HP StorageWorks 8/8 HP StorageWorks Fabric OS 6.2 administrator guide (5697-00
HP StorageWorks 8/8 - SAN Switch Manual
View all HP StorageWorks 8/8 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP StorageWorks 8/8 manual content summary:
- HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 1
HP StorageWorks Fabric OS 6.2 administrator guide Part number: 5697-0016 Edition: May 2009 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 2
Company, L.P. © Copyright 2009 Brocade Communications Systems, Incorporated. Hewlett-Packard HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP guide - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 3
About this guide 25 Supported Fabric OS 6.2.x HP StorageWorks hardware 25 Intended audience 26 Related documentation 26 Document conventions and symbols 26 Rack stability 27 HP technical support 27 Customer self repair 27 Product warranties 27 Subscription service 28 HP websites 28 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 4
Firmware upgrade and downgrade consideration 46 Configupload and download considerations 46 Expired licenses 46 Viewing installed licenses 46 Activating a license 46 Adding a licensed feature 47 Removing a licensed feature 48 Ports on Demand 49 Activating - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 5
policy 78 Denial of service implications 78 The boot RADIUS or LDAP service on Fabric OS support with Linux 88 Adding the Brocade attribute to the server 89 Creating the user 89 Enabling clients 90 Configuring RADIUS server support service 97 Configuring local authentication as backup 98 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 6
Secure file copy 100 Setting up SCP for configUploads and downloads 100 Simple Network Management Protocol 101 SNMP and Virtual Fabrics 102 the switch 107 Secure Sockets Layer protocol 108 Browser and Java support 108 SSL configuration overview 108 Certificate authorities 109 Generating a - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 7
127 E_Port authentication 129 Device authentication policy 130 AUTH policy restrictions 131 Supported HBAs 131 Authentication protocols 131 Viewing the current authentication parameter settings for 148 Block ciphers 149 HMAC 149 3DES 149 Blowfish 149 Fabric OS 6.2 administrator guide 7 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 8
151 Example of an End-to-End Transport Tunnel mode 153 FIPS support 154 Zeroization functions 154 Power-on self tests 155 Conditional Tests 155 167 Configuration download without disabling a switch 168 Restoring a configuration 168 Configurations across a fabric 170 Downloading a - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 9
Supported platforms for Virtual Fabrics 181 Supported port configurations in the HP StorageWorks 8/40 SAN Switch and HP StorageWorks 8/80 SAN Switch 181 Supported port configurations in the HP StorageWorks DC SAN Backbone Director and HP and merging 198 Firmware upgrade considerations 199 guide 9 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 10
-class platforms (including blades 220 Firmware download from a USB device 224 Enabling USB 224 Viewing the USB file system 224 Downloading the 6.2.0 image using the relative path 225 Downloading the 6.2.0 image using the absolute path 225 FIPS Support 225 Public and Private Key Management - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 11
SAN Director 48 Port 4Gb Blade and HP StorageWorks SAN Director 48 Port 8Gb FC Blade enabling exceptions 275 Blade terminology and compatibility 275 CP blades 277 Core blades 278 Port and application blade compatibility 278 Displaying slot information 279 Fabric OS 6.2 administrator guide 11 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 12
discovery 298 Disabling topology discovery 299 14iSCSI gateway service 301 iSCSI gateway service overview 301 iSCSI session translation 301 Basic vs. connection redirection status 306 Supported iSCSI initiators 306 Checklist for configuring iSCSI 306 HP StorageWorks B-Series iSCSI Director - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 13
Enabling the iSCSI gateway service 309 Enabling GbE ports 310 Configuring the GbE interface 311 iSCSI Virtual Target Configuration 312 Automatic iSCSI VT creation 312 Generating iSCSI VTs for every FC target 312 Generating an iSCSI VT for a specific FC target 315 Manual iSCSI VT creation 315 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 14
for traffic prioritization 365 Setting traffic prioritization 365 17Using the FC-FC routing service 367 FC-FC routing service overview 367 Supported platforms for Fibre Channel routing 367 Supported configurations 367 Integrated Routing 368 Fibre Channel routing concepts 368 Proxy devices - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 15
monitors 417 Displaying top talking flows for a given domain ID (fabric mode 417 Limitations of Top Talker monitors 417 Trunk monitoring 418 Fabric OS 6.2 administrator guide 15 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 16
Determining how many ports can be used for long distance 425 Example: Consider the HP StorageWorks 8/8 and 8/24 SAN Switches, which have a single 24-port port group 430 Configuring F_Port buffer credits 430 Configuring ports to support long distance 430 Enabling long distance when connecting to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 17
Traffic shaping 458 FCIP services license 458 Platforms that support SAN extension over IP 458 QoS implementation over FCIP 459 DSCP quality of service 459 L2CoS quality of service 459 When both DSCP performance characteristics 488 WAN tool analysis 488 Fabric OS 6.2 administrator guide 17 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 18
mode enabled 509 Downloading configuration files with Active=Saved mode disabled 509 Configuration information record 509 Sample IOCP configuration file 510 23Configuring and monitoring FICON Extension Services 513 FICON extension products licensing 513 Platforms that support FICON extension - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 19
PID format changes 530 Basic procedure for changing the PID format 531 HP-UX procedure for changing the PID format 532 AIX procedure for changing 537 Password prompting behaviors 538 Password migration during firmware changes 539 Password recovery options 539 C Mixed administrator guide 19 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 20
routes 550 FIPS 551 Examples of supported configurations 551 Configuring a Management Station 2000 VSA configuration 86 2 Example of a Brocade DCT file 92 3 Example of the dictiona. example 305 39 HP StorageWorks B-Series iSCSI Director Blade ports 309 40 iSCSI gateway service in an iSCSI - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 21
Switch in Access Gateway mode with F_Port masterless trunking 445 77 Trunk group configuration for the HP StorageWorks 8/40 SAN Switch 449 78 Network using FCIP 458 79 Single tunnel, Fastwrite class operands 63 7 Daemons that are automatically restarted 66 Fabric OS 6.2 administrator guide 21 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 22
roles 85 15 Dictionary.brocade file entries 86 16 Secure protocol support 99 17 Items needed 123 30 SCC policy states 125 31 Supported services 137 32 Implicit IP Filter rules 137 54 Configuration upload and download scenarios in an AD context 212 55 Effects of firmware changes on accounts and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 23
of monitors supported on HP StorageWorks switch models 405 79 Number of Logical Switches that support performance monitors Supported Distances 428 84 long-distance mode definitions 441 85 Trunking support for HP StorageWorks SAN Switch 4/32 and HP during firmware upgrade/downgrade 539 106 Password - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 24
24 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 25
About this guide This guide provides information about: • Installing and configuring Fabric OS 6.2.x • Managing user accounts • Using licensed features Supported Fabric OS 6.2.x HP StorageWorks hardware Table 1 lists Brocade and HP StorageWorks product models supported by Fabric OS 6.2.x. =Table 1 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 26
The following documents provide related information: • HP StorageWorks Fabric OS 6.1.x release notes • Web Tools administrator's guide You can find these documents from the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals In the Storage section, click Storage - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 27
information or specific instructions. NOTE: Provides jacks to the floor. • Ensure that the full weight of the rack rests on the leveling jacks. • Install HP technical support For worldwide technical support information, see the HP support website: http://www.hp.com/support/ Before contacting HP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 28
enhancements, new driver versions, firmware updates, and other product resources. HP websites For additional product information, see the following HP websites: • http://www.hp.com • http://www.hp.com/go/storage • http://www.hp.com/support/manuals Documentation feedback HP welcomes your feedback - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 29
supported by HP, documenting all possible configurations and scenarios is beyond the scope of this document. In some cases, earlier releases are highlighted to present considerations for interoperating with them. The hardware reference manuals command examples in this guide show user input enclosed - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 30
can use Web Tools to perform a fast boot. When the switch comes up, the Telnet quota is cleared. (For instructions on performing a fast boot with Web Tools, see the Web Tools Administrator's Guide.) • If you have the required privileges, you can connect through the serial port, log in as root, and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 31
IP address or setting the boot PROM password. • For the HP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director, and HP StorageWorks DC04 SAN Director Switch enterprise-class platforms, You can connect , see "Default accounts" on page 71. Fabric OS 6.2 administrator guide 31 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 32
StorageWorks 4/8 and 4/16 SAN Switch, HP StorageWorks 8/8 and 8/24 SAN Switch, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, HP StorageWorks 4/32 SAN Switch, HP StorageWorks 4/64 SAN Switch, HP StorageWorks 4/32B SAN Switch, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 33
. In a Virtual Fabric, the IPFC network interface is associated with the chassis and can be assigned its own IPv4 and IPv6 address. Fabric OS 6.2 administrator guide 33 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 34
Displaying the network interface settings If an IP address has not been assigned to the network interface (Ethernet), you must connect to the Fabric OS CLI using a console session on the serial port. For more information, see "Console sessions using the serial port" on page 31. Otherwise, connect - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 35
DC SAN Backbone Director, and HP StorageWorks DC04 SAN Director Switch enterprise-class platforms do not support DHCP. The Fabric OS DHCP client supports the following parameters: • External Ethernet port IP addresses and subnet masks • Default gateway IP address Fabric OS 6.2 administrator guide 35 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 36
the Discovers and Requests are coming from an HP switch. The vendor class identifier is the string "BROCADE" followed by the SWBD model number of are not affected by DHCP; see "Static Ethernet addresses" on page 35 for instructions on setting the FC IP address. 1. Connect to the switch and log in - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 37
upgrades or downgrades between versions of Fabric OS that support autoconfiguration, the enabled state of IPv6 autoconfiguration is not the date and time are used for logging, error detection, and troubleshooting, you should set them correctly. In a Virtual Fabric there can 6.2 administrator guide 37 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 38
OS Administrator's Guide for detailed information about setting time zones using the offset format. See "Firmware download process overview" you to keep the time zone setup at the default setting. • System services that have already started reflect the time zone changes only after the next reboot - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 39
to list all of the time zones supported by the firmware. • Use timeZone_fmt to set the the time in your SAN current, HP recommends that the principal or primary out of sync in the Logical Fabric. HP does not recommend LOCL in the server because IPv6 is supported for Fabric OS version 5.3.0 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 40
by platform names; if you assign meaningful platform names, logs are more useful. All chassis names have a limit of 15 characters except for the HP StorageWorks 8/8, 8/24, 8/40, and 8/80 SAN Switches, which is 31. Chassis names must begin with a letter, and can contain letters, numbers, or the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 41
IDs are assigned dynamically when a switch is enabled, you can change them manually so that you can control the ID number or resolve a domain ID conflict a Domain ID not used within the fabric. The default domain ID for HP B-Series switches is 1. IMPORTANT: Do not use domain ID 0. The use guide 41 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 42
Fabric information is displayed, including the domain ID (D_ID). switch:admin> fabricshow Switch ID Worldwide Name Enet IP Addr FC IP Addr Name 2: fffc02 10:00:00:60:69:e0:01:46 10.32.220.1 0.0.0.0 "ras001" 3: fffc03 10:00:00:60:69:e0:01:47 10.32.220.2 0.0.0.0 "ras002" 5: fffc05 10:00 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 43
Fabric OS 5.2.0. Upgrading is allowed, but downgrading is not supported. If a license is not version-based, it is be installed Administrative Domains Configuration up/download No license required. n/a No FC-IP Services or High Performance Extension over FCIP/FC FC-IP Services or High guide 43 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 44
-Performance Extension over FCIP/FC Tunnel FIPS No license required. Firmware download No license required. Firmwaredownload is a command and comes with Adaptive Networking Integrated Routing ICL No license required. FC-IP Services or High Performance Extension over FCIP/FC LDAP Logical Fabric - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 45
should be installed Speed 8 Gb/s license needed to support 8 Gb/s on the HP StorageWorks 8/8 and 8/24 SAN Switch, HP StorageWorks 8/40 SAN Switch, and HP StorageWorks 8/80 SAN Switch only. This license is to their pre-licensed state maximum speed of 4 Gb/s. Fabric OS 6.2 administrator guide 45 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 46
, upon HA failover, the time-based license is no longer supported on the director or enterprise-class platform. You do not have firmware to Fabric OS 6.0.0 or earlier, the firmware downgrade is blocked. Configupload and download considerations The configDownload and configUpload commands download - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 47
key. The HP StorageWorks Software License Key instruction page opens: Brocade 7500 IFL 3. Enter the information in the required fields. 4. Follow the onscreen instructions feature, go to the feature's appropriate section in this manual. Enabling a feature on a switch may be a separate guide 47 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 48
license Performance Monitor license Trunking license Security license (not supported as of FOS 6.0) 4 Domain Fabric license FICON_CUP license 2 Domain Fabric license Integrated Routing license Storage Application Services license FICON Tape license FICON XRC license Adaptive Networking license - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 49
does not yet support full fabric access. The HP StorageWorks 4/32 SAN Switch and HP StorageWorks 4/32B SAN firmware. Its license key may be part of the licensed paperpack supplied with switch software, or you can purchase the license key separately from HP Manual. Fabric OS 6.2 administrator guide 49 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 50
is licensed. 3. Install the Ports on Demand license. For instructions on how to install a license, see "Adding a licensed feature Brocade 4Gb SAN Switch for HP c-Class BladeSystem and the Brocade 8Gb SAN Switch for HP BladeSystem c-Class switch modules are for bladed servers. These switches support - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 51
Example of manually assigned POD licenses: switch:admin> associations. The Dynamic POD feature is supported on the Brocade 4Gb SAN Switch for HP c-Class BladeSystem and Brocade 8Gb SAN Switch for HP BladeSystem c-Class switch modules only. 1. port (indicated by *) Fabric OS 6.2 administrator guide 51 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 52
Disabling Dynamic Ports on Demand Disabling the Dynamic POD feature changes the POD method to static and erases any prior port license associations or assignments the next time the switch is rebooted. 1. Connect to the switch and log in using an account assigned to the admin role. Enter the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 53
comes back online. Persistently disabling the port ensures that the port cannot come back online and be automatically assigned to a POD assignment. Fabric OS 6.2 administrator guide 53 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 54
After a port is assigned to the POD set, the port is licensed until it is manually removed from the POD port set using the licensePort --release command. When a port is released from its POD port set (Base, Single, or Double), it - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 55
HP StorageWorks SAN Switch 2/8V, HP StorageWorks SAN Switch 2/16V, HP StorageWorks SAN Switch 2/32, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, Brocade 8Gb SAN Switch for HP BladeSystem c-Class, HP . Fabric OS 6.2 administrator guide 55 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 56
contains switches running different firmware versions, you must the next one. Switch connection See the hardware user's guide of your specific switch for interswitch link (ISL) connection the Extended Fabrics licensed feature) are not supported through gateway links. Configuring a link through - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 57
HP StorageWorks SAN Switch 2/8V, HP StorageWorks SAN Switch 2/16V, HP StorageWorks SAN Switch 2/32, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, Brocade 8Gb SAN Switch for HP BladeSystem c-Class, HP blades. Fabric OS 6.2 administrator guide 57 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 58
4. Enter the slotShow -m command to display the inventory and the current status of each slot in the system. DCX:FID128:root> slotshow -m Slot Blade Type ID Model Name Status 1 SW BLADE 55 FC8-32 ENABLED 2 SW BLADE 51 FC8-48 ENABLED 3 SW BLADE 39 FC10-6 ENABLED 4 SW BLADE 51 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 59
2c0300 611000 6114e8 6114ef 611600 620800 621026 621036 6210e4 6210e8 6210ef 621400 621500 621700 621a00 75 Nx_Ports in the Fabric } switch:admin> Fabric OS 6.2 administrator guide 59 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 60
switch and log in using an account assigned to the admin role. 2. Enter the agShow command. switch:admin> agshow Worldwide Name Ports Enet IP Addr Firmware Local/Remote Name 10:00:00:05:1e:02:1d:b0 16 10.32.53.4 v6.1.0 local ag_01 10:00:00:05:1e:03:4b - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 61
4/32 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, Brocade 8Gb SAN Switch for HP BladeSystem c-Class, HP StorageWorks 4/32 SAN Switch, HP StorageWorks 4/64 SAN Switch, HP StorageWorks 4/32B Fabric OS 6.2 administrator guide 61 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 62
been changed For the HP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director v 6.0.0. These events include login failures, zone configuration changes, firmware downloads, and other configuration changes-in other words-critical changes that - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 63
of existing SNMP configuration parameters. Configuration uploads are not audited. 4 Firmware Audit firmware download start, firmware complete, and any other errors encountered during a firmware download. 5 Fabric Audit administrative domain-related changes. Only the active CP can generate - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 64
the system error log daemon, see the Fabric OS Troubleshooting and Diagnostics Guide. Audit logging assumes that your syslog is operational and running ). switch:admin> auditcfg --show Audit filter is enabled. 2-SECURITY 4-FIRMWARE 5. Verify the audit event log setup by making a change affecting an - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 65
enterprise-class platform shutdown To avoid corrupting your file system, HP recommends that you perform graceful shutdowns of switches and enterprise . Warm reboots see shutting down the appliance per the instructions below, also known as a graceful shutdown. Cold boots OS 6.2 administrator guide 65 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 66
:36:48 2008... The system is going down for system halt NOW !! 4. Power off the switch. High availability of daemon processes Fabric OS 6.0 supports automatic restart of non-critical daemons. Starting these non-critical daemons is automatic; you cannot configure the startup process. The following - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 67
factory, admin, and user-Fabric OS supports up to 252 additional user-defined accounts options for authenticating users-remote RADIUS services, remote LDAP service, and the local switch user user database. The local user database is manually synchronized using the distribute command to push guide 67 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 68
account using the userConfig command to add this permission to a user account. For clarity, this permission has been added to Table 8 which describes the Fabric OS predefined roles. Table 8 Fabric OS roles Role name Fabric OS version Duties Description Admin All BasicSwitchAdmin 5.2.0 and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 69
O Fabric Watch OM O OM OM N OM O N FICON OM O OM OM N OM O N Firmware Management OM O OM OM O OM O O FRU Management OM O OM OM N OM O N HA O N Physical Computer System O O O O O O O O PKI OM O O O OM O O N Fabric OS 6.2 administrator guide 69 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 70
