Secpolicy defined-policy – Brocade Network OS Command Reference v4.1.0 User Manual

Page 680

Advertising
background image

642

Network OS Command Reference

53-1003115-01

secpolicy defined-policy

2

secpolicy defined-policy

Creates the switch connection control (SCC) policy and adds the SCC defined policy set members
(WWNs).

Synopsis

secpolicy defined-policy SCC_POLICY [member-entry switch_wwn]

no secpolicy defined-policy SCC_POLICY [member-entry switch_wwn]

Operands

member-entry switch_wwn

The switch WWN to be added to the SCC defined policy set.

Defaults

Any switch is allowed to join the fabric.
The SCC policy does not exist until it is created.

Command Modes

Global configuration mode

RBridge ID configuration mode

Description

Use this command to create the defined SCC policy or to modify an existing SCC policy by adding
add policy set members (switch WWNs). When you execute this command, the SCC policy entry is
created (if not present) and the WWNs are added to the SCC policy.

The SCC policy defines which switches can join the fabric by either accepting or rejecting the
connection between two switches. Switches are checked against the policy each time an
E_Port-to-EX_Port connection is made. The policy is named SCC_POLICY and accepts members
listed as WWNs.

Usage Guidelines

This command is not distributed across the cluster. The RBridge ID of the node should be used to
configure policy configurations.

Although the active-policy is listed under the possible completions of secpolicy command, the
defined-policy parameter should be used to create or add policy or members.
Entering secpolicy activate activates the policy.

You can add multiple WWNs separated by a comma.

After you configure the defined SCC_POLICY, run secpolicy activate to apply the changes to the
active policy set.

This command is supported only on Brocade VDX 6730 switches.

Enter no secpolicy defined-policy SCC_POLICY member-entry switch_wwn to remove a switch
(WWN) from the defined policy member set.

Enter no secpolicy defined-policy SCC_POLICY to remove the SCC policy, along with all of the
defined policy members.

Examples

Standalone mode

To create the defined SCC policy:

switch(config)# secpolicy defined-policy SCC_POLICY

switch(config-defined-policy-SCC_POLICY)# exit

To add a switch WWN to the policy set:

switch(config)# secpolicy defined-policy SCC_POLICY member-entry

10:00:00:05:1e:00:69:00

switch(config-member-entry-10:00:00:05:1e:00:69:01)# exit

Advertising