Http Policy; Http Policy States - HP StorageWorks MSA 2/8 - SAN Switch User Manual

Creating Secure Fabric OS Policies

HTTP Policy

You can create the HTTP policy to specify which workstations can use HTTP to
access the fabric. This is useful for applications that use internet browsers, such as
Web Tools.
The policy is named HTTP_POLICY and contains a list of IP addresses for
devices and workstations that are allowed to establish HTTP connections to the
switches in the fabric.
The possible HTTP policy states are shown in
Table 6: HTTP Policy States
No policy
Policy with no entries
Policy with entries
To create an HTTP policy:
1. From a sectelnet or SSH session, log into the Primary FCS switch as Admin.
2. Enter the following:
3. To save or activate the new policy, enter the secpolicysave or the
64
Policy State
All hosts can establish an HTTP connection to any switch in
the fabric.
No host can establish an HTTP connection to any switch in
the fabric.
Only specified hosts can establish an HTTP connection to
any switch in the fabric.
secpolicycreate policy_name, "member;...;member"
Where:
policy_name is HTTP_POLICY.
member is one or more IP addresses in dot-decimal notation. You can
enter "0" in an octet to indicate that any number can be matched in that
octet.
secpolicyactivate command.
If neither of these commands are entered, the changes are lost when you log
out. For more information about these commands, see
Secure Fabric OS Policies" on page 77 and
Fabric OS Policies" on page 77.
Table 6.
Characteristics
"Saving Changes to
"Activating Changes to Secure
Secure Fabric OS Version 1.0 User Guide