Activating A Zone Set; About The Default Zone; Configuring The Default Zone Access Permission - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Chapter 24 Configuring and Managing Zones
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

Activating a Zone Set

Changes to a zone set do not take effect in a full zone set until you activate it.
To activate or deactivate an existing zone set, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# zoneset activate name Zoneset1 vsan 3
switch(config)# no zoneset activate name Zoneset1 vsan 3

About the Default Zone

Each member of a fabric (in effect a device attached to an Nx port) can belong to any zone. If a member
is not part of any active zone, it is considered to be part of the default zone. Therefore, if no zone set is
active in the fabric, all devices are considered to be in the default zone. Even though a member can
belong to multiple zones, a member that is part of the default zone cannot be part of any other zone. The
switch determines whether a port is a member of the default zone when the attached port comes up.
Unlike configured zones, default zone information is not distributed to the other switches in the fabric.
Note
Traffic can either be permitted or denied among members of the default zone. This information is not
distributed to all switches; it must be configured in each switch.
Note When the switch is initialized for the first time, no zones are configured and all members are considered
to be part of the default zone. Members are not permitted to talk to each other.
Configure the default zone policy on each switch in the fabric. If you change the default zone policy on
one switch in a fabric, be sure to change it on all the other switches in the fabric.
The default settings for default zone configurations can be changed.
Note
The default zone members are explicitly listed when the default policy is configured as permit or when
a zone set is active. When the default policy is configured as deny, the members of this zone are not
explicitly enumerated when you issue the show zoneset active command.

Configuring the Default Zone Access Permission

To permit or deny traffic to members in the default zone, follow these steps:
Command
Step 1
switch# config t
OL-18084-01, Cisco MDS NX-OS Release 4.x
Purpose
Enters configuration mode.
Activates the specified zone set.
Deactivates the specified zone set.
Purpose
Enters configuration mode.
Cisco MDS 9000 Family CLI Configuration Guide
Zone Sets
24-9