Fabric-wide enforcement, Displaying the fabric-wide consistency policy, Fabric-wide – Brocade Fabric OS Administrators Guide (Supporting Fabric OS v7.3.0) User Manual

Page 241: Enforcement

Advertising
background image

Fabric-wide enforcement

The fabric-wide consistency policy enforcement setting determines the distribution behavior when
changes to a policy are activated. Using the tolerant or strict fabric-wide consistency policy ensures that
changes to local ACL policy databases are automatically distributed to other switches in the fabric.

NOTE
To completely remove all fabric-wide policy enforcement from a fabric, enter the fddCfg --fabwideset
""
command.

When you set the fabric-wide consistency policy using the fddCfg command with the --fabwideset
database_id option, both the fabric-wide consistency policy and specified database are distributed to
the fabric.The active policies of the specified databases overwrite the corresponding active and defined
policies on the target switches.

Policy changes that are saved but not activated are stored locally until a policy database change is
activated. Activating a policy automatically distributes the Active policy set for that policy type (SCC,
DCC, FCS, or any combination of the three) to the other switches in the fabric.

NOTE
Starting with Fabric OS 7.3.0, FC routers can join a fabric with a strict fabric-wide consistency policy. FC
routers do support the fabric-wide consistency policies.

The following table describes the fabric-wide consistency settings.

Fabric-wide consistency policy settings

TABLE 52

Setting Value

When a policy is activated

Absent

null

Database is not automatically distributed to other switches in the fabric.

Tolerant database_id

All updated and new policies of the type specified (SCC, DCC, FCS, or any
combination) are distributed to all Fabric OS v6.2.0 and later switches in the fabric.

Strict

database_id :S All updated and new policies of the type specified (SCC, DCC, FCS, or any

combination) are distributed to all switches in the fabric.

Displaying the fabric-wide consistency policy

1. Connect to the switch and log in using an account with admin permissions, or an account with O

permission for the FabricDistribution RBAC class of commands.

2. Enter the fddCfg --showall command.

The following sample output shows policies for a fabric where no consistency policy is defined.

switch:admin> fddcfg --showall

Local Switch Configuration for all Databases:-

DATABASE - Accept/Reject

---------------------------------

SCC - accept

DCC - accept

PWD - accept

FCS - accept

AUTH - accept

IPFILTER - accept

Fabric Wide Consistency Policy:- ""

Fabric-wide enforcement

Fabric OS Administrators Guide

241

53-1003130-01

Advertising