Table 10 RBAC permissions matrix (continued) Category Role permission Admin Basic Switch Admin Fabric Admin Operator Security Switch Admin Admin Port Mirroring QOS RADIUS Reboot Routing-Advanced OM N N N OM OM OM OM OM N N N OM O OM OM OM O OM O N N O OM OM N OM OM - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 71
making the change. In addition to the default administrative and user accounts, Fabric OS supports up to 252 user-defined accounts in each Logical Switch (domain). These accounts ] [-h VF_ID | AD_ID] [-a AD_ID_list][-c chassis_role] [-d description] [-x] Fabric OS 6.2 administrator guide 71 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 72
where: username -r rolename -h logicalFabric_ID or adminDomain_ID -l logicalFabric_ID_list -a adminDomain_ID_list -d description -c chassis_role -x Specifies the account name, which must begin with an alphabetic character. The name can be from 8 to 40 characters long. It is case-sensitive and can - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 73
with Admin roles can change the password for another account. When changing an Admin account password, you must provide the current password. Fabric OS 6.2 administrator guide 73 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 74
Starting with Fabric OS 3.2.0, you cannot change default account names. For information on password behavior when you upgrade or downgrade firmware, see "Upgrading and downgrading firmware" on page 214. Changing the password for the current login account 1. Connect to the switch and log in using an - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 75
is enabled, distributing the password database to switches is not supported. If the distribution command is entered from a pre- unchanged after an HA failover. Password policies can also be manually distributed across the fabric (see "Local account database distribution" OS 6.2 administrator guide 75 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 76
• Uppercase Specifies the minimum number of uppercase alphabetic characters that must appear in the password. The default value is zero. The maximum value must be less than or equal to the MinLength value. • Digits Specifies the minimum number of numeric digits that must appear in the password. The - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 77
default and uses the same lockout threshold as the other roles. It can be automatically unlocked after the lockout duration passes or when it is manually unlocked by either a user account that has a securityAdmin or other Admin role. Fabric OS 6.2 administrator - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 78
incorrect password. Selected privileged accounts are exempted from the account lockout policy to prevent them from being locked out from a denial of service attack. However these privileged accounts may then become the target of password guessing attacks. Audit logs should be examined to monitor if - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 79
SAN Switch 4/32B, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks 400 Multi-Protocol Router, and HP StorageWorks EVA4400 embedded switch module, 8Gb Brocade. If your switch is not listed, please contact your switch support provider for instructions. 1. Connect to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 80
messages are displayed: Send the following string to Customer Support for password recovery: afHTpyLsDo1Pz0Pk5GzhIw== Enter the supplied recovery and 40 alphanumeric characters. HP recommends a random string of 15 characters or longer for higher security. The firmware prompts for this password - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 81
400 Multi-Protocol Router, and HP StorageWorks DC04 SAN Director. The password recovery instructions contained within this section are only for the switches listed. If your switch is not listed, contact your switch support provider for instructions. 1. Create a serial connection to the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 82
factory 4. Enter the requested information at the prompts. To recover a lost root password, contact your switch service provider. To recover a lost boot PROM password, contact your switch service provider. You must have previously set a recovery string to recover the boot PROM password. 82 Managing - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 83
supported services are disabled, so AAA services default to the switch local database. To enable RADIUS or LDAP service, HP download. You should configure at least two RADIUS servers so that if one fails, the other will assume service. You can set the configuration with both RADIUS or LDAP service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 84
connection problem, Web supported --authspec "radius;local" Authenticates management connections On On --backup against any RADIUS databases. If RADIUS fails because the service is not available, it then authenticates against the local user database. The --backup option directs the service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 85
the default roles available on a switch. RADIUS and LDAP support all the defined RBAC roles described in Table 8 on Brocade-AVPairs1 3 Brocade-AVPairs2 4 Brocade-AVPairs3 5 Brocade-AVPairs4 6 Brocade Password ExpiryDate 7 Brocade Password ExpiryWarning Fabric OS 6.2 administrator guide - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 86
role and other supported attribute values a Windows 2000 internet authentication service (IAS) server to use brocade file entries Include Key Value VENDOR Brocade 1588 ATTRIBUTE Brocade-Auth-Role Brocade-AVPairs1, 2, 3, 4 Brocade-Passwd-ExpiryDate Brocade-Passwd-WarnPeriod 1 string Brocade - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 87
" role, with AD member list: 1, 2, 4, 5, 6, 7, 8, 9, 12; the Home Admin Domain will be 1. user-za Auth-Type := Local, User-Password == "password" Brocade-Auth-Role = "ZoneAdmin", Brocade-AVPairs1 = "ADList=1,2,6," Brocade-AVPairs2 = "ADList=4-8;ADList=7,9,12" Fabric OS 6.2 administrator guide 87 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 88
and SecurityAdmin. Configuring RADIUS server support with Linux The following procedures work following web site: www.freeradius.org Follow the installation instructions at the web site. FreeRADIUS runs on Linux ( RADIUS service on Linux consists of the following tasks: • Adding the Brocade attribute - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 89
Auth-Role = "admin", Brocade-AVPairs1 = "HomeLF=70", Brocade-AVPairs2 = "LFRoleList=admin:2,4-8,70,80,128", Brocade-AVPairs3 = "ChassisRole=switchadmin", Brocade-Passwd-ExpiryDate = "11/10/2008", Brocade-Passwd-WarnPeriod = "30" When you use network information service (NIS) for authentication, the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 90
HP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director and HP RADIUS server support with Windows 2000 The instructions for setting service on Windows 2000 consists of the following steps: 1. Installing internet authentication service (IAS) For more information and instructions - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 91
dictionary = Brocade ignore-ports = no port-number-usage = per-port-type help-id = 2000 b. Create a brocade.dct (see Figure 2) file that needs to be added into the dictiona.dcm file located in the following path: C:\Program Files\RSA Security\RSA RADIUS\Service Fabric OS 6.2 administrator guide 91 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 92
type1=%t% len1=+2 data=%s%] ATTRIBUTE Brocade-Auth-Role ATTRIBUTE Brocade-Passwd-ExpiryDate ATTRIBUTE Brocade-Passwd-WarnPeriod Brocade-VSA(1,string) r Brocade-VSA(6,string) r Brocade-VSA(7,integer) r brocade.dct -- Brocade Dictionary Figure 2 Example of a Brocade DCT file 92 Managing user - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 93
dct @ascndvsa.dct @axc.dct @brocade.dct @bandwagn.dct @brocade.dct - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 94
the user to the group by adding the user to the group. For instructions on how to create a user see www.microsoft.com or Microsoft documentation. rest of the setup. For Windows 2003, this utility comes with Service Pack 1 or you can download this utility from the Microsoft web site. 2. Go to CN=Users - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 95
RADIUS or LDAP service. You can configure the RADIUS or LDAP service even if it service. NOTE: On dual-CP switches (HP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director and HP If RADIUS or LDAP service is not configured, are contacted to provide service. The server names or - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 96
LDAP server must be configured before you can enable the RADIUS or LDAP service. If no RADIUS or LDAP configuration exists, turning on the RADIUS the Fabric OS to any version earlier than 5.2.0. Previous versions do not support the radius;local mode. When the LDAP authentication mode is set to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 97
a server name or IPv4 address. Microsoft Active Directory does not support IPv6 addresses. Avoid duplicating server listings (that is, listing the domain. Changing the order in which RADIUS or LDAP servers are contacted for service 1. Connect to the switch and log in using an account assigned to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 98
that the switch can take over authentication locally if the RADIUS or LDAP servers fail to respond because of power outage or network problems. To enable or disable local authentication, enter the following command for RADIUS: switch:admin> aaaconfig --authspec "radius;local" --backup or, for LDAP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 99
Fabric OS 6.2 administrator guide 99 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 100
100 Managing user accounts - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 101
no longer supported in Fabric supports the secure protocols shown in Table 16. Table 16 Secure protocol support Tools supports the and download support the use of SCP. SNMP SSH SSL Supports SNMPv1 Supports SSLv3, 128-bit encryption by default. Fabric OS uses secure socket layer (SSL) to support - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 102
shell client No requirement on host side except a browser that supports HTTPS None Switch IP certificate for SSL SCP SNMPv1, SNMPv2, secure file copy (SCP) is used for configuration uploads and downloads. Setting up SCP for configUploads and downloads 1. Log in to the switch as admin. 2. Enter the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 103
no, n): [no] y Enforce secure config Upload/Download (yes, y, no, n): [no] y Enforce signature validation for firmware (yes, y, no, n): [no] Simple Network network. For details on Brocade MIB files, naming conventions, loading instructions, and information about using Brocade's SNMP agent, see the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 104
For information on the specific commands used in these procedures, see online help or the Fabric OS Command Reference. SNMP and Virtual Fabrics When an SNMPv3 request arrives with a particular username, it executes in the home-Virtual Fabric. From the SNMP manager all SNMPv3 requests must have a - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 105
's IP address in dot notation: [0.0.0.0] Trap Recipient's IP address in dot notation: [0.0.0.0] Trap Recipient's IP address in dot notation: [0.0.0.0] Committing configuration...done. Fabric OS 6.2 administrator guide 103 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 106
Example: accessControl configuration switch:admin> snmpconfig --set accessControl SNMP access list configuration: Access host subnet area in dot notation: [0.0.0.0] 192.168.0.0 Read/Write? (true, t, false, f): [true] Access host subnet area in dot notation: [0.0.0.0] 10.32.148.0 Read/Write? (true, - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 107
require a secure channel will be rejected. Fabric OS 6.1.0 supports SSH protocol 2.0 (ssh2). For more information on SSH, see SSH, The Secure Shell: The Definitive Guide by Daniel J. Barrett, Ph. D., Richard to establish secure connections without having to manually type in a password. RSA and DSA - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 108
Respond to the prompts as follows: IP address remote directory public key name login name password Enter the IP address of the switch. IPv6 is supported by sshUtil. Enter the path to the remote directory where the public key is stored. Enter the name of the public key. Enter the name - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 109
: ip address remote directory login name password Enter the IP address of the remote host. IPv6 is supported by sshUtil. Enter the path to the remote directory where the public key will be stored. Enter 4, "Configuring advanced security features" on page 117. Fabric OS 6.2 administrator guide 107 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 110
support (called "cipher strength") using the Internet Explorer Help:About menu option. If you are running an earlier version of Internet Explorer, you may be able to download on levels of browser and Java support, see the Web Tools Administrator's Guide. SSL configuration overview To configure for - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 111
you use different CAs, management services operate correctly, but the Web Generating new rsa public/private key pair Done. Because CA support for the 2048-bit key size is limited, you should Jose Organization Name (eg, company name):Brocade Organizational Unit Name (eg, department name): guide 109 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 112
FTP server to which the CSR is to be sent, and then enter your account name and password on the server. Obtaining certificates Check the instructions on the CA Web site; and then perform this procedure for each switch: 1. Generate and store the CSR as described in "Generating and storing a CSR - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 113
the instructions to import the certificate. Root certificates for the Java Plug-in This procedure is a guide for instructions, see the documentation that came with the certificate and to the Sun Microsystems Web site (www.sun.com). For information on Java requirements, see "Browser and Java support - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 114
RootCert.crt -keystore ..\lib\security\RootCerts Enter keystore password: changeit Owner: CN=Brocade, OU=Software, O=Brocade Communications, L=San Jose, ST=California, C=US Issuer: CN=Brocade, OU=Software, O=Brocade Communications, L=San Jose, ST=California, C=US Serial number: 0 Valid from: Thu Jan - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 115
used to implement supported features and HP StorageWorks 8/8 and 8/24 SAN Switches, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, Brocade 8Gb SAN Switch for HP BladeSystem c-Class, HP StorageWorks EVA4400 embedded switch module, 8Gb Brocade, HP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 116
Disabled Disabled Disabled Disabled Ports and applications used by switches If you are using the FC-FC Routing Service, be aware that the secModeEnable command is not supported in Fabric OS 6.0.0 and later. Table 22 lists the defaults for accessing hosts, devices, switches, and zones. Table - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 117
. Use the ipfilter command to block the port. 123 TCP NTP n/a 161 UDP SNMP Disable the SNMP service on the remote host if you do not use it, or filter incoming UDP packets going to this port Platform API. Use the configure command to disable this port. Fabric OS 6.2 administrator guide 115 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 118
116 Configuring standard security features - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 119
Control List (ACL) policies, authentication policies, and IP Filtering for HP's Fibre Channel switches. ACL policies overview Each supported Access Control List (ACL) policy listed below is identified by a contains a copy of all ACL policies on the switch. Fabric OS 6.2 administrator guide 117 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 120
can create multiple sessions to the switch from one or more hosts. HP recommends that you make changes only from one switch to prevent multiple between two or more of the DCC, FCS, and SCC policies. For instructions relating to a specific policy, see the appropriate section. • "Displaying ACL - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 121
the database within the fabric. Automatic distribution is supported, and you can either configure the switches in your fabric to accept the FCS policy or manually distribute the FCS policy. Changes made to the switches with a Fabric OS of 5.2.0 or later in the Fabric OS 6.2 administrator guide 119 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 122
fabric and not to pre-5.2.0 switches. Fabric OS 5.2.0 switches receive the distribution and will ignore the FCS database. FCS policy restrictions The backup FCS switches normally cannot modify the policy. However, if the Primary FCS switch in the policy list is not reachable, a backup FCS switch is - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 123
the current position in the list of the FCS switch and To is the desired position in the list for this switch. Fabric OS 6.2 administrator guide 121 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 124
Primary FCS switch is allowed to distribute the database. The FCS policy may need to be manually distributed across the fabric using the distribute -p command if there is no support for automatic distribution in a mixed environment with 5.3.0 and pre-5.3.0 switches. Since this policy is distributed - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 125
occurs. 5.2.0 switch (not configured as it does not support this) Target switch receives distribution but ignores FCS policy database information regarding DCC policies and F_Port trunking, see the Access Gateway Administrator's Guide. Each device port can be bound to one or more switch ports; - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 126
private-loop HBAs do not respond to port login from the switch and are not enforced by the DCC policy. This does not create a security problem because these HBAs cannot contact any device outside of their immediate loop. • DCC policies cannot manage or an iSCSI connection; that is, an FC Initiator - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 127
members All neighboring switches are segmented. Active policy that has members The neighboring switches not specified in the SCC policy are segmented. Fabric OS 6.2 administrator guide 125 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 128
as the reference and the logical ISL is formed if the SCC enforcement passes on the extended ISL. The following functionality changes: • A Logical Switch supports an SCC policy. You can configure and distribute an SCC policy on a Logical Switch. • SCC enforcement is performed on a ISL based on the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 129
, based on switch WWN and public key infrastructure (PKI) technology, to authenticate switches. Authentication automatically defaults to FCAP if both switches are Fabric OS 6.2 administrator guide 127 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 130
is set to activate authentication. The AUTH policy is distributed using the distribute command; automatic distribution of the AUTH policy is not supported. The default configuration directs the switch to attempt FCAP authentication first, DH-CHAP second. The switch may be configured to negotiate - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 131
initiate authentication. Authentication is not supported on logical ports . connecting switch does not support authentication or the policy connected to a switch which does not support authentication. Regardless of the policy, the support authentication or the AUTH policy is turned to the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 132
not support authentication. The switches with firmware pre-3.2.0 do not support FCAP policy is not supported because the device authentication requires manual interaction in setting by the switch. During this time, the Fibre Channel driver rejects all other ELS frames. The F_Port does not - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 133
group type. Supported HBAs The following HBAs support authentication: • Emulex LP11000 (Tested with Storport Miniport 2.0 windows driver) • Qlogic QLA2300 (Tested with Solaris 5.04 driver) Authentication protocols to specify which DH group you want to use. Fabric OS 6.2 administrator guide 131 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 134
• 00 for the DH Null option • 01 for the1024 bit key • 02 for the 1280 bit key • 03 for the 1536 bit key • 04 for the 2048 bit key This section illustrates using the authUtil command to display the current authentication parameters and to set the authentication protocol to DH-CHAP. Viewing the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 135
Fabric OS 3.x, enter secAuthSecret "--set". The command enters interactive mode and returns a description of itself and what input is needed. It then Fabric OS 6.2 administrator guide 133 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 136
policy The AUTH policy can be manually distributed to the fabric using the distribute command; there is no support for automatic distribution. To distribute the AUTH policy, see "Distributing the local ACL policies" on page 142 for instructions. Accept distributions configuration parameter Local - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 137
denies the traffic to go through the IP management interfaces according to the policy rules. Fabric OS supports multiple IP Filter policies, which are defined at the same time. Each IP Filter policy is identified using an account assigned to the admin role. Fabric OS 6.2 administrator guide 135 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 138
address or a group prefix. • Destination Port: The destination port number or name, such as: Telnet, SSH, HTTP, HTTPS. • Protocol: The protocol type. Supported types are TCP or UDP. • Action: The filtering action taken by this rule, either Permit or Deny. 136 Configuring advanced security features - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 139
be used instead of port number. Table 31 lists the supported service names and their corresponding port number. Table 31 Supported services Service name Port number http 443 rpcd 897 securerpcd 898 snmp 161 TCP Permit Any 1024-65535 UDP Permit Fabric OS 6.2 administrator guide 137 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 140
A switch with Fabric OS 5.3.0 or later will have a default IP Filter policy for IPv4 and IPv6. The default IP Filter policy cannot be deleted or changed. When an alternative IP Filter policy is activated, the default IP Filter policy becomes deactivated. Table 33 lists the rules of the default IP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 141
