HP StorageWorks 8/20q - Copying a Security Set; Adding Groups to a Security Set; Removing Groups from a Security Set; Activating a Security Set

HP StorageWorks 8/20q Fibre Channel Switch Command Line Interface Guide 95
Copying a security set
To copy a security set and its contents to a new security set, enter the securityset copy command, as
shown in the following example:
8/20q FC Switch (admin-security) #> securityset copy securityset_1 securityset_2
Adding groups to a security set
To add a group to a security set, enter the securityset add command, as shown in the following
example:
8/20q FC Switch (admin-security) #> securityset add securityset_1 group_isl
group_port
Removing groups from a security set
To remove groups from a security set, enter the securityset remove command, as shown in the
following example:
8/20q FC Switch (admin-security) #> sescurityset remove securityset_1 group_isl
group_port
Activating a security set
To apply security to the fabric, enter the securityset activate command, as shown in the following
example:
8/20q FC Switch (admin) #> securityset activate securityset_1
Deactivating a security set
To deactivate the active security set and disable security in the fabric, enter the
securityset deactivate command, as shown in the following example:
8/20q FC Switch (admin) #> securityset deactivate
Managing groups
This sub-section describes the group managment tasks. All of these tasks require an Admin session and a
Security Edit session.
Creating a group
Creating a group involves specifying a group name and a group type. There are three types of groups:
• ISL group—secures connected switches
• Port group—secures connected devices
• MS group—secures management server commands
To create a new port group, enter the group create command, as shown in the following example:
8/20q FC Switch (admin-security) #> group create group_port port
Deleting a group
To delete group_port from the security database, enter the group delete command, as shown in the
following example:
8/20q FC Switch (admin-security) #> group delete group_port
Renaming a group
To rename group_port to port_1, enter the group rename command, as shown in the following example:
8/20q FC Switch (admin-security) #> group rename group_port port_1