Cisco Nexus 5000 Series - Zone Enforcement

DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
switch# configure terminal
switch(config)#
Step 1
Configures a zone set with the configured zoneset-name.
zone set name zoneset-name vsan vsan-id
Step 2
Example:
switch(config)# zone set name new vsan 23
To activate a zone set, you must first create the zone and
a zone set.
Tip
Adds a zone as a member of the previously specified zone set.
member name
Step 3
Example:
switch(config-zoneset)# member new
If the specified zone name was not previously configured,
this command will return a "zone not present" error
message:
Tip
Adds a zone to the specified zone set.
zone name zone-name
Step 4
Example:
switch(config-zoneset)# zone name trial
Execute this step only if you need to create a zone from a
zone set prompt.
Tip
Adds a new member to the new zone.
member fcid fcid
Step 5
Example:
switch(config-zoneset-zone)# member fcid
0x222222
Execute this step only if you need to add a member to a
zone from a zone set prompt.
Tip
You do not have to copy the running configuration to the startup configuration to store the active zone
set. However, you need to copy the running configuration to the startup configuration to explicitly store
full zone sets.
Tip
Zone Enforcement
Zoning can be enforced in two ways: soft and hard. Each end device (N port) discovers other devices in the
fabric by querying the name server. When a device logs in to the name server, the name server returns the list
of other devices that can be accessed by the querying device. If an N port does not know about the FC IDs of
other devices outside its zone, it cannot access those devices.
In soft zoning, zoning restrictions are applied only during interaction between the name server and the end
device. If an end device somehow knows the FC ID of a device outside its zone, it can access that device.
Hard zoning is enforced by the hardware on each frame sent by an N port. As frames enter the switch,
source-destination IDs are compared with permitted combinations to allow the frame at wire speed. Hard
zoning is applied to all forms of zoning.
Cisco Nexus 5000 Series NX-OS SAN Switching Configuration Guide, Release 5.2(1)N1(1)
144 OL-27583-01
Configuring and Managing Zones
Zone Sets