Home » HP Manuals » Storage Devices » HP Cisco MDS 9124 » Manual Viewer

HP Cisco MDS 9124 Cisco MDS 9000 Family Fabric Manager Configuration Guide, Re - Page 876

Configuring Transform Sets, Parameter, Accepted Values, Keyword, Platform, IPsec

Add to My Manuals
Save this manual to your list of manuals

Page 876 highlights

Crypto IPv4-ACLs Chapter 44 Configuring IPsec Network Security Send documentation comments to [email protected] Note When you enable IPsec, the Cisco SAN-OS software automatically creates a default transform set (ipsec_default_tranform_set) using AES-128 encryption and SHA-1 authentication algorithms. Table 44-2 provides a list of allowed transform combinations for IPsec. Table 44-2 IPsec Transform Configuration Parameters Parameter Accepted Values Keyword encryption algorithm 56-bit DES-CBC esp-des 168-bit DES esp-3des 128-bit AES-CBC 128-bit AES-CTR1 esp-aes 128 esp-aes 128 ctr hash/authentication algorithm1 (optional) 256-bit AES-CBC 256-bit AES-CTR1 SHA-1 (HMAC variant) MD5 (HMAC variant) esp-aes 256 esp-aes 256 ctr esp-sha1-hmac esp-md5-hmac AES-XCBC-MAC esp-aes-xcbc-mac 1. If you configure the AES counter (CTR) mode, you must also configure the authentication algorithm. Note The following table lists the supported and verified settings for IPsec and IKE encryption authentication algorithms on the Microsoft Windows and Linux platforms: Platform IKE Microsoft iSCSI initiator, Microsoft IPsec implementation on Microsoft Windows 2000 platform 3DES, SHA-1 or MD5, DH group 2 Cisco iSCSI initiator, 3DES, MD5, DH group 1 Free Swan IPsec implementation on Linux platform IPsec 3DES, SHA-1 3DES, MD5 Configuring Transform Sets To configure transform sets using Fabric Manager, follow these steps: Step 1 Expand Switches > Security and then select IPSec in the Physical Attributes pane. You see the IPSec configuration shown in Figure 44-19. 44-26 Cisco MDS 9000 Family CLI Configuration Guide OL-16184-01, Cisco MDS SAN-OS Release 3.x

Section	Page
Cisco MDS 9000 Family Fabric Manager Configuration Guide, Release 3.x	1
Contents	3
New and Changed Information	53
Preface	65
Audience	65
Organization	65
Document Conventions	70
Related Documentation	72
Release Notes	72
Compatibility Information	72
Regulatory Compliance and Safety Information	72
Hardware Installation	72
Cisco Fabric Manager	73
Command-Line Interface	73
Part 1	81
Getting Started	81
Product Overview	83
Hardware Overview	83
Cisco MDS 9500 Series Multilayer Directors	84
Cisco MDS 9200 Series Fabric Switches	85
Cisco MDS 9216i Multiprotocol Fabric Switch	85
Cisco MDS 9222i, Cisco MDS 9216A and Cisco MDS 9216 Multilayer Fabric Switches	85
Cisco MDS 9100 Series Fixed Configuration Fabric Switches	86
Cisco SAN-OS Software Configuration	87
Tools for Software Configuration	87
CLI	88
Cisco MDS 9000 Fabric Manager	88
Software Configuration Overview	88
Basic Configuration	89
Advanced Configuration	89
Switch Configuration	89
Fabric Configuration	89
Security	90
IP Services	90
Intelligent Storage Services	90
Network and Switch Monitoring	90
Traffic Management	91
Installation of Cisco MDS SAN-OS and Fabric Manager	93
Starting a Switch in the Cisco MDS 9000 Family	93
Initial Setup Routine	94
Preparing to Configure the Switch	94
Default Login	95
Setup Options	95
Assigning Setup Information	96
Configuring Out-of-Band Management	96
Configuring In-Band Management	100
Using the setup Command	104
Accessing the Switch	104
Where Do You Go Next?	105
About Cisco Fabric Manager	105
Fabric Manager Server	106
Fabric Manager Client	106
Fabric Manager Server Proxy Services	106
Device Manager	107
Performance Manager	107
Fabric Manager Web Server	107
Cisco MDS 9000 Switch Management	107
Storage Management Solutions Architecture	108
