Brocade Access Gateway Administrator's Guide Supporting Fabric OS v7.0.0 (53-1002156-01, April 2011)

vi Access Gateway Administrator’s Guide
53-1002156-01
Access Gateway mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Port mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
F_Port Static Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Device mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Considerations for Access Gateway mapping . . . . . . . . . . . . . . 24
N_Port configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
Displaying N_Port configurations . . . . . . . . . . . . . . . . . . . . . . . .26
Unlocking N_Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Chapter 3 Managing Policies and Features in Access Gateway Mode
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Access Gateway policies overview . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Displaying current policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Access Gateway policy enforcement matrix . . . . . . . . . . . . . . . .30
Advanced Device Security policy . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
How the ADS policy works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Enabling and disabling the ADS policy . . . . . . . . . . . . . . . . . . . . 31
Setting the list of devices allowed to log in . . . . . . . . . . . . . . . . 31
Setting the list of devices not allowed to log in . . . . . . . . . . . . .32
Removing devices from the list of allowed devices . . . . . . . . .32
Adding new devices to the list of allowed devices . . . . . . . . . . .32
Displaying the list of allowed devices on the switch . . . . . . . . .33
ADS policy considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Upgrade and downgrade considerations for the ADS policy. . .33
Automatic Port Configuration policy. . . . . . . . . . . . . . . . . . . . . . . . . .34
How the APC policy works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Enabling and disabling the APC policy . . . . . . . . . . . . . . . . . . . .34
Automatic Port Configuration policy considerations . . . . . . . . .35
Upgrade and downgrade considerations for the APC policy . . . 35
Port Grouping policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
How port groups work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Adding an N_Port to a port group . . . . . . . . . . . . . . . . . . . . . . . .36
Deleting an N_Port from a port group . . . . . . . . . . . . . . . . . . . . 37
Removing a port group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Renaming a port group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Disabling the Port Grouping policy . . . . . . . . . . . . . . . . . . . . . . . 37
Port Grouping policy modes . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Creating a port group and enabling Automatic Login
Balancing mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Enabling MFNM mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Disabling MFNM mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Displaying the current MFNM mode timeout value . . . . . . . . . . 40
Setting the current MFNM mode timeout value . . . . . . . . . . . . 41
Port Grouping policy considerations. . . . . . . . . . . . . . . . . . . . . . 41
Upgrade and downgrade considerations for the Port
Grouping policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41