HP StorageWorks 8/80 HP StorageWorks Fabric OS 6.1.x administrator guide (5697
HP StorageWorks 8/80 - SAN Switch Manual
View all HP StorageWorks 8/80 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP StorageWorks 8/80 manual content summary:
- HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 1
HP StorageWorks Fabric OS 6.1.x administrator guide Part number: 5697-0234 November 2009 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 2
Company, L.P. © Copyright 2008 Brocade Communications Systems, Incorporated. Hewlett-Packard HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 3
guide 19 Supported Fabric OS 6.1.x HP StorageWorks hardware 19 Intended audience 20 Related documentation 20 Document conventions and symbols 20 Rack stability 21 HP technical support 21 Customer self repair 21 Product warranties 21 Subscription service 22 HP 39 Firmware upgrade - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 4
history policy 65 Setting the password expiration policy 65 Upgrade and downgrade considerations 66 Setting the account lockout policy 66 Denial of service implications 67 Authentication model 67 Creating Fabric OS user accounts 69 Managing Fabric OS users on the RADIUS server 70 Windows - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 5
Telnet 92 Configuring for the SSL protocol 93 Browser and Java support 93 Summary of SSL procedures 93 Choosing a CA 94 Generating file copy 101 Setting up SCP for configuploads and downloads 101 Listener applications 102 Ports and applications used by Fabric OS 6.1.x administrator guide 5 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 6
consistency policies 133 Non-matching fabric-wide consistency policies 134 FIPS support 135 Zeroization functions 135 Power-up self tests 136 Conditional tests 136 configuration 143 Restoring a configuration 145 Configuration download without disabling a switch 145 Security considerations - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 7
download process on switches 178 Downloading firmware to a Director 179 Overview of the firmware download process on directors 180 4/256 SAN Director and DC Director firmwareDownload procedure 180 FirmwareDownload from a USB device 183 Enabling USB 183 Fabric OS 6.1.x administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 8
the relative path 184 Downloading the 6.1.0 image using the absolute path 184 Director restrictions for downgrading 184 FIPS Support 184 Public and private key management 184 Updating the firmwarekey 185 The firmwareDownload command 186 Configuring the switch for signed firmware 186 Power-on - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 9
slot information 231 Inter Chassis Link behavior between two HP StorageWorks DC Directors 232 10Routing traffic 233 Data routing Supported iSCSI initiators 255 Checklist for configuring iSCSI 255 FC4-16IP Blade Configuration 257 FC4-16IP port numbering 257 Enabling the iSCSI gateway service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 10
an iSCSI VT for a specific FC target 263 Manual iSCSI VT creation 263 Mapping LUNs on a service configuration 276 Displaying iSNS client service status 276 Enabling the iSNS client service 276 Disabling the iSNS client service for TI zones 285 Supported configurations for Traffic Isolation - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 11
Service 295 Supported platforms 295 Supported configurations 295 Fibre Channel routing concepts 295 Proxy devices 298 Routing types 299 Fibre Channel NAT and phantom domains 299 Setting up the FC-FC routing service 334 Deleting end-to-end monitors 334 Fabric OS 6.1.x administrator guide 11 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 12
372 Disabling F_Port trunking 373 F_Port Trunking Monitoring 373 Configuration management for trunk areas 373 Trunking for Access Gateway 373 20Configuring and monitoring FCIP extension services 375 FCIP services licensing 375 12 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 13
that support SAN extension over IP 376 FCIP concepts 377 Virtual ports and FCIP tunnels 377 Virtual port types 377 Compression 378 Traffic shaping 378 QoS concepts and implementation over FCIP 378 Layer three DiffServ Code Points (DSCP 379 VLAN tagging and layer two class of service (L2CoS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 14
and PDCM considerations 427 Zoning and link incident reporting 427 Troubleshooting 428 Identifying ports 428 Backing up and restoring FICON configuration and monitoring FICON Extension Services 433 FICON extension products licensing 433 Platforms that support FICON extension over IP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 15
format changes 453 Basic procedure 453 HP/UX procedure 454 AIX procedure 455 prompting behaviors 460 Password migration during firmware changes 461 Password recovery options 461 scenarios 475 Index 479 Figures 1 Example of a Brocade DCT file 75 2 Example of the dictiona.dcm guide 15 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 16
iSCSI VT advanced LUN mapping 251 20 IQN example 252 21 Discovery domain set configuration example 253 22 FC4-16IP ports 257 23 iSCSI gateway service in an iSCSI FC zone 271 24 iSCSI network with iSNS server and clients 276 25 Traffic Isolation zone creating a dedicated path through the fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 17
.brocade file entries 71 15 Secure protocol support 87 states 114 30 Supported services 125 31 Implicit download scenarios in an AD context 171 51 Effects of firmware changes on accounts and passwords 174 52 Recommended firmware supported by each Director 230 66 Supported configuration - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 18
iSCSI initiators 255 70 iSCSI target gateway configuration steps 255 71 Hardware and firmware compatibility for nonsecure fabrics 326 72 Types of monitors supported on B-Series switch models 329 73 Advanced Performance Monitoring commands 332 74 Commands to add filter-based monitors 335 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 19
About this guide This guide provides information about: • Installing and configuring Fabric OS 6.1.x • Managing user accounts • Using licensed features Supported Fabric OS 6.1.x HP StorageWorks hardware Table 1 lists Brocade and HP StorageWorks product models supported by Fabric OS 6.1.x. =Table 1 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 20
HP StorageWorks Fabric OS 6.1.x release notes • Web Tools administrator's guide You can find these documents from the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals equipment or data. IMPORTANT: Provides clarifying information or specific instructions. 20 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 21
full weight of HP technical support For worldwide technical support information, see the HP support website: http://www.hp.com/support/ Before contacting HP HP ships the part directly to you so that you can install it at your convenience. Some parts do not qualify for CSR. Your HP-authorized service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 22
enhancements, new driver versions, firmware updates, and other product resources. HP websites For additional product information, see the following HP websites: • http://www.hp.com • http://www.hp.com/go/storage • http://www.hp.com/support/manuals Documentation feedback HP welcomes your feedback - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 23
present considerations for interoperating with them. The hardware reference manuals for HP products describe how to power up devices and set their IP addresses. After the IP address is set, you can use the CLI procedures contained in this guide. For additional information about the commands used in - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 24
can use Web Tools to perform a fast boot. When the switch comes up, the Telnet quota is cleared. (For instructions on performing a fast boot with Web Tools, see the Web Tools Administrator's Guide.) • If you have the required privileges, you can connect through the serial port, log in as root, and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 25
administrative account as shown in Table 3 to log into the switch for the first time and to perform the basic configuration tasks. Fabric OS 6.1.x administrator guide 25 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 26
number. Table 3 Default administrative account names and passwords Model Administrative account HP StorageWorks 4/8 SAN Switch, 4/16 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 27
. NOTE: You can use either IPv4 or IPv6 with a classless inter-domain routing (CIDR) block notation to set up your IP addresses. Fabric OS 6.1.x administrator guide 27 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 28
interface addresses on HP StorageWorks 2/128, 4/256 SAN Director, DC Director models, and in environments where DHCP service is not available in the Ethernet IP address field. IMPORTANT: IP address 0.0.0.0 is not supported in Fabric OS versions earlier than 5.2.0. On the iSCSI Director (FC4-16IP) - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 29
HP switches have DHCP enabled; check the latest Fabric OS 6.x release notes for a complete list of switches. The 4/256 SAN Director and DC SAN Backbone Director (short name, DC Director) do not support DHCP. The Fabric OS DHCP client supports BROCADE" followed by 28 for instructions on guide 29 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 30
with an incorrect date and time value still functions properly. However, because the date and time are used for logging, error detection, and troubleshooting, you should set them correctly. Authorization access to set or change the date and time for a switch is role-based. For an understanding - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 31
Guide for detailed information about setting time zones using the offset format. See "About the firmware download setup at the default setting. • System services that have already started will reflect the time to list all of the time zones supported by the firmware. • Use timezone_fmt to set the time - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 32
configured is IPv6, then distributing the same in the fabric will not be possible to switches earlier than Fabric OS 5.3.0 because IPv6 is supported for Fabric OS version 5.3.0 and later. The default value LOCL will be distributed to pre-5.3.0 switches. To synchronize local time with an external - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 33
Switch names can be from 1 to 31 characters long, except for the HP StorageWorks DC Director. The DC Director name must be 1 to 15 characters IDs are assigned dynamically when a switch is enabled, you can reset them manually so that you can control the ID number or resolve a Domain ID guide 33 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 34
with your switch software; if not, you can purchase licenses separately from HP. License keys are provided on a per-product and per-feature basis the zoning license for Fabric OS 5.2.0. Upgrading is allowed, but downgrading is not supported. If a license is not version-based, then it is valid for all - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 35
a license key. The HP StorageWorks Software License Key instruction page opens:h 3. Enter the information in the required fields. 4. Follow the onscreen instructions to generate multiple license keys CP will propagate its configuration (including license keys). Fabric OS 6.1.x administrator guide 35 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 36
3. Verify that the license was added by entering the licenseShow command. The licensed features currently installed on the switch display. If the feature is not listed, enter the licenseAdd command again. Some features may require additional configuration, or you may need to disable and reenable the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 37
attached switches. Local and attached switches. FCIP FICON FICON-CUP FIPS Firmware download Full fabric FC-IP Services or High Performance Extension over FCIP/FC No license required. FICON Management of switches. n/a Local switch Local switch Local switch Fabric OS 6.1.x administrator guide 37 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 38
Table 4 License requirements Feature QoS RADIUS RBAC Routing traffic Security SNMP SSH public key Top Talkers Traffic Isolation Trunking Two-factor authentication Two-to-four domains in a fabric USB usage Web Tools Zoning License Adaptive Networking No license required. No license required. No - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 39
then, upon HA failover the time-based license would no longer be supported on the director or enterprise-class platform. You would not have access hardware reference guide for your switch for the specific POD licensing available. POD licensing is ready to be unlocked in the switch firmware. Its - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 40
31. For details on inserting transceivers, see the switch's Hardware Reference Manual. After you install a license key, you must enable the ports to Dynamic Ports on Demand The Brocade 4Gb SAN Switch for HP c-Class BladeSystem supports blade modules. This switch supports the Dynamic Ports on Demand - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 41
16, 21, 22, 23 The example above shows output from a switch that manually assigned POD licenses. Activating Dynamic Ports on Demand If the switch is in the . IMPORTANT: The Dynamic POD feature is supported on the Brocade 4Gb SAN Switch for HP c-Class BladeSystem only. To enable Dynamic Ports guide 41 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 42
8 ports are assigned to the base switch license 0 ports are assigned to the full POD license Ports assigned to the base switch license: 1, 2, 5, 6, 8*, 21, 22, 23 Ports assigned to the full POD license: None Ports not assigned to a license: 0, 3, 4, 7, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 43
in this switch: 12 port assignments are provisioned by the base switch license 12 port assignments are provisioned by a full POD license Fabric OS 6.1.x administrator guide 43 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 44
10 ports are assigned to installed licenses: 10 ports are assigned to the base switch license 0 ports are assigned to the full POD license Ports assigned to the base switch license: 1*, 2*, 3*, 4*, 5*, 6*, 8*, 21, 22, 23 Ports assigned to the full POD license: None Ports not assigned to a license: - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 45
connecting a switch to a fabric that contains switches running different firmware versions, you must first set the same PID format on all on the next one. Connecting to other switches See the hardware reference guide for your specific switch for interswitch link (ISL) connection and cable management - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 46
Fabric OS version earlier than 6.x in Secure Fabric OS are not supported through gateway links. To configure a link through a gateway: 1. , 8/40 SAN Switch, 8/80 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 47
621a00 75 Nx_Ports in the Fabric } switch:admin> The number of devices listed should reflect the number of devices that are connected. Fabric OS 6.1.x administrator guide 47 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 48
agShow command. switch:admin> agshow Worldwide Name Ports Enet IP Addr Firmware Local/Remote Name 10:00:00:05:1e:02:1d:b0 16 10 see the trackChangesHelp command in the Fabric OS Command Reference). For troubleshooting information on the track changes feature, see "Inaccurate information in - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 49
MARGINAL or DOWN threshold to change the overall status of the switch. For more information about setting policy parameters, see the Fabric Watch Administrator's Guide. To set the switch status policy threshold values: 1. Connect to the switch and log in using an account assigned to the admin role - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 50
, 8/40 SAN Switch, 8/80 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 These events include login failures, zone configuration changes, firmware downloads, and other configuration changes-in other words-critical - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 51
and take effect. • Audit log configuration is updated through a configuration download. See the Fabric OS Command Reference for more information about the auditCfg 4 Firmware Audit firmware download start, firmware complete, and any other errors encountered during a firmware download. 5 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 52
switch:admin> auditcfg --show Audit filter is enabled. 2-SECURITY 4-FIRMWARE 5. To verify the audit event log setup, make a 10.32.220.7.2.2] raslogd: AUDIT, 2006/06/02-15:25:53, [SULB-1003], INFO, FIRMWARE, root/root/NONE/console/CLI, ad_0/ras007_chassis, , Firmwarecommit has started. Jun 5 06:45:33 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 53
switches and Directors To avoid corrupting your file system, HP recommends that you perform graceful shutdowns of switches and the switch. High Availability of daemon processes Fabric OS 6.x supports automatic restart of non-critical daemons. Starting these non-critical 6.1.x administrator guide 53 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 54
Layer Daemon (used by Manageability Applications). Event Monitor Daemon (used by port and switch SCNs, firmwareDownload, and configDownload) Remote Access Service Log Daemon logs error detection, reporting, handling, and presentation of data into a format readable by management tools and the user - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 55
factory, admin, and user-Fabric OS supports up to 252 additional user-defined accounts for authenticating users-remote RADIUS services, remote LDAP service, and the local switch user database. The local user database is manually synchronized using the distribute command to push administrator guide 55 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 56
Using Role-Based Access Control (RBAC) Role-Based Action Control (RBAC) defines the capabilities that a user account has based on the role the account has been assigned. For each role, there is a set of pre-defined permissions on the jobs and tasks that can be performed on a fabric and its - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 57
O O OM N OM O OM N Fabric O O O O OM O OM O Fabric Distribution N N N N OM N OM OM Fabric Routing O Fabric Watch O FICON O Firmware Management O FRU Management O O O O OM O OM N OM OM N OM O OM N OM OM N OM O OM N OM OM O OM O OM O OM - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 58
Table 10 RBAC permissions matrix (continued) Category Role permission User Operator Switch admin Zone admin Fabric admin HA (High Availability) O O iSCSI O O License O OM LDAP N N Local User Environment OM OM Logging O OM Management Access Configuration O OM Management - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 59
Defining local user accounts In addition to the default administrative and user accounts, Fabric OS supports up to 252 user-defined accounts in each logical switch (domain). These accounts expand all accounts permitted to select the specified admindomain_ID Fabric OS 6.1.x administrator guide 59 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 60
