HP StorageWorks 8/80 HP StorageWorks Fabric OS 6.2 administrator guide (5697-0
HP StorageWorks 8/80 - SAN Switch Manual
View all HP StorageWorks 8/80 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP StorageWorks 8/80 manual content summary:
- HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 1
HP StorageWorks Fabric OS 6.2 administrator guide Part number: 5697-0016 Edition: May 2009 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 2
L.P. © Copyright 2009 Brocade Communications Systems, Incorporated. HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 3
About this guide 25 Supported Fabric OS 6.2.x HP StorageWorks hardware 25 Intended audience 26 Related documentation 26 Document conventions and symbols 26 Rack stability 27 HP technical support 27 Customer self repair 27 Product warranties 27 Subscription service 28 HP websites 28 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 4
Releasing a port from a POD set 53 Switch activation and deactivation 54 Disabling a switch 54 Enabling a switch 54 Port activation and deactivation 54 Disabling a port 55 Enabling a port 55 Basic connections 55 Device connection 56 Switch connection 56 Gateway links 56 Configuring a link - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 5
forgotten passwords 82 The authentication model 83 Effects of using RADIUS or LDAP service on Fabric OS features 83 Setting the switch authentication mode 84 Fabric OS user accounts 85 Fabric OS users on the RADIUS server 86 Windows 2000 IAS 86 Linux FreeRadius server 86 RADIUS configuration - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 6
3 Configuring standard security features 99 Security Protocols 99 Secure file copy 100 Setting up SCP for configUploads and downloads 100 Simple Network Management Protocol 101 SNMP and Virtual Fabrics 102 Filtering ports 102 Switch and Chassis context enforcement 102 The security level 102 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 7
in the current switch database 133 Setting a secret key pair 133 Fabric-wide distribution of the AUTH policy 134 Accept distributions configuration parameter 134 IP Filter policy 135 Creating an IP Filter policy 135 Cloning an IP Filter policy 135 Displaying an IP Filter policy 135 Saving - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 8
in a FICON environment 171 B-Series configuration form 172 6 Managing virtual fabrics 173 Virtual Fabrics overview 173 Logical Switch 173 Default Logical Switch 173 Logical Switches and fabric IDs 174 Port assignment in Logical Switches 175 Logical Switches and connected devices 176 Logical - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 9
40 SAN Switch and HP StorageWorks 8/80 SAN Switch 181 Supported port configurations in the HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director 182 Virtual Fabrics interaction with other Fabric OS features 182 Limitations and restrictions of Virtual Fabrics 183 Enabling - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 10
Admin Domains and LSAN zones 211 Configuration upload and download in an AD context 212 8 Installing and maintaining firmware 213 Firmware download process overview 213 Upgrading and downgrading firmware 214 Effects of firmware changes on accounts and passwords 214 Considerations for FICON CUP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 11
256 SAN Director 48 Port 4Gb Blade and HP StorageWorks SAN Director 48 Port 8Gb FC Blade enabling exceptions 275 Blade terminology and compatibility 275 CP blades 277 Core blades 278 Port and application blade compatibility 278 Displaying slot information 279 Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 12
Switch-to-iSCSI initiator authentication 305 Load balancing through connection redirection 305 Enabling and disabling connection redirection for load balancing 305 Displaying connection redirection status 306 Supported iSCSI initiators 306 Checklist for configuring iSCSI 306 HP StorageWorks - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 13
HP StorageWorks B-Series iSCSI Director Blade port numbering 308 Enabling the iSCSI gateway service 309 Enabling GbE ports 310 Configuring the GbE interface 311 iSCSI Virtual Target Configuration 312 Automatic iSCSI VT creation 312 Generating iSCSI VTs for every FC target 312 Generating an - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 14
backbone connections 379 FC Router port cost configuration 383 Port cost considerations 383 Upgrade, downgrade, and HA considerations for router port cost 384 Setting router port cost for an EX_Port 384 EX_Port frame trunking configuration 384 Supported configurations and platforms 385 High - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 15
399 FC-FC routing and Virtual Fabrics 401 Logical Switch configuration for FC routing 401 Backbone-to-edge routing with Virtual Fabrics 402 Upgrade and downgrade considerations for FC-FC routing 403 How replacing port blades affects EX_Port configuration 403 Interoperability with legacy FCR - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 16
the HP StorageWorks 8/8 and 8/24 SAN Switches, which have a single 24-port port group and a total of 676 buffer credits for that port group 426 Displaying the remaining buffers in a port group 426 Buffer credit recovery 429 Fabric considerations for buffer credit management 430 Configuring - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 17
: Enabling Fastwrite on a switch 472 Disabling FC Fastwrite on a blade or switch 473 Example: Disabling FC Fastwrite on a switch 474 Disabling FC Fastwrite on a port 474 FCIP services configuration guidelines 474 Setting persistently disabled ports 475 Configuring VEX_Ports 475 Creating IP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 18
Platforms supporting FICON 496 Types of FICON configurations 496 Control Unit Port (CUP 497 FICON and FICON CUP in Virtual Fabrics 497 Example: The configure command 497 CUP Limitations 498 FICON commands 498 User security considerations 499 Switch configuration 499 Preparing a switch for - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 19
533 Swapping port area IDs 534 B Understanding legacy password behavior 537 Password management information 537 Password prompting behaviors 538 Password migration during firmware changes 539 Password recovery options 539 C Mixed fabric configurations for non-merge SANs 541 D Migrating - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 20
set configuration example 305 39 HP StorageWorks B-Series iSCSI Director Blade ports 309 40 iSCSI gateway service in an iSCSI FC zone 324 41 iSCSI network with iSNS server and clients 329 42 Traffic Isolation zone creating a dedicated path through the fabric 340 43 Fabric incorrectly configured - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 21
445 77 Trunk group configuration for the HP StorageWorks 8/40 SAN Switch 449 78 Network using FCIP 458 79 Single tunnel, Fastwrite and Tape Pipelining enabled 467 80 Multiple tunnels to multiple ports, Fastwrite and Tape Pipelining enabled on a per-tunnel/per-port basis . . . 468 81 Unsupported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 22
number of Logical Switches per chassis 183 51 AD user types 194 52 Ports and devices in CLI output 207 53 Admin Domain interaction with Fabric OS features 209 54 Configuration upload and download scenarios in an AD context 212 55 Effects of firmware changes on accounts and passwords 214 56 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 23
70 HP StorageWorks enterprise-class platform terminology and abbreviations 275 71 Port blades supported by each platform 278 72 LED behavior 281 73 Supported iSCSI initiators 306 74 iSCSI target gateway configuration steps 307 75 Comparison of traffic behavior when failover is enabled or - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 24
24 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 25
blade HP StorageWorks SAN Director 32 Port 8Gb FC blade HP StorageWorks SAN Director 48 Port 8Gb FC blade HP StorageWorks 8/8 SAN Switch or HP StorageWorks 8/24 SAN Switch Brocade 5100 Brocade 5300 HP StorageWorks 8/40 SAN Switch HP StorageWorks 8/80 SAN Switch Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 26
SAN switches Related documentation The following documents provide related information: • HP StorageWorks Fabric OS 6.1.x release notes • Web Tools administrator's guide You can find these documents from the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 27
by CSR. For more information about CSR, contact your local service provider. For North America, see the CSR website: http://www.hp.com/go/selfrepair Product warranties For information about HP StorageWorks product warranties, see the warranty information website: Fabric OS 6.2 administrator guide 27 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 28
enhancements, new driver versions, firmware updates, and other product resources. HP websites For additional product information, see the following HP websites: • http://www.hp.com • http://www.hp.com/go/storage • http://www.hp.com/support/manuals Documentation feedback HP welcomes your feedback. To - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 29
overview This chapter describes how to configure your HP SAN using the Fabric OS command line interface (CLI). Before you can configure a storage area network (SAN), you must power-up the enterprise-class platform or switch and blades, and then set the IP addresses of those devices. Although this - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 30
as described in "Console sessions using the serial port" on page 31. To automatically configure the network interface on a DHCP-enabled switch, plug the switch into the network and power it on. The DHCP client automatically gets the IP and gateway addresses from the DHCP server. The DHCP server must - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 31
the IP address or setting the boot PROM password. • For the HP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director, and HP StorageWorks DC04 SAN Director Switch enterprise-class platforms, You can connect to CP0 or CP1 using either of the two serial ports. Connecting to Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 32
Password HP StorageWorks 4/8 and 4/16 SAN Switch, HP StorageWorks 8/8 and 8/24 SAN Switch, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, HP StorageWorks 4/32 SAN Switch, HP StorageWorks 4/64 SAN Switch, HP StorageWorks 4/32B SAN Switch, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 33
through the serial port to set the Ethernet IP address if the Ethernet network interface is not configured already. See "Connecting to Fabric OS through the serial port" on page 31 for details. Virtual fabrics and the Ethernet interface IPFC allows management on switches, directors, and enterprise - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 34
settings If an IP address has not been assigned to the network interface (Ethernet), you must connect to the Fabric OS CLI using a console session on the serial port. For more information, see "Console sessions using the serial port" on page 31. Otherwise, connect using SSH. 1. Connect to the switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 35
DC SAN Backbone Director, and HP StorageWorks DC04 SAN Director Switch enterprise-class platforms do not support DHCP. The Fabric OS DHCP client supports the following parameters: • External Ethernet port IP addresses and subnet masks • Default gateway IP address Fabric OS 6.2 administrator guide 35 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 36
