HP StorageWorks Secure Fabric OS 5.0.0 User Guide (AA-RW1UA-TE, May 2005)

69Secure Fabric OS 5.0.0 user guide
Table 4 lists the expected read and write behaviors resulting from combinations of the RSNMP
and WSNMP policies.
To create an SNMP policy:
1. From a sectelnet or Secure Shell session, log in to the primary FCS switch as admin.
2. Type secPolicyCreate “policy_name”, “member;...;member”.
Policy name is WSNMP_POLICY or RSNMP_POLICY. Member is one or more IP addresses
in dot-decimal notation. “0” can be entered in an octet to indicate that any number can be
matched in that octet.
For example, to create an WSNMP and an RSNMP policy to only allow IP addresses that
match 192.168.5.0 read and write access to the fabric:.
Table 4 Read and write behaviors of SNMP policies
RSNMP policy WSNMP policy Read result Write result
Nonexistent Nonexistent Any host can read Any host can write
Nonexistent Empty Any host can read No host can write
Nonexistent Host B in policy Any host can read Only B can write
Empty Nonexistent This combination is not supported. If the WSNMP
policy is not defined, the RSNMP policy cannot
be created.
Empty Empty No host can read No host can write
Empty Host B in policy Only B can read Only B can write
Host A in policy Nonexistent This combination is not supported. If the WSNMP
policy is not defined, the RSNMP policy cannot
be created.
Host A in policy Empty Only A can read No host can write
Host A in policy Host B in policy A and B can read Only B can write
primaryfcs:admin> secpolicycreate "WSNMP_POLICY", "192.168.5.0"
WSNMP_POLICY has been created.
primaryfcs:admin> secpolicycreate "RSNMP_POLICY", "192.168.5.0"
RSNMP_POLICY has been created.