HP StorageWorks 2/16V HP StorageWorks Fabric OS 5.3.2b release notes (5697-007 - Page 9

Important notes, via FICON channels or via FCP zLinux on System z. To attach the Director

Page 9 highlights

CAUTION: If the 4/256 SAN Director integrates the FC4-48 Blade or any new software features in Fabric OS 5.2.0a (such as FCR trunking) you cannot downgrade to a Fabric OS version earlier than Fabric OS 5.2.0a. If you want to do so, you must (a) remove these features, (b) physically remove the FC4-48 Blade, and then (c) downgrade the firmware. • For any other new software features or increased scalability limits supported by Fabric OS 5.3.x, the downgrade will be disruptive and will require a cold reboot. • A Fabric OS 5.3.x configuration file cannot be used on the same switch after the switch has been downgraded to firmware version 5.1.x or 5.2.x. • When you downgrade to Fabric OS 5.0.x, you must also remove additional 5.1.x features and any installed B-series MP Router blades. Important notes Table 2 provides important information about to this release. Table 2 Important release information Topic Description ipfilter command Starting with Fabric OS version 5.3.0, you can use the ipfilter command to block unauthorized Telnet access. The option to disable Telnet using the configure command is no longer available. Use the following command to create a policy to block Telnet access to any station: ipfilter --create blockTelnet -type ipv4 ipfilter --addrule blockTelnet -sip any -dp 23 -proto tcp -act deny ipfilter -activate blockTelnet Use the following command to restore default policies for IPv4: ipfilter --activate default_ipv4 -- See the Fabric OS 5.3.0 command reference guide for more information on the ipfilter command. PKI certification If you have purchased and installed the Secure Fabric OS option, go to the following HP website for information on obtaining a PKI certificate: http:// www.hp.com/ storage/go/secureos. FICON support With release 5.2.0 and later, the Switch Connection Control high integrity requirement for cascading FICON is available in the standard base Fabric OS. End users can now deploy new cascade FICON Directors without purchasing a separate Secure Fabric OS license. To add a new FICON Director into existing cascaded configurations already running Secured Fabric OS, HP recommends that users continue to deploy Secure Fabric OS on the new FICON Director instead of migrating to FOS ACL configuration. NOTE: The FC4-48 port Blade is not supported to connect to System z environments via FICON channels or via FCP zLinux on System z. To attach the Director to the System z environment, use an FC4-16 or FC4-32 Fibre Channel port Blade. HP StorageWorks Fabric OS 5.3.2b release notes 9

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20

CAUTION:
If the 4/256 SAN Director integrates the FC4-48 Blade or any new software features in Fabric OS
5.2.0a (such as FCR trunking) you cannot downgrade to a Fabric OS version earlier than Fabric OS
5.2.0a. If you want to do so, you must (a) remove these features, (b) physically remove the FC4
48
Blade, and then (c) downgrade the firmware.
For any other new software features or increased scalability limits supported by Fabric OS 5.3.x,
the downgrade will be disruptive and will require a cold reboot.
A Fabric OS 5.3.x configuration file cannot be used on the same switch after the switch has been
downgraded to firmware version 5.1.x or 5.2.x.
When you downgrade to Fabric OS 5.0.x, you must also remove additional 5.1.x features and
any installed B-series MP Router blades.
Important notes
Table 2
provides important information about to this release.
Table 2 Important release information
Description
Topic
Starting with Fabric OS version 5.3.0, you can use the
ipfilter
command to
block unauthorized Telnet access. The option to disable Telnet using the
configure
command is no longer available.
Use the following command to create a policy to block Telnet access to any station:
ipfilter --create blockTelnet -type ipv4 ipfilter --addrule
blockTelnet -sip any -dp 23 -proto tcp -act deny ipfilter --
activate blockTelnet
Use the following command to restore default policies for IPv4:
ipfilter
--activate default_ipv4 --
See the
Fabric OS 5.3.0 command reference guide
for more information on the
ipfilter
command.
ipfilter
command
If you have purchased and installed the Secure Fabric OS option, go to the following
HP website for information on obtaining a PKI certificate:
h
t
tp:// w
w
w
.hp
.co
m/
s
t
o
r
age/go/s
ec
ur
eo
s
.
PKI certification
With release 5.2.0 and later, the Switch Connection Control high integrity
requirement for cascading FICON is available in the standard base Fabric OS. End
users can now deploy new cascade FICON Directors without purchasing a separate
Secure Fabric OS license.
To add a new FICON Director into existing cascaded configurations already running
Secured Fabric OS, HP recommends that users continue to deploy Secure Fabric OS
on the new FICON Director instead of migrating to FOS ACL configuration.
NOTE:
The FC4-48 port Blade is not supported to connect to System z environments
via FICON channels or via FCP zLinux on System z. To attach the Director to
the System z environment, use an FC4-16 or FC4-32 Fibre Channel port Blade.
FICON support
HP StorageWorks Fabric OS 5.3.2b release notes
9