HP StorageWorks 8/40 HP StorageWorks Fabric OS 6.1.x administrator guide (5697
HP StorageWorks 8/40 - SAN Switch Manual
View all HP StorageWorks 8/40 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP StorageWorks 8/40 manual content summary:
- HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 1
HP StorageWorks Fabric OS 6.1.x administrator guide Part number: 5697-0234 November 2009 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 2
part of this document may be photocopied, reproduced, or translated into another language without the prior written consent of Hewlett-Packard. The information is provided "as is" without warranty of any kind and is subject to change without notice. The only warranties for HP products and services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 3
21 HP technical support 21 Customer self repair 21 Product warranties 21 Subscription service 22 HP websites 22 Documentation feedback 22 1 Standard features 23 Overview 23 Using the CLI 23 Connecting to the CLI 24 Using Telnet or SSH session 24 Using a console session on the serial port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 4
strength policy 64 Setting the password history policy 65 Setting the password expiration policy 65 Upgrade and downgrade considerations 66 Setting the account lockout policy 66 Denial of service implications 67 Authentication model 67 Creating Fabric OS user accounts 69 Managing Fabric OS - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 5
the switch 91 Configuring the Telnet protocol 92 Blocking Telnet 92 Unblocking Telnet 92 Configuring for the SSL protocol 93 Browser and Java support 93 SCP for configuploads and downloads 101 Listener applications 102 Ports and applications used by switches 102 Port configuration 103 4 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 6
118 Auth policy restrictions 119 Supported configurations 119 Selecting authentication protocols 119 Re-authenticating ports 120 Managing secret key 143 Restoring a configuration 145 Configuration download without disabling a switch 145 Security considerations 147 Restoring configurations - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 7
member types 156 Device members 156 Switch port members 156 Switch members 157 Admin Domains and switch WWN 157 Admin Domain compatibility and availability 158 Admin Domains and merging 158 Compatibility 159 Firmware upgrade considerations 159 Managing Admin Domains 159 Understanding - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 8
zones 202 Supported switches for broadcast zones 202 Broadcast zones and Admin Domains 202 Broadcast zones and FC-FC routing 203 Upgrade and downgrade considerations 203 High Availability considerations with broadcast zones 203 Loop devices and broadcast zones 203 Backward compatibility with - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 9
balancing 254 Displaying connection redirection status 254 Supported iSCSI initiators 255 Checklist for configuring iSCSI 255 FC4-16IP Blade Configuration 257 FC4-16IP port numbering 257 Enabling the iSCSI gateway service 258 Enabling GbE ports 258 Configuring the GbE interface 259 iSCSI - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 10
NPIV port configuration information 280 Displaying login information 282 15Optimizing fabric behavior 283 Introduction to adaptive networking 283 Top Talkers 283 Traffic Isolation 283 TI zone failover 284 FSPF routing rules and Traffic Isolation 284 General rules for TI zones 285 Supported - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 11
294 16Using the FC-FC Routing Service 295 Supported platforms 295 Supported configurations 295 Fibre Channel routing concepts 295 Proxy devices 298 Routing types 299 Fibre Channel NAT and phantom domains 299 Setting up the FC-FC routing service 300 Performing verification checks 301 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 12
Fabrics licensing 347 Extended Fibre Channel over distance 347 Distance levels for extended Inter-Switch Links (ISLs 347 Buffer-to-Buffer Credits 347 FC switch port Buffer Trunking for Access Gateway 373 20Configuring and monitoring FCIP extension services 375 FCIP services licensing 375 12 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 13
support SAN extension over IP 376 FCIP concepts 377 Virtual ports and FCIP tunnels 377 Virtual port types 377 Compression 378 Traffic shaping 378 QoS concepts and implementation over FCIP 378 Layer three DiffServ Code Points (DSCP 379 VLAN tagging and layer two class of service FCIP port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 14
Overview of Fabric OS support for FICON 415 Supported switches 416 Types of FICON configurations 416 Control Unit Port (CUP 416 FICON commands 417 User security considerations 418 Configuring switches 418 Preparing a switch 419 Configuring a single switch 419 Configuring a high-integrity - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 15
procedure 453 HP/UX procedure 454 AIX procedure 455 Swapping port area IDs 456 B Understanding legacy password behaviour 459 Password management information 459 Password prompting behaviors 460 Password migration during firmware changes 461 Password recovery options 461 C Interoperating - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 16
49 Cascaded configuration, three switches 420 50 FR4-18i Port Numbering 434 51 400 MP Router Port Numbering 434 52 allow/prohibit example 436 53 Cross-coupled configuration 436 54 Non-redundant router configuration 465 55 Configuration during the upgrade 465 56 Redundant router configuration - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 17
149 47 AD user types 154 48 Ports and devices in CLI output 167 49 Admin Domain interaction with Fabric OS features 169 50 Configuration upload and download scenarios in an AD context 171 51 Effects of firmware changes on accounts and passwords 174 52 Recommended firmware 176 53 Types - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 18
and firmware compatibility for nonsecure fabrics 326 72 Types of monitors supported on B-Series switch models 329 73 Advanced Performance Monitoring commands 332 74 Commands to add filter-based monitors 335 75 Predefined values at offset 0 337 76 Fibre Channel data frames 348 77 Switch, port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 19
guide This guide provides information about: • Installing and configuring Fabric OS 6.1.x • Managing user accounts • Using licensed features Supported Fabric OS 6.1.x HP StorageWorks hardware Table 1 lists Brocade and HP StorageWorks product models supported by Fabric OS 6.1.x. =Table 1 Switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 20
HP StorageWorks Fibre Channel SAN switches Related documentation The following documents provide related information: • HP StorageWorks Fabric OS 6.1.x release notes • Web Tools administrator's guide You can find these documents from the Manuals page of the HP Business Support instructions. 20 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 21
contact your local service provider. For North America, see the CSR website: http://www.hp.com/go/selfrepair Product warranties For information about HP StorageWorks product warranties, see the warranty information website: http://www.hp.com/go/storagewarranty Fabric OS 6.1.x administrator guide 21 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 22
enhancements, new driver versions, firmware updates, and other product resources. HP websites For additional product information, see the following HP websites: • http://www.hp.com • http://www.hp.com/go/storage • http://www.hp.com/support/manuals Documentation feedback HP welcomes your feedback - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 23
HP switch models. As new models are introduced, new features sometimes apply only to specific switches. When procedures or parts of procedures apply to some models but not others, this guide identifies the specifics for each model. For example, a number of procedures that apply only to variable-port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 24
that are using IP over Fibre Channel. The embedded port must have an assigned IP address. 2. Open a Telnet connection using the IP address of the logical switch to which you want to connect. Enter the account ID at the login prompt. See "Changing passwords" on page 25 for instructions on how to log - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 25
5. Verify that the login was successful. The prompt displays the switch name and user ID to which you are connected. login: admin password: xxxxxxx switch:admin> Using a console session on the serial port Note the following behaviors for serial connections: • Some procedures require that you - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 26
switches by model number. Table 3 Default administrative account names and passwords Model Administrative account HP StorageWorks 4/8 SAN Switch, 4/16 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 27
port" on page 25. Otherwise, connect using SSH. To display the network interface settings: 1. Connect to the switch and log in using an account assigned to the admin role. 2. Enter the ipAddrShow command. SWITCH Ethernet IP Address: 102.108.153.238 Ethernet Subnetmask: 255.255.255.0 Fibre Channel - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 28
addresses on HP StorageWorks 2/128, 4/256 SAN Director, DC Director models, and in environments where DHCP service is not Fibre Channel IP Address [220.220.220.2]: Fibre Channel Subnetmask [255.255.0.0]: Gateway IP Address [192.168.74.1]: DHCP [OFF]: off or to set an IPv6 address on a switch: switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 29
IP, Ethernet Subnetmask, and Gateway. The Fibre Channel (FC) IP address and subnet mask is static and is not affected by DHCP; see "Setting static Ethernet addresses" on page 28 for instructions on setting the FC IP address. To enable DHCP: 1. Connect to the switch and log in using an account - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 30
switch:admin> ipaddrset Ethernet IP Address [192.168.74.102]: Ethernet Subnetmask [255.255.255.0]: Fibre Channel IP Address [220.220.220.2]: Fibre Channel detection, and troubleshooting, you should set them correctly. Authorization access to set or change the date and time for a switch is role-based - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 31
download process" on page 163 for time zone downgrading considerations. You can set the time zone for a switch using the tsTimeZone command. The tsTimeZone command allows you to perform the following tasks: • Display all of the time zones supported in the firmware • Set the time zone based on - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 32
Enter the appropriate number or Ctrl-D to quit. 4. At the prompt, select a country location. 5. At the prompt, enter the appropriate number to specify the in the fabric will not be possible to switches earlier than Fabric OS 5.3.0 because IPv6 is supported for Fabric OS version 5.3.0 and later. The - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 33
switch is enabled, you can reset them manually so that you can control the ID number or resolve a Domain ID conflict when you merge fabrics. If a switch Domain ID for HP switches is 1. NOTE: Do not use Domain ID 0. The use of this Domain ID can cause the switch to reboot continuously. guide 33 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 34
to use for generating a software license key. • License ID. To see a switch license ID, issue the licenseIdShow command. Feature licenses may be part of the licensed paperpack supplied with your switch software; if not, you can purchase licenses separately from HP. License keys are provided on a per - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 35
key, launch an Internet browser and go to: http://webkey.external.hp.com/welcome.asp The Hewlett-Packard Authorization Center website main menu displays. 2. Click Generate a license key. The HP StorageWorks Software License Key instruction page opens:h 3. Enter the information in the required fields - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 36
Fabric license FICON_CUP license N_Port ID Virtualization license High-Performance Extension over FCIP/FC license Ports on Demand license - additional 16 port upgrade 2 Domain Fabric license Ports on Demand license - additional 16 port upgrade Removing a licensed feature 1. Connect to the switch and - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 37
FCIP/FC Local and attached switches. Local and attached switches. FCIP FICON FICON-CUP FIPS Firmware download Full fabric FC-IP Services or High Performance Extension over FCIP/FC No license required. FICON Management Server No license required. No license required. Firmwaredownload is a command - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 38
, adding, or removing 8Gb licenses. • Without an 8Gb license, even if there is an 8Gb SFP plugged into a port in an applicable platform, the port would be enabled only to run at a maximum speed of 4Gb. • In order to obtain an 8Gb license only the License ID from the switch will be required. When you - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 39
to take affect. Ports on Demand (POD) licensing NOTE: See the hardware reference guide for your switch for the specific POD licensing available. POD licensing is ready to be unlocked in the switch firmware. Its license key may be part of the licensed paperpack supplied with switch software, or you - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 40
If you remove a POD license, the licensed ports will become disabled after the next platform reboot or the next port deactivation. Configuring Dynamic Ports on Demand The Brocade 4Gb SAN Switch for HP c-Class BladeSystem supports blade modules. This switch supports the Dynamic Ports on Demand (DPOD - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 41
Dynamic POD feature is enabled, you can customize the POD license associations. IMPORTANT: The Dynamic POD feature is supported on the Brocade 4Gb SAN Switch for HP c-Class BladeSystem only. To enable Dynamic Ports on Demand: 1. Connect to the switch and log in using an admin account. 2. Enter the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 42
are provisioned for use in this switch: 12 port assignments are provisioned by the base switch license 12 port assignments are provisioned by a full POD license 24 ports are assigned to installed licenses: 12 ports are assigned to the base switch license 12 ports are assigned to the full POD - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 43
in this switch Full POD license is installed Dynamic POD method is in use 24 port assignments are provisioned for use in this switch: 12 port assignments are provisioned by the base switch license 12 port assignments are provisioned by a full POD license Fabric OS 6.1.x administrator guide 43 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 44
an admin account. 2. Enter the switchEnable command. All Fibre Channel ports that passed the POST test are enabled. If the switch has interswitch links (ISLs) to a fabric, it joins the fabric. Disabling and enabling ports By default, all licensed ports are enabled. You can disable and reenable them - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 45
between two Fibre Channel switches that are separated by a network with a protocol such as IP or SONET. Except for link initialization, gateways are transparent to switches; the gateway simply provides E_Port connectivity from one switch to another. By default, switch ports initialize links - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 46
SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, 400 Multi-protocol Router, 4/256 SAN Director and DC SAN Backbone Director: portCfgIslMode Specify a port number. Valid - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 47
switch to the switch and log switches in the fabric. switch:admin> fabricshow Switch switches Device connectivity To verify device connectivity: 1. Connect to the switch Fibre Channel addresses of all devices in the fabric. switch switch:admin> The number of devices listed should reflect the number - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 48
role. 2. Enter the agShow command. switch:admin> agshow Worldwide Name Ports Enet IP Addr Firmware Local/Remote Name 10:00:00:05: ,, INFO, ras007, Successful login by user admin. To display the status of the track changes feature: 1. Connect to the switch and log in using an account assigned - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 49
ports fail. Only one policy parameter needs to pass the MARGINAL or DOWN threshold to change the overall status of the switch. For more information about setting policy parameters, see the Fabric Watch Administrator's Guide. To set the switch status policy threshold values: 1. Connect to the switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 50
policy configuration. HP StorageWorks 4/8 SAN Switch and 4/16 SAN Switch, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, 400 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 51
a switch and on the switch but from the switch to a download user- switch from which the event was initiated. 3 Configuration Audit configuration downloads of existing SNMP configuration parameters. Configuration uploads are not audited. 4 Firmware Audit firmware download start, firmware - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 52
///,/,, Switch names are logged for switch filter state appears (enabled or disabled). switch:admin> auditcfg --show Audit filter is enabled. 2-SECURITY 4-FIRMWARE 5. To verify the audit event log - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 53
password during login attempt. Shutting down switches and Directors To avoid corrupting your file system, HP recommends that you perform graceful shutdowns of switches ) Wed Jan 25 16:12:09 2006... The system is going down for system halt NOW !! INIT: Switching to runlevel: 0 INIT guide 53 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 54
by port and switch SCNs, firmwareDownload, and configDownload) Remote Access Service Log Daemon logs error detection, reporting, handling, and presentation of data into a format readable by management tools and the user - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 55
the local user database. The local user database is manually synchronized using the distribute command to push a copy of the switch's local user database to all other Fabric OS 5.3.0 and later switches in the fabric. Accessing the management channel The total number of sessions on a switch may not - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 56
that can be performed on a fabric and its associated fabric elements. Fabric OS 6.1.x uses RBAC to determine which commands a user can issue. When you log in to a switch, your user account is associated with a pre-defined role. The role that your account is associated with determines the level of - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 57
users on a switch. M Modify The user . N None The user is not allowed to User Operator Switch Zone Fabric Basic Admin Security admin admin admin switch N OM N OM OM Fabric Routing O Fabric Watch O FICON O Firmware Management O FRU Management O O O O OM O OM N OM - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 58
O Statistics O OM Statistics-Device O OM Statistics-Port O OM Switch Configuration O OM Switch Management O OM Switch Management-IP O OM Configuration Switch Port Configuration O OM Switch Port Management O OM Topology O O User Management N N WWN Card O OM Zoning - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 59
the local switch user database. The password for all default accounts switch • userConfig --show username to show account information for the specified account • userConfig --showad -a admindomain_ID to show all accounts permitted to select the specified admindomain_ID Fabric OS 6.1.x administrator guide - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 60
that must be changed the first time the user logs in. 3. In response to the prompt, enter a password for the account. The password is not displayed when you enter it on the command line. To delete an account: 1. Connect to the switch and log in using an admin account. 2. Enter the following - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 61
out. You can enable or disable user-defined or default accounts. -u Unlocks the user account. -x Specifies an expired password that must be changed the first time the user logs in. To add an Administrative Domain to the account: 1. Connect to the switch and log in using an admin account - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 62
