HP StorageWorks Fabric OS 5.X Command Reference Guide (AA-RVHVB-TE, September 2005)

572 Fabric OS commands
If the fabric is in secure mode and no FCS switches are present in the fabric, the command can be issued
on any switch. This is used to recover a secure fabric that has no FCS switch. Only the --fcs option can
be used in this case.
NOTE: Using Fabric OS CLI or Web Tools, ensure that all users are logged off the fabric before
enabling secure mode; otherwise, users on non-FCS switches lose their telnet sessions.
HP recommends that a maximum of 80 WWNs be specified in the FCS policy using the command. To
add more WWNs use the secPolicyAdd command.
Operands
This command has the following operands:
list_of_switches Specify a list of switches for the FCS policy. The list of switches must
be enclosed in quotation marks, and each member switch must be
separated from the others by semicolons. The members can be
specified using domain, WWN, or switch name format, as follows:
“5; 10:00:00:60:69:00:00:20; star1“
If a member is specified by domain or switch name, the switch must
be in the fabric or the command fails.
This operand is optional. If no operand is specified, the session
becomes interactive and you are prompted to enter FCS member
values.
-fcs
list_of_switches
Specify a list of switches for the FCS policy. Specifying "*" defaults
this to all the switches currently present in the fabric. If a member is
specified by domain or switch name, the switch must be in the fabric
or the command fails.
If the list of FCS switches is not specified, the session becomes
interactive and the user is prompted to enter FCS members.
--currentpwd Use the current passwords of the switch the command is run on (the
primary FCS switch) for root, factory, admin and user accounts.
Non-FCS admin account password is set the same as FCS admin
account password. The command does not prompt for new
passwords. Only sessions whose account password has changed
are logged out. This option can be used only on a fabric with secure
mode disabled and only when the command is run on the switch
specified as the primary FCS switch.
--lockdown[=scc
|=dcc]
Create SCC and DCC policies to lockdown the fabric. SCC policy
is populated with all the switches present in the fabric when the
command is executed. DCC policies are populated with the
devices present in the fabric when the command is executed,
locking down devices on a per port basis. Ports with no devices
attached to them also are locked down with an empty DCC policy
so no device can be connected to them, preserving the fabric as is.
The lockdown operand creates both SCC and DCC policies. With
the optional argument of --lockdown=scc or
--lockdown=dcc, only the specified policy is created. This
operand can be used only on a fabric with secure mode disabled
and only when the command is run on the switch specified as the
primary FCS switch.