HP StorageWorks 4/8 HP StorageWorks Fabric OS 5.3.x administrator guide (5697-
HP StorageWorks 4/8 - SAN Switch Manual
View all HP StorageWorks 4/8 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP StorageWorks 4/8 manual content summary:
- HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 1
HP StorageWorks Fabric OS 5.3.x administrator guide Part number:5697-0244 November 2009 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 2
accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Fabric OS and Secure Fabric OS are registered trademarks of Brocade Communications Systems, Inc - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 3
Guide 17 Supported HP StorageWorks hardware 17 Intended audience 17 Related documentation 17 Glossary of terms 18 Document conventions and symbols 18 HP technical support 19 HP Setting the default account passwords 26 Changing default passwords summary 27 How to change default passwords at - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 4
(RBAC 61 Role Permissions 62 Configuring the authentication model 65 How to set the switch authentication model 65 Managing the local database user accounts 65 About the default accounts 66 Defining local user accounts 66 How to display account information 66 How to create an account 67 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 5
84 4/8 and 4/16 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, 4/32B SAN Switch and 400 MP Router 85 How to set the boot PROM password for a switch with a recovery string 85 SAN Director 2/128 and 4/256 SAN Director 85 How to - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 6
download without disabling a switch 112 Security considerations 113 Troubleshooting configuration download 113 Messages captured in the logs 113 Restoring configurations in a FICON environment 114 Downloading configurations across a fabric 114 4/256 SAN Director configuration form 115 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 7
Supported switch WWN 156 Admin domain compatibility and availability 157 Admin domains and merging 157 Compatibility 157 Firmware upgrade and downgrade scenarios 158 Managing admin domains 158 Understanding the AD transaction model 159 Implementing admin domains 159 How to set the default - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 8
Summary of the firmware download process 177 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch and 400 MP - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 9
new SAN Director 2/128 with two domains 214 Converting an installed SAN Director 2/128 to support two domains 215 Setting 230 Support 230 Proxy devices 230 Routing types 231 Fibre Channel NAT and phantom domains 232 Setting up the FC-FC routing service 232 Fabric OS 5.3.x administrator guide 9 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 10
zoning with McDATA 261 Completing the configuration 262 12Administering FICON fabrics 265 Overview of Fabric OS support for FICON 265 Supported switches 266 4/256 Director, SAN Switch 4/32 and SAN Switch 4/32B FICON notes 266 Types of FICON configurations 267 Control Unit Port (CUP 267 FICON - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 11
configuration file for SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, SAN Director 2/128, and 4/256 SAN Director switches 283 Sample RMF configuration file for mainframe 284 13Configuring the distributed manager server 287 Enabling and disabling the platform services 287 Controlling access - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 12
SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Director 2/128, and 4/256 SAN Director (FC2-16 port blades 351 HP StorageWorks SAN Switch 4/32, 4/256 SAN Director, 4/64 SAN Switch, 400 MP Router and (FC4-16, FC4-32 Trunking distances 366 Troubleshooting trunking problems 367 Listing link - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 13
configuration 380 Activating default zones 381 To activate a default zone 381 To view the current default zone access mode configurations in a fabric 389 Adding a new switch or fabric 389 Splitting a fabric 391 Using and monitoring FCIP tunneling 393 Supported platforms for FCIP 393 guide 13 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 14
FCIP links 415 Troubleshooting FCIP links 415 switch requirements 441 HP StorageWorks switch requirements 441 Supported features 442 Unsupported HP StorageWorks password behaviour 447 Password management information 447 Password prompting behaviors 449 Password migration during firmware - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 15
Password recovery options 450 D Using Remote Switch 453 About Remote Switch 453 Remote switch capabilities 453 Using Remote Switch with a gateway 453 E Zone merging scenarios 455 Index 457 Figures 1 HP StorageWorks license key screen 37 2 DH-CHAP authentication 130 3 Fabric with two admin - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 16
16 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 17
4012 Brocade 4024 Brocade 5000 HP StorageWorks 4/8 SAN Switch or HP StorageWorks 4/16 SAN Switch HP StorageWorks SAN Switch 2/8V HP StorageWorks SAN Switch 2/16V HP StorageWorks SAN Switch 2/32 HP StorageWorks SAN Switch 4/32 HP StorageWorks 4/64 SAN Switch HP StorageWorks SAN Director 2/128 HP - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 18
HP StorageWorks Fabric OS 5.3.x release notes Glossary of terms This guide uses industry standard SAN terminology. However, some terms are intrinsic to Fabric OS 5.3.0. See the Brocade Glossary supporting information or specific instructions. NOTE: Provides additional information. TIP: - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 19
://www.hp.com. Click Contact HP to find locations and telephone numbers. Helpful web sites For other product information, see the following HP web sites: • http://www.hp.com • http://www.hp.com/go/storage • http://www.hp.com/support/ • http://www.docs.hp.com Fabric OS 5.2.x administrator guide 17 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 20
18 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 21
). The guide applies to the following product models: • HP StorageWorks switches: 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 22
, refer to the Fabric Manager Administrator's Guide. • A third-party application using the API For third-party application procedures, refer to the third-party API documentation. About the CLI Fabric OS CLI is the complete fabric management tool for HP StorageWorks SANs that enables you to: • Access - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 23
switch:admin> help timeout Administrative Commands timeout(1m) NAME timeout - Sets or displays the timeout value for a login session. SYNOPSIS timeout [timeval] AVAILABILITY admin (set) all users ( Track Changes help information Zoning help information Fabric OS 5.3.0 administrator guide 23 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 24
24 Introducing Fabric OS CLI procedures - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 25
. SAN Director 2/128 (configured with two domains) have two logical switches (sw0 and sw1). The login prompt is displayed when the telnet connection finds the switch in the network. 3. Enter the account ID at the login prompt. See "Setting the default account passwords" on page 26 for instructions - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 26
you are prompted to change them. Enter the new system passwords, or press Ctrl-c to skip the password prompts. See "How to change default passwords at login" on page 28. 5. Verify that the login was successful. The prompt displays the switch name and user ID to which you are connected. login: admin - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 27
4 Default administrative account names and passwords Model HP StorageWorks 4/16 SAN Switch and 4/8 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32,SAN Switch 4/32, 4/64 SAN Switch, 4/32B SAN Switch, 400 MP Router switches *HP StorageWorks SAN Director 2/128 and 4/256 SAN Director - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 28
. Saving password to stable storage. Password saved to stable storage successfully. Please change your passwords now. for user - user Changing password for user Enter new password: ***** Password changed. Saving password to stable storage. Password saved to stable storage successfully. switch:admin - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 29
SAN Director 2/128 and 4/256 SAN Director models, and in environments where DHCP service or to specify an IP address for your switch Ethernet interface, you can do so by entering supported in SANs running Fabric OS versions earlier than 5.2.x. Fabric OS beginning with 2.6.0, 3.1.0, and 4.0.0 supports - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 30
CIDR block notation to set up your IP addresses. Configuring DHCP By default, some HP switches have DHCP enabled. SAN Director 2/128 and 4/256 SAN Director models do not support DHCP. The Fabric OS DHCP client supports the following parameters: • External Ethernet port IP addresses and subnet masks - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 31
Plug DHCP enabled switches in to the network, power on the switch, and the switch automatically obtains the Ethernet IP address, Ethernet subnet mask, and default gateway address from the DHCP server. The DHCP client can only connect to a DHCP server on the same subnet as the switch. Do not enable - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 32
troubleshooting, you should set them correctly. Authorization access to set or change date and time for a switch see the Fabric OS Command Reference Manual. NOTE: If you are downgrading Guide for the detailed information about setting time zones using the offset format. See "About the firmware - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 33
to keep the time zone setup at the default setting. • System services started at the switch boot up reflect the time zone changes only after switch 0. • For dual domain Directors (SAN Director 2/128), both switches in the same chassis will be in the same time zone. Dual Domain chassis do not support - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 34
tsTimeZone command as follows: switch:admin> tstimezone --interactive Chile 15) Northern Mariana Islands 2) Cook Islands 16) Palau 3) Ecuador 17) Papua New Guinea 20) Samoa (western) 7) Kiribati 21) Solomon Islands 8) Marshall Islands 22) Tokelau 9) Micronesia 23) Tonga 10) Nauru 24 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 35
south Idaho & east Oregon 16) Mountain Time - Navajo 17) Mountain Standard Time - Arizona 18) Pacific Time 19) Alaska Time 20) Alaska Time - Alaska panhandle switch since IPv6 is not supported; the default value LOCL will be distributed to pre-5.3.0 switches. Fabric OS 5.3.0 administrator guide 35 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 36
If you purchase an HP StorageWorks Power Pack switch model, optional software licenses are included with the licensed Power Pack supplied with the switch software. If you did not purchased an HP StorageWorks Power Pack switch model, you can purchase licenses separately from HP. HP then provides you - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 37
Power Pack supplied with the switch software; or, when you purchase a license, HP gives you a transaction key to be used to obtain a license key. To see a switch webkey.external.hp.com/welcome.asp. The HP StorageWorks Software License Key instruction page opens: Figure 1 HP StorageWorks license key - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 38
marks are optional. For HP StorageWorks Director models, licenses are effective on both CP blades and on all logical switches, but are valid only 16 port upgrade 2 Domain Fabric license Ports on Demand license - additional 16 port upgrade How to remove a licensed feature 1. Connect to the switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 39
updates. The default name for the following switches is swd77: • HP StorageWorks 4/16 SAN Switch and 4/8 SAN Switch • SAN Switch 2/8V • SAN Switch 2/16V • SAN Switch 2/32 • SAN Switch 4/32 • 4/64 SAN Switch • 4/32B SAN Switch • 400 MP Router • SAN Director 2/128 • 4/256 SAN Director NOTE: Changing - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 40
for future reference. Working with domain IDs Although domain IDs are assigned dynamically when a switch is enabled, you can reset them manually so that you The default domain ID for HP StorageWorks switches is 1. The default domain ID applies to the logical switches in the SAN Director 2/128 that - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 41
" 15: fffc0f 10:00:00:60:69:80:47:74 10.32.220.15 0.0.0.0 "ras015" 16: fffc10 10:00:00:60:69:80:47:75 10.32.220.16 0.0.0.0 "ras016" 19: fffc13 10:00:00:05:1e:34:00:ad 10.32.220.19 0.0.0.0 "ras019" 20: fffc14 10:00:00:05:1e:34:00:63 10 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 42
ports in 4-port increments up to 16 ports by purchasing and installing the HP StorageWorks 4-Port Upgrade License. You can also purchase an E-port license upgrade if your switch does not yet support full-fabric access. Table 5 shows the ports that are enabled by default and the ports that can be - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 43
instructions supported on the Brocade 4Gb SAN Switch for c-Class Bladesystem embedded switch only. See ://www.hp is manually switch and log in as admin. 2. Enter the licensePort --show command. switch:admin> licenseport --show 24 ports are available in this switch Fabric OS 5.3.0 administrator guide - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 44
the POD license associations. Log in to the switch with a user account that has the Admin role to enable or disable the Dynamic PODs feature. This feature is supported on the Brocade 4Gb SAN Switch for c-Class Bladesystem embedded switch only. See ://www.hp.com for latest product updates. To enable - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 45
12 ports are assigned to the full POD license Ports assigned to the base switch license: 1, 2, 3, 4, 5, 6, 7, 8, 17, 18, 19, 20 Ports assigned to the full POD license: 0, 9, 10, 11, 12, 13, 14, 15, 16, 21, 22, 23 Managing POD licenses This section explains how to allocate licenses by reserving - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 46
switch:admin> licenseport --show 24 ports are available in this switch Full POD license is installed Dynamic POD method is in use 24 port assignments are provisioned for use in this switch 15, 16, 17, 18, 19, 20 7. Enter the switchEnable command to bring the switch back online. switch:admin> - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 47
the fabric will be lost. How to disable a port 1. Connect to the switch and log in as admin. 2. HP StorageWorks 4/16 SAN Switch and 4/8 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, 4/64 SAN Switch, 4/32B SAN Switch and 400 MP Router: Enter the following command - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 48
a port 1. Connect to the switch and log in as admin. 2. HP StorageWorks 4/16 SAN Switch and 4/8 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, 4/64 SAN Switch, 4/32B SAN Switch and 400 MP Router: Enter the following command: switch:admin> portenable portnumber where - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 49
to switches; the gateway simply provides E_Port connectivity from one switch to another. By default, switch 16 SAN Switch and 4/8 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, 4/64 SAN Switch, 4/32B SAN Switch and 400 MP Router SAN Director 2/128 and 4/256 SAN - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 50
192.168.68.196 "switch78" 15: fffc0f 10:00:00:60:69:30:1e:16 192.168.174.73 0.0.0.0 "switch73" 33: fffc21 10:00:00:60:69:90:02 :60:69:90:03:32 192.168.144.122 0.0.0.0 "switch122" The Fabric has 15 switches switch:admin> How to verify device connectivity 1. Connect to the switch and log in as - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 51
switch:admin> agshow Worldwide Name Ports Enet IP Addr Firmware Local/Remote Name 10:00:00:05:1e:02:1d:b0 16 10.32.53.4 v5.2.1 local ag_01 10:00:00:05:1e:03:4b:e7 24 10.32.60.95 v5.2.1 local ag_02 10:00:00:05:1e:35:a2:58 20 10.32 OS Command Reference Manual. For troubleshooting information on the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 52
change, an error message is logged and an SNMP connUnitStatusChange trap is sent. HP StorageWorks 4/16 SAN Switch and 4/8 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, 4/64 SAN Switch, 4/32B SAN Switch and 400 MP Router: The output is similar to the following - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 53
. Enter the switchStatusPolicyShow command to view your current switch status policy configuration: HP StorageWorks SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, 4/64 SAN Switch, 4/32B SAN Switch and 400 MP Router: The following example Fabric OS 5.3.0 administrator guide 53 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 54
as executed on a SAN Switch 2/32 switch. The output is similar on SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 4/32, 4/64 SAN Switch, and 400 MP Router models: : switch:admin> switchstatuspolicyset To change the overall switch status policy parameters The current overall switch status policy - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 55
and IP network facilities fail. • If too many events are generated by the switch, the system message log will become a bottleneck and audit events will be dropped by the Fabric OS. • If the user name, IP address, or user interface is not transported an audit message is logged by adding the message - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 56
User ID>///,/,, Switch names are logged for switch details on message formats. See "Working with diagnostic features" on page switch:admin> auditcfg --show Audit filter is enabled. 2-SECURITY 4-FIRMWARE To - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 57
) Wed Jan 25 16:12:09 2006... The system is going down for system halt NOW !! INIT: Switching to runlevel: 0 INIT: Sending processes the TERM signal Unmounting all filesystems. The system is halted flushing ide devices: hda Power down. 5. Power off the switch. Fabric OS 5.3.0 administrator guide 57 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 58
Fabric OS 5.3.0 supports automatic restart of Daemon (Port and Switch SCNs, firmwareDownload, configDownload). Remote Access Service Log Daemon logs error detection, reporting, handling, and presentation of data into a format consumable by management tools and the user - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 59
Fabric OS provides two options for authenticating users-remote RADIUS services and/or the local switch user database. Both options allow users to be centrally managed using the following methods: • Local user database: Manually synchronize the local user database using the distribute command to push - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 60
can run commands using options that display information only, such as running userConfig --show -a to show all users on a switch. M Modify The user can run commands using options that create, change, and delete objects on the system, such as running userconfig --change username -r rolename - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 61
