Copying A Security Set; Adding Groups To A Security Set; Removing Groups From A Security Set; Activating A Security Set - HP StorageWorks 8/20q Command Line Interface Manual

Copying a security set

To copy a security set and its contents to a new security set, enter the securityset copy command, as
shown in the following example:
8/20q FC Switch (admin-security) #> securityset copy securityset_1 securityset_2

Adding groups to a security set

To add a group to a security set, enter the securityset add command, as shown in the following
example:
8/20q FC Switch (admin-security) #> securityset add securityset_1 group_isl
group_port

Removing groups from a security set

To remove groups from a security set, enter the securityset remove command, as shown in the
following example:
8/20q FC Switch (admin-security) #> sescurityset remove securityset_1 group_isl
group_port

Activating a security set

To apply security to the fabric, enter the securityset activate command, as shown in the following
example:
8/20q FC Switch (admin) #> securityset activate securityset_1

Deactivating a security set

To deactivate the active security set and disable security in the fabric, enter the
securityset deactivate command, as shown in the following example:
8/20q FC Switch (admin) #> securityset deactivate

Managing groups

This sub-section describes the group managment tasks. All of these tasks require an Admin session and a
Security Edit session.

Creating a group

Creating a group involves specifying a group name and a group type. There are three types of groups:
• ISL group—secures connected switches
• Port group—secures connected devices
• MS group—secures management server commands
To create a new port group, enter the group create command, as shown in the following example:
8/20q FC Switch (admin-security) #> group create group_port port

Deleting a group

To delete group_port from the security database, enter the group delete command, as shown in the
following example:
8/20q FC Switch (admin-security) #> group delete group_port

Renaming a group

To rename group_port to port_1, enter the group rename command, as shown in the following example:
8/20q FC Switch (admin-security) #> group rename group_port port_1
HP StorageWorks 8/20q Fibre Channel Switch Command Line Interface Guide 95