Administrator Guide

Fabric OS Administrator’s Guide 263
53-1002920-02
Policy database distribution
8
Distributing the local ACL policies
1. Connect to the switch and log in using an account with admin permissions, or an account with
OM permissions for the FabricDistribution RBAC class of commands.
2. Enter the distribute -p command.
Fabric-wide enforcement
The fabric-wide consistency policy enforcement setting determines the distribution behavior when
changes to a policy are activated. Using the tolerant or strict fabric-wide consistency policy ensures
that changes to local ACL policy databases are automatically distributed to other switches in the
fabric.
NOTE
To completely remove all fabric-wide policy enforcement from a fabric enter the fddCfg --fabwideset
"” command.
When you set the fabric-wide consistency policy using the fddCfg command with the
--fabwideset database_id
option, both the fabric-wide consistency policy and specified database
are distributed to the fabric.The active policies of the specified databases overwrite the
corresponding active and defined policies on the target switches.
Policy changes that are saved but not activated are stored locally until a policy database change is
activated. Activating a policy automatically distributes the Active policy set for that policy type (SCC,
DCC, FCS, or any combination of the three) to the other switches in the fabric.
NOTE
FC routers cannot join a fabric with a strict fabric-wide consistency policy. FC routers do not support
the fabric-wide consistency policies.
Table 50 describes the fabric-wide consistency settings.
Displaying the fabric-wide consistency policy
1. Connect to the switch and log in using an account with admin permissions, or an account with
O permission for the FabricDistribution RBAC class of commands.
2. Enter the fddCfg
--showall command.
Example shows policies for a fabric where no consistency policy is defined.
switch:admin> fddcfg --showall
Local Switch Configuration for all Databases:-
DATABASE - Accept/Reject
---------------------------------
TABLE 50 Fabric-wide consistency policy settings
Setting Value When a policy is activated
Absent null Database is not automatically distributed to other switches in the fabric.
Tolerant database_id All updated and new policies of the type specified (SCC, DCC, FCS, or any
combination) are distributed to all Fabric v6.2.0 and later switches in the fabric.
Strict database_id:S All updated and new policies of the type specified (SCC, DCC, FCS, or any
combination) are distributed to all switches in the fabric.