names. Starting with Fabric OS 5.1.0 password policies apply. For information on password behavior when you upgrade (or downgrade) firmware, see "Upgrading and downgrading firmware" on page 174. To change the password for the current login account: 1. Connect to the switch and log in using an admin - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 63
local switch user database and passwords to other switches in the fabric causes the distributed database to replace (overwrite) the database on the target switch. The 'Locked' status of a user account is not distributed as part of local user database distribution. When distributing the user database - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 64
switch user database only. Configured password policies (and all user account attribute and password state information) are synchronized across CPs and remain unchanged after an HA failover. Password policies can also be manually minimum number of numeric digits that must appear in the password. The - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 65
policy The password history policy prevents users from recycling recently used passwords, and is enforced across all user accounts when users are setting their own passwords. The password history policy is enforced only when a new password is defined. Specify the number of past password values that - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 66
has not changed their password will have their password expiration period set to the maximum password expiration period. You must explicitly define the password expiration for users who have not performed a password change subsequent to the upgrade. TIP: You cannot upgrade your switch from Fabric OS - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 67
, and accounting (AAA) service requests to the RADIUS or LDAP server. The RADIUS or LDAP server receives the request, validates the request, and sends its response back to the switch. The supported management access channels that will integrate with RADIUS and LDAP include serial port, Telnet, SSH - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 68
the user to log in again. When integrated with RADIUS or LDAP, a switch password change on the RADIUS or LDAP server does not invalidate an existing open session, although a password change on the local switch does. • If you cannot log in because of a RADIUS or LDAP server connection problem, Web - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 69
enter their assigned RADIUS or LDAP account name and password when logging in to a switch that has been configured with RADIUS or LDAP. After the RADIUS or LDAP server authenticates a user, it responds with the assigned switch role in a Brocade Vendor-Specific Attribute (VSA). If the response does - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 70
RADIUS server All existing Fabric OS mechanisms for managing local switch user accounts and passwords remain functional when the switch is configured to use the remote authentication dial-in user service (RADIUS). Changes made to the local switch database do not propagate to the RADIUS server, nor - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 71
the "Operator" role, with ADList 1, 2, 4, 5, 6, 7, 8, 9, 12, 20 and homeAD 2. user-opr Auth-Type := Local, User-Password == "password" Brocade-Auth-Role = "operator", Brocade-AVPairs1 = "ADList=1,2;HomeAD=2", Brocade-AVPairs2 = "ADList=-4-8,20;ADList=7,9,12" Fabric OS 6.1.x administrator guide 71 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 72
, and SecurityAdmin. When they log in to a switch configured with RADIUS, users enter their assigned RADIUS account names and passwords at the prompt. After the RADIUS server authenticates a user, it responds with the assigned switch role in a Brocade Vendor-Specific Attribute (VSA), as defined in - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 73
system password file to authenticate users. JohnDoe Auth-Type := System, Brocade-Auth-Role = "admin" When you use Network Information Service (NIS) for authentication, the only way to enable authentication with the password file is to force the switch to authenticate using Password Authentication - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 74
. Vendor-assigned attribute number-Enter the value 1. Attribute format-Enter String. Attribute value-Enter the login role (Root, Admin, SwitchAdmin, User, etc.) the user group must use to log in to the switch. e. After returning to the Internet Authentication Service window, add additional policies - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 75
rsa.com. 1. Create user records in the RSA Brocade dictionary = brocade ignore-ports = no port-number-usage = per-port-type help-id = 2000 b. Create a brocade.dct file that needs to be added into dictiona.dcm file located in the following path: C:\Program Files\RSA Security\RSA RADIUS\Service - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 76
when using LDAP: • In Fabric OS 6.1.x and later there will be no password change through Active Directory. • There is no automatic migration of newly created users from local switch database to Active Directory. This is a manual process explained later. • LDAP authentication is used on the local - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 77
of the default roles available on the switch. 4. Associate the user to the group by adding the user to the group. For instructions on how to create a user refer to Microsoft documentation to create a user in your Active Directory. 5. Add the user's Administrative Domains to the CN_list by editing - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 78
add both the active and standby CP IP addresses so that users can still log in to the switch in the event of a failover. RADIUS or LDAP configuration servers are contacted to provide service. Server The server names or IPv4 or IPv6 addresses. Port The server ports. Secret The shared secrets. - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 79
channel between the switch and server. To add an LDAP server to the switch configuration: 1. Connect to the switch and log in using an admin account. 2. Enter this command: switch:admin> aaaConfig --add [-p port] [-t timeout] [-d domain_name] server -p port RADIUS or LDAP service. If no - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 80
earlier than 5.2.0. Previous versions do not support the radius;local mode. When the if the user authentication fails on the RADIUS or LDAP server. Example switch:admin> switch:admin> aaaConfig --change server [-p port] [-s shared secret] [-t timeout] [-a pap|chap|peap-mschapv2] server -p port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 81
you to recover a lost boot PROM password by contacting HP. Without the recovery string, a lost boot PROM password cannot be recovered. You should set the boot PROM password and the recovery string on all switches, as described in "Setting the boot PROM password with a recovery string" on page 82. If - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 82
this section are only for the switches listed in the title. If your switch is not listed, please contact HP for instructions. To set the boot PROM password for a switch with a recovery string: 1. Connect to the serial port interface. 2. Reboot the switch. 3. Press ESC within four seconds after - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 83
the supplied recovery password. Recovery Password: 6. Enter the recovery password (string). The recovery string must be between 8 and 40 alphanumeric characters. A random string that is 15 characters or longer is recommended for higher security. The firmware only prompts for this password once. It - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 84
, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, 400 Multi-protocal (MP) Router The password recovery instructions contained - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 85
12. Connect the serial cable to the serial port user passwd admin passwd factory 4. Enter the requested information at the prompts. To recover a lost root password or boot PROM password, contact HP. You must have previously set a recovery string to recover the boot PROM password. NOTE: Contact HP - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 86
86 Managing user accounts - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 87
, in which both ends of the conversation are and download support the use of SCP. SNMP SSH SSL Supports SNMPv1, user, if necessary. Supports SSLv3, 128-bit encryption by default. Fabric OS uses secure socket layer (SSL) to support HTTPS. A certificate must be generated and installed on each switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 88
certificate must be installed if HTTPS is used. Secure protocols are supported on Fabric OS v4.1.0 and later switches. Switches running earlier Fabric OS versions can be part of the secure fabric, but they do not support secure management. Secure management protocols must be configured for each - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 89
SSH session, commands that require a secure channel will be rejected. Fabric OS 6.1.x and later supports SSH protocol version 2.0 (ssh2). For more manually type in a password. RSA and DSA asynchronous algorithms are FIPS-compliant. Allowed-user The default admin user has to set up the allowed-user - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 90
Address Remote directory Public key name Login name Password Enter the IP address of the switch. IPv6 is supported by sshUtil. Enter the path to the remote directory where the public key is stored. Enter the name of the public key. Enter the name of the user granted access to the host. Enter the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 91
the user granted access to the remote host. Password Enter the password for the remote host. Example of exporting a public key from the switch firmwareDownload or a configUpload. Deleting keys on the switch 1. Log in to the switch as the allowed-user. 2. Use the sshUtil delprivkey command to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 92
by default. To prevent users from passing clear text passwords over the network when they connect to the switch, you can block the protocol> -act where -sip option can be given as any, dp is the port number for telnet (23), and -proto is tcp. Example ipfilter --addrule block_telnet_v4 -rule 2 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 93
more details on levels of browser and Java support, see the Web Tools Administrator's Guide. Summary of SSL procedures You configure for SSL by obtaining, installing, and activating digital certificates for SSL support. Certificates are required on all switches that are to be accessed through SSL - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 94
switches, consider using one CA to sign all management certificates for a fabric. If you use different CAs, management services Generating new rsa public/private key pair Done. IMPORTANT: HP recommends selecting 1024 in most cases. CA support for the 2048-bit key size is limited. Generating and - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 95
name (must have ".crt" suffix):192.1.2.3.crt Enter Login Name: your_account Enter Password: ***** Success: imported certificate [192.1.2.3.crt]. To use this certificate, run the configure command to activate it. The certificate is downloaded to the switch. Fabric OS 6.1.x administrator guide 95 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 96
File Enter the name of the switch certificate file: for example, 192.1.2.3.crt HTTP enabled Enter yes. For example: Configure... System services (yes, y, no, n): [no] ssl attributes guides for installing root certificates to Internet Explorer and Mozilla browsers. For more detailed instructions - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 97
crt -keystore ..\lib\security\RootCerts Enter keystore password: changeit Owner: CN=Brocade, OU=Software, O=Brocade Communications, L=San Jose, ST=California, C=US Issuer: CN=Brocade, OU=Software, O=Brocade Communications, L=San Jose, ST=California, C=US Serial number: 0 Valid from: Thu Jan 15 16:27 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 98
MIBs and their associated traps: • FICON-MIB (for FICON environments) • SW-EXTTRAP Includes the swSsn (Software Serial Number) as a part of Brocade SW traps. For information on Brocade MIBs, see the Fabric OS MIB Reference. For information on the specific commands used in these procedures, see - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 99
MIB capability, and system group. Sample SNMPv3 configuration switch:admin> snmpconfig --set snmpv3 SNMPv3 user configuration: User (rw): [snmpadmin1] adminuser Auth Protocol [MD5(1)/SHA 's IP address in dot notation: [0.0.0.0] Committing configuration...done. Fabric OS 6.1.x administrator guide 99 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 100
's IP address in dot notation: [10.32.225.6] Trap recipient Severity level : (0..5) [5] Committing configuration...done. Sample accessControl configuration switch:admin> snmpconfig --set accessControl SNMP access list configuration: Access host subnet area in dot notation: [0.0.0.0] 192.168.0.0 Read - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 101
reset the agent's system group configuration back to factory default ***** sysDescr = Fibre Channel Switch sysLocation = End User Premise sysContact = Field Support /Download (yes, y, no, n): [no] y Enforce signature validation for firmware (yes, y, no, n): [no] Fabric OS 6.1.x administrator guide - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 102
Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Ports and applications used by switches If you are using the FC-FC Routing Service, be aware that the secModeEnable command is not supported in Fabric OS 6.1.x. Table 21 lists the defaults for accessing - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 103
the port. Disable the SNMP service on the remote host if you do not use it, or filter incoming UDP packets going to this port. Use the ipfilter command to block the port. This port is used by the Platform API. Disable this port using the configure command. Fabric OS 6.1.x administrator guide 103 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 104
104 Configuring standard security features - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 105
Fibre Channel device ports can connect to which Fibre Channel switch ports. • Switch Connection Control (SCC) policy-Used to restrict which switches can join with a switch. • IP Filter Policy (IPFilter) policy-Used to filter traffic based on IP addresses. Each supported . The number of policies - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 106
user-defined Admin Domains exist) and AD255 provide an unfiltered view of the fabric. Identifying policy members Specify the FCS, DCC and SCC policy members by device port WWN, switch WWN, Domain IDs, or switch the DCC, FCS, and SCC policies. For instructions relating to a specific policy, refer to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 107
appear but these policies are automatically deleted if the user logs out without saving. The following example shows a switch that has no SCC, DCC, and FCS supported and you can either configure the switches in your fabric to accept the FCS policy using the fddcfg --fabswideset command or manually - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 108
fabric to distribute the changes manually. Table 25 FCS policy states Policy state Characteristics No active policy Any switch can perform fabric wide configuration or local switch commands, would be allowed on back-up and non-FCS switches. FCS enforcement applies only for user-initiated fabric - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 109
secPolicyFCSMove command to change the order in which switches are listed in the FCS policy. To modify the order of FCS switches: 1. Log in to the primary FCS switch using an account assigned to the admin role. 2. Type secPolicyShow "Defined", "FCS_POLICY". Fabric OS 6.1.x administrator guide 109 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 110
distributed across the fabric using the distribute -p command if there is no support for automatic distribution in a mixed environment with 5.3.0 and pre-5.3.0 switches. Since this policy is distributed manually, the command fddcfg --fabwideset is used to distribute a fabric-wide consistency policy - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 111
change occurs. 5.2.0 switch (not configured as it does not support this) Pre-5.2.0 Target switch receives distribution but ignores Guide. Each device port can be bound to one or more switch ports; the same device ports and switch ports may be listed in multiple DCC policies. After a switch port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 112
save memory and improve performance, one DCC policy per switch or group of switches is recommended. Device ports must be specified by port WWN. Switch ports can be identified by the switch WWN, Domain ID, or switch name followed by the port or area number. To specify an allowed connection, enter the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 113
The WWN of the device port. The switch WWN, Domain ID, or switch name. The port can be specified by port or area number. Designating ports automatically includes the devices currently attached to those ports. The ports can be specified using any of the following syntax methods: (*) Selects all - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 114
allowed to join the fabric; the SCC policy does not exist until it is created. When connecting a Fibre Channel router to a fabric or switch that has an active SCC policy, the front domain of the Fibre Channel router must be included in the SCC policy. SCC policy states are shown in Table 29. Table - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 115
to the switch and log switch Domain ID, device or switch WWN, or switch switch WWN: switch:admin> secpolicyadd "SCC_POLICY", "12:24:45:10:0a:67:00:40" Member(s) have been added to SCC_POLICY. To add two devices to the DCC policy, and to attach domain 3 ports 1. Connect to the switch and log in using - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 116
is fully backward compatible with 3.2, 4.2, 4.4, 5.0, 5.1, 5.2, and 5.3.0. Use secAuthSecret to set a shared secret on the switch. When configured, the secret key pair are used for authentication. Authentication occurs whenever there is a state change for the switch or port. The state change - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 117
initiated automatically on ports or switches brought online if , the command is terminated without completion and the entire user input is lost. If data input has completed, the switch does not support authentication or the policy is switched to the OFF state, the ISL is disabled. During switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 118
each other. ACTIVE: In this state the switch is more tolerant and can connect to a switch with any type of policy. During switch initialization, authentication begins on all E_Ports, but the port is not disabled if the connecting switch does not support authentication or the AUTH policy is turned to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 119
loop • NPIV devices • FICON channels • Configupload/download will not be supported for the following AUTH attributes: auth type, hash type, group type. Supported configurations The following HBAs support authentication: • Emulex LP11000 (Tested with Storport Miniport 2.0 windows driver) • Qlogic - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 120
Example $authutil --authinit allE (all E_ports in the switch) For directors, use the slot/port format for specifying the port number. Example $authutil --authinit Managing secret key pairs 1/1, 1/2 When you configure the switches at both ends of a link to use DH-CHAP for authentication, you - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 121
switches in the current switch's shared secret database and to set the secret key pair for the current switch and a connected switch Use a secure channel (for example, SSH or the serial console) to connect to the switch on which you name (if known) of the switches with defined shared secrets: WWN - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 122
Done. 3. Disable and enable the ports on a peer switch using the portDisable and portEnable commands. Fabric wide distribution of the Auth policy The AUTH policy can be manually distributed to the fabric using the distribute command; there is no support for automatic distribution. Since this policy - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 123
