<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:48:02" />
    <title>Port Security Versus Fabric Binding </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1837;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1072780"> </a><h1 class="pTitle">
Port Security Versus Fabric Binding

</h1>
<a name="wp1072781"> </a><p class="pBody">
Port security and fabric binding are two independent features that can be configured to complement each 
other. <a href="binding3.html#wp1072791">Table&#160;38-1</a> compares the two features.

</p>
<a name="wp1072830"> </a><p class="pBodyRelative">
</p><div>
<table border="2" cellpadding="2" id="wp1072791table1072785">
  <caption><a name="wp1072791"> </a><div class="pTableTitle">
Table&#160;38-1	 Fabric Binding and Port Security Comparison&#160;

</div>
</caption>
  <tr bgcolor="#CCCCCC" align="left" valign="middle">    <th colspan="1" rowspan="2"><a name="wp1072795"> </a><p class="pCellHeading">
Fabric Binding

</p>
</th>
    <th colspan="1" rowspan="2"><a name="wp1072797"> </a><p class="pCellHeading">
Port Security 

</p>
</th>
</tr>
  <tr bgcolor="#CCCCCC" align="left" valign="middle"></tr>
  <tr align="left" valign="top">    <td><a name="wp1072803"> </a><p class="pBody">
Uses a set of sWWNs and a persistent domain 
ID.

</p>
</td>
    <td><a name="wp1072805"> </a><p class="pBody">
Uses pWWNs and nWWNs or fWWNs and 
sWWNs. 

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1072807"> </a><p class="pBody">
Binds the fabric at the switch level.

</p>
</td>
    <td><a name="wp1072809"> </a><p class="pBody">
Binds devices at the interface level.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1072811"> </a><p class="pBody">
Authorizes only the configured sWWN stored in 
the fabric binding database to participate in the 
fabric.

</p>
</td>
    <td><a name="wp1072813"> </a><p class="pBody">
Allows a preconfigured set of Fibre Channel 
devices to logically connect to a SAN ports. The 
switch port, identified by a WWN or interface 
number, connects to a Fibre Channel device (a host 
or another switch), also identified by a WWN. By 
binding these two devices, you lock these two ports 
into a group (or list).

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1072815"> </a><p class="pBody">
Requires activation on a per VSAN basis.

</p>
</td>
    <td><a name="wp1072817"> </a><p class="pBody">
Requires activation on a per VSAN basis.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1072819"> </a><p class="pBody">
Allows specific user-defined switches that are 
allowed to connect to the fabric, regardless of the 
physical port to which the peer switch is 
connected. 

</p>
</td>
    <td><a name="wp1072821"> </a><p class="pBody">
Allows specific user-defined physical ports to 
which another device can connect.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1072823"> </a><p class="pBody">
Does not learn about switches that are logging in. 

</p>
</td>
    <td><a name="wp1072825"> </a><p class="pBody">
Learns about switches or devices that are logging in 
if learning mode is enabled.

</p>
</td>
</tr>
  <tr align="left" valign="top">    <td><a name="wp1072827"> </a><p class="pBody">
Cannot be distributed by CFS and must be 
configured manually on each switch in the 
fabric.

</p>
</td>
    <td><a name="wp1072829"> </a><p class="pBody">
Can be distributed by CFS.

</p>
</td>
</tr>
</table>
</div>
<p class="pBodyRelative">
</p>
<a name="wp1072832"> </a><p class="pBody">
Port-level checking for xE ports is as follows:

</p>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1072833"> </a><li class="pSmartList1">The switch login uses both port security binding and fabric binding for a given VSAN. 
</li>
<a name="wp1072834"> </a><li class="pSmartList1">Binding checks are performed on the port VSAN as follows:
</li>
<div class="pSmartList2"><ul class="pSmartList2">
<a name="wp1072835"> </a><li class="pSmartList2">E port security binding check on port VSAN</li>
<a name="wp1072836"> </a><li class="pSmartList2">TE port security binding check on each allowed VSAN</li>
</ul></div>
</ul></div>
<a name="wp1072837"> </a><p class="pBody">
While port security complements fabric binding, they are independent features and can be enabled or 
disabled separately.

</p>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
