HP 1606 FICON Administrator's Guide v6.4.0 (53-1001771-01, June 2010) - Page 32

Configuring Cascaded FICON

Page 32 highlights

2 Configuring Cascaded FICON Configuring Cascaded FICON In addition to performing the steps listed in "Configuring switched point-to-point FICON" on page 16, you also need to perform the following steps to configure cascaded FICON. CAUTION Configuring the switch for FICON is a disruptive process. The switch must be disabled to configure switch parameters. 1. Enter the switchDisable command to disable each switch in the fabric. 2. Perform the following actions for each switch: a. Enable the IDID flag. b. Set the domain ID. It is highly recommended that the switch ID used in HCD and IOCP be the same as the switch address in hexadecimal. All switches ship from the factory with a default domain ID of 1. Best practice is to use something other than 1 so that a new switch can be added to the fabric without changing the domain ID. 3. Enter the switchEnable command to enable the switches. This rebuilds the fabric. 4. Use the secPolicyCreate command to configure the Switch Connection Control policies on all switches to limit connectivity to only the switches in the selected fabric. switch:admin> secPolicyCreate SCC_POLICY, member;...;member Where: member indicates a switch that is permitted to join the fabric. Specify switches by WWN, domain ID, or switch name. Enter an asterisk (*) to indicate all the switches in the fabric. To create a policy that includes all the switches in the fabric: switch:admin> secPolicyCreate SCC_POLICY "*" 5. Save or activate the new policy by entering either the secPolicySave or the secPolicyActivate command. If neither of these commands is entered, the changes are lost when the session is logged out. To activate the SCC policy: switch:admin> secPolicyActivate 6. Enter the fddCfg command to enable ACL Fabric Wide Consistency Policy and enforce a strict SCC policy switch:admin> fddcfg --fabwideset "SCC:S" 7. Connect and enable channel and control unit (CU) devices. The Query for Security Attributes (QSA) response to the channel indicates that the fabric binding and IDID are enabled. 20 FICON Administrator's Guide 53-1001771-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86

20
FICON Administrator’s Guide
53-1001771-01
Configuring Cascaded FICON
2
Configuring Cascaded FICON
In addition to performing the steps listed in
“Configuring switched point-to-point FICON”
on
page 16, you also need to perform the following steps to configure cascaded FICON.
CAUTION
Configuring the switch for FICON is a disruptive process. The switch must be disabled to configure
switch parameters.
1.
Enter the
switchDisable
command to disable each switch in the fabric.
2.
Perform the following actions for each switch:
a.
Enable the IDID flag.
b.
Set the domain ID. It is highly recommended that the switch ID used in HCD and IOCP be
the same as the switch address in hexadecimal. All switches ship from the factory with a
default domain ID of 1. Best practice is to use something other than 1 so that a new switch
can be added to the fabric without changing the domain ID.
3.
Enter the
switchEnable
command to enable the switches. This rebuilds the fabric.
4.
Use the
secPolicyCreate
command to configure the Switch Connection Control policies on all
switches to limit connectivity to only the switches in the selected fabric.
switch:admin> secPolicyCreate SCC_POLICY, member;...;member
Where:
member
indicates a switch that is permitted to join the fabric. Specify switches by WWN, domain
ID, or switch name. Enter an asterisk (*) to indicate all the switches in the fabric. To create a
policy that includes all the switches in the fabric:
switch:admin>
secPolicyCreate SCC_POLICY ”*”
5.
Save or activate the new policy by entering either the
secPolicySave
or the
secPolicyActivate
command. If neither of these commands is entered, the changes are lost when the session is
logged out. To activate the SCC policy:
switch:admin>
secPolicyActivate
6.
Enter the
fddCfg
command to enable ACL Fabric Wide Consistency Policy and enforce a strict
SCC policy
switch:admin>
fddcfg --fabwideset ”SCC:S”
7.
Connect and enable channel and control unit (CU) devices. The Query for Security Attributes
(QSA) response to the channel indicates that the fabric binding and IDID are enabled.