destination port number, or a range of port numbers, or a service name. Specifies the protocol type, either TCP or UDP. Specifies distributions The IP Filter policy is manually distributed using the distribute -p " Fabric Wide Consistent Policy is not supported in Fabric OS 6.2.0. See "Policy guide 139 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 142
the setting must be accept. For configuration instructions, see "Database distribution settings" on page and IPFILTER databases are blocked from distribution. • Manually distribute an ACL policy database: Run the distribute supported in Fabric OS 5.3.0 and later switches - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 143
Table 35 Supported policy distributed from other switches. Cannot distribute local database, manually or automatically, to other switches. A semicolon-separated received from other switches. Allows local database to be manually or automatically distributed to other switches. A semicolon-separated - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 144
"Fabric-wide enforcement" on page 142). If the fabric-wide consistency policy for a database is strict, the database cannot be manually distributed. When you set a strict fabric-wide consistency policy for a database, the distribution mechanism is automatically invoked whenever the database changes - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 145
routers cannot join a fabric with a strict fabric-wide consistency policy. FC routers do not support the fabric-wide consistency policies. Table 37 on page 143 describes the fabric-wide consistency to strict. The database ID is either SCC, DCC, or FCS. Fabric OS 6.2 administrator guide 143 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 146
The following example shows how to set a strict SCC and tolerant DCC fabric-wide consistency policy. switch:admin> fddcfg --fabwideset "SCC:S;DCC" switch:admin> fddcfg --showall Local Switch Configuration for all Databases:- DATABASE - Accept/Reject SCC - accept DCC - accept PWD - - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 147
Fails Ports are disabled. 1. To resolve the policy conflict, manually distribute the database you want to use to the switch with ports are disabled. Table 39 shows merges that are not supported. Table 39 Examples of strict fabric merges Fabric-wide consistency OS 6.2 administrator guide 145 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 148
in a chassis, nor does it support protection of traffic flows on FCIP interfaces : Prevents replay attack, a type of denial of service (DoS) attack where an attacker intercepts a series configure the key management protocol using an automatic or manual key. For more information on IPv4 and IPv6 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 149
referred to as a RoadWarrior configuration where a host on the internet requires access to a network through a security gateway that is protecting the network. Fabric OS 6.2 administrator guide 147 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 150
access to the secret key. To protect against denial of service attacks, the IPsec protocols use a sliding window. Each once it is created. Use the ipsecConfig --flush manual-sa command to remove all SA entries from the [AH, ESP] is the supported combination. Authentication and Encryption Algorithms - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 151
size of 128-bit and a key size of 128-, 192-, or 256-bit. AES is a substitution-permutation network (series of linked mathematical Fabric OS 6.2 administrator guide 149 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 152
determines the security services afforded to a management supports Internet Key Exchange or Manual key/ problem in the setup of secure communication: the authentication of the peers and the exchange of the symmetric keys. It then creates the security associations and populates the SADB. The manual - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 153
IKE peer or group of peers. The ipSecConfig command does not support manipulating pre-shared keys corresponding to the identity of the IKE peer Associations Manual Key Entry (MKE) provides the ability to manually add, delete, and flush SA entries in the SADB. Manual SA 6.2 administrator guide 151 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 154
two switches. b. Verify that IP traffic is encapsulated. c. Monitor IPsec SAs created using IKE for the above traffic flow: • Use the ipsecConfig --show manual-sa -a command with the operands specified to display the outbound and inbound SAs in kernel SADB. • Use the ipsecConfig --show policy ips sa - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 155
\ -d in -l 10.33.69.132 -r 10.33.74.13 -t transform TRANSFORM01 9. On BRCD7500, create equivalent traffic selectors for inbound and outbound traffic. Fabric OS 6.2 administrator guide 153 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 156
specified operands to display IKE policies. • Use the ipsecConfig --flush manual-sa command with the specified operands to flush the created SAs in This operation is disruptive to traffic on the tunnel. FIPS support Federal information processing standards (FIPS) specify the security standards to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 157
system log or are output to the local console. This includes logging both passing and failing results. See the Fabric OS Troubleshooting and Diagnostics Guide for recovery instructions if your system cannot get out of the conditional test mode. FIPS mode configuration By default, the switch comes up - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 158
Read-only operations SHA-1 Read and write operations MD5 and SHA-1 Signed firmware Mandatory firmware signature validation. Configupload/ download/supports ave/ firmwaredownload SCP only Optional firmware signature validation FTP and SCP IPsec Radius auth protocols Usage of AES-XCBC - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 159
: 3 Primary AAA Service: LDAP Secondary AAA Service: Switch database 2. Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS successfully Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration instructions in "LDAP configuration and Microsoft Active - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 160
support FIPS compliant TLS cipher suites on Microsoft's Active Directory server, allow the SCHANNEL settings listed in Table 45. See www.microsoft.com for instructions See www.microsoft.com for instructions. LDAP certificates for FIPS mode To utilize the LDAP services for FIPS between the switch and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 161
Directory server and CA certificate on the switch for using LDAP authentication. 4. Block Telnet, HTTP, and RPC. 5. Disable BootProm access. 6. Configure the switch for signed firmware. 7. Disable root access. 8. Enable FIPS. Fabric OS 6.2 administrator - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 162
--remove command. • If the switch is set for LDAP, see the instructions in "Setting up LDAP for FIPS mode" on page 157. 3. Optional: System services No cfgload attributes Yes Enforce secure config Upload/Download Press Enter to accept the default. Enforce firmware signature validation - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 163
Optional: Use the configure command to set switch to use non-signed firmware. By keeping the switch set to use signed firmware, all firmware downloaded to the switch will have to be signed with a key. securityAdmin role. 2. Enter the command fipsCfg --showall. Fabric OS 6.2 administrator guide 161 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 164
162 Configuring advanced security features - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 165
of standard configuration maintenance procedures, HP recommends that you back up all in system errors if an edited file is subsequently downloaded. Configuration file format In Fabric OS 6.2.0 the or more switch sections. If you upgrade the firmware on any existing switches from pre-Fabric OS 6.2.0 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 166
Example: Configuration file [Configuration upload Information] Configuration Format = 2.0 date = Thu Oct 9 21:22:25 2008 FOS version = v6.2.0.0 Number of LS = 2 [Chassis Configuration Begin] [fcRouting] [Chassis Configuration] [LicensesDB] [DMM_WWN] [Licenses] [Chassis Configuration End] date = Thu - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 167
• dnsConfig information • passwords If your FTP setup supports anonymous users, and you log in as an anonymous even though its value may be ignored by the FTP service. Before beginning, verify that you can reach the FTP mode 1. Verify that the FTP or SCP service is running on the host computer. 2. - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 168
anonymous user; in such cases, the value may be ignored by the FTP service. The following example shows configUpload run on a switch without Admin Domains: switch printer. Configuration file restoration Restoring a configuration involves overwriting the configuration on the switch by downloading - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 169
CAUTION: Make sure that the configuration file you are downloading is compatible with your switch model, because configuration files from other model switches or firmware versions might cause your switch to fail. If your setup supports anonymous users, and you log in as an anonymous user, password - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 170
. When you use the configDownload command, you are prompted to disable the switch only when necessary. Configuration download without disabling a switch is independent of the hardware platform and supported on all hardware platforms running Fabric OS 5.2.0 and later. IMPORTANT: In Fabric OS 6.2, the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 171
or specify -chassis for the chassis only, -fid to download a switch configuration data to a Logical Switch specified by its an anonymous user; in such cases, the value may be ignored by the FTP service. 6. At the Do you want to continue [y/n] prompt, enter y. 7. Wait OS 6.2 administrator guide 169 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 172
switch, enter the switchEnable command when the process is finished. NOTE: Because some configuration parameters require a reboot to take effect, after you download a configuration file you must reboot to be sure that the parameters are enabled. Before the reboot, this type of parameter is listed in - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 173
CAUTION: Do not download a configuration file from one switch to another switch that is a different model or firmware version, because it can cause the switch to fail. If you need to reset affected IPL file is not replaced, because active=saved mode is off. Fabric OS 6.2 administrator guide 171 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 174
(Table 46) as a hard copy reference for your configuration information. In the hardware reference manuals for the HP StorageWorks 4/256 SAN Director and HP StorageWorks DC SAN Backbone Director enterprise-class platform, there is a guide for FC port setting tables. The tables can be used to record - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 175
HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director • HP StorageWorks 8/80 SAN Switch • HP StorageWorks 8/40 SAN Switch For additional information about supported switches and port types, see "Supported 10 ports, labeled P0 through P9. Fabric OS 6.2 administrator guide 173 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 176
Before enabling Virtual Fabrics Physical chassis P0 P3 P6 P9 P1 P4 P7 P2 P5 P8 After enabling Virtual Fabrics Physical chassis Default logical switch P0 P3 P6 P9 P1 P4 P7 P2 P5 P8 Figure 8 Switch before and after enabling Virtual Fabrics After you enable Virtual Fabrics, you can create up to eight - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 177
after port assignment in Figure 11. • If you assign P2 to Logical switch 2, you cannot assign P2 to any other Logical Switch. Fabric OS 6.2 administrator guide 175 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 178
8. See "Adding and removing ports on a Logical Switch" on page 186 for instructions for assigning and moving ports on Logical Switch. A Logical Switch can have as ports cannot be moved from the default Logical Switch. See "Supported platforms for Virtual Fabrics" on page 181 for detailed information - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 179
14 Logical Switches connected to other Logical Switches through physical ISLs Figure 15 shows a logical representation of the configuration in Figure 14. Fabric OS 6.2 administrator guide 177 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 180
. • For FC-FC routing, legacy EX_Ports must be connected to the base switch and no other Logical Switch. • Base switches do not support direct device connectivity. A base switch can have only E_Ports, VE_Ports, EX_Ports, or VEX_Ports, but no F_Ports. • The base switch provides a common address - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 181
for XISL use" on page 187. NOTE: The default Logical Switch in the HP StorageWorks DC SAN Backbone Director or HP StorageWorks DC04 SAN Director cannot use XISLs. You can also connect Logical Switches using other Logical Switches travels only over the XISL. Fabric OS 6.2 administrator guide 179 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 182
Physical chassis 1 Logical switch 1 P1 (Default logical switch) Fabric ID 128 Logical switch 2 P2 Fabric ID 1 Logical switch 3 Fabric ID 15 P5 Base switch P6 Fabric ID 8 Logical ISL ISL Logical ISL Logical ISL XISL Physical chassis 2 P1 Logical switch 5 (Default logical switch) Fabric ID 128 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 183
applies to all Logical Switches, firmware upgrade, HA failover) • . The following sections explain these restrictions. Supported port configurations in the HP StorageWorks 8/40 SAN Switch and HP StorageWorks 8/80 SAN Switch There are no base Logical Switch. Fabric OS 6.2 administrator guide 181 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 184
HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director are not supported on all types of Logical Switches. The following is a list of which ports are supported upload and download A configdownload "Using the FC-FC routing service" on page 367 for more information - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 185
supported supported on each. Table 50 Maximum number of Logical Switches per chassis Platform Maximum number of Logical Switches HP StorageWorks DC SAN 8 Backbone Director HP StorageWorks DC04 SAN 8 Director HP StorageWorks 8/80 SAN 4 Switch HP HP StorageWorks DC SAN Backbone Director or the HP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 186
is enabled or disabled and then enables it. switch:admin> fosconfig --show FC Routing service: iSCSI service: iSNS client service: Virtual Fabric: disabled Service not supported on this Platform Service not supported on this Platform disabled switch:admin> fosconfig --enable vf WARNING: This is - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 187
FID128:admin> fosconfig --show FC Routing service: disabled iSCSI service: Service not supported on this Platform iSNS client service: Service not supported on this Platform Virtual Fabric: enabled this procedure, see the Fabric OS Command Reference. Fabric OS 6.2 administrator guide 185 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 188
is automatically disabled. Any performance monitors that were installed on the port are deleted. If monitors are required in the new Logical Switch, you must manually reinstall them on the port after the move. If the Logical Switch to which the port is moved has fabric mode Top Talkers enabled and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 189
role. 2. Set the context to the Logical Switch you want to manage, if you are not already in that context. setcontext fabricID Fabric OS 6.2 administrator guide 187 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 190
where fabricID is the fabric ID of the Logical Switch you want to switch to and manage. 3. Enter the switchshow command and check the Allow XISL Use parameter to verify whether the switch is configured to use XISLs: switch218:FID128:admin> switchshow switchName: switch218 switchType: 62.1 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 191
different from the FID in the base fabric. See "Creating a Logical Switch or base switch" on page 185 for instructions. For the example shown in Figure 19, you would create a Logical Switch with FID 1 and a Logical Switch to be part of a single Logical Fabric. Fabric OS 6.2 administrator guide 189 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 192
5. Enable all Logical Switches by entering the following command on each Logical Switch that you created in step 4 (the base switches are already enabled): switchenable The Logical Fabric is formed. The fabricShow command displays all Logical Switches configured with the same fabric ID as the local - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 193
site administrator to manage those resources. Admin Domains and Virtual Fabrics are mutually exclusive and are not supported at the same time on a switch. Do not confuse Admin Domains with zones: • Zones define (for dual-CP switches) and HA state is synchronized Fabric OS 6.2 administrator guide 191 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 194
Figure 20 shows a fabric with two Admin Domains: AD1 and AD2. AD1 AD2 Figure 20 Fabric with two Admin Domains Figure 21 shows how users get a filtered view of this fabric, depending on which Admin Domain they are in. As shown in Figure 21, users can see all switches and E_Ports in the fabric, - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 195
-capable firmware versions (that is, firmware versions the AD database; however, HP recommends that no more than instructions). • The fabric must be in the native operating mode. Admin Domains are not supported Chapter 17 "Using the FC-FC routing service" on page 367, for more information. guide 193 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 196
Table 51 lists each Admin Domain user type and describes its administrative access and capabilities. Table 51 AD user types User type Description Physical fabric administrator Administrative Domain user User account with admin role and with access to all Admin Domains (AD0 through AD255). Creates - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 197
to one Admin Domain at a time. You can later switch to a different Admin Domain (see "Switching to a different Admin Domain context" on page 208 for instructions). Fabric OS 6.2 administrator guide 195 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 198
• For default accounts such as admin and user, the home Admin Domain defaults to AD0 and cannot be changed. • The Admin Domain list for the default admin account is 0-255, which gives this account automatic access to any Admin Domain as soon as the domain is created, and makes this account a - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 199
that switch • Allows switch administrative operations such as disabling and enabling a switch, rebooting, and firmware downloads • Does not provide zoning rights for the switch ports or devices To allow devices to be are labeled with domain ID and switch WWNs. Fabric OS 6.2 administrator guide 197 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 200
WWNs Admin Domain compatibility, availability, and merging Admin Domains maintain continuity of service for Fabric OS features, and operate in mixed-release Fabric OS environments. High availability is supported with some backward compatibility. When an E_Port comes online, the adjacent switches - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 201
subfabrics These two subfabrics have different AD databases but the same root zone database. Firmware upgrade considerations The following scenario is for enterprise-class products only: If the primary display the ID of the current Admin Domain transaction. Fabric OS 6.2 administrator guide 199 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 202
See the Fabric OS Command Reference for detailed information about CLI syntax and options. Setting the default zone mode To begin implementing an Admin Domain structure within your SAN, you must first set the default zone mode to No Access. You must be in AD0 to change the default zone mode. 1. Log - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 203
See "Setting the default zone mode" on page 200 for instructions. 4. Switch to the AD255 context, if you are not "Administering advanced zoning" on page 233 for instructions. The following example creates Admin Domain AD1, 5.2.0 firmware. When you downgrade to pre-Fabric OS 5.2.0 firmware, the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 204
Creating a new user account for managing Admin Domains 1. Connect to the switch and log in as admin. 2. Enter the userConfig --add command using the -r option to set the role, the -a option to provide access to Admin Domains, and the -h option to specify the home Admin Domain. userconfig --add - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 205
fabric, enter ad --apply. All active user sessions associated with the Admin Domain are terminated. The deactivate option does not disable ports. Fabric OS 6.2 administrator guide 203 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 206
The following example deactivates Admin Domain AD_B4. switch:AD255:admin> ad --deactivate AD_B4 You are about to deactivate an AD. This operation will fail if an effective zone configuration exists in the AD Do you want to deactivate 'AD_B5' admin domain (yes, y, no, n): [no] y switch:AD255:admin> - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 207
fail if zone configuration exists in the AD Do you want to delete 'AD_B3' admin domain (yes, y, no, n): [no] y switch:AD255:admin> Fabric OS 6.2 administrator guide 205 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 208
. 1. Clear all individual AD zone databases, in separate transactions, before proceeding with this operation. See "Clearing all zone configurations" on page 258 for instructions. 2. Connect to the switch and log in as admin. 3. Switch to the AD255 context, if you are not already in that context. ad - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 209
Command Reference for more detailed information about command syntax and usage and to understand how existing commands behave in an AD context. Fabric OS 6.2 administrator guide 207 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 210