In-Band Management and Out-of-Band Management	109
mgmt0	109
IPFC	109
Installing the Management Software	110
Before You Install	110
Supported Software	111
Minimum Hardware Requirements	112
Upgrading Fabric Manager in Cisco SAN-OS Releases Prior to 3.1(2b)	112
Upgrading Fabric Manager in Cisco SAN-OS Releases 3.1(2b) and Later to 3.2(1)	112
Installing the Database	112
Installing Oracle	112
Installing PostgreSQL	114
Increasing UDP Buffer Size	115
Database Backup and Restore-Postgres	115
Backup	116
Restore	116
Importing PM Statitics Data to Fabric Manager	116
Installing Fabric Manager	116
Creating Startup Files in Solaris	124
Installing Device Manager	124
Creating FM/DM Shortcut Manually	126
Upgrading the Management Software	128
Upgrading Fabric Manager Server and Fabric Manager Standalone Version Using the Fabric Manager Update Installer	129
Integrating Cisco Fabric Manager with Other Management Tools	130
Running Fabric Manager Behind a Firewall	130
Uninstalling the Management Software	132
Fabric Manager Server	133
Fabric Manager Server Overview	133
Fabric Manager Server Features	133
Installing and Configuring Fabric Manager Server	134
Installing Fabric Manager Server	134
Unlicensed Versus Licensed Fabric Manager Server	135
Installing Fabric Manager Web Server	135
Verifying Performance Manager Collections	135
Managing a Fabric Manager Server Fabric	135
Selecting a Fabric to Manage Continuously	136
Fabric Manager Server Properties File	137
Modifying Fabric Manager Server	138
Adding or Removing Fabric Manager Server Users	138
Changing the Fabric Manager Server User Name and Password	139
Changing the Polling Period and Fabric Rediscovery Time	139
Using Device Aliases or FC Aliases	140
Saving Device Aliases to the Switch	140
Authentication in Fabric Manager	141
Fabric Manager Authentication Overview	141
Best Practices for Discovering a Fabric	143
Setting Up Discovery for a Fabric	143
Performance Manager Authentication	144
Fabric Manager Web Server Authentication	145
Fabric Manager Client	147
About Fabric Manager Client	147
Fabric Manager Advanced Mode	148
Launching Fabric Manager Client in Cisco SAN-OS Release 3.2(1) and Later	148
Fabric Manager Client Quick Tour	152
Menu Bar	153
Toolbar	154
Logical Domains Pane	155
Filtering	156
Physical Attributes Pane	156
Information Pane	156
Detachable Tables	158
Fabric Pane	158
Context Menus	160
Saving the Map	160
Purging Down Elements	161
Multiple Fabric Display	161
Filtering by Groups	162
Status Bar	164
Setting Fabric Manager Preferences	164
Network Fabric Discovery	165
Modifying the Device Grouping	166
Using Alias Names as Enclosures	166
Controlling Administrator Access with Users and Roles	167
Using Fabric Manager Wizards	167
Fabric Manager Troubleshooting Tools	168
Device Manager	169
Device Manager Overview	169
Device Manager Features	169
Launching Device Manager	170
Using Device Manager	170
Menu Bar	172
Toolbar Icons	172
Dialog Boxes	173
Tabs	173
Legend	174
Supervisor and Switching Modules	175
Context Menus	175
Setting Device Manager Preferences	176
Fabric Manager Web Server	177
Fabric Manager Web Server Overview	177
Navigating Fabric Manager Web Server	178
Navigation Tree	178
Table Filtering and Navigation	179
Printing	179
Exporting to a File	179
Sorting Columns	179
Installing Fabric Manager Web Server	179
Using Fabric Manager Web Server with SSL	181
Launching Fabric Manager Web Server	183
Health	184
Viewing Summary Information	185
Viewing Fabric Information	185
Viewing Syslog Information	186
Viewing Analysis Reports	187
Performance	188
Viewing Performance Summary Information	189
Viewing Performance Information for End Devices	190
Viewing Performance Information for ISLs	191
Viewing Performance Information for Flows	192
Viewing Performance Information for GigE Ports	193
