A customer reports Fibre Channel login requests from unauthorized sources to a Cisco MDS 9000...

Fibre Channel port security restricts access by validating device identities, such as pWWNs and nWWNs, against the port-security database. Auto-learning works with port security to capture devices that are already successfully logged in and dynamically add their identities to the active port-security database. This establishes a trusted baseline without requiring the administrator to enter every existing device manually. After the valid devices are learned, auto-learning can be disabled and the database activated or enforced so that subsequent login attempts from unauthorized identities are rejected. Enhanced zoning controls permitted communication between members of Fibre Channel zones, but it does not automatically populate the port-security database from logged-in devices. Device aliases provide readable names for Fibre Channel identifiers and simplify configuration; they do not authenticate logins or learn trusted devices for port-security enforcement. Therefore, both auto-learning and port security are required.