To create an account: 1. Connect to the switch and log in using an admin account. 2. Enter the following command: userConfig --add -r [-h ] [-a ] [-d ] [-x] username -r rolename -h admindomain_ID -a admindomain_ID_list -d - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 61
, the home Admin Domain will either remain as it was or will be the lowest Admin Domain ID in the remaining list. Fabric OS 6.1.x administrator guide 61 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 62
account names. Starting with Fabric OS 5.1.0 password policies apply. For information on password behavior when you upgrade (or downgrade) firmware, see "Upgrading and downgrading firmware" on page 174. To change the password for the current login account: 1. Connect to the switch and log in using - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 63
the switch and log in using an admin account. 2. Enter the following command: fddCfg --localaccept PWD where PWD is the user database policy. Other supported policy databases are SCC, DCC, AUTH, FCS, and IPFILTER. To reject distributed user databases on the local switch: 1. Connect to the switch and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 64
attribute and password state information) are synchronized across CPs and remain unchanged after an HA failover. Password policies can also be manually distributed across the fabric (see "Distributing the local user database" on page 63). Following is a list of the configurable password policies - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 65
is set to a non-zero value, MinPasswordAge and Warning must be set to a value that is less than or equal to MaxPasswordAge. Fabric OS 6.1.x administrator guide 65 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 66
same lockout threshold as the other roles. It can be automatically unlocked after the lockout duration passes or when it is manually unlocked by either a user account that has a securityAdmin or other Admin role. • userConfig -change -u • passwdCfg -disableadminlockout Note that the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 67
supported management HP service. You can set the configuration with both RADIUS or LDAP service and local authentication enabled so that if the RADIUS or LDAP servers do not respond due to power failure or network problems, the switch uses local authentication. Fabric OS 6.1.x administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 68
cannot log in because of a RADIUS or LDAP server connection problem, Web Tools displays a message indicating server outage. Table 12 supported not supported Replaces --radiuslocalbackup. On On Authenticates management connections against any RADIUS databases. If RADIUS fails because the service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 69
any LDAP database(s) only. If LDAP service is not available or the credentials do not name, assign the appropriate switch access roles. RADIUS and LDAP support all the defined RBAC roles described in Table 8 on page Brocade's SMI Private Enterprise Code Fabric OS 6.1.x administrator guide 69 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 70
Brocade-AVPairs2 4 Brocade-AVPairs3 5 Brocade-AVPairs4 2 or higher 1 octet, calculated by server, including vendor-type and vendor-length ASCII string Multiple octet, maximum 253, indicating the name of the assigned role and other supported 2000 internet authentication service (IAS) server to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 71
brocade file entries Include Key Value VENDOR ATTRIBUTE Brocade Brocade-Auth-Role AdminDomain 1588 1 string Brocade Brocade-Auth Brocade- Brocade-Auth-Role = "ZoneAdmin", Brocade-AVPairs1 = "ADList=1,2,6, Brocade Brocade-Auth-Role = "operator", Brocade-AVPairs1 = "ADList=1,2;HomeAD=2", Brocade - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 72
RADIUS server to support clients under different : www.freeradius.org Follow the installation instructions at the website. FreeRADIUS runs on service on Linux consists of the following tasks: • Adding the Brocade attribute to the server • Creating the user • Enabling clients To add the Brocade - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 73
users. JohnDoe Auth-Type := System, Brocade-Auth-Role = "admin" When you use Network Information Service (NIS) for authentication, the only way the RADIUS server as follows: $PREFIX/sbin/radiusd Windows 2000 The instructions for setting up RADIUS on a Windows 2000 server are listed here guide 73 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 74
the server For more information and instructions on configuring the server, refer to need to configure the RADIUS server for a HP StorageWorks switch. A client is the device that the switch. e. After returning to the Internet Authentication Service window, add additional policies for all login types - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 75
-ports = no port-number-usage = per-port-type help-id = 2000 b. Create a brocade.dct file that needs to be added into dictiona.dcm file located in the following path: C:\Program Files\RSA Security\RSA RADIUS\Service The dictionary files for RSA RADIUS Server must remain in the installation directory - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 76
.dct @ascndvsa.dct @axc.dct @brocade.dct @bandwagn.dct @brocade.dct - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 77
the user to the group by adding the user to the group. For instructions on how to create a user refer to Microsoft documentation to create a of the setup. For Windows 2003, this utility comes with Service Pack 1 or you can download this utility from the Microsoft website. 2. Go to CN guide 77 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 78
. You must be logged in as admin or switchadmin to configure the RADIUS service. NOTE: On dual-CP switches (the 4/256 SAN Director and the DC to use the aaaConfig command to set up a switch for RADIUS or LDAP service. To display the current RADIUS configuration: 1. Connect to the switch and log - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 79
a server name or IPv4 address. Microsoft's Active Directory does not support IPv6 addresses. Avoid duplicating server listings (that is, listing the same LDAP server must be configured before you can enable the RADIUS or LDAP service. If no RADIUS or LDAP configuration exists, turning it on triggers - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 80
When the LDAP authentication mode is set to ldap;local, you cannot downgrade the Fabric OS to any version earlier than 6.x. Previous versions do not support the ldap;local mode. To enable and disable a RADIUS or LDAP server: 1. Connect to the switch and log in using an admin account. 2. Enter this - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 81
's Active Directory does not support IPv6 addresses. Avoid duplicating server RADIUS or LDAP servers are contacted for service: 1. Connect to the switch and log of power outage or network problems. To enable or disable lost boot PROM password by contacting HP. Without the recovery string, a guide 81 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 82
Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, 400 Multi-protocal (MP) Router The instructions to Customer Support for password for higher security. The firmware prompts for this password only - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 83
following messages display: Send the following string to Customer Support for password recovery: afHTpyLsDo1Pz0Pk5GzhIw== Enter the supplied recovery is 15 characters or longer is recommended for higher security. The firmware only prompts for this password once. It is not necessary to guide 83 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 84
40 SAN Switch, 8/80 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, 400 Multi-protocal (MP) Router The password recovery instructions contained within this section are only for the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 85
requested information at the prompts. To recover a lost root password or boot PROM password, contact HP. You must have previously set a recovery string to recover the boot PROM password. NOTE: Contact HP to recover a lost root password or boot PROM password. You must have previously set a recovery - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 86
86 Managing user accounts - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 87
two remote hosts, using the Secure Shell (SSH) protocol. Configuration upload and download support the use of SCP. SNMP SSH SSL Supports SNMPv1, v2, and v3. SNMP is used in network management systems to management security in the storage area network. Fabric OS 6.1.x administrator guide 87 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 88
MIB files, naming conventions, loading instructions, and information about using Brocade's SNMP agent, see the Fabric An SSL switch certificate must be installed if HTTPS is used. Secure protocols are supported on Fabric OS v4.1.0 and later switches. Switches running earlier Fabric OS versions can - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 89
secure channel will be rejected. Fabric OS 6.1.x and later supports SSH protocol version 2.0 (ssh2). For more information on SSH, The Secure Shell: The Definitive Guide by Daniel J. Barrett, Richard Silverman to establish secure connections without having to manually type in a password. RSA and DSA - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 90
. 3. Respond to the prompts as follows: IP Address Remote directory Public key name Login name Password Enter the IP address of the switch. IPv6 is supported by sshUtil. Enter the path to the remote directory where the public key is stored. Enter the name of the public key. Enter the name - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 91
Respond to the prompts as follows: IP Address Enter the IP address of the remote host. IPv6 is supported by sshUtil. Remote directory Enter the path to the remote directory where the public key will be stored delpubkeys command to delete all public keys. Fabric OS 6.1.x administrator guide 91 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 92
Configuring the Telnet protocol Telnet is enabled by default. To prevent users from passing clear text passwords over the network when they connect to the switch, you can block the Telnet protocol using an IP Filter policy. NOTE: Before blocking Telnet, make sure you have an alternate method of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 93
support (called "cipher strength") using the Internet Explorer Help:About menu option. If you are running an earlier version of Internet Explorer, you may be able to download on levels of browser and Java support, see the Web Tools Administrator's Guide. Summary of SSL procedures You configure - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 94
If you use different CAs, management services operate correctly, but the Web Tools private key pair Done. IMPORTANT: HP recommends selecting 1024 in most cases. CA support for the 2048-bit key size Jose Organization Name (eg, company name):Brocade Organizational Unit Name (eg, department name):Eng - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 95
be sent. Enter your account name and password on the server. Obtaining certificates Check the instructions on the CA website; then, perform this procedure for each switch. 1. Generate and store to activate it. The certificate is downloaded to the switch. Fabric OS 6.1.x administrator guide 95 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 96
). HTTP attributes Enter yes. Secure HTTP enabled Enter yes. For example: Configure... System services (yes, y, no, n): [no] ssl attributes (yes, y, no, n): [no procedures are guides for installing root certificates to Internet Explorer and Mozilla browsers. For more detailed instructions, refer - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 97
.crt.) 8. Click Open and follow the instructions to import the certificate. Installing a root certificate to the Java plug-in For information on Java requirements, see "For more details on levels of browser and Java support, see the Web Tools Administrator's Guide." on page 93. This procedure is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 98
command. Configure... System services (yes, y, no, n): [no] ssl attributes (yes, y, no, n): [no] rpcd attributes (yes, y, no, n): [no] cfgload attributes (yes, y, no, n): [no] y Enforce secure config Upload/Download (yes, y, no, n): [no] Enforce signature validation for firmware (yes, y, no, n): [no - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 99
's IP address in dot notation: [0.0.0.0] Trap Recipient's IP address in dot notation: [0.0.0.0] Trap Recipient's IP address in dot notation: [0.0.0.0] Committing configuration...done. Fabric OS 6.1.x administrator guide 99 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 100
Sample SNMPv1 configuration switch:admin> snmpconfig --set snmpv1 SNMP community and trap recipient configuration: Community (rw): [Secret C0de] admin Trap Recipient's IP address in dot notation: [0.0.0.0] 10.32.225.1 Trap recipient Severity level : (0..5) [0] 1 Community (rw): [OrigEquipMfr] Trap - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 101
Fibre Channel Switch sysLocation = End User Premise sysContact = Field Support authTraps = 0 (OFF) ***** Are you sure? (yes, [no] y Enforce secure config Upload/Download (yes, y, no, n): [no] y Enforce signature validation for firmware (yes, y, no, n): [no] Fabric OS 6.1.x administrator guide 101 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 102
, 8/40 SAN Switch, 8/80 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN you are using the FC-FC Routing Service, be aware that the secModeEnable command is not supported in Fabric OS 6.1.x. Table 21 lists - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 103
the ipfilter command to block the port. This port is used by Platform API. Use the ipfilter command to block the port. Disable the SNMP service on the remote host if you do not use it, or filter incoming UDP packets going to this port. Use the ipfilter command to block - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 104
104 Configuring standard security features - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 105
List (ACL) policies, authentication policies, and IP Filtering for HP's Fibre Channel switches. NOTE: Run all commands, with the (IPFilter) policy-Used to filter traffic based on IP addresses. Each supported policy is identified by a specific name, and only one policy of each administrator guide 105 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 106
in the following sections to manage common settings between two or more of the DCC, FCS, and SCC policies. For instructions relating to a specific policy, refer to the appropriate section. • "Displaying ACL policies" on page 107 Displays a list of all active and defined ACL policies on - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 107
and distribute the database within the fabric. Automatic distribution is supported and you can either configure the switches in your fabric to accept the FCS policy using the fddcfg --fabswideset command or manually distribute the FCS policy using the distribute -p command. Changes made - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 108
the changes have been saved or activated; they can be aborted later if you have set your fabric to distribute the changes manually. Table 25 FCS policy states Policy state Characteristics No active policy Any switch can perform fabric wide configuration changes. Active policy with one entry A - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 109
of FCS switches: 1. Log in to the primary FCS switch using an account assigned to the admin role. 2. Type secPolicyShow "Defined", "FCS_POLICY". Fabric OS 6.1.x administrator guide 109 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 110
primary FCS switch is allowed to distribute the database. The FCS policy may need to be manually distributed across the fabric using the distribute -p command if there is no support for automatic distribution in a mixed environment with 5.3.0 and pre-5.3.0 switches. Since this policy is distributed - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 111
database. No distribution is initiated as pre-5.2.0 versions do not support this operation. Configuring a DCC policy Multiple DCC policies can regarding DCC policies and F_Port trunking, refer to the Access Gateway Administrator's Guide. Each device port can be bound to one or more switch ports; - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 112
private-loop HBAs do not respond to port login from the switch and are not enforced by the DCC policy. This does not create a security problem because these HBAs cannot contact any device outside of their immediate loop. • DCC policies cannot manage or restrict iSCSI connections, that is, an FC - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 113
> secpolicycreate "DCC_POLICY_example", "44:55:66:77:22:33:44:dd;33:44:55:66:77:11:22:cc;4[1-4]" DCC_POLICY_xxx has been created Fabric OS 6.1.x administrator guide 113 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 114
Creating an SCC policy The switch connection control (SCC) policy is used to restrict which switches can join the fabric. Switches are checked against the policy each time an E_Port-to-E_Port connection is made. The policy is named SCC_POLICY and accepts members listed as WWNs, Domain IDs, or - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 115
the secPolicyActivate command. switch:admin> secpolicydelete "DCC_POLICY_ALL" About to delete policy Finance_Policy. Are you sure (yes, y, no, n):[no] y Finance_Policy has been deleted. Fabric OS 6.1.x administrator guide 115 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 116
NOTE: The standards-compliant DH-CHAP and FCAP authentication protocols are not compatible with the SLAP protocol that was the only protocol supported in earlier Fabric OS releases 4.2, 4.1, 3.1, 2.6.x. Fabric OS 6.1.x switch-to-switch authentication implementation is fully backward compatible with - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 117
to ON means that strict authentication is enforced on all E_Ports. If the connecting switch does not support authentication or the policy is switched to the OFF state, the ISL is disabled. During switch OS 5.3.0 or later switches only. The switch disables the Fabric OS 6.1.x administrator guide 117 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 118
the connecting switch does not support authentication. The switches with firmware pre-3.2.0 do not support FCAP/DH-CHAP authentication, so distribution of the device authentication policy is not supported since the device authentication requires manual interaction in setting the HBA shared secrets - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 119
download will not be supported for the following AUTH attributes: auth type, hash type, group type. Supported configurations The following HBAs support authentication: • Emulex LP11000 (Tested with Storport Miniport 2.0 windows driver to the admin role. Fabric OS 6.1.x administrator guide 119 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 120
2. On a switch running Fabric OS 4.x or 5.x, type authUtil --set -a dhchap; on a switch running Fabric OS 3.x, type authUtil "--set -a dhchap". Output similar to the following is displayed: Authentication is set to dhchap. When using DH-CHAP, make sure that you configure the switches at both ends of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 121