Executing a command in a different AD context You can execute a command in an Admin Domain that is different from your current AD context. The Admin Domain must be one that you can access. This option creates a new shell with the current user_id, switches to the specified Admin Domain, performs the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 211
the following applies: • There is no support for ACL configuration under each Administrative Domain. the current Admin Domain. FC-FC Routing Service • You can create LSAN zones as a imported device) specified in the LSAN zone. • To support legacy applications, WWNs are reported based on the AD - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 212
page 523. Admin Domains do not introduce any RSCN changes to devices or hosts. Virtual Fabrics and Admin Domains are mutually exclusive and are not supported at the same time on a switch. To use Admin Domains, you must first disable Virtual Fabrics; to use Virtual Fabrics, you must first delete all - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 213
instructions AD. Admin Domains support the default zone mode ), AD0 supports both allaccess fabric (AD255) and no support for zone database updates. In • With AD support, zoning updates are supported selectively at each service" on page 367 for information about LSAN zones. Fabric OS 6.2 administrator - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 214
Domain is also saved. Table 54 lists the sections in the configuration file and the Admin Domain contexts in which you can upload and download these sections. NOTE: You cannot use configDownload to restore a single Admin Domain. To restore a single Admin Domain, you must first delete all Admin - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 215
. CR4S-8 blades can be inserted only into slots 3 and 6 on the HP StorageWorks DC04 SAN Director Switch. NOTE: For more information on troubleshooting a firmware download, see the Fabric OS Troubleshooting and Diagnostics Guide. You can download Fabric OS to a director, which is a chassis; and to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 216
. If the firmware download process is interrupted by an unexpected reboot, the system will automatically repair and recover the secondary partition. You must wait for the recovery to complete before issuing another firmwareDownload command. The command supports both non-interactive and interactive - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 217
your switch support provider the information required to perform advanced troubleshooting. HP recommends that you perform a configUpload to back up the current configuration before you download firmware to a switch 0x, and then to 6.1.0x, and finally to 6.2.0x. Fabric OS 6.2 administrator guide 215 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 218
and included with any trouble reports. 5. Connect to the switch and log in to the switch as admin. Enter the supportSave command to retrieve all current core files prior to executing the firmware download. This helps to troubleshoot the firmware download process if a problem is encountered. If you - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 219
SAN Switch 4/32B, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks EVA4400 embedded switch module, 8Gb Brocade, Brocade 8Gb SAN Switch for HP BladeSystem c-Class, and HP StorageWorks 400 Multi-Protocol Router: • The Fabric OS downloads the firmware to the secondary - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 220
entire firmware download and commit process takes approximately 17 minutes. If there is a problem, wait for the time-out (30 minutes for network problems). Disrupting the process can render the switch inoperable and require you to seek help from your switch service provider. Upgrading firmware for - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 221
are not in sync, run the haSyncStart command. • If the problem persists, see the Fabric OS Troubleshooting and Diagnostics Guide. If the troubleshooting information fails to help resolve the issue, contact your switch service provider. NOTE: This section applies only when upgrading from 6.1.x to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 222
the process. The entire firmware download and commit process takes approximately 15 minutes. If there is a problem, wait for the time-out (30 minutes for network problems). Disrupting the process can render the switch inoperable and require you to seek help from your switch service provider. Do not - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 223
not synchronized, contact your switch service provider. 7. Enter the firmware download being performed on the CPs, but does not impact performance. Fibre Channel traffic is not disrupted during auto-leveling, but GbE traffic on AP blades may be affected. Fabric OS 6.2 administrator guide - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 224
NOTE: HP does not support the FA4-18 product. sw77:admin> firmwaredownload Type of Firmware (FOS, SAS, or any application) [FOS]: Server SSH sessions be restarted. Do you want to continue [Y]: y The firmware is being downloaded to the Standby CP. It may take up to 10 minutes Do you want - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 225
06 00:30:49 2008 Slot 7 (SAS): Firmware commit has completed. (Firmwaredownload has completed.) 11. Enter the firmwareShow command to display the new firmware versions. The following is an example of firmwareShow output on the HP StorageWorks 4/256 SAN Director. Fabric OS 6.2 administrator guide 223 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 226
from a USB device The HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch switches and the HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch support a firmware download from an HP StorageWorks B-Series 2G USB - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 227
admin>firmwaredownload -U v6.2.0 Downloading the 6.2.0 image using the absolute path 1. Log in to the switch as admin. 2. Enter the firmwareDownload command with the -U operand: admin>firmwaredownload -U /usb/usbstorage/brocade/firmware/v6.2.0 FIPS Support Federal information processing standards - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 228
packaged, installed, and run on your switch before downloading a signed firmware. When firmwareDownload installs a firmware file, it needs to validate the signature of firmware 1. Log in to the switch as admin. 2. Enter the configure command. 3. Respond to the prompts as follows: System Service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 229
Download: Select yes Enforce signed firmware download firmware RPM packages are installed during firmwareDownload, the MD5 checksums of the firmware 2. Obtain the firmware file from http://www.hp.com or switch support provider and store system after download [N]: y Firmware is being downloaded to the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 230
the original firmware. Test and restore firmware on enterprise-class platforms This procedure enables you to perform a firmware download on each not run mixed firmware levels on CPs. Testing different firmware versions on enterprise-class platforms 1. Connect to the HP StorageWorks enterprise-class - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 231
place. You are now ready to evaluate the new version of firmware. IMPORTANT: Stop! If you want to restore the firmware, stop here and skip ahead to step 12; otherwise, continue to step 10 to commit the firmware on both CPs, which completes the firmware download. Fabric OS 6.2 administrator guide 229 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 232
that the HA state is in sync. IMPORTANT: Stop! If you have completed step 11, you have committed the firmware on both CPs and you have completed the firmware download procedure. 12. Restore the firmware on the standby CP. In the current enterprise-class platform session for the standby CP, enter the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 233
that a device or switch cannot connect to the fabric and further troubleshooting is necessary. firmwareShow Displays the current firmware level on the switch. For HP StorageWorks Directors, this command displays the firmware loaded on both partitions (primary and secondary) for both CPs and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 234
232 Installing and maintaining firmware - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 235
running Fabric OS 6.1.0 or later do not require a license. Before you configure zones, you must install Brocade Advanced Zoning licenses on all Fabric OS 6.0.x or earlier switches in the fabric. If a Zoning license 26 Zoning example RAID Server3 Green zone Fabric OS 6.2 administrator guide 233 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 236
procedures, see the Fabric OS Command Reference or the online man page for each command. NOTE: The information in this chapter applies to Brocade Native mode only. For information about zoning in InteropMode 2 or 3, see Chapter 12, "Interoperability for merged SANs" on page 291. Zone types Table - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 237
a zone, such as a: • Physical port number or port index on the switch • Node World Wide Name (N-WWN) • Port World Wide Name (P-WWN) Fabric OS 6.2 administrator guide 235 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 238
. The purpose of the PROD configuration is to easily identify the configuration that can be implemented and provide the most generic services. If other configurations are used for specialized purposes, names such as BACKUP_A, RECOVERY_2, and TEST_18jun02 can be used. 236 Administering advanced - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 239
are in the same zone as the initiator. Devices that are not part of the zone are not returned as accessible devices. Fabric OS 6.2 administrator guide 237 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 240
Hardware-enforced zoning Hardware-enforced zoning means that each frame is checked by hardware (the ASIC) before it is delivered to a zone member and is discarded if there is a zone mismatch. When hardware-enforced zoning is active, the Fabric OS switch monitors the communications and blocks any - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 241
HP StorageWorks 8/8 and 8/24 SAN Switches, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, HP StorageWorks SAN Switch 4/32, HP StorageWorks 4/64 SAN Switch, HP StorageWorks SAN Switch 4/32B, HP fashion. Fabric OS 6.2 administrator guide 239 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 242
Port_Zone1 WWN_Zone1 Port_Zone2 Core Switch WWN_Zone2 Zone Boundaries Figure 28 Hardware-enforced overlapping zones 22.3b(13.3) Any zone using a mixed zoning scheme on the Fabric OS 2-Gb/s platform relies on name server authentication as well as hardware-assisted (ASIC) authentication. - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 243
from Web Tools to isolate any possible problems. This is especially useful as fabrics and acceptable. Ensuring that the HBA drivers are current can shorten the response time and administered from any switch in the fabric, although HP recommends that you use a switch running the latest guide 241 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 244
are described in "Zone creation and maintenance" on page 246. Supported switches for broadcast zones Broadcast zoning is enforced only for Fabric -fabric forwarding of broadcast frames to switches running older versions of firmware. Broadcast zones and Admin Domains Each Admin Domain can have only - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 245
context. See "Validating a zone" on page 249 for complete instructions. Broadcast zones and FC-FC routing If you create broadcast zones in rename any existing zones named broadcast before you upgrade. The firmware download fails if a pre-5.3.x switch has a zone with the name administrator guide 243 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 246
If a remote switch is running pre-5.3.0 firmware, the broadcast zone does not have any zone and are connected to a pre-5.3.0 switch. HP recommends that you validate the zone whenever zone configurations zone" on page 249 for complete instructions. Broadcast zones and default zoning The default - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 247
switches to indicate that the transaction was aborted. Removing members from an alias 1. Connect to the switch and log in as admin. Fabric OS 6.2 administrator guide 245 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 248
2. Enter the aliRemove command, using the following syntax: aliremove "aliasname", "member[; member...]" where: aliasname member The name of the zone alias A member or list of members to be removed from the alias. An alias member can be specified by one or more of the following methods: • A domain - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 249
configuration) is displayed. Zone creation and maintenance Reliable Commit Service (RCS) is a fabric-wide capability and is supported only if all switches in the fabric are running Fabric OS To create a broadcast zone, use the reserved name broadcast: Fabric OS 6.2 administrator guide 247 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 250
3. Enter the cfgSave command to save the change to the defined configuration: switch:admin> zonecreate "greenzone", "2,32; 2,33; 2,34; 4,4" switch:admin> zonecreate "bluezone", "21:00:00:20:37:0c:66:23; 4,3" switch:admin> zonecreate "broadcast", "1,2; 2,33; 2,34" switch:admin> cfgsave You are about - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 251
defined configuration 1. Connect to the switch and log in as admin. 2. Enter the zoneShow command, using the following syntax: zoneshow ["pattern"] [, mode] Fabric OS 6.2 administrator guide 249 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 252
1e:35:81:88* Invalid configuration * - Member does not exist The mode flag -m can be used to specify the zone database location. Supported mode flag values are: • 0 - zone database from the current transaction buffer • 1 - zone database stored from the persistent storage • 2 - currently effective - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 253
defZone --show command. NOTE: If you performed a firmware download of an older release, the current default zone access state will appear as it did prior to the download. For example, if the default zoning mode was No Access before the download, it will remain as No Access afterward - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 254
segmenting their own ends of the ISL, thereby preventing the new switch from joining the fabric. NOTE: Fabric OS 5.2.0 and later support a zoning database size of 1 MB. To support a 1 MB zoning database, the entire fabric must be upgraded to 5.2.0 or later. If any pre-5.2.0 switches are part of the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 255
Segment Join Fabric OS 5.2.0 or later Fibre Channel Router Segment Join Segment Join Join Join Segment Join XPath 7.3 Segment Segment Segment Segment Fabric OS 6.2 administrator guide 253 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 256
size of the configuration does not exceed the minimum size supported by all switches in the fabric. This is particularly important if and when you downgrade to a Fabric OS version that supports a smaller zone database than the current Fabric OS. In this scenario - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 257
configuration will not take effect until it is re-enabled. Do you want to save Defined zoning configuration only? (yes, y, no, n): [no] y Fabric OS 6.2 administrator guide 255 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 258
The cfgSave command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory. If a transaction is open on a different switch in the fabric when this command is run, the transaction on the other switch is automatically aborted. A message is displayed on the other - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 259
the cfgShow command to view zone configurations, all zone configuration information (both defined and effective) is displayed. If there is an outstanding Fabric OS 6.2 administrator guide 257 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 260
transaction, the newly edited zone configuration that has not yet been saved is displayed. If there are no outstanding transactions, the committed zone configuration is displayed. 1. Connect to the switch and log in as admin. 2. Enter the cfgShow command with no operands: switch:admin> cfgshow - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 261
-sensitive; blank spaces are ignored and the command works in any Admin Domain other than AD255. switch:admin> zone --copy Test1 US_Test1 Fabric OS 6.2 administrator guide 259 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 262
4. Enter the cfgShow command to verify that the new zone object is present. switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Purple_zone; Blue_zone switch:admin> cfgShow "US_Test1" cfg: US_Test1 Blue_zone 5. If you want the change preserved when the switch reboots, enter the cfgSave - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 263
also be uploaded to the host for archiving and it can be downloaded from the host to a switch in the fabric. See "Configuration file fabric. See "Clearing all zone configurations" on page 258 for instructions. Adding a new fabric that has no zone configuration information to administrator guide 261 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 264
Secure Fabric OS is enabled on one switch, it must be enabled on all switches in the fabric; however, Brocade Secure Fabric OS is not supported in Fabric OS 6.0.0 or later. • Default Zone: The switch being merged into the existing fabric should be configured with the same default zone mode as - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 265
mode, no merge operations occur. Brocade Advanced Zoning is configured on the ; see the Secure HP StorageWorks Fabric OS 6.2.x administrator guide for information about security fabrics are the same, the fabric's primary FCS server downloads the zoning database and security policy sets to each switch - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 266
Entering these commands causes a merge, making the fabric consistent with the correct configuration. Zone merging scenarios Table 66 provides information on merging zones and the expected results. Table 66 Zone merging scenarios Description Switch A Switch B Expected results Switch A has a - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 267
B propagates to fabric. Fabric segments because Switch A has a hidden zone configuration (no access) activated and Switch B has an explicit zone configuration activated. Fabric OS 6.2 administrator guide 265 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 268
266 Administering advanced zoning - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 269
HP StorageWorks 4/256 SAN Director, the HP StorageWorks DC SAN Backbone Director, and HP Services and Routing Services, iSCSI bridging, FCIP, storage virtualization, and encryption support. The HP AP blades. The HP StorageWorks DC04 SAN HP StorageWorks DC SAN Backbone Director (CORE8) and the HP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 270
top on the left set of ports and 16 through 31 from bottom to top on the right set of ports. • HP StorageWorkds 4/256 SAN Director 48 Port 4Gb blade • HP StorageWorks SAN Director 48 Port 8Gb FC blade Ports are numbered from 0 through 23 from bottom to top on the left - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 271
to be some way to ensure uniqueness. A number of fabric-wide databases supported by Fabric OS (including ZoneDB, the ACL DDC, and Admin Domain) allow port. IMPORTANT: The port area schema does not apply to the HP StorageWorks DC04 SAN Director Switch enterprise-class platform. If the PID guide 269 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 272
Table 68 Default index/area_ID core PID assignment with no port swap (continued) Port Slot on 1Idx/are blade a Slot 2Idx/are a Slot 3Idx/are a Slot 4Idx/are a Slot 7Idx/are a Slot 8Idx/are a Slot 9Idx/are a 45 269/133 285/149 301/165 317/181 333/197 349/213 365/229 44 268/132 284/148 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 273
the area_ID and index. Table 69 Default index/area_ID core PID assignment with no port swap for the HP StorageWorks DC04 SAN Director Switch Port on blade Slot Slot Slot Slot 1Idx/area 2Idx/area 7Idx/area 8Idx 28 28/28 92/92 156/156 220/220 Fabric OS 6.2 administrator guide 271 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 274
Table 69 Default index/area_ID core PID assignment with no port swap for the HP StorageWorks DC04 SAN Director Switch (continued) Port on blade Slot Slot Slot Slot 1Idx/area 2Idx/area 7Idx/area 8Idx/area 27 27/27 91/ - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 275
NOTE: In the HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch the core blades and CPs cannot be powered off from the CLI interface. You must manually diagnostics. When diagnostics are executed manually (from the Fabric OS command - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 276
Port 8Gb FC Blade • HP StorageWorks SAN Director 6 Port 10Gb FC Blade • HP StorageWorks B-Series iSCSI Director Blade • FS8-18 NOTE: The HP StorageWorks B-Series iSCSI Director Blade is not supported in either the HP StorageWorks DC SAN Backbone Director or HP StorageWorks DC04 SAN Director Switch - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 277
HP StorageWorks SAN Director 48 Port 8Gb FC Blade support only F_Ports and E_Ports. They do not support FL_Ports. Port swapping on an HP StorageWorkds 4/256 SAN Director 48 Port 4Gb Blade or HP CP and port blades are used (for example, the HP StorageWorks 4/256 SAN Director 16 Port 4Gb Blade). Table - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 278
StorageWorkds 4/256 SAN Director 48 Port 4Gb Blades do not support FL_Ports. A 16-port HP StorageWorks Platform Port Blade supporting 1, 2, 4, and 8 Gb/s port speeds. A 32-port HP StorageWorks Platform Port Blade supporting 1, 2, 4, and 8 Gb/s port speeds. This port blade is compatible only with the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 279
configuration option 5). An application blade that has 16 (1-, 2-, and 4-Gb/s) ports supporting Fibre Channel Application Services and 2-10/100/1000 BaseT Ethernet copper interfaces supporting blade management. HP Encryption Blade FC8-18 43 An application blade that provides high performance 32 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 280
secondary partition) maintains the same firmware version. For more information on maintaining firmware in your enterprise-class platform, see Chapter 8, "Installing and maintaining firmware" on page 213. Core blades The HP StorageWorks DC SAN Backbone Director supports two CORE8 core blades. This - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 281
