Creating And Assigning Cisco Sme Roles Using The Cli; Installing Fabric Manager, Fabric Manager Client, And Enabling Https - Cisco AJ732A - MDS 9134 Fabric Switch Configuration Manual

Before You Begin
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
From the role drop-down menu, select either sme-admin, sme-kmc-admin, sme-stg-admin, or
Step 4
sme-recovery.
Step 5 Click Add.

Creating and Assigning Cisco SME Roles Using the CLI

For detailed information on creating and assigning roles, refer to the Cisco MDS 9000 Family CLI
Configuration Guide.
To create a Cisco SME role or to modify the profile for an existing Cisco SME role, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# role name sme-admin
switch(config-role)#
Step 3
switch(config)# no role name
sme-admin
Step 4
switch(config-role)# rule 1 permit
read-write feature sme-stg-admin
Step 5
switch(config-role)# rule 2
read feature sme-stg-admin
Step 6
switch(config-role)# rule 3 permit
debug feature sme
Step 7
switch(config-role)# description SME
Admins
Step 8
switch(config)# username usam role
sme-admin
Note Only users belonging to the network-admin role can create roles.
Note The four security roles required by Cisco SME can be implicitly created by using the setup sme
command. For VSAN-based access control, you must create the custom roles.

Installing Fabric Manager, Fabric Manager Client, and Enabling HTTPS

To be able to manage Cisco SME, you need to install Fabric Manager Server Enterprise edition. For
information on installing Cisco Fabric Manager, refer to the installation chapters of the
Family Fabric Manager Configuration
To configure Cisco SME, the Fabric Manager user credentials must be the same as the switch user.
Note
Cisco MDS 9000 Family Storage Media Encryption Configuration Guide
2-12
Purpose
Enters configuration mode.
Places you in the mode for the specified role (sme-admin).
Note: The role submode prompt indicates that you are
now in the role submode. This submode is now specific to
Cisco SME.
Deletes the role called sme-admin.
Allows you to add Cisco SME configuration commands.
Allows you to add Cisco SME show commands.
permit
Allows you to add Cisco SME debug commands to the
sme-admin role.
Assigns a description to the new role. The description is
limited to one line and can contain spaces.
Adds the specified user (usam) to the sme-admin role.
Guide.
Chapter 2 Getting Started
Cisco MDS 9000
OL-18091-01, Cisco MDS NX-OS Release 4.x