HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, December 2009)

Fabric OS 6.1.1 administrator guide 109
• ”Activating changes to ACL policies” on page 116
Simultaneously save and implement all the policy changes made since the last time changes were
activated. The activated policies are known as the “active policy set.”
• ”Adding a member to an existing policy” on page 117
Add one or more members to a policy. The aspect of the fabric covered by each policy is closed to
access by all devices and switches that are not listed in that policy.
• ”Removing a member from an ACL policy” on page 117
Remove one or more members from a policy. If all members are removed from a policy, that aspect of
the fabric becomes closed to all access.
• ”Deleting an ACL policy” on page 117
Delete an entire policy; deleting a policy opens up that aspect of the fabric to all access.
• ”Configuring the database distribution settings” on page 130
Configure a switch to accept or reject the distribution of polices.
• ”Distributing ACL policies to other switches” on page 131
Configure the distribution of policies to switches within the fabric.
Displaying ACL policies
To display the ACL policies:
1. Connect to the switch and log in using an account assigned to the admin role.
2. Issue the secPolicyShow command:
switch:admin> secPolicyShow
____________________________________________________
ACTIVE POLICY SET
____________________________________________________
DEFINED POLICY SET
switch:admin>
FCS policies
Fabric Configuration Server (FCS) policy in base Fabric OS may be performed on a local switch basis and
may be performed on any switch in the fabric with Fabric OS 6.0.0 or later. Any switch with a pre-5.3.0
version of Fabric OS cannot be included in the FCS list.
The FCS policy is not present by default, but must be created. When the FCS policy is created, the WWN
of the local switch is automatically included in the FCS list. Additional switches can be included in the FCS
list. The first switch in the list becomes the primary FCS switch.
Only the primary FCS switch is allowed to modify and distribute the database within the fabric. Automatic
distribution is supported and you can either configure the switches in your fabric to accept the FCS policy
or manually distribute the FCS policy. Changes made to the FCS policy are saved to permanent memory
only after the changes have been saved or activated; they can be aborted later if you have set your fabric
to distribute the changes manually.
Table 25 FCS policy states
Policy state Characteristics
No active policy Any switch can perform fabric-widefabric-wide configuration changes.