(continued) Port blades HP StorageWorks 4/256 SAN Director (CP4) HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch B-Series Multi-Protocol Supported Router Blade Supported FS8-18 Supported Supported 1. Can coexist only with HP StorageWorks 4/256 SAN - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 282
detected. The reason code numbers displayed are used by Support personnel to assist with problem diagnosis. Review the system error logs for more to the same two HP StorageWorks DC SAN Backbone Directors or HP StorageWorks DC04 SAN Director Switch chassis. The HP StorageWorks DC04 SAN Director - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 283
LED is blinking yellow. For additional information about the LED status for blades and ports, see the relevant hardware document. When you connect two HP StorageWorks Backbones, the following features are supported: • 8 Gb/s speed • Trunking • Credit sharing • QoS Fabric OS 6.2 administrator - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 284
282 Configuring Enterprise-class platforms - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 285
is sent out, the switch notifies the others only when changes occur. HP recommends that no more than seven hops occur between any two switches. This and broadcast traffic are supported. Both Unicast Class 2 and 3 traffic are supported. Broadcast and multicast are supported in Class 3 only guide 283 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 286
and 8/24 SAN Switches • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch 4/32B • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks 400 Multi-Protocol Router • HP StorageWorks 4/256 SAN Director • HP StorageWorks DC SAN - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 287
with no parameters. aptpolicy The current policy is displayed, followed by the supported policies for the switch. In the following example, the current policy is exchange 21, "Configuring and monitoring FCIP extension services" on page 457 for details about VE_Ports. Fabric OS 6.2 administrator - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 288
reduction of the impact of slow devices on the overall switch performance HP recommends that the default AP Shared Link Policy be used for most environments by reducing the amount of traffic through the router. The two additional supported AP policies are: • AP Shared Link policy (default) • AP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 289
routes are not supported on the following: • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks 4/64 SAN Switch • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks 400 Multi-Protocol Router • HP StorageWorks 4/256 SAN Director • HP StorageWorks DC SAN - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 290
Instead, you can use the traffic isolation feature to create a dedicated path for interswitch traffic. See "Traffic Isolation Routing" on page 339 for information about this feature. Assigning a static route 1. Connect to the switch and log in as admin. 2. Enter the uRouteConfig command. - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 291
frames are either delivered in order or dropped. All HP B-series switches enable IOD by default to ensure frames are delivered in order, as not all HP destination devices can tolerate out-of-order frames. Forcing and log in as admin. 2. Enter the iodSet command. Fabric OS 6.2 administrator guide 289 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 292
290 Routing traffic - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 293
SANs For information on HP supported interop configurations, see the HP StorageWorks Fabric interoperability application notes for merging B-Series fabrics with fabrics based on C-Series and M-Series Fibre Channel switches on the following HP website: http://h18000.www1.hp.com/products/storageworks - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 294
292 Interoperability for merged SANs - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 295
HP support the MS platform service manual and see Chapter 1, "Performing basic configuration tasks" on page 29 and Appendix A, "Configuring the PID format" on page 523 for details. NOTE: The commands msplMgmtActivate and msplMgmtDeactivate are allowed only in AD0 and AD255. Platform services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 296
no] y Request to deactivate MS Platform Service in progress...... *Completed deactivating MS Platform Service in the fabric! switch:admin> Management server is Logical-Switch-capable. All management server features are supported within a Logical Switch. Displaying the management server ACL 1. - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 297
verifying that the WWN was added correctly, enter 0 at the prompt to end the session. 7. At the Update the FLASH? prompt, enter y. Fabric OS 6.2 administrator guide 295 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 298
8. Press Enter to update the nonvolatile memory and end the session. switch:admin> msconfigure 0 Done 1 Display the access list 2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 2 Port/Node WWN (in hex): [00:00:00:00:00:00:00:00] 20:00: - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 299
management server database 1. Connect to the switch and log in using an account assigned to the admin role. 2. Enter the msPlatShow command. Fabric OS 6.2 administrator guide 297 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 300
locally. 3. Enter the mstdEnable all command to enable the discovery feature on the entire fabric. switch:admin> mstdenable Request to enable MS Topology Discovery Service in progress.... *MS Topology Discovery enabled locally. switch:admin> mstdenable ALL Request to enable MS Topology Discovery - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 301
(yes, y, no, n): [no] y Request to disable MS Topology Discovery Service in progress.... *MS Topology Discovery disabled locally. switch:admin> mstddisable all This no, n): [no] y Request to disable MS Topology Discovery Service in progress.... *MS Topology Discovery disabled locally. *MS Topology - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 302
300 Configuring the Distributed Management Server - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 303
overview This chapter describes the HP StorageWorks B-Series iSCSI Director Blade gateway service. The iSCSI gateway service is supported only on the HP StorageWorks 4/256 SAN Director running Fabric OS 5.2.0 or later with one or more iSCSI-enabled HP StorageWorks B-Series iSCSI Director Blade - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 304
. Figure 34 shows the interaction of different layers from the iSCSI initiator stack to the FC target stack, including the iSCSI gateway service used during protocol translation. A pplic a tion SCSI iS C S I T C P /IP iS C S I initiator iS C S I T C P /IP iS C S I virtual target (V T ) FC P (FC - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 305
a fixed prefix. The default prefix is iqn.2002-12.com.brocade. The Brocade iSCSI gateway service supports IQN only to identify the iSCSI components, such as the iSCSI the following example: Type Date Auth User defined iqn.2002-12.com.brocade:10:00:00:05:1e:aa:bb:cc A Microsoft-created IQN - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 306
may be used to identify companies or organizations (for example, HP, Microsoft, and so forth). Your organization may suggest or prefix. switch:admin>iscsiswcfg --modifygw -t iqn.2007-10.com.brocade The operation completed successfully 3. Enter the iscsiSwCfg --showgw command to iSCSI gateway service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 307
The iSCSI gateway service supports the following three . NOTE: iSCSI gateway service does not support IPSec. Load balancing through use the iscsiSwCfg --enableconn command. For HP StorageWorks 4/256 SAN Directors, the -s - -disableconn command. For the HP StorageWorks 4/256 SAN Director, the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 308
HBAs • Alacritech SES2002XT • Qlogic 4050c Checklist for configuring iSCSI After you install the HP StorageWorks B-Series iSCSI Director Blade in the HP StorageWorks 4/256 SAN Director (see the Brocade FC4-16IP Hardware Reference Manual), you configure the iSCSI gateway 306 iSCSI gateway service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 309
for the HP fosConfig - -enable iscsi StorageWorks B-Series iSCSI Director Blade. "Enabling the iSCSI gateway service" on page 5 (Advanced) Create iSCSI virtual target. iscsiCfg - -create tgt -t "Manual iSCSI VT creation" on page 315 6 Add LUNs to the virtual iscsiCfg - guide 307 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 310
described in the Brocade FC4-16IP Hardware Reference Manual before performing these procedures. NOTE: Only the HP StorageWorks 4/256 SAN Director with an iSCSI-enabled HP StorageWorks B-Series iSCSI Director Blade running Fabric OS 5.2.0 or later supports the iSCSI gateway service. NOTE: You can - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 311
the iSCSI gateway service on the HP StorageWorks 4/256 SAN service. switch:admin> fosconfig --enable iscsi iSCSI service is enabled 4. Verify that the iSCSI gateway service is enabled. switch:admin> fosconfig --show FC Routing service:disabled iSCSI service:enabled Fabric OS 6.2 administrator guide - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 312
4/256 SAN Director. However, if you insert the HP StorageWorks B-Series iSCSI Director Blade into a slot that was previously occupied by an FR-18i blade, GbE ports are disabled. Before enabling the physical iSCSI interface, enable the iSCSI gateway service as described in "Enabling the iSCSI gateway - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 313
parameters of a GbE port even when iSCSI gateway service is disabled. Address resolution protocol (ARP) entries for is the standard maximum packet size in an IP network. If your network supports jumbo packets, a value of 8256 can improve performance. The range allowed is 6.2 administrator guide 311 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 314
See the Web Tools Administrator's Guide for descriptions of GUI-based configuration . iSCSI VTs can be automatically generated or manually created. After mapping iSCSI targets do not IQNs are created. The default value of iqn.2002-12.com.brocade, is used for the prefix unless it has been changed by - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 315
00:06:2b:0d:10:ba iqn.2002-12.com.brocade:2e:1f:00:06:2b:0d:10:ba Succeeded Operation 10 brocade:2e:3f:00:06:2b:0d:10:ba Succeeded Operation 11 2e:5f:00:06:2b:0d:10:ba iqn.2002-12.com.brocade brocade:2f:7f:00:06:2b:0d:10:ba Succeeded Operation 21 2f:9f:00:06:2b:0d:10:ba iqn.2002-12.com.brocade - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 316
-12.com.brocade:2f:ff:00 brocade:2e:1f:00:06:2b:0d:10:ba Online/Defined Name: State/Status: iqn.2002-12.com.brocade :2e:3f:00:06:2b:0d:10:ba Online/Defined Name: State/Status: iqn.2002-12.com.brocade :2e:5f:00:06:2b:0d:10:ba Online/Defined Name: State/Status: iqn.2002-12.com.brocade - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 317
.brocade iqn.2002-12.com.brocade, is used for .2002-10.com.brocade:21:00:00:04 brocade:21:00:00:04:cf:e7:74:cf State/Status:Online/Defined Auth. Method:None Manual iSCSI VT creation Create iSCSI VTs manually iqn.2002-12.com.brocade:10:00:00:05: iqn.2002-12.com.brocade:example-disk001 The operation - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 318
--show tgt -t iqn.2002-12.com.brocade:example-disk001 -v Number of records found: 1 Name: iqn.2002-10.com.brocade.example:disk001 State/Status: Offline/Defined Auth. : iqn.2002-12.com.brocade:. -w Specifies the port WWN of the physical FC target 316 iSCSI gateway - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 319
iqn.2002-12.com.brocade:example-disk001 \ iqn.2002-12.com.brocade:example-disk001 Number of -12.com.brocade:. -w brocade:example-disk001. switch:admin> iscsicfg --add lun -t iqn.2002-12.com.brocade brocade:example-disk001 Number of targets found: 1 Target: iqn.2002-12.com.brocade - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 320
:e7:73:7e 0 2f:ff:00:06:2b:0d:12:99 1-2 Physical LUN(s) 0 0-1 Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf Number of LUN Maps: 1 FC WWN Virtual LUN(s) Physical LUN(s) 21:00:00 the -v option to display the iSCSI VTs: switch:admin> iscsicfg --show tgt -v 318 iSCSI gateway service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 321
None Name: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74 iSCSI initiators and iSCSI VTs manually. A DD controls iSCSI initiator OS are not supported if the iSNS service is enabled on the 1991-05.com.microsoft:host001.brocade.com 30.0.30.11 iqn.1991-05.com.microsoft:host001.brocade.com,iqn.2006-10.com. - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 322
.1991-05.com.microsoft:host001.brocade.com iqn.2006-10.com 1 dd-host001 iqn.1991-05.com.microsoft:host001.brocade.com iqn.2006-10.com.example:disk001 4. Enter the configuration Fabric OS 5.2.0 or later supports both one-way and mutual CHAP .brocade:example-disk001 -a CHAP The operation - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 323
to bind a user name: switch:admin> iscsicfg --addusername tgt -t iqn.2002-10.com.brocade:tgt -u "isisctgt1;hello123" This operation completed successfully 3. Enter the iscsiCfg --commit all command. Number of records found: 1 Name Status username0001Defined Fabric OS 6.2 administrator guide 321 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 324
the database you want to use: switch:admin> iscsicfg --show ddset Number of records found: 1 Name: ddset-engineering State/Status: Enabled/Committed 322 iSCSI gateway service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 325
a defined configuration or integrated into the effective configuration. Figure 40 illustrates a defined iSCSI FC Zone containing iSCSI virtual initiators and FC targets. Fabric OS 6.2 administrator guide 323 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 326
gateway s ervic e iS CS I zone L UNs FC Target 4 Figure 40 iSCSI gateway service in an iSCSI FC zone If default zoning is set to No Access, you must create an "Creating and Maintaining Zones" in the HP StorageWorks Fabric OS 6.2.x administrator guide. IMPORTANT: If you decide to start zoning - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 327
create a separate zone so that iSCSI gateway service components can be easily differentiated from other devices About Zones" in the HP StorageWorks Fabric OS 6.2.x administrator guide and the aliCreate command Physical LUN(s) 0 0-1 Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf Number of - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 328
AD: No N 012b00; FC4s: FCP 3;50:06:06:9e:00:15:63:18;50:06:06:9e:00:15:63:19; na 326 iSCSI gateway service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 329
which you will use for the aliCreate command. To display the FC target WWNs for switches other than the HP StorageWorks 4/256 SAN Director, telnet into that switch and run the nsShow command. Record the WWN information displayed. 63:30; 50:06:06:9e:00:15:63:38" Fabric OS 6.2 administrator guide 327 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 330
. For more information about the zoneCreate command, see "About Zones" in the HP StorageWorks Fabric OS 6.2.x administrator guide and the zoneCreate command in the Fabric OS Command Reference. 10. Enter the no, n): [no] y Updating flash ... 4. Enter the cfgEnable command. 328 iSCSI gateway service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 331
FC Routing service:disabled iSCSI service:enabled iSNS Client service:disabled Enabling the iSNS client service This section explains how to enable the iSNS client service and configure the iSNS server IP address. Fabric OS supports one iSNS server connection. Fabric OS 6.2 administrator guide 329 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 332
enabled: switch:admin> fosconfig --show FC Routing service:disabled iSCSI service:enabled iSNS Client service:enabled 4. Set the IP address of the iSNS server. You can use either the IP address of the GbE port that attaches the HP StorageWorks B-Series iSCSI Director Blade, or the server management - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 333
show command to verify that the service is disabled: switch:admin> fosconfig --show FC Routing service:disabled iSCSI service:enabled iSNS Client service:disabled Clearing the iSNS client configuration switch:admin> isnsccfg --clear Cleared iSNS server IP address Fabric OS 6.2 administrator guide 331 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 334
332 iSCSI gateway service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 335
registering with all services of the HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch enterprise-class platform. The number of NPIV-to-loop devices supported HP StorageWorks 8/40 SAN Switch: switch:admin> portCfgNPIVPort 10, 1 Fabric OS 6.2 administrator guide 333 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 336
that F_Port (a true NPIV port). Otherwise the firmware considers that port as an F_Port even though the HP StorageWorks 4/256 SAN Director with an HP StorageWorks SAN Director 48 Port 4Gb FC blade or the HP StorageWorks DC SAN Backbone Director or HP StorageWorks DC04 SAN Director Switch with an HP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 337
switchDomain: 99 switchId:fffc63 switchWwn:10:00:00:05:1e:35:37:40 zoning: OFF switchBeacon:OFF Area Port Media Speed State Fabric OS 6.2 administrator guide 335 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 338
0 0 id N2 Online 1 1 id N2 Online 2 2 id N2 Online 3 3 id N2 Online 4 4 id N2 Online ... F-Port F-Port F-Port F-Port F-Port 50:05:07:64:01:20:73:b8 50:05:07:64:01:60:73:b8 65 NPIV public 50:05:07:64:01:e0:73:b8 50:05:07:64:01:20:73:b5 Use the portShow command to view the NPIV - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 339
:70 192 2048 c ff 630201 c0:50:76:ff:fb:00:16:80 192 2048 c scr=3 scr=3 scr=3 d_id=FFFFFC d_id=FFFFFC Fabric OS 6.2 administrator guide 337 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 340
338 Administering NPIV - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 341
zone consisting of the following ports: • N_Ports:1,7, 1,8, 4,5, and 4,6 • E_Ports:1,1, 3,9, 3,12, and 4,7 The dashed line indicates the dedicated path from Domain 1 to Domain 4. Fabric OS 6.2 administrator guide 339 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 342
Domain 1 7 1 8 9 2 Domain 3 9 10 12 = Dedicated Path = Ports in the TI zone 7 6 5 4 Domain 4 Figure 42 Traffic Isolation zone creating a dedicated path through the fabric In Figure 42, all traffic entering Domain 1 from N_Ports 7 and 8 is routed through E_Port 1. Similarly, traffic entering - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 343
Domain controller frames include zone updates and Name Server queries. To avoid this problem, add a second, non-dedicated ISL between Domain 1 and Domain 3. Domain sent to the devices if the dedicated path is broken. • HP recommends that the insistent Domain ID feature be enabled; if a guide 341 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 344
with Fibre Channel routing (TI over FCR). See Chapter 17, "Using the FC-FC routing service" on page 367 for information about FC routers, phantom switches, and the FC-FC Routing Service. Some VE_Port-based features, such as tape pipelining, require the request and corresponding response traffic to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 345
Figure 47, you can set up a TI zone to ensure that traffic between Host 1 and the proxy target is routed through EX_Port 9. Fabric OS 6.2 administrator guide 343 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 346
Host 1 Domain 1 8 1 9 2 Front Domain 3 9 10 -1 Host 2 E_Ports EX_Ports -1 = Dedicated Path = Ports in the TI zone Figure 47 TI zone in an edge fabric Xlate Domain 4 Proxy Target In the TI zone, when you designate E_Ports between the front and xlate phantom switches, you must use -1 in - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 347
zones in the edge fabrics. The failover mode for TI zones in the backbone fabric can be enabled or disabled. • TI over FCR is not supported with FC Fast Write. Fabric OS 6.2 administrator guide 345 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 348
Isolation Routing is supported only on the following (all configured in Brocade Native Mode (interopmode 0)): • HP StorageWorks 4/8 and 4/16 SAN Switches • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 349
3). • Traffic Isolation Routing is not supported in fabrics with switches running firmware versions earlier than Fabric OS 6.0.0. However use the same shared area on the HP StorageWorks SAN Director 48 Port 4Gb FC blade and HP StorageWorks SAN Director 48 Port 8Gb FC OS 6.2 administrator guide 347 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 350
and Logical Fabrics. TI zones can be created in a Logical Fabric like in regular fabrics, with the following exceptions: • The disable failover option is not supported in Logical Fabrics that use XISLs. • To create a TI zone for a Logical Fabric that uses XISLs, you must create two TI zones: one in - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 351
chassis configured into Logical Switches. The initiator in FID1 communicates with the target in FID3 over the EX_Ports in the base switches. Fabric OS 6.2 administrator guide 349 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 352
1 2 F E LS3, FID1 3 E Domain 3 4 EX 5 EX Base switch Domain 1 6 E 7 E 10 F LS2, FID3 Domain 6 11 E 12 E 15 E 16 E 13 EX Base switch Domain 2 14 EX = Dedicated Path = Ports in the TI zones Figure 53 Example configuration for TI zones over FC routers in Logical Fabrics Figure 54 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 353
-t ti -o f bluezone -p "1,1; 2,4; 1,8; 2,6" To create a TI zone with failover disabled and the state set to activated: switch:admin> zone --create -t ti -o an bluezone -p "1,1; 2,4; 1,8; 2,6" Fabric OS 6.2 administrator guide 351 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 354
the TI zone. Ports are designated using D,I (Domain,Index) format. Multiple ports are separated by a semicolon, followed by a space. The disable failover option is not supported in base fabrics. 352 Optimizing fabric behavior - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 355
. cfgenable "current_effective_configuration" Examples of modifying a TI zone To add port members to the existing TI zone bluezone: switch:admin> zone --add bluezone -p "3,4; 3,6" Fabric OS 6.2 administrator guide 353 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 356
