Secpolicyactivate – Dell POWEREDGE M1000E User Manual

Page 874

Advertising

842

Fabric OS Command Reference

53-1001764-02

secPolicyActivate

Saves and activates the Defined Security Policy Set.

Synopsis

secpolicyactivate

Description

Use this command to activate the current defined security policy to all switches in the fabric. This
activates the policy set on the local switch or all switches in the fabric depending on the fabric-wide
consistency policy.

If there are changes to the SCC, DCC, or FCS policies in the current CLI or API transaction that have
not been saved to the Defined Security Policy Set, then this command saves the changes to the
Defined Security Policy Set first, and then activates it. If there are no changes, but the Defined
Security Policy Set differs from the Active Security Policy Set, then the Defined Security Policy Set is
activated. If there are no changes and the Defined Security Policy Set is the same as the Active
Security Policy Set, then nothing is done.

After activation the defined policy set becomes the Active Policy Set.

Use secPolicyShow to display the members of an existing policy in the Active or Defined Security
Policy Sets.

Notes

The behavior of this command is the same for tolerant and strict fabric-wide consistency.

When an FCS policy is enabled, this command can be issued only from the Primary FCS switch.

Any modifications to the SCC, DCC, and FCC DB are saved and activated. When secPolicyActivate is
issued after the secPolicySave command, it might fail.

The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may
be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command
Availability" for details.

Operands

none

Examples

To activate the defined security policy set on all switches in the fabric:

switch:admin>

secpolicyactivate

About to overwrite the current Active data.

ARE YOU SURE (yes, y, no, n): [no]

secpolicyactivate command was completed successfully.