HP StorageWorks Fabric OS 5.3.x administrator guide (5697-0244, November 2009)

126 Configuring advanced security
Creating a DCC policy
DCC policies must follow the naming convention “DCC_POLICY_nnn,” where nnn represents a unique
string. To save memory and improve performance, one DCC policy per switch or group of switches is
recommended.
Device ports must be specified by port WWN. Switch ports can be identified by the switch WWN,
domain ID, or switch name followed by the port or area number. To specify an allowed connection, enter
the device port WWN, a semicolon, and the switch port identification.
The following methods of specifying an allowed connection are possible:
• deviceportWWN;switchWWN (port or area number)
• deviceportWWN;domainID (port or area number)
• deviceportWWN;switchname (port or area number)
To create a DCC policy
1. Connect to the switch and log in.
2. Type secPolicyCreate “DCC_POLICY_nnn”, “member;...;member”.
DCC_POLICY_nnn is the name of the DCC policy; nnn is a string consisting of up to 19 alphanumeric or
underscore characters to differentiate it from any other DCC policies.
The member contains device or switch port information: deviceportWWN;switch(port) where:
3. To save or activate the new policy, enter either the secPolicySave or the secPolicyActivate
command.
If neither of these commands is entered, the changes are lost when the session is logged out. For more
information about these commands, see “Saving changes to ACL policies” on page 107 and “Activating
changes to ACL policies” on page 107.
Examples of creating DCC policies
To create the DCC policy “DCC_POLICY_server” that includes device 11:22:33:44:55:66:77:aa and port
1 and port 3 of switch domain 1:
switch:admin> secpolicycreate "DCC_POLICY_server", "11:22:33:44:55:66:77:aa;1(1,3)"
DCC_POLICY_server has been created
To create the DCC policy “DCC_POLICY_storage” that includes device port WWN
22:33:44:55:66:77:11:bb, all ports of switch domain 2, and all currently connected devices of switch
domain 2:
switch:admin> secpolicycreate "DCC_POLICY_storage", "22:33:44:55:66:77:11:bb;2[*]"
DCC_POLICY_storage has been created
deviceportWWN The WWN of the device port.
switch The switch WWN, domain ID, or switch name. The port can
be specified by port or area number. Designating ports
automatically includes the devices currently attached to those
ports. The ports can be specified using any of the following
syntax methods:
(*) Selects all ports on the switch.
(1-6) Selects ports 1 through 6.
[*] Selects all ports and all devices attached to those ports.
[3, 9] Selects ports 3 and 9 and all devices attached to those
ports.
[1-3, 9] Selects ports 1, 2, 3, 9, and all devices attached to
those ports.