To add port members to the existing TI zone in a backbone fabric: switch:admin> zone --add backbonezone -p "3,4; 3,6; 10:00:00:04:1f:03:16:f2;" To disable failover on the existing TI zone bluezone: switch:admin> zone --add -o n bluezone To enable failover and add ports to TI zone greenzone: switch: - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 357
--show purplezone Defined TI zone configuration: TI Zone Name: redzone: Port List: 1,2; 1,3; 3,3; 4,5 Configured Status: Activated / Failover-Enabled Enabled Status: Activated / Failover-Enabled Fabric OS 6.2 administrator guide 355 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 358
To display information about all TI zones in the defined configuration: switch:admin> zone --show Defined TI zone configuration: TI Zone Name: greenzone: Port List: 2,2; 3,3; 5,3; 4,11; Configured Status: Activated / Failover-Enabled Enabled Status: Activated / Failover-Enabled TI Zone Name: - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 359
and Target 2, so these devices can communicate with each other. See Chapter 17, "Using the FC-FC routing service" on page 367 for information about creating LSAN zones. 2. Log in to edge fabric 1 and set up y zone config "cfg_TI" is in effect Updating flash ... Fabric OS 6.2 administrator guide 357 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 360
3. Log in to edge fabric 2 and set up the TI zone. a. Enter the fabricShow command to display the switches in the fabric. From the output, you can determine the front and translate domains. E2switch:admin> fabricshow Switch ID Worldwide Name Enet IP Addr FC IP Addr Name 1: fffc01 50:00:51: - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 361
enable you to offer flexible bandwidth limit services based on requirements. • To enable more important devices to use the network bandwidth during specific services, such as network backup. To limit rate limiting configuration is persistent across reboots. Fabric OS 6.2 administrator guide 359 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 362
and FL_Ports and is available only on the following platforms: • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks DC SAN Backbone Director • HP StorageWorks DC04 SAN Director Switch. Virtual Fabrics considerations: If - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 363
/target pairs. QoS zones can contain only WWN members (WWNN or WWPN). Domain,Index zoning is not supported. A QoS zone has a special naming convertion, to differentiate it from a regular zone. The format of names: QOSH_HighPriorityTraffic QOSL_LowPriorityZone Fabric OS 6.2 administrator guide 361 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 364
The switch automatically sets the priority for the host,target pairs specified in the zones based on the priority level in the zone name. NOTE: QoS can be used for device pairs that exist within the same fabric only. QoS priority information is not passed over EX_ or VEX_Ports and should not be - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 365
circled in the figure, including all of the E_Ports in the XISLs (ports 10, 11, 12, 13, 14, 15, 16, and 17). Fabric OS 6.2 administrator guide 363 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 366
Supported configurations a switch running a firmware version earlier than Fabric HP StorageWorks 8/8 or 8/24 SAN Switches • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks SAN Director 16 Port 8Gb FC blade • HP StorageWorks SAN Director 32 Port 8Gb FC blade, or HP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 367
, the backbone fabric, and the egress edge fabric. • Traffic prioritization is not supported on a CryptoTarget container (redirection zone). See the HP StorageWorks Fabric OS Encryption switch user's guide supporting Fabric OS 6.2 • for information about redirection zones. • If QoS is enabled, an - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 368
StorageWorks DC SAN Backbone Director platforms. NOTE: For the HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch, QoS is enabled by default on all ports - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 369
problems, such as change management, network management, scalability, reliability, availability, and serviceability, that might result from merging the fabrics. FCR also supports HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks 400 Multi-Protocol Router • HP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 370
does not require a switch reboot. For the HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch, if you do not Fibre Channel router (FC router) A switch running the FC-FC routing service. See "Supported platforms for Fibre Channel routing" on page 367 for a list of - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 371
Figure 59 shows a metaSAN consisting of three edge fabrics connected through an HP StorageWorks DC SAN Backbone Director with interfabric links. Host Target Target Edge fabric 1 E_Port Edge 1 and Edge Fabric 2, and between Edge Fabric 2 and Edge Fabric 3. Fabric OS 6.2 administrator guide 369 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 372
fabrics must have unique backbone FIDs. • MetaSAN A metaSAN is the collection of all SANs interconnected with Fibre Channel routers. 370 Using the FC-FC routing service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 373
to which they are attached and, correspondingly, imported into the edge SAN reached through Fibre Channel routing. Figure 62 illustrates this concept. Fabric OS 6.2 administrator guide 371 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 374
Fabric 2 E_Port IFL Brocade 7500 Figure 62 MetaSAN with imported devices Routing types The FC-FC routing service provides two types of routing 386 for more information. NOTE: Management Server Platform services and interopmode are not supported in the backbone fabric. Phantom domains A phantom - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 375
Fabric 4 because there are no LSAN devices in Fabric 4. • Target 1', Target 2', and Target 3' are proxy devices for Target 1, Target 2, and Target 3, respectively. Fabric OS 6.2 administrator guide 373 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 376
to the private network. The Fibre Channel routing equivalent to this IP-NAT is the Fibre Channel network address 374 Using the FC-FC routing service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 377
service To set up the FC-FC Routing Service HP StorageWorks SAN Director 48 Port 8Gb FC blade is present. Proceed to step 4. The following example shows slot 2 with the B-Series Multi-Protocol Router Blade and slots 3, 9, 10, and 12 with 8-Gb/s port blades enabled. Fabric OS 6.2 administrator guide - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 378
and their corresponding IDs. 3. If you are configuring the HP StorageWorks 4/256 SAN Director with a B-Series Multi-Protocol director is using configuration option 5. switch:admin> chassisconfig Current Option: 5 All Supported Options Option 5: One 384-port switch Blade ID's 17, 18, 24, service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 379
backbone fabric. switch:admin_06> msplatshow *MS Platform Management Service is NOT enabled. If the MS platform database is fddCfg --showall command. When it is in strict mode, ACL cannot support Fibre Channel routing in the fabric. switch:admin> fddcfg --showall Local 6.2 administrator guide 377 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 380
only to Fabric OS fabrics and does not apply to M-EOS fabrics. See Chapter 21, "Configuring and monitoring FCIP extension services" on page 457 for instructions on how to configure FCIP tunnels. Interfabric link configuration Before configuring an IFL, be aware that you cannot configure both IFLs - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 381
> portcfgexport 7/10 Port 7/10 info Admin: enabled State: NOT OK Pid format: Not Applicable Operate mode: Brocade Native Edge Fabric ID: 30 Preferred Domain ID: 160 Front WWN: 50:06:06:9e:20:38:6e: configure a different FID for each edge fabric. Fabric OS 6.2 administrator guide 379 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 382
7. Enter either the portCfgEXPort or portShow command to verify that each port is configured correctly: switch:admin> portcfgexport 7/10 380 Using the FC-FC routing service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 383
Port 7/10 info Admin: enabled State: NOT OK Pid format: Not Applicable Operate mode: Brocade Native Edge Fabric ID: 30 Preferred Domain ID: 160 Front WWN: 50:06:06: :60:69:e2:03:86 portWwn of device(s) connected: Distance: normal portSpeed: N4Gbps Fabric OS 6.2 administrator guide 381 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 384
" EX_Port FID Neighbor Switch Info (WWN, enet IP, name 4 95 10:00:00:05:1e:37:00:45 10.32.156.31 "Brocade 7500" 5 95 10:00:00:05:1e:37:00:45 10.32.156.31 "Brocade 7500" 6 95 10:00:00:05:1e:37:00:45 10.32.156.31 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 385
Tunnel 24-31 More than two router port sets can exist in an HP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director, or HP StorageWorks DC04 SAN Director Switch with two B-Series Multi-Protocol Router Blades. keys to distribute the traffic. Fabric OS 6.2 administrator guide 383 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 386
configuration In Fabric OS 5.2.0 and later, you can configure EX_Ports to use frame-based trunking just as you do regular E_Ports. EX_Port frame trunking support is designed to provide the best utilization and balance of frames transmitted on each link between the FC router and the edge fabric. You - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 387
For information about setting up E_Port trunking on an edge fabric, see Chapter 20, "Administering ISL trunking" on page 435 in this guide. Supported configurations and platforms The EX_Port trunking is an FCR software feature and requires that you have a trunking license installed on the FC router - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 388
and both devices are online, FCR triggers a device import. To support legacy applications, WWNs are reported based on the administrative domain context. zone. For more information, see Chapter 7, "Using the FC-FC routing service" on page 367. Zone definition and naming Zones are defined locally on a - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 389
control, separate administrators maintain access control. If you are managing other switches in a fabric, HP recommends that you run the defZone --show command on your Fabric OS 5.1.0 and later switches "lsan_zone_fabric75", "10:00:00:00:c9:2b:c9:0c" Fabric OS 6.2 administrator guide 387 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 390
config "zone_cfg" is in effect Updating flash ... 11. Log in as an admin and connect to the FC router. 388 Using the FC-FC routing service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 391
can increase the maximum LSAN count to 5000 without disabling the switch. The maximum number of LSAN devices supported is 10000 (this includes both physical and proxy devices). If you have 3000 LSAN zones but have :admin> fcrlsancount 5000 LSAN Zone Limit 5000 Fabric OS 6.2 administrator guide 389 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 392
LSAN zones Be aware of how LSAN zones impact high availability and firmware downgrades: • The LSAN zone matrix is synchronized to the standby CP faster than other LSANs. The LSAN tags are persistently saved and support configupload and configdownload. Enforce tag The Enforce tag reduces the service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 393
fabric 2), even if the host is brought down. A target proxy is removed from the host fabric when the target device is offline. Fabric OS 6.2 administrator guide 391 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 394
router, not per fabric. If the backbone fabric has multiple FC routers, HP recommends that you configure the LSAN tags on all of the FC routers. and Speed) on an FC router is 8. • Up to 500 Speed LSANs are supported. Configuring an Enforce LSAN tag 1. Log in to the FC router as admin. 2. service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 395
you want to display. • To display the Enforce LSAN zones: fcrlsan --show -enf • To display the Speed LSAN zones: fcrlsan --show -speed Fabric OS 6.2 administrator guide 393 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 396
there is no LSAN zone sharing or device access between the two groups, the number of FC routers and devices supported in the backbone fabric can be higher. Figure 66 shows a sample metaSAN with four FC routers in the backbone after LSAN zone binding is in effect. 394 Using the FC-FC routing service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 397
metaSAN can import more than 10,000 devices and the backbone fabric can support more FC routers. • With LSAN zone binding, CPU consumption by an distributed from this FC router to other FC routers. • You must manually configure the LSAN fabric matrix on these FC routers to match the other guide 395 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 398
from Fabric OS 6.1.0 where the FC router matrix feature is activated to 6.0.x or 5.3.x firmware that does not support that feature, the firmwareDownload script prompts you to delete the FC router matrix binding entries prior CP during the sync dump operation. 396 Using the FC-FC routing service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 399
of proxy devices. Used with the -s slot option, it can also influence the assignment of the xlate domain port number (which is Fabric OS 6.2 administrator guide 397 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 400
intervention. You can, as an option, configure these parameters manually. To change the fabric parameters on a switch in the edge 399, Fabric 1 is running a firmware release earlier than 5.3.0. If the devices connected to this fabric do not support broadcast frames, you can disable the service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 401
in two edge fabrics, they are counted as two, rather than one. One device imported into multiple edge fabrics counts multiple times. Fabric OS 6.2 administrator guide 399 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 402
or later with a maximum count of 5000 LSANs and the standby CP is running an earlier firmware version, HA synchronization will fail. If 5000 is selected before downgrading to an earlier version of 19 | 8 34 20 | 8 34 21 | 8 34 22 | 8 34 23 | 8 34 400 Using the FC-FC routing service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 403
"Configuring a Logical Switch for XISL use" on page 187 for instructions on disallowing XISL use. Since XISL use is disallowed, dedicated links must however, this configuration is not supported and you should avoid it. • Backbone-to-edge routing is not supported in the base switch. See guide 401 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 404
you connect an FC router in legacy mode to the base switch, backbone-to-edge routing is supported on that FC router. In Figure 68, no devices can be connected to the backbone fabric ( device C, however, because the base switches do not support backbone-to-edge routing. 402 Using the FC-FC routing - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 405
switch. HP recommends support EX_Ports on 8-Gb/s ports. Downgrades are not allowed on platforms with 8-Gb/s EX_Ports. For further instructions on downgrading, see Chapter 8, "Installing and maintaining firmware supporting FCR switches support lower capability fabric is not supported with the XPath - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 406
unexpected failure, run the supportSave command on each of the FC routers and edge switches and save the output. The output can be used to troubleshoot the problem. 404 Using the FC-FC routing service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 407
Fabric OS 6.2 administrator guide 405 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 408
406 Using the FC-FC routing service - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 409
Tools Administrator's Guide and DCFM User's Manual for information supported on HP StorageWorks switch models Monitors Switches EE Filter ISL Top Talker • HP StorageWorks 4/8 SAN Switch • HP StorageWorks 4/16 SAN Switche • HP StorageWorks 8/8 SAN Switch • HP StorageWorks 8/24 SAN Switche • HP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 410
Maximum number of Logical Switches on which monitors are supported HP StorageWorks 8 4 DC SAN Backbone Director HP StorageWorks 8 4 DC04 SAN Director Switch HP StorageWorks 3 3 8/40 SAN Switch HP StorageWorks 4 3 8/80 SAN Switch Advanced Performance Monitor commands are available - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 411
Blade allows end-to-end monitors on all 48 ports. For the HP StorageWorks B-Series iSCSI Director Blade, end-to-end monitors are supported on the FC ports (ports 0 through 7), but not on the command: perfaddeemonitor [slotnumber/]portnumber sourceID destID Fabric OS 6.2 administrator guide 407 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 412
where: slotnumber portnumber sourceID destID For bladed systems only, specifies the slot number of the port on which the monitor is to be added. For all other switches, this operand is not required. Specifies the port number Specifies the 3-byte SID (source ID) of the originator device Specifies - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 413
supported on the following: • HP StorageWorks DC SAN Backbone Director • HP StorageWorks DC04 SAN Director Switch • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch. On HP port 2. The frame SID and DID Fabric OS 6.2 administrator guide 409 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 414
per port in any combination of standard filters and user-defined filters: • HP StorageWorks 4/8 SAN Switch • HP StorageWorks 4/16 SAN Switch • HP StorageWorks 8/8 SAN Switch • HP StorageWorks 8/24 SAN Switches • HP StorageWorks 8/80 SAN Switch For the follwing switches, the maximum number of filters - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 415
and user-defined filters, except for the HP StorageWorks SAN Director 48 Port 4Gb FC blade. For the HP StorageWorks SAN Director 48 Port 4Gb FC blade monitors. • The upper 16 ports (ports 32 through 47) do not support filter monitors. The actual number of filters that can be configured on a guide 411 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 416
per port (14 offsets when FICON Management Server mode, or fmsmode, is enabled). • HP StorageWorks 4/8 and 4/16 SAN Switches, HP StorageWorks 8/8 and 8/24 SAN Switches, and Brocade 4Gb SAN Switch for HP p-Class BladeSystem platforms Up to 7 different offsets per port (6 offsets when fmsmode is - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 417
1/4, 1 The specified filter-based monitor is deleted. ISL performance monitoring ISL monitoring is set up on E_Ports automatically in release 4.4.0 and later. Fabric OS 6.2 administrator guide 413 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 418
run Fabric OS 6.0.0 or later. Top Talker monitors are not supported on the HP StorageWorks 4/8 and 4/16 SAN Switches. Applications can use the consume the most bandwidth and can then configure them with certain Quality of Service (QoS) attributes so they get proper priority. See Chapter 16, " - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 419
, or HP StorageWorks DC04 SAN Director Switch: perfttmon --delete 2/4 Displaying the top n bandwidth-using flows on an F_Port 1. Connect to the switch and log in as admin. 2. Enter the perfTTmon --show command. perfttmon --show [slotnumber/]port [n] [wwn | pid] Fabric OS 6.2 administrator guide 415 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 420
: perfttmon --show 7 5 To display the top flows on slot 2, port 4 on the BHP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director, or HP StorageWorks DC04 SAN Director Switch in PID format: perfttmon --show 2/4 pid switch:admin> perfttmon --show 2/4 pid Src_PID Dst_PID MB - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 421
flow. • You cannot install a Top Talker monitor on a mirrored port. • Top Talker can monitor only 10,000 flows at a time. • Top Talker is not supported on VE_Ports, EX_Ports, and VEX_Ports. • The maximum number of F_Port Top Talker monitors on an ASIC is 8. If Virtual Fabrics is enabled, the maximum - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 422
for trunks. • The following switches support 12 filter-based monitors for trunks: • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch 4/32B • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks 400 Multi-Protocol Router - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 423
184 26k 183 716 716 717 534 183 26k 167 657 656 655 488 167 26k 179 749 749 749 570 179 Fabric OS 6.2 administrator guide 419 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 424
The following example displays filter monitor information on a port: switch:admin> perfMonitorShow --class FLT 2/5 There are 7 filter-based monitors defined on port 21. KEY ALIAS OWNER_APP FRAME_COUNT OWNER_IP_ADDR 0 SCSI_Frame TELNET 0x00000000002c2229 N/A 1 SCSI_WR TELNET - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 425
settings won't change. Do you want to continue? (yes, y, no, n): [no] y Please wait... Committing configuration...done. Performance Monitoring configuration cleared from FLASH. Fabric OS 6.2 administrator guide 421 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 426
. Using the Data Center Fabric Manager (DCFM) Enterprise Edition, you can store performance data persistently. For details on this feature, see the DCFM Enterprise User Manual. 422 Administering advanced performance monitoring - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 427
HP StorageWorks SAN Switch 2/8-EL, HP StorageWorks SAN Switch 2/16-EL, HP StorageWorks SAN Switch 2/16, and HP StorageWorks MSA SAN Switch 2/8; and switches running Fabric OS 6.x is not supported. , is passed through the 8-byte to 10-byte conversion process. Fabric OS 6.2 administrator guide 423 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 428
portCfgLongDistance command to select one of the following four options for buffer credit allocation: NOTE: Long distance modes L0.5, L1, and L2 are not supported on Fabric OS 6.x. • Level 0 static mode (L0)-L0 is the normal (default) mode for a port. Each user port reserves eight buffer credits and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 429
of ~500 km at 1 Gb/s: • HP StorageWorks 4/8 SAN Switch • HP StorageWorks 4/16 SAN Switches • Brocade 4Gb SAN Switch for HP p-Class BladeSystem • Brocade 4Gb SAN Switch for HP c-Class BladeSystem • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch 4/32B - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 430
