HP StoreFabric SN6500B Administrator's Manual page 58

3
Advanced Device Security policy
Setting the list of devices not allowed to log in
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the ag --adsset command with the appropriate options to set the list of devices not
Removing devices from the list of allowed devices
Remove specified WWNs from the list of devices allowed to log in to the specified F_Ports using the
ag --adsdel command.
ag--adsdel "F_Port [;F_Port2;...]" "WWN [;WWN2;...]"
For more details on this command and its operands, refer to the Fabric OS Command Reference
Manual.
Lists must be enclosed in quotation marks. List members must be separated by semicolons.
Replace the F_Port list with an asterisk (*) to remove the specified WWNs from all the F_Ports allow
lists. The ADS policy must be enabled for this command to succeed.
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the ag --adsdel command to remove one or more devices from the list of allowed
Adding new devices to the list of allowed devices
Add specified WWNs to the list of devices allowed to log in to the specified F_Ports using the ag
--adsadd command.
ag--adsadd "F_Port [;F_Port2;...]" "WWN [;WWN2;...]"
For more details on this command and its operands, refer to the Fabric OS Command Reference
Manual.
Lists must be enclosed in quotation marks. List members must be separated by semicolons.
Replace the F_Port list with an asterisk (*) to add the specified WWNs to all the F_Ports allow lists.
The ADS policy must be enabled for this command to succeed.
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the ag --adsadd command with the appropriate options to add one or more new devices
38
allowed to log in to specific ports. In the following example, ports 11 and 12 are set to "no
access."
switch:admin > ag –-adsset "11;12" ""
WWN list set successfully as the Allow Lists of the F_Port[s]
devices.
In the following example, two devices are removed from the list of allowed devices (ports 3 and
9).
switch:admin> ag --adsdel "3;9"
"22:03:08:00:88:35:a0:12;22:00:00:e0:8b:88:01:8b"
WWNs removed successfully from Allow Lists of the F_Port[s]Viewing F_Ports
allowed to login
to the list of allowed devices.
In the following example, two devices are added to the list of allowed devices (for ports 3 and
9).
Access Gateway Administrator's Guide
53-1002743-01