Configuring Port Security; Information About Port Security; Port Security Enforcement - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Configuring Port Security

This chapter contains the following sections:
•
Configuring Port Security
Cisco Nexus 5000 Series switches provide port security features that reject intrusion attempts and report these
intrusions to the administrator.
Port security is supported on virtual Fibre Channel ports and physical Fibre Channel ports.
Note

Information About Port Security

Typically, any Fibre Channel device in a SAN can attach to any SAN switch port and access SAN services
based on zone membership. Port security features prevent unauthorized access to a switch port in the Cisco
Nexus 5000 Series switch, using the following methods:
• Login requests from unauthorized Fibre Channel devices (N ports) and switches (xE ports) are rejected.
• All intrusion attempts are reported to the SAN administrator through system messages.
• Configuration distribution uses the CFS infrastructure, and is limited to those switches that are CFS
• Configuring the port security policy requires the Storage Protocol Services license.

Port Security Enforcement

To enforce port security, configure the devices and switch port interfaces through which each device or switch
is connected, and activate the configuration.
• Use the port world wide name (pWWN) or the node world wide name (nWWN) to specify the N port
• Use the switch world wide name (sWWN) to specify the xE port connection for each switch.
OL-16597-01
Configuring Port Security, page 635
capable. Distribution is disabled by default.
connection for each device.
C H A P T E R
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
46
635