HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, December 2009)

Fabric OS 6.1.1 administrator guide 171
switch:AD1:admin> ad --show
Current AD Number: 1 AD Name: TheSwitches
Effective configuration:
------------------------
AD Number: 1 AD Name: TheSwitches State: Active
Switch WWN members: 50:06:06:99:00:2a:e9:01;
50:00:51:e0:23:36:f9:01;
50:06:06:98:05:be:99:01;
Switching to a different Admin Domain context
You can switch between different Admin Domain contexts. This option creates a new shell with a new
Admin Domain context. If the corresponding Admin Domain is not yet
activated, the operation fails.
To switch to a new Admin Domain context:
1. Connect to the switch and log in as any user type.
2. Issue the ad
--select command and the Admin Domain you want to switch to.
3. To leave the new Admin Domain context, exit from the shell:
logout
You cannot switch to another Admin Domain context from within the shell created by ad --select.
You must first exit the shell and then issue the ad
--select command again.
The following example switches to the AD12 context. Note that the prompt changes to display the
Admin Domain.
switch:admin> ad --select 12
switch:AD12:admin> logout
switch:admin>
Admin Domain interactions
The administrative domain feature provides interaction with other Fabric OS features and across third-party
applications. You can manage Admin Domains with Web Tools applications and with Fabric Manager. If
the current Admin Domain owns the switch, you can perform Fabric Watch operations.
Admin Domain interactions do not extend to user session tunneling across switches. A user logged into a
switch can control only the local switch ports as specified in the Admin Domain.
When the fabric is in secure mode, the following applies:
• There is no support for ACL configuration under each Administrative Domain.
• ACL configuration commands are allowed only in AD0 and AD255. None of the policy configurations
are validated with AD membership.
Table 49 lists some of the Fabric OS features and considerations that apply when using Admin Domains.
Table 49 Admin Domain interaction with Fabric OS features
Fabric OS feature Admin Domain interaction
ACLs If no user-defined Admin Domains exist, you can run ACL configuration
commands in only AD0 and AD255. If any user-defined Admin Domains exist,
you can run ACL configuration commands only in AD255.
You cannot use ACL configuration commands or validate ACL policy
configurations against AD membership under each Admin Domain.
Advanced
Performance
Monitoring (APM)
All APM-related filter setup and statistics viewing is allowed only if the local switch
is part of the current Admin Domain.
Fabric Watch Fabric Watch configuration operations are allowed only if the local switch is part
of the current Admin Domain.