the policy rules. Fabric OS supports multiple IP Filter policies to examined one at a time until the end of the list of rules. For an IP Filter policy: 1. Log in to the switch using an account assigned to the admin role. 2. Filter policy 1. Log in to the switch using an account assigned to the admin - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 124
and policy rules are displayed. The policy rules are listed by the rule number in ascending order. There is no pagination stop for multiple screens of command will prompt for a user confirmation before proceeding. To activate an IP Filter policy: 1. Log in to the switch using an account assigned to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 125
from a switch. A valid port number range is represented by a dash, for example 7-30. Alternatively, service names can also be used instead of port number. Table 30 lists the supported service names and their corresponding port number. Table 30 Supported services Service name Port number https - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 126
Table 30 Supported services (continued) Service name Port number telnet 23 www 80 TCP and UDP protocols are valid selections. Fabric OS 5.3.0 and later does not support configuration to filter other protocols. Implicitly, ICMP type 0 and type 8 packets are always allowed to support ICMP echo - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 127
interface of a switch is changed through NOTE: If a switch is part of a LAN port -proto protocol -act - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 128
the database from one switch to another, overwriting the target switch database with the distributed one. To send or receive a database the setting must be accept. For configuration instructions, see "Configuring the database distribution settings" on page 129. • Manually distribute an ACL policy - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 129
switch switch switches in the fabric. Allows switches switches in the fabric. Fabric can only contain switches running Fabric OS 5.2.0 or later. Active database is the same for all switches switch basis. Table 34 lists the databases supported in Fabric OS 5.3.0 and later switches. Table 34 Supported - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 130
> localaccept Default setting. Allows local database to be overwritten with databases received from other switches. Allows local database to be manually or automatically distributed to other switches. database_id A semicolon-separated list of the local databases to be distributed; see Table 34 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 131
switch Domain IDs, switch names, or switch WWN addresses of the target switches and later switches in the fabric to other switches in the target switches. Policy switches in the fabric. NOTE: FC routers cannot join a fabric with a strict fabric-wide consistency policy. FC routers do not support - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 132
Strict null database_id database_id:S Database is not automatically distributed to other switches in the fabric. All updated and new policies of the type Policy:- "" To set the fabric-wide consistency policy: 1. Connect to the switch and log in using an account assigned to the admin role. 2. Enter - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 133
-wide consistency policy. If the tolerant SCC or DCC fabric-wide consistency policies do not match, the switch can join the fabric, but an error message flags the mismatch. If the tolerant SCC and DCC No ACL policies copied. Succeeds No ACL policies copied. Fabric OS 6.1.x administrator guide 133 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 134
policies Fails Ports are disabled. 1. To resolve the policy conflict, manually distribute the database you want to use to the switch with the strict policy. The merge fails and the ports are disabled. Table 38 shows merges that are not supported. Table 38 Examples of strict fabric merges - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 135
user default accounts. However only root has permissions for this command. So securityadmin and admin roles need to use fipscfg --zeroize which in addition to removing user accounts and resetting passwords, also does the complete zerioization of the system. Fabric OS 6.1.x administrator guide 135 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 136
, you will need to boot into single-user mode and perform a recovery procedure to reset the switch. For more information on this procedure, refer to the Fabric OS Troubleshooting and Diagnostics Guide. Conditional tests These tests are for the random number generators and are executed to verify the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 137
SNMP DH-CHAP/FCAP hashing algorithms Signed firmware Configupload/ download/ supportsave/ firmwaredownload IPsec Radius auth protocols switch then user authentication will fail. If Microsoft Active Directory server is configured for FIPS ciphers and the switch is in non-FIPS mode then user - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 138
Port Domain Timeout(s) : 1 : GEOFF5.ADLDAP.LOCAL : 389 : adldap.local : 3 Primary AAA Service: LDAP Secondary AAA Service: Switch database 2. Configure the DNS on the switch Set up LDAP according to the instructions in "LDAP configuration and Microsoft's Active Directory" on page - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 139
to www.microsoft.com for instructions. LDAP certificates for FIPS mode To utilize the LDAP services for FIPS between the switch and the host, you must : /users/aUser/certs Enter certificate name (must have ".crt" or ".cer" ".pem" suffix): LDAPTestCa.cer Enter Login Name: aUser Password: - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 140
address: 192.168.38.206 Enter remote directory: /users/aUser/certs Enter Login Name: aUser Enter LDAP certificate name (must have ".pem" \ suffix):LDAPTestCa.cer Password: Success: exported LDAP certificate Deleting an LDAP switch certificate This option deletes the LDAP CA certificate from - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 141
the port numbers for firmware by typing the configure command and respond to the prompts as follows: System services No cfgload attributes Yes Enforce secure config Upload/Download Press enter to accept default. Enforce firmware signature validation Yes Fabric OS 6.1.x administrator guide - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 142
be available on an enabled switch. To disable the switch, use the "switchDisable" command. Configure... System services (yes, y, no, n): [no] ... cfgload attributes (yes, y, no, n): [no] yes Enforce secure config Upload/Download (yes, y, no, n): [no] Enforce firmware signature validation (yes, y, no - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 143
. For more information about troubleshooting configuration file uploads and downloads, refer to the Fabric OS Troubleshooting and Diagnostics Guide. Displaying configuration settings There are two ways to view configuration settings for a switch in an HP StorageWorks fabric: • Issue the configShow - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 144
on Windows servers. Password Enter your account password for the server. Note that this is a required field even if you are logged in as an anonymous user; in such cases, the value may be ignored by the FTP service. The following example shows configUpload run on a switch without Admin Domains - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 145
backup configuration file. Make sure that the configuration file you are downloading is compatible with your switch model, because configuration files from other model switches might cause your switch to fail. The configuration download process is additive, that is, the lines read from the files - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 146
Name or IP Address [host]: 192.1.2.3 User Name [user]: JohnDoe File Name [config.txt]: /pub/configurations/config.txt *** CAUTION *** This command is used to download a backed-up configuration for a specific switch. If using a file from a different switch, this file's configuration settings will - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 147
for large files. Do you want to continue [y/n]: y Password: xxxxx Activating configDownload: Switch is disabled configDownload complete: Only zoning parameters are downloaded to ad5. switch:AD5:admin> 8. If you disabled the switch, when the process is finished, enter the switchEnable command - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 148
type, as shown in the following procedure. Do not download a configuration file from one switch to another switch that is a different model, because it can cause the switch to fail. If you need to reset affected switches, issue the configDefault command. NOTE: In some cases, the configRemoveAll - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 149
46 as a hard copy reference for your configuration information. In the hardware reference manuals for the 4/256 SAN Director and DC SAN Backbone Director (short name, DC Director) there is a guide for FC port setting tables. The tables can be used to record configuration information for the various - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 150
150 Maintaining the switch configuration file - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 151
Admin Domain is a logical grouping of fabric elements that defines what switches, ports, and devices you can view and modify. An Admin Domain is users can manage which devices, hosts, and switches. You can have up to 256 Admin Domains in a fabric (254 user-defined and 2 system-defined), numbered - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 152
a filtered view of this fabric, depending on which Admin Domain they are in. As shown in Figure 6, users can see all switches and E_Ports in the fabric, regardless of their Admin Domain; however, the switch ports and end devices are filtered based on Admin Domain membership. Fabric Visible to AD1 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 153
(GbE) ports cannot be members of an Admin Domain. • Traffic Isolation is supported within Admin Domains, with some restrictions, as described in "Admin Domain considerations for Traffic Isolation" on page 353. • To use Admin Domains and the FC-FC Routing Service in the same fabric, the switches - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 154
you explicitly create AD1 through AD254, the devices, switch ports, and switches used to create these user-defined Admin Domains disappear from the AD0 implicit membership list. • The "explicit membership list" contains all devices, switch ports, and switches that you explicitly add to AD0 and can - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 155
switch ports, and switches are not in any of the user-defined Admin Domains (AD1 and AD2 in to the lowest numbered active Admin Domain in your Admin Domain switch to a different Admin Domain (see "Switching to a different Admin Domain context" on page 168). • For default accounts such as admin and user - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 156
diagnostics and control is done by the physical fabric administrator. Port control is provided only through switch port membership and is not provided for device members. When you create an Admin Domain, the end device members do not have to be online, even though their WWNs are used in the Admin - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 157
port control (such as portDisable or portEnable) only if the domain,port of the E_Port is part of the Admin Domain. NOTE: Only the WWN of the switch In an Admin Domain context, the switch WWN is converted from NAA=1 to NAA=5 format, with the Admin Domain number added, using the following syntax: 5n - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 158
63:46:e9:03 Fabric Visible to AD4 User Domain ID = 1 WWN = 50: switch WWNs Admin Domain compatibility and availability Admin Domains maintain continuity of service for Fabric OS features and operate in mixed-release fabric environments. High Availability is supported with some backward compatibility - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 159
switches should be managed by the physical fabric administrator. • You must zone all ports and devices from legacy switches in the AD0 root zone database. • If you have legacy switches subfabrics Firmware upgrade considerations on page 164 • "Deleting all user-defined Admin Domains" on page 165 • - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 160
configuration in the transaction buffer. The following commands end the Admin Domain transaction: ad --save Saves the changes in the transaction buffer to the defined configuration in persistent storage and propagates the defined configuration to all switches in the fabric. Note that for delete - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 161
or number, dev_list is a list of device WWNs or domain,port members, and switch_list is a list of switch WWNs or Domain IDs. 5. To end the physical fabric administrator can create another physical fabric administrator user account. • Users capable of using multiple Admin Domains, can designate one - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 162
user configuration is backward compatible with pre-Fabric OS 5.2.0 firmware. When you downgrade to pre-Fabric OS 5.2.0 firmware, the userConfig command records are interpreted using legacy logic. To create a new user account for managing Admin Domains: 1. Connect to the switch members are part of - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 163
storage unless those members are part of another Admin Domain. user sessions associated with the Admin Domain are terminated. The deactivate option does not disable ports number, dev_list is a list of device WWNs or domain,port members, and switch_list is a list of switch WWNs or Domain IDs. 4. To end - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 164
the Admin Domain name or number, dev_list is a list of device WWNs or domain,port members, and switch_list is a list of switch WWNs or Domain IDs. Removing the Admin Domain you want to rename is part of the effective configuration and thus enforced. 4. To end the transaction now, enter ad --save to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 165
, all user-defined Admin Domains are deleted, the explicit membership list of AD0 is cleared, and all fabric resources (switches, ports, and AD-unaware switches, elements in the Admin Domain member list from old AD-unaware switches are not enforced. Fabric OS 6.1.x administrator guide 165 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 166
with only their relevant AD-based views (see Figure 5 and Figure 6). Any devices and switch ports that are not defined as part of the Admin Domain are not shown and are not available to that AD user. Each Admin Domain can also have its own zone configurations (defined and effective) with zones - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 167
WWN is attached to one of the domain,port specified in the AD member list. RASLog : if you do not specify the AD_name or number, all information about all existing Admin Domains is an Admin Domain: 1. Connect to the switch and log in as any user type. 2. Enter the ad --show command guide 167 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 168
Admin Domain interactions do not extend to user session tunneling across switches. A user logged into a switch can control only the local switch ports as specified in the Admin Domain. When the fabric is in secure mode, the following applies: • There is no support for ACL configuration under each - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 169
on the PID format, a domain,index member indicates a slot and port in the switch. The domain,index member is effectively a member of that AD. Port swapping has no effect on AD support as port swapping swaps only the area numbers of two ports and Admin Domains are specified using domain,index members - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 170
user-defined Admin Domain. • During the zone update process, only the root zone database is sent to AD-unaware switches. databases in AD0 through A254. • With AD support, zoning updates are supported selectively at each AD level. For example, compatibility reasons. 170 Managing administrative domains - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 171
service" on page 211 for additional information about LSAN zones. Configuration upload and download switch is a member of the Admin Domain, all switch switch membership Yes No Yes2 No With ADs and without switch With switch membership No No Yes3 No Without switch AD. Switch configuration and - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 172
See "Maintaining the switch configuration file" on page 143 for additional information about uploading and downloading configurations. 172 Managing administrative domains - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 173
provides procedures for installing and maintaining firmware. Fabric OS 6.1.x provides nondisruptive firmware installation. This chapter refers to the following specific types of blades inserted into either Director platform: • Port blades contain only Fibre Channel ports: • FC4-16 • FC4-32 • FC4-48 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 174
, then downgrade, then upgrade) User-defined and default accounts and their passwords are preserved. User-defined and default accounts and their passwords are preserved, including accounts added after the first upgrade. For details on administrative domains and the firmware download, see "Managing - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 175
with any trouble reports. 5. Connect to the switch and log in to the switch as admin. Enter the supportSave command to retrieve all current core files prior to executing the firmware download. This helps to troubleshoot the firmware download process if a problem is encountered. If you are upgrading - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 176
that any older versions are supported. See the recommended version (shown in Table 52) before upgrading firmware on the switch. Go to http://www.hp.com to view end-of-life policies. Table 52 Recommended firmware Switch model Earliest compatible version Recommended version for interoperating - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 177
, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, or 400 MP Router switches are adjacent and you start firmware downloads on them at the same time, there may be traffic disruption. Finding the firmware version To determine if you need to upgrade - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 178
4/16 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch, 400 MP Router, and firmware download The upgrade process first - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 179
switches. Upgrade their firmware if necessary before proceeding with upgrading this switch. See "Checking connected switches" on page 176 for details. 6. Enter the firmwareDownload command. 7. Respond to the prompts as follows: Server Name or IP Address User name File name Network protocol Password - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 180
problem persists, review "Troubleshooting firmwareDownload" on page 183. If the troubleshooting information fails to help resolve the issue, contact HP. During the upgrade process, the Director fails over to its standby CP blade and the IP addresses for the logical switches ) downloads firmware. - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 181
protocol used to download the firmware from the file server. Valid values are FTP and SCP. The Values are not case-sensitive. If "-p" is not specified, firmwareDownload will determine the protocol automatically by checking the config.security parameter on the switch. Enter a password. This operand - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 182
takes place in parallel with the firmware download being performed on the CPs, but does not impact performance. Fibre Channel traffic is not disrupted during autoleveling, but GbE traffic on AP blades may be affected. sw77:admin> firmwaredownload Type of Firmware (FOS, SAS, or any application) [FOS - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 183
a USB device NOTE: The USB device ships with the DC Director only. The 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch and the DC Director support a firmware download from an HP branded USB device attached to the switch or active CP. Before the USB device can be accessed by the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 184
signed using the OpenSSL utility to provide FIPS support. In order to use the digitally signed software, you need to configure the switch to enable Signed Firmwaredownload. If it is not enabled then the firmware download process will ignore the firmware signature and work as before. If signed - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 185
