HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, December 2009)

Fabric OS 6.1.1 administrator guide 111
FCS enforcement does not apply to pre-5.3.0 switches; they will be able to initiate all operations.
Overview of FCS policy management
Whether your intention is to create new FCS policies or manage your current FCS policies, you must follow
certain steps to ensure the domains throughout your fabric have the same policy.
The local-switch WWN cannot be deleted from the FCS policy.
1. Set the pre-5.3.0 switches in the fabric to accept the FCS policy using the
fddcfg
--localaccept/localreject command.
2. Create the FCS policy using the secPolicyCreate command.
3. Activate the policy using the secPolicyActivate command.
4. If your switches are set to accept distribution of the policies, you can use the distribute -p
command to either sent the policies to intended domains, or the wild card (*) character to send the
policies to all switches.
To fail over to a new Primary switch, use the secPolicyFCSMove command to change the order in
which switches are listed in the FCS policy.
To create an FCS policy:
1. Connect to the switch and log in using an account assigned to the admin role.
2. Issue the command
secPolicyCreate “FCS_POLICY”, “member;...;member”.
where member indicates a switch that is eligible to become a primary or back-up FCS switch. Specify
switches by WWN, Domain ID, or switch name. Enter the wild card (*) character to indicate all the
switches in the fabric.
For example, to create an FCS policy that allows a switch with Domain ID 2 to become a primary FCS
and domain id 4 to become a backup FCS:
switch:admin> secpolicycreate "FCS_POLICY", "2;4"
FCS_POLICY has been created
To save or activate the new policy, issue either the secPolicySave or the secPolicyActivate
command. Once the policy has been activated you can distribute the policy.
NOTE: FCS policy should be consistent across the fabric. If the policy is inconsistent in the fabric, you will
not be able to perform any fabric-wide configurations from the primary FCS.
Modifying the Primary FCS
To modify the order of FCS switches:
1. Log in to the primary FCS switch using an account assigned to the admin role.
2. Issue the command:
secPolicyShow “Defined”, “FCS_POLICY”.
This displays the WWNs of the current primary FCS switch and backup FCS switches.
Any fabric-wide commands secPolicyAbort
All zoning commands except the show commands SNMP commands
All AD commands configupload
Any local-switch commands
Any AD command that does not affect fabric-wide
configuration
Table 26 Switch operations (continued)
Allowed on FCS switches Allowed on all switches