Brocade Access Gateway Administrator's Guide Supporting Fabric OS v7.0.0 (53-1002156-01, April 2011)
32 Access Gateway Administrator’s Guide
53-1002156-01
Advanced Device Security policy
3
switch:admin> ag --adsset "1;10;13" "*"
WWN list set successfully as the Allow Lists of the F_Port[s]
Setting the list of devices not allowed to log in
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the ag --adsset command with the appropriate options to set the list of devices not
allowed to log in to specific ports. In the following example, ports 11 and 12 are set to “no
access.”
switch:admin > ag –-adsset “11;12” “”
WWN list set successfully as the Allow Lists of the F_Port[s]
Removing devices from the list of allowed devices
Remove specified WWNs from the list of devices allowed to log in to the specified F_Ports using the
ag --adsdel command.
ag--adsdel “F_Port [;F_Port2;...]” “WWN [;WWN2;...]”
where,
F_Port Port numbers in the F_Port list.
WWN Device WWNs that you are removing from access to the ports.
Lists must be enclosed in quotation marks. List members must be separated by semicolons.
Replace the F_Port list with an asterisk (*) to remove the specified WWNs from all the F_Ports'
allow lists. The ADS policy must be enabled for this command to succeed.
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the ag --adsdel command to remove one or more devices from the list of allowed
devices.
In the following example, two devices are removed from the list of allowed devices (ports 3 and
9).
switch:admin> ag --adsdel "3;9"
"22:03:08:00:88:35:a0:12;22:00:00:e0:8b:88:01:8b"
WWNs removed successfully from Allow Lists of the F_Port[s]Viewing F_Ports
allowed to login
Adding new devices to the list of allowed devices
Add specified WWNs to the list of devices allowed to log in to the specified F_Ports using the ag
--adsadd command.
ag--adsadd “F_Port [;F_Port2;...]” “WWN [;WWN2;...]”
where,
F_Port Port numbers in the F_Port list.
WWN Device WWNs being added to access the F_Port list.