from an HP 8/80 Base 48-ports Enabled SAN Switch is "BROCADESWBD64." The client conforms to the latest IETF Draft Standard RFCs for IPv4, IPv6, and DHCP. Activating DHCP Connect the DHCP-enabled switch to the network, power on the switch, and the switch automatically obtains the Ethernet IP address - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 37
date and time are used for logging, error detection, and troubleshooting, you should set them correctly. In a Virtual Fabric there can be a maximum of eight Logical Switches per director or enterprise-class platform. Only the default switch in the chassis updates the hardware clock. When the date - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 38
the offset format. See "Firmware download process overview" on page 213 for time zone downgrading considerations. When you set the time zone for a switch you can perform the following tasks: • Display all of the time zones supported in the firmware. • Set the time zone based on a country and city - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 39
all fabrics. If the active NTP server configured is IPv6, distributing the same in the fabric is possible for switches earlier than 5.3.0 because IPv6 is supported for Fabric OS version 5.3.0 and later. The default value LOCL is distributed to pre-5.3.0 switches. Fabric OS 6.2 administrator guide 39 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 40
configuration...done. Updated with the NTP servers Changes to the clock server value on the principal or primary FCS switch are propagated to all switches in the fabric. Switch names Switches can be identified by IP except for the HP StorageWorks 8/8, 8/24, 8/40, and 8/80 SAN Switches, which is 31 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 41
several seconds, during which time traffic is delayed. If both switches have their Domain IDs persistently set, one of them must have its Domain ID changed to a Domain ID not used within the fabric. The default domain ID for HP B-Series switches is 1. IMPORTANT: Do not use domain ID 0. The use of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 42
embedded port D_ID. Worldwide Name The switch's WWN. Enet IP Addr The switch's Ethernet IP address for IPv4 and IPv6 configured switches. For IPv6 switches, only the static IP address is displayed. FC IP Addr The switch's Fibre Channel IP address. Name The switch's symbolic or user-created - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 43
the zoning license for Fabric OS 5.2.0. Upgrading is allowed, but downgrading is not supported. If a license is not version-based, it is valid for all versions of the feature. Table 4 lists the licenses that must be installed on the local switch and any connecting switches to use the feature - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 44
High-Performance Extension over FCIP/FC Tunnel FIPS No license required. Firmware download No license required. Firmwaredownload is a command and comes with the OS on the switch. Full fabric Full Fabric Ingress rate limiting Integrated routing Inter-chassis link (ICL) Interoperability IPsec - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 45
) Feature License Where license should be installed Speed 8 Gb/s license needed to support 8 Gb/s on the HP StorageWorks 8/8 and 8/24 SAN Switch, HP StorageWorks 8/40 SAN Switch, and HP StorageWorks 8/80 SAN Switch only. This license is installed by default and you should not remove it Local - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 46
or their associated features. Firmware upgrade and downgrade consideration When a time-based license is present on the switch, and you downgrade the firmware to Fabric OS 6.0.0 or earlier, the firmware downgrade is blocked. Configupload and download considerations The configDownload and configUpload - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 47
this manual. Enabling a feature on a switch may be a separate task from adding the license. 1. Connect to the switch and log in using an account assigned to the admin role. 2. Activate the license using the licenseAdd command. switch:admin> licenseadd "key" For the HP StorageWorks 4/256 SAN Director - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 48
license (not supported as of FOS 6.0) 4 Domain Fabric license FICON_CUP license High-Performance Extension over FCIP/FC license Full Ports on Demand license - additional 16 port upgrade license 2 Domain Fabric license Integrated Routing license Storage Application Services license FICON Tape - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 49
ports enabled, you can activate unlicensed ports in 4-port increments up to 16 ports by purchasing and installing the Ports on Demand optional licensed product. You can also purchase an E_Port license upgrade if your switch does not yet support full fabric access. The HP StorageWorks 4/32 SAN Switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 50
and the Brocade 8Gb SAN Switch for HP BladeSystem c-Class switch modules are for bladed servers. These switches support the Dynamic Ports on Demand (POD) feature. The Dynamic POD feature automatically assigns POD licenses from a pool of available licenses based on the server blade installation. The - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 51
port license assignments the next time the switch is rebooted. The static POD assignments become the initial Dynamic POD assignments. After the Dynamic POD feature is enabled, you can customize the POD license associations. The Dynamic POD feature is supported on the Brocade 4Gb SAN Switch for HP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 52
port assignments are provisioned by the base switch license 12 port assignments are provisioned by a full POD license 24 ports are assigned to installed licenses: 12 ports are assigned to the base switch license 12 ports are assigned to the full POD license Ports assigned to the base switch license - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 53
use 24 port assignments are provisioned for use in this switch: 12 port assignments are provisioned by the base switch license 12 port assignments are provisioned by a full POD license 10 ports are assigned to installed licenses: 10 ports are assigned to the base switch license 0 ports are assigned - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 54
assigned to a POD set. switch:admin> licenseport --show 24 ports are available in this switch Full POD license is installed Dynamic POD method is in use 24 port assignments are provisioned for use in this switch: 12 port assignments are provisioned by the base switch license 12 port assignments are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 55
32 SAN Switch, HP StorageWorks 4/64 SAN Switch, HP StorageWorks 4/32B SAN Switch, HP StorageWorks 8/40 San Switch, HP StorageWorks 8/80 SAN Switch, and HP StorageWorks 400 Multi-Protocol HP Router: switch:admin> portenable portnumber where portnumber is the port number of the port you want to enable - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 56
, to enable two switches to link through a gateway, the ports on both switches must be set for ELP mode 2. Any number of E_Ports in a fabric can be configured for gateway links, provided the following guidelines are followed: • All switches in the fabric must be upgraded to Fabric OS 5.2.0 or - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 57
, Brocade 8Gb SAN Switch for HP BladeSystem c-Class, HP StorageWorks 4/32 SAN Switch, HP StorageWorks 4/64 SAN Switch, HP StorageWorks 4/32B SAN Switch, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, and HP StorageWorks 400 Multi-Protocol HP Router: portCfgIslMode - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 58
BLADE 51 FC8-48 ENABLED 3 CORE BLADE 46 CR4S-8 ENABLED 4 CP BLADE 50 CP8 ENABLED 5 CP BLADE 50 CP8 ENABLED 6 CORE BLADE 46 CR4S-8 ENABLED 7 SW BLADE 55 FC8-32 ENABLED 8 SW BLADE 37 FC8-16 ENABLED Verifying fabric connectivity 1. Connect to the switch and log in using - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 59
switches in the fabric. switch:admin> fabricshow Switch ID Worldwide Name Enet IP Addr FC IP fffc0f 10:00:00:60:69:80:47:74 10.32.220.15 10:00:00:05:1e:40:68:78 10.32.220 24-bit Fibre Channel addresses of all devices in the fabric. switch Fabric } switch:admin> Fabric OS 6.2 administrator guide 59 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 60
assigned to the admin role. 2. Enter the agShow command. switch:admin> agshow Worldwide Name Ports Enet IP Addr Firmware Local/Remote Name 10:00:00:05:1e:02:1d:b0 16 10.32.53.4 v6.1.0 local ag_01 10:00:00:05:1e:03:4b:e7 24 10.32.60.95 v6.1.0 local ag_02 10:00 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 61
settings you have configured for each parameter. 4. Enter the switchStatusPolicyShow command to view your current switch status policy configuration. HP StorageWorks 4/8 and 4/16 SAN Switch, HP StorageWorks 8/8 and 8/24 SAN Switch, HP StorageWorks 4/32 SAN Switch, Brocade 4Gb SAN Switch for HP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 62
SAN Switch, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, and HP StorageWorks 400 Multi-Protocol Router switch:admin> switchstatuspolicyset To change the overall switch status policy parameters The current overall switch status policy parameters: Down Marginal - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 63
on an entire fabric, an audit is generated only for the switch from which the event was initiated. 3 Configuration Audit configuration downloads of existing SNMP configuration parameters. Configuration uploads are not audited. 4 Firmware Audit firmware download start, firmware complete, and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 64
Reference for details on message formats. For more information on setting up the system error log daemon, see the Fabric OS Troubleshooting and Diagnostics Guide. Audit logging assumes that your syslog is operational and running. Before configuring an audit log, you must perform the following steps - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 65
see shutting down the appliance per the instructions below, also known as a graceful shutdown. Cold boots see shutting down the appliance by suddenly shutting down power and then turning it back on, also known as a hard boot. Powering off a switch 1. Connect to the switch and log in using an account - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 66
Power off the switch. High availability of daemon processes Fabric OS 6.0 supports automatic restart of non-critical daemons. Starting these non-critical daemons is automatic; you cannot configure check" if auto-FTP is enabled. Track Changes Daemon. Webserver daemon used for WebTools (includes httpd as - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 67
procedures on managing authentication and user accounts for the switch management channel. User accounts overview In addition to the default accounts-root, factory, admin, and user-Fabric OS supports up to 252 additional user-defined accounts in each Logical Switch (domain). These accounts expand - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 68
later Chassis-specific configuration Fabric and switch administration General switch administration Security administration Local switch administration A role-permission applied only to the user account through the userConfig command. All switch and fabric commands, excluding user management and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 69