. The public key file is packaged in an RPM-package as part of the firmware, and will be downloaded to the switch. After it is downloaded, it can be used to validate the firmware to be downloaded next time. The public key file on the switch contains only one public key. It is only able to validate - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 186
on your switch before downloading a signed firmware. When firmwareDownload installs a firmware file, it switch for signed firmware To configure the switch for signed firmware: 1. Log in to the switch as admin. 2. Type the configure command. 3. Respond to the prompts as follows: System Service - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 187
: 192.168.32.10 Network Protocol (1-auto-select, 2-FTP, 3-SCP) [1]: User Name: userfoo File Name: /home/userfoo/6.0.0 Password: Do Auto-Commit after Reboot [Y]: n Reboot system after download [N]: y Firmware is being downloaded to the switch. This step may take up to 30 minutes. Checking system - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 188
CPs still are not synchronized, contact HP. 4. Enter the firmwareShow command and confirm that the current firmware on both partitions on both CPs point, the firmware should download to the standby CP only. When it has completed the download to that CP, reboot it. The current switch session will be - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 189
. IMPORTANT: Stop! If you want to restore the firmware, stop here and skip ahead to step 12; otherwise, continue to step 10 to commit the firmware on both CPs, which completes the firmware download. 10. Perform a commit on the standby CP. From the current switch session on the standby CP, enter the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 190
connect to the fabric and further troubleshooting is necessary. firmwareShow Displays the current firmware level on the switch. For Directors, this command displays the firmware loaded on both partitions (primary and secondary) for both CPs and AP blades. HP recommends that you 190 Installing and - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 191
of attached devices prior to the firmware download. fabricShow Displays all switches in a fabric. Make sure the number of switches in the fabric after the firmware download is exactly the same as the number of attached devices prior to the firmware download. Fabric OS 6.1.x administrator guide 191 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 192
192 Installing and maintaining firmware - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 193
size, depending on the number of fabric-connected devices, and switches should a zoning operation be attempted from a remote switch in the fabric. On the affected switches, an error message indicates that the Zoning license Server2 Blue zone Server1 Fibre Channel Fabric Hub Loop 1 RAID guide 193 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 194
device. Devices in the zone are identified by node WWN, port WWN, or domain,port of the switch to which the device is connected. The primary approaches to fabric only a few members. Zone changes affect the smallest possible number of devices, minimizing the impact of an incorrect zone change. - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 195
object is any device in a zone, such as: • Physical port number or port index on the switch • Node World Wide Name (N-WWN) • Port World Wide Name (P-WWN) Zone objects identified by port number or index number are specified as a pair of decimal numbers in the form d, index (d is the Domain ID of the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 196
port or domain,index, and WWN. NOTE: If your fabric has a switch with a Fabric OS version earlier than 5.2.0, you cannot use domain,port zoning with port numbers configuration that can be implemented and provide the most generic services. If other configurations are used for specialized purposes, - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 197
selective information presented to end nodes through the fabric initiator. Devices that are not part of the zone are not switch performs this blocking at the transmit side of the port port IDs that have permission to access any of the ports on that ASIC. Fabric OS 6.1.x administrator guide 197 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 198
presented to end nodes Devices that are not part of the zone are HP switch models, the hardware zoning methodology for each, and tips for best usage. Table 55 Enforcing hardware zoning Fabric type Brocade 2000-series Methodology Best practice Enable hardware-enforced zoning only on domain,port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 199
hardware enforcement. Overlap with other zone type results in the loss of hardware enforcement. As in the Brocade 2000-series switches, connecting a device specified by WWN to a port specified in a domain,port zone results in loss of the hardware enforcement in both zones. For the 4/256 SAN Director - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 200
Port_Zone1 WWN_Zone1 Port_Zone2 Core Switch WWN_Zone2 Zone Boundaries Figure 12 Hardware-enforced overlapping zones 22.3b(13.3) Switch Port_WWN Zone4 Zone Boundaries 22.4b(13.4) Figure 13 Zoning with hardware assist (mixed-port and WWN zones) Port_Zone1 Port_Zone2 WWN_Zone1 Core Switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 201
part of a Fabric Assist zone if a Fabric Assist host is connected to a compatible switch in the fabric. Testing Before implementing a new zone, you should run the Zone Analyzer from Web Tools to isolate any possible problems acceptable. Ensuring that the HBA drivers are current can shorten the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 202
but not forwards compatible. • Zone using the core switch versus an edge switch. • Zone using an enterprise-class platform rather than a switch. An enterprise-class platform has more resources to handle zoning changes and implementations. Broadcast zones Fibre Channel allows sending broadcast - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 203
, you must rename any existing zones named "broadcast" before you upgrade. The firmware download fails if a pre-5.3.x switch has a zone with the name of "broadcast" in the effective configuration. When downgrading to a firmware version earlier than Fabric OS 5.3.0, you must remove or disable the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 204
"1,1", and a user in another Telnet session executes cfgEnable (or cfgDisable, or cfgSave), the other user's transaction will abort port pair. • Device node or device port WWN 3. Enter the cfgSave command to save the change to the defined configuration. switch:admin> aliadd "array1", "1,2" switch: - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 205
from an alias: 1. Connect to the switch and log in as admin. 2. Enter port pair. • Device node or device port WWN 3. Enter the cfgSave command to save the change to the defined configuration. switch:admin> aliremove "array1", "1,2" switch an alias: 1. Connect to the switch and log in as admin. 2. - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 206
, or cfgSave, execute the rcsDisabled command to check whether your fabric has Reliable Commit Service (RCS) enabled (rcsDisabled=0). If RCS is disabled (rcsDisabled=1), check for older switches in the fabric. After the older switches are upgraded, RCS is enabled by default. RCS is available on all - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 207
• A domain,port pair. • Device node or device port WWN • Zone alias name 3. Enter the cfgSave command to save the change to the defined configuration. switch:admin> zoneadd "greenzone", "1,2" switch:admin> zoneadd " only? (yes, y, no, n): [no] y Fabric OS 6.1.x administrator guide 207 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 208
by one or more of the following methods: • A domain,port pair. • Device node or device port WWN • Zone alias name 3. Enter the cfgSave command to save the change to the defined configuration. switch:admin> zoneremove "greenzone", "1,2" switch:admin> zoneremove "redzone", "21:00:00:20:37:0c:72 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 209
to All Access if user-specified Admin Domains are present in the fabric. Setting the default zoning mode 1. Connect to the switch and log in as mode: 1. Connect to the switch and log in as admin. 2. Enter the defZone --show command. NOTE: IIf you performed a firmware download of an older release, - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 210
ends of the ISL, thereby preventing the new switch from joining the fabric. NOTE: Fabric OS 5.2.0 and later support a zoning database size of 1 MB. To support a 1 MB zoning database, the entire fabric must be upgraded to 5.2.0 or later. If any pre-5.2.0 switches are part later Fibre Channel Router - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 211
5.0.0/ 5.0.1/ 5.1.0 Fabric OS 5.2.0 or later Fibre Channel Router Fabric OS 4.0/ 4.1/4.2 Join Join Join 5.0.1/ 5.1.0 Fabric OS 5.2.0 or later Fibre Channel Router Fabric OS 3.1 Segment Segment Segment Join Join Join Join Join later Fibre Channel Router Join Join Segment Join Join - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 212
(continued) Receiver Initiator Fabric OS Fabric 3.1 OS 3.2 Fabric OS 4.0/ 4.1/ 4.2 Fabric OS 4.4.0 Fabric OS 5.0.0/ 5.0.1/ 5.1.0 Fabric OS 5.2.0 or later Fibre Channel Router FC router XPath 7.3 Segment Segment Join Segment Segment Segment Join Segment Join Segment Join Segment Join - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 213
number of bytes required for an item depends on the specifics of the fabric, but cannot exceed 64 bytes per item. When enabling a new zone configuration, you must ensure that the size of the configuration does not exceed the minimum size supported by all switches switches switch to the switch and log - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 214
of zone names to be added to the configuration. 3. Enter the cfgSave command to save the change to the defined configuration. switch:admin> cfgadd "newcfg", "bluezone" switch:admin> cfgsave You are about to save the Defined zoning configuration. This action will only save the changes on the Defined - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 215
76:85 21:00:00:20:37:0c:71:df To view selected zone configuration information: 1. Connect to the switch and log in as admin. 2. Enter the cfgShow command and specify a pattern. cfgshow "pattern"[, mode] The the nonvolatile memory. The default value is 0. Fabric OS 6.1.x administrator guide 215 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 216
for all zone object types. To copy a zone object: 1. Connect to the switch and log in as admin. 2. Enter the cfgShow command to view the zone configuration example, to display all zone configuration objects that start with "Test": switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone 3. Enter the zone - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 217
change preserved when the switch reboots, enter the cfgSave Connect to the switch and log in as admin. want to delete. switch:admin> cfgShow Defined any Admin Domain other than AD255. switch:admin> zone --expunge "White_zone" the change preserved when the switch reboots, enter the cfgSave - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 218
renamed zone object is present. 5. If you want the change preserved when the switch reboots, enter the cfgSave command to save it to nonvolatile (flash) memory. 6. to list all zone members that are not part of the current zone enforcement table. Note that zone configuration names are case-sensitive; blank - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 219
flag -m can be used to specify the zone database location. Supported mode flag values are: • 0 - zone database from the host for archiving and it can be downloaded from the host to a switch in the fabric. See "Backing up switches in the newly formed fabric. Fabric OS 6.1.x administrator guide 219 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 220
have Secure Fabric OS enabled. If Secure Fabric OS is enabled on one switch, it must be enabled on all switches in the fabric; however, Secure Fabric OS is not supported in Fabric OS 6.0.0 or later. • Default Zone: The switch being merged into the existing fabric should be configured with the same - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 221
fabrics are the same, the fabric's primary FCS server downloads the zoning database and security policy sets to each switch in the fabric. If there is a view conflict, the E_Ports are segmented due to incompatible security data. As part of zoning architecture, you must determine which of the two - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 222
followed by a portDisable or portEnable command on one of the ISL ports that connects the fabrics. This will cause a merge, making the fabric consistent with the correct configuration. IMPORTANT: Be careful using the cfgClear command because it - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 223
. AP blades are used for Fibre Channel Application Services and Routing Services, iSCSI bridging, FCIP, and storage virtualization. On each port blade, a particular port must be represented by both slot number and port number. When you have port blades with different port counts in the same Director - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 224
through 47 from bottom to top on the right set of ports. FC10-6 Ports are numbered from 0 through 5 from bottom to top. FC4-16IP Fibre Channel ports are numbered from 0 through 7 from bottom to top. There are also eight GbE ports (numbered ge0 - ge7, from bottom to top). Going from bottom to top - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 225
port. If a switch is using Core PID format, and no port swapping has been done, the port Index value for all ports is the same as the physical port numbers. Using portswap on a pair of ports will exchange those ports' area_ID and index values. Portswap is not supported for ports guide 225 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 226
PID assignment with no port swap (continued) Port on blade 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 switch, powering a port blade off and on and disabling and enabling a port blade. Changing a Director's name HP with a letter, and can contain letters, numbers, or the underscore character. It is - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 227
slot number of the port blade you want to power on. switch:admin> slotpoweron 3 Powering on slot 3 switch:admin> Disabling and enabling port blades Port blades are enabled by default. In some cases, you will need to disable a port blade to perform diagnostics. When diagnostics are executed manually - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 228
The FC4-48 blade is compatible only with the CP4 processor blade, FC4-16/32 port blade, FR4-18i, and FC4-16IP iSCSI blade. Because the area IDs are shared with different port IDs, the FC4-48 and FC8-48 blades support only F, G and E_Ports. They do not support FL_Ports. Port swapping on an FC4-48 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 229
bridging of iSCSI hosts to Fibre Channel fabrics. It has 8 Fibre Channel optical SFP ports and 8 GbE copper RJ-45 ports. This blade is currently compatible with the 4/256 Director CP blades (using chassis configuration option 5). CP blades The 4/256 Director supports the CP4 blade. The DC - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 230
the DC Director supports 384 ports in a single Fibre Channel domain. Table 66 lists the supported configuration options for the 4/256 Director. Table 66 Supported configuration options Option Number Maximum of number of ports domains per switch Supported port blades Supported Notes CP blades - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 231
Connect to the switch and log in as user or admin. ports have been disabled with the bladeDisable command. DISABLED: The blade is powered on but disabled. FAULTY: The blade is faulty because an error was detected. The reason code numbers displayed are used by Support personnel to assist with problem - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 232
the portDisable or portEnable commands on the switch for the ports. All ICL ports must be disabled, and then re-enabled for the license to take effect. An ICL license must be installed on both platforms forming the ICL connection. ICL connector ports do not have SFPs, and the connectors used on the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 233
from switch to switch and and Fibre Channel originator supported under exchange-based routing: • AP shared link policy (default) • AP dedicated link policy The AP dedicated link policy dedicates some links to egress traffic and some to ingress traffic. • Port FC router is in port-based routing mode, - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 234
policy is port-based routing. When exchange-based routing is active, you cannot assign static routes. Static routes are supported only on the 4/8 SAN Switch, 4/16 SAN Switch, SAN Switch 4/32, and SAN Switch 4/32B platforms. Static routes are not supported on the 8/8 SAN Switch, 8/24 SAN Switch, 4/64 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 235
the number of frames dropped, while enabling in-order delivery (IOD) guarantees that frames are either delivered in order or dropped. All HP B-series switches when the exchange-based routing policy is in effect. When the port-based policy is in force, you can enable DLS to optimize routing guide 235 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 236
domain. Name The name of the destination switch. Path Count The number of currently active paths to the destination domain. Hops The maximum number of switch-to-switch links (ISLs) transversed to reach the destination domain. Out Port The port to which the incoming frame will be forwarded - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 237
][, domainnumber] The following information displays: Local Domain ID The domain number of the local switch. In Port The port from which a frame is received. Domain The destination domain of the incoming frame. Out Port The port to which the incoming frame will be forwarded in order to reach - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 238
is allowed to traverse. The destination domain ID. You must specify a value between 1 and 239. The port number (or area number for enterprise-class platforms) on which the switch receives frames. The output port the frames use to reach the next hop on this path. For the last hop, the destination - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 239
is: Hops The number of switch-to-switch links (ISLs) traversed. The local switch is hop 0. In Port The port that the frames come in from on this path. For hop 0, the source port. Domain ID The domain ID of the switch. Name The name of the switch. Out Port The output port that the frames use - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 240
240 Routing traffic - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 241
on HP supported interop configurations, refer to the HP StorageWorks Fabric interoperability: merging fabrics based on C-Series and B-Series Fibre Channel switches on the following HP website: http://h18000.www1.hp.com/products/storageworks/san/documentation.html Fabric OS 6.1.x administrator guide - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 242
242 Implementing an interoperable fabric - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 243
Fibre Channel node at the well-known address FFFFFAh, so an application can access information about the entire fabric management with minimal knowledge of the existing configuration. • It is replicated on every HP StorageWorks switch all switches in the fabric support the MS platform service; - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 244
to deactivate MS Platform Service in progress...... *Completed deactivating MS Platform Service in the fabric! switch:admin> Accessing the Management : switch:admin> msconfigure 0 Done 1 Display the access list 2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 245
nonvolatile memory and end the session. switch:admin> msconfigure 0 Done 1 Display the access list 2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 2 Port/Node WWN (in 00:00:00:00:00 } 0 Done Fabric OS 6.1.x administrator guide 245 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 246
, enter y. 8. Press Enter to update the nonvolatile memory and end the session. switch:admin> msconfigure 0 Done 1 Display the access list 2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 3 Port/Node WWN (in hex): [00:00:00:00:00:00 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 247
Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 0 done ... Update the FLASH? (yes, y, no, n): [yes] y *Successfully saved the MS ACL to the flash. switch Number of Associated M.A.: 1 Associated Management Addresses: [30] "http://java.sun.com/products/1" Number of - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 248
This may erase all NID entries. Are you sure? (yes, y, no, n): [no] y Request to disable MS Topology Discovery Service in progress.... *MS Topology Discovery disabled locally. switch:admin> mstddisable all This may erase all NID entries. Are you sure? (yes, y, no, n): [no] y Request to disable - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 249
service is not compatible with other iSCSI gateway platforms, including iSCSI Gateway or the MP Router. iSCSI session translation The iSCSI gateway enables applications on an IP network to use an iSCSI initiator to connect to FC targets. The iSCSI gateway translates iSCSI protocol to Fibre Channel - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 250
WWN format. Regardless of the number of iSCSI initiators or iSCSI initiator stack to the FC target stack, including the iSCSI gateway service used during protocol translation. A pplic a tion SCSI iS C the IP network and an iSCSI VI for each iSCSI port to the FC fabric. The following figure shows a - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 251
type.date.naming authority:. The type.date.naming authority portion is a fixed prefix. The default prefix is iqn.2002-12.com.brocade. iSCSI gateway service supports IQN only to identify the iSCSI components, such as the iSCSI initiator and iSCSI VT. Every iSCSI initiator and iSCSI VT - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 252
2002-12.com.brocade:10: 00:00:05:1e:aa:bb:cc IP Network VT 2 iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: c c : bb: aa VT 3 iqn.2002-12.c switch:admin> iscsiswcfg --showgw Target name is: iqn.2007-10.com.brocade iSCSI initiator when the default iSCSI port configuration is in effect, and services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 253
those user names can be used for authentication during iSCSI login. NOTE: iSCSI gateway service does not support IPSec. Load balancing through connection redirection Connection redirection allows iSCSI sessions to be evenly distributed across ports on the same blade. Before the maximum number of - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 254
connection redirection for ports on blades located in slots 3, 4, and 9. switch:admin> iscsiswcfg --enableconn -s 3,4,9 The operation completed successfully To disable connection redirection, use the iscsiSwCfg - -disableconn command. For the 4/256 SAN Director, the -s option can be - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 255
Supported iSCSI initiators iSCSI initiator driver • iSCSI is built-in in the 5.3 ML4 HP-UX • 11i v1 - B.11.23.03e Configure the iSCSI gateway service after you install the for GbE port(s). slot>/ge args port(s). 4 > "Enabling the iSCSI gateway service" on page 258 "Configuring the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 256
-s | "Enabling and disabling connection redirection for load balancing" on page 254 18 (Optional) Configure iSNS client. fosConfig - -enable isnsc isnscCfg - -set /ge -s isnscCfg - -set -m -s "Enabling the iSNS client service" on - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 257
supports the iSCSI gateway service. You can also configure an FC4-16IP blade through the Web Tools Graphical User Interface as an alternative to the command line interface. Refer to the Web Tools Administrator's Guide for descriptions of GUI-based configuration procedures. FC4-16IP port numbering - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 258
gateway service" on page 258. NOTE: The GbE port number below is entered geX; where X is from 0 through 7. For example ge1 (see Figure 22 on page 257). 1. Connect and log in to the switch. 2. Enter the portCfgShow command with the blade slot number and GbE port number parameters - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 259
set to ON, enter the portCfgPersistentEnable command with the slot number and GbE port number. switch:admin> portcfgpersistentenable 10/ge0 4. Enter the portCfgShow command with the slot number and GbE port number to verify that the port is persistently enabled. In the following sample output, the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 260
Succeeded 8. (Optional) Verify the entry using the portShow command. switch:admin> portshow arp 3/ge0 Slot: 3 Port: ge0 IP AddressMac AddressFlags 30.0.30.214 00:c0:dd:07 Graphical User Interface as an alternative to the command line interface. Refer to the Web Tools Administrator's Guide for - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 261
using the port WWNs as the user defined portion of the IQN. • A port WWN may be 12.com.brocade, is used for the prefix unless it has been changed by using the iscsiSwCfg - -modifygw -t command. The port WWN is used as the user-defined portion of the IQN. The following is an example. switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 262
4. Enter the iscsiCfg --show tgt command to display the status of the created iSCSI VTs. The following is an example. switch:admin> iscsicfg --show tgt Number of records found: 16 Name: State/Status: iqn.2002-12.com.brocade:2e:1f:00:06:2b:0d:10:ba Online/Defined Name: State/Status: iqn.2002 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 263
the storage attached to the specified WWN. The default value of iqn.2002-12.com.brocade, is used for the fixed prefix, and the port WWN is used as the user-defined portion of the IQN. The following is an example. switch:admin> iscsicfg --easycreate tgt -w 21:00:00:04:cf:e7:74:cf IndexFC - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 264
:12:99 Target Port WWN: 2f:ff:00:06:2b:0d:12:99 Target Pid: 12300 Number of port WWN of the physical FC target. • -l maps the physical FC LUNs to virtual iSCSI LUNs and is specified as a pair: LUNs:physical LUNs The following is an example. switch:admin> iscsicfg --add lun -t iqn.2002-12.com.brocade - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 265
switch:admin> iscsicfg --show lun -t iqn.2002-12.com.brocade:example-disk001 Number of targets found: 1 Target: iqn.2006-10.com.example:disk001 Number of LUN Maps: 1 FC WWN Virtual LUN(s) 21:00:00:04:cf:e7:73:7e 0 Mapping LUNs on a specific port . Fabric OS 6.1.x administrator guide 265 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 266
switch:admin> iscsicfg --show lun Number of targets found: 2 Target: iqn.2006-10.com.example:disk001 Number of LUN Maps: 2 FC WWN Virtual LUN(s) 21:00:00:04:cf:e7:73:7e 0 2f:ff:00:06:2b:0d:12:99 1-2 Physical LUN(s) 0 0-1 Target: iqn.2002-10.com.brocade not supported if the iSNS service is - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 267
is displayed. 1. Connect and log in to the switch. 2. Enter the iscsiCfg --show initiator command to display iSCSI initiator IQNs. switch:admin> iscsicfg --show initiator Number of records found: 1 Name iqn.1991-05.com.microsoft:host001.brocade.com Creating discovery domains IP Address 30.0.30.11 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 268
to verify that a user name has been bound to the iSCSI VT: switch:admin> iscsicfg --show tgt -t iqn.2002-10.com.brocade:tgt -v Number of records found: 1 Name: iqn.2002-10.com.brocade:tgt1 CHAP Users CHAP Status 1. iscsitgt1 Online/Committed 2. hello123 Invalid 268 iSCSI Gateway services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 269
tgt command with the -t and -u options to delete a user name: switch:admin> iscsicfg --deleteusername tgt -t iqn.2002-10.com.brocade:tgt -u isisctgt1 This operation completed successfully Displaying CHAP configurations You can display a list of the user names that have been set up on the fabric for - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 270
The rest of the switches will function normally, however switch enter the iscsiCfg --show ddset command to find the switch that has the database you want to use: switch:admin> iscsicfg --show ddset Number and port WWN of the local switch are port WWNs of the switch. The following is an example. switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 271
switch: Node WWN: 10:00:00:60:69:80:04:4a Port WWN: 21:fd:00:60:69:80:04:4a iSCSI FC zoning overview After you have finished setting up the iSCSI target gateway, you can create an iSCSI FC zone for discovery domains. However, if you do not have a zoning license iSCSI gateway service in an guide 271 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 272
create a separate zone so that iSCSI gateway service components can be easily differentiated from other devices in install Advanced Zoning licenses on all the switches in the fabric before 2b:0d:12:99 1-2 Physical LUN(s) 0 0-1 Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf Number of - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 273
switch:admin> nsshow { Type Pid COS PortName NodeName TTL(sec) NL 0120d6; 3;21:00:00:04:cf:e7:74:cf;20:00:00:04:cf:e7:74:cf; na FC4s: FCP [SEAGATE ST336607FC 0004] Fabric Port 02.12 Port 1 " Fabric Port Name: 20:23:00:60:69:e0:01:56 Permanent Port Name: 2f:ff:00:06:2b:0d:12:99 Port Index - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 274
127.34 Slot/Port: 3/ge4 Logical pn: 44" Fabric Port Name: 00:00:00:00:00:00:00:00 Permanent Port Name: 50:06:06:9e:00:15:63:20 Port Index: 44 Share :04:cf:e7:73:7e; 2f:ff:00:06:2b:0d:12:99" switch:admin> switch:admin> alicreate ISCSI_VI_SWITCH1_SLOT3, "50:06:06:9e:00:15:63: iSCSI Gateway services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 275
zonename The user-defined name for the created zone. member_FCtarget_pWWNiSCSI FC targets specified by either WWNs and/or alias. member_iscsi_pwwn iSCSI virtual initiators specified by either WWNs and/or alias. Specify the zone members using WWNs, alias names, and/or switch domain and port area - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 276
iS C S I gateway s ervic e Figure 24 iSCSI network with iSNS server and clients NOTE: Fabric OS supports only Microsoft iSNS Server 3.0 and higher. Displaying iSNS client service status 1. Connect and log in to the switch. 2. Enter the fosConfig command to show the current Fabric OS configuration - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 277
command with the -m and -s options to set GbE port IP address: switch:admin> isnsccfg --set /ge -s where • is the number of the slot where the FC4-16IP blade is inserted. • ge is the physical GbE port number (ge followed by 0-7, for example, ge0). • - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 278
Clearing the iSNS client configuration The iSNS client configuration can be cleared with a single command. 1. Connect and log in to the switch. 2. Enter the isnscCfg - -clear command to clear the iSNS configuration: switch:admin> isnsccfg --clear Cleared iSNS server IP address 278 iSCSI Gateway - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 279
support NPIV. To enable or disable NPIV on a port-by-port basis, enter the portCfgNPIVPort command. The following example shows NPIV being enabled on port 10 of an 8/40 SAN Switch: switch:admin> portCfgNPIVPort 10, 1 Configuring NPIV To specify the number of virtual N_Port_IDs per port or per switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 280
been reached. Viewing NPIV port configuration information To view the NPIV capability of switch ports, enter the portCfgShow command. The following example shows whether or not a port is configured for NPIV: switch:admin> portcfgshow Ports of Slot 0 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Speed - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 281
whether or not a port is an NPIV F_Port, and identifies the number of virtual N_Ports behind it. Following is sample output from the switchShow command: switch: admin> switchshow switchName: 16:80 50:05:07:64:01:a0:73:b8 Distance: normal portSpeed: N2Gbps Fabric OS 6.1.x administrator guide 281 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 282
command to display the login information for the virtual PIDs of a port. Following is sample output from the portLoginShow command: switch:admin> portloginshow 2 Type PID World Wide Name credit df_sz cos fe 80 192 2048 c scr=3 scr=3 scr=3 d_id=FFFFFC d_id=FFFFFC 282 Administering NPIV - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 283
a set of a large number of flows passing through a specific port in the network. You part of the optionally licensed Advanced Performance Monitoring feature. See "Identifying top bandwidth users activated, the fabric attempts to isolate all inter-switch traffic entering from a member of the zone to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 284
", and "4,7". The dotted line indicates the dedicated path from Domain 1 to Domain 4. Domain 1 7 1 8 9 2 Domain 3 9 10 12 = Dedicated Path = Ports in the TI zone 7 6 5 4 Domain 4 Figure 25 Traffic Isolation zone creating a dedicated path through the fabric In Figure 25, all traffic entering - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 285
8 1 9 3 Domain 3 9 14 12 15 = Dedicated Path 16 = Ports in the TI zone Domain 2 Figure 26 1 9 3 Domain 3 9 14 12 15 7 16 6 = Dedicated Path = Ports in the TI zone Domain 2 Figure 27 ports for that zone are load-balanced across the specified E_Ports. Fabric - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 286
12 11 87 6 = Dedicated path = Ports in the TI zone Figure 28 TI zone misconfiguration 5 Domain 4 Supported configurations for Traffic Isolation Note the following configuration rules for TI zones: • Traffic Isolation is supported only on the HP StorageWorks 4/8 SAN Switch, 4/16 SAN Switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 287
support Traffic Isolation. • Ports in a TI zone must belong to switches that run Fabric OS v6.0 or later. • Traffic Isolation is not supported in fabrics with switches running firmware versions earlier than Fabric OS 6.0. However, the existence of a TI zone in such a fabric is backward compatible - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 288
disabled, type: zone --create -t ti -o dn redzone -p "1,1; 2,4; 1,8; 2,6" Modifying TI zones Using the zone --add and zone --remove commands, you can add and remove ports and change the failover option of existing TI zones. If you remove the last member of a TI zone, the TI zone is deleted. To - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 289
ports from the TI zone redzone, type: zone --remove "redzone" -p "3,4; 3,6" Activating and deactivating a TI zone The TI zone must exist before you can activate it. To activate or deactivate a TI zone: 1. Connect to the switch : zone --deactivate "greenzone" Fabric OS 6.1.x administrator guide 289 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 290
This command deletes the entire zone; to only remove port members from a TI zone, use the zone . To delete a TI zone: 1. Connect to the switch and log in as admin. 2. Enter the zone Ingress rate limiting is a licensed feature that restricts the speed limit services based on requirements. - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 291
port is only a 2 Gbps port, switch and log in as admin. 2. Enter the portcfgqos --setratelimit command. portcfgqos --setratelimit [slot/]port ratelimit where: slot/port The slot and port number virtual channels (VCs licensed feature. An Adaptive Networking license must be installed on every switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 292
WWN members. "Domain,Index" zoning is not supported. A QoS zone has a special name, to user-defined portion of the name. For example, the following are valid QoS zone names: QOSH_HighPriorityTraffic QOSL_LowPriorityZone The switch 3 S1 1 9 H2 14 3 13 12 S2 15 = Low priority 87 = Medium - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 293
, if QOSH_z1 (H,T) overlaps with a "domain,port" zone at the H port, the traffic flow between H and T is dropped to medium priority and the H port is marked as a session-based soft zoning port. • Traffic prioritization is not supported on 10 Gbps ISLs. Fabric OS 6.1.x administrator guide 293 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 294
to the switch and log in as admin. 2. Enter the zoneCreate command, using the following syntax: zonecreate "QOSp_zonename", "member[; member...]" where: p The priority of the traffic. Possible values are: zonename member • HHigh priority • LLow priority The user-defined part of the name - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 295
is a Fibre Channel fabric with targets and initiators connected through the supported platforms by using an EX_Port or VEX_Port. • EX_Port, VEX_Port Special types of ports, called an EX_Port and a VEX_Port, function similarly to an E_Port and VE_Port respectively, but terminate at the switch and do - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 296
Fibre Channel switch 4/256 SAN Director with FR4-18i blade Figure 31 A metaSAN with interfabric links 26415a • Fabric ID (FID) Every EX_Port and VEX_Port uses the fabric ID (FID) to identify the fabric at the opposite end Fibre channel router A switch running the FC-FC routing service valid port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 297
the proxy device. The proxy device appears to the fabric as a real Fibre Channel device, has a name server entry, and is assigned a valid port ID. The port ID is only relevant on the fabric in which the proxy device has as translate domains or xlate domains. Fabric OS 6.1.x administrator guide 297 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 298
failures or disabling the IFL, by issuing the portDisable command from the switch in the attached fabric, translate phantom domains remain visible. This prevents imported into the edge SAN reached through Fibre Channel routing. Figure 34 illustrates this concept. 298 Using the FC-FC Routing Service - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 299
edge fabric, the translate phantom domain can never be the principal switch of the backbone fabric. Front domains are not created; rather, Fabric OS, Management Server Platform services, and interopmode are not supported in the backbone fabric. Fibre Channel NAT and phantom domains Within guide 299 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 300
Fibre Channel fabrics require that all ports be identified same xlate Domain ID number for an imported edge fabric; this value persists across switch reboots and fabric edge fabrics. Setting up the FC-FC routing service To set up the FC-FC Routing Service, perform the following tasks: 1. "Performing - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 301
verify that the director is using configuration option 5. NOTE: The DC Director only supports chassis configuration option 5. switch:admin> chassisconfig Current Option: 5 All Supported Options Option 1: One 128-port switch Blade ID's 4, 17 in slots 1-4, 7-10 Blade ID's 5, 16 in slots 5-6 Option - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 302
Brocade switch interoperability with switches from other manufacturers is disabled. switch: in the backbone fabric. switch:admin_06> msplatshow *MS Platform Management Service is NOT enabled. If When it is in strict mode, ACL cannot support Fibre Channel routing in the fabric. Before connecting an - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 303
parameter Backbone fabric ID: (1-128)[1] switch:admin> fosconfig --enable fcr FC router service is enabled Configuring FCIP tunnels (optional) The optional Fibre Channel over IP (FCIP) Tunneling Service enables you to use "tunnels" to connect instances of Fibre Channel SANs over IP-based networks to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 304
security restrictions through local and remote management channels on an HP fabric. Although Secure Fabric OS is not supported in Fabric OS 6.0, you can still connect a 6.0 switch to an edge switch that participates in a Secure Fabric OS. The FC-FC Routing Service uses only the DH-CHAP shared - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 305
switch switch , or switch name ( switch:admin> secauthsecret --show WWN DId Name 10:00:00:60:69:80:05:14 1 switch ports and cabling them to other fabrics, configuring those ports for their intended use, and then enabling the ports. When it is in strict mode, ACL cannot support Fibre Channel - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 306
the Brocade switch) by issuing the portDisable command. switch:admin> portdisable 7/10 You can verify that port 7 has been disabled by issuing the portShow command for the port. 2. Configure each port that 's primary wwn: N/A Edge fabric's version stamp: N/A 306 Using the FC-FC Routing Service - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 307