User Operator Switch admin Fabric Watch O OM OM FICON O OM OM Firmware Management O OM OM FRU Management O OM OM HA (High Availability) O O OM iSCSI OO O Switch OM OM OM O OM OM O OM N O OM N O OM N O OM OM O OM OM OM OM N Fabric OS 5.3.0 administrator guide 63 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 62
(continued) Category Role permission User Operator Switch admin Switch Port Management O OM OM Topology OO O User Management NN N WWN Card each switch. Refer to "Configuring the authentication model" on page -65 for more information. NOTE: Set the authentication model on each switch. - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 63
Configuring the authentication model This section explains how to configure authentication of the switch management channel connections. Fabric OS 5.3.0 supports use of both the local user database and RADIUS service at the same time. Use the aaaConfig command to set the authentication model for - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 64
provides the following predefined accounts in the switch-local user database. Change the password for all defaults during the initial installation and configuration, see Table 13. Table 13 Default local user accounts Account Name Role user User admin Admin root Root factory Factory Admin - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 65
that must be changed the first time the user logs in. 3. In response to the prompt, enter a password for the account. The password is not displayed when you enter it on the command line. How to delete an account 1. Connect to the switch and log in. 2. Enter the following command: userConfig - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 66
-defined or default accounts. Unlocks the user account. Specifies an expired password that must be changed the first time the user logs in. How to add an administrative domain to the account 1. Connect to the switch and log in. 2. Enter the command userConfig --addad [-h - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 67
user default account names. Starting with Fabric OS v5.1.0 password policies apply. For information on password behavior when you upgrade (or downgrade) firmware, see "Upgrading and downgrading firmware" on page 174. How to change the password for the current login account 1. Connect to the switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 68
database from distributions" on page 70 • "Configuring password policies" on page 71 Distributing the local user database This section explains how to distribute the switch-local user database and passwords to other switches in the fabric. The distributed database replaces (overwrites) the database - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 69
in this section apply to the switch-local user database only. Configured password policies (and all user account attribute and password state information) are synchronized across CPs and remain unchanged after an HA failover. Password policies can also be manually distributed across the fabric. All - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 70
accounts when users are setting their own passwords. The password history policy is enforced only when a new password is defined. Specify the number of past password values that are disallowed when setting a new password. Allowable password history values range between 1 and 24. The default value is - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 71
password for another user. • MaxPasswordAge Specifies the maximum number of days that can elapse before a password must be changed, and is also known as the password expiration period. MaxPasswordAge values in range from 0 to 999. The default user on each switch instance. The counters for all user - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 72
. Along with each account name, assign appropriate switch access roles. RADIUS supports all the defined RBAC roles described in Table 9 on page 61. Users must enter their assigned RADIUS account name and password when logging in to a switch that has been configured with RADIUS. After the RADIUS - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 73
the dictionary file, define the role for the user in a configuration file. For example to grant the user jsmith the Admin role, you would add into the configuration file: jsmithAuth-Type:= Local, User-Password == "jspassword" Brocade-Auth-Role = "admin" Fabric OS 5.3.0 administrator guide 75 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 74
-opr Auth-Type := Local, User-Password == "password" Brocade-Auth-Role = "operator", Brocade-AVPairs1 = "ADList=1,2;HomeAD=2", Brocade-AVPairs2 = "ADList=-4-8,20;ADList=7,9,12", Setting up RADIUS AAA service Fabric OS 3.2, 4.4.0, and later support RADIUS Authentication, Authorization, and Accounting - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 75
servers do not respond (because of power failure or network problems), the switch uses local authentication. Consider the following effects of the use of RADIUS service on other Fabric OS features: • When RADIUS service is enabled, all account passwords must be managed on the RADIUS server. The - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 76
password file is to force the switch to authenticate using PAP; this requires the -a pap option with the aaaConfig command. Clients are the switches that will be using the RADIUS server; each client must be defined. By default, all IP addresses are blocked. On dual-CP switches (SAN Director 2/128 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 77
must be reentered after encryption is enabled. If the password is not reentered, then CHAP authentication will not work and the user will be unable to authenticate from the switch. • Configuring a user Internet Authentication Service (IAS) is the Microsoft implementation of a RADIUS server and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 78
password in the switch configuration. After clicking Finish, repeat steps 2 through 4 for all switches on which RADIUS authentication will be used. 5. In the Internet Authentication Service User) for which you want to use RADIUS. Apply this policy to the user groups .... 16. In the Configure VSA (RFC - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 79
click Finish. 20.After returning to the Internet Authentication Service window, repeat switches (SAN Director 2/128 and 4/256 SAN Director), the switch sends its RADIUS request using the IP address of the active CP. When adding clients, add both the active and standby CP IP addresses so that users - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 80
the next server is contacted. The default is three seconds. Time-out support the radiuslocal mode. How to enable and disable a RADIUS server 1. Connect to the switch and log in as admin. 2. Enter this command to enable RADIUS + local: switch:admin> aaaconfig --radiuslocal Local is used if the user - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 81
service 1. Connect to the switch and log in as admin. 2. Enter this command: switch: power outage or network problems. To enable or disable local authentication, enter the appropriate command: switch default switch accounts (admin and user) or any user-defined account. You must know the passwords - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 82
procedure during a planned down time. 4/8 and 4/16 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, 4/32B SAN Switch and 400 MP Router How to set the boot PROM password for a switch with a recovery string 1. Connect to the serial - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 83
are not recorded). Record this password for future use. The new password is automatically saved. 7. Reboot the switch. SAN Director 2/128 and 4/256 SAN Director The boot PROM and recovery passwords must be set for each CP blade on SAN Director 2/128 and 4/256 SAN Directors: How to set the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 84
procedure during a planned down time. 4/8 and 4/16 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, 4/32B SAN Switch and 400 MP Router How to set the boot PROM password for a switch without a recovery string 1. Create a serial - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 85
or telnet) to the switch. If secure mode is enabled, connect to the primary FCS switch. 2. Log in as root. 3. Enter the command for the type of password that was lost: passwd user passwd admin passwd factory 4. Enter the requested information at the prompts. Fabric OS 5.3.0 administrator guide 87 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 86
To recover a lost root or boot PROM password, contact HP. You must have previously set a recovery string to recover the boot PROM password. 88 Managing user accounts - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 87
's guide. Secure protocols Fabric OS supports the secure protocols shown in Table 16. T, able 16 Secure protocol support Protocol Description SSL Supports SSLv3, 128-bit encryption by default. Fabric OS uses SSL to support HTTPS. A certificate must be generated and installed on each switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 88
HP switch default. Ensuring network security To ensure security, Fabric OS supports secure shell (SSH) encrypted sessions in v4.1.x and later. SSH encrypts all messages, including the client's transmission of password during login. The SSH package contains a daemon (sshd), which runs on the switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 89
supports SSH protocol v2.0 (ssh2). For more information on SSH, refer to the SSH IETF web site: http://www.ietf.org/ids.by.wg/secsh.html Refer to SSH, The Secure Shell: The Definitive Guide default. To prevent users from passing clear text passwords over the network when they connect to the switch, - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 90
SAN Director 2/128 and 4/256 SAN Director 4/8 SAN Switch and 4/16 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, 4/32B SAN - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 91
fabrics). Refer to "Using the FC-FC routing service" on page 227 for details about the FC-FC Routing Service and it relationship with Secure Fabric OS. Table 20 lists the defaults for accessing hosts, devices, switches, and zones. Table 20 Access defaults Hosts Any host can access the fabric by - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 92
-bit encryption, you should use the latest version of your browser. For example, Internet Explorer 6.0 and later supports 128-bit encryption by default. You can display the encryption support (called "cipher strength") using the Internet Explorer Help:About menu option. If you are running an earlier - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 93
Description The switch certificate. browser window. 4. On each switch: a. Install the certificate. switches, consider using one certificate authority (CA) to sign all management certificates for a fabric. If you use different CAs, management services support for the 2048-bit key size - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 94
FTP server to which the CSR is to be sent. Enter your account name and password on the server. Obtaining certificates Check the instructions on the CA Web site; then, perform this procedure for each switch: 1. Generate and store the CSR as described in "Generating a public/private key" on page 95 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 95
password on the server. Installing a switch certificate Perform this procedure on each switch: 1. Connect to the switch and log in as admin. 2. Enter this command: switch the encryption key length (40, 56, or 128). Type yes. Type yes. Example Configure... System services (yes, y, no, n): [no] ssl - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 96
=Brocade, OU=Software, O=Brocade Communications, L=San Jose, ST=California, C=US Issuer: CN=Brocade, OU=Software, O=Brocade Communications, L=San Jose, ST=California, C=US Serial number: 0 Valid from: Thu Jan 15 16:27:03 PST 2004 until: Sat Feb 14 16:27:03 PST 2004 Certificate fingerprints: MD5: 71 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 97
refer to the Fabric OS Command reference manual. Table 23 Commands for displaying and deleting Troubleshooting certificates If you receive messages in the browser or in a pop-up window when logging in to the target switch using HTTPS, refer to Table 24. Table 24 OS 5.3.0 administrator guide 99 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 98
are two main MIB trap choices: • Brocade-specific MIB trap Associated with the -specific Brocade MIB (SW-MIB), this MIB monitors Brocade switches specifically. • FibreAlliance MIB trap Associated with the FibreAlliance MIB (FA-MIB), this MIB manages SAN switches and devices from any company that - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 99
configure for authentication and privacy: switch:admin> configure Not all options will be available on an enabled switch. To disable the switch, use the "switchDisable" command. Configure... System services (yes, y, no, n): , MIB capability, and system group. Fabric OS 5.3.0 administrator guide 101 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 100
switch:admin> snmpconfig --set snmpv3 SNMPv3 user configuration: User (rw): [snmpadmin1] adminuser Auth Protocol [MD5(1)/SHA(2)/noAuth(3)]: (1..3) [3] 1 New Auth Passwd: Verify Auth Passwd: Priv Protocol [DES(1)/noPriv[2]): (1..2) [2] 1 New Priv Passwd: Verify Priv Passwd: User [0.0.0.0] 10.32.225.1 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 101
systemGroup ***** This command will reset the agent's system group configuration back to factory default ***** sysDescr = Fibre Channel Switch sysLocation = End User Premise sysContact = Field Support authTraps = 0 (OFF) ***** Are you sure? (yes, y, no, n): [no] y Fabric OS 5.3.0 administrator - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 102
MIB-II system variables: sysDescr = FC Switch sysLocation = End User Premise sysContact = Field Support. authTraps = 1 (ON) SNMPv1 community configured yet SNMP access list configuration: Entry 0: Access host subnet area 192.168.64.0 (rw)] Entry 1: No access host configured yet Entry 2: No access - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 103
, sysDescr: [FC Switch] sysLocation: [End User Premise] sysContact: [Field Support.] authTrapsEnabled (true, configuration: Access host subnet area in dot notation: [0.0.0.0] 192.168.64.0 Read/Write? (true, t, false, f): [true] Access ...done. value = 1 = 0x1 Fabric OS 5.3.0 administrator guide 105 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 104
access list configuration: Entry 0: Access host subnet area 192.168.64.0 (rw)] Entry 1: No access host configured yet Entry 2: default Current SNMP Agent Configuration Customizable MIB-II system variables: sysDescr = Fibre Channel Switch. sysLocation = End User Premise sysContact = Field Support - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 105
the options for configuring SNMP MIB traps switch:admin> snmpmibcapset The SNMP Mib/Trap Capability has been set to support FE-MIB SW-MIB FA-MIB Duplicate-TRAP (yes, y, no, n): [no] y switch:admin> The following snmpMibCapSet parameters for FA-TRAP appear user-specified state of the port - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 106
copy (scp) be used for configuration uploads and downloads. Example switch:admin> configure Not all options will be available on an enabled switch. To disable the switch, use the "switchDisable" command. Configure... System services (yes, y, no, n): [no] n ssl attributes (yes, y, no, n): [no] n http - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 107
setup supports anonymous users, and you log in as an anonymous user, password is still a required field, even though its value may be ignored by the FTP service. You can specify the use of secure file copy (scp) during the procedure. For instructions on configuring the use of scp by default, refer - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 108
the FTP service. The following example shows configUpload run on a switch without Admin Domains: switch:admin> configupload Protocol (scp or ftp) [ftp]: ftp Server Name or IP Address [host]: 192.1.2.3 User Name [user]: JohnDoe File Name [config.txt]: /pub/configurations/config.txt Password: xxxxx - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 109
with that specific variable only. When you do so, all other variables remain unchanged. If your setup supports anonymous users, and you log in as an anonymous user, password is still a required field, even though its value may be ignored by the FTP service. Fabric OS 5.3.0 administrator guide 111 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 110
disable the switch. Configuration download without disabling a switch is independent of the hardware platform and supported on all password for the server. Note that this is a required field even if you are logged in as an anonymous user; in such cases, the value may be ignored by the FTP service - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 111
security features" on page 113. Troubleshooting configuration download If the configuration download trying to download is a switch configuration file. • If you selected the (default) FTP protocol, the FTP disabling the switch was unsuccessful. (Audit log) Fabric OS 5.3.0 administrator guide 113 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 112
in the FICON_CUP section of the configuration file are overwritten. Files in the FICON section of configuration file that are not currently present on the switch are saved. The IPL file is not replaced, because active=saved mode is on. A warning message is displayed in the syslog to warn that the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 113
4/256 SAN Director configuration form Table 27 provides a form to use as a hardcopy reference option Management connections Serial cable tag Ethernet cable tag Configuration information Domain ID Switch name Ethernet IP address Ethernet subnetmask Total number of local devices (nsShow) Total - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 114
Table 28 FC port configuration setting FC port configuration Port numbers Speed 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Trunk Port Long Distance VC Link Init Locked L_Port Locked G_Port Disable E_Port ISL R_RDY Mode RSCN Suppressed Persistent disable NPIV capability EX Port 116 Maintaining - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 115
Table 29 FC port configuration setting FC Port Port Numbers Configuration Speed 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 Trunk port Long distance VC link Init Locked L_Port Locked G_Port Disable E_Port ISL R_RDY mode RSCN suppressed - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 116
118 Maintaining configurations - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 117
OS, see the Secure Fabric OS Administrator's Guide. About access control list (ACL) policies switch ports. • Switch Connection Control (SCC) policy-Used to restrict which switches can join with a switch. • IP Filter Policy (IPFilter) policy-Used to filter traffic based on IP addresses Each supported - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 118
-unless the switch is in a fabric that has a strict or tolerant fabric-wide consistency policy for the ACL policy type for SCC or DCC. update See "Distributing the policy database" on page -142 for more information on the database settings and fabric-wide consistency policy. Use the instructions in - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 119
