Brocade Secure Fabric OS Administrator's Guide (53-1000244-01, November 2006)

Secure Fabric OS Administrator’s Guide 3-27
Publication Number: 53-1000244-01
3
Activating Changes to Secure Fabric OS Policies
Implement changes to the Secure Fabric OS policies using the secPolicyActivate command. This saves
the changes to the active policy set and activates all policy changes since the last time the command was
issued. You cannot activate policies on an individual basis; all changes to the entire policy set are
activated by the command.
To activate changes to the Secure Fabric OS policies
1. From a sectelnet or SSH session, log in to the primary FCS switch as admin.
2. Type the secPolicyActivate command:
Adding a Member to an Existing Policy
You can add members to policies by using the secPolicyAdd command. As soon as a policy has been
created, the aspect of the fabric managed by that policy is closed to access by all devices that are not
listed in the policy.
To add a member to an existing Secure Fabric OS policy
1. From a sectelnet or SSH session, log in to the primary FCS switch as admin.
2. Type secPolicyAdd “policy_name”, “member;...;member”.
policy_name is the name of the Secure Fabric OS policy. member is the item to be added to the
policy, identified by device or switch IP address, switch domain ID, device or switch WWN, or
switch name.
3. To implement the change immediately, enter the secPolicyActivate command.
For example, to add a member to the MS_POLICY using the device port WWN:
To add an SNMP manager to WSNMP_POLICY:
N
ote
Until a secPolicySave or secPolicyActivate command is issued, all policy changes are in volatile
memory only and are lost upon rebooting.
primaryfcs:admin> secpolicyactivate
About to overwrite the current Active data.
ARE YOU SURE (yes, y, no, n): [no] y
Committing configuration...done.
Saving Defined FMPS ...
done
Saving Active FMPS ...
done
primaryfcs:admin> secpolicyadd "MS_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been added to MS_POLICY.
primaryfcs:admin> secpolicyadd "WSNMP_POLICY", "192.168.5.21"
Member(s) have been added to WSNMP_POLICY.