HP StorageWorks Fabric OS 5.3.x administrator guide (5697-0244, November 2009)

Fabric OS 5.3.0 administrator guide 121
Displaying ACL policies
Use the secPolicyShow command to display the active and defined policy sets. Additionally, in a
defined policy set, policies created in the same login session also appear but these policies are
automatically deleted if the user logs out without saving. The following example shows a switch that has no
SCC, DCC, and FCS policies.
To display the ACL policies
1. Connect to the switch and log in.
2. Type the secPolicyShow command:
switch:admin> secPolicyShow
____________________________________________________
ACTIVE POLICY SET
____________________________________________________
DEFINED POLICY SET
switch:admin>
Configuring an FCS policy
Fabric Configuration Server (FCS) policy in base Fabric OS is functionally equivalent to the FCS policy
which is in Secure Fabric OS. Unlike in Secure Fabric OS, the FCS policy configuration in base Fabric OS
may be performed on a local switch basis and may be performed on any switch in the fabric with a Fabric
OS of 5.3.0 or later. Any switch with a pre-5.3.0 version of Fabric OS cannot be included in the FCS list.
The FCS policy is not present by default, but must be created using the secPolicyCreate command or
management interface. When the FCS policy is created, the WWN of the local switch is automatically
included in the FCS list. Additional switches can be included in the FCS list by invoking the
secPolicyAdd command or using a manageability interface. The first switch in the list becomes the
Primary FCS switch.
Only the Primary FCS switch is allowed to modify and distribute the database within the fabric. Automatic
distribution is not supported and it is required to manually distribute the FCS policy using the
distribute -p command. Refer to “Adding a member to an existing policy” on page 107. Changes
made to the FCS policy are saved to permanent memory only after the changes have been saved or
activated; they can be aborted later if needed.
The FCS policy is designed to accommodate mixed fabric environments that contain switches with
pre-5.3.0 and later versions of Fabric OS. By setting the configuration parameters to accept fabric
distribution, 5.3.0 switches may enforce FCS policy and perform database distribution among 5.3.0
switches while still allowing pre-5.3.0 switches to join the fabric.
• Distribution to pre-5.3.0 switches with specific domain IDs
When specific domain IDs are given for the distribution, all domains must be on a switch with Fabric OS
5.3.0 or later. If one of the domains is pre-5.3.0 the distribution operation will fail.
Table 31 FCS policy states
Policy state Characteristics
No active policy Any switch can perform fabric wide configuration changes.
Active policy with one entry A Primary FCS switch is designated (local switch), but there are no backup
FCS switches. If the Primary FCS switch becomes unavailable for any
reason, the fabric is left without an FCS switch.
Active policy with multiple entries A Primary FCS switch and one or more backup FCS switches are
designated. If the Primary FCS switch becomes unavailable, the next switch
in the list becomes the Primary FCS switch.