the admin role. 2. On a switch running Fabric OS 4.x, 5.x, or 6.x or later, type secAuthSecret --set; on a switch running Fabric OS 3.x, type secAuthSecret "--set". Fabric OS 6.1.x administrator guide 121 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 122
support for automatic distribution. Since this policy is distributed manually, you cannot set fabric-wide consistency policy (fddcfg --fabwideset) for automatic fabric-wide distribution. To distribute the AUTH policy, see "To distribute the local ACL policies:" on page 131 for instructions. Accept - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 123
or denies the traffic to go through the IP management interfaces according to the policy rules. Fabric OS supports multiple IP Filter policies to be defined at the same time. Each IP Filter policy is identified by > is the name of the policy you want to copy. Fabric OS 6.1.x administrator guide 123 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 124
Displaying an IP Filter policy Displays the IP Filter policy content for the specified policy name, or all IP Filter policies if policy name is not specified. For each IP Filter policy, the policy name, type, persistent state and policy rules are displayed. The policy rules are listed by the rule - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 125
names can also be used instead of port number. Table 30 lists the supported service names and their corresponding port number. Table 30 Supported services Service name Port number https 443 rpc 897 secure rpc 898 snmp 161 ssh 22 sunprc 111 Fabric OS 6.1.x administrator guide 125 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 126
Table 30 Supported services (continued) Service name Port number telnet 23 www 80 TCP and UDP protocols are valid selections. Fabric OS 5.3.0 and later does not support configuration to filter other protocols. Implicitly, ICMP type 0 and type 8 packets are always allowed to support ICMP echo - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 127
protocol -act - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 128
of IP Filter policy through Fabric Wide Consistent Policy is not supported in Fabric OS 6.1.x. See "Distributing ACL policies to other must be accept. For configuration instructions, see "Configuring the database distribution settings" on page 129. • Manually distribute an ACL policy database-Run - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 129
on a per-switch basis. Table 34 lists the databases supported in Fabric OS 5.3.0 and later switches. Table 34 Supported policy databases Database type Authentication policy database DCC policy database FCS log in using an account assigned to the admin role. Fabric OS 6.1.x administrator guide 129 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 130
. Distributing ACL policies to other switches This section explains how to manually distribute local ACL policy databases to Fabric 5.2.0 and later switches. policy for a database is strict, the database cannot be manually distributed. When you set a strict fabric-wide consistency policy for - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 131
, or both), to the other switches in the fabric. NOTE: FC routers cannot join a fabric with a strict fabric-wide consistency policy. FC routers do not support the fabric-wide consistency policies. Table 36 describes the fabric-wide consistency settings. Fabric OS 6.1.x administrator - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 132
Table 36 Fabric-wide consistency policy settings Setting Value When a policy is activated Absent Tolerant Strict null database_id database_id:S Database is not automatically distributed to other switches in the fabric. All updated and new policies of the type specified (SCC, DCC, or both) are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 133
B ACL policies Merge results Database copied None None None None SCC/DCC Succeeds No ACL policies copied. Succeeds No ACL policies copied. Fabric OS 6.1.x administrator guide 133 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 134
Fails Ports are disabled. 1. To resolve the policy conflict, manually distribute the database you want to use to the switch with fails and the ports are disabled. Table 38 shows merges that are not supported. Table 38 Examples of strict fabric merges Fabric-wide consistency policy setting Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 135
to fix the conflict. The secPolicyActivate command is blocked until conflict is resolved. FIPS support Federal information processing standards (FIPS) specifies the security standards to be satisfied by a , also does the complete zerioization of the system. Fabric OS 6.1.x administrator guide 135 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 136
. This includes logging both passing and failing results. Refer to the Fabric OS Troubleshooting and Diagnostics Guide for instructions on how to recover if your system cannot get out of the conditional test cipher suite (SSL will no longer be supported) 136 Configuring advanced security features - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 137
/secure RPC access Secure RPC protocols SNMP DH-CHAP/FCAP hashing algorithms Signed firmware Configupload/ download/ supportsave/ firmwaredownload IPsec Radius auth protocols Secure RPC only RPC and secure for the hostname parameter while configuring LDAP. Fabric OS 6.1.x administrator guide 137 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 138
.123.123.124 DNS parameters saved successfully Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration 3 Remove DNS configuration 4 Quit 3. Set up LDAP according to the instructions in "LDAP configuration and Microsoft's Active Directory" on page 66 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 139
support FIPS compliant TLS cipher suites on Microsoft's Acitve Directory server, allow the SCHANNEL settings listed in Table 43. Refer to the Microsoft website for instructions www.microsoft.com for instructions. LDAP certificates for FIPS mode To utilize the LDAP services for FIPS between guide 139 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 140
Exporting an LDAP switch certificate This option exports the LDAP CA certificate from the switch to the remote host. 1. Connect to the switch and log in as admin. 2. Enter the secCertUtil export -ldapcacert command. Example of exporting an LDAP CA certificate switch:admin> seccertutil export - - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 141
to the instructions in " firmware by typing the configure command and respond to the prompts as follows: System services No cfgload attributes Yes Enforce secure config Upload/Download Press enter to accept default. Enforce firmware signature validation Yes Fabric OS 6.1.x administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 142
disable the switch, use the "switchDisable" command. Configure... System services (yes, y, no, n): [no] ... cfgload attributes (yes, y, no, n): [no] yes Enforce secure config Upload/Download (yes, y, no, n): [no] Enforce firmware signature validation (yes, y, no, n): [no] yes 8. Type the following - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 143
downloads, refer to the Fabric OS Troubleshooting and Diagnostics Guide. Displaying configuration settings There are two ways to view configuration settings for a switch in an HP passwords If your setup supports anonymous users, and may be ignored by the FTP service. Before beginning, verify that you - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 144
logged in as an anonymous user; in such cases, the value may be ignored by the FTP service. The following example shows configUpload run on a switch without Admin Domains: switch:admin> configupload Protocol printed before you send it to the printer. 144 Maintaining the switch configuration file - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 145
downloading a previously saved backup configuration file. Make sure that the configuration file you are downloading download downloading download by downloading download without disabling a switch You can download download without disabling a switch is independent of the hardware platform and supported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 146
as an anonymous user; in such cases, the value may be ignored by the FTP service. 6. At the "Do you want to continue [y/n]" prompt, enter y. 7. Wait for /pub/configurations/config.txt *** CAUTION *** This command is used to download a backed-up configuration for a specific switch. If using a file - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 147
This command is used to download a backed-up configuration for a any current switch settings. Downloading a configuration file, which Only zoning parameters are downloaded to ad5. switch:AD5 take effect, after you download a configuration file you must downloaded when you restore a configuration - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 148
. See "Backing up a configuration" on page 143. 3. Run configDefault on each of the target switches, and then use the configDownload command to download the configuration file to each of the target switches. See "Restoring a configuration" on page 145. 148 Maintaining the switch configuration file - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 149
Use Table 46 as a hard copy reference for your configuration information. In the hardware reference manuals for the 4/256 SAN Director and DC SAN Backbone Director (short name, DC Director) there is a guide for FC port setting tables. The tables can be used to record configuration information for - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 150
150 Maintaining the switch configuration file - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 151
on the other (for dual-CP switches) and HA state is "synchronized".Figure 4 shows a fabric with two Admin Domains: AD1 and AD2. Fabric OS 6.1.x administrator guide 151 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 152
AD1 AD2 Figure 4 Fabric with two Admin Domains Figure 5 shows how users get a filtered view of this fabric, depending on which Admin Domain they are in. As shown in Figure 6, users can see all switches and E_Ports in the fabric, regardless of their Admin Domain; however, the switch ports and end - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 153
some switches running AD-unaware firmware versions (that is, firmware versions earlier than Fabric OS supported within Admin Domains, with some restrictions, as described in "Admin Domain considerations for Traffic Isolation" on page 353. • To use Admin Domains and the FC-FC Routing Service guide 153 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 154
Table 47 lists each Admin Domain user type and describes its administrative access and capabilities. Table 47 AD user types User type Description Physical Fabric Administrators User account with Admin role and with access to all Admin Domains (AD0 through AD255). Create and manage all Admin - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 155
" on page 168). • For default accounts such as admin and user, the home Admin Domain defaults to AD0 and cannot be changed. Fabric OS 6.1.x administrator guide 155 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 156
• The Admin Domain list for the default admin account is 0-255, which gives this account automatic access to any Admin Domain as soon as the domain is created, and makes this account a physical fabric administrator. • The Admin Domain list for the default user account is AD0 only. • For user-defined - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 157
, and two Admin Domains. The devices are labeled with device WWNs and the switches are labeled with Domain ID and switch WWNs. Fabric OS 6.1.x administrator guide 157 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 158
switch WWNs Admin Domain compatibility and availability Admin Domains maintain continuity of service for Fabric OS features and operate in mixed-release fabric environments. High Availability is supported with some backward compatibility. The following sections describe the continuity features of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 159
9. AD-capable fabric non-AD-capable fabric AD-capable fabric Figure 9 Isolated subfabrics Firmware upgrade considerations These two subfabrics have different AD databases but the same root zone database. buffer and has not yet been saved or canceled. Fabric OS 6.1.x administrator guide 159 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 160
How you end the transaction determines the disposition of the Admin Domain configuration in the transaction buffer. The following commands end the Admin Domain transaction: ad --save Saves the changes in the transaction buffer to the defined configuration in persistent storage and propagates the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 161
Access, if you have not already done so. See "To set the default zone mode:" on page 160 for instructions. 3. Switch to the AD255 context, if you are not already in that context: ad --select 255 4. Enter own Admin Domain-specific zones and zone configurations. Fabric OS 6.1.x administrator guide 161 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 162
Domain list, home Admin Domain, and role to a user configuration is backward compatible with pre-Fabric OS 5.2.0 firmware. When you downgrade to pre-Fabric OS 5.2.0 firmware, the userConfig command records are interpreted using legacy logic. To create a new user account for managing Admin Domains - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 163
the Admin Domain definition or enter ad --apply to save the Admin Domain definition and directly apply the definitions to the fabric. Fabric OS 6.1.x administrator guide 163 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 164
The following example adds two switch ports, designated by domain,port, to Admin Domain AD1. sw5:AD255:admin> ad --add AD1 -d "100,5; 4,1" To remove members from an Admin Domain: 1. Connect to the switch and log in as admin. 2. Switch to the AD255 context, if you are not already in that context. ad - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 165
of AD-aware and AD-unaware switches, elements in the Admin Domain member list from old AD-unaware switches are not enforced. Fabric OS 6.1.x administrator guide 165 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 166
The Admin Domain validation process is not applicable for AD0, as AD0 implicitly contains all unassigned and AD-unaware online switches and their devices. To list the switches and devices in an AD member list: 1. Connect to the switch and log in as admin. 2. Switch to the AD255 context, if you are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 167
display the Admin Domain configuration stored in the persistent memory (defined configuration). • 2 to display the currently enforced Admin Domain configuration (effective configuration). Fabric OS 6.1.x administrator guide 167 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 168
the local switch ports as specified in the Admin Domain. When the fabric is in secure mode, the following applies: • There is no support for ACL configuration under each Administrative Domain. • ACL configuration commands are allowed only in AD0 and AD255. None of the policy configurations are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 169
switch is part of the current Admin Domain. FC-FC Routing Service You can create LSAN zones as a physical fabric administrator or as the devices (local and imported device) specified in the LSAN zone. To support legacy applications, WWNs are reported based on the AD context using NAA=5. guide 169 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 170
), you can only view the complete hierarchical zone database, which is made up of the zone databases in AD0 through A254. • With AD support, zoning updates are supported selectively at each AD level. For example, a zone change in AD1 results in an update request only for the AD1 zone database. Admin - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 171
the FCR phantom domain. See "Using the FC-FC routing service" on page 211 for additional information about LSAN zones. Configuration upload and download in an AD context The behavior of configUpload and configDownload is a member of the current Admin Domain. Fabric OS 6.1.x administrator guide 171 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 172
See "Maintaining the switch configuration file" on page 143 for additional information about uploading and downloading configurations. 172 Managing administrative domains - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 173
firmware download process You can download firmware to be downloaded. These packages are made available periodically to add features or to remedy defects. Contact HP to obtain information about available firmware firmware support HA and restoring firmware on directors firmware. If the firmware download - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 174
command supports both : For each switch in your fabric, complete all firmware download changes on the current switch before issuing the firmwareDownload command firmware, but they work for downgrading as well, provided the old and new firmware versions are compatible. Always reference the latest HP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 175
and included with any trouble reports. 5. Connect to the switch and log in to the switch as admin. Enter the supportSave command to retrieve all current core files prior to executing the firmware download. This helps to troubleshoot the firmware download process if a problem is encountered. If you - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 176
SAN Switch for HP p-ClassBladeSystem,nl Brocade 4Gb SAN Switch for HP c-Class BladeSystem HP StorageWorks DC SAN Backbone Director (short name, DC Director) HP StorageWorks SAN Director 16 Port 8Gb FC blade (FC8-16) HP StorageWorks SAN Director 32 Port 8Gb FC blade (FC8-32) Not supported in same - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 177
Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, or 400 MP Router switches are adjacent and you start firmware downloads and including the 6.1.0 directory. Fabric OS 6.1.x administrator guide 177 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 178
4/16 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/32B, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch, 400 MP Router, and firmware download The upgrade process first - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 179
server for SCP, where the firmware file is stored; for example, 192.1.2.3. IP6 and DNS are supported by firmwareDownload in 5.3.0 and later Firmware is being downloaded to the switch. This step may take up to 30 minutes. Downloading firmware to a Director You can download firmware to the HP guide 179 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 180
problem persists, review "Troubleshooting firmwareDownload" on page 183. If the troubleshooting information fails to help resolve the issue, contact HP. firmware download and commit process takes approximately 15 minutes. If there is a problem, wait for the time-out (30 minutes for network problems - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 181
firmware to the AP blade, swaps partitions, reboots the blade, and copies the new firmware from the primary partition to the secondary partition. If you have multiple AP blades, they are updated simultaneously; however, the downloads can occur at different rates. Fabric OS 6.1.x administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 182