trunking setup, see "Using EX_Port frame trunking" on page 314. 3. Enter the portEnable command to enable the ports that you disabled in step 2. You can now physically attach ISLs from the Fibre Channel Router to the edge fabric. switch:admin> portenable 7/10 Fabric OS 6.1.x administrator guide 307 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 308
disabled. switch:admin> portcfgshow 7/10 Area Number: 74 Speed Level: AUTO Trunk Port OFF Long Distance OFF VC Link Init OFF Locked L_Port OFF Locked G_Port OFF Disabled E_Port OFF ISL R_RDY Mode OFF RSCN Suppressed OFF Persistent Disable OFF NPIV capability ON EX Port ON - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 309
port is configured correctly: switch:admin> portcfgexport 7/10 Port 7/10 info Admin: enabled State: NOT OK Pid format: Not Applicable Operate mode: Brocade portPhys: 2 No_Module portScn: 0 port generation number: 0 portId: 014a00 portIfId: Fbsy : 0 Fabric OS 6.1.x administrator guide 309 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 310
: 0 Invalid_crc: 0 Delim_err: 0 Address_err: 0 Lr_in: 0 Lr_out: 0 Ols_in: 0 Ols_out: 0 Port part of other ADs: No 7. Enter the switchShow command to verify the EX_Port (or VEX_Port), edge fabric ID, and name of the edge fabric switch (containing the E_Port or VE_Port). 8. Enter the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 311
with a port and slot number and a specific cost, to set the router port cost for a single EX_Port. switch:admin_06> fcrrouterportcost 7/10 10000 6. Enter the fcrRouterPortCost command, to set the cost of the EX_Port back to the default. switch:admin_06> fcrrouterportcost 7/10 0 Upgrade, downgrade - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 312
with the -s slot option, it can also influence the assignment of the xlate domain port number (which is used to determine the Area_ID field of the PID) and the Port_ID without user intervention. You can optionally configure these parameters manually. To change the fabric parameters on a switch in - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 313
on other HP switches. Only switch to panic. If router port cost is used with EX_Port trunking, the master port and slave ports share the router port cost of the master port. For information about setting up E_Port trunking on an edge fabric, see "Administering ISL Trunking" on page 129 in this guide - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 314
, it remains enabled after the HA failover. Backward compatibility support For backward compatibility, FCR that supports EX_Port trunking can continue to interoperate with older FCR switches and all previously supported Brocade switches in the Brocade edge fabric. Using EX_Port frame trunking With - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 315
for a port or switch. • switch: • Use the trunkShow command to display trunking information for a switch. switch:admin> trunkshow 1: 6 -> 4 10:00:00:60:69:51:43:04 deskew 15 MASTER 2:15 -> 13 12 -> 12 switch LSAN zone can be part of the root zone database import. To support legacy applications, - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 316
151. Defining and naming zones Zones are defined locally on a switch or director. Names and memberships, with the exception of hosts and Lsan_, and so on. • Members must be identified by their port WWN because port IDs are not necessarily unique across fabrics. The names of the zones Routing Service - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 317
: The nsShow output displays both the port WWN and node WWN; the port WWN must be used for LSANs. switch:admin> nsshow { Type Pid COS switch:admin> zonecreate "lsan_zone_fabric2", "10:00:00:00:c9:2b:c9:0c;50:05:07:61:00:5b:62:ed;50:05:07:61:00:49:20:b4" Fabric OS 6.1.x administrator guide - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 318
256 SAN Director or DC Director with a FR4-18i blade. 12. Enter the following commands to display information about the LSANs. • lsanZoneShow -s shows the LSAN. switch:admin> lsanzoneshow -s Fabric ID: 2 Zone Name: lsan_zone_fabric2 10: place in the edge fabrics. 318 Using the FC-FC Routing Service - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 319
, the number of Fibre Channel routers and devices supported in the switch will maintain the remote LSAN Zone and the device state database only if it is associated with its local edge fabrics. NOTE: This feature is supported only in a fabric with Fabric OS 5.3.0 and later Fibre Channel guide 319 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 320
the Fabric OS Command Reference Manual for additional information on the port disable or enable. Maximum LSAN count The fcrlsancount command lets you configure the maximum number of LSANs, or LSAN count, that can be configured on the edge fabric, which is up to 5000 without disabling the switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 321
number of LSANs is configured per switch, if there is a different maximum LSAN count on the switches created. IPFC over FCR IPFC over FCR supports IP device communication between edge-to-edge FCR feature does not require any additional licensing. If switches in edge fabrics and the backbone guide 321 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 322
enabled. Users with support broadcast zoning, the fcrbcastconfig command sets up inter-fabric broadcast frame forwarding on the FC router and prevents inter-fabric forwarding of broadcast frames to the switches running older versions of firmware switch as admin. 322 Using the FC-FC Routing Service - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 323
firmware version port WWNs and shows the number of translate node and port WWNs from this pool. • Phantom Node WWN-The display shows the maximum versus the currently allocated phantom switch node WWNs. The phantom switch port for routing decision purposes. Fabric OS 6.1.x administrator guide 323 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 324
per physical port (EX_Port) resources. switch:admin> 12 | 6 34 13 | 6 34 14 | 6 34 15 | 6 34 16 | 8 34 17 | 8 34 18 | 8 34 19 | 8 34 20 | 8 34 21 | 8 34 22 | 8 34 23 | 8 34 See the Fabric OS Command Reference for details about the fcrResourceShow command. Routing ECHO The FC-FC Routing Service - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 325
for Fibre Channel connectivity problems: 1. On the edge Fabric OS switch, make sure that the source and destination devices are properly configured in the LSAN zone before entering the fcPing command. This command performs the following functions: • Checks the zoning configuration for the two ports - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 326
in Table 71. Table 71 Hardware and firmware compatibility for nonsecure fabrics Model Supported version 2Gb SAN Switches SAN Switch 2/8 EL, SAN Switch 2/16 EL, SAN Switch 2/16 Fabric OS 2.6.1 or later Fabric OS 3.1.0 or later SAN Switch 2/32, Core Switch 2/64 Fabric OS 4.1.0x or later SAN - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 327
switch:admin_06> portcfgexport 2/0 Port 2/0 info Admin: enabled State: OK Pid format: core(N) Operate mode: Brocade ID. switch:admin_06> fabricshow Switch ID Worldwide ports The edge fabric detects only one front domain from an FC router connected through multiple output ports. The output port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 328
the portCfgExport command. NOTE: Abnormal operation for front domain consolidation exists when the ports do not come online or in the Normal Operation setup described previously. The , or supportSave if not supported, on each of the FC routers and edge switches. 328 Using the FC-FC Routing Service - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 329
"Configuring and Monitoring FCIP Extension Services" on page 435 for more information about VE_Ports. The type of monitors supported depends on the ASIC. Table 72 shows the monitors supported on different ASICs. Table 72 Types of monitors supported on B-Series switch models Monitors: EE Filter - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 330
SAN Switch 4/32B, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch and the 400 Multi-protocol Router, use only the port number where needed in the commands. End-to-end performance monitoring End-to-end performance monitoring counts the number of words and CRC errors in Fibre Channel - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 331
of end-to-end performance monitors Setting a mask for end-to-end monitors End-to-end monitors count the number of words in Fibre Channel frames that match a specific SID/DID pair. If you want to match only part of the SID or DID, you can set a mask on the port to compare only certain parts of - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 332
on a port. perfMonitorShow Display end-to-end, filter-based, and ISL monitors on a port. perfSetPortEEMask Set overall mask for end-to-end (EE) monitors. perfShowAlpaCrc Display the AL_PA CRC count by port or by AL_PA. perfShowEEMonitor Show user-defined end-to-end monitors. perfttmon - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 333
on the 4/8 SAN Switch, 4/16 SAN Switch, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, 400 Multi-protocol Router, 4/256 SAN Director, and DC Director switches. Adding end-to-end monitors An end-to-end monitor counts the following items for a port: number of words received, number of words - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 334
be masked separately for any ports on FC4-48 port blades. End-to-end masks are not supported on the DC Director. Deleting end-to-end monitors To delete an end-to-end monitor: 1. Enter the perfShowEEMonitor command to list the valid monitor numbers for a port. 2. Enter the perfDelEEMonitor command to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 335
4/16 SAN Switch models, the maximum number of filters is 8 per port, in any combination of standard filters and user-defined filters. For the SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, 400 Multi-protocol Router, and DC Director models, the maximum number of filters is 12 per port, in any - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 336
models Up to 15 different offsets per port (14 offsets when FICON Management Server mode, or fmsmode, is enabled). • 4/8 SAN Switch, 4/16 SAN Switch and Brocade 4Gb SAN Switch for HP p-Class BladeSystem models Up to 7 different offsets per port (6 offsets when fmsmode is enabled). 336 Administering - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 337
monitor #5 added switch:admin> perfaddusermonitor 1/2, "0, 0xff, 6" User Monitor #6 added Two filter-based monitors are added. The first monitor (#5) counts all FCP and IP frames transmitted from domain 0x02 for slot 4, port 2. The FCP and IP protocols are selected by monitoring offset 12, mask 0xff - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 338
Top Talker monitors can determine the top n bandwidth users on a given switch. You can install Top Talker monitors either in port mode or fabric mode, but not both. How do Top Talker monitors differ from end-to-end monitors? End-to-end monitors provide counter statistics for traffic flowing between - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 339
admin. 2. Enter the perfttmon --show command. perfttmon --show [slotnumber/]port [n] [wwn | pid] where: slotnumber port n wwn | pid For director-class switches only (4/256 SAN Director and DC Director), the slot number. The port number. The number of top talking flows to display, between 1 and 32 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 340
flows on slot 2, port 4 on the 4/256 SAN Director or DC Director in PID format: perfttmon --show 2/4 pid switch:admin> perfttmon --show [n] [wwn | pid] where: domainid n wwn | pid The Domain ID of the switch. The number of top talking flows to display, between 1 and 32. The format of the output. - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 341
not specify the number of flows to display, then the command displays the top 8 flows or the total number of flows, whichever switches support 12 filter-based monitors for trunks. Displaying monitor counters Use the perfMonitorShow command to display the monitors on a specified port. For end-to-end - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 342
numbered 0 to 15. For 32-port blades, there are 32 ports numbered 0 to 31. Specifies a port number. Valid values for port number vary, depending on the switch type. This operand is required. Specifies an interval in seconds. The interval must be greater than or equal to five seconds. For end-to-end - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 343
displays filter monitor information on a port: switch:admin> perfMonitorShow --class FLT 2/5 There are 7 filter-based monitors defined on port 21. KEY ALIAS OWNER_APP FRAME_COUNT 192.168.169.190 5 SCSI_RD WEB_TOOLS 0x0000000000002208 192.168.169.40 Fabric OS 6.1.x administrator guide 343 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 344
.168.169.40 The following example displays ISL monitor information on a port: switch:admin> perfMonitorShow --class ISL 1/1 Total transmit count for this ISL: 1462326 Number of destination domains monitored: 3 Number of ports in this ISL: 2 Domain 97: 110379 Domain 98: Domain 99: 1337982 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 345
portnumber monitorId The monitor class, which can be one of EE (end-to-end), FLT (filter-based), or ISL (inter-switch link). The --class monitor_class operand is required. For bladed systems only, specifies the slot number of the port on which the monitor counter is to be cleared. For all other - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 346
current end-to-end and filter monitor configuration settings into nonvolatile memory, use the perfCfgSave command: switch:admin The total number of EE monitors per port is limited to 16. • The total number of filter monitors per port is limited to 16. • The total number of monitors per switch is - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 347
, you must first install the Extended Fabrics license. Use the licenseShow command to verify that the license is present on both switches used on both ends of the extended ISL. Extended Fibre Channel over distance Extended Fabrics software optimizes switch buffering to ensure the highest possible - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 348
used in Table 76 means 8 bits. The maximum fibre channel frame is 2,148 bytes. You can allocate buffer credit using the portCfgLongDistance command, which allows you to allocate sufficient numbers of full-size frame buffers on a particular port or to support a long distance link up to 500 km. The - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 349
, note the following Fibre Channel gigabit values reference definition: • 1.0625 for 1 Gbps • 2.125 for 2 Gbps • 4.25 for 4 Gbps • 8.5 for 8 Gbps Determining how many ports can be configured for long distance NOTE: The following formula is used to determine the number of buffer credits: buffer - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 350
= 484 buffers Where: 24 = the number of ports in a port group retrieved from Table 77. 8 = the number of reserved buffers 676 = a static number retrieved from Table 77. If you allocate the entire 484 + 8 reserved buffers = 492 buffers to a single port; that port can support 486km @ 2G, which is the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 351
switch:admin> portbuffershow 1 User Port Lx Max/Resv Port Type Mode Buffers ---- ---- ---- ------- 0 U - 8 1 U - 8 2 U - 8 3 U - 8 4 U - 8 5 U - 8 6 U - 8 7 U - 8 8 U - 8 9 U - 8 10 U - 8 11 U - 8 12 Fabric OS 6.1.x administrator guide 351 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 352
1516/24 272/12 Brocade 4Gb Golden Eye 24 SAN Switch for HP c-Class BladeSystem 272/24 Reserved buffers for ports 0 8 8 8 8 8 8 8 8 8 8 8 8 N/A 8 8 8 8 8 NOTE: Additional buffers are available with 4Gbps chassis for 8Gbps blades because of fewer buffers allocated for back-end port connections - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 353
lost, it attempts to recover. During link reset, the frame and credit loss counters are reset without performance degradation. This feature is only supported on long distance E_Ports connected between GoldenEye2 and condor2-based ports. Buffer recovery credit does not require any configuration. If - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 354
, refer to "Administering ISL Trunking" on page 377. • Use only qualified HP branded SFPs. • For fabrics that contain B-Series 2Gb switches, contact HP support for details on which parameters to set. • For Fabric OS 3.x or 4.x, contact HP for details on which parameters to set. 1. Connect to the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 355
-spec user-specified user-specified ified ified distance distance distance distance Maximum is 200 km Maximum is 100 km 1. For each data channel (in this case, there are 4) there are 5 credits, plus 6 extra credits. 2. The dynamic long-distance mode (LD) automatically configures the number - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 356
356 Administering Extended Fabrics - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 357
HP StorageWorks SAN Switch 4/32, 4/32B, 4/64 SAN Switch, 400 MP Router, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch FR4-18i blades support these advanced features: • Up to eight ports in one trunk group to create high performance 32 Gbps ISL trunks between switches and up to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 358
supported. The maximum number of ports per trunk and trunks per switch depends on the HP model. NOTE: Director blade model FC10-6 does not support license must be activated on each switch that participates in trunking. The trunking groups are based on the user port number with contiguous eight ports - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 359
ports After you unlock the ISL Trunking license, you must reinitialize the ports ports: 1. Connect to the switch and log in as admin. 2. Enter the portDisable command. The format is: portDisable [slot/]port On Directors, slot is the slot number and port is the port number of the port in problem areas - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 360
megabytes (m), or gigabytes (g). Values are always rounded down. Displaying port throughput performance 1. Connect to the switch and log in as admin. 2. Enter the following command: portperfshow [interval] where interval is the number of seconds between each data-gathering sample (the default is one - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 361
for Directors. Specifies the number of the port on which you want to enable or disable trunking. Enables (1) or disables (0) trunking on the specified port. The following example enables trunking on slot 1, port 3: switch:admin> portcfgtrunkport 1/3 1 done. switch:admin> To enable or disable - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 362
Switch, and the 8 Gbps supported SFPs installed. The 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, and 8/80 SAN Switch support long-distance modes L0, LE, LS, and LD. The distance supported on each platform depends on the available buffers, number of back-end ports, and number of offline ports - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 363
Gbps mode. Fixes the port at a speed of eight Gbps. (HP StorageWorks 4/256 SAN Director, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, and 8/80 SAN Switch and DC Directors enterprise-class platforms with supported blades and 8 Gbps SFPs installed only.) Fabric OS 6.1.x administrator guide 363 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 364
the following information about ISL Trunking groups:: Trunking Group Number Displays each trunking group on a switch. All the ports that are part of this trunking group are displayed. Port-to-port connections, Displays the port-to-port trunking connections. WWN Displays the WWN of the connected - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 365
be reset to 0. Trunking distances Enhanced trunking support for switches with Condor ASICs is summarized in Table 80. Table 80 Trunking support for SAN Switch 4/32, 4/32B and 4/64 SAN Switch (Condor ASIC) Mode LE L0.5 LD Distance 10 km 25 km 200 km Number of 2 Gbps ports 32 (four 8-port trunks - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 366
F_Port trunking prevents reassignments of the Port ID when F_Ports go offline and it increases F_Port bandwidth. This feature supports the HP StorageWorks SAN Switch 4/32, 4/32B, 4/64 SAN Switch, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch, 4/256 SAN Director and the DC - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 367