OM N OM O N Ethernet Configuration OM O OM O N OM O N Fabric Fabric Distribution OM O OM O OM N OM N O O O O OM N N N Fabric Routing OM O OM O N O O O Fabric Watch OM O OM OM N OM O N FICON OM O OM OM N OM O N Firmware Management OM O OM - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 70
permission Admin Basic Switch Admin Fabric Admin Operator Security Switch Admin Admin Port Mirroring QOS RADIUS Switch Management-IP OM O OM OM Configuration Switch Port Configuration OM OM OM OM OM OM N OM Switch Port Management OM OM OM OM Topology OM O OM O User - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 71
lists the predefined accounts offered by Fabric OS that are available in the local switch user database. The password for all default accounts for each switch should be changed during the initial installation and configuration. Table 12 Default local user accounts Account name Role Admin Domain - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 72
commands in a Logical Fabric-enabled environment. To assign the chassis role to an account, the executing account must have chassis-level permissions. Valid chassis roles are: User, SwitchAdmin, ZoneAdmin, FabricAdmin, BasicSwitchAdmin, Operator, or Admin. Specifies an expired password that must be - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 73
40 enable or no to disable an account. Once an account is disabled, the command line interface sessions associated with the account are terminated. -u Unlocks the specified user account. User accounts can get locked after several attempts to log in with an invalid password. See the Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 74
. Starting with Fabric OS 3.2.0, you cannot change default account names. For information on password behavior when you upgrade or downgrade firmware, see "Upgrading and downgrading firmware" on page 214. Changing the password for the current login account 1. Connect to the switch and log in - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 75
apply to the local switch user database only. Configured password policies (and all user account attribute and password state information) are synchronized across CPs and remain unchanged after an HA failover. Password policies can also be manually distributed across the fabric (see "Local account - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 76
user accounts when users are setting their own passwords. The password history policy is enforced only when a new password is defined. Specify the number of previous password values that are disallowed when setting a new password. Allowable password history values range between 1 and 24. The default - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 77
1st-Using Fabric OS 5.3.x release. User A changes her password. • April 1-Upgrade to 6.0.0 (or later). • May 1-User B changes his password. • June 1-The password configuration parameter MaxPasswordAge is set to 90 days. User A's password will expire on September 1. User B's password will expire - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 78
by protecting the boot PROM from unauthorized use. Setting a recovery string for the boot PROM password enables you to recover a lost boot PROM password by contacting your switch service provider. Without the recovery string, a lost boot PROM password cannot be recovered. 78 Managing user accounts - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 79
, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks 400 Multi-Protocol Router, and HP StorageWorks EVA4400 embedded switch module, 8Gb Brocade. If your switch is not listed, please contact your switch support provider for instructions. 1. Connect to the serial port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 80
passwords must be set for each CP blade on HP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director, and HP StorageWorks DC04 SAN Director Switch enterprise-class platforms. 1. Connect to the serial port interface on the standby CP blade, as described in "Connecting to Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 81
8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks 400 Multi-Protocol Router, and HP StorageWorks DC04 SAN Director. The password recovery instructions contained within this section are only for the switches listed. If your switch is not listed, contact your switch support provider - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 82
was lost: passwd user passwd admin passwd factory 4. Enter the requested information at the prompts. To recover a lost root password, contact your switch service provider. To recover a lost boot PROM password, contact your switch service provider. You must have previously set a recovery string to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 83
assume service. You can set the configuration with both RADIUS or LDAP service and local authentication enabled so that if the RADIUS or LDAP servers do not respond due to power failure or network problems, the switch uses local authentication. Effects of using RADIUS or LDAP service on Fabric OS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 84
configuration options aaaConfig options Description Equivalent setting in Fabric OS 5.1.0 and earlier --radius --switchdb1 --authspec "local" --authspec "radius" Default setting. Authenticates Off On management connections against the local database only. If the password does - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 85
server role to one of the default roles available on a switch. RADIUS and LDAP support all the defined RBAC roles described in Table 8 on page 68. Users must enter their assigned RADIUS or LDAP account name and password when logging in to a switch that has been configured with RADIUS or LDAP. After - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 86
of the assigned role and other supported attribute values such as Admin Domain member list. Fabric OS users on the RADIUS server All existing Fabric OS mechanisms for managing local switch user accounts and passwords remain functional when the switch is configured to use RADIUS. Changes made to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 87
would add the following statement to the configuration file: swladmin Auth-Type := Local, User-Password == "myPassword" Brocade-Auth-Role = "admin", Brocade-AVPairs1 = "HomeLF=70", Brocade-AVPairs2 = "LFRoleList=admin:2,4-8,70,80,128;ChassisRole=admin", Brocade-Passwd-ExpiryDate = "11/10/2008 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 88
. FreeRADIUS installation places the configuration files in $PREFIX/etc/raddb. By default, the PREFIX is /usr/local. Configuring RADIUS service on Linux consists of the following tasks: • Adding the Brocade attribute to the server • Creating the user • Enabling clients 88 Managing user accounts - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 89
70,80,128", Brocade-AVPairs3 = "ChassisRole=switchadmin", Brocade-Passwd-ExpiryDate = "11/10/2008", Brocade-Passwd-WarnPeriod = "30" When you use network information service (NIS) for authentication, the only way to enable authentication with the password file is to force the B-Series switch to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 90
and HP StorageWorks DC04 SAN Director Switch enterprise-class platforms send their RADIUS requests using the IP address of the active CP. When adding clients, add both the active and standby CP IP addresses so that, in the event of a failover, users can still log in to the switch. Enabling clients - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 91
host. 3. Configure the RSA RADIUS server. Setting up the RSA RADIUS server involves adding RADIUS clients, users, and vendor specific attributes to the RSA RADIUS server. a. Add the following data to the vendor.ini file: vendor-product = Brocade dictionary = Brocade ignore-ports = no port-number - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 92
.dcm file. IMPORTANT: The dictionary files for RSA RADIUS Server must remain in the installation directory. Do not move the files to other locations on your computer. Add Brocade-VSA macro and define the attributes as follows: • vid (Vendor-ID): 1588 • type1 (Vendor-Type): 1 • len1 (Vendor-Length - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 93
role on the switch. d. Add the Brocade profile. e. In RSA Authentication Manager, edit the user records that will be authenticating using RSA SecurID. LDAP configuration and Microsoft Active Directory LDAP provides user authentication and authorization using the Microsoft Active Directory service in - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 94
Microsoft Windows Resource Utility. This will need to be installed to proceed with the rest of the setup. For Windows 2003, this utility comes with Service Pack 1 or you can download this utility from the Microsoft web site. 2. Go to CN=Users. 3. Right click on select Properties. Click the Attribute - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 95
enable RADIUS or LDAP service. You can configure the RADIUS or LDAP service even if it is disabled on the switch, and can configure up to five RADIUS or LDAP servers. You must be logged in as admin or switchAdmin to configure the RADIUS service. NOTE: On dual-CP switches (HP StorageWorks 4/256 SAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 96
command succeeds, the event log indicates that the configuration is enabled or disabled. IMPORTANT: When the RADIUS authentication mode is set to radius;local, you cannot downgrade the Fabric OS to any version earlier than 5.2.0. Previous versions do not support the radius;local mode. When the LDAP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 97
is used to authenticate users and clients. It is based on extensible authentication protocol (EAP) and transport layer security (TLS). When PEAP is configured on the switch, clients running Fabric Manager cannot authenticate. Changing an LDAP server configuration 1. Connect to the switch and log in - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 98
that a server configuration is changed. Configuring local authentication as backup It is useful to enable local authentication so that the switch can take over authentication locally if the RADIUS or LDAP servers fail to respond because of power outage or network problems. To enable or disable local - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 99
Fabric OS 6.2 administrator guide 99 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 100
100 Managing user accounts - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 101
computer and allow the remote computer to authenticate the user, if necessary. Supports SSLv3, 128-bit encryption by default. Fabric OS uses secure socket layer (SSL) to support HTTPS. A certificate must be generated and installed on each switch to enable SSL. Fabric OS 6.2 administrator guide 99 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 102
Manager 4.0.0. • The fabric contains switches running Fabric OS versions earlier than 4.4.0. Nonsecure management is enabled by default. Secure file copy You can use the configure command to specify that secure file copy (SCP) is used for configuration uploads and downloads. Setting up SCP for - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 103
