Dell POWEREDGE M1000E - Manual (Page 178)

138 Fabric OS Administrator’s Guide
53-1001763-02
FCS policies
7
Ensuring fabric domains share policies
Whether your intention is to create new FCS policies or manage your current FCS policies, you must
follow certain steps to ensure the domains throughout your fabric have the same policy.
The local-switch WWN cannot be deleted from the FCS policy.
1. Create the FCS policy using the secPolicyCreate command.
2. Activate the policy using the secPolicyActivate command.
If the command is not entered, the changes are lost when the session is logged out.
3. To distribute the policies, enter the distribute -p policy_list -d switch_list command to either
send the policies to intended domains, or enter the distribute -p policy_list -d wild_card (*)
command to send the policies to all switches.
Creating an FCS policy
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the secPolicyCreate “FCS_POLICY” command.
Example of creating an FCS policy
The following example creates an FCS policy that allows a switch with domain ID 2 to become a
primary FCS and domain ID 4 to become a backup FCS:
switch:admin> secpolicycreate "FCS_POLICY", "2;4"
FCS_POLICY has been created
3. To save or activate the new policy, enter either the secPolicySave or the secPolicyActivate
command. Once the policy has been activated you can distribute the policy.
TABLE 27 FCS switch operations
Allowed on FCS switches Allowed on all switches
secPolicyAdd (Allowed on all switches for SCC and DCC
policies as long as it is not fabric-wide) secPolicyShow
secPolicyCreate (Allowed on all switches for SCC and
DCC policies as long as it is not fabric-wide) fddCfg –- localaccept or fddCfg -- localreject
secPolicyDelete (Allowed on all switches for SCC and
DCC policies as long as its not fabric-wide) userconfig, Passwd, Passwdcfg (Fabric-wide
distribution is not allowed from a backup or non-FCS
switch.)
secPolicyRemove (Allowed on all switches for SCC and
DCC policies as long as its not fabric-wide) secPolicyActivate
fddCfg –-fabwideset secPolicySave
Any fabric-wide commands secPolicyAbort
All zoning commands except the show commands SNMP commands
All AD commands configupload
Any local-switch commands
Any AD command that does not affect fabric-wide
configuration