Viewing Other Statistics	193
Viewing Detailed Traffic Information	194
Viewing Predicted Future Performance	195
Using the Default Values	195
Using Your Own Values	196
Viewing Switch Bandwidth	197
Inventory	198
Viewing Detailed Information for VSANs	198
Viewing Detailed Information for Switches	199
Viewing License Information	200
Viewing Detailed Information for Modules	200
Viewing Detailed Information for End Devices	201
Viewing Detailed Information for ISLs	202
Viewing Detailed Information for Zones	203
Viewing Summary Inventory Information	204
Custom	205
Creating a Custom Report Template	205
Viewing Custom Reports by Template	207
Generating Custom Reports by Template	207
Modifying a Custom Report Template	208
Viewing Scheduled Jobs by Report Template	209
Admin	210
Recovering a Web Server Password	211
Starting, Restarting, and Stopping Services	211
Adding, Editing, and Removing Managed Fabrics	212
Viewing Trap and Syslog Registration Information	214
Configuring Forwarding of Notifications for Events	215
Viewing and Disconnecting Clients	216
Configuring Fabric Manager Server Preferences	217
Adding and Removing Communities	217
Configuring AAA Information	219
Adding and Removing Users	219
Adding and Removing Roles	220
Creating Performance Collections	222
Configuring Other Statistics	223
Configuring Collection Thresholds	225
Configuring the RRD Database	226
Viewing Log Information	227
Download	227
Downloading Fabric Manager Client	227
Performance Manager	229
Performance Manager Architecture	229
Data Interpolation	230
Data Collection	230
Using Performance Thresholds	230
Flow Setup Wizards	231
Flow Statistics Configuration	231
About Flow Statistics	232
Counting Flow Statistics	232
Cisco Traffic Analyzer	235
Understanding SPAN	235
Using Cisco Traffic Analyzer with Performance Manager	236
Understanding the PAA-2	236
Understanding Cisco Traffic Analyzer	237
Installing Cisco Traffic Analyzer	237
Accessing Traffic Analyzer from Fabric Manager Web Server	239
Part 2	241
Cisco MDS SAN-OS Installation and Switch Management	241
Obtaining and Installing Licenses	243
Licensing Terminology	243
Licensing Model	244
Licensing High Availability	250
Options to Install a License	250
Obtaining a Factory-Installed License	251
Performing a Manual Installation	251
Obtaining the License Key File	251
Installing the License Key File	252
Installing Licenses Using Fabric Manager License Wizard	253
Installing or Updating Licenses Using Device Manager	254
Identifying License Features in Use	255
Uninstalling Licenses	256
Updating Licenses	256
Grace Period Alerts	257
License Transfers Between Switches	258
Displaying License Information	258
Viewing License Information in Fabric Manager	258
Viewing License Information in Device Manager	258
Viewing Licenses Using Fabric Manager Web Server	259
Fabric Manager Server Licensing	259
On-Demand Port Activation Licensing	261
About On-Demand Port Activation Licensing	261
Port-Naming Conventions	262
Port Licensing	262
License Status Definitions	263
Configuring Port Activation Licenses	264
Checking the Status of Licenses	264
Making a Port Eligible for a License	265
Acquiring a License for a Port	266
Initial Configuration	269
Assigning a Switch Name	269
Verifying the Module Status	270
Configuring Date, Time, and Time Zone	271
NTP Configuration	272
About NTP	272
NTP Configuration Guidelines	273
Configuring NTP	274
Edit an NTP Server or Peer Configuration	274
Delete an NTP Server or Peer	275
NTP CFS Distribution	276
Configure NTP with CFS	276
Committing NTP Configuration Changes	277
Discarding NTP Configuration Changes	277
Releasing Fabric Session Lock	277
Database Merge Guidelines	278
Management Interface Configuration	278
Default Gateway Configuration	279
Telnet Server Connection	279
