92 Device Security Configuration
Modifying the security database
To modify the security database:
1. Open an Admin session with the admin start command.
SN6000 FC Switch #> admin start
An Admin session prevents other accounts from making changes at the same time either through Telnet,
QuickTools, Enterprise Fabric Management Suite, or Simple SAN Connection Manager.
2. To open a Security Edit session, enter the security edit command. The Security Edit session
provides access to the securityset, group, and security commands used to make modifications
to the security database.
SN6000 FC Switch (admin) #> security edit
SN6000 FC Switch (admin-security)#> securityset . . .
SN6000 FC Switch (admin-security)#> group . . .
SN6000 FC Switch (admin-security)#> security . . .
3. When you finish making changes, take one of the following actions:
• To save the changes and close the Security Edit session, enter the security save command.
SN6000 FC Switch (admin-security)#> security save
• To close the Security Edit session without saving changes, enter the security cancel command.
SN6000 FC Switch (admin-security)#> security cancel
4. To activate the changes to the active security set, enter the security activate command.
SN6000 FC Switch (admin)#> security activate
5. To release the Admin session for other administrators, enter the admin end command.
SN6000 FC Switch (admin)#> admin end
Resetting the security database
There are two ways to remove all groups and security sets from the security database:
• Enter the security clear command, as shown in the following example:
SN6000 FC Switch (admin-security) #> security clear
All security information will be cleared. Please confirm (y/n): [n] y
SN6000 FC Switch (admin-security) #> security save
• Enter the reset security command, as shown in the following example.
SN6000 FC Switch (admin) #> reset security
The security configuration values, Autosave and FabricBindingEnabled, remain unchanged.
Managing security sets
All security set management tasks except Activating a security set, page 93 and Deactivating a security set,
page 93 require a Security Edit session.
Creating a security set
To create a new security set, enter the securityset create command, as shown in the following
example:
SN6000 FC Switch (admin-security) #> securityset create securityset_1
Deleting a security set
To delete a security set, enter the securityset delete command, as shown in the following example:
SN6000 FC Switch (admin-security) #> securityset delete securityset_1
Renaming a security set
To rename a security set. enter the securityset rename command, as shown in the following
example:
SN6000 FC Switch (admin-security) #> securityset rename securityset_old
securityset_new