Brocade Secure Fabric OS Administrator's Guide - Supporting Fabric OS v3.2.0, v4.4.0, v5.0.1, v5.1.0, 5.2.0, and 5.3.0 (53-1000244-02, June 2007)

8 Secure Fabric OS Administrator’s Guide
53-1000244-02
2
• Disable Administrative Domains and assign users to default AD. Set Administrative Domains to
disabled and assign all users to the default Administrative Domain of their role. For more
information about Administrative Domain assignments, see the Fabric OS Administrator’s
Guide.
• Fabric-wide consistency policy is not defined. Clear Fabric-wide Consistency policies. Secure
mode does not support the distribution of local SCC and DCC policies. To clear this setting, see
the Fabric OS Administrator’s Guide.
Before enabling secure mode, install a supported CLI client on all network workstations that will be
used to access the switch command line management interface. See “Installing a Supported CLI
Client on a Workstation” on page 31 for detailed instructions
NOTE
If any switches are incapable of enforcing security, secure mode is not enabled in the entire fabric.
For Brocade 24000 directors configured with two logical switches and any version of Fabric OS v4.x,
follow the instructions provided in “Preparing Brocade 24000 for Secure Fabric OS” on page 29.
Verifying Compatible Fabric OS Version
Identify the versions of Fabric OS currently installed on each switch and determine which switches
require upgrading to support Secure Fabric OS. Secure Fabric OS is supported by Fabric OS v2.6.2,
v3.2.0, v4.4.0, v5.0.1, v5.1.0, v5.2.0, and v5.3.0 and can be implemented in fabrics that contain
any combination of these versions.
The following switches must have the Fabric OS version shown below:
• SilkWorm 2000-series switches with Fabric OS v2.X must be upgraded to v2.6.2
• SilkWorm 3200 or 3800 switches with Fabric OS v3.X must be upgraded to v3.2.0
• Brocade 3900 switches with Fabric OS v4.0.x must be upgraded to v4.1.x through v5.2.0
• Silkworm 12000 directors with Fabric OS v4.0x must be upgraded to v4.1.x through v5.0.1
The following switches must have the Fabric OS version shown below:
• Brocade 3250, 3850, and 24000 switches from Fabric OS v4.2.x through v5.3.0
• Brocade 4100 switches from Fabric OS v4.4.0 through v5.3.0
• Brocade 200E and 3014 switches and Brocade 48000 directors from Fabric OS v5.0.1
through v5.3.0
• Brocade 4900 and 7500 switches with Fabric OS v5.2.0 and v5.3.0
NOTE
Combinations of switches running Fabric OS v2.6.2 or v3.2.0 and Fabric OS v4.4.0, v5.1.0, v5.1.0,
v5.2.0, or v5.3.0 must use compatible PID modes. See the Fabric OS Administrator’s Guide for
information about PID modes.
Changing the PID format causes an update to the DCC policies. If you change the PID format, use
the configUpload command to create a new backup configuration file. Do not use the
configDownload file to load the old file saved from a different PID format.