Dell PowerEdge M420 Administrator's Manual

Also see for PowerEdge M420: Manual Command reference guide Owner's manual Administrator's guide Information update

Contents

Dell PowerEdge M420 Administrator's Manual Manual pdf 46 page image

32 Dell 8/4Gbps FC SAN Module Administrator’s Guide53-1001345-01Understanding Virtual Fabric restrictionsBUnderstanding Virtual Fabric restrictionsIn OS v6.2.0 and later, all commands are subject to additional RBAC enforcement with regard toVirtual Fabric contexts and switch types. Commands can be executed in one or more of thecontexts described in Table 7. Execution of chassis commands requires chassis permissions.Switch commands are further defined by the switch type restrictions as described in Table 8.Switch type restrictions are not applicable to commands that require chassis permissions.In a Virtual Fabric environment where contexts are enforced, the following Virtual Fabric restrictionsapply to the RBAC permissions specified in Table 6. Refer to userConfig help for more informationon configuring user account access permissions in a Virtual Fabric environment.• Any given role is allowed to execute all switch commands to which the role is authorized in theaccount’s home context. The default home context is the default logical fabric FID 128.• You can change an account’s home context to a specified FID and configure the accountpermissions to access additional Logical Switches specified in the user’s Fabric ID list.• Accounts with user or admin permissions can be granted chassis permissions. A user accountwith the chassis role can execute chassis-level commands at the user RBAC access level. Anadmin account with the chassis role can execute chassis-level commands at the admin RBACaccess level.TABLE 7 Virtual Fabric contextsContext type DefinitionSwitch context Command applies to the current logical switch only, or to aspecified logical switch.Chassis context Command applies to the chassis on which it is executed.Switch and ChassiscontextCommand can be executed in a logical switch context or ina chassis context.Disallowed Command is not supported in Virtual Fabric mode.TABLE 8 Switch TypesSwitch Type DefinitionAll Switches Command can be executed in any switch context.Base Switch Only Command can be executed only on the base switch.Default Switch Only Command can be executed only on the default switch.N/A Command is a chassis command or not supported inVirtual Fabric mode.