will cause the active CP to reset and will require that existing telnet or SSH sessions be restarted. Do you want to continue [Y]: y The firmware is being downloaded to the Standby CP. It may take up to 10 minutes Do you want to continue [Y]: y 10. Optionally, after the failover, connect to the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 183
an HP branded USB device attached to the switch or active CP. Before the USB device can be accessed by the firmwareDownload command, it must be enabled and mounted as a file system. The firmware images to be downloaded must be stored under the relative path from /usb/usbstorage/brocade/firmware or - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 184
download the 6.1.0 image using the absolute path: 1. Log in to the switch as admin. 2. Type the firmwareDownload command with the -U operand: admin>firmwaredownload -U /usb/usbstorage/brocade/firmware as they are not supported on this Director. FIPS Support Federal information processing standards - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 185
firmware, and will be downloaded to the switch. After it is downloaded, it can be used to validate the firmware to be downloaded firmware is downloaded, firmwareDownload always replaces the public key file firmware subsequent downloads because download the firmware of the firmware directory, if firmware is accessible - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 186
run on your switch before downloading a signed firmware. When firmwareDownload installs a firmware file, it needs to firmware To configure the switch for signed firmware: 1. Log in to the switch as admin. 2. Type the configure command. 3. Respond to the prompts as follows: System Service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 187
.hp.com and store the file on the FTP or SSH server. 3. Unpack the compressed files preserving directory structures. The firmware is in the form of RPM packages with names defined in a .plist file, that contains specific firmware information and the names of packages of the firmware to be downloaded - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 188
CPs still are not synchronized, contact HP. 4. Enter the firmwareShow command and confirm that the current firmware on both partitions on both CPs is to the prompts. At this point, the firmware should download to the standby CP only. When it has completed the download to that CP, reboot it. The - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 189
firmware firmware is now running on the active CP by entering the firmwareShow command. 9. Update firmware the firmware should download to firmware on both CPs, which completes the firmware download firmware. b. Enter the firmwareCommit command to update the secondary partition with the new firmware - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 190
it is possible that a device or switch cannot connect to the fabric and further troubleshooting is necessary. firmwareShow Displays the current firmware level on the switch. For Directors, this command displays the firmware loaded on both partitions (primary and secondary) for both CPs and AP blades - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 191
of attached devices prior to the firmware download. fabricShow Displays all switches in a fabric. Make sure the number of switches in the fabric after the firmware download is exactly the same as the number of attached devices prior to the firmware download. Fabric OS 6.1.x administrator guide 191 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 192
192 Installing and maintaining firmware - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 193
man page for each command. Before using the procedures, you should become familiar with the zoning concepts described in the following sections. Fabric OS 6.1.x administrator guide 193 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 194
Zone types Table 53 summarizes the types of zoning available. Table 53 Types of zoning Zone type Description Storage-based Storage units typically implement LUN-based zoning, also called LUN masking. LUN-based zoning limits access to the LUNs on the storage port to the specific WWN of the server - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 195
:00:90:69:00:00:8a. When a zone object is the node WWN name, only the specified device is in the zone. Fabric OS 6.1.x administrator guide 195 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 196
. The purpose of the PROD configuration is to easily identify the configuration that can be implemented and provide the most generic services. If other configurations are used for specialized purposes, names such as "BACKUP_A," "RECOVERY_2," and "TEST_18jun02" can be used. Zone configurations A zone - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 197
ASIC level. Each ASIC maintains a list of source port IDs that have permission to access any of the ports on that ASIC. Fabric OS 6.1.x administrator guide 197 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 198
zoning methodology varies on different switch models. Table 55 shows various HP switch models, the hardware zoning methodology for each, and tips for best usage. Table 55 Enforcing hardware zoning Fabric type Brocade 2000-series Methodology Best practice Enable hardware-enforced zoning only on - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 199
continued) Fabric type Methodology Best practice HP StorageWorks 4/8 SAN Switch, 4/16 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/ components, but with overlapping zones. Fabric OS 6.1.x administrator guide 199 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 200
Port_Zone1 WWN_Zone1 Port_Zone2 Core Switch WWN_Zone2 Zone Boundaries Figure 12 Hardware-enforced overlapping zones 22.3b(13.3) Any zone using a mixed zoning scheme on the Fabric OS 2-Gbps platform relies on name server authentication as well as hardware-assisted (ASIC) authentication. - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 201
WWN zoning is supported. Other types of zoning, including QuickLoop, are not supported. QLFA zones Evaluate from Web Tools to isolate any possible problems. This is especially useful as fabrics increase and acceptable. Ensuring that the HBA drivers are current can shorten the response guide 201 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 202
described in "Creating and maintaining zones" on page 206. Supported switches for broadcast zones Broadcast zoning is enforced only for Fabric inter-fabric forwarding of broadcast frames to switches running older versions of firmware. Broadcast zones and Admin Domains Each Admin Domain can have only - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 203
device in the remote fabric. See "Using the FC-FC routing service" on page 211 for information about proxy devices and the FC router must rename any existing zones named "broadcast" before you upgrade. The firmware download fails if a pre-5.3.x switch has a zone with the name administrator guide 203 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 204
Creating and managing zone aliases A zone alias is a logical group of ports or WWNs. You can simplify the process of creating zones by first specifying aliases, which eliminates the need for long lists of individual zone member names. If you are creating a new alias using aliCreate w, "1,1", and a - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 205
command, using the following syntax. alidelete "aliasname" The value represents the following: aliasname The name of the zone alias to be deleted. Fabric OS 6.1.x administrator guide 205 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 206
and maintaining zones Before executing cfgDisable, cfgEnable, or cfgSave, execute the rcsDisabled command to check whether your fabric has Reliable Commit Service (RCS) enabled (rcsDisabled=0). If RCS is disabled (rcsDisabled=1), check for older switches in the fabric. After the older switches are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 207
configuration will not take effect until it is re-enabled. Do you want to save Defined zoning configuration only? (yes, y, no, n): [no] y Fabric OS 6.1.x administrator guide 207 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 208
To remove devices (members) from a zone: 1. Connect to the switch and log in as admin. 2. Enter the zoneRemove command, using the following syntax: zoneremove "zonename", "member[; member...]" The values represent the following: zonename The name of the zone to be created. member A member or - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 209
the defZone --show command. NOTE: IIf you performed a firmware download of an older release, then the current default zone access state will appear as it did prior to the download. For example, if the default zoning mode was No Access before the download, it will remain as No Access - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 210
segmenting their own ends of the ISL, thereby preventing the new switch from joining the fabric. NOTE: Fabric OS 5.2.0 and later support a zoning database size of 1 MB. To support a 1 MB zoning database, the entire fabric must be upgraded to 5.2.0 or later. If any pre-5.2.0 switches are part of the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 211
Join Join Join Join Join later Fibre Channel Router Join Join Segment Join Join Join XPath 7.3 Segment Segment Segment Segment Segment Join Fabric OS 6.1.x administrator guide 211 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 212
Table 60 Resulting database size: 128K to 256K (continued) Receiver Initiator Fabric OS Fabric 3.1 OS 3.2 Fabric OS 4.0/ 4.1/ 4.2 Fabric OS 4.4.0 Fabric OS 5.0.0/ 5.0.1/ 5.1.0 Fabric OS 5.2.0 or later Fibre Channel Router FC router XPath 7.3 Segment Segment Join Segment Segment Segment - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 213
must ensure that the size of the configuration does not exceed the minimum size supported by all switches in the fabric. This is particularly important if and when you downgrade to a Fabric , using the following syntax: cfgadd "cfgname", "member[; member...]" Fabric OS 6.1.x administrator guide 213 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 214
The values represent the following: cfgname The name of the zone configuration. member The zone name or list of zone names to be added to the configuration. 3. Enter the cfgSave command to save the change to the defined configuration. switch:admin> cfgadd "newcfg", "bluezone" switch:admin> - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 215
transaction buffer (the contents of the current transaction), or specify 1 to display the contents of the nonvolatile memory. The default value is 0. Fabric OS 6.1.x administrator guide 215 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 216
For example, to display all zone configurations that start with "Test": switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Red_zone; Blue_zone To view a configuration in the effective zone database: 1. Connect to the switch and log in as admin. 2. Enter the cfgActvShow command. switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 217
command to save it to nonvolatile (flash) memory. 6. Enter the cfgEnable command for the appropriate zone configuration to make the change effective. Fabric OS 6.1.x administrator guide 217 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 218
To rename a zone object: 1. Connect to the switch and log in as admin. 2. Enter the cfgShow command to view the zone configuration objects you want to rename. switch:admin> cfgShow Defined configuration: cfg: USA_cfg Red_zone; White_zone; Blue_zone zone: Blue_zone 1,1; array1; 1,2; array2 zone: - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 219
exist The mode flag -m can be used to specify the zone database location. Supported mode flag values are: • 0 - zone database from the current transaction buffer can also be uploaded to the host for archiving and it can be downloaded from the host to a switch in the fabric. See "Backing up guide 219 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 220
. If Secure Fabric OS is enabled on one switch, it must be enabled on all switches in the fabric; however, Secure Fabric OS is not supported in Fabric OS 6.0.0 or later. • Default Zone: The switch being merged into the existing fabric should be configured with the same default zone mode as - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 221
on the policies; see the Secure Fabric OS Administrator's Guide for information about security policies). You must perform zone management of the two secure fabrics are the same, the fabric's primary FCS server downloads the zoning database and security policy sets to each switch in the fabric. If - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 222
followed by a portDisable or portEnable command on one of the ISL ports that connects the fabrics. This will cause a merge, making the fabric consistent with the correct configuration. IMPORTANT: Be careful using the cfgClear command because it deletes the defined configuration.. 222 Administering - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 223
HP StorageWorks 4/256 SAN Director • HP StorageWorks DC SAN Backbone Director For detailed information see the HP StorageWorks SAN Director hardware reference manual or the HP blades are used for Fibre Channel Application Services and Routing Services, iSCSI bridging, FCIP, and storage guide 223 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 224
of area ID. If you perform a port swap operation, the port number and area ID no longer match. On 48-port blades, port swapping is supported only on ports 0-15. To determine the area ID of a particular port, enter the switchShow command. This command displays all ports on the current (logical - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 225
numbers. Using portswap on a pair of ports will exchange those ports' area_ID and index values. Portswap is not supported for ports above 256. Table 63 shows the area ID and index mapping for core PID assignment. Note that 184 200/200 216/216 232/232 248/248 Fabric OS 6.1.x administrator guide 225 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 226
sections provide procedures for naming a switch, powering a port blade off and on and disabling and enabling a port blade. Changing a Director's name HP recommends that you customize the enterprise-class platform name for each platform. Some system logs identify devices by platform names, if you - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 227
slots 5 and 8 cannot be powered off with the CLI interface. You must manually power off the blades by unseating the blade from its mounting or removing the currently on the blade, the blade firmware will be upgraded or downgraded to match the firmware revision on the chassis. • You have guide 227 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 228
IDs, the FC4-48 and FC8-48 blades support only F, G and E_Ports. They do not support FL_Ports. Port swapping on an FC4-48 or FC8-48 is supported only on ports 0-15. For the FC4-32 and FC8-32 blades, port swapping is supported on all 32 ports. This means that if you replace a 32- - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 229
5). CP blades The 4/256 Director supports the CP4 blade. The DC Director supports the CP8 blade. Mixed CP blades are not supported on a single chassis, except during specific upgrade procedures detailed in the HP StorageWorks SAN Director hardware reference manual. CP4 and CP8 blades cannot be - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 230
type of CP blade installed and that each CP (primary and secondary partition) maintains the same firmware version. Core blades The DC Director supports two CR8 core blades. This blade is used for intra-chassis switching as well as ICL connectivity to another DC Director chassis. The 4/256 Director - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 231
on but disabled. FAULTY: The blade is faulty because an error was detected. The reason code numbers displayed are used by Support personnel to assist with problem diagnosis. Review the system error logs for more information. UNKNOWN: The blade is inserted but its state cannot be determined. Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 232
Inter Chassis Link behavior between two HP StorageWorks DC Directors Inter chassis links (ICL) is a licensed feature used to yellow. When you connect two DC Director platforms, the following features are supported: • 8 Gbps speed • Trunking • Credit sharing • QoS 232 Configuring Directors - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 233
feature; when this policy is in effect, you cannot disable the DLS feature. Two additional AP policies are supported under exchange-based routing: • AP shared link policy (default) • AP dedicated link policy The AP is load-balanced based on SID, DID, and OXID. Fabric OS 6.1.x administrator guide 233 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 234
to the VE_Ports as well. See "Configuring and monitoring FCIP extension services" on page 375 for details about VE_Ports. To display the current policy, and re-enable it afterward. To display the current and supported policies, enter the aptPolicy command with no parameters. In the following example - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 235
are either delivered in order or dropped. All HP B-series switches enable IOD by default to ensure frames are delivered in order, as not all HP destinationdevices can tolerate out-of-order frames. Disabling perform step 3, so you are done with this procedure. Fabric OS 6.1.x administrator guide 235 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 236
3. Enter the dlsSet command to enable DLS or enter the dlsReset command to disable it. switch:admin> dlsshow DLS is not set switch:admin> dlsset switch:admin> dlsshow DLS is set switch:admin> dlsreset switch:admin> dlsshow DLS is not set Viewing routing path information The topologyShow and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 237
Switch, 4/16 SAN Switch, 8/8 SAN Switch, 8/24 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Switch 4/32, 4/64 SAN Switch, SAN Hops Flags Next (Dom, Port) 11 4 16 500 1 D 4,0 Fabric OS 6.1.x administrator guide 237 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 238
Viewing routing information along a path You can display detailed routing information from a source port (or area) on the local switch to a destination port (or area) on another switch. This routing information describes the full path that a data stream travels between these ports, including all - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 239
apply to the embedded port. Cost The cost of the ISL used by FSPF routing protocol. It applies only to an E_Port. Fabric OS 6.1.x administrator guide 239 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 240
240 Routing traffic - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 241
on HP supported interop configurations, refer to the HP StorageWorks Fabric interoperability: merging fabrics based on C-Series and B-Series Fibre Channel switches on the following HP website: http://h18000.www1.hp.com/products/storageworks/san/documentation.html Fabric OS 6.1.x administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 242