Example: Setting up SCP for configUpload/download: switch:admin> configure Not all options will be available on an enabled switch. To disable the switch, use the "switchDisable" command. Configure... System services (yes, y, no, n): [no] n ssl attributes (yes, y, no, n): [no] n http attributes (yes, - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 104
, an RBAC role, and the name of the SNMPv3 user should match that of the Fabric OS user in the local switch database. SNMPv3 users whose names do not match with any of the existing Fabric OS local users have a default RBAC role of admin with the SNMPv3 user access control of read/write. Their SNMPv3 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 105
. You can also change access control, MIB capability, and system group. Example: SNMPv3 configuration switch:admin> snmpconfig --set snmpv3 SNMPv3 user configuration: User (rw): [snmpadmin1] adminuser Auth Protocol [MD5(1)/SHA(2)/noAuth(3)]: (1..3) [3] 1 New Auth Passwd: Verify Auth Passwd - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 106
Example: accessControl configuration switch:admin> snmpconfig --set accessControl SNMP access list configuration: Access host subnet area in dot notation: [0.0.0.0] 192.168.0.0 Read/Write? (true, t, false, f): [true] Access host subnet area in dot notation: [0.0.0.0] 10.32.148.0 Read/ - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 107
will reset the agent's system group configuration back to factory default ***** sysDescr = Fibre Channel Switch sysLocation = End User Premise sysContact = Field Support authTraps = 0 (OFF) ***** Are you sure? (yes, y, no, n): [no] y Secure Shell protocol To ensure security, Fabric OS supports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 108
for the configUpload command. Both password and public key authentication can coexist on the switch. After the allowed-user is configured, the remaining setup steps must be completed by the allowed-user. 1. Log in to the switch as the default admin. 2. Change the allowed-user's role to admin, if - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 109
host by logging in to the switch as the allowed-user and entering the following command to export the key: sshUtil exportpubkey Respond to the prompts as follows: ip address remote directory login name password Enter the IP address of the remote host. IPv6 is supported by sshUtil. Enter the path - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 110
. For more details on levels of browser and Java support, see the Web Tools Administrator's Guide. SSL configuration overview To configure for SSL, obtain, install, and activate digital certificates for SSL support. Certificates are required on all switches that are to be accessed through SSL. Also - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 111
as an FQDN, make sure that the fully qualified domain name is set on the domain name server. The IP address or FQDN will be the server where the certificate will be placed. 4. Enter the following command to store the CSR: switch:admin> seccertutil export Fabric OS 6.2 administrator guide 109 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 112
; and then follow the instructions to complete and send the password on the server. Installing a switch certificate Perform this procedure on each switch. 1. Connect to the switch and log in as admin. 2. Enter the following command: switch:admin> seccertutil import 3. Select a protocol, enter the IP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 113
Take the appropriate following action based on whether you find the certificate: • If the certificate is listed, you do not need to install it. You can skip the follow the instructions to import the certificate. Root certificates for the Java Plug-in This procedure is a guide for installing a root - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 114
a list of installed certificates Displays the contents of a specific certificate Displays the contents of a CSR Deletes a specified certificate Deletes a CSR Telnet protocol Telnet is enabled by default. To prevent passing clear text passwords over the network when connecting to the switch, you can - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 115
, 8Gb Brocade, HP StorageWorks SAN Switch 4/32, HP StorageWorks 4/64 SAN Switch, HP StorageWorks SAN Switch 4/32B, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, and HP StorageWorks 400 Multi-Protocol Router; HP StorageWorks SAN Director 6 Port 10Gb FC blade, HP StorageWorks SAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 116
, 8Gb Brocade, HP StorageWorks SAN Switch 4/32, HP StorageWorks 4/64 SAN Switch, HP StorageWorks SAN Switch 4/32B, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, and HP StorageWorks 400 Multi-Protocol Router; HP StorageWorks SAN Director 6 Port 10Gb FC blade, HP StorageWorks SAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 117
configuring the switch for various policies, take into consideration firewalls and other devices that may sit between switches in the fabric and your network or between the managers and the switch. Table 23 Port information Port Type Common use Comment 22 TCP SSH 23 TCP Telnet 80 TCP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 118
116 Configuring standard security features - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 119
This chapter provides information and procedures for configuring advanced Fabric OS security features such as Access Control List (ACL) policies, authentication policies, and IP Filtering for HP's Fibre Channel switches. ACL policies overview Each supported Access Control List (ACL) policy listed - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 120
, and DCC policies. HP recommends uploading and saving a copy of the Fabric OS configuration after creating policies. For more information on configuration uploads, see the Chapter 5, "Maintaining the switch configuration file" on page 163. You can view the active and defined policy sets at any time - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 121
supported, and you can either configure the switches in your fabric to accept the FCS policy or manually distribute the FCS policy. Changes made to the FCS policy are saved to permanent memory only after the changes have been saved or activated; they can be aborted later if you have set your fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 122
configuration, such as show or local switch commands, are allowed on backup and non-FCS switches. FCS enforcement applies only for user-initiated fabric-wide operations. Internal fabric data propagation because of a fabric merge is not blocked. Consequently, a new switch that joins the FCS-enabled - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 123
NOTE: FCS policy must be consistent across the fabric. If the policy is inconsistent in the fabric, you will not be able to perform any fabric-wide configurations from the primary FCS. Modifying the order of FCS switches 1. Log in to the Primary FCS switch using an account assigned to the admin role - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 124
be manually distributed to the switches using the distribute -p command. Each switch that receives the FCS policy must be configured to receive the policy. To configure the switch to accept distribution of the FCS policy, see "Database distribution settings" on page 140. Switches in the fabric are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 125
the distribution and the operation fails. The reject entire transaction is aborted and no fabric state change occurs. 5.2.0 switch (not configured as it does not support this) Target switch receives distribution but ignores FCS policy database. Pre-5.2.0 No distribution is initiated, as pre - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 126
not respond to port login from the switch and are not enforced by the DCC policy. This does not create a security problem because these HBAs switch. 3. To save or activate the new policy, enter the appropriate command: • To save the policy, enter the secPolicySave command. 124 Configuring - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 127
77:11:22:cc, ports 1 through 4 of switch domain 4, and all devices currently connected to ports 1 through 4 of switch domain 4: switch:admin> secpolicycreate "DCC_POLICY_example", IDs, or switch names. Only one SCC policy can be created. By default, any switch is allowed to join the fabric; the SCC - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 128
Switch supports an SCC policy. You can configure and distribute an SCC policy on a Logical Switch. • SCC enforcement is performed on a ISL based on the SCC policy present on the Logical Switch. For more information on Virtual Fabrics changes to the active policy set and activates all policy changes - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 129
or FCAP protocols for authentication. These protocols use shared secrets and digital certificates, based on switch WWN and public key infrastructure (PKI) technology, to authenticate switches. Authentication automatically defaults to FCAP if both switches are Fabric OS 6.2 administrator guide 127 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 130
will be initiated automatically on ports or switches brought online if the policy is set to activate authentication. The AUTH policy is distributed using the distribute command; automatic distribution of the AUTH policy is not supported. The default configuration directs the switch to attempt FCAP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 131
. Authentication is not supported on logical ports . For more information on Virtual Fabrics, see Chapter 6, "Managing virtual fabrics" on page 173. A secret key pair has to be installed prior to changing the policy. The policy can be configured as follows: switch:admin> authutil --policy - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 132
requires manual interaction in setting the HBA shared secrets and switch shared secrets, and most of the HBAs do not support the defined DH groups for use in the DH-CHAP protocol. By default the switch is in the OFF state, which means the switch clears the security bit in the FLOGI (fabric login - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 133
Logical Switch is set when Virtual Fabrics is enabled. Authentication is enforced based on each Logical Switch's policy settings. AUTH policy restrictions Fabric OS 5.1.0 implementation of DH-CHAP/FCAP does not support integration with RADIUS. All fabric element authentication configurations are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 134
: If you set the authentication protocol to DH-CHAP, have not yet configured shared secrets, and authentication is checked (for example, you enable the switch), switch authentication fails. Re-authenticating E_Ports Use the command authUtil to re-initiate the authentication on selected ports. The - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 135
00:00:60:69:80:07:5c 1 switchA Setting a secret key pair 1. Log in to the switch using an account assigned to the admin role. 2. On a switch running Fabric OS 4.x, 5.x, or 6.0.0 or later, enter secAuthSecret --set; on a switch running Fabric OS 3.x, enter secAuthSecret "--set". The command enters - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 136
manually distributed to the fabric using the distribute command; there is no support for automatic distribution. To distribute the AUTH policy, see "Distributing the local ACL policies" on page 142 for instructions. Accept distributions configuration parameter Local Switch configuration parameters - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 137
