Configuring The Security Database - HP AK241A - StorageWorks 8Gb Simple SAN Connection Cli Manual

Configuring the security database

You can configure how the security database is applied to the switch and exchanged with the fabric
through the security configuration parameters. The following security configuration parameters are
available through the set config security command:
• AutoSave—This parameter enables or disables the saving of changes to active security set in the
switch's non-volatile security database.
• FabricBindingEnabled—This parameter enables or disables the configuration and enforcement of
fabric binding on all switches in the fabric. Fabric binding associates switch worldwide names with a
domain ID in the creation of ISL groups.
If AutoSave is False, you can reverse device security changes that have been received from another
switch through the activation of a security set or the merging of fabrics. To replace the volatile security
database with the contents of the non-volatile security database, enter the security restore
command.
To restore the security configuration to its factory values, you can enter the reset config or
reset factory command. Notice however, that these commands restore other aspects of the switch
configuration as well.
To modify the security configuration, you must open an Admin session with the admin start command.
An Admin session prevents other accounts from making changes at the same time either through Telnet,
QuickTools, or Simple SAN Connection Manager. In addition, you must open a Config Edit session with
the config edit command and indicate which configuration you want to modify. If you do not specify a
configuration name, the active configuration is assumed. The Config Edit session provides access to the
set config security command, as shown in the following example:
8/20q FC Switch #> admin start
8/20q FC Switch (admin) #> config edit
8/20q FC Switch (admin-config) #> set config security
A list of attributes with formatting and current values will follow.
Enter a new value or simply press the ENTER key to accept the current value.
If you wish to terminate this process before reaching the end of the list
press 'q' or 'Q' and the ENTER key to do so.
FabricBindingEnabled
AutoSave
Finished configuring attributes.
This configuration must be saved (see config save command) and
activated (see config activate command) before it can take effect.
To discard this configuration use the config cancel command.
8/20q FC Switch (admin-config)#> config save
8/20q FC Switch (admin)#> config activate
8/20q FC Switch (admin)#> admin end
(True / False) [False]
(True / False) [True ]
8/20q Fibre Channel Switch command line interface guide 93