242 Implementing an interoperable fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 243
• It is replicated on every HP StorageWorks switch within a fabric. • switches in the fabric support the MS platform service; otherwise, the command manual for details. NOTE: The commands msplMgmtActivate and msplMgmtDeactivate are allowed only in AD0 and AD255. Fabric OS 6.1.x administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 244
entire fabric. Would you like to continue this operation? (yes, y, no, n): [no] y Request to deactivate MS Platform Service in progress...... *Completed deactivating MS Platform Service in the fabric! switch:admin> Accessing the Management Server database You can use the msConfigure command to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 245
:20:37:65:ce:55 20:00:00:20:37:65:ce:66 00:00:00:00:00:00:00:00 } 0 Done Fabric OS 6.1.x administrator guide 245 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 246
1 Display the access list 2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 0 done ... Update the FLASH? (yes, y, no, n): [yes] y *Successfully saved the MS ACL to the flash. switch:admin> Deleting a member from the ACL 1. Connect to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 247
in AD0 and AD255. To display topology discovery status: 1. Connect to the switch and log in as admin. 2. Enter the mstdReadConfig command. Fabric OS 6.1.x administrator guide 247 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 248
entries. switch:admin> mstddisable This may erase all NID entries. Are you sure? (yes, y, no, n): [no] y Request to disable MS Topology Discovery Service in progress.... *MS Topology Discovery disabled locally. switch:admin> mstddisable all This may erase all NID entries. Are you sure? (yes, y, no - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 249
services Overview of iSCSI gateway service The FC4-16IP iSCSI gateway service services to the iSCSI initiators: • Access to the fabric using virtual FC devices (iSCSI virtual initiator) • Supports service target 2 Figure 16 iSCSI gateway service basic implementation The FC4-16IP SCSI driver and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 250
figure shows the interaction of different layers from the iSCSI initiator stack to the FC target stack, including the iSCSI gateway service used during protocol translation. A pplic a tion SCSI iS C S I T C P /IP iS C S I initiator iS C S I T C P /IP iS C S I virtual target (V T ) FC P (FC - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 251
.date.naming authority:. The type.date.naming authority portion is a fixed prefix. The default prefix is iqn.2002-12.com.brocade. iSCSI gateway service supports IQN only to identify the iSCSI components, such as the iSCSI initiator and iSCSI VT. Every iSCSI initiator and iSCSI VT on - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 252
initiator A iqn.2003-11.c om.mic ros oft: win2k-s n-192168101 iS C S I virtual targets (V T s ) VT 1 iqn.2002-12.com.brocade:10: 00:00:05:1e:aa:bb:cc IP Network VT 2 iqn.2002-12.c om.broc ade: 10: 00: 00: 05: 1e: c 1 and iSCSI initiator B can access only VT 2 and VT 3. 252 iSCSI Gateway services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 253
sessions are authenticated using CHAP (Challenge Handshake Authentication Protocol). The iSCSI gateway service supports the following three strategies for CHAP authentication: • One-way-Only the parameter. It is independently enabled and disabled. Fabric OS 6.1.x administrator guide 253 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 254
. The following is an example. switch:admin>iscsiswcfg --showconn -s all Number of records found: 2 Slot ICR Status 10 enabled 1 disabled switch:admin> 254 iSCSI Gateway services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 255
Supported iSCSI initiators iSCSI initiator driver release AIX • iSCSI is built-in in the 5.3 ML4 HP-UX • 11i v1 - B.11.23.03e • 11 iSCSI Configure the iSCSI gateway service after you install the FC4-16IP -l "Enabling the iSCSI gateway service" on page 258 "Configuring the GbE interface - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 256
balancing" on page 254 18 (Optional) Configure iSNS client. fosConfig - -enable isnsc isnscCfg - -set /ge -s isnscCfg - -set -m -s "Enabling the iSNS client service" on page 276 256 iSCSI Gateway - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 257
blade running Fabric OS 5.2.0 or later supports the iSCSI gateway service. You can also configure an FC4-16IP blade through the Web Tools Graphical User Interface as an alternative to the command line interface. Refer to the Web Tools Administrator's Guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 258
translates and directs SCSI traffic between an iSCSI initiator and an FC target. This section explains how to enable the iSCSI gateway service on the 4/256 SAN Director. 1. Connect and log in to the switch. 2. Enter the fosConfig --show command to show the current Fabric OS configuration. switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 259
IP parameters of a GbE port even when iSCSI gateway service is disabled. Address resolution protocol (ARP) entries for is the standard maximum packet size in an IP network. If your network supports jumbo packets, a value of 8256 can improve performance. The range allowed is administrator guide 259 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 260
command line interface. Refer to the Web Tools Administrator's Guide for descriptions of GUI-based configuration procedures. You create iSCSI accessible from the iSCSI gateway. iSCSI VTs can be automatincally generated or manually created. After mapping iSCSI targets do not move the targets out of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 261
value of iqn.2002-12.com.brocade, is used for the prefix unless 12.com.brocade:2e:1f:00: brocade:2e:3f:00:06:2b:0d:10:ba Operation Succeeded 11 2e:5f:00:06:2b:0d:10:ba iqn.2002-12.com.brocade brocade:2f:3f:00:06:2b:0d:10:ba Operation Succeeded 19 2f:5f:00:06:2b:0d:10:ba iqn.2002-12.com.brocade - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 262
-12.com.brocade:2f:ff:00 brocade:2e:1f:00:06:2b:0d:10:ba Online/Defined Name: State/Status: iqn.2002-12.com.brocade :2e:3f:00:06:2b:0d:10:ba Online/Defined Name: State/Status: iqn.2002-12.com.brocade :2e:5f:00:06:2b:0d:10:ba Online/Defined Name: State/Status: iqn.2002-12.com.brocade - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 263
brocade com.brocade, is com.brocade:21 brocade:21:00:00:04:cf:e7:74:cf State/Status:Online/Defined Auth. Method:None Manual iSCSI VT creation Create iSCSI VTs manually .com.brocade:10:00 -12.com.brocade:example-disk001 brocade:example-disk001 -v Number of records found: 1 Name: iqn.2002-10.com.brocade - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 264
specifies the unique IQN name for the iSCSI VT in the format: iqn.2002-12.com.brocade:. • -w specifies the port WWN of the physical FC target. • -l maps --add lun -t iqn.2002-12.com.brocade:example-disk001 \ -w 21:00:00:04:cf:e7:73:7e -l 0:0 The operation - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 265
iSCSI VT where: • -t specifies the unique IQN name for the iSCSI VT in the format: iqn.2002-12.com.brocade:. • -w specifies the port WWN of the physical FC target. • -l maps the physical FC LUNs to for extra detail on the commit process. Fabric OS 6.1.x administrator guide 265 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 266
99 1-2 Physical LUN(s) 0 0-1 Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf Number of LUN control between iSCSI initiators and iSCSI VTs manually. A discovery domain (DD) controls iSCSI sets configured in Fabric OS are not supported if the iSNS service is enabled on the fabric. You can - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 267
iscsicfg --show initiator Number of records found: 1 Name iqn.1991-05.com.microsoft:host001.brocade.com Creating discovery domains IP Address 30.0.30.11 1. Connect and log in to the Continue (yes, y, no, n) [n]: y The operation completed successfully. Fabric OS 6.1.x administrator guide 267 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 268
supports tgt -t iqn.2006-10.com.brocade:example-disk001 -a CHAP The operation .brocade:example-disk001 -v Number of records found: 1 Name: iqn.2006-10.com.brocade: tgt -t iqn.2002-10.com.brocade:tgt -u "isisctgt1;hello123" .brocade:tgt -v Number of records found: 1 Name: iqn.2002-10.com.brocade: - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 269
to delete a user name: switch:admin> iscsicfg --deleteusername tgt -t iqn.2002-10.com.brocade:tgt -u isisctgt1 This operation completed successfully Displaying CHAP configurations You can display a list of the --show transaction There is no active transaction Fabric OS 6.1.x administrator guide 269 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 270
this switch: Node WWN: 10:00:00:60:69:80:04:4a Port WWN: 21:fd:00:60:69:80:04:4a 270 iSCSI Gateway services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 271
UNs DD2 IP FC iS C S I gateway s ervic e iS C S I zone L UNs FC Target 4 Figure 23 iSCSI gateway service in an iSCSI FC zone If default zoning is set to No Access, you must create an iSCSI FC zone so that the devices can devices that are not in a zone. Fabric OS 6.1.x administrator guide 271 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 272
zone, it is advisable to create a separate zone so that iSCSI gateway service components can be easily differentiated from other devices in SAN fabric zones. In 06:2b:0d:12:99 1-2 Physical LUN(s) 0 0-1 Target: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf Number of LUN Maps: 1 FC WWN Virtual - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 273
in Other AD: No N 012c00; 3;50:06:06:9e:00:15:63:20;50:06:06:9e:00:15:63:21; na Fabric OS 6.1.x administrator guide 273 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 274
configuration will not take effect until it is re-enabled. Do you want to save Defined zoning configuration only? (yes, y, no, n): [no] y 274 iSCSI Gateway services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 275
configuration selected. Do you want to enable 'iscsi_cfg001' configuration (yes, y, no, n): [no] y zone config "iscsi_cfg001" is in effect Updating flash ... switch:admin> Fabric OS 6.1.x administrator guide 275 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 276
1 FC S AN iS C S I gateway s ervic e Figure 24 iSCSI network with iSNS server and clients NOTE: Fabric OS supports only Microsoft iSNS Server 3.0 and higher. Displaying iSNS client service status 1. Connect and log in to the switch. 2. Enter the fosConfig command to show the current Fabric OS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 277
the iSNS client service: switch:admin> fosconfig --disable isnsc 3. Enter the fosConfig - -show command to verify that the service is disabled: switch:admin> fosconfig --show FC Routing service:disabled iSCSI service:enabled iSNS Client service:disabled Fabric OS 6.1.x administrator guide 277 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 278
to the switch. 2. Enter the isnscCfg - -clear command to clear the iSNS configuration: switch:admin> isnsccfg --clear Cleared iSNS server IP address 278 iSCSI Gateway services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 279
properties as an N_Port, and is therefore capable of registering with all services of the fabric. Each NPIV device has a unique device PID, Switch NPIV is enabled for every port. NOTE: Director blade FC10-6 does not support NPIV. To enable or disable NPIV on a port-by-port basis, enter the guide 279 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 280
The following example shows the configuration of these parameters: switch:admin> switchdisable switch:admin> configure Configure... Fabric parameters (yes, y, no, n): [no] Virtual Channel parameters (yes, y, no, n): [no] F-Port login parameters (yes, y, no, n): [no] y Maximum logins per switch: - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 281
... ... c0:50:76:ff:fb:00:16:80 50:05:07:64:01:a0:73:b8 Distance: normal portSpeed: N2Gbps Fabric OS 6.1.x administrator guide 281 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 282
Interrupts: 0 Link_failure: 16 Frjt: 0 Unknown: 0 Loss_of_sync: 422 Fbsy: 0 Lli: 294803 Loss_of_sig: 808 Proc_rqrd: 0 Protocol_err: 0 Timed_out: 0 Invalid_word: 0 Rx_flushed: 0 Invalid_crc: 0 Tx_unavail: 0 Delim_err: 0 Free_buffer: 0 Address_err: 1458 Overrun: 0 Lr_in: - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 283
in the zone. The fabric also attempts to exclude traffic not in the TI zone from using E_Ports within that TI zone. Fabric OS 6.1.x administrator guide 283 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 284
Figure 25 shows a fabric with a TI zone consisting of N_Ports "1,8" and "4,6" and E_Ports "1,1", "3,9", "3,12", and "4,7". The dotted line indicates the dedicated path from Domain 1 to Domain 4. Domain 1 7 1 8 9 2 Domain 3 9 10 12 = Dedicated Path = Ports in the TI zone 7 6 5 4 Domain 4 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 285
are on the lowest cost route to a domain, the various source ports for that zone are load-balanced across the specified E_Ports. Fabric OS 6.1.x administrator guide 285 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 286
name, DC Director), all configured in Brocade Native Mode (interopmode 0). • Traffic Isolation has limited support for FICON FCIP in McDATA Fabric Mode only: NOTE: At the time of this document's release, HP does not support McDATA Fabric Mode (interopmode 2). • 400 Multi-protocol Router with - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 287
to switches that run Fabric OS v6.0 or later. • Traffic Isolation is not supported in fabrics with switches running firmware versions earlier than Fabric OS 6.0. However, the existence of a TI zone in such contains E_Ports 1,1 and 2,4 and N_Ports 1,8 and 2,6. Fabric OS 6.1.x administrator guide 287 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 288
To create a TI zone with failover enabled and activate it (default settings), type: zone --create -t ti redzone -p "1,1; 2,4; 1,8; 2,6" To create a deactivated TI zone with failover disabled, type: zone --create -t ti -o dn redzone -p "1,1; 2,4; 1,8; 2,6" Modifying TI zones Using the zone --add and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 289
. To activate the existing TI zone redzone, type: zone --activate redzone To deactivate the existing TI zone greenzone, type: zone --deactivate "greenzone" Fabric OS 6.1.x administrator guide 289 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 290
rate limiting for the following situations: • To reduce existing congestion in the network or proactively avoid congestion. • To enable you to offer flexible bandwidth limit services based on requirements. • To enable more important devices to use the network bandwidth during specific - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 291
a licensed feature. An Adaptive Networking license must be installed on every switch that is in the path between a given configured device pair. Fabric OS 6.1.x administrator guide 291 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 292
pair. The members of a QoS zone are WWNs of the host/target pairs. QoS zones can contain only WWN members. "Domain,Index" zoning is not supported. A QoS zone has a special name, to differentiate it from a regular zone. The format of the QoS zone name is as follows: QOSp_xxxxxx where p is the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 293
traffic crosses an ISL for a switch running an earlier firmware version, the frames are dropped. • By default, Fabric OS 6.0.0 or later and must be one of the following: HP StorageWorks SAN Switch 4/32, 4/64 SAN Switch, SAN Switch 4/ supported on 10 Gbps ISLs. Fabric OS 6.1.x administrator guide 293 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 294
• Traffic prioritization is not supported on mirrored ports. • Trunking considerations: If some ports in a trunk group have QoS enabled and some ports have QoS disabled, then two different trunks are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 295
. • FC router connected to HP secured and nonsecured fabrics with EX_Port Services support EX_Ports and VEX_Ports connected to the same edge fabrics (see Figure 31). See "Configuring and monitoring FCIP extension services" on page 333 for details about VE_Ports. Fabric OS 6.1.x administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 296
fabrics which share connections to the same edge fabrics must have unique backbone fabric IDs. • Fibre channel router A switch running the FC-FC routing service. • Logical storage area networks (LSANs) An LSAN is defined by zones in two or more edge or backbone fabrics that contain the same devices - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 297
through this virtual domain-without merging the two fabrics. Translate phantom domains are sometimes referred to as translate domains or xlate domains. Fabric OS 6.1.x administrator guide 297 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 298
are attached and, correspondingly, imported into the edge SAN reached through Fibre Channel routing. Figure 34 illustrates this concept. 298 Using the FC-FC Routing Service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 299
on page 315 for more information. NOTE: Secure Fabric OS, Management Server Platform services, and interopmode are not supported in the backbone fabric. Fibre Channel NAT and phantom domains Within an edge fabric are routed to another EX_Port or VEX_Port. Fabric OS 6.1.x administrator guide 299 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 300
routers with each FC router capable of connecting multiple IFLs to edge fabrics. Setting up the FC-FC routing service To set up the FC-FC Routing Service, perform the following tasks: 1. "Performing verification checks" on page 301 next 2. "Assigning backbone fabric IDs" on page 302 3. "Configuring - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 301
using configuration option 5. NOTE: The DC Director only supports chassis configuration option 5. switch:admin> chassisconfig Current Option: 5 All Supported Options Option 1: One 128-port switch Blade ID's to see Blade IDs currently in the system. Fabric OS 6.1.x administrator guide 301 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 302
command and verify that Brocade switch interoperability with fabric. switch:admin_06> msplatshow *MS Platform Management Service is NOT enabled. If any of the items listed page 105. When it is in strict mode, ACL cannot support Fibre Channel routing in the fabric. Before connecting an edge fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 303
the FC-FC Routing Service. See the Fabric Service in Fabric OS 6.0 and is also supported FC router service is service is enabled Configuring FCIP tunnels (optional) The optional Fibre Channel over IP (FCIP) Tunneling Service services" on page 333 for instructions on blade support Fibre Channel - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 304
HP fabric. Although Secure Fabric OS is not supported in Fabric OS 6.0, you can still connect a 6.0 switch to an edge switch that participates in a Secure Fabric OS. The FC-FC Routing Service Fabric OS Administrator's Guide for details about 3. Follow the instructions provided on screen. - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 305