Attributes ELS's are not supported on F-Port trunks. The port must be disabled before assigning a Trunk Area on the edge switch to the port or removing a Trunk Area from a trunk group. You cannot assign a Trunk Area to ports if the standby-CP is running a firmware version earlier than Fabric OS - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 368
them. Port mirroring is not supported on Trunk Area ports or on the PID of an F_Port trunk port. If you issue the configDownload command for a port configuration that is not compatible with F_Port trunking, and the port is Trunk Area enabled, then the port will be persistently disabled. ICL Port AD - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 369
a quad is a set of sequential ports, for example ports 0-3 in the figure shown below. The HP StorageWorks 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch and the 8/80 SAN Switch platforms support a trunk group with up to eight ports. The trunking groups are Fabric OS 6.1.x administrator guide 369 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 370
number of ports on the switch. Figure 41 Trunk group configuration for the SAN Switch 8/40 1. Connect to the switch and log in as admin. 2. Ensure that both modules (edge switch and the switch running in AG mode) have trunking the licenses enabled. 3. Ensure that the ports support shared area ports - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 371
switch using ports 36-39. 1. Disable ports 36 - 39 by executing portDisable port for each port to be included in the TA. 2. Enable Trunk Area for ports 36 - 39 with area number 37: switch Port Media Speed State Proto 0 0 -1 1 -2 2 -3 3 -4 4 -5 5 -6 6 -7 7 -8 8 id 9 9 -10 10 -11 11 -12 12 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 372
port configuration: F-Port 2 NPIV public (Trunk master) F-Port (Trunk port, master is Port 36 ) F-Port (Trunk port, master is Port 36 ) F-Port (Trunk port, master is Port 36 ) switch:admin> porttrunkarea --show enabled Port for a user assigned TA 37 that includes ports 36-39: switch:admin> - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 373
's from joining the TA group. When you assign a TA, the ports within the TA group will have the same Index. The Index that was assigned to the ports is no longer part of the switch. Any Domain,Index (D,I) AD that was assumed to be part of the domain may no longer exist for that domain - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 374
374 Administering ISL Trunking - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 375
performance. Commands described in this chapter require Admin or root user access. See the Fabric OS Command Reference for detailed information on command syntax. FCIP services licensing Most of the FCIP extension services described in this chapter require the High Performance Extension over FCIP - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 376
Fibre Channel ports and two physical GbE ports as illustrated in Figure 42 and Figure 43. Figure 42 FR4-18i port numbering FC0 Figure 43 400 Multi-protocol Router port numbering FC15 GbE0 GbE1 NOTE: The FCIP Tunneling Service for the 400 Multi-protocol Router and FR4-18i blade is not compatible - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 377
. The Fibre Channel fabric and all Fibre Channel targets and initiators are unaware of the presence of the IP network. Virtual ports and FCIP tunnels Each FR4-18i and 400 Multi-protocol Router platform presents sixteen FC ports and sixteen virtual ports. Each GbE interface can support up to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 378
committed rate can be assigned to a port that guarantees a fixed amount of 6.0.0 and higher provide for Fibre Channel QoS through internal QoS priorities. uses six bits of the Type of Service (TOS) field in the IP header end-to-end, with no intermediate hops in the IP network. 378 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 379
Low Qos Low Qos High QoS 11 47 / 101111 4 / 100 High QoS 12 51 / 110011 4 / 100 High QoS 13 55 / 110111 4 / 100 High supports service of applications, services, or the network, data corruption, and data and user 400 Multi-protocol Router at each end of the FCIP tunnel. IPSec works on - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 380
supported. • You can only create a single secure tunnel on a port; you cannot create a nonsecure tunnel on the same port as a secure tunnel. • IPSec-specific statistics are not supported are not supported for IPSec. • There is no RAS message support for IPSec. • Only a single route is supported on an - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 381
disables the local Ethernet ports (ge0 and ge1 part of the network, consider using FCIP fastwrite and tape write tape pipelining. Supported drives) over FCIP, which reduces the number of round-trip times needed to GbE port supports up GbE port supports up not support multiple equal not support multiple - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 382
there are 1024 initiator-tape (IT) pairs per GbE port, but 2048 initiator-tape-LUN (ITL) pairs per GbE port. The ITL pairs are shared among the IT pairs. acceleration is performed on the unassociated pairs. Does not support multiple non-equal-cost path between host and sequential device services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 383
tunnels to multiple ports, fastwrite and tape pipelining enabled on a per-tunnel/per-port basis Unsupported configurations The following configurations are not supported with fastwrite and tape pipelining. These configurations use multiple equal-cost paths. Fabric OS 6.1.x administrator guide 383 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 384
configurations with fastwrite and tape pipelining FICON emulation concepts FICON emulation supports FICON traffic over IP WANs using FCIP as the underlying protocol. FICON emulation can be extended to support performance enhancements for specific applications. 384 Configuring and monitoring FCIP - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 385
manner similar to that of a channel protocol analyzer. FTRACE enables troubleshooting of problems using a Telnet session rather than sending an analyzer or technical support personnel to the site. FTRACE record events that occur on the FC interface, including user defined messages and events. FTRACE - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 386
configuration guidelines There are multiple configuration requirements and options associated with FCIP services. The following general guidelines may be helpful. The steps are presented in an order that minimizes the number of times ports need to be disabled and enabled. In practice, the steps do - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 387
FTRACE. portcfg ftrace 12. Verify FCIP tunnels. 13. Enable the ports. portshow fciptunnel portpersistentenable 2. IKE negotiates SAs and authenticates IPSec peers, and sets up a secure channel for negotiation of phase 2 (IPSec) SAs. 3. IKE negotiates SA parameters 6.1.x administrator guide 387 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 388
IKE and IPSec policies as any other tunnel. Only one IPSec tunnel can be configured for each GbE port. IPSec parameters When creating policies, the parameters listed in Table 90 are fixed and cannot be modified: bits (default) Group 14-2048 bits 388 Configuring and monitoring FCIP extension services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 389
group. Supported groups are Group 1 and Group 14. Group 1 is the default. The security association lifetime in seconds. 28800 is the default. The following example shows how to create IKE policy number 10 using 3DES encryption, MD5 authentication, and Diffie-Hellman Goup 1: switch:admin06> policy - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 390
on Diffie-Hellman Group: 1 SA Life (seconds): 28800 Operation Succeeded Policies cannot be modified. You must delete and then recreate a policy with the new parameters. To delete a policy: 1. Log in to the switch as admin. 2. Enter the following command. policy --delete type number where type is the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 391
Encryption: 3DES SA Life (seconds): 1500000 Pre-Shared Key 1234567890123456 Persistently disabling ports Ports used on an FCIP to enable or 2 to disable). The fabric ID (a number from 1 to 128). The preferred Domain ID (a number from 1 to 239). The port ID format (1 for core, 2 for extended edge, - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 392
supports jumbo packets, a value of 2284 can improve performance. By default, the virtual ports will automatically become VE_Ports. 2. Define IP routes on a GbE port. After defining the IP interface of the remote switch . The metric number is sometimes used to indicate the actual number of hops, but - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 393
connection only if both ports have IP interfaces set. The command syntax is as follows. portcmd --ping [slot/]ge0|ge1 [-s source_ip] [-d dest_ip] [-c L2 class-of-service] [-n num-requests] [-q type-of-service] [-t ttl] [-v vlan tag] [-w wait-time] [-z size] Where: slot The number of a slot in - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 394
does not apply to the stand-alone 400 Multi-protocol Router. The Ethernet port used by the tunnel (ge0 or ge1). The tunnel number (0-7). The IP address for the remote end of the tunnel. The IP address for the local end of the tunnel. The committed comm rate for the tunnel. Enables compression on - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 395
service used for control traffic. The layer 2 class of service used for data traffic. The IKE policy number to be used for this FCIP tunnel. The IPSec policy number of valid values is 12 through 32 bytes. The following example creates one end of a tunnel ] Fabric OS 6.1.x administrator guide 395 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 396
-alone 400 Multi-protocol Router. The Ethernet port used by the tunnel (ge0 or ge1). The tunnel number (0 - 7). The config option creates ending status for the next write chain will be withheld from the channel. This limits processing to what the network and device can support FCIP extension services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 397
Support port used by the tunnel (ge0 or Ge1). The tunnel number (0 - 7). Creates an FTRACE configuration. Enables or disables ACO. Number percentage value (range 0-100). Default is 5. Number of records (range 0 through 1,677,721). to specify the slot/port numbers and number of tunnels). The command - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 398
switch: Life (MB): 4500 Pre-Shared Key 0x1234500000000000000000000000000000 After FCIP tunnels are created, the configuration is saved in a persistent database. At this point, all configured FCIP tunnels now appear in the fabric as VE_Ports. 398 Configuring and monitoring FCIP extension services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 399
truncated> 210 8 18 -- -- Online VE-Port 50:00:51:e3:51:55:3f:1e "fcr_xd_3_16" (downstream) 211 8 19 -- -- Online VE-Port 50:00:51:e3:70:42:5f:76 "fcr_xd_5_17" (downstream) 223 8 31 -- -- Offline 8 ge0 id 1G Online 8 ge1 id 1G Online Fabric OS 6.1.x administrator guide 399 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 400
Before an FCIP tunnel can be used, the associated ports must be persistently enabled. NOTE: VEX_Port Users: If the fabric is already connected, you must leave the ge0 and ge1 ports disabled until after you have configured the VEX_Port; this will prevent unintentional merging of the two fabrics. To - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 401
Disabled E_Port ISL R_RDY Mode RSCN Suppressed Persistent Disable.. .. .. .. ON ON ON ON ON ON ON ON ON ON ON ON NPIV capability ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON EX Port switch:admin06> where AN:AutoNegotiate, ..:OFF, ??:INVALID. LM:L0.5 Fabric OS 6.1.x administrator - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 402
does not apply to the stand-alone 400 Multi-protocol Router. The Ethernet port used by the tunnel (ge0 or Ge1). The tunnel number (0 - 7). The modify option changes the FCIP tunnel configuration options and parameters appropriate DSCP values. 402 Configuring and monitoring FCIP extension services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 403
-P data_L2Cos The layer 2 class of service used for data traffic. The following example shows two FCIP tunnels created on slot 8, port ge0; the first with an uncommitted bandwidth (0), and the second with a committed bandwidth of 10000 Kb/sec: switch:admin06> portcfg fciptunnel 8/ge0 create 2 192 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 404
wrtMaxDevs value rdMaxDevs value wrtTimer value Defines a maximum number of channel commands that may be outstanding at a given time during , the ending status for the next write chain will be withheld from the channel. This limits processing to what the network and device can support. Too small - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 405
It should fall outside the range used by FICON channels and devices to avoid conflicts. The default value is purposes, and are primarily for technical support personnel. xrcErr LrcCheck 1|0 Forces slot 8, port ge0: switch:admin06> portcfg fciptunnel 8/ge0 delete 6 switch:admin06> portcfg guide 405 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 406
through their own configuration procedures. Manual entries are needed on both 1-4094). Layer 2 class of service (range 0-7) The destination IP address port that is unique to that tunnel. • Ports at both ends of the tunnel must be configured correctly for an FCIP tunnel to work correctly. These ports - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 407
end-to-end IP path performance characteristics between a pair of HP FCIP port endpoints. WAN tools include the following commands and options: • portCmd ipPerf-Characterizes end-to-end IP path performance between a pair of HP FCIP ports an FCIP GbE port at any time. Each FCIP port supports a single - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 408
end-to-end PMTU, especially if you are trying to eliminate TCP segmentation of large Fibre Channel (FC) frames. • Study the effects and impact FCIP tunnel traffic may have on any other applications sharing network resources. To start an ipPerf session, you can use any port as long as the port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 409
slot8, port ge0 on for slot8, port ge0 on an slot 8, port ge0: weighted bandwidth WAN tool ipPerf syntax When using the portCmd ipPerf option, you must specify the following: • Source IP address. If the ipPerf is started with -S (source mode), the port number specified is the remote peer's port number - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 410
a traffic shaper. This can be used to characterize the end-to-end IP path performance based on the data rate to be number used as the VLAN ID. -c L2_Cos The Layer 2 class of service. Using portCmd ping The portCmd ping command tests the connection between the IP address of a local Ethernet port - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 411
.10.1 and 192.168.20.1 over VLAN 10 with an layer 2 class of service of 3. portcmd --ping 8/ge0 -s 192.168.10.1 -d 192.168.20.1 -v 10 -c 3 Using portCmd traceroute The portCmd traceroute command traces routes from a local Ethernet port (ge0 or ge1) to a destination IP address. If you want to use - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 412
maximum number The vlan tag for a VLAN tagged IP connection. The Layer 2 class of service (L2CoS). The following example traces the route between IP addresses 192.168.10.1 performance characteristics of tunnel 0. switch:admin06> portshow fciptunnel 8/ge0 all -perf Slot: 8 Port: ge0 Tunnel ID 0 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 413
fcipTunnel with the parameters options to display the parameters of tunnel 0: switch:admin06> portshow fciptunnel 8/ge0 0 -params Slot: 8 Port: ge0 Tunnel ID 0 Remote IP Addr 192.175.4.200 Local IP Keepalive Timeout 10 Max Retransmissions 8 Status : Active Fabric OS 6.1.x administrator guide 413 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 414
in-flight Send.Unacknowledged(TCP sequence# 2950582519) recovery: retransmit timeout 500 ms, duplicate ACKs 0 retransmits 0 (max retransmits 8) loss recovery: fast retransmits 0, retransmit timeouts 0 Receiver 30s avg, 491394 Bps lifetime avg 414 Configuring and monitoring FCIP extension services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 415
Tools Web Tools is an embedded GUI management tool that can be used to manage a director (switch) that supports FICON and Fibre Channel Protocol (FCP) devices and traffic. Some licenses are installed and activated on the switch at the factory. Use a management interface to verify that the required - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 416
Supported switches FICON protocol is supported on the HP StorageWorks 4/256 SAN Director and DC SAN Backbone Director, short name, DC Director. The following port blades can exist in a FICON environment; however, FICON device connection to ports on these blades is not supported: • FC4-16IP • FC4-48 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 417
(Other blades are supported in slot 10, but the FC8-48 and FC4-48 blades are not.) Port 255 is reserved switch or for the fabric. ficonshow rlir [fabric] Displays link incidents for the local switch Web Tools Administrator's Guide • Fabric Manager-Fabric Manager Administrator's Guide • SNMP Agent - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 418
following roles: • Admin • Operator • SwitchAdmin • FabricAdmin The User and BasicSwitchAdmin roles are view-only. The ZoneAdmin and SecurityAdmin roles channel will come online and function normally. • Use the port-based routing policy on any switch that has FICON devices attached. Other switches - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 419
the default exchange-based policy to the required port-based policy for those switches with FICON devices directly attached using the aptPolicy command when working from the command line. For GUI-based procedures, see the Web Tools Administrator's Guide for configuring the routing policy using the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 420
be enabled. To set a unique Domain ID and enable IDID mode: 1. Connect to the switch and log in as admin. 2. Verify that the switch has a unique Domain ID. If it does not, set a unique Domain ID. For instructions on displaying and changing the Domain ID, see "Working with Domain IDs" on page 33 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 421
Virtual Channel parameters (yes, y, no, n): [no] Switch services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] Committing configuration...done. switch switch, log in as user, and enter one of the following commands: • For the local switch: ficonshow rlir • For all switches - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 422
> portswapdisable • slot is the slot number of the port blade for a system with port blades (optional). • portA is the original port number. • portB is the alternate port number. You can use the portSwapShow command to display information about swapped ports in a switch. You can use the portSwap - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 423
setting can be changed whether the switch is offline or online. If fmsmode is changed while the switch is online, a device reset is performed for the control device ports" on page 426 for instructions. Changing fmsmode from disabled to enabled triggers the following events: • Access to switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 424
between a set of ports. Changing fmsmode from enabled to disabled triggers the following events: • A device reset is performed on the port remains disabled or enabled. • Serialized access to switch parameters ceases. Setting up CUP when FICON Management Server mode is enabled When a CUP license - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 425
switch offline. The default setting is 1 (on). User alert mode. When this bit is set on, a warning is issued when an action is attempted that will write CUP parameters on the switch 1 (on). Switch clock alert mode. switch. The default switch for the switch. A display switch: switch:admin> - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 426
reset to 0 following a power-on. • Mode register bits can be changed when the switch is offline or online. If the ACP or HCP bits are changed when the switch commands to enable and disable ports as necessary. The ports remain enabled or disabled after a switch reboot. In the following example, the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 427
