Deployment Guide

Fabric-wide enforcement
The fabric-wide consistency policy enforcement setting determines the distribution behavior when
changes to a policy are activated. Using the tolerant or strict fabric-wide consistency policy ensures that
changes to local ACL policy databases are automatically distributed to other switches in the fabric.
NOTE
To completely remove all fabric-wide policy enforcement from a fabric, enter the fddCfg --fabwideset
"" command.
When you set the fabric-wide consistency policy using the fddCfg command with the --fabwideset
database_id option, both the fabric-wide consistency policy and specified database are distributed to
the fabric.The active policies of the specified databases overwrite the corresponding active and defined
policies on the target switches.
Policy changes that are saved but not activated are stored locally until a policy database change is
activated. Activating a policy automatically distributes the Active policy set for that policy type (SCC,
DCC, FCS, or any combination of the three) to the other switches in the fabric.
NOTE
Starting with Fabric OS 7.3.0, FC routers can join a fabric with a strict fabric-wide consistency policy. FC
routers do support the fabric-wide consistency policies.
The following table describes the fabric-wide consistency settings.
Fabric-wide consistency policy settings TABLE 52
Setting Value When a policy is activated
Absent null Database is not automatically distributed to other switches in the fabric.
Tolerant database_id All updated and new policies of the type specified (SCC, DCC, FCS, or any
combination) are distributed to all Fabric OS v6.2.0 and later switches in the fabric.
Strict database_id :S All updated and new policies of the type specified (SCC, DCC, FCS, or any
combination) are distributed to all switches in the fabric.
Displaying the fabric-wide consistency policy
1. Connect to the switch and log in using an account with admin permissions, or an account with O
permission for the FabricDistribution RBAC class of commands.
2. Enter the fddCfg --showall command.
The following sample output shows policies for a fabric where no consistency policy is defined.
switch:admin> fddcfg --showall
Local Switch Configuration for all Databases:-
DATABASE - Accept/Reject
---------------------------------
SCC - accept
DCC - accept
PWD - accept
FCS - accept
AUTH - accept
IPFILTER - accept
Fabric Wide Consistency Policy:- ""
Fabric-wide enforcement
Fabric OS Administrators Guide 241
53-1003130-01