and default_ipv6 are reserved for default IP filter policies. The policy IP Filter policy, the --show subcommand displays the content in the temporary buffer, with the persistent state set to no. 1. Log in to the switch using an account assigned to the admin role. Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 138
of the same type. Activating the default IP Filter policies returns the IP management interface to its default state. An IP Filter policy without any rule cannot be activated. This subcommand prompts for a user confirmation before proceeding. 1. Log in to the switch using an account assigned to the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 139
and their corresponding port number. Table 31 Supported services Service name Port number http 443 rpcd 897 securerpcd 898 snmp 161 ssh 22 sunrpc 111 telnet 23 www 80 TCP and UDP protocols are valid selections. Fabric OS 5.3.0 and later does not support a configuration to filter - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 140
A switch with Fabric OS 5.3.0 or later will have a default IP Filter policy for IPv4 and IPv6. The default IP Filter policy cannot be deleted or changed. When an alternative IP Filter policy is activated, the default IP Filter policy becomes deactivated. Table 33 lists the rules of the default IP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 141
, the sending switch distributes the IP Filter policies only to switches with Fabric OS 5.3.0 or later. Policy database distribution Fabric OS lets you manage and enforce the ACL policy database on either a per-switch or fabric-wide basis. The local switch distribution setting and the fabric-wide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 142
policy is not set, the policies are managed on a per-switch basis. For configuration instructions, see "Fabric-wide enforcement" on page 142. Virtual Fabric considerations: Fabric-wide consistency policies are configured on a per-Logical Switch-basis and are applied to the fabrics connected to the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 143
policy database Password database SCC policy database FCS IPFILTER PWD SCC Displaying the database distribution settings 1. Connect to the switch and log in using an account assigned to the admin role. 2. Enter the following command: switch:admin> fddcfg --showall Local Switch Configuration for - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 144
target switches. Policy changes that are saved but not activated are stored locally until a policy database change is activated. Activating a policy automatically distributes the Active policy set for that policy type (SCC, DCC, or both) to the other switches in the fabric. 142 Configuring advanced - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 145
is defined. switch:admin> fddcfg --showall Local Switch Configuration for all Databases:- DATABASE - Accept/Reject SCC - accept DCC - accept PWD - accept FCS - accept AUTH - accept IPFILTER - accept Fabric Wide Consistency Policy:- "" Setting the fabric-wide consistency policy - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 146
either this switch or the fabric to set a matching strict SCC or DCC fabric-wide consistency policy. Use ACL policy commands to delete a conflicting ACL policy from one side to resolve an ACL policy conflict. If neither the fabric nor the joining switch is configured with a fabric-wide consistency - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 147
merges that are not supported. Table 39 Examples of strict fabric merges Fabric-wide consistency policy setting Expected behavior Polidy type Fabric A Fabric B Strict/Tolerant Strict/Absent SCC:S;DCC:S SCC;DCC:S SCC:S;DCC:S SCC;DCC:S SCC:S;DCC Ports connecting switches are disabled. Strict - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 148
with tolerant/absent combinations Fabric-wide consistency policy setting Expected behavior Policy type Fabric A Fabric B Tolerant/Absent SCC;DCC DCC SCC;DCC SCC DCC SCC Error message logged. Run fddCfg --fabwideset "" from any switch with the desired configuration to fix the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 149
for processing. Each endpoint would announce the set of addresses behind it, and packets would be sent in tunnel mode where the inner IP header would contain the IP addresses of the actual endpoints. Figure 6 Gateway tunnel configuration Endpoint-to-Gateway Tunnel In this scenario, a protected - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 150
based on a secret key and the contents of the IP datagram. This HMAC is then included in the IPsec protocol header and the receiver of the packet can check the HMAC if it has access to the secret key. To protect against denial of service --flush manual-sa is a set of parameters supported configuring - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 151
desired. NOTE: The MD5 hash algorithm is blocked when FIPS mode is enabled. 3DES Triple DES (3DES or TDES) is a block cipher formed from a simple way to enlarge the key space without a need to switch to a new algorithm. The use of three steps is essential to Fabric OS 6.2 administrator guide 149 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 152
tools for manual key entry (MKE) and automatic keyed connections. The LINUX setKey command can be used for manually keyed connections, which means that all parameters needed for the setup of the connection are provided by you. Based on which protocol, algorithm, and key 150 Configuring advanced - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 153
the ipSecConfig --add policy ips sa-proposal -tag name -sa name command. The following example creates an IPsec proposal IPSEC-AH to use AH01 as SA. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-AH -sa AH01 6. Import the pre-shared key file. Fabric OS 6.2 administrator guide 151 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 154
page 99 for information on how to set up pre-shared keys and certificates. 7. Configure the IKE policy using the ipSecConfig --add the two switches. b. Verify that IP traffic is encapsulated. c. Monitor IPsec SAs created using IKE for the above traffic flow: • Use the ipsecConfig --show manual-sa -a - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 155
.74.13 -r 10.33.69.132 -transform TRANSFORM01 switch:admin> ipsecconfig --add policy ips selector -t SELECTOR-IN \ -d in -l 10.33.69.132 -r 10.33.74.13 -t transform TRANSFORM01 9. On BRCD7500, create equivalent traffic selectors for inbound and outbound traffic. Fabric OS 6.2 administrator guide 153 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 156
and decryption. IMPORTANT: When FIPS mode is enabled, this is a chassis-wide setting and affects all Logical Switches. Zeroization functions Explicit zeroization can be done at the discretion of the security administrator. These functions clear the passwords and the shared secrets. The Table 42 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 157
results. See the Fabric OS Troubleshooting and Diagnostics Guide for recovery instructions if your system cannot get out of the conditional test mode. FIPS mode configuration By default, the switch comes up in non-FIPS mode. You can run the fipsCfg --enable fips command to enable FIPS mode, but - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 158
/ download/supports ave/ firmwaredownload SCP only Optional firmware signature validation FTP and SCP IPsec Radius auth protocols Usage of AES-XCBC, MD5, and DH group 0 and 1 is blocked. PEAP-MSCHAPv2 No restrictions CHAP, PAP, PEAP-MSCHAPv2 LDAP in FIPS mode You can configure your - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 159
exist. LDAP CONFIGURATIONS Position Server Port Domain Timeout(s) : 1 : GEOFF5.ADLDAP.LOCAL : 389 : adldap.local : 3 Primary AAA Service: LDAP Secondary AAA Service: Switch database 2. Configure the DNS on the switch using the dnsConfig command. Example: Setting the DNS switch:admin> dnsconfig - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 160
Key exchange algorithm Protocols 3DES SHA1 PKCS TLSv1.0 b. Enable FIPS algorithm policy on the Microsoft Active Directory. See www.microsoft.com for instructions. LDAP certificates for FIPS mode To utilize the LDAP services for FIPS between the switch and the host, you must generate a CSR on - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 161
. 3. For LDAP only: Install SSL certificate on Microsoft Active Directory server and CA certificate on the switch for using LDAP authentication. 4. Block Telnet, HTTP, and RPC. 5. Disable BootProm access. 6. Configure the switch for signed firmware. 7. Disable root access. 8. Enable FIPS. Fabric OS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 162
: System services No cfgload attributes Yes Enforce secure config Upload/Download Press Enter to accept the default. Enforce firmware signature validation Yes Example: Adding a rule to the IP filter policy switch:admin> configure Not all options will be available on an enabled switch. To - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 163
bootprom: userconfig --change root -e yes 5. Enable access to the bootprom: fipscfg --enable bootprom 6. Optional: Use the configure command to set switch to use non-signed firmware. By keeping the switch set to use signed firmware, all firmware downloaded to the switch will have to be signed with - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 164
162 Configuring advanced security features - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 165
edited file is subsequently downloaded. Configuration file format In Fabric OS 6.2.0 the configuration file is divided into three areas: the header, the chassis section, and one or more switch sections. If you upgrade the firmware on any existing switches from pre-Fabric OS 6.2.0 to 6.2.0, you must - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 166
policies] [iSCSI] [cryptoDev] [FICU SAVED FILES] [Banner] [End] [Switch Configuration End : 0] date = Thu Oct 9 21:22:25 2008 [Switch Configuration Begin : 1] SwitchName = n200 Fabric ID = 100 [Boot Parameters] [Configuration] [Zoning] [Defined Security policies] [Active Security policies] [iSCSI - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 167
supports anonymous users, and you log in as an anonymous user, password is still a required field, even though its value may be ignored by the FTP service. Before beginning, verify that you can reach the FTP server from the switch. Using a Telnet connection, save a backup copy of the configuration - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 168
switch configuration, you need to perform configupload logged into AD255. switch:AD5:admin> ad --select 5 switch:AD5:admin> configUpload Protocol (scp or ftp) [ftp]: Server Name or IP Address [host]: 10.1.2.3 User Name [user]: JohnDoe File Name [config.txt]: /pub/configurations/config.txt Password - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 169
Make sure that the configuration file you are downloading is compatible with your switch model, because configuration files from other model switches or firmware versions might cause your switch to fail. If your setup supports anonymous users, and you log in as an anonymous user, password is still - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 170
