Brocade Network Advisor IP User Manual v12.3.0 - Manual (Page 1285)

Brocade Network Advisor IP User Manual 1233
53-1003153-01
Policy monitor overview
37
Rule Violation Fix — If the configuration policy manager report shows a violation, enable SSH
on the device. Disable Telnet settings on the device, if enabled.
• Check for SNMPv3 (secure SNMP) configuration — This switch and router configuration policy
manager enables you to check each target to see if SNMPv3 is active for device data
transmission and SNMPv1 and SNMPv2 are not configured.
NOTE
For this check to pass, you must discover the products using SNMPv3 credentials.
Rule Violation Fix — If the configuration policy manager report shows a violation, configure
SNMPv3 on the device. Remove SNMPv1 and SNMPv2 settings on the device, if configured.
• Check for VLAN configurations match for each connection (IP only) — This switch and router
configuration policy manager enables you to determine the consistency of VLAN configurations
for each connection on the selected IP devices.
Rule Violation Fix — If the configuration policy manager report shows a violation, configure
VLANs on each device to contain the same interface membership.
• Configuration Rules — This switch and router configuration policy manager enables you to use
predefined rules or create your own rules to compare content against a baseline (such as a
product’s backup configuration file). A configuration rule is a logical expression built with
configuration conditions and blocks. For more information, refer to
“Viewing a predefined
configuration rule” on page 1246.
- Predefined rules — The predefined rules include the following:

No Interface Shutdown Rule — Fails if any of the interfaces in the device are shut
down.

Port Profile Interface Rule — Fails if any of the interfaces on the device do not have a
port profile.
- User-defined rules — You can configure your own configuration rules using predefined
conditions and blocks (refer to
“Adding a configuration rule” on page 1250).
Host configuration policy managers
Host configuration policy managers enable you to set the following checks on host devices:
• Check for multiple fabrics connections — This host configuration policy manager enables you to
determine if each host is connected to multiple fabrics to prevent a single point of failure.
Available hosts include both automatic hosts and manual hosts. Automatic hosts are those
hosts discovered through Host or VM Manager discovery. Manual hosts are those host
enclosures that are manually created through host port mapping in the fabric topology.
The Management application determines if the host has redundant connections to different
fabrics based on discovery type and connection knowledge that the Management application
collects; however, there is no guarantee that redundant paths exist to the same storage target.
Depending on how you discover the hosts, there are recommended configurations you should
complete to avoid inaccuracy:
- Fabric discovery for manual host enclosures to fabric connections (refer to “VM Manager
discovery requirements” on page 109)
Make sure there are Brocade HBAs on the host.