HP AA-RW20A-TE 158

security

Initiates an edit session in which to change the security settings. The system displays each parameter one line at a time and prompts you for a value. For each parameter, enter a new value or press Enter to accept the current value shown in brackets. Press q or Q to end the editing session. Table 45 describes the Set Config Security parameters.

IMPORTANT: This operand is available only with the SANtegrity Enhanced PFE key.

Table 45 Security configuration parameters

Parameter	Description

FabricBindingEnabled	Enables (True) or disables (False) the configuration and enforcement
	of fabric binding on all switches the fabric. Fabric binding associates
	switch World Wide Names with a domain ID in the creation of ISL
	groups.

AutoSave	Enables (True) or disables (False) the saving of changes to active
	security set in the switch permanent memory. The default is True.

158 Command Line Interface

Contents

for HP p-ClassBladeSystem user guide Page Contents Page Page Page Figures Tables About this guide Intended audience Prerequisites Related documentation Document conventions and symbols JDOM license HP technical support Helpful web sites 1 Using McDATA Web Server Workstation requirements RJ-45 Starting McDATA Web Server Exiting McDATA Web Server Setting McDATA Web Server preferences Viewing software version and copyright information McDATA Web Server user interface Topology display menu Faceplate display menu Shortcut keys Tool bar Fabric tree Fabric entry Entry handle entriesMoveable window border Figure 7 Fabric tree Using the topology display Selecting switches and links •Click the icon or link to select a switch or a link •Press and hold Control, and select multiple switches or links Right-click Arranging switches in the display Using the faceplate display Opening the faceplate popup menu Faceplate data windows 2 Managing fabrics RADIUS servers Adding a RADIUS server Removing a RADIUS server Editing RADIUS server information Modifying authentication order RADIUS server information Securing a fabric Device security Edit Security dialog •Click Security in the tool bar •Select Security > Edit Security •ISL — default (E_Port authentication) •MS (Management Server CT authentication) Create Security Set dialog Create Security Group dialog Create Security Group Member dialog Editing the security configuration on a switch Viewing properties of a security set, group, or member Security Config dialog Archiving a security configuration to a file Activating a security set Deactivating a security set Fabric services Tracking fabric firmware and software versions Managing the fabric database Removing a fabric Opening a fabric view file Rediscovering a fabric Deleting switches and links Adding a new switch to a fabric Replacing a failed switch Displaying fabric information Displaying the Event Browser Page Sorting the Event Browser Filtering the Event Browser Saving the Event Browser to a file Filter and sort the Event Browser to obtain the desired display. Refer to Filtering the Event Browser Sorting the Event Browser 2.Select File > Save As Working with device information and nicknames Displaying detailed device information Exporting device information to a file Managing device port nicknames Creating a nickname Editing a nickname Deleting a nickname Exporting nicknames to a file Importing a nicknames file Zoning a fabric Viewing zoning limits and properties Managing the zoning database Editing the zoning database You can select zone sets, zones, and ports in the following ways: •Click a zone, zone set, or port icon •Press and hold Shift while clicking several consecutive icons •Press and hold Control while clicking several non-consecutiveicons Table 7 Edit Zoning dialog tool bar buttons and icons Interop Auto Save Default Visibility Default Zone Discard Inactive Removing all zoning definitions Managing zone sets Creating a zone set Activating and deactivating a zone set Copying a zone to a zone set Removing a zone from a zone set or from all zone sets Removing a zone set Managing zones Creating a zone in a zone set Adding zone members Renaming a zone or a zone set Removing a zone member Removing a zone from a zone Set Removing a zone from all zone sets Managing aliases Creating an alias Adding a member to an alias Removing an alias from all zones Merging fabrics and zoning Zone merge failure Zone merge failure recovery Page 3 Managing switches Managing user accounts Creating user accounts Removing a user account Changing a user account password Modifying a user account Displaying switch information Page Page NTP Server Address The IP address of the centralized NTP server. Ethernet connection to NTP server is required FDMI HBA Entry Limit Port Statistics data window Port Statistics data window Configured Zonesets data windows Configuring port threshold alarms Paging a switch Setting the date/time and enabling NTP client Resetting a switch Configuring a switch Switch administrative states Set command Table 11 describes the administrative state values Table 11 Switch administrative states Parameter Fabric Device Management Interface Broadcast support Multi-Switch Broadcast for FC-SW-3 Advanced switch properties Figure 36 Advanced Switch Properties dialog Timeout values Interop mode for zoning System Services dialog GUI Mgmt — allows CIM — Common Information Model. Allows management of the switch through Management Server — allows management of the switch through Security Consistency Checklist dialog Network properties IP configuration Subnet mask Subnet mask address for the Ethernet port. The default value is IP gateway address. The default value is SNMP properties Figure 39 SNMP Properties dialog SNMP configuration Archiving a switch Restoring a switch Restoring the factory default configuration Downloading a support file Installing Product Feature Enablement (PFE) keys Installing firmware Using the CLI to install firmware Displaying hardware status Page 4 Managing ports Displaying port information Monitoring port status The faceplate display provides the following port related information: •Port operational state Displaying port types Port types Displaying port speeds Displaying transceiver media status Page Page Page Page Configuring ports Changing port speeds Changing port types Device scan Resetting a port Page Page 5 Command Line Interface Logging on to a 4Gb SAN Switch User accounts Working with switch configurations Backing up and restoring switch configurations configdata •All SNMP and network information defined with the Set Setup command •The zoning database included all zone sets, zones, and aliases config_switch_169_10112003 Commands Page Admin command Alias command Page CIM command • Permanent — send indications to the CIM client whether a connection can be established or not. This is the default the CIM client, but ceases if a connection cannot be established after 60 minutes Examples The following is an example of the CIMListener Create command: See also CIM command, page CIMSubscription command Examples The following is an example of the CIMSubscription Create command: CIMListener command, page Config command Page Page Create command The following is an example of the Create Certificate command: See also Date command, page 124 Set command, page Set Setup command, page Date command Feature command Firmware Install command •IP address of the remote host •An account name and password on the remote host •Pathname for the firmware image file Examples The following is an example of the Firmware Install command: Group command IMPORTANT: This command is available only with the SANtegrity Enhanced PFE key Syntax group Operands Edit Table 31 ISL Group member attributes Page Page Table 34 Group member attributes (continued) with MS group members. The string has the following lengths depending on the Hash function: Binding Domain ID of the switch to which to bind the ISL group member World The following is an example of the Group Edit command: The following is an example of the Group List command: The following is an example of the Group Members command: See also Security command, page Securityset command, page Hardreset command Help command Authority None Operands [command] The following is an example of the Help Config Edit command: History command Hotreset command Image command Page Examples The following is an example of the Image Install command: See also Firmware Install command, page Lip command Passwd command Ping command Examples The following is an example of a successful Ping command: This following is an example of an unsuccessful Ping command: Ps command Description Displays current system process information Syntax ps Examples The following is an example of the Ps command: Quit command Reset command Operands cim Resets cim configuration to default values Resets the RADIUS configuration to the default values as described in Table •Activates the pending firmware Page Page Page Page Security command Operands active Examples The following is an example of the Security Active command: The following is an example of the Security History command: The following is an example of the Security Limits command: See also Group command, page Securityset command Examples The following is an example of the Securityset Active command The following is an example of the Securityset Groups command The following is an example of the Securityset List command Security command, page Set command Description Sets a variety of switch parameters Clears the alarm log history. This value requires an Admin session Enables the display of alarms in the session output stream Disables the display of alarms in the session output stream Page Set Config command Page Page Page Page Page Examples The following is an example of the Set Config Port command: The following is an example of the Set Config Security command: The following is an example of the Set Config Switch command: The following is an example of the Set Config Threshold command: The following is an example of the Set Config Zoning command See also Config command, page Set Log command Page Page Set Port command Set Setup command Page Page Page Page Examples The following is an example of the Set Setup RADIUS command: The following is an example of the Set Setup Services command: The following is an example of the Set Setup SNMP command: The following is an example of the Set Setup System command: Show command Page Page Page •Uptime •User Accounts •Whoami •Zoneset (Active, List) •Zoning (History, Limits, List) Displays the current time zone setting Displays all connected devices Displays a list of logged-inusers. This is equivalent to the User List command Examples The following is an example of the Show Chassis command: The following is an example of the Show Domains command: The following is an example of the Show FDMI WWN command: The following is an example of the Show NS (local domain) command: The following is an example of the Show NS [port_ID] command: The following is an example of the Show Interface command: The following is an example of the Show Port command: The following is an example of the Show Switch command: The following is an example of the Show Topology command: The following is an example of the Show Topology command for port 10: The following is an example of the Show Version command: See also Show Config command, page Show Log command, page Show Perf command, page Show Config command Displays the security database Autosave parameter value Displays configuration parameters for the switch Displays alarm threshold parameters for the switch Displays zoning configuration parameters for the switch The following is an example of the Show Config Switch command: The following is an example of the Show Config Threshold command: The following is an example of the Show Config Zoning command: Show Log command Page The following is an example of the Show Log Options command: The following is an example of the Show Log command: See also Set Log command, page Show Perf command The following is an example of the Show Perf Byte command: Show Setup command Description Displays the current SNMP and system settings Authority Displays manufacturing information about the switch Displays RADIUS server information The following is an example of the Show Setup RADIUS command: The following is an example of the Show Setup Snmp command: The following is an example of the Show Setup System command: Shutdown command Test command 1.Enter the following command and press Enter to start an Admin session Enter the following command 1.To start an Admin session, enter the following command and press Enter 2.To run the online loopback test, enter the following command and press Enter See also Set command, page Uptime command User command The following is an example of the User Add command: The following is an example of the User Edit command: The following is an example of the User Delete command: The following is an example of the User List command: See also Passwd command, page Whoami command Zone command Description Manages zones and zone membership on a switch Syntax zone •Alias name Page The following is an example of the Zone Members command: The following is an example of the Zone Zonesets command: See also Zoneset command, page Zoning command, page Zoneset command Description Manages zone sets and component zones across the fabric Syntax zoneset Page Zoning command Page The following is an example of the Zoning Limits command: Page The following is an example of the Zoning List command: Page Glossary User defined number that identifies the switch in the fabric EFCM Enterprise Fabric Connectivity Manager Event log Log of messages describing events that occur in the fabric NL_Port Node Loop Port. An FC device port that supports arbitrated loop protocol N_Port Node Port. An FC device port in a point-to-pointor fabric connection Pending firmware Page Index