<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:59" />
    <title>Configuring Port Security Using the Configuration Wizard </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1802;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1114154"> </a><h1 class="pTitle">
Configuring Port Security Using the Configuration Wizard

</h1>
<a name="wp1114155"> </a><p class="pBody">
The Port Security Configuration wizard provides step-by-step procedures for setting up the Port Security 
Policy for a selected VSAN. The Port Security Configuration wizard also supports the central 
management through CFS, making it possible to complete the entire configuration at one place.

</p>
<a name="wp1114156"> </a><p class="pBody">
The wizard automatically conducts few essential operations. For example, if you want central 
management, the wizard conducts operations to check CFS capability, enable CFS, and issue CFS 
commit at the proper stages.

</p>
<a name="wp1114157"> </a><p class="pBody">
To manage security at a particular port, you do not need to run through the wizard to configure the port 
security policy from the VSAN wide, but you can directly edit accesses on the port itself. This operation 
can be done through the Port Binding dialog box. If the port&#39;s belonging switch has not enabled port 
security yet, the dialog box enables security first. If the port security is enabled, the dialog box will edit 
the policy database based on user operations.

</p>
<a name="wp1114158"> </a><p class="pBody">
CFS should be enabled on all switches in the VSAN. A CFS master switch is selected to do all 
configurations. All changes will be distributed to the VSAN through the CFS <span style="font-weight: bold">commit </span>command.

</p>
<a name="wp1114159"> </a><h2 class="pHeading2">
Prerequisites
</h2>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1114164"> </a><li class="pSmartList1">Enable port security on the switch.
</li>
<a name="wp1114165"> </a><li class="pSmartList1">Define port security policy either manually by editing bound devices or switches or ports or by using 
autolearning.
</li>
<a name="wp1114166"> </a><li class="pSmartList1">Activate port security policy.
</li>
<a name="wp1114167"> </a><li class="pSmartList1">Ensure that activated and configured databases are synchronized through copy.
</li>
<a name="wp1114168"> </a><li class="pSmartList1">Copy the activated database to be the startup configuration.
</li>
</ul></div>
<a name="wp1114169"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1114170"> </a><p class="pBody">
<b style="font-weight: normal" class="cBold">To configure port security, follow these steps:
</b>
</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1114174"> </a><li class="pSmartList1">Click the<b class="cBold"> Port Security</b> <img src="images/187190anz.jpg" height="42" width="44" id="wp1114172" border="0" hspace="0" vspace="0"/> button on the toolbar.
</li>
<a name="wp1114175"> </a><p class="pListBodyLevel1">
Before launching the Port Security Setup Wizard, DCNM-SAN checks the CFS capability of the 
switches in the VSAN. 

</p>
<a name="wp1114179"> </a><p class="pListBodyLevel1">
If VSAN context is not available, the wizard prompts to select VSAN .

</p>
<a name="wp1114186"> </a><li class="pSmartList1">Select the VSAN from the list and click <b class="cBold">OK</b>.
</li>
<a name="wp1114187"> </a><li class="pSmartList1">Do the following in the <b style="font-weight: normal" class="cBold">Select Master Switch</b> page:
</li>
<div class="pSmartList2"><ul class="pSmartList2">
<a name="wp1114188"> </a><li class="pSmartList2">Select the required master switch.</li>
<a name="wp1114189"> </a><li class="pSmartList2">Select <b class="cBold">Automatically learn all logged in ports in VSAN</b> to Autolearn port configuration.</li>
</ul></div>
<a name="wp1114190"> </a><li class="pSmartList1">Click <b class="cBold">Next</b> to proceed.
</li>
<a name="wp1114191"> </a><p class="pListBodyLevel1">
You see the <b style="font-weight: normal" class="cBold">Edit and Activate Configuration</b> page. 

</p>
<a name="wp1114192"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> From Cisco NX-OS Release 5.2, devices can bind to vFC interfaces.

</p>
<a name="wp1114193"> </a><li class="pSmartList1">Click <b class="cBold">Insert</b> to create port binding.
</li>
<a name="wp1114194"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> When interfaces are inserted for binding, vFC ports can be selected.

</p>
<a name="wp1114195"> </a><li class="pSmartList1">Two types of port binding can be created using the Insert Port Security Devices dialog box:
</li>
<div class="pSmartList2"><ul class="pSmartList2">
<a name="wp1114196"> </a><li class="pSmartList2"><b style="font-weight: normal" class="cBold">Port WWN</b>-pWWN bound to an interface WWN.</li>
<a name="wp1114197"> </a><li class="pSmartList2"><b style="font-weight: normal" class="cBold">Switch</b>-Switch WWN bound to an interface. (Mainly useful for ISL binding).</li>
</ul></div>
<a name="wp1114198"> </a><li class="pSmartList1">Select the type of port binding by clicking the radio buttons and enter the supporting values.
</li>
<a name="wp1114199"> </a><li class="pSmartList1">Click <b class="cBold">OK.
</b></li>
<a name="wp1114200"> </a><li class="pSmartList1">Click <b class="cBold">Close</b> to exit the Insert Port Security window.
</li>
<a name="wp1114201"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> To delete an entry in the Edit and Activate Configuration page of the wizard, select the entry and 
click the <b class="cBold">Delete</b> button.

</p>
<a name="wp1114202"> </a><li class="pSmartList1">Click<b class="cBold"> Finish </b>to complete the Port Security Configuration for the selected switch.
</li>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
