Brocade Network Advisor SAN + IP User Manual v12.1.0 - Manual (Page 1711)

1668 Brocade Network Advisor SAN + IP User Manual
53-1002949-01
Policy monitor overview
47
For IronWare products, verifies SSH access is enabled and telnet access is disabled through
CLI commands.
Rule Violation Fix — If the policy monitor report shows a violation, enable SSH on the device.
Disable Telnet settings on the device, if enabled.
• Check for SNMPv3 (secure SNMP) configuration — This switch and router policy monitor
enables you to check each target to see if SNMPv3 is active for device data transmission and
SNMPv1 and SNMPv2 are not configured.
NOTE
For this check to pass, you must discover the products using SNMPv3 credentials.
Rule Violation Fix — If the policy monitor report shows a violation, configure SNMPv3 on the
device. Remove SNMPv1 and SNMPv2 settings on the device, if configured.
• Check for VLAN configurations match for each connection (IP only) — This switch and router
policy monitor enables you to determine the consistency of VLAN configurations for each
connection on the selected IP devices.
Rule Violation Fix — If the policy monitor report shows a violation, configure VLANs on each
device to contain the same interface membership.
• Configuration Rules — This switch and router policy monitor enables you to use predefined
rules or create your own rules to compare content against a baseline (such as a product’s
backup configuration file). A configuration rule is a logical expression built with configuration
conditions and blocks. For more information, refer to
“Viewing a predefined configuration rule”
on page 1681.
- Predefined rules — The predefined rules include the following:

No Interface Shutdown Rule — Fails if any of the interfaces in the device are shut
down.

Port Profile Interface Rule — Fails if any of the interfaces on the device do not have a
port profile.
- User-defined rules — You can configure your own configuration rules using predefined
conditions and blocks (refer to
“Adding a configuration rule” on page 1685).
Host policy monitors
Host policy monitors enable you to set the following checks on host devices.
• Check for multiple fabrics connections — This host policy monitor enables you to determine if
each host is connected to multiple fabrics to prevent a single point of failure.
Available hosts include both automatic hosts and manual hosts. Automatic hosts are those
hosts discovered through Host or VM Manager discovery. Manual hosts are those host
enclosures that are manually created through Host Port Mapping in the fabric topology.
The Management application determines if the host has redundant connections to different
fabrics based on discovery type and connection knowledge that the Management application
collects; however, there is no guarantee that redundant paths exist to the same storage target.