HP StorageWorks Fabric Manager 5.x Administrator Guide (AA-RUQSF-TE, September 2005)

Fabric Manager 5.x administrator guide 187
Configure the HTTP policy to grant access to IP addresses and subnets so they can establish HTTP
connections to the switches in the fabric.
Create an API policy to control the workstations that can use the API to access the fabric.
To configure or edit any of these policies:
1. From the SAN Elements tab, right-click a the primary FCS switch of the secure fabric that you want to set
policies on and select Security > Security Policy Editor from the context menu.
The Policy Editor opens (see Figure 116 on page 183).
2. Select the tab that corresponds to the policy you want (Telnet, RSNMP, WSNMP, HTTP, or API).
The policy you selected is displayed (see Figure 119). The telnet policy is used in this example.
Figure 119 Configuring the telnet policy
3. Click Create Policy.
You have now created an empty policy, that denies the policy type (telnet, RSNMP, WSNMP, HTTP, or
API) access from all hosts to all switches in the fabric.
CAUTION: If you create policies without Fabric Manager client/server IP addresses, or if you create
empty Serial, telnet, HTTP, and API policies simultaneously, you cannot then manage security or the switch.
If you use Fabric Manager to update the API policy to disable API access from the current host (either by
creating an empty policy, or by specifically excluding this host from the API policy list), the security
transaction is locked and can it take up to two hours before the Fabric OS releases the security transaction.
You cannot modify the policies until the security transaction is released.
If you want to continue managing security and the switch, continue with the rest of the procedure.
4. Enter the IP address of a host that you want to include in the policy in the Enter IP Address field.
NOTE: The IP address of your Fabric Manager client must appear in the Serial, telnet, RSNMP, WSNMP,
HTTP, and API policies or you cannot access the fabric with Fabric Manager.
5. Optional: Click Add FM Server IP to add the Fabric Manager server IP address, or click Add this FM
Client IP to add the Fabric Manager client IP address.