HP StorageWorks 2/16V HP StorageWorks Fabric OS 5.3.1b release notes (5697-764 - Page 10

Important notes

Get HP StorageWorks 2/16V - SAN Switch PDF manuals and user guides View all HP StorageWorks 2/16V manuals
Add to My Manuals
Save this manual to your list of manuals

Page 10 highlights

Important notes Table 2 provides information relevant to the release. Table 2 Important release information Topic Description ipfilter command Starting with Fabric OS version 5.3.0, you can use the ipfilter command to block unauthorized Telnet access. The option to disable Telnet using the configure command is no longer available. Use the following command to create a policy to block Telnet access to any station: ipfilter --create blockTelnet -type ipv4 ipfilter --addrule blockTelnet -sip any -dp 23 -proto tcp -act deny ipfilter -- activate blockTelnet Use the following command to restore default policies for IPv4: ipfilter --activate default_ipv4 -- See the Fabric OS 5.3.0 command reference guide for more information on the ipfilter command. PKI certification If you have purchased and installed the Secure Fabric OS option, go to the following HP website for information on obtaining a PKI certificate: http://www.hp.com/storage/go/secureos. FICON support With release 5.2.0 and later, the Switch Connection Control high integrity requirement for cascading FICON is available in the standard base Fabric OS. End users can now deploy new cascade FICON Directors without purchasing a separate Secure Fabric OS license. To add a new FICON Director into existing cascaded configurations already running Secured Fabric OS, HP recommends that users continue to deploy Secure Fabric OS on the new FICON Director instead of migrating to FOS ACL configuration. NOTE: The FC4-48 port Blade is not supported to connect to System z environments via FICON channels or via FCP zLinux on System z. To attach the Director to the System z environment, use an FC4-16 or FC4-32 Fibre Channel port Blade. Diagnostics backport test Backport tests may be run only in the following configurations: • A pure SAN Director 2/128 (only CP2 and FC-16 blades) • A SAN Director 2/128 with no FC4-16 blades installed, using Option 5. Do not run backport tests in any configuration other than the two listed above; use the minicycle test instead. Diagnostics spinsilk test The following configurations will pass the spinsilk test: • A pure SAN Director 2/128 (only CP2 and FC-16 blades) • A pure 4/256 SAN Director, Option 5 • A pure 4/256 SAN Director, Option 5 (with FC4-16 blades) The following configurations will fail the spinsilk test; use the minicycle test instead: • A mixed SAN Director 2/128 (with either CP4 or FC4-16 blades) • A pure 4/256 SAN Director, Option 1 (a pure 4/256 SAN Director refers to a Director with CP4 and FC4-16 blades only). 10

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
Important notes
Table 2
provides information relevant to the release.
Table 2 Important release information
Topic
Description
ipfilter
command
Starting with Fabric OS version 5.3.0, you can use the
ipfilter
command
to block unauthorized Telnet access. The option to disable Telnet using the
configure
command is no longer available.
Use the following command to create a policy to block Telnet access to any station:
ipfilter --create blockTelnet -type ipv4 ipfilter
--addrule blockTelnet -sip any -dp 23 -proto tcp -act deny
ipfilter -- activate blockTelnet
Use the following command to restore default policies for IPv4:
ipfilter --activate default_ipv4 --
See the
Fabric OS 5.3.0 command reference guide
for more information on the
ipfilter
command.
PKI certi
fi
cation
If you have purchased and installed the Secure Fabric OS option, go to
the following HP website for information on obtaining a PKI certi
fi
cate:
h
t
t
p
:
/
/
w
w
w
.
h
p
.
c
o
m
/
s
t
o
r
a
g
e
/
g
o
/
s
e
c
u
r
e
o
s
.
FICON support
With release 5.2.0 and later, the Switch Connection Control high integrity
requirement for cascading FICON is available in the standard base Fabric OS.
End users can now deploy new cascade FICON Directors without purchasing
a separate Secure Fabric OS license.
To add a new FICON Director into existing cascaded con
fi
gurations already
running Secured Fabric OS, HP recommends that users continue to deploy
Secure Fabric OS on the new FICON Director instead of migrating to FOS ACL
con
fi
guration.
NOTE:
The FC4-48 port Blade is not supported to connect to System z environments
via FICON channels or via FCP zLinux on System z. To attach the Director
to the System z environment, use an FC4-16 or FC4-32 Fibre Channel
port Blade.
Diagnostics backport test
Backport tests may be run only in the following con
fi
gurations:
•
A pure SAN Director 2/128 (only CP2 and FC-16 blades)
•
A SAN Director 2/128 with no FC4-16 blades installed, using Option 5.
Do not run backport tests in any con
fi
guration other than the two listed above;
use the minicycle test instead.
Diagnostics spinsilk test
The following con
fi
gurations will
pass
the spinsilk test:
•
A pure SAN Director 2/128 (only CP2 and FC-16 blades)
•
A pure 4/256 SAN Director, Option 5
•
A pure 4/256 SAN Director, Option 5 (with FC4-16 blades)
The following con
fi
gurations will
fail
the spinsilk test; use the minicycle test instead:
•
A mixed SAN Director 2/128 (with either CP4 or FC4-16 blades)
•
A pure 4/256 SAN Director, Option 1 (a pure 4/256 SAN Director refers
to a Director with CP4 and FC4-16 blades only).
10