Security command

Description Opens a Security Edit session in which to manage the security database on a switch. Refer to the Group command and the Securityset command.

IMPORTANT: This command is available only with the SANtegrity Enhanced PFE key.

Authority Admin session. The operands Active, History, Limits, and List are available without an Admin session.

Syntax security active cancel clear edit history limits list restore save

Operands active

Displays the active security set, its groups, and group members. This operand does not require an Admin session.

cancel

Ends a Security Edit session without saving changes. Use the Edit operand to open a Security Edit session.

clear

Clears all inactive security sets from the volatile edit copy of the security database. This operand does not affect the non-volatile security database. However, if you enter the Security Clear command followed by the Security Save command, the non-volatile security database will be cleared from the switch.

edit

Initiates a Security Edit session in which to make changes to the security database. A Security Edit session enables you to use the Group and Securityset commands to create, add, and delete security sets, groups, and group members. To end a Security Edit session and save changes, enter the Security Save command. To end a Security Edit session without saving changes, enter the Security Cancel command.

history

Displays history information about the security database and the active security set including the account name that made changes and when those changes were made. This operand does not require an Admin session.

limits

Displays the current totals and the security database limits for the number of security sets, groups, members per group, and total members. This operand does not require an Admin session.

list

Displays all security sets, groups, and group members in the security database. This operand does not require an Admin session.

restore

Reverts the changes to the security database that have been made during the current Security Edit session since the last Security Save command was entered.