if the user logs out without saving. The following example shows a switch that has switch in the list becomes the Primary FCS switch. Only the Primary FCS switch is allowed to modify and distribute the database within the fabric. Automatic distribution is not supported and it is required to manually - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 120
switch commands, would be allowed on back-up and non-FCS switches. FCS enforcement applies only for user- 32 shows the commands for switch operations for a Primary FCS enforcement. Table 32 Switch operations Allowed on FCS switches Allowed on all switches secPolicyAdd (Allowed on all switches - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 121
the primary FCS The secFCSFailover command is not supported for failing over to a new Primary switch. If your Primary FCS switch is experiencing problems or will be replaced, select a new Primary :00:60:69:00:00:5a2 switch60. 4. Type secPolicyActivate. Fabric OS 5.3.0 administrator guide 123 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 122
the command line or a manageability interface. Only the Primary FCS switch is allowed to distribute the database. The FCS policy needs to be manually distributed across the fabric using the distribute -p command and there is no support for automatic distribution. Since this policy is distributed - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 123
switch ports. The devices can be initiators, targets, or intermediate devices such as SCSI routers and loop hubs. By default, all device ports are allowed to connect to all switch login from the switch and are not enforced by the DCC policy. This does not create a security problem because these HBAs - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 124
To create the DCC policy "DCC_POLICY_server" that includes device 11:22:33:44:55:66:77:aa and port 1 and port 3 of switch domain 1: switch:admin> secpolicycreate "DCC_POLICY_server", "11:22:33:44:55:66:77:aa;1(1,3)" DCC_POLICY_server has been created To create the DCC policy "DCC_POLICY_storage - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 125
switch domain 4: switch:admin> secpolicycreate "DCC_POLICY_example", "44:55:66:77:22:33:44:dd;33:44:55:66:77:11:22:cc;4[1-4]" DCC_POLICY_xxx has been created Creating an SCC policy Fabric OS 5.2.0 and later supports switch names. Only one SCC policy can be created. By default, any switch guide 127 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 126
example, to add a member to the SCC_POLICY using the switch WWN: switch:admin> secpolicyadd "SCC_POLICY", "12:24:45:10:0a:67:00:40" Member(s) have been :66:77:bb): switch:admin> secpolicyadd "DCC_POLICY_abc", "11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3(1,3)" 128 Configuring advanced security - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 127
of 12:24:45:10:0a:67:00:40 from SCC_POLICY: switch:admin> secpolicyremove "SCC_POLICY", "12:24:45: switch WWN and public key infrastructure (PKI) technology to authenticate switches. Authentication automatically defaults to FCAP if both switches supported in earlier Fabric OS releases 4.2, 4.1, - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 128
of the AUTH policy is not supported. Once the AUTH policy is activated you are not allowed to implement a Secure Fabric OS environment. The secmodeenable command fails if any of the switches have an active AUTH policy. The default configuration directs the switch to attempt FCAP authentication first - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 129
command is terminated without completion and the entire user input is lost. If data input has completed switch does not support authentication. The switches with firmware pre-v3.2.0 do not support FCAP/DH-CHAP authentication, so an E_Port initializes without authentication. The switches with firmware - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 130
device authentication policy is not supported since the device authentication requires manual interaction in setting the HBA shared secrets and switch shared secrets, and most of the HBAs do not support the defined DH groups for use in the DH-CHAP protocol. By default the switch will be in OFF state - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 131
switches • Select the Diffie-Hellman (DH) group for a switch Run the authUtil command on the switch switch: 1. Log in to the switch as admin. 2. On a switch that you configure the switches at both ends of switch), switch switch. This command will not work a pair of switches. CAUTION: This command - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 132
) For directors, use the slot/port format for specifying the port number. $authutil --authinit 1/1, 1/2 Managing secret key pairs When you configure the switches at both ends of a link to use DH-CHAP for authentication, you must also define a secret key pair-one for each end of the link. - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 133
. 3. Enable and disable the ports on a peer switch using the portEnable and portDisable commands. Fabric wide distribution of the Auth policy The AUTH policy can be manually distributed to the fabric using the distribute command; there is no support for automatic distribution. Since this policy is - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 134
according to the policy rules. Fabric OS supports multiple IP Filter policies to be defined 20 alpha, numeric, and underscore characters. The names default_ipv4 and default_ipv6 are reserved for default an IP Filter policy: 1. Log in to the switch as admin. 2. Type the following command: ipfilter -- - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 135
will return the IP management interface to its default state. An IP Filter policy without any rule cannot be activated. This sub-command will prompt for a user confirmation before proceeding. To activate an IP Filter policy 1. Log in to the switch as admin 2. Type in the following command: ipfilter - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 136
To delete an IP Filter policy: 1. Log in to the switch as admin. 2. Type the following command: ipfilter -delete - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 137
initiated from a switch. A valid port number range is represented by a dash, for example 7-30. Alternatively, service names can also be used instead of port number. Table 36 lists the supported service names and their corresponding port number. Table 36 Supported services Service name Port number - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 138
, the default action, which is to deny, will be taken. When the IPv4 or IPv6 address for the management interface of a switch is changed 128-bit IPv6 address in any format specified by RFC, or a CIDR block IPv6 prefix. Specifies the destination port number, or a range of port numbers, or a service - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 139
visible again. If, however, the default IP Filter policy is not active, a firmware downgrade to pre-5.3.0 is blocked. Switches with Fabric OS 5.3.0 will have the Wide Consistent Policy is not supported in Fabric OS 5.3.0release. See "Distributing ACL policies to other switches" on page 141 for more - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 140
switch to another, overwriting the target switch database with the distributed one. To send or receive a database the setting must be accept. For configuration instructions, see "Configuring the database distribution settings" on page 140. • Manually v5.20 switches in the fabric. Allows switches - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 141
command: fddCfg --localaccept localaccept database_id Default setting. Allows local database to be overwritten with databases received from other switches. Allows local database to be manually or automatically distributed to other switches. A semicolon-separated list of the local - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 142
This section explains how to manually distribute local ACL policy databases to other Fabric 5.2.0 and later switches. The distribute command has the following dependencies: • All target switches must be running Fabric OS 5.2.0 or later. • All target switches must accept the database distribution - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 143
support the switch:admin> fddcfg --showall Local Switch Configuration for all Databases:- DATABASE - Accept/Reject SCC - accept DCC - accept PWD - accept FCS - accept AUTH - accept IPFILTER - accept Fabric Wide Consistency Policy:- "SCC:S;DCC" Fabric OS 5.3.0 administrator guide - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 144
have a matching tolerant SCC or DCC fabric-wide consistency policy. If the tolerant SCC or DCC fabric-wide consistency policies do not match, the switch can join the fabric, but an error message flags the mismatch. If the tolerant SCC and DCC fabric-wide consistency policies match, the corresponding - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 145
the policy conflict, manually distribute the database you want to use to the switch with the mismatched are disabled. Table 44 shows merges that are not supported. Table 44 Examples of strict fabric merges Fabric-wide Ports connecting switches are disabled. Fabric OS 5.3.0 administrator guide 147 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 146
A Fabric B Tolerant/Absent SCC;DCC DCC SCC;DCC SCC DCC SCC Error message logged. Run fddCfg --fabwideset "" from any switch with the desired configuration to fix the conflict. The secPolicyActivate command is blocked until conflict is resolved. 148 Configuring advanced security - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 147
that defines what switches, ports, and users and you do not need different user users can manage which devices, hosts, and switches. You can have up to 256 Admin Domains in a fabric (254 user the domain ID of a switch. They are two different CP switches) and is in HA_Sync Figure 3 on - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 148
scope of an Admin Domain to encompass ports and devices within a switch or a fabric. • Share resources across multiple Admin Domains. For example, you can share array ports and tape drives between multiple departments. One of the storage devices is shared between AD1 and AD2, see Figure 3. • Have - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 149
a fabric with some switches running AD-unaware firmware versions (that is, firmware versions lower than Fabric OS 5.2.x). • Continue to run existing third-party management applications. Prior and existing versions of third party management applications continue to work with admin and user IDs. NOTE - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 150
, in addition to containing members you explicitly added (similar to user-defined Admin Domains), contains all online devices, switch ports, and switches that have not been assigned to any user-defined Admin Domain. Unlike user-defined Admin Domains, AD0 has an implicit and an explicit membership - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 151
is a user with the user type and describes its administrative access and capabilities. Table 46 AD user types User type Description Physical Fabric Administrators Administrative Domain Users • User administrators or users to each their role permits, can create user accounts and assign them to - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 152
one Admin Domain at a time. You can later change the Admin Domain to which you are logged in (see "Switching to a different Admin Domain context" on page 167). • For default accounts such as admin and user, the home Admin Domain defaults to AD0 and cannot be changed. • The Admin Domain list for the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 153
of an Admin Domain, the switch port to which the device switch domain ID changes. Switch members Switch members are defined by the switch WWN or domain ID. A switch member: • Grants administrative control to the switch. • Grants port control for all ports in that switch. • Allows switch switch ports - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 154
syntax: 5n:nn:nn:nn:nn:nn:n9:xx where xx is the AdminDomain_number. For example, if the switch WWN is: 10:00:00:60:69:e4:24:e0 then the converted WWN for that switch in AD1 would be: 50:06:06:9e:42:4e:09:01 Figure 6 shows an unfiltered view - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 155
50:00:52:e0:63:46:e9:03 Fabric Visible to AD4 User Domain ID = 1 WWN = 50:00:51:f0:52:36 switch WWNs Admin domain compatibility and availability Admin Domains maintain continuity of service for Fabric OS 5.2.x features and operate in mixed-release fabric environments. High availability is supported - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 156
Isolated subfabrics Firmware upgrade and downgrade scenarios You cannot perform a firmware downgrade creation operations will fail and the local switch will show up as an AD-unaware switch in the fabric). • If the perform the downgrade (see "Deleting all user-defined Admin Domains" on page 164). - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 157
the defined configuration in persistent storage and propagates the defined configuration to all switches in the fabric. Note that Manual. Implementing admin domains To begin implementing an Admin Domain structure within your SAN, you must first set the default Fabric OS 5.3.0 administrator guide 159 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 158
1. Log in as the physical fabric administrator to an AD-aware switch in the fabric. 2. Set the default zone mode to No Access, if you have not already done so. See How to set the default zone mode, page 159 for instructions. 3. Switch to the AD255 context, if you are not already in that context - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 159
is backward compatible with pre-Fabric OS 5.2.x firmware. When you downgrade to pre-Fabric OS 5.2.x firmware, the userConfig command records are interpreted using legacy logic. How to create a new user account for managing Admin Domains 1. Connect to the switch and log in as admin. 2. Enter the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 160
no longer access their hosts or storage unless those members are part of Switch to the AD255 context, if you are not already in that context. ad --select 255 3. Enter the ad --activate option. The activate option prompts for confirmation. On default fabric. All active user sessions associated with - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 161
switch and log in as admin. 2. Switch switch port members and the -s option to specify switch list of switch WWNs or switch switch and log in as admin. 2. Switch switch port members and the -s option to specify switch of switch WWNs example removes switch 100 from switch and log in as admin. 2. Switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 162
-defined Admin Domains When you clear the Admin Domain configuration, all user-defined Admin Domains are deleted, the explicit membership list of AD0 is cleared, and all fabric resources (switches, ports, and devices) are returned to the implicit membership list of AD0. You cannot clear the Admin - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 163
or otherwise manage Admin Domains, see "Managing admin domains" on page 158. The Admin Domain looks like a virtual switch or fabric to a user. However, based on the user role and type (User_ID), users are presented with only their relevant AD-based views (see Figure 3 and Figure 4). Any devices and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 164
filtered based on AD membership. See the Fabric OS Command Reference Manual for more detailed information about command syntax and usage and to How to execute a command in a different Admin Domain context 1. Connect to the switch and log in. 2. Enter the ad --exec command, specifying the Admin Domain - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 165
: Active Switch WWN members Switching to a different Admin Domain context The ad --select option is used to switch switch to a new Admin Domain context 1. Connect to the switch and log in as any user type. 2. Enter the ad --select command and the Admin Domain you want to switch switches to working - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 166
the Fabric OS Command Reference Manual. Admin Domain interactions The user session tunneling across switches. A user logged into a switch can control only the local switch ports as specified in the Admin Domain. When the fabric is in secure mode, the following applies: • There is no support - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 167
support provided by the msConfigure command. Note that this is a switch 128 are automatically converted to meet the new PID format. Port swapping has no effect on AD support Command Reference Manual for detailed default zones" on page 381 for more information. Fabric OS 5.3.0 administrator guide 169 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 168
, one for each user-defined Admin Domain. • During the zone update process, only the root zone database is sent to AD-unaware switches. • AD-level up of the zone databases in AD0 through A254. • With AD support, zoning updates are supported selectively at each AD level. For example, a zone change in - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 169
membership Without switch No membership No No No No Yes Yes No No No No Yes2 No Yes Yes2 No No Yes2 No Yes Yes3 No Yes Yes3 No No 1. Zone databases for AD0 through AD254. 2. Only zone database for AD0. 3. Only zone database for current AD. Fabric OS 5.3.0 administrator guide 171 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 170
172 Managing administrative domains - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 171
to add features or to remedy defects. Contact your switch's support provider to obtain information about available firmware versions. In single and dual-domain systems, the firmwareDownload command by default, downloads the firmware image to both CPs by performing a High Availability (HA - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 172
accounts and passwords when you replace the switch firmware with a different version. Table 50 Effects of firmware changes on accounts and passwords Change First time Subsequent times (after upgrade, then downgrade, then upgrade) Upgrading Default accounts and their passwords User-defined and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 173
and included with any trouble reports. 5. Establish a telnet session and log in to the switch as admin. Issue the supportSave command to retrieve all current core files prior to executing the firmware download. This helps to troubleshoot the firmwaredownload process if a problem is encountered. If - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 174
the earliest recommended version (shown in Table 43) before upgrading firmware on your switch. IMPORTANT: Refer to the "Current supported Fabric OS versions" table in the HP StorageWorks Fabric OS release notes for the recommended firmware versions. Access the most up-to-date Release Notes and the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 175
Performing firmware download on switches 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, 4/32B SAN Switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 176
Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, and 400 MP Router 1. Verify that the FTP service is running on the host server and that you have a user ID on that server. 2. Obtain the firmware - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 177
on the switch. Enter the password for the server. This operand can be omitted if firmware is accessible through a local directory, or if no password is 168.126.115 User Name: userfoo File Name: //userfoo/firmware/v5.3.0 Network Protocol(1-auto-select, 2-FTP, 3-SCP) [1]: 2 Password: Checking system - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 178
for network problems). Disrupting the process can render the switch inoperable and require you to seek assistance from HP. Do not disconnect the switch from power during the process, because the switch could become inoperable upon reboot. SAN Director 2/128 and 4/256 SAN Director firmware download - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 179
firmware on SAN Director 2/128 and 4/256 SAN Director (including the blades): 1. Verify that the FTP or SSH server is running on the host server and that you have a user ID on that server. 2. Obtain the firmware file from http://www.hp CP1: switch:admin> hashow State synchronized switch:admin> - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 180
be affected. sw77:root> firmwaredownload Type of Firmware (FOS, SAS, or any application) [FOS]: Server Name or IP Address: 192.168.32.10 Network Protocol (1-auto-select, 2-FTP, 3-SCP) [1]: User Name: userfoo File Name: /home/userfoo/v5.3.0 Password: Verifying the input parameters ... Verifying the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 181
The firmware is switch, enter the firmwareDownloadStatus command to monitor the firmware download status. sw77:root> firmwareDownloadstatus [1]: Thu Jul 28 00:30:49 2005 Slot 2 (SAS): Firmware Firmware has been downloaded successfully to the blade. [4]: Thu Jul 28 00:37:42 2005 Slot 7 (SAS): Firmware - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 182
are not supported by the original firmware before restoring to the original version. To test a different firmware version on a switch: 1. Verify that the FTP or SSH server is running on the host server and that you have a user ID on that server. 2. Obtain the firmware file from http://www.hp.com - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 183
]: Server Name or IP Address: 192.168.32.10 Network Protocol (1-auto-select, 2-FTP, 3-SCP) [1]: User Name: userfoo File Name: /home/userfoo/v5.3.0 Password: Do Auto-Commit after Reboot [Y]: n Reboot system after download [N]: y Firmware is being downloaded to the switch. This step may take up to 30 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 184
, contact your switch service provider. 4. Enter the firmwareShow command and confirm that the current firmware on both partitions SAN Director 2/128 and 4/256 SAN Director firmware download procedure, page 180 for details about autoleveling. 8. Verify the fail over. a. Connect to the switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 185
firmware should download to the standby CP only and reboot it. The current switch CP. a. In the current switch session for the active CP, switch session will end. The switch is now running the original firmware. 14. Restore firmware on the "new" standby CP. a. Wait one minute and connect to the switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 186
servers, storage, and switches should be present in the output of these commands. If there is a discrepancy, it is possible that a device or switch cannot connect to the fabric and further troubleshooting is necessary. firmwareShow Displays the current firmware level on the switch. For Directors - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 187
will appear as an AD-unaware switch in the fabric). If primary and secondary CPs are running Fabric OS 5.2.x and if ADs are configured, any attempt to downgrade one or both CPs to a pre-Fabric OS 5.1.x version will fail. See "Troubleshooting firmware download" for exception cases and associated - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 188
switch:admin> firmwaredownload Server Name or IP Address: 10.1.2.3 FTP User Name: JaneDoe File Name: /pub/v5.1.0 FTP Password: Router port blades (blade ID 24) in the system. B-Series MP Router port blades are not supported on firmware 5.0.0 or lower, so the firmware download operation is aborted. - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 189
FC4-16IP port blades are not supported on firmware v5.1.0 or earlier, so the firmware download operation failed. Use the slotShow command to display which slot the Brocade FC4-16IP port blade is in. Physically remove the blade(s) from the chassis, or use the micro-switch to turn the blade off. Retry - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 190
with a supported option (1, 2, or 5 for SAN Director 2/128 and 1 or 5 for 4/256 SAN Director), and then retry the firmware download operation. The supported options are described briefly below: option 1 One 128-port switch with the following configuration: FC2-16 (blade ID 4), FC4-16 (blade ID - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 191
are any IPv6 addresses configured, e.g. switch IP address, syslog IP addresses, radius server, etc. the user will not be allowed to downgrade to a version that does not support IPv6. Use the ipaddrset command to to reconfigure the MTU size and try again. Fabric OS 5.3.0 administrator guide 193 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 192
and recommended action If a GE port has IPSec and Fastwrite enabled, the user will not be allowed to downgrade to v5.2.0 or earlier. Use the portcfg Mirroring enabled. Port Mirroring is not supported on firmware v5.1.0 or earlier, so the firmware download operation failed. Remove the mirror - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 193
your switch to user will not be allowed to upgrade the switch to the v5.3.0 firmware firmware firmware download operation. The supported settings are described briefly below: L0 Specify L0 to configure the port to be a regular switch port. A total of 20 L1 long distance to support a long distance - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 194
switches (Bloom1-based), the number of frames buffers is limited to 63. LE Specify LE mode is for E_Ports for distances beyond 5 Km and up to 10 Km. A total of 5, 10, or 20 VEX configuration enabled are not supported in firmware v5.0.0 or lower, so the firmware download operation failed. Disable - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 195
was attempting to upgrade a system from Fabric OS v4.4.0 or lower directly to firmware v5.2.0. This firmware jump is not supported, so the firmware download operation aborted. Note that the message is from the currently running switch firmware, which may be v4.2.0 or lower. Upgrade the system to - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 196
enabled on the system. Admin Domains are not supported on firmware v5.1.0 or lower, so the firmware download operation failed. Delete all of the Admin Domains need not be empty before the delete operation. No existing user sessions to a deleted Admin Domain is terminated; however, subsequent - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 197
supported on firmware firmware firmware firmware supported on firmware v5.1.0 or lower, so the firmware switch using the switchCfgTrunk command. Retry the firmware the firmware download Action The firmware download operation switches in the fabric are running firmware v5.2.x or higher, so the firmware - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 198
the fabric-wide consistency policy. Retry the firmware download operation. Message The switch is currently configured with "radiuslocal" mode. Please is enabled. The radiuslocal mode is not supported on firmware v5.1.0 or lower, so the firmware download operation failed. Disable the radiuslocal mode - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 199
in the number of switches or attached devices in the fabric after a firmware download it may be due to a fabric segmentation or a device that failed to log in. For assistance refer to "Troubleshooting" on page 307 for basic troubleshooting steps, or contact HP. FTP server recommendations The - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 200
202 Installing and maintaining firmware - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 201
the SAN Director 128 and 4/256 SAN Director models. For detailed information about these models, refer to the HP StorageWorks SAN Director installation guide available on http://www.hp.com. Because Directors contain interchangeable port blades, install procedures differ from the SAN Switches, which - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 202
0 and logical switch 1 have a port that is referenced with area ID 0. For 32-port blades in the 4/256 SAN Director (using FC4-32), the numbering is contiguous up to port 15; from port 16, the numbering is still contiguous, but you must add 128 to each port number. For example, port 16 in slot 1 has - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 203
supported switch switch 128 ports, and using portswap on a pair of ports will exchange those ports' area_ID and index values. Portswap is not supported Default 215 367/231 383/247 270/134 286/150 302/166 318/182 334/198 350/214 366/230 128 32 256/136 272/152 288/168 304/184 320/200 336/216 352/232 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 204
24 136/136 152/152 168/168 184/184 200/200 216/216 232/232 248/248 23 135/135 151/151 167/167 183/183 199/199 215/215 231/231 247/247 22 134/134 150/150 166/166 182/182 198/198 214/214 230/230 /161 177/177 193/193 209/209 225/225 241/241 16 128/128 144/144 160/160 176/176 192/192 208/208 224/ - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 205
32 256/136 272/152 288/168 304/184 320/200 336/216 352/232 24 136/136 152/152 168/168 184/184 200/200 216/216 232/232 248/248 23 135/135 151/151 167/167 183/183 199/199 215/215 231/231 247/247 22 134/134 150/150 166/166 182/182 198/198 214/214 230/230 225/225 241/241 16 128/128 144/144 160/160 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 206
/113 1/1 0 16/16 32/32 48/48 64/64 80/80 96/96 112/112 0/0 Basic blade management The following sections provide procedures for powering a port blade off and on and for disabling and enabling a port blade. Powering port blades off and on Port blades ship powered on by default. To power off - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 207
default. In some cases, you will need to disable a port blade to perform diagnostics. When diagnostics are executed manually to enable: switch:admin> 32, FC4-16, or FC4-16IP. • You have turned on the power 32, or FC4-16 -32, or FC4-16 blade 16 or FC4-32 16 or FC4-32 blade, FC4-16/32 port blade, - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 208
port blade CP4 FC-16 16-port 2-Gbit/sec port blade FC2-16 16-port 4-Gbit/sec port blade FC4-16 32-port 4-Gbit/sec port blade FC4-32 Blade ID (slotshow) 5 16 2 4 17 18 Definition The second generation CP blade provided with the SAN Director 2/128. This CP supports 1, 2, and 4 Gbit/sec port - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 209
blades FC-16 FC2-16 FC4-16 SAN Director 2/128 (CP2) Supported Supported Supported 4/256 NA SAN Director (CP4) Supported Supported 1 1. Can coexist only with FC4-16 blades. FC4-16IP FC4-32 NA FC4-48 NA FR4-18i NA Supported Supported Supported Supported Setting chassis configuration - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 210
domains of ports per switch blades Supported CP blades Notes 1 1 128 2 2 5 1 64/64 384 FC2-16, FC4-16 FC2-16 FC4-16, FC4-16IP, FC4-32, FR4-18i, FR4-481 CP2 or CP4 CP2 CP4 Option 1 is the default configuration for SAN Director 2/128. Option 5 is the default configuration option for 4/256 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 211
option one (one switch, FC2-16 cards installed). Use the following procedure to add a factory new SAN Director 2/128 to a fabric and configure it as two 64-port switches (two domains). To add a new SAN Director 2/128 to a fabric and configure it: Fabric OS 5.3.0 administrator guide 213 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 212
earlier than v4.4.0 supported only one domain for SAN Director 2/128 models (one 128-port logical switch). When you upgrade a SAN Director 2/128 director to Fabric OS v4.4.0 or later, you can use the chassisConfig command to specify two domains for the Director (two 64-port logical switches, sw0 and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 213
on the new domains is a complicated task. You should avoid converting existing SAN Director 2/128 models that are acting as the core in a core-edge network. To convert a SAN Director 2/128 to support two domains: 1. Connect to the switch and log in as admin. 2. If the Director is already in a fabric - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 214
port 15 and back again. The pattern continues until the user turns it off. This can be used to locate a particular blade. To set the blade beacon mode on: 1. Connect to the switch and log in as admin. 1. Enter the bladeBeacon command: switch:admin> bladebeacon slotnumber, mode The slotnumber is the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 215
Default on SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Director 2/128, and 4/256 SAN Director (using configuration option 1). These switches support the port-based policy only; you cannot change the routing policy for these switches. 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 216
-based and running on a 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, SAN Director 2/128, and 4/256 SAN Director (using - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 217
switches HP B-series switches enable IOD by default to ensure frames are delivered in order, as not all HP switch default switches. DLS recomputes load sharing when a switch the switch switch:admin> dlsshow DLS is not set switch:admin> dlsset switch:admin> dlsshow DLS is set switch:admin> dlsreset switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 218
display unicast routing information. 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch and 400 MP Router: Use - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 219
SAN Director 2/128 and 4/256 SAN Director: Use the following syntax: urouteshow [slot/][portnumber][, domainnumber] The following entries appear: • Local Domain-Domain number of the local switch 4,24 switch:admin> The next example displays the routing information for port 11 on slot 1: switch: - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 220
. By default, the path will be the path taken by traffic from the source to destination port, but you can also specify all or portions of a path. Refer to the Fabric OS Command Reference Manual for details on the pathInfo command. The following example is from a SAN Switch 2/32 switch (other models - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 221
frames come in from on this path. For hop 0, the source port. The domain ID of the switch. The name of the switch. The output port that the frames use to reach the next hop on this path. For the last by FSPF routing protocol. It only applies to an E_Port. Fabric OS 5.3.0 administrator guide 223 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 222
224 Routing traffic - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 223
MP Router blade • HP StorageWorks 400 MP Router • 4/256 SAN Director when it is configured with a B-Series MP Router blade and uses chassis configuration option 5 Supported configurations In an edge fabric that contains a mix of administrative domain (AD)-capable switches and switches that are not - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 224
Storage switch and do not propagate fabric services SAN Director using chassis configuration option 5), from additional MP Routers, or from all three. These are referred to as "an FC router" throughout this chapter and unless specified, any FC router can be used. FC-FC Routing services do not support - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 225
IFL Fibre Channel switch 4/256 SAN Director with B-Series MP Router blade 25313a • Edge Fabric A Fibre Channel fabric with targets and initiators connected through the supported platforms via an same edge fabrics must have unique backbone fabric IDs. Fabric OS 5.3.0 administrator guide 227 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 226
Router to connect two or more separate fabrics. Additional 400 MP Routers, 4/256 SAN Director with B-Series MP Router blades, or MP Router can be used to (for example, by issuing the portDisable command from the switch in the attached fabric) translate phantom domains remain visible. routing service - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 227
SAN 1 connecting to storage in Edge SAN 2 through a backbone fabric connecting two 4/256 SAN Directors, each containing B-Series MP Router blades. Figure 11 Edge SANs connected through a backbone fabric 4/256 SAN 12 metaSAN with imported devices 25315a Fabric OS 5.3.0 administrator guide 229 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 228
switch) is projected into the backbone fabric. This translate phantom switch switch. Each edge fabric has one and only one xlate switch Service receives the frames from the backbone switches switch can never be the principal switch services, and interopmode are not supported 256 SAN switch switches - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 229
FC-FC routing to work with Secure Fabric OS 20:53:48 2006 BootProm: 4.5.3 2. If configuring the 4/256 SAN switch:admin_06> slotshow Slot Blade Type ID Status 1 SW BLADE 17 ENABLED 2 AP BLADE 24 ENABLED 3 UNKNOWN VACANT 4 UNKNOWN VACANT 5 CP BLADE 16 ENABLED 6 CP BLADE 16 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 230
using configuration option 5. switch:admin_06> chassisconfig Current Option: 5 All Supported Options Option 1: One 128-port switch Blade ID's 4, 17 in slots 1-4, 7-10 Blade ID's 5, 16 in slots 5-6 Option 5: One 256-port switch Blade ID's 17, 18, 24 in slots 1-4, 7-10 Blade ID 16 in slots 5-6 Please - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 231
edge fabric that has security enabled, although this is not a prerequisite for FCR to work. The 400 MP Router and 4/256 SAN Director with an B-Series MP Router blade support Fibre Channel routing between Brocade's secure fabric employing Secure Fabric OS with DH-CHAP (Diffie-Hellman with Challenge - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 232
on a Brocade fabric. The FC-FC Routing Service uses only the DH-CHAP shared secrets to provide switch-to-switch authentication when connecting to communicate with each switch, Fabric OS v5.3 (and Fabric OS v5.1.0 and v5.2 0) supports only DH-CHAP. The 400 MP Router and 4/256 SAN Director with a B- - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 233
IFL for both edge and backbone connections 1. On the 4/256 SAN Director with a B-Series MP Router blade, disable the port that you are configuring as an EX_Port (the one connected to the HP switch) by issuing the portDisable command. switch:admin> portdisable 7/10 You can verify that port 7 has been - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 234
:admin> portcfgexport 7/10 -a 1 -f 30 switch:admin> portcfgexport 7/10 Port 7/10 info Admin: enabled State: NOT OK Pid format: Not Applicable Operate mode: Brocade Native Edge Fabric ID: 30 Preferred Domain ID: 160 Front WWN: 50:06:06:9e:20:38:6e:1e Fabric Parameters: Auto Negotiate - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 235
