HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, December 2009)

Fabric OS 6.1.1 administrator guide 117
2. Issue the secPolicyActivate command:
switch:admin> secpolicyactivate
About to overwrite the current Active data.
ARE YOU SURE (yes, y, no, n): [no] y
Adding a member to an existing policy
Add members to the ACL policies by using the secPolicyAdd command. As soon as a policy has been
activated, the aspect of the fabric managed by that policy is enforced.
To add a member to an existing ACL policy:
1. Connect to the switch and log in using an account assigned to the admin role.
2. Issue the command secPolicyAdd “policy_name”, “member;...;member”.
where policy_name is the name of the ACL policy, member is the item to be added to the policy as
identified by IP address, switch Domain ID, device or switch WWN, or switch name.
3. To implement the change immediately, issue the secPolicyActivate command.
For example, to add a member to the SCC_POLICY using the switch WWN:
switch:admin> secpolicyadd "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been added to SCC_POLICY.
To add two devices to the DCC policy, and to attach domain 3 ports 1 and 3 (WWNs of devices are
11:22:33:44:55:66:77:aa and 11:22:33:44:55:66:77:bb):
switch:admin> secpolicyadd "DCC_POLICY_abc",
"11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3(1,3)"
Removing a member from an ACL policy
To remove a member from an ACL policy:
1. Connect to the switch and log in using an account assigned to the admin role.
2. Issue the command secPolicyRemove “policy_name”, “member;...;member”.
where policy_name is the name of the ACL policy. member is the device or switch to be removed from
the policy, identified by IP address, switch Domain ID, device or switch WWN, or switch name.
3. To implement the change immediately, issue the secPolicyActivate command.
For example, to remove a member that has a WWN of 12:24:45:10:0a:67:00:40 from SCC_POLICY:
switch:admin> secpolicyremove "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been removed from SCC_POLICY.
Deleting an ACL policy
To delete an ACL policy:
1. Connect to the switch and log in using an account assigned to the admin role.
2. Issue the command secPolicyDelete “policy_name”.
where policy_name is the name of the ACL policy.
3. To implement the change immediately, issue the secPolicyActivate command:
switch:admin> secpolicydelete "DCC_POLICY_ALL"
About to delete policy Finance_Policy.
Are you sure (yes, y, no, n):[no] y
Finance_Policy has been deleted.
Aborting all uncommitted changes
Use the secPolicyAbort command to abort all ACL policy changes that have not yet been saved.
To abort all unsaved changes:
1. Connect to the switch and log in using an account assigned to the admin role.