/s, then (50 km * 8 Gb/s/ 2) + 6 = 206 buffers Example: Consider the HP StorageWorks 8/8 and 8/24 SAN Switches, which have a single 24-port port group and a extended distance supported: [Maximum Distance X in km] = (BufferCredits + 6) * 2 / LinkSpeed 498 km = (492 + 6 buffers for Fabric Services) * 2 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 431
32, HP StorageWorks SAN Switch 4/32B HP StorageWorks 4/64 64 16 SAN Switch HP StorageWorks 8/40 40 40 SAN Switch 144 484 744 584 1692 HP StorageWorks 8/80 80 16 292 SAN Switch HP StorageWorks 400 16 8 377 Multi-Protocol Router FA4-18 16 8 404 Fabric OS 6.2 administrator guide - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 432
StorageWorks 4/256 SAN Director. Additional buffers are available with the HP StorageWorks 4/256 SAN Director because of fewer buffers allocated for back-end port connections. Table 83 Supported Distances Maximum supported distances with 2112 Byte Frame Size (1-port allocated all unreserved buffer - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 433
SAN Director 32 Port 8Gb FC blade, HP StorageWorks SAN Director 48 Port 8Gb FC blade If a long-distance E_Port from one of these supported switches/blades is connected to any other switch or blade type, the buffer credit recovery feature is disabled. Fabric OS 6.2 administrator guide 429 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 434
between core and edge switches is possible, but is not an HP recommended practice. With the exception of 3xxx series 2Gb and earlier 8 Gb/s speeds over distances within most data centers. Buffer-limited operations are supported for the L0 and LD extended ISL modes only, and are persistent across - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 435
fill words. On switches running firmware versions earlier than Fabric OS 6.2.0, portCfgLongDistance command to configure a switch port 63 to support a 100 km link and be initialized using the -Division Multiplexing (TDM) devices and when HP StorageWorks switch has QoS and credit recovery guide 431 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 436
and eight FC ports. It is used to implement the iSCSI Gateway Service. The Gigabit Ethernet ports are used to connect iSCSI initiators, and the ISL trunking" on page 435. • Use only qualified HP B-Series SFPs. These are the only SFPs supported on the 8Gb products. 1. Connect to the switch and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 437
link distance mode, enables the extended link initialization sequence, and sets the desired distance to 50 kilometers: switch:admin> portcfglongdistance 1/1 LD 1 50 Fabric OS 6.2 administrator guide 433 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 438
434 Administering extended fabrics - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 439
between HP StorageWorks SAN Switch 4/32, HP StorageWorks 4/64 SAN Switch, HP StorageWorks 400 Multi-Protocol Router, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks 8/8 and 8/24 SAN Switches, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, the HP StorageWorks - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 440
depends on the HP StorageWorks platform. NOTE: The HP StorageWorks SAN Director 6 Port 10Gb FC blade does not support trunking. Standard set to interopMode 0 for Brocade Native mode, which supports all stand-alone B-Series fabrics, but provides no interoperability support. See Chapter 12, " - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 441
You can use this feature with the HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks DC SAN Backbone Director, and the HP StorageWorks DC04 SAN Director Switch platforms. occurs. • Pause ingress traffic (by not returning credits). Fabric OS 6.2 administrator guide 437 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 442
1. Because ports 1/0 - 1/10 belong to one HP StorageWorks DC SAN Backbone Director platform, traffic in logical Downgrading from Fabric OS 6.2.0 is not supported if lossless DLS is enabled. Performance monitoring or reconfiguring ISLs and trunking groups in problem areas. There are three methods of - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 443
trunking, and indicates that ports 0 through 2 are underutilized and ports 4 and 5 are congested: switch:admin> portperfshow 0 1 2 3 4567 Total 0 0 0 145m204m202m0168m 719 0 0 0 145m206m208m0186m 745 Fabric OS 6.2 administrator guide 439 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 444
The following example shows traffic flowing through a trunking group (ports 5, 6, and 7). After port 6 fails, traffic is redistributed over the remaining two links in the group, ports 5 and 7: switch:admin> portperfshow 0 1 2 3 4567 Total 0 0 0 0 0145m144m145m 434 0 0 0 0 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 445
km at 1G up to 250 km at 2G, and 100 km at 4G and 8G. The distance supported on the HP StorageWorks DC04 SAN Director Switch depends on the available buffers, number of back-end ports, and the the switch and log in using an account assigned to the admin role. Fabric OS 6.2 administrator guide 441 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 446
speed of four Gb/s. (HP StorageWorks 4/8 and 4/16 SAN Switches, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, HP StorageWorks SAN Switch 4/32, HP StorageWorks 4/64 SAN Switch, HP StorageWorks SAN Switch 4/32B, HP StorageWorks 400 Multi-Protocol - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 447
, observe the following criteria for trunking over extended fabrics: • It is supported on switches running Fabric OS 4.4.0 and later. • Extended Fabrics and ISL parameter. Trunking distances Enhanced trunking support for switches with single ASIC platforms is summarized in Table 85. Fabric - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 448
is static. You can specify any distance greater than 10 km, for example 25 km, 50 km, and 100 km. The HP StorageWorks DC04 SAN Director Switch supports long-distance modes LO, LE, LS, and LD. F_Port masterless trunking On edge switches, the masterless trunking feature is called F_Port masterless - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 449
StorageWorks 4/256 SAN Director and the HP StorageWorks DC SAN Backbone Director platforms running Fabric Access Gateway mode with F_Port masterless trunking NOTE: You do not need to manually map the host to the master port because Access Gateway will perform a Fabric OS 6.2 administrator guide 445 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 450
all dynamically created partitions in the HP StorageWorks DC SAN Backbone Director platform. QSA) Query Security Attributes ELSs are not supported on F_Port trunks. The port must be you must disable the trunk ports before performing a firmware downgrade. Upgrade HA Sync Port types Default Area Note - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 451
Gateway mode Trunking PID format F_Port masterless trunking is supported only on ports 0-15 on the HP StorageWorks SAN Director 48 Port 4Gb FC Blade. If an HP StorageWorks 4/256 SAN Director 16 Port 4Gb Blade ( Domains. You cannot create a Trunk Area in AD255. Fabric OS 6.2 administrator guide 447 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 452
group or a quad is a set of sequential ports, for example ports 0-3 in the figure shown below. The HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, and the HP StorageWorks 8/80 SAN Switch support a trunk group with up to eight ports. The 448 Administering ISL trunking - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 453
enter help portTrunkArea or see the Fabric OS Command Reference. F_Port trunking will not support shared area ports 16-47 on the HP StorageWorks SAN Director 48 Port 4Gb FC blade. Table 89 shows an example of Trunk index 125 enabled for ports 10/13 and 10/14. Fabric OS 6.2 administrator guide 449 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 454
4. Show the TA port configuration (ports still disabled): switch:admin> porttrunkarea --show enabled Slot Port Type State Master TI DI 10 13 -- -- -- 125 125 10 14 -- -- -- 125 126 5. Enable ports 13 and 14: switch:admin> portenable 10/13 switch:admin> portenable 10/14 6. Show the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 455
No_Module N8 No_Module N8 No_Module N4 No_Light N4 No_Light N4 No_Light N4 No_Light F-Port 10:00:00:00:00:01:00:00 Fabric OS 6.2 administrator guide 451 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 456
36 36 id N4 Online 37 37 id N4 Online 38 38 id N4 Online 39 39 id N4 Online 5. Display TA-enabled port configuration: F-Port 2 NPIV public (Trunk master) F-Port (Trunk port, master is Port 36 ) F-Port (Trunk port, master is Port 36 ) F-Port (Trunk port, master is Port 36 ) switch:admin> - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 457
a Logical Switch with 256 devices each. The HP StorageWorks DC04 SAN Director Switch supports trunk groups with up to eight ports. The trunking groups are based on the user port number with contiguous eight ports as one group, for example 0-7, 8-15, and 16-23. Fabric OS 6.2 administrator guide 453 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 458
to ON or PASSIVE. This is because devices such as HBAs support only DH-CHAP for authentication. A combination of FCAP and DH-CHAP with device two physical entities; for example the extended ISL, which connects two HP StorageWorks DC SAN Backbone Director platforms, must be authenticated. For more - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 459
will be disabled upon reboot. Would you like to continue [Y/N] 2. Specify the E_Ports to authenticate, for example 2, 3, and 4. switch:admin> authutil --authinit 2,3,4 Fabric OS 6.2 administrator guide 455 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 460
456 Administering ISL trunking - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 461
services FCIP concepts Fibre Channel over IP (FCIP) enables you to connect Fibre Channel SANs over IP-based networks. The HP Blade presents 16 FC ports and 16 virtual ports. Each GbE interface can support up to 8 FCIP tunnels which are represented as 8 virtual ports on ge0 administrator guide 457 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 462
Brocade 7500 Brocade 48000 with FR4-18i Blade Office FC SAN Office FC SAN Brocade can support or your FCIP tunnel may not be stable. FCIP services license Most of the FCIP extension services that support SAN extension over IP Fabric OS supports SAN extension between HP StorageWorks 400 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 463
physical Fibre Channel ports and 2 physical GbE ports. NOTE: The FCIP Tunneling Service for the HP StorageWorks 400 Multi-Protocol Router and B-Series Multi-Protocol Router Blade is not 7 / 000111 1 / 001 2 11 / 001011 3 / 011 Class F Medium QoS Medium QoS Fabric OS 6.2 administrator guide 459 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 464
Protocol networks. IPsec supports network-level data integrity services, or the network, data corruption, and data and user credential theft. By default, when creating an FCIP tunnel, IPsec is disabled. Used to provide greater security in tunneling on a B-Series Multi-Protocol Router Blade or an HP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 465
RAS message support for IPsec. • Only a single route is supported on an interface with a secure tunnel. • IPsec can be configured only on IPv4 based tunnels. Secure tunnels cannot be created on an HP StorageWorks configurations when you enable an IPsec tunnel. Fabric OS 6.2 administrator guide 461 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 466
IKE and IPsec policies: policy --create type number [-enc encryption_method][-auth authentication_algorithm] [-pfs off|on] [-dh DH_group] [-seclife secs] 462 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 467
MD5, and AES-XCBC (IPsec only). SHA-1 is the default. DH_Group The Diffie-Hellman group. Supported groups are Group 1 and Group 14. Group 1 is the default. secs The security association policies by entering the following command: policy --show type all Fabric OS 6.2 administrator guide 463 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 468
to the switch and log in using an account assigned to the admin role. 2. Enter the portShow fcipTunnel command. 464 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 469
assigned to any Logical Switch. As with the current Fabric OS, the port types supported by FCIP are either VE_ or VEX_Port. When a GigE port is moved to Streaming allows an HP StorageWorks 400 Multi-Protocol Router or a B-Series Multi-Protocol Router Blade to communicate with supported third party - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 470
the tunnel. The committed rate must come from communication with the supported third party WAN optimizer hardware. This feature requires both sides of FCIP Fastwrite and Tape Pipelining and FC Fastwrite on the same HP StorageWorks 400 Multi-Protocol Router or FC4-18i blade. See " extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 471
Table 95 Using FCIP Fastwrite and Tape Pipelining FCIP Fastwrite Tape pipelining Each GbE port supports up to 2048 simultaneous accelerated exchanges, which means a total of 2048 simultaneous exchanges 79 Single tunnel, Fastwrite and Tape Pipelining enabled Fabric OS 6.2 administrator guide 467 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 472
Pipelining enabled on a per-tunnel/per-port basis Unsupported configurations for Fastwrite and Tape Pipelining The configurations shown in Figure 81 are not supported with Fastwrite and Tape Pipelining. These configurations use multiple equal-cost paths. 468 Configuring and monitoring FCIP extension - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 473
similar to the basic topology shown in Figure 82. FC Fastwrite provides accelerated speeds for SCSI Write operations over long distance Fibre Fabric OS 6.2 administrator guide 469 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 474
through the FC-FC Routing Service rather than FCIP. FC Fastwrite is supported in Fabric OS 5.3.x and later. Figure 82 Typical network topology for FC Fastwrite Platforms and OS requirements for FC Fastwrite Fabric OS supports FC Fastwrite between two HP StorageWorks 400 Multi-Protocol Routers - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 475
do not support FC Fastwrite. HP StorageWorks 400 Multi-Protocol Router, or two HP StorageWorks 4/256 SAN Director, or two HP StorageWorks DC SAN Backbone Director or HP both the HP StorageWorks 400 directly connected to the HP StorageWorks 400 Multi-Protocol Router Service provides Fibre Channel routing between - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 476
Multi-Protocol Router Blade, the command powers the blade off and back on. In the case of the HP StorageWorks 400 Multi-Protocol Router, the router is rebooted. The process takes up to five minutes. Example: other end of the FC Fastwrite path. 472 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 477
Router Blade, the command powers the blade off and back on. In the case of the HP StorageWorks 400 Multi-Protocol Router, the router is rebooted. The process takes up to five minutes. A slot number is not required for the HP StorageWorks 400 Multi-Protocol Router. Fabric OS 6.2 administrator - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 478
configure them. Ports on a new HP StorageWorks 400 Multi-Protocol Router or B-Series Multi-Protocol Router instructions. 10. Create an FCIP tunnel using the portCfg fciptunnel command. See "Creating an FCIP tunnel" on page 478 for specific instructions. 474 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 479
Services" on page 513 for specific instructions. 12. If you are implementing FTRACE, configure FTRACE using the portCfg ftrace command. See the Fabric OS Troubleshooting and Diagnostics Guide. for specific instructions does not apply to the stand-alone HP StorageWorks 400 Multi-Protocol Router. ge0 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 480
The range allowed is 1260 to 2348 B. HP recommends that you set the value to 1500 B, which is the normal value in an Ethernet network. Some networks support jumbo packets (packets larger than 1500 B). If value discourages the use of a route. 476 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 481
type-of-service] [-t ttl] [-v vlan tag] [-w wait-time] [-z size] where: slot ge0|ge1 The number of a slot in an HP StorageWorks 4/256 SAN Director and HP StorageWorks DC SAN Backbone Director or HP StorageWorks time for ping is 29000 milliseconds (29 sec). Fabric OS 6.2 administrator guide 477 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 482
"WAN performance analysis tools" on page 487 for specific information and instructions. NOTE: The general recommendation is to run ipPerf only when there . NOTE: You cannot create FCIP tunnels that connect to an HP StorageWorks Multi-Protocol Router. 1. Connect to the switch and log services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 483
The layer 2 class of service used for control traffic. -P data_L2Cos The layer 2 class of service used for data traffic. -ike of 0, over VLAN 100, with a layer 2 class of service of 3 for control traffic, and a layer 2 class of service of 7 for data traffic. portcfg fciptunnel 8/ge0 create 2 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 484
Verifying the FCIP tunnel configuration After you have created local and remote FCIP configurations, HP recommends that you verify that the tunnel configuration operation succeeded using the portShow fcipTunnel is visible only when IPsec 480 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 485
created, the configuration is saved in a persistent database. At this point, all configured FCIP tunnels now appear in the fabric as VE_Ports. Fabric OS 6.2 administrator guide 481 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 486
to view ports that are persistently disabled. 3. After identifying the ports, enter the portCfgPersistentEnable command to enable the ports. 482 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 487
the parameter values during secure tunnel initialization. 1. Connect to the switch and log in using an account assigned to the admin role. Fabric OS 6.2 administrator guide 483 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 488
-class platform that contains an FR4-18i blade. This parameter does not apply to the stand-alone HP StorageWorks 400 Multi-Protocol Router. The Ethernet port used by the tunnel (ge0 or ge1). The control connection. Range is 0-7. Default is 0. 484 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 489
downgrading to pre-6.0.0 firmware versions that do not support QoS mapping. It Supported range is 0-63. -P L2coS The L2 Class Of Service (COS) tagging value. Use the portShow fciptunnel geport all -qosmap command to display current values. Supported range is 0-7. Fabric OS 6.2 administrator guide - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 490
maintain entries in the VLAN tag table through their own configuration procedures. Manual entries are needed on both the local and remote sides for portCmd tag used for this tag (range 1-4094). Layer 2 class of service (range 0-7) dst_IP_addr The destination IP address. All frames destined for this - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 491
active on an FCIP GbE port at any time. Each FCIP port supports a single instance of the WAN tool-embedded client running in sender or tunnel is online. You can, for example, revalidate the service provider Service Level Agreement (SLA) without bringing the FCIP tunnel down, guide 487 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 492
the last display interval as well as the Weighted Bandwidth (WBW). BW represents what the FCIP tunnel and payload. There is a limited support for black hole PMTU discovery. If the Jumbo PMTU the following functions: • Validate a service provider Service Level Agreement (SLA) throughput, loss - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 493
wire bytes. WBW Loss(%) Delay(ms) PMTU The weighted bandwidth currently with a gain of 50 percent. the IP header and payload. Note: There is limited support for black hole PMTU detection. If the Jumbo PMTU ( -d destination_ipThe destination IP address. Fabric OS 6.2 administrator guide 489 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 494
dynamically maintained by the ipperf application. The Class of Service/Priority as defined by IEEE 802.1p. Values must be do not have an active FCIP tunnel, you must manually add entries to the VLAN tag table on both the not apply to the stand-alone HP StorageWorks 400 Multi-Protocol Router. ge0 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 495
default size is 64 bytes. -c L2_Cos The Class of Service/Priority, as defined by IEEE 802.1p. Values must be do not have an active FCIP tunnel, you must manually add entries to the VLAN tag table on both the does not apply to the stand-alone HP StorageWorks 400 Multi-Protocol Router. ge0 guide 491 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 496
17381 pkt/s 30s avg, 15356 pkt/s lifetime avg 207859776 input Bytes 556200 Bps 30s avg, 491394 Bps lifetime avg 492 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 497
0 packets lost (retransmits) 0.00% loss rate 30s avg 6495624 input packets 17381 pkt/s 30s avg, 15356 pkt/s lifetime avg 207859776 input Bytes Fabric OS 6.2 administrator guide 493 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 498
556200 Bps 30s avg, 491394 Bps lifetime avg 494 Configuring and monitoring FCIP extension services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 499
Guide (SG24-6497-01), and Implementing an IBM/Brocade SAN with 8 Gbps Directors and Switches (SG24-6116-08). The following Fabric OS standard features support . For more information on EFCM see the EFC Manager Software User Manual. NOTE: Some licenses are installed and activated on the switch at - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 500
fabric-wide consistency is necessary for FICON switch binding. Platforms supporting FICON FICON protocol is supported on the following HP StorageWorks models: • HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch (HP StorageWorks SAN Director 16 Port 8Gb FC blade - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 501
mask (PDCM), and port names are available for ports 0 through 254 only. • CUP is not supported on the HP StorageWorks SAN Director 48 Port 4Gb FC blade. Even though this port blade can be inserted in the following command: portaddress --bind 12/28 0200 -auto 1 Fabric OS 6.2 administrator guide 497 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 502
a Virtual Fabric-enabled platform for FICON FMS mode. A base switch cannot be configured as a FICON switch. FICON CUP-enabled Logical Switches are not supported as Logical Fabric-capable Logical Switches, so FICON Logical Switches will not participate in the use of Extended ISLs (xISLs) on the base - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 503