OS Command Reference Manual. A Fibre Channel switch:admin> portenable 7/10 4. Enter the portCfgShow command to view ports that are persistently disabled. switch enabled. switch:admin> portcfgpersistentenable 7/10 switch:admin each port is configured correctly: switch:admin> portcfgexport 7/10 Port - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 236
: 0 port generation number: 0 portId: 014a00 portIfId: 4372080f portWwn: 20:4a:00:60:69:e2:03:86 portWwn of device(s) connected: Distance fabric switch (containing the E_Port or VE_Port). 8. Enter the fcrFabricShow command to view any edge fabric's switch names and ensure links are working as - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 237
32.156.50 1080::8:60F:FE0C:456A/64 "fcr_mars_8" EX_Port FID Neighbor Switch Info (WWN, enet IP, name) 4 95 10:00:00:05:1e:37:00:45 10.32 has a default cost. The default router port Reference Manual. In switch:admin> fcrrouterportcost 7/10 10000 Fabric OS 5.3.0 administrator guide 239 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 238
default port cost is used. • When downgrading the router switch from Fabric OS v5.2.0 or later to a prior Fabric OS version that does not support 0-7 and FCIP Tunnel 16-23 • 8-15 and FCIP Tunnel 24-31 More than two the same port set. • Use proper SAN design guidelines to connect the IFLs to service - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 239
for more details. Matching fabric parameters By default, EX_Ports and VEX_Ports detect, autonegotiate, and configure the fabric parameters without user intervention. You can optionally configure these parameters manually. To change the fabric parameters on a switch in the edge fabric, execute the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 240
(for example, the SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, or FC 4-48 blade) that supports eight ports from the trunkable group. • When FCR is connected to Bloom-based switches (for example, the SAN Switch 2/16, SAN Switch 2/32, SAN Director 2/128, or FC-16 blade) supporting four ports in - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 241
with the trunkShow command • Use trunkDebug to list link characteristics for troubleshooting. • Use the switchShow command to display the trunking information on the EX_Ports. For details about using these commands, see the Fabric OS Command Reference Manual. Fabric OS 5.3.0 administrator guide 243 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 242
switch Speed State 16 2 0 master) 19 2 3 ee1300 id N4 No_Light 20 2 4 ee1400 id N4 Online EX_Port Slot 2 :00:05:1e:35:bb:32 (Trunk port, master is switch 1. Use the trunkShow command to display trunking information for a switch. switch 16 deskew 15 deskew 17 deskew 16 MASTER 3:24 switch support switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 243
switches as a precaution. Default switch, then default zoning configurations will be created on each switch in the fabric (v2.x, v3.x, v4.x or v5.0.1 switches). Fabric OS v5.1.0 or later switches do not indicate that a default the 4/256 SAN Director with :05:07:61:00:49:20:b4 (connected to switch2) - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 244
switch switch:admin> cfgadd "zone_cfg", "lsan_zone_fabric75" switch 00:49:20:b4). switch:admin> 20:b4; 50:05:07:61:00:09:20:b4; na FC4s: FCP [IBM DNEF-309170 F90F] Fabric Port Name: 20 20:b4" 9. Enter the cfgShow command to verify that the zones are correct. switch 4/256 SAN Director with switch: - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 245
LSAN. switch:admin> the LSAN. switch:admin> fcrproxydevshow the 4/256 SAN Director with at the 4/256 SAN Director with a By default, the supported its default behavior. devices supported in default or dynamic binding, which is the default behavior. Using this information, the FCR switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 246
supported support this feature. For example, if edge fabrics with IDs 1, 2, 3, 4, and 5 are online, the default supports the static and default and dynamic binding of zone binding 1. Log in to the switch as admin. 2. To add a pair switch as admin. 2. Enter the command as follows: 248 Using - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 247
Default LSAN Matrix: 1 2 8 See the Fabric OS Command Reference Manual disabling the switch. By default, the switch:admin> fcrlsancount LSAN Zone Limit 3000 To set the new LSAN zone limit switch switch, if there is a different maximum LSAN count on the switches switches in the same backbone that support - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 248
standby CP. • On a dual CP switch, both CPs need to have the v5 to go back to the default mode. • This feature does support more than 1000 LSANs. IPFC over FCR IPFC over FCR supports IP device communication between edge-to-edge fabrics and edge-to-backbone fabrics. For IPFC over FCR to work Users - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 249
support broadcast zoning, the fcrbcastconfig command sets up inter-fabric broadcast frame forwarding on the FC router and prevents inter-fabric forwarding of broadcast frames to the switches running older versions of firmware by default. Manual. You can monitor 400 MP Router and 4/256 SAN guide 251 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 250
the phantom switch could still be accessible through other switches. Across a switch reboot, 34 14 | 6 34 15 | 6 34 16 | 8 34 17 | 8 34 18 | 8 34 19 | 8 34 20 | 8 34 21 | 8 34 22 | 8 34 23 | 8 34 See the Fabric OS Command Reference Manual for details about the fcrResourceShow command. 252 Using the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 251
fcPing command, see the Fabric OS Command Reference Manual. Upgrade and downgrade considerations If you downgrade to a version of Fabric OS that does not support FC-FC Routing Services, then your FC-FC routing configuration will be lost. HP recommends that you enter the configUpload command to save - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 252
and firmware compatibility for nonsecure fabrics HP StorageWorks model 1 Gb switches SAN Switch 2/8EL, SAN Switch 2/16EL, SAN Switch 2/16 Supported version Fabric OS 2.6.1 or later Fabric OS 3.1.0 or later SAN Switch 2/32, Core Switch 2/64 Fabric OS 4.1.0x or later SAN Switch 2/8V, SAN Switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 253
and Fibre Channel technology work together. For specific information about intermix mode and other aspects of FICON, refer to the IBM Redbook, FICON® Implementation Guide (SG24-6497-01). Fabric OS provides standard support for FICON single-switch operation. Multiple-switch cascaded FICON operation - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 254
Fabric OS releases: • SAN Switch 2/32, Fabric OS v4.1.2 or later. • SAN Switch 4/32, SAN Switch 4/32B, Fabric OS v5.0.1b or later. • SAN Director 2/128, Fabric OS v4.2.0 or later. The default one-domain configuration is supported; dual domain configurations and mixed FC4-16 port blade configurations - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 255
Fabric OS v4.4.0 or later. CUP functionality is present on the SAN Switch 2/32 and SAN Director 2/128 models running Fabric OS v4.4.0 or later. CUP functionality is also present on the SAN Switch 4/32, SAN Switch 4/32B and 4/256 SAN Director models running Fabric OS v5.0.1b or later. For Fabric OS - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 256
detailed information on these commands, refer to the Fabric OS Command Reference Manual. Table 61 Fabric OS commands related to FICON and FICON CUP Command incidents for the local switch or for the fabric. ficonshow rlir [fabric] Displays link incidents for the local switch or for the fabric. - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 257
and FICON devices in another zone. • The port-based routing policy is recommended for the SAN Switch 4/32, SAN Switch 4/32B and 4/256 SAN Director on any switch that has FICON devices attached. Other switches in the fabric with Open Systems devices exclusively can still use exchange-based routing - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 258
the routing policy on the switch from the default exchange-based policy to the required port-based policy for those switches with FICON devices directly attached. For the SAN Switch 4/32 and SAN Switch 4/32B, refer to the Fabric OS Command Reference Manual for details about the aptPolicy command - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 259
switches that currently reside in the fabric. It will also use the current password as the password for all available accounts on the switch For instructions on displaying and changing the domain ID, refer to Working with domain IDs, page 40. 3. Enter the switchDisable command to disable the switch. - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 260
[no] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] Committing configuration...done. switch:admin> Displaying information RLIR) ELS contains the link incident information sent to a listener N_Port. To display link incidents, connect to the switch, log in as user, - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 261
local switch: ficonshow ilir • For all switches defined follows): 1. Connect to the switch and log in as admin. switch can be used as the alternate for any other port within the same switch reboots and power cycles. Enabling Reference Manual for follows: 1. Connect to the switch and log in as admin. - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 262
on an HP StorageWorks switch. 2. For SAN Director 2/128 only: Use the portDisable command to disable (block) port 126. For 4/256 SAN Director only: Use the portDisable command to disable (block) ports 254 and 255. Port 126 (Core Switch 2/64) and 254 and 255 (4/256 SAN Director) are not supported in - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 263
switch names are not read from the IPL; they remain as previously set. • Port "Block" and "Unblock" values are not read from the IPL; they remain as previously set with the portEnable and portDisable commands. • PDCM values are read from the IPL; the default . Fabric OS 5.3.0 administrator guide 275 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 264
CUP feature is available, and consequently will never try to communicate with it. Hence, it is possible that fmsmode may already be enabled on the switch. If FICON Management Server mode is already enabled, set up CUP as follows: 1. Verify that FICON Management Server mode is enabled by entering the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 265
the switch offline. The default setting is 1 (on). UAM ASM User alert mode storage in the initial program load (IPL) file that is applied upon a cold reboot or a power cycle. The default setting is 1 (on). DCAM Switch bit settings for the switch: switch:admin> ficoncupshow modereg POSC UAM ASM - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 266
UAM bit cannot be changed using this command. • All mode register bits except UAM are saved across power on/off cycles; the UAM bit is reset to 0 following a power-on. • Mode register bits can be changed when the switch is offline or online. If the ACP or HCP bits are changed when the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 267
nonprintable characters should not be edited manually, because many editors replace nonprintable characters with some other characters without warning the user first. • CUP has a 24-character unique port name limitation; Fabric OS supports port names up to 32 characters long. When fmsmode is enabled - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 268
Troubleshooting The following sources provide useful problem-solving information: • The standard support commands (portLogDump, supportSave, supportShow) or the Fabric Manager Event Log By default, the FICON group in the supportShow output is disabled. To enable the capture of FICON data in the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 269
configuration files. The Fabric OS saves the IPL and all other configuration files on the switch. A maximum of 16 configuration files, including the IPL file, are supported. You can upload the configuration files saved on the switch to a management workstation using the configUpload command. If the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 270
Manufacturer Type: _________ Model: ______ S/N: ________ HCD Defined Switch ID_________(Switch ID) FICON® Switch Domain ID_________(Switch @) FICON® Switch F_Ports Cascaded Directors No _____Yes _____ Corresponding Cascaded Switch Domain ID _____ Fabric Name Attached N_Ports / E_Ports (CU - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 271
Sample IOCP configuration file for SAN Switch 2/32, SAN Switch 4/32, SAN Director 2/128, and 4/256 SAN Director switches The channel subsystem controls communication between a configured channel, the control unit, and the device. The I/O Configuration Dataset (IOCDS) defines the channels, control - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 272
of vendor or platform. So all SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, or SAN Director 2/128 switches require UNIT=2032 for the CUP definition This data is essential for any kind of FICON channel performance troubleshooting. To obtain an RMF FICON Director activity report, you must - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 273
CYCLE(1000) /* SAMPLE ONCE EVERY SECOND */ DEVICE(NOSG) /* PREVENT SORT OF STORAGE GROUPS*/ DEVICE(NOCHRDR) /* CHARACTER READER STATISTICS WILL NOT BE COLLECTED */ DEVICE(COMM I/O QUEUING STATS PDS 1/25/94 */ IOQ(GRAPH) /* COLLECT GRAPHICS DEVICE Fabric OS 5.3.0 administrator guide 285 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 274
286 Administering FICON fabrics - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 275
of the existing configuration. • It is replicated on every HP StorageWorks switch within a fabric. • It provides an unzoned view of the services The management server is located at the Fibre Channel well-known address FFFFFAh. All management services except platform services are enabled by default - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 276
Service in progress...... *Completed deactivating MS Platform Service in the fabric! switch is empty (the default), the management server switch is in secure mode. Refer to the Secure Fabric OS Administrator's Guide for more information. To display the management server ACL 1. Connect to the switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 277
to update the nonvolatile memory and end the session. switch:admin> msconfigure 0 Done 1 Display the access list 20:00:00:20:37:65:ce:bb 20:00:00:20:37:65:ce:ff 20:00:00:20:37:65:ce:11 20:00:00:20:37:65:ce:22 20:00:00:20:37:65:ce:33 20:00:00:20:37:65:ce:44 10:00:00:60:69:04:11:24 guide 289 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 278
16. Press Enter to update the nonvolatile memory and end the session. switch:admin> msconfigure 0 Done 1 Display the access list 2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 3 Port/Node WWN (in hex): [00:00:00:00:00:00:00:00] 20:00 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 279
platform database are displayed. switch:admin> msplatshow Platform Name: [9] "first obj" Platform Type: 5 : GATEWAY Number of Associated M.A.: 1 [35] "http://java.sun.com/products/plugin" Number of Associated Node Names: 1 Associated Node Names: 10:00:00:60:69:20:15:71 Platform Name: [10] "second - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 280
This may erase all NID entries. Are you sure? (yes, y, no, n): [no] y Request to disable MS Topology Discovery Service in progress.... *MS Topology Discovery disabled locally. switch:admin> mstddisable all This may erase all NID entries. Are you sure? (yes, y, no, n): [no] y Request to disable - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 281
all available diagnostic commands. Refer to the Fabric OS Command Reference Manual for a complete description of each command. Viewing power-on self test By default, when you power on the system, the boot loader automatically performs power-on self tests and loads a Fabric OS kernel image. The POST - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 282
or after POST2 completes, various system services are started and the boot process displays additional console status and progress messages. Viewing switch status Use the switchStatusShow command to display the overall status of the switch, including its power supplies, fans, and temperature. If the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 283
log in as admin. 2. Enter the switchStatusShow command: switch:admin> switchstatusshow Switch Health Report Switch Name: SWFCR IP address: 10.33.54.176 SwitchState: MARGINAL Duration: 863:23 Power supplies monitor MARGINAL Temperatures monitor HEALTHY Fans monitor HEALTHY WWN servers - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 284
enter the uptime command: : switch:admin> uptime 4:43am up 1 day, 12:32, switch:admin> 1 user, load average: 1.29, 1.31, 1.27 The uptime command displays the length of time the system has been in operation, the total cumulative amount of uptime since the system was first powered-on, the date and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 285
. Refer to the Fabric OS Command Reference Manual for additional portStatsShow command information, such as the syntax for slot or port numbering. switch:admin> portstatsshow 3/7 stat_wtx 0 stat_wrx 0 number of times NL has the tenancy zero tenancy Fabric OS 5.3.0 administrator guide 297 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 286
Manual for additional portErrShow command information. switch :admin> porterrshow frames enc crc too too bad enc disc link loss loss frjt fbsy tx rx in err shrt long eof out c3 fail sync sig sig 0: 22 24 0 0 0 0 0 1.5m 0 7 3 0 0 0 1: 22 24 0 0 0 0 0 32: 0 0 0 0 Working with diagnostic features - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 287
status values are: OK-Power supply functioning correctly. Absent-Power supply not present. Unknown-Unknown power supply unit installed. Predicting failure-Power supply is present but predicting failure. FAULTY-Power supply is present but faulty (no power cable, power switch turned off, fuse blown - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 288
. Viewing the system message log The system message log feature enables messages to be saved across power cycles and reboots. The HP StorageWorks Core Switch 2/64, SAN Director 2/128, and 4/256 SAN Director Director models maintain an independent system message log for each of the two CP blades. For - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 289
troubleshoot device connections. To view the port log 1. Connect to the switch and log in as admin. 2. Enter the portLogShow command: switch 24 24 Manual for additional information about these commands. The portLogDump command output (trace) is a powerful tool that is used to troubleshoot service - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 290
. Starting with Fabric OS v4.4.0, kern facilities are no longer supported; UNIX local7 facilities are supported (the default facility level is 7). Configuring for syslogd involves configuring the host, enabling syslogd on the switch, and, optionally, setting the facility level. Configuring the host - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 291