for their intended use, and then enabling the ports. When it is in strict mode, ACL cannot support Fibre Channel routing in the fabric. Before connecting an edge fabric to an FC router and before setting up , disable the port prior to making the connection. Fabric OS 6.1.x administrator guide 305 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 306
-18i blade, disable the port that you are configuring as an EX_Port (the one connected to the Brocade switch) by issuing the portDisable command. switch:admin> portdisable 7/10 You can verify that port 7 has 's primary wwn: N/A Edge fabric's version stamp: N/A 306 Using the FC-FC Routing Service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 307
value is 1. -t Sets the negotiate fabric parameters (1-enable, 2-disable) -m Sets the port mode. (0-Brocade, 1-Open, 2-McDATA Fabric, 3-McDATA Fabric Legacy). This command enforces the use of the same port the edge fabric. switch:admin> portenable 7/10 Fabric OS 6.1.x administrator guide 307 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 308
OFF RSCN Suppressed OFF Persistent Disable OFF NPIV capability ON EX Port ON Mirror Port ON FC Fastwrite ON 308 Using the FC-FC Routing Service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 309
7/10 info Admin: enabled State: NOT OK Pid format: Not Applicable Operate mode: Brocade Native Edge Fabric ID: 30 Preferred Domain ID: 160 Front WWN: 50:06:06 : 0 Lli: 0 Link_failure: 0 Loss_of_sync: 0 Loss_of_sig: 2 Frjt : 0 Fbsy : 0 Fabric OS 6.1.x administrator guide 309 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 310
Info (WWN, enet IP, name 4 95 10:00:00:05:1e:37:00:45 10.32.156.31 "Brocade 7500" 5 95 10:00:00:05:1e:37:00:45 10.32.156.31 "Brocade 7500" 6 95 10:00:00:05:1e:37:00:45 10.32.156.31 for legacy (v5.1 or XPath FCR) IFL • 1000 for EX_Port IFL • 10,000 for VEX_Port IFL 310 Using the FC-FC Routing Service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 311
without considering router port cost. Fabric OS 5.2.0 or later considers the legacy router port cost as 1000 for both EX or VEX_Ports. Fabric OS 6.1.x administrator guide 311 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 312
default, EX_Ports and VEX_Ports detect, autonegotiate, and configure the fabric parameters without user intervention. You can optionally configure these parameters manually. To change the fabric parameters on a switch in the edge fabric, execute the configure command. To change the fabric parameters - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 313
for an EX_Port or VEX_Port must match those values on other HP switches. Only if you have adjusted these parameters for the trunking just as you do regular E_Ports. EX_Port frame trunking support is designed to provide the best utilization and balance of frames guide. Fabric OS 6.1.x administrator - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 314
trunking can continue to interoperate with older FCR switches and all previously supported Brocade switches in the Brocade edge fabric. Using EX_Port frame trunking With EX_Port frame trunking, you can use the the new trunk configuration. As a result, the traffic 314 Using the FC-FC Routing Service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 315
trunkShow command. • Use trunkDebug to list link characteristics for troubleshooting. • Use the switchShow command to display the trunking information both devices are online, FCR triggers a device import. To support legacy applications, WWNs are reported based on the administrative domain context - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 316
:c9:0c (connected to switch1). • Target A has WWN 50:05:07:61:00:5b:62:ed (connected to switch2). 316 Using the FC-FC Routing Service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 317
:00:00:c9:2b:c9:0c;50:05:07:61:00:5b:62:ed;50:05:07:61:00:49:20:b4" Fabric OS 6.1.x administrator guide 317 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 318
not zoned, only the PLOGI is dropped; for the remaining frames zoning enforcement takes place in the edge fabrics. 318 Using the FC-FC Routing Service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 319
zone sharing and devices access between the two groups, the number of Fibre Channel routers and devices supported in the backbone can be higher. The command fcrlsanmatrix is used to specify pairs of edge fabric the changes from the cache to persistent memory. Fabric OS 6.1.x administrator guide 319 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 320
7 10 19 Default LSAN Matrix: 1 2 8 See the Fabric OS Command Reference Manual for additional information on the fcrlsanmatrix command. Dual backbone configuration When dual backbones share edge where needed. The maximum number of devices supported is still 10000. 320 Using the FC-FC Routing - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 321
synchronized as usual after the limit is increased and new LSANs are created. IPFC over FCR IPFC over FCR supports IP device communication between edge-to-edge fabrics and edge-to-backbone fabrics. For IPFC over FCR to the proxy device of the remote IP device. Fabric OS 6.1.x administrator guide 321 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 322
an earlier Fabric OS version than v5.3.0 that do not support broadcast zoning, the fcrbcastconfig command sets up inter-fabric broadcast of broadcast frames to the switches running older versions of firmware. Between FC routers, the broadcast frame is sent through the the FC-FC Routing Service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 323
v5.3.0 or later with a maximum count of 5000 LSANs and the standby CP is running an earlier firmware version, then HA synchronization will fail. If 5000 is selected before downgrading to an earlier version of Fabric physical port for routing decision purposes. Fabric OS 6.1.x administrator guide 323 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 324
34 22 | 8 34 23 | 8 34 See the Fabric OS Command Reference for details about the fcrResourceShow command. Routing ECHO The FC-FC Routing Service enables you to route the ECHO generated when an fcPing command is issued on a switch, providing fcPing capability between two devices in different fabrics - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 325
for Fibre Channel connectivity problems: 1. On the edge support FC-FC Routing Services, then your FC-FC routing configuration will be lost. Brocade recommends that you enter the configUpload command to save your FC-FC routing configuration before performing any downgrades. For further instructions - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 326
supported. For a nonsecure fabric, the hardware and firmware compatibility is described in Table 71. Table 71 Hardware and firmware compatibility for nonsecure fabrics Model Supported Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP To support the consolidated - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 327
command. switch:admin_06> portcfgexport 2/0 Port 2/0 info Admin: enabled State: OK Pid format: core(N) Operate mode: Brocade Native Edge Fabric ID: 16 Front Domain ID: 160 Front WWN: 50:06:06:9e:20:9f:ce:10 front domain to connect to 127 remote xlate domains. Fabric OS 6.1.x administrator guide 327 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 328
domain consolidation PID and node WWN. In case of an unexpected failure, run and save the output from the commands supportShow, or supportSave if not supported, on each of the FC routers and edge switches. 328 Using the FC-FC Routing - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 329
Guide for information about monitoring performance using the Web Tools GUI. Based on Brocade Services" on page 435 for more information about VE_Ports. The type of monitors supported depends on the ASIC. Table 72 shows the monitors supported on different ASICs. Table 72 Types of monitors supported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 330
-end monitors.) The FC4-48 blade allows end-to-end monitors on all 48 ports. For the FC4-16IP blade, end-to-end monitors are supported on the FC ports (ports 0 through 7), but not on the GbE ports. You cannot add end-to-end monitors to interswitch links. Identical end-to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 331
have the frame match only one or two of the three fields (Domain ID, Area ID, and AL_PA) to trigger the monitor. Fabric OS 6.1.x administrator guide 331 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 332
Table 73 lists commands associated with Advanced Performance Monitoring. Advanced Performance Monitor commands are available only to users with the admin or switchAdmin roles. For detailed information on these commands, see the Fabric OS Command Reference. Table 73 Advanced Performance Monitoring - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 333
frames. NOTE: Only one mask per port can be set. When you set a mask, all existing end-to-end monitors are deleted. Fabric OS 6.1.x administrator guide 333 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 334
concerns, the area ID and the AL_PA cannot be masked separately for any ports on FC4-48 port blades. End-to-end masks are not supported on the DC Director. Deleting end-to-end monitors To delete an end-to-end monitor: 1. Enter the perfShowEEMonitor command to list the valid monitor - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 335
and 11 offsets per port for used defined monitors. • The upper 16 ports (ports 32 through 47) do not support filter monitors. The actual number of filters that can be configured on a port depends on the complexity of the Count the number of IP traffic frames Fabric OS 6.1.x administrator guide 335 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 336
per port (14 offsets when FICON Management Server mode, or fmsmode, is enabled). • 4/8 SAN Switch, 4/16 SAN Switch and Brocade 4Gb SAN Switch for HP p-Class BladeSystem models Up to 7 different offsets per port (6 offsets when fmsmode is enabled). 336 Administering Advanced Performance Monitoring - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 337
domains, the monitor samples traffic and extrapolates the measurement. EE monitors on E_Ports are deleted when they become part of an ISL. Fabric OS 6.1.x administrator guide 337 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 338
the most bandwidth and can then configure them with certain Quality of Service (QoS) attributes so they get proper priority. See "Adaptive networking" is installed on a port, it remains installed across power cycles. Top Talker supports two modes: port mode and fabric mode. • Port mode Top Talker - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 339
less. The command can display a maximum of 32 flows. For example, to display the top 5 flows on port 7 in WWN (default) format: Fabric OS 6.1.x administrator guide 339 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 340
perfttmon --show 7 5 To display the top flows on slot 2, port 4 on the 4/256 SAN Director or DC Director in PID format: perfttmon --show 2/4 pid switch:admin> perfttmon --show 2/4 pid Src_PID Dst_PID MB/sec 0xa90800 0xa05200 6.926 0xa90800 0xa908ef 6.872 Using Top Talker monitors in - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 341
For Fabric OS 3.x switches, monitoring can be set on slave ISLs. • End-to-end monitors are not supported for ISLs. • For F_Port trunks, end-to-end masks are allowed only on the F_Port trunk master. --class monitor_class [slotnumber/]portnumber [interval] Fabric OS 6.1.x administrator guide 341 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 342
monitor_class slotnumber portnumber interval The monitor class, which can be one of EE (end-to-end), FLT (filter-based), or ISL (inter-switch link). The --class monitor_class operand is required. Specifies the slot number for a 4/256 SAN Director director. For all other switches, this operand is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 343
0x000000000000fd8c N/A 3 SCSI_RW WEB_TOOLS 0x0000000000007ba3 192.168.169.40 4 SCSI_RW WEB_TOOLS 0x0000000000004f0e 192.168.169.190 5 SCSI_RD WEB_TOOLS 0x0000000000002208 192.168.169.40 Fabric OS 6.1.x administrator guide 343 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 344
6 SCSI_WR WEB_TOOLS 0x000000000000033a 192.168.169.40 The following example displays ISL monitor information on a port: switch:admin> perfMonitorShow --class ISL 1/1 Total transmit count for this ISL: 1462326 Number of destination domains monitored: 3 Number of ports in this ISL: 2 Domain 97: - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 345
statistics counters for an ISL monitor: switch:admin> perfMonitorClear --class ISL 1 This will clear ISL monitor on port 1, continue? (yes, y, no, n): [no] y Fabric OS 6.1.x administrator guide 345 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 346
. Using the Fabric Manager software application version 4.4.0 or later, you can store performance data persistently. For details on this feature, see the Fabric Manager Administrator's Guide. 346 Administering Advanced Performance Monitoring - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 347
about switch characteristics and capacity in terms of buffers per port group, port speed, and distances supported is in Table 77 on page 352. This table may be useful in choosing an appropriate distance through the 8 byte to 10 byte conversion process. Fabric OS 6.1.x administrator guide 347 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 348
allocate buffer credit using the portCfgLongDistance command, which allows you to allocate sufficient numbers of full-size frame buffers on a particular port or to support a long distance link up to 500 km. The port can only be used as an E_Port. Changes made by this command are persistent across - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 349
of the link determined in step 2. 6 = the number of buffer credits reserved for Fabric Services, Multicast. and Broadcast traffic. This is a static number. Based on the answers provided in distance of 50km at 8 Gbps then, (50km * 8 Gbps/ 2) + 6 = 206 buffers Fabric OS 6.1.x administrator guide 349 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 350
484 + 8 reserved buffers = 492 buffers to a single port; that port can support 486km @ 2G, which is the reserved buffer for distance. How many 50km ports you each. For extended ISLs, all buffers available to a group are used to support one port at up to 120 km. Displaying the remaining buffers in a - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 351
0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - 0 - Link Remaining Distance Buffers - - - - - - - - - - - - - - - - - - - - - - - - 484 Fabric OS 6.1.x administrator guide 351 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 352
1420/16 *1516/16 1420/16 *1516/16 FC8-48 Condor2 48 Brocade 4Gb Golden Eye 12 SAN Switch for HP p-Class BladeSystem 1420/24 *1516/24 272/12 Brocade 4Gb Golden Eye 24 SAN Switch for HP c-Class BladeSystem 272/24 Reserved buffers for ports 0 8 8 8 8 8 8 8 8 8 8 8 8 N/A 8 8 8 8 8 NOTE - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 353
feature is only supported on long distance and Virtual Ex_Ports do not support long distance. The buffer mode. An FC_Port that supports BB_Credit Recovery, maintains . Buffer-limited operation is supported for the L0 and LD used to implement the iSCSI Gateway Service. The Gigabit Ethernet ports are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 354
to "Administering ISL Trunking" on page 377. • Use only qualified HP branded SFPs. • For fabrics that contain B-Series 2Gb switches, contact HP support for details on which parameters to set. • For Fabric OS 3.x or 4.x, contact HP for details on which parameters to set. 1. Connect to the switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 355
depending on the model) LS3 Based on Based on Based on Based on 5.1.0 Yes user-spec user-spec user-specified user-specified ified ified distance distance distance distance Maximum is 200 km Maximum is credits based on the user-specified distance. Fabric OS 6.1.x administrator guide 355 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 356
356 Administering Extended Fabrics - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 357
more than 30 meters difference is recommended. Connections between the HP StorageWorks SAN Switch 4/32, 4/32B, 4/64 SAN -16/32/48 and the FR4-18i blades support these advanced features: • Up to eight ports ISLs with 8 Gbps each if 8 Gbps is supported. • ISL Trunking over longer distances than other - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 358
trunk and trunks per switch depends on the HP model. NOTE: Director blade model FC10-6 does not support trunking. Standard trunking criteria Observe the following criteria be activated by entering a license key, which is available from HP. After the ISL Trunking license is activated (after you have - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 359
as by adding, removing, or reconfiguring ISLs and trunking groups in problem areas. There are three methods of monitoring fabric traffic: • or drops below configured thresholds. See the Fabric Watch Administrator's Guide for additional information. • Use the portPerfShow command as described - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 360
fwConfigure command. You can issue the fwPortDetailShow command to display the overall status of specific ports. See the Fabric Watch Administrator's Guide for additional information. • The Fabric OS CLI portPerfShow command allows you to display throughput information for all ports on the switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 361
ports on the switch. The following example enables trunking all ports in the switch. switch:admin> switchcfgtrunk 1 Committing configuration...done. switch:admin> Fabric OS 6.1.x administrator guide 361 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 362
specify the port speed instead of setting it to autonegotiate. IMPORTANT: Support for 8 Gbps is only between the HP StorageWorks 4/256 SAN Director to the DC Director enterprise-class platform or between HP StorageWorks DC Director-to-DC Director enterprise-class platforms with the appropriate - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 363
(HP StorageWorks 4/8 SAN Switch, 4/16 SAN Switch, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c- HP StorageWorks 4/256 SAN Director, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, and 8/80 SAN Switch and DC Directors enterprise-class platforms with supported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 364
The following example sets the speed for all ports on the switch to eight Gbps: switch:admin> switchcfgspeed 8 Committing configuration...done. The following example sets the speed for all ports on the switch to autonegotiate: switch:admin> switchcfgspeed 0 Committing configuration...done. - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 365
blade in the 4/256 SAN Director is summarized in Table 81. Table 81 Trunking support for 4/256 SAN Director and DC Directors with supported blades (Condor and Condor2 ASIC) Mode Distance Number of 2 Gbps ports Number of are no re-configuration requirements. Fabric OS 6.1.x administrator guide 365 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 366
Port ID when F_Ports go offline and it increases F_Port bandwidth. This feature supports the HP StorageWorks SAN Switch 4/32, 4/32B, 4/64 SAN Switch, 8/8 SAN mode with F_Port masterless trunking NOTE: You do not need to manually map the host to the master port because Access Gateway will perform - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 367