may become corrupted and can lead to switch failures. Configuration download without disabling a switch You can download configuration files to a switch while the switch is enabled; that is, you do not need to disable the switch for changes in SNMP or Fabric Watch parameters. However, if there is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 171
or IP Address [host]: 10.1.2.3 User Name [user]: joeUser File Name [config.txt]: Section (all|chassis|FID# [all]): all *** CAUTION *** This command is used to download a backed-up configuration for a specific switch. If using a file from a different switch, this file's configuration settings will - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 172
Name or IP Address [host]: 10.1.2.3 User Name [user]: JohnDoe File Name [config.txt]: /pub/configurations/config.txt *** CAUTION *** This command is used to download a backed-up configuration for a specific switch. If using a file from a different switch, this file's configuration settings will - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 173
CAUTION: Do not download a configuration file from one switch to another switch that is a different model or firmware version, because it can cause the switch to fail. If you need to reset affected switches, enter the configDefault command. IMPORTANT: Verify that all domain IDs are unique prior to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 174
(Table 46) as a hard copy reference for your configuration information. In the hardware reference manuals for the HP StorageWorks 4/256 SAN Director and HP StorageWorks DC SAN Backbone Director enterprise-class platform, there is a guide for FC port setting tables. The tables can be used to record - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 175
Director, HP StorageWorks DC04 SAN Director, HP StorageWorks 8/80 SAN Switch, or HP StorageWorks 8/40 SAN Switch). Enabling Virtual Fabrics creates a single Logical Switch in the physical chassis. This Logical Switch is called the default Logical Switch, and it initially contains all of the ports in - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 176
Virtual Fabrics-enabled switch before and after it is divided into Logical Switches. Before you create Logical Switches, the chassis appears as a single switch (default Logical Switch). After you create Logical Switches, the chassis appears as multiple independent Logical Switches. All of the ports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 177
Fabric IDs assigned to Logical Switches Port assignment in Logical Switches Initially, all ports belong to the default Logical Switch. When you create additional Logical Switches, they are empty and you must assign ports to those Logical Switches. As you assign ports to a Logical Switch, the ports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 178
to another. If you want to configure a different type of port, such as a VE_Port or EX_Port, you must configure the port after you move it. Some types of ports cannot be moved from the default Logical Switch. See "Supported platforms for Virtual Fabrics" on page 181 for detailed information about - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 179
switch 7 P6 Fabric ID 15 Logical switch 4 P6 Fabric ID 8 P8 Logical switch 8 P9 Fabric ID 8 Switch Figure 14 Logical Switches connected to other Logical Switches through physical ISLs Figure 15 shows a logical representation of the configuration in Figure 14. Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 180
Logical Switch. • Base switches do not support direct device connectivity. A base switch can have only E_Ports, VE_Ports, EX_Ports, or VEX_Ports, but no F_Ports. • The base switch provides a common address space for communication between different Logical Fabrics. • A base switch can be configured - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 181
to do so; you can change this setting, however, using the procedure described in "Configuring a Logical Switch for XISL use" on page 187. NOTE: The default Logical Switch in the HP StorageWorks DC SAN Backbone Director or HP StorageWorks DC04 SAN Director cannot use XISLs. You can also connect - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 182
18 Logical Fabric using ISLs and XISLs By default, the physical ISL path is favored over the logical path (over the XISL) because it has a lower cost. This behavior can be changed by configuring the cost of the dedicated physical ISL to match the cost of the LISL. Base switch ports on different - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 183
to user accounts. Supported platforms for Virtual Fabrics Virtual Fabrics is supported on the following platforms: • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks DC SAN Backbone Director • HP StorageWorks DC04 SAN Director Some restrictions apply to the ports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 184
in the base switch are not supported for carrying Logical Fabric traffic over XISLs. • The default Logical Switch can have the following ports: • 8-Gb/s ports (F_Ports, E_Ports) • FC ports on the B-Series Multi-Protocol Router Blade • All ports on the HP StorageWorks SAN Director 6 Port 10Gb FC - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 185
the default Logical Switch) supported on each. Table 50 Maximum number of Logical Switches per chassis Platform Maximum number of Logical Switches HP StorageWorks DC SAN 8 Backbone Director HP StorageWorks DC04 SAN 8 Director HP StorageWorks 8/80 SAN 4 Switch HP StorageWorks 8/40 SAN 3 Switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 186
Routing service: iSCSI service: iSNS client service: Virtual Fabric: disabled Service not supported on this Platform Service not supported on this Platform disabled switch:admin> fosconfig --enable vf WARNING: This is a disruptive operation that requires a reboot to take effect. All EX ports will - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 187
, see the Fabric OS Command Reference. Creating a Logical Switch or base switch When the Logical Switch is created, it is automatically enabled and is empty-that is, it does not have any ports. After creating the Logical Switch, you must disable the switch to configure it and set the domain ID - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 188
manually reinstall them on the port after the move. If the Logical Switch to which the port is moved has fabric mode Top Talkers enabled and the port is an E_Port, fabric mode Top Talker monitors are automatically installed on that port. NOTE: If you are deploying ICLs in the base switch, all ports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 189
use When you create a Logical Switch, by default it is configured to use XISLs. Use the following procedure to allow or disallow the Logical Switch to use XISLs in the base fabric. 1. Connect to the physical chassis and log in using an account assigned to the admin role. 2. Set the context to the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 190
Base Switch: No, Default Switch: Yes] Area Port Media Speed State Proto 0 0 id N8 No_Sync 1 1 id N8 No_Sync Disabled (Persistent) Disabled (Persistent) 4. Enter the following command to disable the switch: switchdisable 5. Enter the following command: configure 6. Enter y after the Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 191
if it is not already enabled. See "Enabling Virtual Fabrics" on page 184 for instructions. This automatically creates the default Logical Switch, with FID 128. All ports in the chassis are assigned to the default Logical Switch. c. Create a base switch and assign it a fabric ID that will become the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 192
that you created in step 4 (the base switches are already enabled): switchenable The Logical Fabric is formed. The fabricShow command displays all Logical Switches configured with the same fabric ID as the local switch and all non-Virtual Fabric switches connected through ISLs to these Logical - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 193
which switches, ports, and devices you can view and modify. An Admin Domain is a filtered administrative view of the fabric. NOTE: If you do not implement Admin Domains, the feature has no impact on users and you can ignore this chapter. Admin Domains permit access to a configured set of users - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 194
shown in Figure 21, users can see all switches and E_Ports in the fabric, regardless of their Admin Domain; however, the switch ports and end devices are filtered based on Admin Domain membership. Fabric Visible to AD1 User Fabric Visible to AD2 User Figure 21 Filtered fabric views when using Admin - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 195
5.2.0 or later. • Switches running Fabric OS versions earlier than 6.1.0 must have a valid Advanced Zoning license. • The default zone mode setting must be set to No Access before you create Admin Domains (see "Setting the default zone mode" on page 200 for instructions). • Virtual Fabrics must be - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 196
information). In Figure 20 on page 192, AD1 and AD2 are user-defined Admin Domains. System-defined Administrative Domains AD0 and AD255 are special, system-defined Admin Domains. When you install Fabric OS 6.1.0, the switch enters AD-capable mode with domains AD0 and AD255 automatically created. AD0 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 197
configurable property of a non-default user account. Here is some additional information about AD accounts: • You can log in only to one Admin Domain at a time. You can later switch to a different Admin Domain (see "Switching to a different Admin Domain context" on page 208 for instructions). Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 198
to any Admin Domain as soon as the domain is created, and makes this account a physical fabric administrator. • For user-defined accounts, the home Admin Domain also defaults to AD0 but an administrator can set the home Admin Domain to any Admin Domain to which the account has been given access - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 199
: • Grants administrative control to the switch • Grants port control for all ports in that switch • Allows switch administrative operations such as disabling and enabling a switch, rebooting, and firmware downloads • Does not provide zoning rights for the switch ports or devices To allow devices to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 200
:03 Fabric Visible to AD4 User Domain 24 Filtered fabric views showing converted switch WWNs Admin Domain compatibility, availability, and merging Admin Domains maintain continuity of service for Fabric OS features, and operate in mixed-release Fabric OS environments. High availability is supported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 201
• In mixed-fabric configurations, the legacy switches allow unfiltered access to the fabric and its devices; therefore, these legacy switches should be managed by the physical fabric administrator. • You must zone all ports and devices from legacy switches in the AD0 root zone database. • If you - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 202
zone mode To begin implementing an Admin Domain structure within your SAN, you must first set the default zone mode to No Access. You must be in AD0 to change the default zone mode. 1. Log in to an AD-capable switch in the fabric with the appropriate RBAC role. 2. Ensure you are in the AD0 context - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 203
