<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:46" />
    <title>About the VSAN Policy </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1511;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1073219"> </a><h1 class="pTitle">
About the VSAN Policy

</h1>
<a name="wp1073221"> </a><p class="pBody">
Configuring the VSAN policy requires the ENTERPRISE_PKG license (For more information, see 
<span style="font-style: italic">Cisco MDS 9000 Family NX-OS Licensing Guide</span>).

</p>
<a name="wp1073222"> </a><p class="pBody">
You can configure a role so that it only allows tasks to be performed for a selected set of VSANs. By 
default, the VSAN policy for any role is permit, which allows tasks to be performed for all VSANs. You 
can configure a role that only allows tasks to be performed for a selected set of VSANs. To selectively 
allow VSANs for a role, set the VSAN policy to deny, and then set the configuration to permit or the 
appropriate VSANs.

</p>
<a name="wp1073223"> </a><p class="pBodyAutonumNoRule">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> Users configured in roles where the VSAN policy is set to deny cannot modify the configuration for E 
ports. They can only modify the configuration for F or FL ports (depending on whether the configured 
rules allow such configuration to be made). This is to prevent such users from modifying configurations 
that may impact the core topology of the fabric.

</p>
<a name="wp1073224"> </a><p class="pBodyAutonumRel">
<strong>Tip	&nbsp;&nbsp;&nbsp;</strong> Roles can be used to create VSAN administrators. Depending on the configured rules, these VSAN 
administrators can configure MDS features (for example, zone, fcdomain, or VSAN properties) for their 
VSANs without affecting other VSANs. Also, if the role permits operations in multiple VSANs, then the 
VSAN administrators can change VSAN membership of F or FL ports among these VSANs.

</p>
<a name="wp1073225"> </a><p class="pBody">
Users belonging to roles in which the VSAN policy is set to deny are referred to as VSAN-restricted 
users. 

</p>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
