Port Security Configuration Distribution - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Chapter 37 Configuring Port Security
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
To add authorized port pairs for port security, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# port-security database vsan 1
switch(config-port-security)#
switch(config)# no port-security database vsan 1
switch(config)#
Step 3
switch(config-port-security)# swwn
20:01:33:11:00:2a:4a:66 interface port-channel 5
switch(config-port-security)# any-wwn interface
fc1/1 - fc1/8
switch(config-port-security)# pwwn
20:11:00:33:11:00:2a:4a fwwn
20:81:00:44:22:00:4a:9e
switch(config-port-security)# no pwwn
20:11:00:33:11:00:2a:4a fwwn
20:81:00:44:22:00:4a:9e
switch(config-port-security)# nwwn
26:33:22:00:55:05:3d:4c fwwn
20:81:00:44:22:00:4a:9e
switch(config-port-security)# pwwn
20:11:33:11:00:2a:4a:66
switch(config-port-security)# pwwn
20:11:33:11:00:2a:4a:66 swwn
20:00:00:0c:85:90:3e:80
switch(config-port-security)# pwwn
20:11:33:11:00:2a:4a:66 swwn
20:00:00:0c:85:90:3e:80 interface fc3/1
switch(config-port-security)# any-wwn interface
fc3/1
switch(config-port-security)# no any-wwn interface
fc2/1

Port Security Configuration Distribution

The port security feature uses the Cisco Fabric Services (CFS) infrastructure to enable efficient database
management, provide a single point of configuration for the entire fabric in the VSAN, and enforce the
port security policies throughout the fabric (see
This section includes the following topics:
•
•
•
•
•
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Enabling Distribution, page 37-12
Locking The Fabric, page 37-12
Committing the Changes, page 37-12
Discarding the Changes, page 37-13
Activation and Auto-learning Configuration Distribution, page 37-13
Port Security Configuration Distribution
Purpose
Enters configuration mode.
Enters the port security database mode for
the specified VSAN.
Deletes the port security configuration
database from the specified VSAN.
Configures the specified sWWN to only
log in through PortChannel 5.
Configures any WWN to log in through
the specified interfaces.
Configures the specified pWWN to only
log in through the specified fWWN.
Deletes the specified pWWN configured
in the previous step.
Configures the specified nWWN to log in
through the specified fWWN.
Configures the specified pWWN to log in
through any port in the fabric.
Configures the specified pWWN to log in
through any interface in the specified
switch.
Configures the specified pWWN to log in
through the specified interface in the
specified switch
Configures any WWN to log in through
the specified interface in any switch.
Deletes the wildcard configured in the
previous step.
Chapter 6, "Using the CFS
Cisco MDS 9000 Family CLI Configuration Guide
Infrastructure").
37-11