HP StorageWorks Fabric OS 6.x administrator guide (5697-7344, March 2008)

Fabric OS 6.x administrator guide 101
• ”Configuring the database distribution settings” on page 122
Configure a switch to accept or reject the distribution of polices.
• ”Distributing ACL policies to other switches” on page 123
Configure the distribution of policies to switches within the fabric.
Displaying ACL policies
Use the secPolicyShow command to display the active and defined policy sets. Additionally, in a
defined policy set, policies created in the same login session also appear but these policies are
automatically deleted if the user logs out without saving. The following example shows a switch that has no
SCC, DCC, and FCS policies.
To display the ACL policies:
1. Connect to the switch and log in using an account assigned to the admin role.
2. Type the secPolicyShow command:
switch:admin> secPolicyShow
____________________________________________________
ACTIVE POLICY SET
____________________________________________________
DEFINED POLICY SET
switch:admin>
Configuring an FCS policy
Fabric Configuration Server (FCS) policy in base Fabric OS may be performed on a local switch basis and
may be performed on any switch in the fabric with Fabric OS 6.0.0 or later. Any switch with a pre-5.3.0
version of Fabric OS cannot be included in the FCS list.
The FCS policy is not present by default, but must be created using the command secPolicyCreate
using CLI or from a management interface. When the FCS policy is created, the WWN of the local switch
is automatically included in the FCS list. Additional switches can be included in the FCS list by invoking the
secPolicyAdd command or using a manageability interface. The first switch in the list becomes the
primary FCS switch.
Only the primary FCS switch is allowed to modify and distribute the database within the fabric. Automatic
distribution is supported and you can either configure the switches in your fabric to accept the FCS policy
using the fddcfg
--fabswideset command or manually distribute the FCS policy using the
distribute -p command. Changes made to the FCS policy are saved to permanent memory only after
the changes have been saved or activated; they can be aborted later if you have set your fabric to
distribute the changes manually.
The FCS policy is designed to accommodate mixed fabric environments that contain switches with
pre-5.3.0 and later versions of Fabric OS. By setting the configuration parameters to accept fabric
Table 25 FCS policy states
Policy state Characteristics
No active policy Any switch can perform fabric wide configuration changes.
Active policy with one entry A primary FCS switch is designated (local switch), but there are no
backup FCS switches. If the primary FCS switch becomes unavailable
for any reason, the fabric is left without an FCS switch.
Active policy with multiple
entries
A primary FCS switch and one or more backup FCS switches are
designated. If the primary FCS switch becomes unavailable, the next
switch in the list becomes the primary FCS switch.