Activating A Zone Set; About The Default Zone - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Configuring and Managing Zones
Zones provide a method for specifying access control, while zone sets are a grouping of zones to enforce
access control in the fabric. Either zone set A or zone set B can be activated (but not together).
Tip Zone sets are configured with the names of the member zones and the VSAN (if the zone set is in a
configured VSAN).

Activating a Zone Set

Changes to a zone set do not take effect in a full zone set until you activate it.
To activate or deactivate an existing zone set, perform this task:
Procedure
Step 1
Step 2
Step 3

About the Default Zone

Each member of a fabric (in effect a device attached to an Nx port) can belong to any zone. If a member is
not part of any active zone, it is considered to be part of the default zone. Therefore, if no zone set is active
in the fabric, all devices are considered to be in the default zone. Even though a member can belong to multiple
zones, a member that is part of the default zone cannot be part of any other zone. The switch determines
whether a port is a member of the default zone when the attached port comes up.
Unlike configured zones, default zone information is not distributed to the other switches in the fabric.
Note
Traffic can either be permitted or denied among members of the default zone. This information is not distributed
to all switches; it must be configured in each switch.
Note When the switch is initialized for the first time, no zones are configured and all members are considered
to be part of the default zone. Members are not permitted to communicate with each other.
Configure the default zone policy on each switch in the fabric. If you change the default zone policy on one
switch in a fabric, be sure to change it on all the other switches in the fabric.
The default settings for default zone configurations can be changed.
Note
OL-16597-01
Command or Action
switch# configuration terminal
switch(config)# zoneset activate name
zoneset-name vsan vsan-id
switch(config)# no zoneset activate name
zoneset-name vsan vsan-id
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Activating a Zone Set
Purpose
Enters configuration mode.
Activates the specified zone set.
Deactivates the specified zone set.
551