Reference Guide

TABLE 43 DCC policy behavior with FA-PWWN when created using lockdown support
Configuration WWN seen on DCC policy list Behavior when DCC policy
activates
Behavior on portDisable and
portEnable
∙ FA-PWWN has logged
into the switch
∙ DCC policy creation with
lock down (uses FA-
PWWN).
∙ DCC policy activation.
FA-PWWN Traffic will not be disrupted.
2
Ports will be disabled for security
violation.
3
∙ DCC policy creation with
lockdown (uses physical
PWWN).
∙ FA-PWWN has logged
into the switch
∙ DCC policy activation.
Physical PWWN Traffic will not be disrupted. Ports will come up without security
issues.
∙ DCC policy creation with
lockdown (uses physical
PWWN)
∙ DCC policy activation
∙ FA-PWWN has logged
into the switch
Physical PWWN Traffic will not be disrupted. Ports will come up without any
security issues.
Table 44 shows the behavior of a DCC policy created manually with the physical PWWN of a device. The configurations shown in this
table are the recommended configurations when an FA-PWWN is logged into the switch.
TABLE 44 DCC policy behavior when created manually with PWWN
Configuration WWN seen on DCC policy list Behavior when DCC policy
activates
Behavior on portDisable and
portEnable
∙ FA-PWWN has logged
into the switch.
∙ DCC policy creation
manually with physical
PWWN of device.
∙ DCC policy activation.
PWWN Traffic will not be disrupted. Ports will come up without security
issues.
∙ DCC policy creation.
manually with physical
PWWN
∙ FA-PWWN has logged
into the switch.
∙ DCC policy activation.
PWWN Traffic will not be disrupted. Ports will come up without security
issues.
∙ DCC policy creation
manually with physical
PWWN,
∙ DCC policy activation.
Physical PWWN Traffic will not be disrupted. Ports will come up without any
security issues.
2
Indicates a security concern, because devices that are logged in with FA-PWWNs will not be disabled after activation of DCC policies that are
created with FA-PWWNs. This is done to avoid disturbing any existing management.
3
Any disruption in the port will disable the port for a security violation. As the traffic is already disrupted for this port, you must enforce the DCC policy
for a physical device WWN; otherwise, the device will not be allowed to login again.
Configuring Security Policies
Brocade Fabric OS Administration Guide, 8.0.1
53-1004111-02 225