ADVERTISEMENT

symacl commands

The symacl command can be used to set up or updates Symmetrix access control information in Symmetrix array.

Below list contains some of the most useful symacl command examples.

• symacl -sid 1234 -file add_devices_to_acc_pool.txt commit

  add_devices_to_acc_pool.txt
------------------------
add dev AAAAA:AAAAB to accpool MY_ACC_POOL;

  
  Add devices AAAAA and AAAAB to MY_ACC_POOL in symmetrix array 1234.
  Copied

• symacl -sid 1234 -file add_hostaccid_to_acc_group.txt commit

  add_hostaccid_to_acc_group.txt
------------------------
add host accid 12345678-12345678-12345678 name Server001 to accgroup MY_ACC_GROUP;

  
  Add host id of Server001 to access group MY_ACC_GROUP in symmetrix array 1234. The host id can be obtained by running symacl -uniqe on Server001.
  Copied

• symacl -sid 1234 -file create_new_acc_group.txt commit

  create_new_acc_group.txt
------------------------
create accgroup MY_ACC_GROUP

  
  Create a new access group called MY_ACC_GROUP in symmetrix array 1234.
  Copied

• symacl -sid 1234 -file create_new_acc_pool.txt commit

  create_new_acc_pool.txt
------------------------
create accpool MY_ACC_POOL;

  
  Create a new access pool called MY_ACC_POOL in symmetrix array 1234.
  Copied

• symacl -sid 1234 -file delete_acc_group.txt commit

  delete_acc_group.txt
------------------------
delete accgroup MY_ACC_GROUP;

  
  Delete access group MY_ACC_GROUP in symmetrix array 1234. All the access control entities ( ACE) related to MY_ACC_GROUP must be deleted prior running this command.
  Copied

• symacl -sid 1234 -file delete_acc_group_and_ace.txt commit

  delete_acc_group_and_ace.txt
------------------------
delete accgroup MY_ACC_GROUP remove_aces=true;

  
  Delete access group MY_ACC_GROUP in symmetrix array 1234. All the access control entities( ACEs) related to MY_ACC_GROUP also be deleted.
  Copied

• symacl -sid 1234 -file delete_acc_pool.txt commit

  delete_acc_pool.txt
------------------------
delete accpool MY_ACC_POOL;

  
  Delete access pool MY_ACC_POOL in symmetrix array 1234. All the access control entities ( ACE) related to MY_ACC_POOL must be deleted prior running this command.
  Copied

• symacl -sid 1234 -file delete_acc_pool_and_ace.txt commit

  delete_acc_pool_and_ace.txt
------------------------
delete accpool MY_ACC_POOL remove_aces=true;

  
  Delete access pool MY_ACC_POOL in symmetrix array 1234. All the access control entities( ACEs) related to MY_ACC_POOL also be deleted.
  Copied

• symacl -sid 1234 -file grand_access_permission.txt commit

  grand_access_permission.txt
------------------------
grant access=RDF to accgroup MY_ACC_GROUP for accpool MY_ACC_POOL;

  
  Create an ACE to allow hosts in MYACC_GROUP to perform RDF operation on devices mentioned access pool MY_ACC_POOL in symmetrix array 1234.
  Copied

• symacl -sid 1234 -file move_hostaccid_to_another_acc_group.txt commit

  move_hostaccid_to_another_acc_group.txt
------------------------
move accid name Server001 to accgroup MY_ANOTHER_ACC_GROUP;

  
  Move host access id of Server001 to another group MY_ANOTHER_ACC_GROUP in symmetrix array 1234.
  Copied

• symacl -sid 1234 -file remove_access_permission.txt commit

  remove_access_permission.txt
------------------------
remove access=RDF from accgroup MY_ACC_GROUP for accpool MY_ACC_POOL;

  
  Remove an ACE to prevent the hosts in MYACC_GROUP to perform RDF operation on devices mentioned access pool MY_ACC_POOL in symmetrix array 1234.
  Copied

• symacl -sid 1234 -file remove_all_ace_from_acc_group.txt commit

  remove_all_ace_from_acc_group.txt
------------------------
remove aces from accgroup MY_ACC_GROUP;

  
  Remove all the access control entities( ACE ) from access group MY_ACC_GROUP in symmetrix array 1234.
  Copied

• symacl -sid 1234 -file remove_devices_from_acc_pool.txt commit

  remove_devices_from_acc_pool.txt
------------------------
remove dev AAAAA:AAAAB from accpool MY_ACC_POOL;

  
  Remove devices AAAAA and AAAAB from MY_ACC_POOL in symmetrix array 1234.
  Copied

• symacl -sid 1234 -file remove_hostaccid_from_acc_group.txt commit

  remove_hostaccid_from_acc_group.txt
------------------------
remove accid name Server001 from accgroup MY_ACC_GROUP;

  
  Remove host access id of Server001 from access group MY_ACC_GROUP in symmetrix array 1234.
  Copied

• symacl -sid 1234 backup -file MyACLSetup.txt

  Back up the access control database for Symmetrix Array to MyACLSetup.txt file
  Copied

• symacl -sid 1234 list -accgroup

  List the access groups defined in vmax array 1234 along with the number of access ids in each group
  Copied

• symacl -sid 1234 list -accpool

  List the access pools defined in vmax array 1234 along with the number of devices in each pool
  Copied

• symacl -sid 1234 list -acl

  list all the Access control entries defined in the array 1234
  Copied

• symacl -sid 1234 show accgroup MyGroup -acl

  Display the details of access group called MyGroup
  Copied

• symacl -sid 1234 show accpool MyPool -acl

  Display the details of access pool called MyPool
  Copied

• symacl -unique

  Display an encrypted 24-digit ACL ID for a host machine
  Copied