Deployment Guide

Device ports must be specified by port WWN. Switch ports can be identified by the switch WWN,
domain ID, or switch name followed by the port or area number. To specify an allowed connection,
enter the device port WWN, a semicolon, and the switch port identification.
The following methods of specifying an allowed connection are possible:
• deviceportWWN;switchWWN (port or area number)
• deviceportWWN;domainID (port or area number)
• deviceportWWN;switchname (port or area number)
1. Connect to the switch and log in using an account with admin permissions, or an account with OM
permissions for the Security RBAC class of commands.
2. Enter the secPolicyCreate command, specifying the name of the DCC policy.
secpolicycreate "DCC_POLICY_nnn
"
3. To save or activate the new policy, enter the appropriate command:
• To save the policy, enter the secPolicySave command.
• To save and activate the policy, enter the secPolicyActivate command.
If neither of these commands is entered, the changes are lost when the session is logged out.
Example of creating DCC policies
To create the DCC policy "DCC_POLICY_server" that includes device 11:22:33:44:55:66:77:aa and
port 1 and port 3 of switch domain 1:
switch:admin> secpolicycreate "DCC_POLICY_server","11:22:33:44:55:66:77:aa;1(1,3)"
DCC_POLICY_server
has been created
To create the DCC policy "DCC_POLICY_storage" that includes device port WWN
22:33:44:55:66:77:11:bb, all ports of switch domain 2, and all currently connected devices of switch
domain 2:
switch:admin> secpolicycreate "DCC_POLICY_storage", "22:33:44:55:66:77:11:bb;2[*]"
DCC_POLICY_storage
has been created
To create the DCC policy "DCC_POLICY_abc" that includes device 33:44:55:66:77:11:22:cc and
ports 1 through 6 and port 9 of switch domain 3:
switch:admin> secpolicycreate "DCC_POLICY_abc", "33:44:55:66:77:11:22:cc;3(1-6,9)"
DCC_POLICY_abc
has been created
To create the DCC policy "DCC_POLICY_example" that includes devices 44:55:66:77:22:33:44:dd
and 33:44:55:66:77:11:22:cc, ports 1 through 4 of switch domain 4, and all devices currently
connected to ports 1 through 4 of switch domain 4:
switch:admin> secpolicycreate "DCC_POLICY_example", "44:55:66:77:22:33:44:dd;
33:44:55:66:77:11:22:cc;4[1-4]"
DCC_POLICY_example
has been created
Deleting a DCC policy
1. Connect to the switch and log in using an account with admin permissions, or an account with OM
permissions for the Security RBAC class of commands.
2. Enter the secPolicyDelete command.
Deleting a DCC policy
218 Fabric OS Administrators Guide
53-1003130-01