Brocade Fabric Manager Administrator's Guide (53-10000196-01-HP, November 2006)

Fabric Manager Administrator’s Guide 17-7
Publication Number: 53-1000196-01-HP
Using the Policy Editor
17
4. Click the Summary tab.
5. Click Save to save your changes but not apply them, or click Activate to save and apply your
changes.
The Security Policy Review dialog displays.
6. After reviewing the Security Policy, click one of the following:
• Continue (to continue applying your changes)
• Cancel (to cancel your changes)
• Copy to File (to copy the Security Policy to a file)
Configuring Telnet, RSNMP, WSNMP, HTTP, and
API Policy Options
The Telnet policy contains a list of IP addresses and subnets that can establish Telnet connections to any
switch in the fabric. Any Telnet attempts from an IP address or subnet that does not appear in the policy
will fail.
Configure the RSNMP policy (read-only SNMP policy) to limit SNMP access to specific, trusted
management stations in your environment. You cannot create an RSNMP policy without a WSNMP
policy already present.
Configure the WSNMP policy (read/write SNMP policy) to limit SNMP access to specific, trusted
management stations in your environment. When you add a member to the WSNMP policy, that
member automatically gains RSNMP access.
Configure the HTTP policy to grant access to IP addresses and subnets so they can establish HTTP
connections to the switches in the fabric.
Create an API policy to control the workstations that can use the API to access the fabric.
To configure/edit any of these policies
1. In the Information Panel, right-click the secure fabric for which you want to set policies and choose
Security > Security Policy Editor from the context menu.
The Policy Editor appears (see Figure 17-3 on page 17-4).
2. Click the tab that corresponds to the policy you want (Telnet, RSNMP, WSNMP, HTTP, or API).
The selected policy appears. The Telnet policy is used in this example (see Figure 17-6 on
page 17-8). The RSNMP, WSNMP, HTTP, and API policies are similar.
Caution
If you create an empty policy, you prevent all Telnet access to your fabric.