Port Security Features
Each Nx and xE port can be configured to restrict a single port or a range of ports.
Enforcement of port security policies are done on every activation and when the port tries to come up.
The port security feature requires all devices connecting to a switch to be part of the port security active
database. The software uses this active database to enforce authorization.
Configuring a Port Binding
To configure a port binding on a switch, perform the following steps.
From the Fabric Manager, choose Port Security from one of the VSANs on the menu tree.
Step 1
The Information pane of the Fabric Manager displays port security information for that VSAN.
Click the Config tab.
Step 2
You see a list of the port security configured port bindings for that VSAN.
Click the Create Row icon.
Step 3
The Create Binding dialog box displays.
Step 4
Choose the switch for which you want to create the port binding from drop-down list.
Step 5
Choose the WWN DEVICE device type for that switch.
Enter the PORT ID of the switch to bind to.
Step 6
Enter the port type.
Step 7
Enter the interface (e.g. fc1/1)
Step 8
Click Create to creating the port binding, or click Close to close the Create Binding dialog box without
Step 9
creating a port binding.
Copying an Active Configuration to the Running Configuration
To copy the active configuration to the running configuration, perform the following steps.
From the Fabric Manager, choose Port Security from one of the VSANs on the menu tree.
Step 1
The Information pane of the Fabric Manager displays Port Security information for that VSAN.
Click the Action tab.
Step 2
You see a list of switches for that VSAN.
Check the CopyActive ToConfig check box next to the switch for which you want to copy the
Step 3
configuration.
The active configuration is copied to the running configuration when the binding is activated.
Step 4
Uncheck the check box if you do not want the configuration copied when the binding is activated.
Cisco MDS 9000 Fabric Manager Switch Configuration Guide
20-2
Chapter 20
Configuring Port Security
OL-7753-01