mode register bit settings for the switch. NOTE: The Fabric OS CLI supports only a subset of the management features for FICON fabrics. The full • Web Tools-Web Tools Administrator's Guide • Data Center Fabric Manager-Data Center Fabric Manager User Manual • SNMP Agent and FICON Management - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 504
command line. For GUI-based procedures, see the Web Tools Administrator's Guide for configuring the routing policy using the FICON tab in WebTools. 4. to be configured for two-byte addressing and require IDID and fabric binding. HP recommends that there are only 2 domains in a path from a FICON - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 505
that the switch has a unique domain ID. If it does not, set a unique domain ID. For instructions on displaying and changing the domain ID, see Chapter 1, "Performing basic configuration tasks" on page 29. or press Ctrl-D to accept the other settings and exit). Fabric OS 6.2 administrator guide 501 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 506
Operation parameters (yes, y, no, n): [no] RSCN Transmission Mode (yes, y, no, n): [no] Arbitrated Loop parameters (yes, y, no, n): [no] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] Committing configuration...done. switch:admin> FICON information You can display - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 507
protocol by sending commands to an emulated control device in the Fabric OS. A B-Series switch that supports CUP can be controlled by one or more host-based management programs, as well as by B-Series commands by initiating serialized access to switch parameters. Fabric OS 6.2 administrator guide 503 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 508
command to disable ports 254 and 255. Ports 254 and 255 are not supported in a CUP environment. After fmsmode has been successfully enabled, these two ports "Persistently enabling and disabling ports" on page 507 for instructions. Changing fmsmode from disabled to enabled triggers the following - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 509
value that the CUP is currently using. The changing of the MIHPTO is an offline procedure as there is no a way to Fabric OS 6.2 administrator guide 505 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 510
upper end of the time range will allow the CUP to process more requests, such as at peak usage times, without timing out the channels. HP recommends that the value should be set to 180 seconds in a SAN with B- and M-Series switches. The default value is 15 seconds. 1. Log in to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 511
> portenable 1/1 Port and switch naming standards Fabric OS handles differences in port and switch naming rules between CUP and itself as follows: Fabric OS 6.2 administrator guide 507 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 512
contain nonprintable characters should not be edited manually because many editors replace nonprintable characters with some 16 configuration files, including the IPL file, are supported. You can upload the configuration files saved on the downloaded with the configDownload command. 508 FICON fabrics - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 513
is displayed in the event log to warn users that the IPL will not be overwritten. Downloading configuration files with Active=Saved mode disabled See Chapter 5, "Maintaining the switch configuration file" on ne Type Model Serial Number ISL CU I/F CPC CHPID Fabric OS 6.2 administrator guide 509 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 514
(IOCP and HCD). The domain ID is assigned by the manufacturer and can be customized to a different value. It must be unique within the fabric. HP recommends that the switch ID (in IOCP or HCD) be set to the same value as the domain ID of the FICON director, which is - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 515
switch numbering, see the IBM publication FICON® Implementation Guide (SG24-6497-00). In the following sample IOCP not in decimal values); the Domain IDs in the example are for demonstration purposes only. Brocade Domain_ID=61 (in hex CNTLUNIT CUNUMBR=0D8,UNITADD=00,UNIT=2032, PATH=(50,51), LINK - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 516
512 FICON fabrics - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 517
Services 514. Platforms that support FICON extension over IP Fabric OS supports SAN extension between buffer credits are configured to support extending the FICON channel over distance in excess of 60 credits. HP recommends a minimum of 60 buffer services" on page 457 for an explanation - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 518
FICON port. • For HP StorageWorks M-series directors ( "Installing and maintaining firmware" on page 213, Brocade Mi10K or M6140 Director Element Manager User Manual for specific information about implementing the allow/prohibit feature. FICON emulation concepts and features FICON emulation supports - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 519
Remote Copy (XRC) application is a DASD application that implements disk mirroring, as supported by the disk hardware architecture and a host software component called System Data Mover (SDM features are enabled: • XRC emulation. • tape write pipelining. Fabric OS 6.2 administrator guide 515 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 520
will be withheld from the channel. This limits processing to what the network and device can support. Too small a value limits pipelining performance. Too large a value results in too much data config -x 1 -w 1 -r 1 -t 1 -l 1 oxidbase 0x7000 516 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 521
disable the tunnel. • -x 1|0 enables or disables XRC emulation. 1 is enable, O is disable. • -w 1|0 enables or disables tape write pipelining. 1 is enable, O is disable. Fabric OS 6.2 administrator guide 517 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 522
chain will be withheld from the channel. This limits processing to what the network and device can support. Too small a value limits pipelining performance. Too large a value results in too much data being (0-7). The arguments are as follows: 518 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 523
are primarily for support personnel. FICON Support personnel may use this pointer. • Path is the device path, in the format VE-HD-HP-DD for this host port into the fabric). • HP is the hex value for the Host Port 2463016406050001 breaks down as follows: VE HD HP DD DP LP CU DV 24 63 01 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 524
| 19436| 0| 0| 183111| 32760| |0x10045000|2463046402050102|H| 0x00| N/A|0000|0000| 19456| 0| 0| 183111| 32760| |0x10048000|2463046402050103|H| 0x00| N/A|0000|0000| 19404| 0| 0| 183111| 32760| 520 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 525
| |0x104B5400|24B102B20F1109F9|H| 0x00|0000|000F|0000|05E8| 4185|155| 38116| 22943| |0x104B5C00|24B102B20F1109FD|H| 0x00|0000|000F|0000|07E2| 3755|143| 40929| 24885| Fabric OS 6.2 administrator guide 521 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 526
522 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 527
zoning services problems in many routine maintenance scenarios. Fortunately, very few device drivers still behave this way. Many current device drivers HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch platforms. In this mode, only 256 ports are supported guide 523 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 528
. In addition to the PID formats listed here, interoperability mode supports additional PID formats that are not discussed in this guide. Impact of changing the fabric PID format If your fabric contains switches that use Native PID format, HP recommends that you change the format to Core PID before - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 529
binding. For those few drivers that do use static or by using a manual update procedure on the host 530 for instructions. Changes to firmware, change the PID back to supported PIDs such as Core PID. If the database is automatically converted, save the converted database, and then download guide 525 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 530
and later/6.0 Change fabric to Core PID. Extended Edge is not supported in Fabric OS 6.0. Host reboot is required. Evaluating the fabric If how each device driver will respond to the PID format change. • Determine how any multipathing software will respond to a fabric service interruption. If - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 531
no inherent PID binding problem with either AIX or HP/UX. It is the HBA drivers shipping with these operating systems that bind by PID. Both operating systems are expected to release HBA drivers that bind by WWN, and these drivers might already be available through some support channels. Work with - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 532
format enabled, so it is not necessary to perform the PID format change on these switches. Migrating from manual PID binding (such as persistent binding on an HBA) to manual WWN binding and upgrading drivers to versions that do not bind by PID can often be done before setting the core PID format - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 533
the hosts last. 9. For any devices manually bound by PID, bring the device back service provider in these cases. Changing to core PID format In Fabric OS release 4.2.0 and later, Native PID format is not supported in the configuration file and then download the edited file, the PID format guide 529 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 534
the director. If you are using Extended Edge PID format (for example, the HP StorageWorks 4/256 SAN Director with configuration option 5) and would like to map the or impossible to execute without downtime. In some cases, device drivers allow you to specify static PID binding. In these cases, - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 535
listed below that support the addressing mode: • HP StorageWorks SAN Switch 2/8-EL and HP StorageWorks SAN Switch 2/16-3.1.2 or later • HP StorageWorks SAN Switch 2/8V, HP StorageWorks SAN Switch 2/16V, HP StorageWorks SAN Switch 2/32, HP StorageWorks Core Switch 2/64, HP StorageWorks SAN Director - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 536
At this point, all switches in the fabric are operating in the new addressing mode. HP-UX procedure for changing the PID format This procedure is not intended to be comprehensive. It provides a starting point from which a SAN administrator could develop a - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 537
this example, the NO_HW entry is no longer listed: het46 (HP-50001)> ioscan -funC disk Class I H/W Path Driver S/W State H/W Type Description disk 0 0/0/1/1.2.0 adisk CLAIMED DEVICE SEAGATE . Enable the core switches first, and then the edges. Fabric OS 6.2 administrator guide 533 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 538
must be disabled. The swapped area IDs for the two ports remain persistent across reboots, power cycles, and failovers. HP StorageWorks 4/256 SAN Director and HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director platforms only: You can swap only ports 0 through 15 on the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 539
6. Disable the port swap feature: portswapdisable Table 102 Physical port numbers and logical area IDs for swapped ports Slot Slotport Swport Area 2 2 18 19 2 3 19 18 Fabric OS 6.2 administrator guide 535 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 540
536 Configuring the PID format - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 541
standards and behaviors between various versions of firmware. Table 103 Account/password characteristics matrix USERID Account name changing No feature No, regardless of security mode. Supports the userRename command. Maximum and minimum number of characters for a administrator guide 537 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 542
for any change to take effect? When does the password prompt appear? Is a user forced to answer password prompts before getting access to the firmware? No. Partial changes of all four passwords are allowed. When users connect as root, factory, or admin, the accounts with default password will be - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 543
firmware for various Fabric OS versions. Table 105 Password migration behavior during firmware firmware release for the first time. are preserved. are preserved. Passwords preserved during subsequent firmware firmware firmware HP. A non-disruptive Contact HP n/a password? Contact HP and provide the - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 544
540 Understanding legacy password behavior - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 545
on HP supported interop configurations, refer to the HP StorageWorks Fabric interoperability: merging fabrics based on M-Series and B-Series Fibre Channel switches on the following HP website: http://h18000.www1.hp.com/products/storageworks/san/documentation.html. Fabric OS 6.2 administrator guide - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 546
542 Mixed fabric configurations for non-merge SANs - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 547
following pages and steps have been provided to integrate the 400 MP Router in a fabric with the HP StorageWorks Multi-Protocol Router. The figures in the following pages demonstrate how the 400 MP Router should , the old router can be taken out of the setup. Fabric OS 6.2 administrator guide 543 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 548
Redundant configuration Figure 89 shows an example of a simple redundant configuration. The configuration shown in Figure 89, shows that old routers can be removed one by one. For example, FC router 2 can be replaced with the new FC router. You are expected to maintain the connections to the edge - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 549
the upgrade process, these devices will face disruption unless there is redundancy support provided from the device end. 400 MP Router allows the end devices by issuing the configure command, if they are not default. 7. Manually configure additional values as necessary: • To match the xlate Domain - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 550
546 Migrating from an MP Router to a 400 MP Router - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 551
as downloading firmware, SNMP polling, SNMP traps, troubleshooting, and configuration. To facilitate this communication, the HP StorageWorks not supported over Inband Management interfaces. Once the switch is set up with the appropriate IP addresses and routes, the IP driver will guide 547 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 552
Address for the inband management interface. The IP address must be in IPv4 format, followed by the subnet mask. IPv6 addresses are not supported. This operand is required with the ipaddrset and ipaddrdel options. Specifies the subnet mask for the IP address in dotted-decimal notation. 548 Inband - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 553
CP, the GE port processor inband device address for that GE port is used instead of the specified gateway. If no gateway Fabric OS 6.2 administrator guide 549 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 554
the CP is sent to the HP StorageWorks 400 Multi-Protocol Routers, HP recommends that you use host-specific routes for the HP StorageWorks 400 Multi-Protocol Router management destination routes. This ensures that the HP StorageWorks 400 Multi-Protocol Router is not acting as - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 555
of these devices prior to entering FIPs mode. Examples of supported configurations The examples below demonstrate how to set up your HP StorageWorks 400 Multi-Protocol Routers using two different network scenarios. route add -host 10.1.1.10 gw 192.168.3.10 Fabric OS 6.2 administrator guide 551 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 556
host specific route can be used on all routes specified for the HP StorageWorks 400 Multi-Protocol Routers. This will ensure that only IP traffic destined for the switch's management addresses are routed to the HP StorageWorks 400 Multi-Protocol Routers and all other IP traffic that may - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 557
.168.3.250 b. Configure the route going to the 7500 R1 management address. linux> route add -host 10.1.2.20 gw 192.168.3.250 Fabric OS 6.2 administrator guide 553 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 558
554 Inband Management - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 559
feature. Remote Switch enables you to connect two remote HP switches over an IP network, enabling communication of services: The Remote Switch fabric configuration fully supports all fabric services, including distributed name service, registered state change notification, and alias service guide 555 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 560
NOTE: Consult your gateway vendor for supported and qualified configurations. • R_A_TOV: Specify a Parameters (yes, y, no, n): [no] Arbitrated Loop parameters (yes, y, no, n): [no] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] Committing configuration...done - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 561
Index A AAA service requests 83 access active ports 49 browser support 108 changing account download 212 configuration, displaying 208 creating 200 deactivating 203 defined AD configuration 199 deleting 205, 206 effective AD configuration 199 firmware 201 Fabric OS 6.2 administrator guide 557 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 562
order 272 powering off and on 273 types of 267 boot password 78 boot PROM password 78 broadcast zones 241 browser and Java support 108 browser, configuration 110 buffer credit management 430 buffer credit recovery 429 buffer-to-buffer credits 423 C certificate authorities (CA) 109 certificates - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 563
for trunking 436 devices no access 324 proxy 371 zoning 324 dictionary.brocade 86 disabled zone configuration 237 disabling 55 port 55 RADIUS configuration 96 FCS policy 293 management server database 294 platform services 293 topology discovery 298 well-known address 293 document conventions 26 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 564
credit management 430 buffer credit recovery 429 buffer credits supported distances 427 buffer requirement calculation 425 buffer-to-buffer iSCSI virtual target 316 FC Fastwrite 469 FC router 125 FC routing concepts 368 supported platforms 367 FC routing types 372 FC targets 312, 315 for iSCSI zone - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 565
firmware download firmware versions 228 USB device 224 validating 231 verify progress 214 firmware upgrade with Admin Domains 199 frame transfer with brocade zoning 234 HP storage web site 28 Subscriber's choice web site 28 technical support 27 HTTPS service. See iSNS interswitch link 56 IP - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 566
, enabling 310 port, enabling 310 shared secret setting 307 supported initiators 306 translation 301 virtual initiators virtual FC devices 301 318 manual creation 315 user-defined 317 ISL 56 iSNS client 329 client service 329 client service, disabling 331 client service, enabling 329 client service, - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 567
318 display map 318 mapped via IQNs 312 mapping 317 virtual target creation 312 LWL ISL Trunking support for 435 M MAC address, port 312 making basic connections 55 managing accounts 74 zoning configurations in 74 changing defaults 32 default 32 limits 32 Fabric OS 6.2 administrator guide 563 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 568
537 password migration during firmware changes 539 password policies 524 fixed addressing mode 523 formats 524 HP/UX procedure 532 hybrid update 529 impact 534 PKI 108 platforms, FC routing supported 367 POD activating 50 activating ports 49 configuration 88 RADIUS service Windows configuration 90 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 569
105 secure sockets layer 108 security Auth policy 127 Brocade MIB 101 browsers 108 certificates 100 certificates, deleting maximum 311 status of iSNS client service 329 storage-based zoning 234 subnet mask 311 Subscriber's choice, HP 28 support FC router 125 Java version 108 administrator guide 565 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 570
firmware version, finding 216 switch names 40 switch WWN in Admin Domains 197 SWL, ISL Trunking support acceleration 466 tape write acceleration 514 technical support, HP 27 telnet connection 30 text symbols 26 173 platform services 293 ports, moving 186 restrictions 183 supported platforms 181 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 571
configuration 236 schemes 236 soft-zoning 234 splitting a fabric 262 storage-based 234 troubleshooting 262 types 234 viewing 248 viewing configurations 257 zone configuration clearing 258 zone configurations zones 361 TI zones 339 zoning devices 324 license 325 Fabric OS 6.2 administrator guide 567 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 572
568 - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 573
1 Windows 2000 VSA configuration 86 2 Example of a Brocade DCT file 92 3 Example of the dictiona.dcm file 304 38 Discovery domain set configuration example 305 39 HP StorageWorks B-Series iSCSI Director Blade ports 309 40 iSCSI gateway service in an iSCSI FC zone 324 41 iSCSI network - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 574
Gateway mode without F_Port trunking 445 76 Switch in Access Gateway mode with F_Port masterless trunking 445 77 Trunk group configuration for the HP StorageWorks 8/40 SAN Switch 449 78 Network using FCIP 458 79 Single tunnel, Fastwrite and Tape Pipelining enabled 467 80 Multiple tunnels to - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 575
roles 85 15 Dictionary.brocade file entries 86 16 Secure protocol support 99 17 Items needed 123 30 SCC policy states 125 31 Supported services 137 32 Implicit IP Filter rules 137 54 Configuration upload and download scenarios in an AD context 212 55 Effects of firmware changes on accounts and - HP StorageWorks 8/8 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-00 - Page 576
LSAN zone binding 395 78 Types of monitors supported on HP StorageWorks switch models 405 79 Number of Logical Switches that support performance monitors 406 80 Predefined values at offset 538 105 Password migration behavior during firmware upgrade/downgrade 539 106 Password recovery options 539
HP StorageWorks
Fabric OS 6.2 administrator guide
Part number: 5697-0016
Edition: May 2009