HP StorageWorks Secure Fabric OS 5.0.0 User Guide (AA-RW1UA-TE, May 2005)

55Secure Fabric OS 5.0.0 user guide
3 Creating Secure Fabric OS policies
Secure Fabric OS policies make it possible to customize access to the fabric. The FCS policy
is the only required policy; all other policies are optional.
To implement Secure Fabric OS policies:
• Determine which trusted switches to use as FCS switches to manage Secure Fabric OS.
• Enable secure mode in the fabric and specify the FCS switch and one or more backup FCS
switches. This automatically creates the FCS policy.
• Determine which additional Secure Fabric OS policies to implement in the fabric; then
create and activate those policies. An access policy must be created for each
management channel that are used.
• Verify that the Secure Fabric OS policies are operating as intended. Testing a variety of
scenarios to verify optimal policy settings is recommended. For troubleshooting
information, refer to ”Troubleshooting” on page 107.
Secure mode is enabled by the secModeEnable command. You can use optional arguments
to the command to automate some policy-creation tasks. Refer to the HP StorageWorks
Fabric
OS 4.x command reference guide
for more information.
This chapter contains the following sections:
• Default Fabric and switch accessibility, page 56
• Enabling Secure mode, page 57
• Modifying the FCS policy, page 62
• Creating Secure Fabric OS policies other than the FCS policy, page 66
• Managing Secure Fabric OS policies, page 83