Brocade Communications Systems 53-1001763-02 사용자 설명서

ACL policy management

7

Adding a member to an existing ACL policy

As soon as a policy has been activated, the aspect of the fabric managed by that policy is enforced.

1. Connect to the switch and log in using an account assigned to the admin role.

2. Enter the secPolicyAdd command.

3. To implement the change immediately, enter the secPolicyActivate command.

Example   of adding to an ACL policy

For example, to add a member to the SCC_POLICY using the switch WWN: 

switch:admin> secpolicyadd "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been added to SCC_POLICY.

Example  of adding members to the DCC policy

To add two devices to the DCC policy, and to attach domain 3 ports 1 and 3 (WWNs of devices 
are 11:22:33:44:55:66:77:aa and 11:22:33:44:55:66:77:bb): 

switch:admin> secpolicyadd "DCC_POLICY_abc",
"11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3(1,3)"

Removing a member from an ACL policy

As soon as a policy has been activated, the aspect of the fabric managed by that policy is enforced.

1. Connect to the switch and log in using an account assigned to the admin role.

2. Enter the secPolicyRemove command.

3. To implement the change immediately, enter the secPolicyActivate command.

Example  of removing a member

For example, to remove a member that has a WWN of 12:24:45:10:0a:67:00:40 from the 
SCC_POLICY:

switch:admin> secpolicyremove "SCC_POLICY", "12:24:45:10:0a:67:00:40"
Member(s) have been removed from SCC_POLICY.

Aborting unsaved policy changes

You can abort all ACL policy changes that have not yet been saved. 

1. Connect to the switch and log in using an account assigned to the admin role.

2. Enter the secPolicyAbort command.

Example  of aborting unsaved changes

switch:admin> secpolicyabort
Unsaved data has been aborted.

All changes since the last time the secPolicySave or secPolicyActivate commands were entered are 
aborted.