Brocade Secure Fabric OS Administrator's Guide (53-1000244-01, November 2006)

3-16 Secure Fabric OS Administrator’s Guide

Publication Number: 53-1000244-01

Table 3-5 displays the possible HTTP policy states.

To create an HTTP policy

1. From a sectelnet or SSH session, log in to the primary FCS switch as admin.

2. Type secPolicyCreate “HTTP_POLICY”, “member;...;member”.

member is one or more IP addresses in dot-decimal notation. “0” can be entered in an octet to

indicate that any number can be matched in that octet.

3. To save or activate the new policy, enter either the secPolicySave or the secPolicyActivate

command.

If neither of these commands is entered, the changes are lost when the session is logged out. For

more information about these commands, see “Saving Changes to Secure Fabric OS Policies” on

page 3-26 and “Activating Changes to Secure Fabric OS Policies” on page 3-27.

For example, to create an HTTP policy to allow anyone on the network with IP address of

192.168.5.0 (where “0” can be any number) to establish an HTTP connection to any switch in the

fabric:

Table 3-5 HTTP Policy States

Policy State Characteristics

No policy All hosts can establish an HTTP/HTTPS connection to any switch in the

fabric.

Policy with no entries No host can establish an HTTP/HTTPS connection to any switch in the

fabric.

Note: An empty policy causes the message “The page cannot be

displayed” to display when HTTP/HTTPS access is attempted.

Policy with entries Only specified hosts can establish an HTTP/HTTPS connection to any

switch in the fabric.

primaryfcs:admin> secpolicycreate "HTTP_POLICY", "192.168.5.0"

HTTP_POLICY has been created.