switch Configuring the switch to the switch and log in switch and log in as admin. 2. Enter the following command: switch:admin> syslogdfacility -l n n is a number from 0 through 7, indicating a UNIX local7 facility. The default switch and log in as admin. 2. Enter the syslogDipRemove command: switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 292
remote server. Then, if a problem occurs you can provide your customer support representative with the most detailed information possible. To ensure the best service, you should set up for automatic transfer as part of standard switch configuration, before a problem occurs. Setting up for automatic - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 293
. The minimum interval is 1 hour. Specify 0 hours to disable the checking feature. To save a comprehensive set of diagnostic files to the server 1. Connect to the switch and log in as admin. 2. Enter the following command: switch:admin> supportsave -c Fabric OS 5.3.0 administrator guide 305 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 294
306 Working with diagnostic features - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 295
detect the storage device, then there is still a problem between the host and switch. Most common problem areas Refer to Table 65 for a list of the most common problem areas that arise within SANs and a list of tools that can be used to resolve them. Table 65 Common troubleshooting problems and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 296
to the Fabric OS Command Reference Manual. Troubleshooting questions Common steps and questions to ask yourself when troubleshooting a system problem are as follows: 1. What is the current Fabric OS level? 2. What is the switch hardware version? 3. Is the switch operational? 4. Impact assessment and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 297
type • Controller firmware level • Configuration settings • Storage software (such as EMC Control Center, Veritas SPC, etc.) Analyzing connection problems If a host is unable to detect its target (for example, a storage or tape device), you should begin troubleshooting the problem in the middle - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 298
ELS Accept to the ELS request. • Send an ELS Reject to the ELS request. • Ignore the ELS request. There are some devices that do not support the ELS 21:00:00:20:37:25:ad:05 switch:admin> For details about the fcPing command, refer to the Fabric OS Command Reference Manual. 310 Troubleshooting - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 299
: 20:0f:00:60:69:10:9b:5b 2. Look for the device in the NS list, which lists the nodes connected to that switch, allowing you to determine if a particular node is accessible on the network. • If the device is not present in the NS, the problem is between the storage device and the switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 300
for zoning problems" on page 312). • Domain ID conflict (refer to "To reconcile a domain ID conflict" on page 313). • A switch in a switches. 6. Connect to the segmented switch after the discrepancy is identified. 7. Disable the switch by entering the switchDisable command. 312 Troubleshooting - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 301
edit the fabric parameters for the segmented switch. Refer to the Fabric OS Command Reference Manual for more detailed information. 9. Enable the switch by entering the switchEnable command. Alternatively, zone object with the same name in the other fabric. Fabric OS 5.3.0 administrator guide 313 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 302
zone configuration. Displays zoning configuration. Sets the default zone access mode to No Access, initializes a Reference Manual for details about zoning commands. To correct a fabric merge problem switches. 5. Enter the switchEnable command. This forces a zone merge and populates the switches - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 303
MQ errors are rare and difficult to troubleshoot; resolve them by working with HP. When MQ errors are encountered, issue the supportSave command to capture debug information about the switch; then, forward the supportSave data to HP for further investigation. Fabric OS 5.3.0 administrator guide 315 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 304
or low temperatures. To check the power supply 1. Log in to the switch as user. 2. Enter the psShow command. 3. Check the power supply status. Refer to the appropriate hardware reference manual for details regarding the power supply status. If any of the power supplies show a status other than OK - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 305
problems with device logins, use this procedure: 1. Log in to the switch as admin. 2. Enter the switchShow command; then, check for correct logins: switch to see how the port is configured: switch:admin> portcfgshow Ports of Slot 8 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 guide 317 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 306
that can cause login problems. switch:admin> porterrshow frames enc crc too too bad enc disc link loss loss frjt fbsy tx rx in err shrt long eof out c3 fail sync sig 64: 0 0 0 0 0 0 0 0 0 0 0 1 0 0 65: problem. Track errors by sampling the port errors every five or ten minutes. 318 Troubleshooting - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 307
failed (if a failure occurred): switch:admin> portflagsshow Slot Port SNMP Physical No_Module PRESENT U_PORT LED 7 16 Offline No_Module PRESENT U_PORT LED No_Module PRESENT U_PORT LED 7 20 Offline No_Module PRESENT U_PORT LED PRESENT U_PORT LED 7 24 Offline No_Module PRESENT U_PORT LED guide 319 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 308
12:38:22.172 INTR pstate 10 LR3 12:38:22.172 INTR pstate 10 AC 12:38:22.172 PORT scn 10 11 00000000,00000000,00000002 12:38:22. pstate 10 LR3 12:39:04.323 INTR pstate 10 AC 12:39:04.323 PORT scn 10 11 00000000,00000000,00000002 switch:admin>> NOTE: Refer to "Viewing the port log" on - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 309
by default. Manual for additional command information): • [-nframes count]-Specify the number of frames to send. • [-lb_mode mode]-Select the loopback point for the test. • [-spd_mode mode]-Select the speed mode for the test. • [-ports itemlist]-Specify a list of user ports to test. Example switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 310
width 2 (meaning word width) and a default payload size of 512 bytes. Refer to Table 69 for a list of additional tests that can be used to determine the switch components that are not functioning properly. Refer to the Fabric OS Command Reference Manual for additional command information. Table 69 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 311
storage is connected to a switch, but the link between the server/storage and the switch does not come up. This prevents the server/storage from communicating through the switch 0x11050100). switch:admin> portlogdumpport 4 time task event port cmd args 11:40:02.078 PORT Rx3 23 20 22000000, - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 312
pstate. The command entry AC indicates that the port has completed point-to-point initialization. switch:admin> portlogdumpport 4 time task F_Port. If the opposite device is another switch, the port becomes an E_Port. Some fabric devices have problems with loop initialization. If this is evident, - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 313
port, switch SFP, cable, the edge device, and the edge device SFP). To troubleshoot a marginal link: 1. Enter the portErrShow command. switch:admin> porterrshow frames enc crc too too bad enc disc link loss loss frjt fbsy tx rx in err shrt long eof out c3 fail sync sig sig 0: 22 24 0 0 0 0 0 1.5m - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 314
troubleshooting procedures for the Host or Storage device. Inaccurate information in the system message log In rare instances, events gathered by the track change feature can report inaccurate information to the system message log. For example, a user enters a correct user name and password switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 315
to the Web Tools Administrator's Guide for more information. Port mirroring Port mirroring lets you configure a switch port as an analyzer port to mirror a specific source port and destination port traffic passing though any switch port. This is a useful way to troubleshoot without bringing down the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 316
Port mirroring is supported on Condor-based ASIC platforms, including: • SAN Switch 4/32 • SAN Switch 4/32B • 4/64 SAN Switch • 400 MP Router • 4/256 SAN Director with chassis option 5 Port mirroring can be used on the following blades within a chassis: • FC4-32 32-port blade • FC4-16 16-port blade - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 317
the traffic received from the point of view of the switch can be captured before leaving this ASIC. Each user port is connected to an ASIC port. The user port's ingress traffic is routed to another user port on this chip, uplinks to the core switch, or E_Ports to remote domains. Mirroring is used on - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 318
transmit filter works on each switch that is capable of port mirroring can support storage devices (DIDs) and does not send full line rate to a single target. A mirror port configured at 2GB can only support firmware download procedure to downgrade to previous Fabric OS releases that do not support - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 319
on a switch, the number switch:admin> portmirror --show Number of mirror connection(s) configured: 4 Mirror_Port SID DID State 18 0x070400 0x0718e2 Enabled 18 0x070400 0x0718e3 Enabled 18 0x070400 0x0718ef Enabled 18 0x070400 0x0718e0 Enabled Fabric OS 5.3.0 administrator guide - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 320
following example. switch:admin> switchshow 20 2 4 --N4 No_Module 21 2 5 idN2 No_Light 22 2 6 idN2 No_Light 23 2 7 idN2 No_Light 24 2 8 idN1 OnlineL_Port (output truncated) 156 2 28 --N4 No_Module 157 2 29 idN2 No_Light 158 2 30 --N4 No_Module 159 2 31 idN2 OnlineMirror Port 332 Troubleshooting - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 321
WWN-based zoning. Enabling and disabling NPIV For Bloom-based switches (SAN Switch 2/32 and SAN Director 2/128), NPIV is disabled for every port. For Condor-based switches and port blades (SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, and 4/256 SAN Director), NPIV is enabled for every port. To - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 322
by the limits you set, and also by the limit that is reached first. For example, if you've set switch.login.perPortMax to 25, and switch.login.perSwitchMax to 100, then the first 4 ports will accept 25 virtual N_Port_IDs each. However, the fifth port will reject any more virtual N_Port_IDs - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 323
output from the switchShow command: switch: admin> switchshow switchName:swd77 switchType:32.0 switchState: Online switchMode:Native truncated> 50:05:07:64:01:20:73:b8 50:05:07:64:01:60:73:b8 65 NPIV public 50:05:07:64:01:e0:73:b8 50:05:07:64:01:20:73:b5 Fabric OS 5.3.0 administrator guide 335 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 324
(s) connected." Following is sample output for portShow: switch:admin> portshow 2 portName: 02 portHealth: HEALTHY Authentication 20:02:00:05:1e:35:37:40 portWwn of device(s) connected: c0:50:76:ff:fb:00:16:fc c0:50:76:ff:fb:00:16:f8 ... ... c0:50:76:ff:fb:00:16:80 50:05:07:64 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 325
Web Tools Administrator's Guide. NOTE: The 4/16 SAN Switch, 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, 400 MP Router, and 4/256 SAN Director switches do not display AL_PA - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 326
by SAN Director 2/128 and 4/256 SAN Director. For 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 327
are not displayed on the 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, 400 MP Router and the 4/256 SAN Director. Fabric OS 5.3.0 administrator guide 339 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 328
16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, and SAN Director 2/128 models allow up to eight end-to-end monitors. The SAN Switch 4/32, SAN Switch 4/32B, 4/64 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 329
directions with CRC errors. Figure 20 shows several switches and the correct ports on which to add performance monitors for a specified SID on the port to compare only certain parts of the SID or DID. By default, the frame must match the entire SID and DID to trigger the monitor. administrator guide 341 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 330
" The EE mask on port 11 is set and EE counters are reset. switch:admin> perfshowporteemask 1/11 The EE mask on port 11 is set by application TELNET Area: off RxDID AL_PA: on The end-to-end mask is set on slot 1, port 11. The default EE mask value for an E_Port is: • TxSID = "00:00:00" • TxDID = "ff: - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 331
user-defined filter customized for your particular use. For 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/16V, SAN Switch 2/32, and SAN Director 2/128 Fabric OS 5.3.0 administrator guide 343 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 332
switches provide 2 unique unused offsets per port for user-defined • SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32 and SAN Director 2/128 models HP StorageWorks SAN Switch 2/8 EL, SAN Switch 2/16 (Fabric OS v3.0.0 or later) Up to three different offsets per port. • SAN Switch 4/32, SAN Switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 333
• 4/16 SAN Switch and 4/8 SAN Switch models (Fabric OS v5.0.1) Up monitors switch:admin> perfaddusermonitor 4/2, "12, 0xff, 0x05, 0x08; 9, 0xff, 0x02" "FCP/IP" User monitor #5 added switch:admin> perfaddusermonitor 1/2, "0, 0xff, 6" User Monitor all entries. Fabric OS 5.3.0 administrator guide 345 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 334
16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, and SAN Director 2/128 models support eight filter-based monitors for trunks. • The SAN Switch 4/32, SAN Switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 335
of the traffic at specified intervals. NOTE: 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, 400 MP Router, and 4/256 SAN Director outputs do not include CRC - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 336
187 26k 200 722 722 722 522 200 26k 204 717 717 717 513 204 To display filter monitor information on a port switch:admin> perfMonitorShow --class FLT 2/5 There are 7 filter-based monitors defined on port 21. KEY ALIAS OWNER_APP OWNER_IP_ADDR FRAME_COUNT 0 SCSI_Frame TELNET - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 337
switch link). The --class monitor_class operand is required. Specifies the slot number for a SAN Director 2/128 or 4/256 SAN Director. For all other switches 16-port blades, there are 16 ports, counted from the bottom, numbered 0 to 15. For 32-port blades, there are 32 ISL monitor switch:admin> - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 338
command: switch:admin> changes: switch:admin switch: FLASH. To prevent the switch configuration flash from running 16. • The total number of filter monitors per port is limited to 16. • The total number of monitors per switch switch exceeds 512. If the total number of monitors per port or switch switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 339
group contains four ports and uses a common pool of credits. • 4/8 SAN Switch or 4/16 SAN Switch • MSA SAN Switch 2/8 • SAN Switch 2/8 EL • SAN Switch 2/8V • SAN Switch 2/16V • SAN Switch 2/32 • Core Switch 2/64 • SAN director 2/128 Because the number of credits available for use within each port - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 340
to remain operational, even when extended links are in use. • SAN Switch 4/32 • 4/64 SAN Switch • 4/32B SAN Switch • 400 Multi-protocol Router • Brocade 7600 • 4/256 SAN Director using the following port blades: • FC4-16 • FC4-16IP • FC4-32 • FC4-48 • FR4-18i A buffer-limited port can come online - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 341
are 4) there are 5 credits, plus 6 extra credits. 2. This mode is supported but cannot be configured on switches running Fabric OS v5.2.0 and later. 3. The dynamic long-distance mode (LD) the number of buffer credits based on the user-specified distance. Fabric OS 5.3.0 administrator guide 353 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 342
(Goldeneye ASIC) Table 76 lists the extended ISL modes for the 4/8 SAN Switch or 4/16 SAN Switch, (Goldeneye ASIC). Table 76 4/8 SAN Switch or 4/16 SAN Switch extended ISL modes (Goldeneye ASIC) Mode 1 Buffer allocation 1 Gbps 2 Gbps 4 Gbps Distance @ 1 Gbps Distance @ 2 Gbps Distance @ 4 Gbps - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 343
4/16 SAN Switch Speed (Gbps) Number of ports allowed at distance (km) 10 km 25 km 50 km 100 km 250 km 500 km 1 16 ports 12 ports 6 ports 3 ports 1 port n/a 2 16 ports 6 ports 3 ports 1 port n/a n/a 4 8 ports 3 ports 1 port 0 n/a n/a Fabric OS 5.3.0 administrator guide - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 344
SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN director 2/128, and 4/256 SAN Director (FC2-16 port blades) Table 79 lists the number of ports that can be configured per port group at various distances. Table 79 SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN director 2/128, and 4/ - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 345
(km) 10 km 25 km 50 km 100 km 250 km 1 64 ports 64 ports 64 ports 44 ports 16 ports 2 64 ports 64 ports 48 ports 20 ports 8 ports 4 64 ports 48 ports 20 ports 8 ports n/a 500 km 8 ports n/a n/a 4/32B SAN Switch Table 84 lists the number of ports that can be configured at - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 346
16 ports 16 ports 16 ports up to 12 ports up to 4 ports up to 2 ports 2 16 ports 16 ports up to 12 ports up to 5 ports up to 2 ports 0 4 16 ports 3 ports 0 port 500 km 2 ports 0 port 0 4/256 SAN Director (FC4-32 port blades) The number of ports that can be configured at various distances - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 347
before setting this parameter. • Extended ISLs are not supported between 1Gb switches and other Brocade models. • For fabrics that contain a mix of HP StorageWorks models, the fabric.ops.mode.longDistance parameter must be set to 0 (the default). Under certain circumstances (for example, if you want - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 348
slot number for SAN Director 2/128 and 4/256 SAN Director. This option is not applicable to fixed-port switches. The slot number regular switch port. A total of 20 full-size frame buffers are reserved for data traffic, regardless of the port's operating speed; therefore, the maximum supported link - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 349
(Fabric OS versions earlier than v4.4.0 do not support this parameter.) Note: For 4/256 SAN Director with FC4-16, FC4-16IP, FC4-32, or FC4-48 port blades, ports will be sets the desired distance to 50 kilometers: switch:admin> portcfglongdistance 1/1 LD 1 50 Fabric OS 5.3.0 administrator guide 361 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 350