necessary, as described in "Disabling Virtual Fabrics" on page 184. Admin Domains and Virtual Fabrics cannot co-exist. 3. Set the default zone mode to No Access, if you have not already done so. See "Setting the default zone mode" on page 200 for instructions. 4. Switch to the AD255 context, if you - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 204
to all Admin Domains (AD0 through AD255), and home Admin Domain set to 255. This user account is now a physical fabric administrator. switch:admin> userconfig --add pf_admin1 -r admin -h 255 -a "0-255" Removing an Admin Domain from a user account When you remove an Admin Domain from an account, all - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 205
configuration under the Admin Domain you want to deactivate. cfgdisable 3. Switch to the AD255 context, if you are not already in that context. ad --select 255 4. Enter the ad --deactivate command. ad --deactivate ad_id You are then prompted for confirmation. 5. Enter the appropriate command based - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 206
command based on whether you want to save or activate the Admin Domain definition: • To save the Admin Domain definition, enter ad --save. • To save the Admin Domain definition and directly apply the definition to the fabric, enter ad --apply. The following example adds two switch ports, designated - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 207
example deletes Admin Domain AD_B3. switch:AD255:admin> ad --delete AD_B3 You are about to delete an AD. This operation will fail if zone configuration exists in the AD Do you want to delete 'AD_B3' admin domain (yes, y, no, n): [no] y switch:AD255:admin> Fabric OS 6.2 administrator guide 205 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 208
membership list of AD0 is cleared, and all fabric resources (switches, ports, and devices) are returned to the implicit membership list of AD0. You cannot clear the Admin Domain configuration if zone configurations exist in any of the user-defined Admin Domains. 1. Clear all individual AD zone - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 209
199. The Admin Domain looks like a virtual switch or fabric to a user. However, based on the user role and type (User_ID), users are presented with only their relevant AD-based views (see Figure 20 on page 192 and Figure 21 on page 192). Any devices and switch ports that are not defined as part of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 210
in the AD7 context. switch:AD255:admin> ad --exec 7 "switchshow" Displaying an Admin Domain configuration You can display the membership AD0: The device and switch list members are categorized into implicit and explicit member lists. 1. Connect to the switch and log in as any user type. 2. Enter the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 211
do not extend to user session tunneling across switches. A user logged into a switch can control only the local switch ports as specified in the Admin Domain. When the fabric is in secure mode, the following applies: • There is no support for ACL configuration under each Administrative Domain - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 212
calls can be controlled using the Management Server ACL support provided by the msConfigure command. Note that this is a switch-specific setting and not a fabric-wide setting. Admin Domain port members are specified in domain,index format. Based on the PID format, a domain,index member indicates - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 213
zone databases for each AD. Admin Domains support the default zone mode of noaccess only. Before configuring any Admin Domain, you must set the default zone to noaccess mode. Admin Domains without effective zone configurations are presented with noaccess. See "Default zoning mode" on page 250 for - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 214
all Admin Domains and then enter configDownload to restore them. Table 54 Configuration upload and download scenarios in an AD context AD contexts Configuration file sections iSCSI ACL Zone AD headers Switch configuration and other parameters AD255 With ADs Without ADs Yes Yes Yes1 Yes Yes - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 215
-based systems have one CP. Use the firmwareDownload command to download the firmware from either an FTP or SSH server by using either the FTP or SCP protocol to the switch. Or, on the HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 216
was disabled, it is reenabled after the downgrade. User-defined and default accounts and their passwords are preserved, including accounts added after the first upgrade. For details on Administrative Domains and the firmware download process, see Chapter 7, "Managing administrative domains" on - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 217
in this section will enable you to provide your switch support provider the information required to perform advanced troubleshooting. HP recommends that you perform a configUpload to back up the current configuration before you download firmware to a switch. See "Configuration file backup" on page - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 218
StorageWorks SAN Switch 4/32B, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks EVA4400 embedded switch module, 8Gb Brocade, Broade 8Gb SAN Switch for HP BladeSystem c-Class, or HP StorageWorks 400 Multi-Protocol Router are adjacent and you start firmware downloads - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 219
, HP StorageWorks SAN Switch 4/32B, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks EVA4400 embedded switch module, 8Gb Brocade, Brocade 8Gb SAN Switch for HP BladeSystem c-Class, and HP StorageWorks 400 Multi-Protocol Router: • The Fabric OS downloads the firmware - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 220
switch service provider. Upgrading firmware for switch and router products This procedure is applicable to the following products: • HP StorageWorks 4/8 and 4/16 SAN Switches • HP StorageWorks 8/8 and 8/24 SAN Switches • Brocade 4Gb SAN Switch for HP p-Class BladeSystem • Brocade 4Gb SAN Switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 221
platform You can download firmware to an HP StorageWorks 4/256 SAN Director, and to HP StorageWorks DC SAN Backbone Director and to HP StorageWorks DC04 SAN Director Switch enterprise-class platforms without disrupting the overall fabric if the two CP blades are installed and fully synchronized - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 222
switch service provider. Do not disconnect the switch from power during the process because the switch could become inoperable upon reboot. Upgrading firmware on enterprise-class platforms (including blades) There is only one Logical Switch address for the HP StorageWorks 4/256 SAN Director, the HP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 223
your switch service provider. 7. Enter the firmwareDownload command. 8. Respond to the prompts as follows: Server Name Enter the name or IP address of the FTP server, or SSH server for SCP, where the firmware or IP Address file is stored; for example, 192.1.2.3. IPv6 and DNS are supported by - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 224
NOTE: HP does not support the FA4-18 product. sw77:admin> firmwaredownload Type of Firmware (FOS, SAS, or any application) [FOS]: Server Name or IP Address: 192.168.32.10 Network Protocol (1-auto-select, 2-FTP, 3-SCP) [1]: User Name: userfoo File Name: /home/userfoo/v6.2.0 Password: Verifying the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 225
06 00:30:49 2008 Slot 7 (SAS): Firmware commit has completed. (Firmwaredownload has completed.) 11. Enter the firmwareShow command to display the new firmware versions. The following is an example of firmwareShow output on the HP StorageWorks 4/256 SAN Director. Fabric OS 6.2 administrator guide 223 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 226
from a USB device The HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch switches and the HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch support a firmware download from an HP StorageWorks B-Series 2G USB - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 227
digitally signed using the OpenSSL utility to provide FIPS support.To use the digitally signed software, you must configure the switch to enable Signed Firmwaredownload. If it is not enabled, the firmware download process ignores the firmware signature and work as before. If Signed Firmwaredownload - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 228
switch for signed firmware 1. Log in to the switch as admin. 2. Enter the configure command. 3. Respond to the prompts as follows: System Service ssl attributes Default is no; press Enter to select default setting. Default is no; press Enter to select default setting. snmp attributes Default - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 229
User Name: userfoo File Name: /home/userfoo/v6.0.0 Password: Do Auto-Commit after Reboot [Y]: n Reboot system after download [N]: y Firmware is being downloaded to the switch. This step may take up to 30 minutes. Checking system settings for firmwaredownload... Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 230
each CP. This procedure enables you to evaluate firmware before you commit. As a standard practice, you should not run mixed firmware levels on CPs. Testing different firmware versions on enterprise-class platforms 1. Connect to the HP StorageWorks enterprise-class platform IP address. 2. Enter the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 231
place. You are now ready to evaluate the new version of firmware. IMPORTANT: Stop! If you want to restore the firmware, stop here and skip ahead to step 12; otherwise, continue to step 10 to commit the firmware on both CPs, which completes the firmware download. Fabric OS 6.2 administrator guide 229 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 232
. If you want to upgrade an enterprise-class platform with only one CP in it, follow the procedures in "Test and restore firmware on switches" on page 227. Note, however, that upgrading an enterprise-class platform with only one CP will be disruptive to switch traffic. 230 Installing and maintaining - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 233
, it is possible that a device or switch cannot connect to the fabric and further troubleshooting is necessary. firmwareShow Displays the current firmware level on the switch. For HP StorageWorks Directors, this command displays the firmware loaded on both partitions (primary and secondary - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 234
232 Installing and maintaining firmware - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 235
license. Before you configure zones, you must install Brocade Advanced Zoning licenses on all Fabric OS 6.0.x or earlier switches in the fabric. If a Zoning license is removed, you must make sure it is re-installed properly on the affected switch before enabling the zoning configuration. Failure to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 236
WWN. Other LUNs on the storage port are not made available to the server. Host-based zoning can implement WWN or LUN masking. Fabric switches implement fabric-based zoning, in which the zone members are identified by WWN or port location in the fabric. Fabric-based zoning is also called name server - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 237
