Chapter 39
Configuring Port Security
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Authorization Scenarios
Assume that the port security feature is activated and the following conditions are specified in the active
database:
•
•
•
•
•
•
•
•
Table 39-2
listed refer to the conditions from
Table 39-2
Device Connection Request
P1, N2, F1
P2, N2, F1
P3, N2, F1
P1, N3, F1
P1, N1, F3
P1, N4, F5
P5, N1, F5
P3, N3, F4
S1, F10
S2, F11
P4, N4, F5 (auto-learning on)
P4, N4, F5(auto-learning off)
S3, F5 (auto-learning on)
S3, F5 (auto-learning off)
P1, N1, F6 (auto-learning on)
P5, N5, F1 (auto-learning on)
S3, F4 (auto-learning on)
S1, F3 (auto-learning on)
P5, N3, F3
P7, N3, F9
OL-18084-01, Cisco MDS NX-OS Release 4.x
A pWWN (P1) is allowed access through interface fc1/1 (F1).
A pWWN (P2) is allowed access through interface fc1/1 (F1).
A nWWN (N1) is allowed access through interface fc1/2 (F2).
Any WWN is allowed access through interface fc1/3 (F3).
A nWWN (N3) is allowed access through any interface.
A pWWN (P3) is allowed access through interface fc1/4 (F4).
A sWWN (S1) is allowed access through interface fc1/10-13 (F10 to F13).
A pWWN (P10) is allowed access through interface fc1/11 (F11).
summarizes the port security authorization results for this active database. The conditions
Authorization Results for Scenario
Table
39-1.
Authorization Condition
Permitted
1
Permitted
1
Denied
2
Permitted
6
Permitted
5
Denied
2
Denied
2
Permitted
1
Permitted
1
Denied
7
Permitted
3
Denied
4
Permitted
3
Denied
4
Denied
2
Denied
7
Denied
7
Permitted
5
Permitted
6
Permitted
6
Cisco MDS 9000 Family CLI Configuration Guide
Reason
No conflict.
No conflict.
F1 is bound to P1/P2.
Wildcard match for N3.
Wildcard match for F3.
P1 is bound to F1.
N1 is only allowed on F2.
No conflict.
No conflict.
P10 is bound to F11.
No conflict.
No match.
No conflict.
No match.
P1 is bound to F1.
Only P1 and P2 bound to F1.
P3 paired with F4.
No conflict.
Wildcard ( * ) match for F3
and N3.
Wildcard ( * ) match for N3.
Auto-learning
39-9