that contain nonprintable characters should not be edited manually because many editors replace nonprintable characters with some other characters without warning you first. • CUP has a 24-character unique port name limitation; Fabric OS supports port names up to 32 characters long. When fmsmode - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 428
Troubleshooting The following sources provide useful problem-solving information: • The standard support Type number: 002064 Model number: 103 Manufacturer: IBM Plant of Manufacture: 02 Sequence Number: 0000000169CA tag: 155d Flag 0x10 Node Parameters 0x200115 Switch Port WWN Switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 429
file, which are not currently on the switch, are saved on the switch. The IPL will not be replaced because Active=Saved mode is enabled. A warning message is displayed in the event log to warn users that the IPL will not be overwritten. To download configuration files with Active=Saved mode disabled - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 430
No _____Yes _____ Corresponding Cascaded Switch Domain ID _____ Fabric Name FICON® Switch F_Ports Attached N_Ports / E_Ports (CU, CPC, or ISL) Slot Numb er Port Numb er Port Addres s Laser Type: LX / SX Port Name Node Type CU / CHNL Machin Model Serial Number e Type ISL CU I/F CPC CHPID - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 431
numbering, refer to the IBM publication FICON® Implementation Guide (SG24-6497-00). In the following sample IOCP configuration file, the UNIT value for FICON CUP definitions is 2032 for any FICON director regardless of vendor or platform. All HP switches ,STADET=Y,UNITADD=00 Brocade Domain_ID=25 (in - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 432
432 FICON fabrics - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 433
on the hardware used on both ends the FCIP tunnel. For details on obtaining and installing licensed features, see "Licensed features" on page 34. These features are described later in this chapter under "FICON emulation concepts and features" on page 436. Fabric OS 6.1.x administrator guide 433 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 434
The 400 MP Router and the FR4-18i blade both have 16 physical Fibre Channel ports and 2 physical GbE ports as illustrated in Figure 50 and Figure 51. Figure 50 FR4-18i Port Numbering FC0 Figure 51 400 MP Router Port Numbering FC15 GbE0 GbE1 434 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 435
services" on page 389 for information about configuring FCIP interfaces and tunnels. Configuration requirements for switches Fibre Channel ports end Brocade Mi10K or M6140 Director Element Manager GUI through use of an Allow/Prohibit matrix. The matrix allows you Fabric OS 6.1.x administrator guide - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 436
/prohibit example Refer to the Brocade Mi10K or M6140 Director Element Manager User Manual for specific information about implementing 53 Cross-coupled configuration FICON emulation concepts and features FICON emulation supports FICON traffic over IP WANs using FCIP as the underlying protocol. - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 437
and emulation is terminated. The FICON Tape Emulation License is required to enable FICON Tape Write Pipelining MP Router. ge0|ge1 The Ethernet port used by the tunnel (ge0 or ge1). tunnel_id The tunnel number (0 - 7). config The config option disable. Fabric OS 6.1.x administrator guide 437 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 438
is 1-100. rdMaxPipe value Defines a maximum number of channel commands that may be outstanding at a given ending status for the next write chain will be withheld from the channel. This limits processing to what the network and device can support Configuring and monitoring FICON Extension Services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 439
stand-alone 400 MP Router. ge0|ge1 tunnel_id The Ethernet port used by the tunnel (ge0 or Ge1). The tunnel number (0 - 7). modify The modify option changes the FICON emulation . -r 1|0 Enables or disables tape read pipelining. 1 is enable, O is disable. Fabric OS 6.1.x administrator guide 439 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 440
a maximum number of channel commands that a maximum number of channel commands that a maximum number of concurrent ending status for the next write chain will be withheld from the channel. This limits processing to what the network and device can support used by FICON channels and devices to - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 441
400 Router. ge0|ge1 The Ethernet port (ge0 or ge1). tunnel_id Tunnel number (0-7). arguments are as follows: -globals (port specific). -fhpb FICON Host Path Block. -fdpb adrs FICON Device Path Block. -fchb FICON Channel Control support personnel. Fabric OS 6.1.x administrator guide 441 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 442
Device Control Block. Support personnel may use this pointer. Path The device path, in the format VE-HD-HP-DD-DP-LP-CU-DV. where: • VE is the internal VE_Port number. • HD is the hex value for the Host Domain (the entry domain for this host port into the fabric). • HP is the hex value - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 443
| 19436| 0| 0| 183111| 32760| |0x10045000|2463046402050102|H| 0x00| N/A|0000|0000| 19456| 0| 0| 183111| 32760| |0x1004/256 SAN Directoe|2463046402050103|H| 0x00| N/A|0000|0000| 183111| 32760| 19404| 0| 0| Fabric OS 6.1.x administrator guide 443 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 444
|0000|000F|0000|05E8| 4185|155| 38116| 22943| |0x104B5C00|24B102B20F1109FD|H| 0x00|0000|000F|0000|07E2| 3755|143| 40929| 24885| 444 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 445
a different port as part of fabric maintenance, or changing the Domain ID of a switch, which might be necessary when merging fabrics, or changing compatibility mode settings. Some device drivers use the PID to map logical disk drives to physical Fibre Channel counterparts. Most drivers can either - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 446
port count switches and directors. Also, it is recommended that you use Core PID when upgrading the Fabric OS version on 1Gb and 2Gb series switches PIDs (called their Fibre Channel addresses). In these environments port number to area ID" on page 452 for instructions. 446 Configuring the PID format - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 447
by running the configUpload command. Before downgrading firmware, change the PID back to supported PIDs such as Core PID. If the database is automatically converted, save the converted database, and then download the older OS. Selecting a PID format All switches in a fabric must use the same PID - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 448
existing fabric to Core PID format, upgrading the version of Fabric OS, if necessary. Set Core PID format for new switch. Host reboot is required. 2. each device driver will respond to the PID format change. • Determine how any multipathing software will respond to a fabric service interruption. If - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 449
inherent PID binding problem with either AIX or HP/UX. It is the HBA drivers shipping with these operating systems that bind by PID. Both operating systems are expected to release HBA drivers that bind by WWN, and these drivers might already be available through some support channels. Work with the - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 450
PID Format enabled, so it is not necessary to perform the PID format change on these switches. Migrating from manual PID binding (such as persistent binding on an HBA) to manual WWN binding and upgrading drivers to versions that do not bind by PID can often be done before setting the core PID format - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 451
manually 12. service provider in these cases. Changing to core PID format In Fabric OS release 4.2.0 and later, Native PID format is not supported switch databases that contain PID-sensitive information are automatically updated. If you change the setting in the configuration file and then download - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 452
the situations that may require a reboot. switch:admin> switchdisable switch:admin> configure Configure... Fabric parameters (yes, compatible. See "Selecting a PID format" on page 447 for details on the supported PID format for the Fabric OS version that you are running. Converting port number - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 453
in a device receiving a new PID. Examples include, but are not limited to: • Changing compatibility mode settings • Changing switch Domain IDs • Merging fabrics • Relocating devices to new ports or new switches (that is, for Add, Move, Change type operations) • Updating the core PID format • Using - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 454
propagates to all switches. At this point, all switches in the fabric are operating in the new addressing mode. HP/UX procedure This cfgEnable [effective_zone_configuration]. For example: cfgEnable my_zones 12. Issue the switchEnable command. Enable the core switches first, then the edges. 13. - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 455
ioscan -funC disk Class I H/W Path Driver S/W State H/W Type Description disk 0 1 0/0/2/1.2.0 adisk CLAIMED DEVICE HP DVD-ROM 304 /dev/dsk listed: het46 (HP-50001)> ioscan -funC disk Class I H/W Path Driver S/W State H/W switch or fabric to be updated. Fabric OS 6.1.x administrator - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 456
a pair of switch ports: 1. Connect to the switch and log in as admin. 2. Enable the port swap feature: portswapenable 3. HP StorageWorks 4/8, 4/16, 4/32, 4/32B, 4/64, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch, Brocade 4 Gb SAN Switch for p-Class BladeSystem, Brocade 4 Gb SAN - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 457
following command: portswap slot1/port1 slot2/port2 5. Verify that the port area IDs have been swapped: portswapshow A table is shows the physical port numbers and the logical area IDs for any swapped ports. 6. Disable the port swap feature: portswapdisable Fabric OS 6.1.x administrator guide 457 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 458
458 Configuring the PID format - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 459
of firmware. Table 98 Account/password characteristics matrix Topic 4.0.0 4.1.0 to 4.2.0 4.4.0 and later Number of default accounts on the switch Default account names 4, chassis-based root, factory, admin, user Core Switch 2/64 8 for the director, 4 per switch. All other switches and - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 460
be completed for any change to take effect? When does the password prompt appear? Is a user forced to answer password prompts before getting access to the firmware? No. Partial changes of all four passwords are allowed. When users connect as root, factory, or admin, the accounts with default - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 461
, what is the password recovery mechanism? Are these procedures non-disruptive recovery procedures? Contact HP. A non-disruptive procedure is available. Contact HP. A non-disruptive procedure is available. If a user has only the root password, what is the password recovery mechanism? Root can - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 462
462 Understanding legacy password behaviour - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 463
on HP supported interop configurations, refer to the HP StorageWorks Fabric interoperability: merging fabrics based on C-Series and B-Series Fibre Channel switches on the following HP website: http://h18000.www1.hp.com/products/storageworks/san/documentation.html Fabric OS 6.1.x administrator guide - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 464
464 Interoperating with an M-EOS fabric - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 465
to a 400 MP Router This section describes how to upgrade routers in your fabric with the least disruption, while provided to integrate the 400 MP Router in a fabric with the HP StorageWorks Multi-protocol Router. The figures in the following pages demonstrate how OS 6.1.x administrator guide 465 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 466
. Figure 55 Configuration during the upgrade The switch Domain ID and BB fabric ID of the new FC router can be identical. Once the metaSAN is stable, EX_Ports on the new router are ' - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 467
the upgrade process, these devices will face disruption unless there is redundancy support provided from the device end. 400 MP Router allows the end devices command, if they are not default. 7. You may choose to manually configure the xlate Domain IDs on the new router, to match with old - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 468
468 Migrating from an MP Router to a 400 MP Router - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 469
• Fibre Channel over DWDM Most of these gateway devices have enough buffers to cover data transfer over a wide area network (WAN). The HP StorageWorks switches on each side of the gateway must have identical configurations. Only qualified SFPs should be used. Fabric OS 6.1.x administrator guide 469 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 470
gateway vendor for supported and qualified configurations. • R_A_TOV: Specify a Resource Allocation Timeout Value compatible with your gateway device. • E_D_TOV: Specify an Error Detect Timeout Value compatible with your gateway device. • Data field size: Specify the maximum Fibre Channel data field - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 471
Long Distance Fabric: (0..1) [0] BB credit: (1..16) [16] Virtual Channel parameters (yes, y, no, n): [no] Zoning Operation parameters (yes, services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] Committing configuration...done. switch:admin> Fabric OS 6.1.x administrator guide - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 472
472 Using Remote Switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 473
defined:cfg1 zone1: ali1; ali2 effective: cfg1 defined: cfg1 zone1: ali1; ali2 effective: cfg1 Switch A will absorb the configuration from the fabric, with cfg1 as the effective configuration. Clean merge : ali1; ali2 cfg2: zone2: ali3; ali4 effective: none Fabric OS 6.1.x administrator guide 475 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 474
A does not have Traffic Isolation (TI) zones. Switch B has TI zones. Switch A has TI zones. Switch B has identical TI zones. defined: cfg1 defined: cfg1 TI_zone1 Switch A has a TI zone. defined: cfg1 Switch B has a different TI zone. TI_zone1 Switch B defined: cfg1 zone1: ali1; ali2 effective - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 475
Switch A Different default zone access mode settings. defzone: noaccess Switch takes precedence and defzone configuration from Switch A propagates to fabric. defzone: Switch B propagates to fabric. Fabric segments because Switch A has a hidden zone configuration (no access) activated and Switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 476
478 Zone merging scenarios - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 477
62 password rules 62 recovering 62 user-defined 59 activating Admin Domains 162 certificates 96 POD 40 policy 115 policy changes 115 ports on demand 39 AD0 154, 260 AD255 155 adding a new switch or fabric to a zone 219 Admin Domain members 163 alias members 204 and removing FICON CUP licenses 427 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 478
user names 268 blade FC4-16IP 272 configuring 257 port numbering 257 boot password 81, 82, 84 boot PROM password 81 broadcast zones 202 Brocade Vendor-Specific Attribute 69 browser and Java support 93 browser, configuration 96 browsers support 47 checking connected switches 176 status 46 choosing - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 479
manual 266 discovery domain set access control, manual 266 discovery domain sets 266 discovery domains 266 FC4-16IP blade 257 FibreAlliance MIB 98 FICON environment switches for 418 gigabit Ethernet 259 HTTPS access 93 IAS 73 IAS user 20 text symbols 20 Fabric OS 6.1.x administrator guide 481 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 480
165 alias 205 end-to-end monitors 334 filter-based brocade 71 disabled zone configuration 197 disabling 44 port 44 RADIUS configuration 80 switch 44 disabling and enabling a port 44 disabling and enabling a switch insistent 415 domain, phantom 299 downloading configurations across a fabric 148 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 481
fddCfg command 302 feature licenses 34 Fibre Channel NAT 299 Fibre Channel over IP 303, 377 Fibre Channel routing 295 FICON environment firmware download 174 fosConfig disable isnsc 277 enable 255, 258 enable isnsc 256, 276 show 258, 276, 277 fosConfig command 303 frame transfer with remote switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 482
support 21 HP/UX procedure 454 HTTP 96 HTTPS 93, 96 certificates, security 88 hybrid update 451 I IAS configuring users 73 remote access policies 74 IAS (Internet Authentication Service), configuring 73 ID, account 24 identifying ports from the tag field 428 Identifying ports by slot and port number - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 483
iSNS (Internet Storage Name Service) 266 iSNS server 266 isnscCfg clear 278 reregister 277 set 256, 277 show 277 J Java support, SSL 93 Java version 93 K key transaction, for licensed features 34 keys purchasing 39 L legacy FCR switches 325 license ID 34 license key activating 35 licenseadd command - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 484
26 PROM 81, 82, 84 recovery 84 recovery string 82 rules 62 set PROM 82, 83 password expiration policy 65 password management information 459 password migration during firmware changes 461 password policies 63 password prompting behaviors 460 password recovery options 461 password strength policy 64 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 485
ID 224 identifying by slot and port number 224 ports, swapping 422 portShow arp 260 ipif 259 iproute 260 powering off a card 227 powering port cards on and off 227 preparing a switch 419 primary FCS 243 private key 94 PROM password 81, 82, 84 recovery string 82 set password 82, 83 protocol address - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 486
and tunneling 380 Brocade MIB 98 browsers 93 HP 22 summary of PID formats 445 summary of SSL procedures 93 support FC router 114 Java version 93 SNMPv3 and v1 98 Supported Services 125 supportSave command 328 supportShow command 328 swapping port area IDs 456 swapping ports 422 SW-EXTTRAP 98 switch - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 487
key 34 traps MIB 98 SNMP 98 troubleshooting 428 trunking displaying information 364 trunking over extended fabrics 365 tsclockserver 31, 32 tsTimeZone 30, 31 tunneling and security 380 U upgrading switches 178 USB 183 user databases 63 user, local disabling 61 enabling 61 userConfig command - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 488
a configuration 214 resolving conflicts 221 saved zone configuration 196 schemes 196 soft-zoning 194 splitting a fabric 221 storage-based 194 troubleshooting 221 types 194 viewing 208 viewing configurations 216 zone configuration adding members 213 zone, broadcast 202 zoneCreate 256, 275 zoning and - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 489
49 Cascaded configuration, three switches 420 50 FR4-18i Port Numbering 434 51 400 MP Router Port Numbering 434 52 allow/prohibit example 436 53 Cross-coupled configuration 436 54 Non-redundant router configuration 465 55 Configuration during the upgrade 465 56 Redundant router configuration - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 490
57 Dual backbone fabric configuration 466 - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 491
149 47 AD user types 154 48 Ports and devices in CLI output 167 49 Admin Domain interaction with Fabric OS features 169 50 Configuration upload and download scenarios in an AD context 171 51 Effects of firmware changes on accounts and passwords 174 52 Recommended firmware 176 53 Types - HP StorageWorks 8/40 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 492
and firmware compatibility for nonsecure fabrics 326 72 Types of monitors supported on B-Series switch models 329 73 Advanced Performance Monitoring commands 332 74 Commands to add filter-based monitors 335 75 Predefined values at offset 0 337 76 Fibre Channel data frames 348 77 Switch, port
HP StorageWorks
Fabric OS 6.1.x administrator guide
Part number: 5697-0234
November 2009