Technical data

BCSM IN A NUTSHELL 2008
© 2008 Brocade Communications Systems, Incorporated.
Page 8 of 44
Table 1: Password Policy CLI Commands
BASE FABRIC OS V5.3 SECURITY POLICIES IN THE LOCAL SWITCH DATABASE
• Fabric Configuration Server (FCS):
o Restricts which switches can change the configuration of the fabric
o Basically an access control list
• Device Connection Control (DCC):
o Restricts which Fibre Channel device ports can connect to which Fibre Channel switch ports
o A violation will disable the port and generate a trap
o Prevents host WWN spoofing attacks
• Switch Connection Control (SCC):
o Restricts which switches can join a fabric
o Only one SCC Policy may exist in the fabric
• IP Filter Policy (IPFILTER):
o Filters IP management interface traffic; controls the access to management interfaces
• Fabric Element Authentication Policy (AUTH):
o Authenticates switch-switch and/or device-switch connections
• Password database and user policy (PWD):
o Enables users and passwords configured on one switch to be distributed to other switches