362 Administering Extended Fabrics - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 351
set trunk port speeds (for example, 2 Gig/sec, 4 Gig/sec, or autonegotiate) for entire switches or for individual ports. Trunks distribute traffic dynamically and in order at the frame level, achieving greater , no more than 30 meters difference is recommended. Fabric OS 5.3.0 administrator guide 359 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 352
Connections between SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, and 4/256 SAN Director (using FC4-16 and FC4-32 port blades) models support these advanced features: • Up to eight ports in one trunk group to create high performance 32-Gbit/sec ISL trunks between switches • ISL Trunking over - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 353
the switch and log in as admin. 2. Enter the portDisable command. The format is: portDisable [slot/]port Slot is the slot number (SAN Director 2/128 Director [slot/]port Slot is the slot number (SAN Director 2/128 and 4/256 SAN Director only) and port is the port number of the port - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 354
groups in problem areas. There default is one sample every second). 3. Record the traffic flow for each port participating in an ISL. 4. Repeat step 1 through step 3 for each switch work cycle), to capture varying traffic patterns under different conditions. The following example shows a switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 355
only required for switches with slots such as the SAN Director 2/128, and 4/256 SAN Director). Specifies the switch. The following example enables trunking all ports in the switch. switch:admin> switchcfgtrunk 1 Committing configuration...done. switch:admin> Fabric OS 5.3.0 administrator guide - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 356
is only required for switches with slots, such as the SAN Director 2/128 and 4/256 SAN Director. Specifies the port 16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, SAN Switch 4/32B and 4/256 SAN - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 357
at a speed of four Gbit/second. (4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, SAN Switch 4/32BSAN Switch 4/32, and 4/256 SAN Director switches only.) The following example sets the speed - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 358
69:04:10:83 switch:admin> deskew 16 Master deskew 15 deskew 16 Master deskew 15 deskew 17 deskew 16 deskew 16 Master deskew 15 trunking support for switches with Condor ASICs is summarized in Table 87. Table 87 Trunking support for SAN Switch 4/32, SAN Switch 4/32B and 4/64 SAN Switch (Condor - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 359
trunkDebug command to troubleshoot the problem, as shown in the following procedure: 1. Connect to the switch and log in as switch:admin> trunkdebug 3 5 port 3 is not E port switch:admin> Recognizing buffer underallocation For SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32 and SAN Director 2/128 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 360
LD from another mode can result in the port being disabled for lack of buffers-this does not apply to the SAN Switch 4/32, SAN Switch 4/32B and 4/256 SAN Director (using FC4-16 and FC4-32 port blades). If this happens: • In Fabric OS v4.2.x, reconfigure the disabled LD port back to the original mode - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 361
your SAN into two zones, winzone and unixzone, so that your Windows servers and storage do not interact with your UNIX servers and storage. is, a fabric containing two or more switches running different fabric operating systems-you should use the switch with the highest Fabric OS level to perform - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 362
zone list, and returns the LUNs assigned to the WWN. Other LUNs on the storage port are not made available to the server. Host-based Host-based Zoning can implement WWN or LUN masking. Fabric-based Fabric switches implement fabric-based Zoning, in which the zone members are identified by WWN or - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 363
pre-assigning technique, the administrative team cannot overload any one storage port by associating too many servers with it. Using no area (d is the domain ID of the switch and area is the area number on that switch). For example, on SAN Director 2/128 models, "4, 46" specifies port 14 in guide 371 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 364
This clearly identifies the server host bus adapter (HBA) associated with the zone. Zone can be implemented and provide the most generic services. If other configurations are used for specialized removed from flash memory. On power-up, the switch automatically reloads the saved configuration. - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 365
basis) whenever the fabric membership or zone configuration changes. Software-enforced Zoning Zoning enables users to restrict access to devices in a fabric. Software-enforced Zoning prevents hosts from name server for accessible devices in the fabric, the Fabric OS 5.3.0 administrator guide 373 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 366
MSA SAN Switch 2/8, HP StorageWorks 2/16 EL, HP StorageWorks 2/16, 4/16 SAN Switch and 4/8 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch, 400 MP Router, SAN Director 2/128, and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 367
with four non-overlapping hardware-enforced zones. Figure 24 Hardware-enforced non-overlapping Zones Port_Zone1 WWN_Zone1 Port_Zone2 Core Switch WWN_Zone2 Zone Boundaries Figure 25 shows the same fabric components zoned in an overlapping fashion. 22.2b(13.2) Fabric OS 5.3.0 administrator - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 368
ensures that any PLOGI/ADISC/PDISC/ACC from an unauthorized device attempting to access a device it is not zoned with is rejected. 2 Gbit/sec switches always deploy the hardware assist, in any zone configuration (see Figure 26 and Figure 27). Figure 26 Zoning with hardware assist (mixed-port and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 369
the fabric includes a switch and you support a third-party switch product, they are only configuration, confirm that the nodes and storage can identify and access one another switch in the fabric (it is best to use a newer switch such as the SAN Switch 4/32, SAN Switch 4/32B, 4/64 SAN Switch guide 377 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 370
Supported switches for broadcast zones Broadcast zoning is enforced only for Fabric OS v5.3.x or later switches. If the fabric contains switches have membership in that Admin Domain. Figure 28 illustrates how broadcast zones work with Admin Domains. Figure 28 shows a fabric with five devices and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 371
switch has broadcast zone-capable firmware on the active CP (Fabric OS v5.3.x or later) and broadcast zone-incapable firmware controlled by the switch. So adding loop switch is running pre-v5.3.0 firmware, the broadcast zone does not have any effect on devices connected to that remote switch default - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 372
regular zone. See "Activating default zones" on page 383 for additional information about default zoning. Creating and managing zone switch:admin> alicreate "array1", "2,32; 2,33; 2,34; 4,4" switch:admin> alicreate "array2", "21:00:00:20:37:0c:66:23; 4,3" switch:admin> alicreate "loop1", "4,6" switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 373
OS Command Reference Manual. To delete an alias 1. Connect to the switch and log in Service (RCS) enabled (rcsDisabled=0). If RCS is disabled (rcsDisabled=1), check for older switches in the fabric. After the older switches are upgraded, RCS is enabled by default. RCS is available on all switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 374
3. Enter the cfgSave command to save the change to the defined configuration. switch:admin> zonecreate "greenzone", "2,32; 2,33; 2,34; 4,4" switch:admin> zonecreate "redzone", "21:00:00:20:37:0c:66:23; 4,3" switch:admin> cfgsave You are about to save the Defined Zoning configuration. This action - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 375
the cfgEnable "d_efault_Cfg" command. To view the current default zone access mode: 1. Connect to the switch and log in as admin. 2. Enter the defZone -show command. NOTE: If you performed a firmware download of an older release, then the current default zone access state will appear as it did prior - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 376
database limitations Fabric OS version Maximum database size (KB)) 2.4.0 64 2.5.0 64 2.6.0 96 3.x 128 3.1.x 96 3.2.x 256 4.x, 4.1.x, 4.2.x 128 4.4.x 256 5.0.1 256 5.0.x 256 5.1.x 256 5.2.x 1024 Before linking two switches together, it is important that you know the zone - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 377
Join Join Join Segment Fibre Channel Router Join XPath 7.3 Segment Join Segment Segment Segment Join Segment Join Segment Join Segment Segment Segment Fabric OS 5.3.0 administrator guide 385 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 378
64 bytes per item. When enabling a new zone configuration, you must ensure that the size of the configuration does not exceed the minimum size supported by all switches and the currently saved size on all switches. Refer to the Fabric OS Command Reference Manual for details on the cfgSize command. If - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 379
switch:admin> cfgadd "newcfg", "bluezone" switch to the switch and log switch:admin> cfgremove "newcfg", "redzone" switch to the switch and log switch:admin> cfgdelete "testcfg" switch switch:admin> zoneremove "zone1","3,5" switch switch and log in as admin. Fabric OS 5.3.0 administrator - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 380
:76:8c 21:00:00:20:37:0c:71:02 1,2 21:00:00:20:37:0c:76:22 21:00:00:20:37:0c:76:28 zone: Red_zone 1,0 21:00:00:20:37:0c:76:85 21:00:00:20:37:0c:71:df To view selected zone configuration information 1. Connect to the switch and log in as - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 381
a zone object 1. Connect to the switch and log in as admin. 2. Enter with "Test": switch:admin> cfgshow ignored. switch:admin> zoneobjectcopy "Test1 switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Red_zone; Blue_zone switch the change preserved when the switch reboots, save it to - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 382
:0c:76:28 zone: Red_zone 1,0 21:00:00:20:37:0c:76:85 21:00:00:20:37:0c:71:df 3. Enter the zoneObjectExpunge command to delete the zone object. Note that zone configuration names are case sensitive; blank spaces are ignored switch:admin> zoneObjectExpunge "White_zone" 4. Enter the cfgShow command to - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 383
commands in the Fabric OS Command Reference Manual. Adding a new switch or fabric When a new switch is added to the fabric, it Guide for more information. • Merging and segmentation The fabric is checked for segmentation during power-up or when a switch is disabled or enabled, or when a new switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 384
created fabric. If the two fabrics have different Zoning configurations, they will be merged. If the two fabrics cannot join, the ISL between the switches will be segmented. • Merge Conflicts When a merge conflict is present, a merge will not take place and the ISL will segment. Use the switchShow - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 385
OS Administrator's Guide for information about security policies). You must perform zone management operations from the primary FCS switch using a zone Zoning architectures (hard or soft) works best for your fabric. With time and planning, the basic hard zone configuration works for most sites. If a - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 386
switch in the fabric. Testing Effect of changes in a production fabric Confirming operation Testing a (new) zone configuration. Before implementing a zone, the user should run the Zone Analyzer from Web Tools to isolate any possible problems normal part of a functioning SAN, the pause in I/O might - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 387
HP StorageWorks switches (400 MP Router or 4/256 SAN Director with an FR4-18i blade). The GbE ports on the FC4-16IP do not support FCIP tunneling. NOTE: The FCIP Tunneling Service for the HP StorageWorks 400 MP Router or HP StorageWorks 4/256 SAN Virtual ports (switchshow 16 through 23 (area - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 388
-FC Routing Service functionality over an FCIP tunnel. VEX_Ports enable interfabric links (IFLs) so that you can share storage and servers 4/256 SAN Director with an B-Series MP Router blade. A VEX_Port can only be connected to a VE_Port. VEX_Port to VEX_Port tunnels are not supported. There - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 389
FCIP was configured with VE_Ports, the switches will merge over the IP WAN to become a single fabric. If any of the VE_Ports had been configured as VEX_Ports, that portion of the fabric would remain a separate fabric, but still enable sharing of storage and server devices. Figure 28 illustrates - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 390
B-Series MP Router blade. The two GbE ports (ge0 and ge1) support up to eight FCIP tunnels each (each FCIP tunnel is represented and managed physical Fibre Channel ports, and ports 16-23 are logical Fibre Channel ports on the physical GbE port, ge0. Ports 24-31 correspond to logical Fibre Channel - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 391
32 Fibre Channel ports (16 standard Fibre Channel ports, and 16 Quality of Service (QoS) class of service DiffServ Code Service (TOS) field in the 802.1p header, which allows up to 64 Two Class of Service, or CoS), / 111 0 / 000000 8 / 001000 16 / 010000 24 / 011000 32 / 100000 40 / 101000 48 / 110000 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 392
consider using fastwrite and tape write acceleration, called "tape pipelining." Supported only in Fabric OS 5.2.x and higher, fastwrite and tape pipelining an FCIP tunnel must have matching configurations for these features to work. Unlike IPSec, compression, fastwrite, and tape pipelining features - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 393
64 IT pairs are associated with ITL pairs. The rest of the IT pairs are not associated to any ITL pairs, so no tape pipelining is performed for those pairs. By default, only fastwrite-based acceleration is performed on the unassociated pairs. Does not support Fabric OS 5.3.0 administrator guide 399 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 394
Figure 32 Multiple tunnels to multiple ports, fastwrite and tape pipelining enabled on a per-tunnel/per-port basis Connections must all be VEX-VE 400 Configuring and monitoring FCIP tunneling - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 395
Unsupported configurations The following example configurations are not supported with fastwrite and tape pipelining. These configurations use multiple equal-cost paths. Figure 33 Unsupported configurations with fastwrite and tape pipelining VE-VE or VEX-VEX Fabric OS 5.3.0 administrator guide 401 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 396
OS requirements for FC Fastwrite Fabric OS supports FC Fastwrite between two 400 MP Routers or two 4/256 SAN Directors with FR4-18i blades connected by the switches/blades at both ends of the FC Fastwrite flow to enable this feature. How FC Fastwrite works Figure 35 shows how FC Fastwrite works. - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 397
be held by the remote switch. Flow configuration requirements FC that do not support FC Fastwrite. An FC Fastwrite does not work in FICON environments. • does not support loop device configurations 4/256 SAN Directos powers the blade off and back on. In the case of the 400 MP Router, the switch - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 398
off and back on the and it may take upto 5 minutes. For non bladed system, the switch will be rebooted. Data traffic will be disrupted. Continue (Y,y,N,n): [ n] y Slot 7 is being powered off 3. Enable FC Fastwrite on the ports using the portcfg command. #portcfg fastwrite - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 399
1 Online portPhys: 6 In_Sync portScn: 32 F_Port port generation number: 0 portId: 022300 portIfId: 43320004 portWwn: 20:23:00:60:69:80:04:8a For the FR4-18i blade, the command powers the blade off and back on. In the case of the 400 MP Router, the switch is rebooted. The process takes up to - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 400
service of applications, services, or the network, data corruption, and data and user credential theft. By default, when creating an FCIP tunnel, IPSec is disabled. FCIP tunneling with IPSec enabled will support different 56-bit keys to encrypt blocks of 64-bit plain text. The algorithm is FIPS- - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 401
following limitations apply to using IPSec: • IPv6, NAT, and AH are not supported. • You can only create a single secure tunnel on a port; you managed using the policy command. You can configure up to 32 IKE and 32 IPSec policies. Policies cannot be modified; they must be deleted guide 407 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 402
sequential numbering. The range of valid values is any whole number from 1 through 32. The supported type of encryption. Valid options are 3DES, AES-128, and AES-256. AES-128 is the default. authentication_algorithm The authentication algorithm. Valid options are SHA-1, MD5, and AES-XCBC (IPSec - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 403
group. Supported groups are Group 1 and Group 14. Group 1 is the default. secs The security association lifetime in seconds. 28800 is the default. The following example shows how to create IKE policy number 10 using 3DES encryption, MD5 authentication, and Diffie-Hellman Goup 1: switch:admin06 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 404
switches. The same procedures apply to local switches and need to be performed there as well. See the Fabric OS Command Reference Manual Router blade are disabled by default. Before you can configure FCIP tunnels, you must persistently enable the ports. CAUTION: VEX_Port Users: If the fabric is - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 405
ON ON ON EX Port Mirror Port Ports of Slot 8 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 Speed AN AN ON ON ON ON ON ON ON ON ON ON ON ON ON EX Port switch:admin06> where AN:AutoNegotiate, ..:OFF, ??:INVALID. LM:L0.5 Defining the IP Fabric OS 5.3.0 administrator guide 411 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 406
always be a VE_Port. By default the virtual ports will automatically disable the admin. -f fabricid Specify 1 to 128 for the fabric ID. -d domainid Specify 1 interface of the remote switch, you can define destination routes on an interface. You can specify a maximum of 32 routes per GbE port - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 407
255.0 192.168.100.1 1 The following example verifies that the two routes have been successfully created: switch:admin06> portshow iproute 8/ge0 Slot: 8 Port: ge0 IP Address Mask Gateway Metric Flags 192.168. 168.12.0 255.255.255.0 192.168.100.1 1 Fabric OS 5.3.0 administrator guide 413 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 408
