HP StorageWorks Secure Fabric OS 5.0.0 User Guide (AA-RW1UA-TE, May 2005)

Creating Secure Fabric OS policies80
Table 13 shows possible DCC policy states.
NOTE: Notes provide important information to explain a concept or to complete a task
To create a DCC policy:
1. From a sectelnet or Secure Shell session, log in to the primary FCS switch as admin.
2. Type secPolicyCreate “DCC_POLICY_nnn”, “member;...;member”.
DCC_POLICY_nnn is the name of the DCC policy to be created; nnn is a string consisting
of up to 19 alphanumeric or underscore characters to differentiate it from any other DCC
policies.
Member contains device or switch port information:
deviceportWWN;switch(port):
• deviceportWWN is the WWN of the device port.
• switch can be the switch WWN, domain ID, or switch name. The port can be specified
by port or area number. Designating ports automatically includes the devices currently
attached to those ports. The ports can be specified using any of the following syntax
methods:
(1-6)Selects ports 1 through 6.
(*)Selects all ports on the switch.
Table 13 DCC policy states
Policy State Characteristics
No policy Any device can connect to any switch port in the fabric.
Policy with no
entries
Any device can connect to any switch port in the fabric. An empty policy
is the same as no policy.
Policy with entries If a device WWN is specified in a DCC policy, that device is only
allowed access to the fabric if connected to a switch port listed in the
same policy.
If a switch port is specified in a DCC policy, it only permits connections
from devices that are listed in the policy.
Devices with WWNs that are not specified in a DCC policy are allowed
to connect to the fabric at any switch ports that are not specified in a
DCC policy.
Switch ports and device WWNs may exist in multiple DCC policies.