Cisco Nexus 5000 Series - Adding Authorized Port Pairs

•
By saving the running configuration, you save the configuration database and activated entries in the
active database. Learned entries in the active database are not saved.
Adding Authorized Port Pairs
After identifying the WWN pairs that need to be bound, you can add those pairs to the port security database.
Remote switch binding can be specified at the local switch. To specify the remote interfaces, you can use
either the fWWN or sWWN-interface combination.
Tip
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
switch# configure terminal
switch(config)#
Step 1
Enters the port security database mode for the
specified VSAN.
port-security database vsan vsan-id
Example:
switch(config)# port-security database vsan 25
Step 2
Deletes the port security configuration database
from the specified VSAN.
no port-security database vsan vsan-id
Example:
switch(config)# no port-security database vsan 25
Step 3
Configures the specified sWWN to only log in
through SAN port channel 5.
switch(config-port-security)# swwn swwn-id interface
san-port-channel 5
Example:
switch(config-port-security)# swwn
21:00:05:30:23:1a:11:03 interface san-port-channel 5
Step 4
Configures any WWN to log in through the
specified interfaces.
switch(config-port-security)# any-wwn interface fc slot/port
- fc slot/port
Step 5
EXAMPLES
This example shows how to enter the port security database mode for VSAN 2:
switch(config)# port-security database vsan 2
This example shows how to configure the specified sWWN to only log in through SAN port channel 5:
switch(config-port-security)# swwn 20:01:33:11:00:2a:4a:66 interface san-port-channel 5
Cisco Nexus 5000 Series NX-OS SAN Switching Configuration Guide, Release 5.2(1)N1(1)
OL-27583-01 265
Configuring Port Security
Port Security Manual Configuration