to target the ping request. -n (Optional) Generates specified number of ping requests. The default is 4. -q (Optional) Sets the "tos" in the ping requests to the type of service. The default is 0 (zero). The value must be an integer in the range from 0 through 255 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 409
Router or 4/256 SAN Director with a Reference Manual. default and minimum values are 80 sec. -r retransmissions Specifies the maximum number of retransmissions on the existing FCIP tunnel. The range of valid values is 1 through 16 20 through 5,000 ms and the default 32 bytes. It can be a - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 410
If tape pipelining is enabled, the default and minimum value is 80 sec. 20 through 5000 ms (milliseconds). -r retransmissions Maximum number of retransmissions on the existing FCIP tunnel. A range of valid values is 1 through 16 interface : switch:admin06> portcfg fciptunnel 3/ge0 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 411
FCIP tunnel. The following example shows an active tunnel with fastwrite enabled but tape pipelining off: switch:admin06> portshow fciptunnel ge0 all Tunnel ID 0 Remote IP Addr 10.0.10.224 Local IP Addr FCIP tunnels now appear in the fabric as VE_Ports. Fabric OS 5.3.0 administrator guide 417 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 412
switch:admin06> portenable 8/18 switch:admin06> portenable 8/19 switch:admin06> switchshow switchName:switch BB Fabric ID:1 Area Slot Port Media Speed State 32 3 0 id N4 Online F-Port 50:03:0d:30 3 4 id N2 Online F-Port 21:00:00:e0:8b:08:bd:20 210 8 18 -- -- Online VE-Port 50:00: - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 413
Manual for detailed information on these commands. Troubleshooting FCIP links The following list contains information for troubleshooting ends of the tunnel must be configured correctly for a FCIP tunnel to work correctly. These ports can be either VE_Ports or VEX_Ports. A VEX_Port must guide 419 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 414
FCIP port supports a single instance Service Level Agreement (SLA) without bringing the FCIP tunnel down. NOTE: For uncommitted bandwidth, any data transferred across the active tunnel will compete for the same network bandwidth as the ipPerf session. Unless you have a method to quiesce all storage - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 415
and payload. There is a limited support for black hole PMTU discovery. If the Jumbo PMTU (anything over 1500) does not work, ipperf will try 1500 bytes (minimum PMTU supported for FCIP tunnels). If 1500 more information about specifying source and sink mode. Fabric OS 5.3.0 administrator guide 421 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 416
-S 3. Use the portCmd ipPerf option specifying the slot and port of a switch. The following example shows the results of the performance analysis for slot 8, port after each display interval (if you do not specify an interval, the default is 30 seconds). In the output, data is displayed as follows: - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 417
allowed size is 1MSS. If you plan to use PMTU discovery, use the default size, otherwise the PMTU information might not be accurate. -i Interval in TCP connections associated with active FCIP tunnel(s): switch:admin06> portshow fciptunnel 8/ge0 Fabric OS 5.3.0 administrator guide 423 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 418
specify either the -perf or -params options. The following example shows the portCmd fcipTunnel with the performance option to display characteristics of tunnel 0. switch:admin06> portshow fciptunnel 8/ge0 all Slot: 8 Port: ge0 Tunnel ID 0 Remote IP Addr 192.175.4.200 Local IP Addr 192.175.4.100 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 419
following example shows the portCmd fcipTunnel with the parameters options to display the parameters of tunnel 0: switch:admin06> portshow fciptunnel 8/ge0 0 Slot: 8 Port: ge0 Tunnel ID 0 Remote IP Addr input Bytes 556200 Bps 30s avg, 491394 Bps lifetime avg Fabric OS 5.3.0 administrator guide 425 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 420
command to display IPSec information for tunnel 0: switch:admin06> portshow fciptunnel 8/ge0 3 -ipsec Port: ge0 Tunnel ID 3 Remote IP Addr 192.175.5.200 Local IP Addr 192.175.5.100 Remote WWN Not Configured Local WWN 10:00:00:05:1e:37:00:20 Compression off Fastwrite on Tape Pipelining on - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 421
supports up to 16 ports per switch. • core The default for 4/16 SAN Switch and 4/8 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, 4/64 SAN Switch, 400 MP Router, SAN Director 2/128, and 4/256 SAN Director. This is the recommended format for HP StorageWorks switches - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 422
, which requires the host to be rebooted. With the introduction of the 4/16 SAN Switch and 4/8 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, and SAN Switch 4/32 switches and the Core Switch 2/64, SAN Director 2/128, and 4/256 SAN Director, the Native PID format used in earlier - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 423
command. Before downgrading firmware, change the PID back to supported PIDs such as Core Switches that are queried using outside calls should be configured using PID 1 (core PID) to ensure that the correct port numbering is used in other management applications. Fabric OS 5.3.0 administrator guide - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 424
v4.2.0 and later 1. Convert existing fabric to Core PID format, upgrading the version of Fabric OS, if necessary. Set Core PID format for new switch. Host reboot is required. 2. If devices are bound statically and it is not possible to reboot, convert existing fabric to Extended Edge PID format - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 425
Evaluating the fabric In addition to this section, refer to the HP StorageWorks SAN Design reference guide for information on evaluating the fabric: http://h18000.www1.hp.com/products/storageworks/san/documentation.html If there is the possibility that your fabric contains host devices with static - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 426
the multipathing software to manually fail a path before starting maintenance on that fabric. 4. Perform empirical testing. Empirical testing might be required for some devices, to determine whether they bind by PID. If you are not sure about a device, work with the support provider to create a test - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 427
any hybrid procedure is extremely customized, it is necessary to work closely with the SAN service provider in these cases. Changing to core PID format In Fabric OS release v4.2.0 and later, Native PID format is not supported; the default format is the Core PID format. In Fabric OS v3.1.2 and - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 428
, you can choose Extended Edge PID format. It uses the same PID mapping for the first 16 ports and can support switches and Directors with higher port counts. However, because Extended Edge format only supports 128 ports per domain, its use can lead to port addressing issues in Directors. Use the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 429
PID format HP StorageWorks 1 GB switches SAN Switch 2/8 EL and SAN Switch 2/16 v2.6.2 v3.1.2 SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, Core Switch 2/64, SAN Director 2/128 Switches v4.2.0 4/16 SAN Switch and 4/8 SAN Switch, 4/256 SAN Director Switches v5.0.1 4/64 SAN Switch and 400 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 430
(yes, y, no, n): [no] yes Domain: (1..239) [217] BB credit: (1..27) [16] R_A_TOV: (4000..120000) [10000] E_D_TOV: (1000..5000) [2000] Data field size: (256..2112) [2112] Sequence Level Switching: (0..1) [0] Disable Device Probing: (0..1) [0] Suppress Class F Traffic: (0..1) [0] SYNC IO mode: (0..10 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 431
you enable Extended Edge (also known as "displaced PID") PID on the Director If you are using Extended Edge PID format (for example, the 4/256 SAN Director with configuration option 5) and would like to map the output of the port number to the area ID, use the following formula (for ports - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 432
When the port number is greater than or equal to 128, the area ID and port number are the same. Figure 37 shows a 4/256 SAN Director with Extended Edge PID. Figure 37 4/256 SAN Director with Extended Edge PID 434 Configuring the PID format - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 433
16 SAN switches, v4.2.0 for HP StorageWorks Core Switch 2/64 and SAN Director 2/128 Directors, as well as SAN Switch 2/8V, SAN Switch 2/16V, and SAN Switch 2/32 switches, v5.0.1 for 4/256 SAN Director, and 5.1.x for 4/64 SAN Switch, 400 MP Router and B-series MP Router blade require 5.1.0b firmware - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 434
E_D_TOV: (1000..5000) [2000] Data field size: (256..2112) [2112] Sequence Level Switching: (0..1) [0] Disable Device switches in the fabric are operating in the new addressing mode. HP/UX procedure This procedure is not intended to be comprehensive. It provides a starting point from which a SAN - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 435
-a y /dev/jbod 16. If you are not listed: het46 (HP-50001)> ioscan 20.Repeat for all fabrics. 21. Issue the switchEnable command. Enable the core switches first, then the edges. AIX procedure This procedure is not intended to be comprehensive. It provides a starting point from which a SAN - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 436
, power cycles, and failovers. Swap area IDs for a pair of switch ports as follows: 1. Connect to the switch and log in as admin. 2. Enable the port swap feature: portswapenable 3. For 4/16 SAN Switch and 4/8 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, 4/64 SAN - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 437
5. Verify that the port area IDs have been swapped: portswapshow A table is shows the physical port numbers and the logical area IDs for any swapped ports. 6. Disable the port swap feature: portswapdisable Fabric OS 5.3.0 administrator guide 439 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 438
440 Configuring the PID format - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 439
OS v2.6.0 or later. • 2/8 EL SAN Switch and 2/16 SAN Switch models must be running Fabric OS v3.1.0 or later. • HP StorageWorks SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, Core Switch 2/64, and SAN Director 2/128 models must be running 4.2.0 or later. • SAN Switch 4/32 model must be running - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 440
Access API functions Accessible from HP StorageWorks switches only, but switch information for non- HP StorageWorks switches is reported. The object information and zoning actions are configurable from the API. • Brocade translative mode Registers private storage target devices into the fabric - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 441
on an HP StorageWorks switch. Refer to the section "Activating Default Zones" on page 261". • HP StorageWorks 4/16 and 4/8 SAN Switch, SAN Switch 2/8EL, SAN Switch 2/8V, SAN Switch 2/16, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, Core Switch 2/64, SAN Director 2/128, and 4/256 SAN Director - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 442
step 2 through step 6 on all HP StorageWorks switches in the fabric. 8. Enable interoperability on each non-HP StorageWorks switch (refer to the switch documentation). 9. After enabling interoperability mode on all switches, physically connect the non-HP StorageWorks switches into the fabric, one at - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 443
switch:admin> 5. Wait for a fabric reconfiguration after removing each switch. 6. Each non-HP StorageWorks switch might require the execution of a similar command to disable interoperability. 7. Repeat this procedure on all HP StorageWorks switches in the fabric. Fabric OS 5.3.0 administrator guide - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 444
446 Configuring McData Open Fabric mode - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 445
2/64 8 for the chassis, 4 per switch Core Switch 2/64 - 8 for the chassis, 4 per switch SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Director 2/128 SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, SAN Switch 4/32, SAN Director 2/128 Default account names root, factory, admin, user - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 446
for the same level user password. Changing password for lower level user does not require old password. For example, users connect as admin; old admin password is required to change the admin password. But old user password is not required to change the user password. Yes; if users connect as admin - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 447
NOT be prompted. When users connect as root, factory, or admin, the accounts with default password will be prompted for change. The accounts with non-default password will NOT be prompted. Is a user forced to answer password prompts before getting access to the firmware? Do users need to know the - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 448
-disruptive recovery procedures? Contact your switch service provider. A non-disruptive procedure is available. Contact HP. A non-disruptive procedure is available. If a user has only the root Root can change any password, what is the password password by using the recovery mechanism? passwd - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 449
boot PROM n/a password? Contact HP and provide the recovery string. Refer to "Setting the Boot PROM Password" on page 112 for instructions on setting the password with a recovery string. How do I recover a user, admin, or factory password? Refer to "Recovering Forgotten Passwords" on page 116 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 450
452 Understanding legacy password behaviour - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 451
storage devices, fabrics using Remote Switch interact the same as locally connected switches. Remote switch capabilities Remote Switch provides many of the same capabilities of normal ISL links including, • Coordinated fabric services The Remote Switch fabric configuration fully supports switches - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 452
y, no, n): [no] yes Domain: (1..239) [3] R_A_TOV: (4000..120000) [10000] E_D_TOV: (1000..5000) [2000] Data field size: (256..2112) [2112] 1000 Sequence Level Switching: (0..1) [0] Disable Device Probing: (0..1) [0] Suppress Class F Traffic: (0..1) [0] 1 VC Encoded Address Mode: (0..1) [0] Per-frame - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 453
merge in the fabric. No change (clean merge). No change (clean merge). Switch A will absorb the configuration from the fabric. Switch A will absorb the configuration from the fabric - with cfg1 as the effective cfg segments due to: Zone Conflict cfg mismatch Fabric OS 5.3.0 administrator guide 455 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 454
Table 108 Zone merging scenarios (continued) Description Switch A cfg content mismatch defined: cfg1 zone1: ali1; ali2 effective effective: zone1: MARKETING Same name - different types effective:cfg1: MARKETING Switch B defined: cfg1 zone1: ali3; ali4 effective: irrelevant defined: cfg1 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 455
ID 25 account lockout policy 71 duration 71 threshold 71 accounts changing parameters 66 creating 65 default password 26 default, 27 deleting 65 displaying information 64 domain defaults 27 managing passwords 68 password rules 67 recovering 67 user-defined 64 activating a switch certificate 95 Admin - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 456
230 backing up a configuration 107 and restoring configurations, FICON 267 basic card management 206 PID procedure 433 basic connections 48 beaconing mode 214 blocking listeners 90 boot password 82 boot PROM password 82 browser configuring 96 troubleshooting certificates 97 browser and Java support - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 457
interopMode 230 switch, RADIUS 76 extended ISL 347 FibreAlliance MIB 98 FICON environment switches for 257 host 290 HTTPS access 92 IAS 77 IAS user SSL protocol 92 switch 79, 257 switch for RADIUS 79 switch, FICON environment 257 switch, RADIUS client 76 switch, single 258 syslogd conserving power 208 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 458
name 39 D database, clearing in a FICON environment 256 date 32 date and time 32, 36 DCC policy 123 deactivating Admin Domains 160 Default IP Policy Rules 137 default names 39 default password 28 default zone 375 defaults switch names 39 defined AD configuration 157 defined zone configuration 364 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 459
time 32 description, 215 extended 228 FCAP 232 FC-FC 230 fddCfg command 230 firmware download 172 FirmwareDownload 318 FOS standard security features, configuring 117 standard security features,configuring 87 supported protocols 87 fosConfig command 231 frame transfer with remote switch guide 459 - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 460
362 HP authorized reseller 19 storage web site 19 Subscriber's choice web site 19 technical support 19 HP/UX procedure 434 HTTP 95 HTTPS 92, 95, 97 certificates, security 87 hybrid update 427 I IAS configuring users 77 remote access policies 78 IAS (Internet Authentication Service), configuring - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 461
69 password 25 boot prom 82 changing 68 changing defaults 27-?? default 27, 28 default accounts 26 PROM 82 recovery 84 recovery string 82 rules 67 password expiration policy 70 password management information 445 password migration during firmware changes 448 password policies 68 password prompting - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 462
RADIUS clients switch configuration 76 RADIUS server 72 configuration 75 configuring 75 LINUX configuration 75 RADIUS service Windows defaults 27 for user accounts 59 nonfcsadmin 75 routing assigning a static route 216 routing policies 215 RSCN 39 rules configuring zones, for 369 password - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 463
setting the date and time 32 setting the default account passwords 32 setting the IP address 29, 32 setting the security level 99 setting the switch date and time 32 setting up automatic trace dump transfers 292 setting up RADIUS AAA service 74 settings changing passwords 27-?? CHAP local security - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 464
, adding 80 RADIUS configuration, disabling 80 system status 282 user-defined accounts 64 switch access 91 Switch Connection Controls list 232 switch names 39 switch WWN in Admin Domains 154 switchshow command 50 SWL, ISL Trunking support for 351 symbols in text 18 synchronize date and time - HP StorageWorks 4/8 | HP StorageWorks Fabric OS 5.3.x administrator guide (5697- - Page 465
380 viewing zones 374 W web sites HP storage 19 HP Subscriber's choice 19 Web Tools access methods 22 support overview 22 Windows RADIUS, configuring 77 working with domain IDs 40 WWN 39 X xlate domains 226 Z zone adding members 374 adding switches 383 aliases, creating and managing 372 configuring
HP StorageWorks
Fabric OS 5.3.x administrator guide
Part number:5697-0244
November 2009