Brocade Fabric OS Command Reference - Supporting Fabric OS v7.0.1 (53-1002447-01, March 2012)

Fabric OS Command Reference 3

53-1002447-01

Understanding Admin Domain restrictions

A subset of Fabric OS commands is subject to Admin Domain (AD) restrictions that may be in place. In

order to execute an AD-restricted command on a switch or device, the switch or device must be part of a

given Admin Domain, and the user must be logged in to that Admin Domain.

Six Admin Domain types are supported, as defined in Table 5.

Refer to Appendix Appendix A, “Command Availability,” for a listing of Admin Domain restrictions that

apply to the commands included in this manual.

Using the command line interface

The Fabric OS command line interface (CLI), accessed via Telnet, SSH, or serial console, provides full

management capability on a Brocade switch. The Fabric OS CLI enables an administrator to monitor and

manage individual switches, ports, and entire fabrics from a standard workstation. Selected commands

must be issued from a secure Telnet or SSH session.

Access is controlled by a switch-level password for each access level. The commands available through

the CLI are based on the user’s login role and the license keys used to unlock certain features.

The Fabric OS CLI provides the following capabilities:

• Access to the full range of Fabric OS features, given the license keys installed.

• Assistance with configuration, monitoring, dynamic provisioning, and daily management of every

aspect of storage area networks (SANs).

• A deeper view of the tasks involved in managing a Brocade SAN.

• Identification, isolation, and management of SAN events across every switch in the fabric.

• Management of Brocade licenses.

The documentation for each command includes a synopsis of its syntax, a description of command use,

and a set of examples. The same information can be accessed by issuing the help command, followed

by the command name on a Brocade switch or director. This command displays the help page for the

specified command. For example, to display the help page for portCfg, enter:

switch:admin> help portCfg

TABLE 5 AD types

AD Ttpe Definition

Allowed Allowed to execute in all ADs.

PhysFabricOnly Allowed to execute only in AD255 context (and the user should own

access to AD0-AD255 and have admin RBAC privilege).

Disallowed Allowed to execute only in AD0 or AD255 context; not allowed in

AD1-AD254 context.

PortMember All control operations allowed only if the port or the local switch is part

of the current AD. View access allowed if the device attached to the

port is part of current AD.

AD0Disallowed Allowed to execute only in AD255 and AD0 (if no ADs are configured).

AD0Only Allowed to execute only in AD0 when ADs are not configured.