Time Distribution
zoneset distribute vsan Command
(EXEC Mode)
Distributes the full zone set immediately.
Does not distribute the full zone set information
along with the active zone set during activation,
deactivation, or merge process.
This section describes zone set distribution and includes the following topics:
OL-16597-01
Zone Set Distribution Differences
Enabling Full Zone Set Distribution, page 38-14
Enabling a One-Time Distribution, page 38-14
About Recovering from Link Isolation, page 38-14
Importing and Exporting Zone Sets, page 38-15
for details and requirements about device alias modes.
Table 38-3
Full Zone Set Distribution
zoneset distribute full vsan Command
(Configuration Mode)
Does not distribute the full zone set immediately.
Remembers to distribute the full zone set
information along with the active zone set during
activation, deactivation, and merge processes.
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Zone Set Distribution
Chapter 39,
lists the differences between
38-13

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents