Security, Keywords active, Clear | Q-Logic 5602 specification

13 – Command Reference Security

S

Security

NOTE: This command requires the Fabric Security license key. To purchase a license key, contact your authorized maintenance provider or authorized reseller. Use the Feature command to install a license key.

Opens a Security Edit session in which to manage the security database on a switch. Refer to the “Group” command on page 13-22and the “Securityset” command on page 13-56.

Authority Admin session. The keywords Active, History, Limits, and List are available without an Admin session.

Syntax security active cancel clear edit history limits list restore save

Keywords active

Displays the active security set, its groups, and group members. This keyword does not require an Admin session.

cancel

Closes a Security Edit session without saving changes. Use the Edit keyword to open a Security Edit session.

clear

Clears all inactive security sets from the volatile edit copy of the security database. This keyword does not affect the non-volatile security database. However, if you enter the Security Clear command followed by the Security Save command, the non-volatile security database will be cleared from the switch.

NOTE: The preferred method for clearing the security database from the switch is the Reset Security command.

13-52

59183-01 A

Image 182

Q-Logic 5602 manual Security, Keywords active, Clear

Contents

Firmware Version Document Revision History Table of Contents Section Port Configuration Section Zoning Configuration Radius Server Configuration Connection Security ConfigurationSection Device Security Configuration Add Members to an Alias Remove Members from an Alias Command Reference Event Log ConfigurationSimple Network Management Protocol Configuration Section 59183-01 a Index List of Tables Introduction Related Materials Switch Models and ExamplesIntended Audience New in This Release Training Technical SupportAvailability Contact Information Support Headquarters Introduction Technical Support 59183-01 a Command Line Interface Usage This section describes the following tasks Logging In to the Switch To log off, enter the Exit command Command-Line Completion Opening and Closing an Admin SessionEntering Commands Setting Page Breaks Getting Help Creating a Support File Local directory now /itasca/conf/images bin Ftp Downloading and Uploading Files Userimages password images User Account Configuration Factory User Accounts Displaying User Account Information Creating User Accounts Modifying User Accounts and Passwords Following example deletes the user account named user3 Network and Fabric Configuration Displaying Name Server Information Displaying the Ethernet Network Configuration WWN Configuring the Ethernet Port Following is an example of a connection failure Verifying a Switch in the NetworkVerifying and Tracing Fibre Channel Connections Port Displaying Switch Information Switch configuration consists of the following tasks Switch Operational Information System Process Information PID Ppid CPU Time Elapsed Time Between Resets Configuration Information Switch Configuration Parameters Zoning Configuration Parameters Security Configuration Parameters Hardware Information Heartbeat LED Activity Firmware Information Managing Switch Services Please Note Activate a Switch Configuration Managing Switch ConfigurationsDisplay a List of Switch Configurations Modify a Switch Configuration Copy a Switch ConfigurationDelete a Switch Configuration Decimal value, 100-100000 msec Back Up and Restore a Switch Configuration Creating the Backup File Downloading the Configuration File Restoring the Configuration File Ftp ipaddress user images password images ftp bin Paging a Switch Setting the Date and Time Switch Configuration Setting the Date and Time List Switch Reset Methods Resetting a SwitchInstalling Firmware One-Step Firmware Installation Nondisruptive Activation Enter the password for your account name FTP only Custom Firmware Installation Wait for the unpack to complete Managing Switch Feature Upgrades Display Feature Licenses Install a Feature License Key Page You can display the following port information Displaying Port InformationThis section describes the following topics Port Configuration Parameters Arbff Port Operational Information PL-XPL-VC-SG3-22 Port Threshold Alarm Configuration Parameters Port Performance Transceiver Information FTRJ8524P2BNL Modifying Port Operating Characteristics Set config port Port Binding Resetting a Port SANbox admin-config # set config security port Configuring Port Threshold Alarms SANbox admin-config # set config threshold Testing a Port Online Tests for Ports Offline Tests for Ports Cancel a Port Test Display Port Test Results Extending Port Transmission Distance Current value SANbox # show donor Port Config Zoning Configuration Configured Zone Set Information Displaying Zoning Database Information SANbox # zoning list Active ZoneSet Information Active Zone Set Information Zone Set Membership Information Zone Membership Information Alias and Alias Membership Information Zoning Modification History Zoning Database Limits E2JBOD2 Configuring the Zoning Database SANbox # admin start SANbox admin # config edit Modifying the Zoning Database Resetting the Zoning Database Removing Inactive Zone Sets, Zones, and Aliases Delete a Zone Set Managing Zone SetsCreate a Zone Set Managing Zone Sets consists of the following tasks Add Zones to a Zone Set Rename a Zone SetCopy a Zone Set Remove Zones from a Zone Set Create a Zone Deactivate a Zone SetManaging Zones Delete a Zone Add Members to a Zone Rename a ZoneCopy a Zone Remove Members from a Zone Delete an Alias Managing AliasesCreate an Alias Rename an Alias Remove Members from an Alias Copy an AliasAdd Members to an Alias Connection Security Configuration Managing SSL and SSH Services TelnetEnabled True / False SSHEnabled Displaying SSL and SSH Services Creating an SSL Security CertificatePage Device Security Configuration Configured Security Set Information Displaying Security Database Information MD5 Active Security Set Information Security Set Membership Information Group Membership Information Security Database Modification History Security Database Limits Configuring the Security Database Set Config Security command Before Reaching the end of the list Resetting the Security Database Modifying the Security Database Delete a Security Set Managing Security SetsCreate a Security Set Rename a Security Set Activate a Security Set Add Groups to a Security SetRemove Groups from a Security Set Deactivate a Security Set Delete a Group Managing GroupsCreate a Group Rename a Group Copy a Group Add Members to a Group Modify a Group Member Remove Members from a Group Radius Server Configuration Displaying Radius Server Information Configuring a Radius Server on the Switch Page Event Log Configuration Starting and Stopping Event Logging Displaying the Event Log Filtering the Event Log Display Controlling Messages in the Output Stream Managing the Event Log Configuration Configure the Event Log Clearing the Event Log Display the Event Log ConfigurationRestore the Event Log Configuration Logging to a Remote Host Creating and Downloading a Log File Page Managing the Snmp Service You control the Snmp service SNMPEnabled parameters through 12-2 59183-01 a Displaying Snmp Information Modifying the Snmp Configuration Resetting the Snmp Configuration SANbox admin # reset snmpPage Command Reference Access Authority Command Syntax and Keywords Command Listing Commands are listed in alphabetical order as follows Syntax AdminAuthority Keywords Keywords add alias memberlist AliasSyntax alias Copy aliassource aliasdestination Members alias Delete aliasList Remove alias memberlist Keywords activate configname ConfigSyntax config Save configname Edit confignameRestore 59183-01 a 13-9 Support CreateKeywords certificate 59183-01 a 13-11 Following is an example of the Create Certificate command SANbox admin # create support Keywords MMDDhhmmCCYY DateSyntax date Closes the Telnet session ExitAuthority None Syntax exit Keywords address FcpingAuthority None Hopcount FctracePortdestination Examples The following is an example of the Fctrace command Add licensekey log FeatureSyntax feature Keywords add licensekey Following is an example of the Feature Log command Firmware Install Syntax firmware install 59183-01 a 13-21 Group Syntax group Keywords add group ISL Group Member Attributes Port Group Member Attributes Copy groupsource groupdestination Configures security for attachments to other switchesMS Group Member Attributes Create group type Edit group member Group Member Attributes Rename groupold groupnew Members groupRemove group memberlist Securitysets group Following is an example of the Group Edit command Following is an example of the Group List command Following is an example of the Group Members command Hardreset Syntax hardreset Help Help command keywordCommand Keyword History Re-execute selected commandsFollowing is an example of the History command History Hotreset Hotreset Syntax image Keywords cleanupImage Unpack file 13-36 59183-01 a Reinitializes the specified loop port Following is an example of the Lip commandLip Lip portnumber Logout Authority None Syntax logout Passwd Syntax passwd accountname Keywords accountname Ipaddress PingPing ipaddress Displays current system process information Examples The following is an example of the Ps commandAuthority None Syntax ps Quit Authority None Syntax quit Keywords config configname ResetSyntax reset Port portlist ServicesFactory Radius System SwitchWorkstation could lose communication with the switch Zoning Switch Configuration Defaults Values Port Configuration Defaults Parameter 4-Gbps Port Defaults Port Threshold Alarm Configuration Defaults Zoning Configuration Defaults Snmp Configuration Defaults 10. Radius Configuration Defaults 11. Services Configuration Defaults 12. System Configuration Defaults 13. Security Configuration Defaults Clear SecurityKeywords active Save EditLimits Following is an example of the Security History command Following is an example of the Security Limits command Following is an example of the Security List command Keywords activate securityset SecuritysetSyntax securityset Active Deactivate Copy securitysetsource securitysetdestinationCreate securityset Delete securityset Following is an example of the Securityset Groups command Following is an example of the Securityset List command Keywords option Set AlarmSyntax set alarm option Option can be one of the following State Set BeaconSet beacon state Keywords port portnumber Set Config Port14. Port Configuration Parameters Ports portnumber Send Arbff True instead of IDLEs False on the loop 14. Port Configuration Parameters 14. Port Configuration Parameters 59183-01 a 13-65 13-66 59183-01 a 15. Security Configuration Parameters Set Config SecuritySyntax set config security 13-68 59183-01 a Set Config Security Portbinding 16. Port Binding Configuration Parameters 17. Switch Configuration Parameters Set Config SwitchSyntax set config switch Resource Allocation Timeout Value. The number of millisec 18. Port Alarm Threshold Parameters Set Config ThresholdSyntax set config threshold Error rate has fallen below the falling trigger Following is an example of the Set Config Threshold command 19. Zoning Configuration Parameters Set Config ZoningSyntax set config zoning 59183-01 a 13-75 Archive Set LogSet log Component filterlist Display filter Monitors none of the severity levels Disables monitoring on all portsLevel filter Specifies all ports Stop Alarms are always logged and always displayed on the screenStart Stops logging of events Syntax pagebreak state Set PagebreakKeywords state 59183-01 a 13-81 Set port clear EnableSet Port Set port portnumber Speed transmissionspeed State state Set setup radius Set Setup RadiusConfigures Radius servers on the switch Configuration fields 20. Radius Service Settings 13-86 59183-01 a Syntax set setup services Set Setup ServicesConfigures services on the switch 21. Switch Services Settings 21. Switch Services Settings 59183-01 a 13-89 Syntax set setup snmp Set Setup SnmpConfigures Snmp on the switch 22. Snmp Configuration Settings 22. Snmp Configuration Settings 13-92 59183-01 a 23. System Configuration Settings Set Setup SystemSyntax set setup system 13-94 59183-01 a Set switch state state Set Switch StateAdmin session State can be one of the following Set Timezone Set timezone Show about Show AboutAuthority None Syntax Settings Show AlarmShow alarm Following is an example of the Show Alarm command Show Broadcast Syntax show broadcast Show chassis Displays chassis component status and temperatureShow Chassis Show config port portnumber Show Config PortDisplays configuration parameters for one or more ports Portnumber 13-102 59183-01 a Syntax show config security Show Config SecurityDisplays the security database configuration parameters Show Config Security Portbinding Show config security portbinding portnumber Syntax show config switch Show Config SwitchDisplays the switch configuration parameters Syntax show config threshold Show Config ThresholdDisplays alarm threshold parameters for the switch Syntax show config zoning Show Config ZoningDisplays zoning configuration parameters for the switch Show Domains Syntax show domains Show Donor Show donor Show Fabric Show fabric Portwwn Show FdmiShow fdmi portwwn Question marks ? Following is an example of the Show Fdmi WWN command Syntax show interface Show InterfaceDisplays the status of the active network interfaces Numberofevents Show LogShow log Component Level Options Following is an example of the Show Log Options command SettingsFollowing is an example of the Show Log Level command Port Show lsdb Show LsdbDisplays Link State database information Show media InstalledShow Media Portlist 25. Transceiver Information 13-120 59183-01 a 59183-01 a 13-121 Displays information about memory activity Following is an example of the Show Mem commandShow Mem Show mem count Option Show NSShow ns option Following is an example of the Show NS portID command Syntax show pagebreak Displays the current pagebreak settingShow Pagebreak Keywords portlist Show PerfSyntax show perf portlist Byte portlist Frame portlist Errors portlistOutbyte portlist Inframe portlist Following is an example of the Show Perf Byte command 26. Show Port Parameters Show PortShow port Lipalpdalps LIPF7F7 26. Show Port Parameters 59183-01 a 13-133 Show Post Log Syntax show post log Syntax show setup mfg Show Setup MfgDisplays manufacturing information about the switch Displays Radius server information Show Setup RadiusSyntax show setup radius Syntax show setup services Show Setup ServicesDisplays switch service status information Syntax show setup snmp Show Setup SnmpDisplays the current Snmp settings Following is an example of the Show Setup Snmp command Syntax show setup system Show Setup SystemDisplays the current system settings Domainid Show SteeringShow steering domainid Show switch Show SwitchDisplays switch operational information 27. Switch Operational Parameters 13-142 59183-01 a Syntax show timezone Displays the current time zone settingShow Timezone Syntax show topology Show TopologyDisplays all connected devices 59183-01 a 13-145 Show Users Show users Show Version Shutdown Syntax shutdown Port portnumber Test CancelTest cancel Offline loopbacktype Test PortSyntax test port portnumber Online 28. Port Test Parameters 13-152 59183-01 a Test Status Test status Authority None Syntax uptime Examples The following is an example of the Uptime commandUptime Keywords accounts UserSyntax user Add Following is an example of the User Add command Following is an example of the User Edit command Following is an example of the User Delete command Following is an example of the User List command Authority None Syntax whoami Examples The following is an example of the Whoami commandWhoami Keywords add zone memberlist ZoneSyntax zone Copy zonesource zonedestination Remove zone memberlist Delete zoneMembers zone Rename zoneold zonenew Following is an example of the Zone Members command Following is an example of the Zone Zonesets command Zoneset Syntax zoneset Rename zonesetold zonesetnew Delete zonesetRemove zoneset zonelist Zones zoneset Following is an example of the Zoneset List command Following is an example of the Zoneset Zones command Delete orphans ZoningSyntax zoning Opens a Zoning Edit session 29. Zoning Database Limits 13-168 59183-01 a Following is an example of the Zoning Limits command Following is an example of the Zoning List command Index Index-2 59183-01 a Example FTP See File Transfer Protocol Index-4 59183-01 a 59183-01 a Index-5 Index-6 59183-01 a Set Config Security Port command Show Config Security Port command 59183-01 a Index-9 Index-10 59183-01 a 59183-01 a Index-11