Front Panel Policy - HP StorageWorks MSA 2/8 - SAN Switch User Manual

Creating Secure Fabric OS Policies
To create a Serial Port policy:
1. From a sectelnet or SSH session, log into the Primary FCS switch as Admin.
2. Enter the following:
3. To save or activate the new policy, enter the secpolicysave or the
primaryfcs:admin> secPolicyCreate "SERIAL_POLICY",
"12:24:45:10:0a:67:00:40"
SERIAL_POLICY has been created.
primaryfcs:admin>

Front Panel Policy

You can create the Front Panel policy to restrict front panel access to switches that
are physically secure. This policy applies only to SAN Switch 2/16, since no other
switches contain front panels. The policy is named FRONTPANEL_POLICY and
contains a list of switch WWNs, Domain IDs, or switch names for which front
panel access is enabled.
The possible Front Panel policy states are shown in
68
secpolicycreate policy_name, "member;...;member"
Where:
policy_name is SERIAL_POLICY.
member is a switch WWN, domain ID, or switch name. If a domain ID
or switch name is used to specify a switch, the associated switch must be
present in the fabric for the command to succeed.
secpolicyactivate command.
If neither of these commands are entered, the changes are lost when you log
out. For more information about these commands, see
Secure Fabric OS Policies" on page 77 and
Fabric OS Policies" on page 77.
Example, creating a SERIAL_POLICY that allows serial port access to a
switch that has a WWN of 12:24:45:10:0a:67:00:40:
"Saving Changes to
"Activating Changes to Secure
Table 10.
Secure Fabric OS Version 1.0 User Guide