Disabling a Telnet Connection	279
Configuring CDP	280
Using the CFS Infrastructure	283
About CFS	283
Cisco SAN-OS Features Using CFS	284
CFS Features	284
CFS Protocol	285
CFS Distribution Scopes	285
CFS Distribution Modes	286
Uncoordinated Distribution	286
Coordinated Distribution	286
Unrestricted Uncoordinated Distributions	286
Disabling CFS Distribution on a Switch	286
CFS Application Requirements	287
Enabling CFS for an Application	288
Locking the Fabric	289
Committing Changes	289
Discarding Changes	290
Saving the Configuration	290
Clearing a Locked Session	290
CFS Merge Support	291
Displaying CFS Configuration Information	291
CFS Distribution over IP	292
CFS Regions	294
About CFS Regions	294
Managing CFS Regions Using Fabric Manager	295
Creating CFS Regions	295
Assigning Features to CFS Regions	295
Moving a Feature to a Different Region	296
Removing a Feature from a Region	297
Deleting CFS Regions	297
CFS Example Using Fabric Manager	298
CFS Example Using Device Manager	301
Default Settings	301
Configuring FlexAttach Virtual pWWN	303
About FlexAttach Virtual pWWN	303
FlexAttach Virtual pWWN Guidelines and Requirements	303
Configuring FlexAttach Virtual pWWN	303
Enabling FlexAttach Virtual pWWN	304
Automatically Enabling FlexAttach Virtual pWWN	304
Launching FlexAttach in Fabric Manager	305
Manually Enabling FlexAttach Virtual pWWN	306
Mapping pWWN to Virtual pWWN	308
Debugging FlexAttach Virtual pWWN	310
Security Settings for FlexAttach Virtual pWWN	310
FlexAttach Virtual pWWN CFS Distribution	311
Difference Between San Device Virtualization and FlexAttach Port Virtualization	311
Software Images	313
About Software Images	313
Dependent Factors for Software Installation	313
Selecting the Correct Software Images for Cisco MDS 9100 Series Switches	314
Selecting the Correct Software Images for Cisco MDS 9200 Series Switches	314
Selecting the Correct Software Images for Cisco MDS 9500 Family Switches	314
Essential Upgrade Prerequisites	315
Software Upgrade Methods	317
Determining Software Compatibility	317
Automated Upgrades	318
Benefits of Using the Software Install Wizard	318
Recognizing Failure Cases	319
Using the Software Install Wizard	320
Upgrading Services Modules	323
Non-Disruptive Upgrades on Fabric and Modular Switches	324
Preparing for a Non-Disruptive Upgrade on Fabric and Modular Switches	324
Performing a Non-Disruptive Upgrade on a Fabric Switch	325
Maintaining Supervisor Modules	325
Replacing Supervisor Modules	326
Standby Supervisor Module Boot Variable Version	326
Standby Supervisor Module Bootflash Memory	326
Standby Supervisor Module Boot Alert	326
Installing Generation 2 Modules in Generation 1 Chassis	327
Replacing Modules	327
Default Settings	328
Managing Configuration Files	329
About Flash Devices	329
Internal bootflash:	330
Formatting Flash Devices and File Systems	330
Initializing Internal bootflash:	330
Using the File System	331
Flash Files	331
Creating a Directory	332
Deleting an Existing File or Directory	333
Copying Files	334
Performing Other File Manipulation Tasks	335
Working with Configuration Files	336
Downloading Configuration Files to the Switch	336
Saving the Configuration	336
Saving the Running Configuration	336
Saving Startup Configurations in the Fabric	337
Backing Up the Current Configuration	337
Configuring High Availability	339
About High Availability	339
Switchover Mechanisms	340
HA Switchover Characteristics	340
Initiating a Switchover	340
Switchover Guidelines	341
Process Restartability	341
Synchronizing Supervisor Modules	341
Managing System Hardware	345
Displaying Switch Hardware Inventory	345
,Running the CompactFlash Report	346
Displaying the Switch Serial Number	347
Displaying Power Usage Information	347
Power Supply Configuration Modes	348
