HP StorageWorks 8B - FC Entry Switch User Manual page 69

The following table describes the states of the Enforce Policy check box (epcb):
Enforce Policy Description Table
Condition
Epcb is checked but no members exist
Epcb is not checked
Epcb is not checked, and members exist
Adding Individual Switch Permissions
Follow the steps below to allow additional individual switch access to specific secure areas for:
•
SNMP-RO
•
SNMP-RW
•
TELNET
•
HTTP
•
API
These policies require IP Addresses of management workstations. Only those workstations whose
IPs are in the member list are allowed access to the interface.
Note:
1. Highlight a secure switch in the SAN Elements tab.
2. Select Actions > Security.
3. Log into a secure switch.
For more information, refer to
4. Select the Management Access Controls tab.
5. Select the tab of interest from the bottom of the window.
For instance, select the SNMP-RO tab to allow the chosen switch to access SNMP Read-Only
policies.
6. Type the IP address of the management workstation in the Enter IP Address field.
You may use "0" (without quotes) as a wildcard character in an IP address so that 0.0.0.0
includes all IP addresses, implying no restrictions.
You may use 255.5.0.0, implying that any IP with the first two bytes 255.5 are allowed.
7. Select the Add IP button (or drag and drop address).
The Enforce Policy box will be checked automatically. Uncheck box to remove policies.
Fabric Manager User's Guide
When the SERIAL, TELNET, HTTP and API are all enforced with empty membersets,
there is no remaining way of managing security.
Fabric Login
Actions Menu
Policy Result
Interface is prohibited to all.
The policy does not exist and
implies unrestricted access.
Policy will be deleted once
configuration is saved, implying
unrestricted access to listed
members.
on page 4-2.
6
6-9