(LIRR), and (QSA) Query Security Attributes ELS's are not supported on F-Port trunks. The port must be disabled before assigning a have trunking on, but you must disable the trunk ports before performing a firmware downgrade. Upgrade HA Sync Port Types Default Area Note: Removing a Trunk guide 367 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 368
port can have a Trunk Area assigned to it. F_Port masterless trunking is only supported in the CORE PID format. Long distance is not allowed on F_Port trunks, ports that have a Trunk Area assigned to them. Port mirroring is not supported on Trunk Area ports or on the PID of an F_Port trunk port. - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 369
supported on the F_Port trunk Supported on F_Port master trunk. Two masters is not supported in the same F_Port trunk group. Not currently supported switches that support trunking and where HP StorageWorks 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch and the 8/80 SAN Switch platforms support - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 370
to be unassigned. For more information on the portTrunkArea command, enter help portTrunkArea or see the Fabric OS Command Reference. F_Port trunking will not support shared area ports 16 - 47 on the FC8-48 and FC4-48C blades. The following table shows an example of the address identifier. Table - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 371
N8 No_Module N8 No_Module N8 No_Module N8 No_Module N8 No_Module N8 No_Module N8 No_Module N8 No_Module N8 No_Module N8 No_Module N8 No_Module Fabric OS 6.1.x administrator guide 371 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 372
20 20 -- N8 No_Module 21 21 -- N8 No_Module 22 22 -- N8 No_Module 23 23 -- N8 No_Module 24 24 -- N8 No_Module 25 25 -- N8 No_Module 26 26 -- N8 No_Module 27 27 -- N8 No_Module 28 28 -- N8 No_Module 29 29 -- N8 No_Module 30 30 -- N8 No_Module 31 31 -- N8 No_Module 32 32 id N4 No_Light 33 33 id N4 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 373
groups are allowed within the same N_Port group. For additional information on how to configure ports in Access Gateway mode, see the Access Gateway Administrator's Guide. Fabric OS 6.1.x administrator - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 374
374 Administering ISL Trunking - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 375
Fabric OS Command Reference for detailed information on command syntax. FCIP services licensing Most of the FCIP extension services described in this chapter require the High Performance Extension over FCIP/FC information in the required fields." on page 35. Fabric OS 6.1.x administrator guide 375 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 376
SAN extension over IP Fabric OS supports SAN extension between 400 Multi-protocol Routers or between FR4-18i blades Multi-protocol Router port numbering FC15 GbE0 GbE1 NOTE: The FCIP Tunneling Service for the 400 Multi-protocol Router and FR4-18i blade is not compatible with the XPath FCIP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 377
sixteen FC ports and sixteen virtual ports. Each GbE interface can support up to 8 FCIP Tunnels which are represented as 8 Virtual ports the tunnel are merged. VEX_Port A VEX_Port enables FC-FC Routing Service functionality over an FCIP tunnel. VEX_Ports enable interfabric links (IFLs). guide 377 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 378
DiffServ Code Points (DSCP) refers to a specific implementation for establishing QoS policies as defined by RFC2475. DSCP uses six bits of the Type of Service (TOS) field in the IP header to establish up to 64 different values to associate with data traffic priority. DSCP settings are useful only if - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 379
secure communications over Internet Protocol networks. IPSec supports network-level data integrity, data confidentiality, data untrusted computers, attacks that can result in the denial-of-service of applications, services, or the network, data corruption, and data and 6.1.x administrator guide 379 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 380
IPSec: • IPv6, NAT, and AH are not supported. • You can only create a single secure tunnel tunnel. • IPSec-specific statistics are not supported. • To change the configuration of a secure tunnel, supported for IPSec. • There is no RAS message support for IPSec. • Only a single route is supported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 381
fastwrite and tape write tape pipelining. Supported only in Fabric OS 5.2.x and pipelining Each GbE port supports up to 2048 simultaneous traffic Each GbE port supports up to 2048 simultaneous fastwrite. Does not support multiple equal-cost path configurations 382). Does not support multiple equal-cost - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 382
By default, only fastwrite-based acceleration is performed on the unassociated pairs. Does not support multiple non-equal-cost path between host and sequential device FCIP fastwrite/tape pipelining configurations and tape pipelining enabled 382 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 383
45 Multiple tunnels to multiple ports, fastwrite and tape pipelining enabled on a per-tunnel/per-port basis Unsupported configurations The following configurations are not supported with fastwrite and tape pipelining. These configurations use multiple equal-cost paths. Fabric OS 6.1.x administrator - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 384
configurations with fastwrite and tape pipelining FICON emulation concepts FICON emulation supports FICON traffic over IP WANs using FCIP as the underlying protocol. FICON emulation can be extended to support performance enhancements for specific applications. 384 Configuring and monitoring FCIP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 385
tool that can be used in a manner similar to that of a channel protocol analyzer. FTRACE enables troubleshooting of problems using a Telnet session rather than sending an analyzer or technical support personnel to the site. FTRACE record events that occur on the FC interface, including user defined - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 386
multiple configuration requirements and options associated with FCIP services. The following general guidelines may be helpful. command. Refer to "Configuring IP interfaces and IP routes" on page 392 for specific instructions. 8. If you are implementing VLAN tagging, create a static ARP entry for the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 387
using the preshared key authentication method. Once the 2 phases of the negotiation are completed successfully, the actual encrypted data transfer can begin. Fabric OS 6.1.x administrator guide 387 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 388
. Choices are On/Off and default is On. Diffie-Hellman group Group 1-768 bits (default) Group 14-2048 bits 388 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 389
using sequential numbering. The range of valid values is any whole number from 1 through 32. The supported type of encryption. Valid options are 3DES, AES-128, and AES-256. AES-128 is the policy settings for all defined policies, type: policy --show type all Fabric OS 6.1.x administrator guide 389 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 390
:1e:37:00:20 Compression off Fastwrite on Tape Pipelining on Uncommitted bandwidth, minimum of 1000 Kbps (0.001000 Gbps) 390 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 391
239). The port ID format (1 for core, 2 for extended edge, and 3 for native). Specify 1 to enable or 2 to disable negotiate fabric parameters. Fabric OS 6.1.x administrator guide 391 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 392
is the normal value in an Ethernet network. Some networks support jumbo packets (packets larger than 1500 KB). If the network you are using supports jumbo packets, a value of 2284 can improve performance. By 12.0 255.255.255.0 192.168.100.1 1 392 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 393
is as follows. portcmd --ping [slot/]ge0|ge1 [-s source_ip] [-d dest_ip] [-c L2 class-of-service] [-n num-requests] [-q type-of-service] [-t ttl] [-v vlan tag] [-w wait-time] [-z size] Where: slot The number of a step 1). The default size is 64 bytes. Fabric OS 6.1.x administrator guide 393 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 394
Refer to "WAN performance analysis tools" on page 407 for specific information and instructions. NOTE: The general recommendation is to run ipperf only when there are You cannot create FCIP tunnels that connect to an HP StorageWorks MP Router. The command syntax is as FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 395
frame to a specific VLAN. The layer 2 class of service used for control traffic. The layer 2 class of service used for data traffic. The IKE policy number to be value] [rdMaxDevs value] [wrtTimer value] wrtMaxChains value] [oxidBase value] [dbgFlags value] Fabric OS 6.1.x administrator guide 395 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 396
chain will be withheld from the channel. This limits processing to what the network and device can support. Too small a value limits pipelining performance. Too large a value results in too much data being portcfg ficon ge0 config -x 1 -w 1 396 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 397
tool primarily for use by Tech Support personnel. FTRACE includes the ability to freeze traces on certain events, and to retain the trace information for |ge1 all|tunnel_id Where: all tunnel_id Displays all FCIP tunnels. Displays the specified FCIP tunnel. Fabric OS 6.1.x administrator guide 397 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 398
is saved in a persistent database. At this point, all configured FCIP tunnels now appear in the fabric as VE_Ports. 398 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 399
:00:51:e3:70:42:5f:76 "fcr_xd_5_17" (downstream) 223 8 31 -- -- Offline 8 ge0 id 1G Online 8 ge1 id 1G Online Fabric OS 6.1.x administrator guide 399 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 400
to view ports that are persistently disabled. 2. After identifying the ports, enter the portCfgPersistentEnable command to enable the ports. 400 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 401
ON ON ON ON ON ON ON ON ON ON ON EX Port switch:admin06> where AN:AutoNegotiate, ..:OFF, ??:INVALID. LM:L0.5 Fabric OS 6.1.x administrator guide 401 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 402
IP network you are using implements PHB, and consult with the network administrator to determine the appropriate DSCP values. 402 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 403
. -P data_L2Cos The layer 2 class of service used for data traffic. The following example file. The -delete option is used before firmware downgrades to versions previous to Version 6.0.0 that do not support QoS mapping. It removes the file from - 7). Fabric OS 6.1.x administrator guide 403 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 404
, the ending status for the next write chain will be withheld from the channel. This limits processing to what the network and device can support. Too small a value limits pipelining performance. Too large a value results in too much data being accepted for one device on a path. The default value - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 405
default is 0xF7C80000. The following options are for debugging purposes, and are primarily for technical support personnel. xrcErr LrcCheck 1|0 Forces an XRC sequence error. This option disrupts traffic and tags take precedence over entries in this table. Fabric OS 6.1.x administrator guide 405 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 406
table through their own configuration procedures. Manual entries are needed on both the (range 1-4094). Layer 2 class of service (range 0-7) The destination IP address. 3 7 192.168.20.1 Troubleshooting FCIP links The following list contains information for troubleshooting FCIP links: • When deleting - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 407
path performance characteristics between a pair of HP FCIP port endpoints. WAN tools include GbE port at any time. Each FCIP port supports a single instance of the WAN tool-embedded client You can, for example, revalidate the service provider Service Level Agreement (SLA) without bringing guide 407 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 408
in the last display interval as well as the Weighted Bandwidth (WBW). BW represents what the FCIP header and payload. There is a limited support for black hole PMTU discovery. If the Jumbo PMTU the following functions: • Validate a service provider Service Level Agreement (SLA) throughput, loss - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 409
-kilobits per second • Bps-bytes per second • bps-bits per second • Third column-The 30s weighted bandwidth WAN tool ipPerf syntax When using the portCmd ipPerf option, you must specify the following: • -forever • Default display (refresh) interval-30 seconds Fabric OS 6.1.x administrator guide 409 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 410
number used as the VLAN ID. -c L2_Cos The Layer 2 class of service. Using portCmd ping The portCmd ping command tests the connection between the a VLAN connection when you do not have an active FCIP tunnel, you must manually add entries to the VLAN tag table on both the local and remote sides of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 411
vlan tag for a VLAN tagged IP connection. The Layer 2 class of service (L2CoS). The following example tests the connection between IP addresses 192.168.10 VLAN when you do not have an active FCIP tunnel, you must manually add entries to the VLAN tag table on both the local and remote guide 411 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 412
for ge0 or ge1. The default size is 64 bytes. -v vlan tag -c L2_Cos The vlan tag for a VLAN tagged IP connection. The Layer 2 class of service (L2CoS). The following example traces the route between IP addresses 192.168.10.1 and 192.168.20.1 over VLAN 10. portcmd --traceroute 8/ge0 -s 192.168 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 413
on Fastwrite off Committed Rate 300000 Kbps (0.300000 Gbps) SACK on Min Retransmit Time 100 Keepalive Timeout 10 Max Retransmissions 8 Status : Active Fabric OS 6.1.x administrator guide 413 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 414
17381 pkt/s 30s avg, 15356 pkt/s lifetime avg 207859776 input Bytes 556200 Bps 30s avg, 491394 Bps lifetime avg 414 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 415
and other aspects of FICON, refer to the IBM Redbook, FICON® Implementation Guide (SG24-6497-01), and IBM System Storage: Implementing an IBM SAN (SG24-6116-06). The following Fabric OS standard features support FICON fabrics: • Port swapping Redirects resources from a failed port to a healthy port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 416
switches FICON protocol is supported on the HP StorageWorks 4/256 SAN Director and DC SAN Backbone Director, short name, DC Director. The following port blades can exist in a FICON environment; however, FICON device connection to ports on these blades is not supported: • FC4-16IP • FC4-48 • FC8 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 417
inserted in slot 10 of the chassis in a FICON configuration. (Other blades are supported in slot 10, but the FC8-48 and FC4-48 blades are not.) Port see: • Web Tools-Web Tools Administrator's Guide • Fabric Manager-Fabric Manager Administrator's Guide • SNMP Agent and FICON Management Information - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 418
User security considerations To administer FICON, you must have one of the following roles: • Admin • Operator • SwitchAdmin • FabricAdmin The User and BasicSwitchAdmin roles are view-only. The ZoneAdmin and SecurityAdmin roles have no access. In an Admin Domain-aware fabric, if you use the FICON - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 419
FICON devices directly attached using the aptPolicy command when working from the command line. For GUI-based procedures, see the Web Tools Administrator's Guide for configuring the routing policy using the FICON tab in Web Tools. 4. Enter the ficonshow rnid command to verify that the FICON devices - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 420
to the switch and log in as admin. 2. Verify that the switch has a unique Domain ID. If it does not, set a unique Domain ID. For instructions on displaying and changing the Domain ID, see "Working with Domain IDs" on page 33. 3. Enter the switchDisable command to disable the switch. 4. Enter the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 421
Transmission Mode (yes, y, no, n): [no] Arbitrated Loop parameters (yes, y, no, n): [no] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] Committing configuration...done. switches defined in the fabric: ficonshow ilir fabric Fabric OS 6.1.x administrator guide 421 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 422
. Using FICON CUP Host-based management programs manage switches using CUP protocol by sending commands to an emulated control device in the Fabric OS. An HP StorageWorks switch that supports CUP can be controlled by one or more host-based management programs or the Fabric OS tools provided by - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 423
(block) ports 254 and 255. Ports 254 and 255 are not supported in a CUP environment. After fmsmode has been successfully enabled, these two "Persistently enabling/disabling ports" on page 426 for instructions. Changing fmsmode from disabled to enabled triggers the following administrator guide 423 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 424
• Advanced Zoning, if used, continues to be in force. If there are any differences in restrictions set up with Advanced Zoning and PDCM, the most restrictive rules are automatically applied. • RSCNs are sent to devices if PDCM results in changes to connectivity between a set of ports. Changing - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 425
POSC UAM ASM DCAM ACP HCP 1 0 1 0 1 0 To display the mode register bit HCP for the switch: switch:admin> ficoncupshow modereg HCP HCP 0 Fabric OS 6.1.x administrator guide 425 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 426
Setting mode register bits Use the ficoncupset modereg command to set the FICON CUP mode register bits for the local switch. Consider the following when changing mode register bits: • As required by the CUP protocol, the UAM bit cannot be changed using this command. • All mode register bits except - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 427
files that contain nonprintable characters should not be edited manually because many editors replace nonprintable characters with some other characters has a 24-character unique port name limitation; Fabric OS supports port names up to 32 characters long. When fmsmode is enabled guide 427 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 428
Troubleshooting The following sources provide useful problem-solving information: • The standard support commands (portLogDump, supportSave, supportShow) • ficucmd dump -A • Other detailed information for protocol-specific problems: • Display port data structures using the ptDataShow command. • - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 429
maximum of 16 configuration files, including the IPL file, are supported. You can upload the configuration files saved on the switch to to warn users that the IPL will not be overwritten. To download configuration files with Active=Saved mode disabled: Enter the configDownload command. guide 429 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 430
Recording configuration information You can use the following worksheet for recording FICON configuration information. Table 95 FICON configuration worksheet FICON® Switch Configuration Worksheet FICON® Switch Manufacturer Type: _________ Model: ______ S/N: ________ HCD Defined Switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 431
to the IBM publication FICON® Implementation Guide (SG24-6497-00). In the FICON director regardless of vendor or platform. All HP switches require UNIT=2032 for the CUP definition. IDs in the example are for demonstration purposes only. Brocade Domain_ID=61 (in hex CNTLUNIT CUNUMBR=0D8,UNITADD= - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 432
432 FICON fabrics - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 433
22 Configuring and monitoring FICON Extension Services This chapter describes the FICON extension concepts, configuration procedures, and tools and procedures for monitoring later in this chapter under "FICON emulation concepts and features" on page 436. Fabric OS 6.1.x administrator guide 433 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 434
extension over IP Fabric OS supports SAN extension between 400 MP Router, or between FR4-18i blades. The 400 MP Router and the FR4-18i blade both have Figure 50 FR4-18i Port Numbering FC0 Figure 51 400 MP Router Port Numbering FC15 GbE0 GbE1 434 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 435
monitoring FCIP extension services" on page 389 Ensure enough buffer credits are configured to support extending the FICON channel over distance. • Brocade Mi10K or M6140 Director Element Manager GUI through use of an Allow/Prohibit matrix. The matrix allows you Fabric OS 6.1.x administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 436
example Refer to the Brocade Mi10K or M6140 Director Element Manager User Manual for specific information about application is a DASD application that implements disk mirroring, as supported by the disk hardware architecture and a host software component called monitoring FICON Extension Services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 437
features are enabled: • XRC emulation. • tape write pipelining. • tape read pipelining. -b 1|0 Enables or disables FICON read block ID. 1 is enable, O is disable. Fabric OS 6.1.x administrator guide 437 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 438
will be withheld from the channel. This limits processing to what the network and device can support. Too small a value limits pipelining performance. Too large a value results in too much data config -x 1 -w 1 -r 1 -t 1 -l 1 oxidbase 0x7000 438 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 439
, O is disable. -w 1|0 Enables or disables tape write pipelining. 1 is enable, O is disable. -r 1|0 Enables or disables tape read pipelining. 1 is enable, O is disable. Fabric OS 6.1.x administrator guide 439 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 440
from the channel. This limits processing to what the network and device can support. Too small a value limits pipelining performance. Too large a value results in for technical support personnel. dbgFlags value Defines optional debug flags. This is primarily for use by technical support personnel. - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 441
statistics. The -emul argument may be used to Monitor FICON emulation activities (see "Monitoring FICON emulation" on page 442). The other arguments are primarily for support personnel. Fabric OS 6.1.x administrator guide 441 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 442
Control Block. Support personnel may use this pointer. Path The device path, in the format VE-HD-HP-DD-DP-LP entry domain for this host port into the fabric). • HP is the hex value for the Host Port (the value 2463016406050001 breaks down as follows. VE HD HP DD DP LP CU DV 24 63 01 64 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 443
| 19436| 0| 0| 183111| 32760| |0x10045000|2463046402050102|H| 0x00| N/A|0000|0000| 19456| 0| 0| 183111| 32760| |0x1004/256 SAN Directoe|2463046402050103|H| 0x00| N/A|0000|0000| 183111| 32760| 19404| 0| 0| Fabric OS 6.1.x administrator guide 443 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 444
|0000|000F|0000|05E8| 4185|155| 38116| 22943| |0x104B5C00|24B102B20F1109FD|H| 0x00|0000|000F|0000|07E2| 3755|143| 40929| 24885| 444 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 445
problems in many routine maintenance scenarios. Fortunately, very few device drivers still behave this way. Many current device drivers SAN Switch, 400 Multi-protocol Router, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, SAN Director 2/128, - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 446
Brocade 4/8 SAN Switch, 4/16 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, Brocade static PID binding. For those few drivers that do use static PID binding, rebooting the host or by using a manual update procedure on the host. To correct instructions. 446 Configuring the PID format - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 447
command. Before downgrading firmware, change the PID back to supported PIDs such as Core PID. If the database is automatically converted, save the converted database, and then download the older OS. port numbering is used in other management applications. Fabric OS 6.1.x administrator guide 447 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 448
and later/6.0 Change fabric to Core PID. Extended Edge is not supported in Fabric OS 6.0. Host reboot is required. Evaluating the fabric If how each device driver will respond to the PID format change. • Determine how any multipathing software will respond to a fabric service interruption. If - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 449
no inherent PID binding problem with either AIX or HP/UX. It is the HBA drivers shipping with these operating systems that bind by PID. Both operating systems are expected to release HBA drivers that bind by WWN, and these drivers might already be available through some support channels. Work with - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 450
Format enabled, so it is not necessary to perform the PID format change on these switches. Migrating from manual PID binding (such as persistent binding on an HBA) to manual WWN binding and upgrading drivers to versions that do not bind by PID can often be done before setting the core PID format - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 451
the hosts last. 9. For any devices manually bound by PID, bring the device back service provider in these cases. Changing to core PID format In Fabric OS release 4.2.0 and later, Native PID format is not supported in the configuration file and then download the edited file, the PID format guide 451 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 452
Distance Fabric: (0..1) [0] IMPORTANT: Per the example above, not all PID modes are compatible. See "Selecting a PID format" on page 447 for details on the supported PID format for the Fabric OS version that you are running. Converting port number to area ID Except for the following cases, the area - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 453
without downtime. In some cases, device drivers allow you to specify static PID binding fabric, and special procedures for HP/UX and AIX. This process listed below that support the addressing mode: • SAN Switch 2/8EL and SAN Switch 2/16-3.1.2 • Brocade 4 Gb SAN Fabric OS 6.1.x administrator guide 453 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 454
zoning update automatically propagates to all switches. At this point, all switches in the fabric are operating in the new addressing mode. HP/UX procedure This procedure is not intended to be comprehensive. It provides a starting point from which a SAN administrator could develop a site-specific - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 455
In this example, the NO_HW entry is no longer listed: het46 (HP-50001)> ioscan -funC disk Class I H/W Path Driver S/W State H/W Type Description disk 0 0/0/1/1.2.0 adisk CLAIMED DEVICE SEAGATE ST39204LC through the switch or fabric to be updated. Fabric OS 6.1.x administrator guide 455 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 456
log in as admin. 2. Enable the port swap feature: portswapenable 3. HP StorageWorks 4/8, 4/16, 4/32, 4/32B, 4/64, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch, Brocade 4 Gb SAN Switch for p-Class BladeSystem, Brocade 4 Gb SAN Switch for c-Class BladeSystem,and 400 Multi-protocol - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 457
portdisable slot/port1 portdisable slot/port2 4. HP StorageWorks 4/8, 4/16, 4/32, 8/8 SAN Switch, 8/24 SAN Switch, 8/40 SAN Switch, 8/80 SAN Switch, and 400 Multi- the logical area IDs for any swapped ports. 6. Disable the port swap feature: portswapdisable Fabric OS 6.1.x administrator guide 457 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 458
458 Configuring the PID format - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 459
management information Table 98 describes the password standards and behaviors between various versions of firmware. Table 98 Account/password characteristics matrix Topic 4.0.0 4.1.0 to 4.2.0 4.4.0 and is not required to change the user password. Fabric OS 6.1.x administrator guide 459 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 460
for any change to take effect? When does the password prompt appear? Is a user forced to answer password prompts before getting access to the firmware? No. Partial changes of all four passwords are allowed. When users connect as root, factory, or admin, the accounts with default password will be - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 461
firmware for various Fabric OS versions. Table 100 Password migration behavior during firmware procedures? Contact HP. A non-disruptive procedure is available. Contact HP. A non passwdDefault command to set all passwords to default. Contact HP and provide the recovery string. Refer to "Boot PROM - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 462
462 Understanding legacy password behaviour - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 463
on HP supported interop configurations, refer to the HP StorageWorks Fabric interoperability: merging fabrics based on C-Series and B-Series Fibre Channel switches on the following HP website: http://h18000.www1.hp.com/products/storageworks/san/documentation.html Fabric OS 6.1.x administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 464
464 Interoperating with an M-EOS fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 465
pages and steps have been provided to integrate the 400 MP Router in a fabric with the HP StorageWorks Multi-protocol Router. The figures in the following pages demonstrate how the 400 MP Router should old router, before it is introduced in the metaSAN. Fabric OS 6.1.x administrator guide 465 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 466
. Figure 55 Configuration during the upgrade The switch Domain ID and BB fabric ID of the new FC router can be identical. Once the metaSAN is stable, EX_Ports on the new router are 'active', the old router can be taken out of the setup. Redundant configuration The configuration shown in Figure 56 on - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 467
the upgrade process, these devices will face disruption unless there is redundancy support provided from the device end. 400 MP Router allows the end devices command, if they are not default. 7. You may choose to manually configure the xlate Domain IDs on the new router, to match with old - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 468
468 Migrating from an MP Router to a 400 MP Router - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 469
two remote HP switches over . The gateway supports both a Fibre services The Remote Switch fabric configuration fully supports all fabric services, including distributed name service, registered state change notification, and alias service Support the HP StorageWorks ). The HP StorageWorks switches - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 470
may be required to reconfigure the following parameters, depending on the gateway requirements: NOTE: Consult your gateway vendor for supported and qualified configurations. • R_A_TOV: Specify a Resource Allocation Timeout Value compatible with your gateway device. • E_D_TOV: Specify an Error Detect - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 471
] RSCN Transmission Mode (yes, y, no, n): [no] NS Operation Parameters (yes, y, no, n): [no] Arbitrated Loop parameters (yes, y, no, n): [no] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] Committing configuration...done. switch:admin> Fabric OS 6.1.x administrator - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 472
472 Using Remote Switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 473
Clean merge. The new configuration will be a composite of the two. defined: cfg1 zone1: ali1; ali2 cfg2: zone2: ali3; ali4 effective: none Fabric OS 6.1.x administrator guide 475 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 474
Table 103 Zone merging scenarios (continued) Description Switch A Switch A and Switch B have different defined configurations. Switch B has an enabled configuration. defined: cfg2 zone2: ali3; ali4 effective: none Effective configuration mismatch. defined: cfg1 zone1: ali1; ali2 effective: cfg1 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 475
B propagates to fabric. Fabric segments because Switch A has a hidden zone configuration (no access) activated and Switch B has an explicit zone configuration activated. Fabric OS 6.1.x administrator guide 477 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 476
478 Zone merging scenarios - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 477
A AAA service requests 67 aaaConfig command 69, 78, 80, 81 access browser support 93 changing adding members 163 assigning users to 161 creating 160 deleting 164, 165 firmware upgrade 159 implementing 160 interaction with Fabric OS features 168 logging in Fabric OS 6.1.x administrator guide 479 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 478
257 port numbering 257 boot password 81, 82, 84 boot PROM password 81 broadcast zones 202 Brocade Vendor-Specific Attribute 69 browser and Java support 93 browser, configuration 96 browsers support 93 C card management 226 certificates activating 96 browser, configuring 96 choosing 94 HTTPS 88 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 479
changing RADIUS servers 81 date and time 30 discovery domain access control, manual 266 discovery domain set access control, manual 266 discovery domain sets 266 discovery domains 266 FC4-16IP blade 257 discovery 247 conventions document 20 text symbols 20 Fabric OS 6.1.x administrator guide 481 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 480
proxy 298 DH-CHAP 303 DHCHAP 304 DH-CHAP secret 304 482 dictionary.brocade 71 disabled zone configuration 197 disabling 44 port 44 RADIUS configuration 80 switch 26 Domain ID 33 domain ID, insistent 415 domain, phantom 299 downloading configurations across a fabric 148 E edge-to-edge routing 302 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 481
to iSCSI virtual target 264 FC router 114 FC routing concepts 295 supported platforms 295 FC routing types 299 FC target LUNs 261 FC targets deleting 337 restoring configuration 346 saving configuration 346 FIPS 184 firmware download 174 fosConfig disable isnsc 277 enable 255, 258 enable guide 483 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 482
technical support 21 HP/UX procedure 454 HTTP 96 HTTPS 93, 96 certificates, security 88 hybrid update 451 I IAS configuring users 73 remote access policies 74 IAS (Internet Authentication Service), configuring displaying LUN map 266 limiting access to 252 manual creation 263 state and status 266 484 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 483
276 client service 276 client service, disabling 277 client service, enabling 276 client service, status 276 Storage Name Service) 266 iSNS server 266 isnscCfg clear 278 reregister 277 set 256, 277 show 277 J Java support, SSL 93 support for 357 M MAC address, port 260 Fabric OS 6.1.x administrator - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 484
47 nsShow 273 nsshow command 47 NTP access 32 O obtaining and unzipping firmware 175 offline update 451 online update 450 486 P packet size 259 passwd 259 PKI 93 planning the update procedure 450 platforms, FC routing supported 295 POD activating 40 enabling ports 44 policy account lockout 66 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 485
73 RADIUS server 70 configuration 72 configuring 72 LINUX configuration 72 RADIUS service Windows configuration 73 RBAC 56 reboot 323 recording configuration information 430 recovering 114 policy changes 114 saving and restoring monitor configurations 346 Fabric OS 6.1.x administrator guide 487 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 486
layer 93 security 88, 243 activating certificates 96 and tunneling 380 Brocade MIB 98 browsers 93 certificates 88 configuring standard features 87, 105 HP 22 summary of PID formats 445 summary of SSL procedures 93 support FC router 114 Java version 93 SNMPv3 and v1 98 Supported Services 125 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 487
, 380 technical support, HP 21 telnet configuring 92 telnet connection 24 text symbols 20 time 30 time and date 30 time zones 30, 32 tracking and controlling switch changes 48 traffic patterns planning for 358 transaction key 34 traps MIB 98 SNMP 98 troubleshooting guide 489 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 488
a configuration 214 resolving conflicts 221 saved zone configuration 196 schemes 196 soft-zoning 194 splitting a fabric 221 storage-based 194 troubleshooting 221 types 194 viewing 208 viewing configurations 216 zone configuration adding members 213 zone, broadcast 202 zoneCreate 256, 275 zoning and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 489
Figures 1 Example of a Brocade DCT file 75 2 Example of the dictiona.dcm file 76 3 DH-CHAP example 252 21 Discovery domain set configuration example 253 22 FC4-16IP ports 257 23 iSCSI gateway service in an iSCSI FC zone 271 24 iSCSI network with iSNS server and clients 276 25 Traffic - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 490
57 Dual backbone fabric configuration 466 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 491
69 14 dictionary.brocade file entries 71 15 Secure protocol support 87 16 Items needed 29 SCC policy states 114 30 Supported services 125 31 Implicit IP Filter rules download scenarios in an AD context 171 51 Effects of firmware changes on accounts and passwords 174 52 Recommended firmware - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 492
iSCSI initiators 255 70 iSCSI target gateway configuration steps 255 71 Hardware and firmware compatibility for nonsecure fabrics 326 72 Types of monitors supported on B-Series switch models 329 73 Advanced Performance Monitoring commands 332 74 Commands to add filter-based monitors 335
HP StorageWorks
Fabric OS 6.1.x administrator guide
Part number: 5697-0234
November 2009