Power Supply Configuration Guidelines	349
About Crossbar Management	351
Operational Considerations When Removing Crossbars	352
Graceful Shutdown of a Crossbar	352
Backward Compatibility for Generation 1 Modules in Cisco MDS 9513 Directors	354
About Module Temperature	354
Displaying Module Temperature	355
About Fan Modules	355
Default Settings	356
Managing Modules	357
About Modules	357
Supervisor Modules	358
Switching Modules	359
Services Modules	359
Verifying the Status of a Module	359
Obtaining Supervisor Module Statistics	360
Checking the State of a Module	360
Reloading Modules	361
Reloading a Switch	361
Power Cycling Modules	362
Preserving Module Configuration	363
Powering Off Switching Modules	364
Identifying Module LEDs	365
Default Settings	368
Part 3	371
Switch Configuration	371
Configuring Interfaces	373
Common Interface Configuration	373
Fibre Channel Interfaces	374
32-Port Switching Module Configuration Guidelines	374
About Interface Modes	375
E Port	376
F Port	377
FL Port	377
NP Ports	377
TL Port	377
TE Port	378
SD Port	378
ST Port	378
Fx Port	378
B Port	378
Auto Mode	379
About Interface States	379
Administrative States	379
Operational States	379
Reason Codes	380
Graceful Shutdown	383
Setting the Interface Administrative State	383
Configuring Interface Modes	384
Configuring Administrative Speeds	384
Autosensing	385
About Interface Descriptions	385
About Frame Encapsulation	385
About Receive Data Field Size	385
Configuring Receive Data Field Size	385
Identifying the Beacon LEDs	386
About Speed LEDs	386
About Beacon Mode	387
Configuring Beacon Mode	387
About Bit Error Thresholds	387
Switch Port Attribute Default Values	388
About SFP Transmitter Types	388
Displaying SFP Transmitter Types	388
About Gathering Interface Statistics	389
Gathering Interface Statistics	389
TL Ports for Private Loops	390
About TL Ports	390
Configuring TL Ports	391
About TL Port ALPA Caches	391
Buffer Credits	392
About Buffer-to-Buffer Credits	392
Configuring Buffer-to-Buffer Credits	392
About Performance Buffers	393
Configuring Performance Buffers	393
About Extended BB_credits	393
Extended BB_credits on Generation 1 Switching Modules	394
Extended BB_credits on Generation 2 Switching Modules	395
Configuring Extended BB_credits	395
Management Interfaces	395
About Management Interfaces	395
Configuring Management Interfaces	396
VSAN Interfaces	396
About VSAN Interfaces	396
Creating VSAN Interfaces	397
Default Settings	398
Configuring N Port Virtualization	399
About NPV	399
NP Ports	401
NP Links	401
Internal FLOGI Parameters	401
Default Port Numbers	402
NPV Guidelines and Requirements	402
Configuring NPV	403
Multiple VSAN Support	403
Configuring NPV with Fabric Manager	403
Using the NPV Setup Wizard	404
Configuring NPV with Fabric Manager	418
DPVM Configuration	419
NPV and Port Security	420
Configuring Generation 2 Switches and Modules	421
About Generation 2 Modules and Switches	421
Port Groups	422
Port Rate Modes	424
Dedicated Mode	426
Shared Mode	426
Dynamic Bandwidth Management	426
Out-of-Service Interfaces	427
Buffer Credit Allocation	427
Buffer Pools	428
BB_Credit Buffers for Switching Modules	429
48-port 4-Gbps Fibre Channel Module BB_Credit Buffers	429
24-port 4-Gbps Fibre Channel Module BB_Credit Buffers	431
18-Port Fibre Channel/4-Port GigabitEthernet Multiservice Module BB_Credit Buffers	432
12-Port 4-Gbps Switching Module BB_Credit Buffers	432
4-Port 10-Gbps Switching Module BB_Credit Buffers	433
BB_Credit Buffers for Fabric Switches	434
Cisco MDS 9134 Fabric Switch BB_Credit Buffers	434
Cisco MDS 9124 Fabric Switch BB_Credit Buffers	434
Cisco MDS 9222i Multiservice Modular Switch BB_Credit Buffers	435
Extended BB_Credits	435
About Combining Generation 1 and Generation 2 Switching Modules	435
Port Indexes	436