Deployment Guide

Default zoning mode
The default zoning mode controls device access if zoning is not implemented or if there is no effective
zone configuration. The default zoning mode has two options:
• All Access -- All devices within the fabric can communicate with all other devices.
• No Access -- Devices in the fabric cannot access any other device in the fabric.
The default zone mode applies to the entire fabric, regardless of switch model.
The default setting is "All Access".
Typically, when you disable the zoning configuration in a large fabric with thousands of devices, the
name server indicates to all hosts that they can communicate with each other. Each host can receive an
enormous list of PIDs, and ultimately cause other hosts to run out of memory or crash. To ensure that
all devices in a fabric do not see each other during a configuration disable operation, set the default
zoning mode to No Access.
NOTE
For switches in large fabrics, the default zone mode should be set to No Access. You cannot disable the
effective configuration if the default zone mode is All Access and you have more than 120 devices in the
fabric.
Admin Domain considerations: If you want to use Admin Domains, you must set the default zoning
mode to No Access prior to setting up the Admin Domains. You cannot change the default zoning mode
to All Access if user-specified Admin Domains are present in the fabric.
Setting the default zoning mode
NOTE
You should not change the default zone mode from "No Access" to "All Access" if there is no effective
zone configuration and more than 120 devices are connected to the fabric.
Use the following procedure to set the default zoning mode.
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the cfgActvShow command to view the current zone configuration.
3. Enter the defZone command with one of the following options:
defzone --noaccess
or
defzone --allaccess
This command initiates a transaction (if one is not already in progress).
4. Enter the cfgSave , cfgEnable , or cfgDisable command to commit the change and distribute it to
the fabric. The change will not be committed and distributed across the fabric if you do not enter one
of these commands.
switch:admin> defzone --noaccess
You are about to set the Default Zone access mode to No Access
Do you want to set the Default Zone access mode to No Access ? (yes, y, no, n):
Default zoning mode
Fabric OS Administrators Guide 319
53-1003130-01