S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
from all three hosts (H1, H2, H3) to the data residing on storage systems S1 and S2. Zone 2 restricts the
data on S3 to access only by H3. Note that H3 resides in both zones.
Cisco MDS 9000 Family CLI Configuration Guide
Zones can vary in size.
Devices can belong to more than one zone.
A physical fabric can have a maximum of 16,000 members. This includes all VSANs in the
A zone set consists of one or more zones.
A zone set can be activated or deactivated as a single entity across all switches in the fabric.
Only one zone set can be activated at any time.
A zone can be a member of more than one zone set.
A zone switch can have a maximum of 500 zone sets.
Zoning can be administered from any switch in the fabric.
When you activate a zone (from any switch), all switches in the fabric receive the active zone
set. Additionally, full zone sets are distributed to all switches in the fabric, if this feature is
enabled in the source switch.
If a new switch is added to an existing fabric, zone sets are acquired by the new switch.
Zone changes can be configured nondisruptively. New zones and zone sets can be activated without
interrupting traffic on unaffected ports or devices.
Zone membership criteria is based mainly on WWNs or FC IDs.
Port world wide name (pWWN)—Specifies the pWWN of an N port attached to the switch as a
member of the zone.
Fabric pWWN—Specifies the WWN of the fabric port (switch port's WWN). This membership
is also referred to as port-based zoning.
FC ID—Specifies the FC ID of an N port attached to the switch as a member of the zone.
Interface and switch WWN (sWWN)—Specifies the interface of a switch identified by the
sWWN. This membership is also referred to as interface-based zoning.
Interface and domain ID—Specifies the interface of a switch identified by the domain ID.
Domain ID and port number—Specifies the domain ID of an MDS domain and additionally
specifies a port belonging to a non-Cisco switch.
IPv4 address—Specifies the IPv4 address (and optionally the subnet mask) of an attached
IPv6 address—The IPv6 address of an attached device in 128 bits in colon(:)-separated
Default zone membership includes all ports or WWNs that do not have a specific membership
association. Access between default zone members is controlled by the default zone policy.
You can configure up to 8000 zones per VSAN and a maximum of 8000 zones for all VSANs on the
illustrates a zone set with two zones, zone 1 and zone 2, in a fabric. Zone 1 provides access
Configuring and Managing Zones
OL-16184-01, Cisco MDS SAN-OS Release 3.x