Brocade Communications Systems StoreFabric SN6500B Administrator's Manual page 32

2
User security considerations
Enabling insistent domain ID
To enable Insistent Domain ID, follow these steps for each switch in the fabric:
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the configure command and step through the interactive prompts.
Enabling the fabric-wide consistency policy
Enable the fabric-wide consistency policy after all the switches have joined the merged fabric. If
there are fabric-wide data distribution (FDD) conflicts on any of the ISLs, disable the fabric-wide
consistency policy on each switch in the fabric.
Once the fabric has merged successfully (use fabricshow to verify), then enter the following
command.
fddcfg --fabwideset "SCC:S"
Note that the :S enforces strict mode, which is required for FICON.
Using other security commands
The following commands are some other security-related commands that you might find useful.
Disabling fabric-wide consistency policy.
To disable the policy, enter the following command.
fddcfg --fabwideset ""
Displaying fabric-wide consistency policy
To display fabric-wide consistency policy information, enter the following command:
fddcfg --showall
Displaying the current security policy
To display the current security policy, enter the following command:
secpolicyshow
Creating the SCC policy
To create the switch connection control (SCC) policy and define switches allowed in the fabric, use
the secpolicycreate command to add all switches in the fabric, if they are connected.
secpolicycreate "SCC_POLICY","*"
You can also use the secpolicyadd command to add one or more members to an existing policy.
The following command is an example of adding a member using device WWNs.
secpolicyadd "SCC_POLICY","wwn1;wwn2"
18
a. At the "Fabric parameters" prompt, type y.
b. At the "Insistent Domain ID Mode" prompt, type y.
FICON Administrator's Guide
53-1002753-01