controlled environment, such as when host-based zoning or LUN masking is deployed. Zone objects A zone object is any device in a zone, such as a: • Physical port number or port index on the switch • Node World Wide Name (N-WWN) • Port World Wide Name (P-WWN) Fabric OS 6.2 administrator guide 235 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 238
named PROD_fabricname, where fabricname is the name that the fabric has been assigned. The purpose of the PROD configuration is to easily identify the configuration that can be implemented and provide the most generic services. If other configurations are used for specialized purposes, names such as - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 239
. On power-up, the switch automatically reloads the saved configuration. If a configuration was active when it was saved, the same configuration is reinstated on the local switch. Zoning enforcement Zoning enables you to restrict access to devices in a fabric. Zoning enforcement describes a set of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 240
mismatch. When hardware-enforced zoning is active, the Fabric OS switch monitors the communications and blocks any frames that do not comply with the effective zone configuration. The switch performs this blocking at the transmit side of the port on which the destination device is located. Hardware - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 241
24 SAN Switches, Brocade 4Gb SAN Switch for HP p-Class BladeSystem, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, HP StorageWorks SAN Switch 4/32, HP StorageWorks 4/64 SAN Switch, HP StorageWorks SAN Switch 4/32B, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 242
same zone. Fabric OS 2-Gb/s switches always deploy the hardware assist, in any zone configuration (see Figure 29 port and WWN zones) Port_Zone1 Port_Zone2 WWN_Zone1 Core Switch WWN_Zone2 Zone Boundaries Figure 30 Session-based hard zoning 22.5b(13.5) In Figure 30, only the overlapping ports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 243
and administered from any switch in the fabric, although HP recommends that you use a switch running the latest Fabric OS version. If the switch is running Fabric OS 6.0.x or earlier, it must have an Advanced Zoning license enabled. The zone configuration is managed on a fabric basis. When a change - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 244
can set up and manage broadcast zones using the standard zoning commands, which are described in "Zone creation and maintenance" on page 246. Supported switches for broadcast zones Broadcast zoning is enforced only for Fabric OS 5.3.x or later switches. If a fabric contains switches running Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 245
you must rename any existing zones named broadcast before you upgrade. The firmware download fails if a pre-5.3.x switch has a zone with the name of broadcast in the effective configuration. When downgrading to a firmware version earlier than Fabric OS 5.3.0, you must remove or disable the broadcast - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 246
are connected to a pre-5.3.0 switch. HP recommends that you validate the zone whenever zone configurations are changed or any devices are moved in a fabric. See "Validating a zone" on page 249 for complete instructions. Broadcast zones and default zoning The default zoning mode defines the device - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 247
until it is re-enabled. Do you want to save Defined zoning configuration only? (yes, y, no, n): [no] y The cfgSave command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory. If a transaction is open on a different switch in the fabric when this command is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 248
until it is re-enabled. Do you want to save Defined zoning configuration only? (yes, y, no, n): [no] y The cfgSave command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory. If a transaction is open on a different switch in the fabric when this command is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 249
, the entire zone database (both the defined and effective configuration) is displayed. Zone creation and maintenance Reliable Commit Service (RCS) is a fabric-wide capability and is supported only if all switches in the fabric are running Fabric OS versions 4.1 and later. You should use RCS to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 250
until it is re-enabled. Do you want to save Defined zoning configuration only? (yes, y, no, n): [no] y The cfgSave command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory. If a transaction is open on a different switch in the fabric when this command is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 251
until it is re-enabled. Do you want to save Defined zoning configuration only? (yes, y, no, n): [no] y The cfgSave command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory. If a transaction is open on a different switch in the fabric when this command is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 252
default value is 0. The following example shows all zones beginning with A, B, or C: switch configuration. switch:admin> sw5:root> zone --validate -m 1 Defined configuration: configuration * - Member does not exist The mode flag -m can be used to specify the zone database location. Supported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 253
. You cannot change the default zoning mode to All Access if user-specified Admin Domains are present in the fabric. Setting the default zoning mode 1. Connect to the switch and log in as admin. 2. Enter the cfgActvShow command to view the current zone configuration. 3. Enter the defZone command - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 254
, thereby preventing the new switch from joining the fabric. NOTE: Fabric OS 5.2.0 and later support a zoning database size of 1 MB. To support a 1 MB zoning database, the entire fabric must be upgraded to 5.2.0 or later. If any pre-5.2.0 switches are part of the fabric, the maximum zone database - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 255
Fabric OS 3.1 Fabric OS 3.2 Fabric OS 4.0/ 4.1/4.2 Fabric OS 4.4.0 Fabric OS 3.1 Fabric OS 3.2 Fabric OS 4.0/ 4.1/4.2 Fabric OS 4.4.0 Fabric OS 5.0.0/ 5.0.1 Fabric Fabric OS 3.1 Fabric OS 3.2 Fabric OS 4.0/ 4.1/ 4.2 Fabric OS 4.4.0 Fabric OS 3.1 Fabric OS 3.2 Fabric OS 4.0/4.1/4.2 Fabric OS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 256
item name depends on the specifics of the fabric, but cannot exceed 64 bytes for each item. When enabling a new zone configuration, you must ensure that the size of the configuration does not exceed the minimum size supported by all switches in the fabric. This is particularly important if and when - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 257
size for each version of the Fabric OS, see "Zoning database size and zone merging" on page 251. If you create or make changes to a zone configuration, you must enable the configuration for the changes to take effect. Creating a zoning configuration 1. Connect to the switch and log in as admin - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 258
a transaction is open on a different switch in the fabric when this command is run, the transaction on the other switch is automatically aborted. A message is displayed on the other switches to indicate that the transaction was aborted. Enabling a zone configuration The following procedure ends and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 259
zone configuration. See "Default zoning mode" on page 250 for information about setting this mode to No Access. The following procedure ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory. If a transaction is open on a different switch in the fabric when - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 260
contents of the current transaction), or specify 1 to display the contents of the nonvolatile memory. The default value is 0. For example, to display all zone configurations that start with "Test": switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Purple_zone; Blue_zone Viewing the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 261
, specifying the zone objects you want to copy, along with the new object name. Note that zone configuration names are case-sensitive; blank spaces are ignored and the command works in any Admin Domain other than AD255. switch:admin> zone --copy Test1 US_Test1 Fabric OS 6.2 administrator guide 259 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 262
log in as admin. 2. Enter the cfgShow command to view the zone configuration objects you want to delete. switch:admin> cfgShow Defined configuration: cfg: USA_cfg Purple_zone; White_zone; Blue_zone zone: Blue_zone 1,1; array1; 1,2; array2 zone: Purple_zone 1,0; loop1 zone: White_zone 1,3; 1,4 alias - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 263
258 for instructions. Adding a new fabric that has no zone configuration information to an existing fabric is very similar to adding a new switch. All switches in the new fabric inherit the zoning configuration data. If a zone configuration is in effect, the same configuration becomes the enabled - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 264
Secure Fabric OS enabled. If Brocade Secure Fabric OS is enabled on one switch, it must be enabled on all switches in the fabric; however, Brocade Secure Fabric OS is not supported in Fabric OS 6.0.0 or later. • Default Zone: The switch being merged into the existing fabric should be configured with - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 265
occur. Brocade Advanced Zoning is configured on the primary Fabric Configuration Server (FCS). The primary FCS switch makes zoning HP StorageWorks Fabric OS 6.2.x administrator guide for information about security policies). You must perform zone management operations from the primary FCS switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 266
, because the configuration is not enabled. Configuration from Switch A will propagate throughout the fabric. The configuration is enabled after the merge in the fabric. No change (clean merge). No change (clean merge). Switch A will absorb the configuration from the fabric. Switch A will absorb - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 267
configuration is noaccess in the fabric. Clean merge: effective zone configuration from Switch B propagates to fabric. Fabric segments because Switch A has a hidden zone configuration (no access) activated and Switch B has an explicit zone configuration activated. Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 268
266 Administering advanced zoning - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 269
48-port blades), the area IDs no longer match the port numbers. Table 67 lists the port numbering schemes for the HP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch enterprise-class platforms. Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 270
ports. • HP StorageWorkds 4/256 SAN Director 48 Port 4Gb blade • HP StorageWorks SAN Director 48 Port 8Gb FC blade Ports are numbered from 0 through 23 from bottom to top on the left set of ports and 24 through 47 from bottom to top on the right set of ports. • HP StorageWorks SAN Director 6 Port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 271
depends upon the PID format used in the fabric. When Core PID format is in effect, the area ID for port 0 is 0, for port 1 is 1, and so forth. For 32-port blades (HP StorageWorks 4/256 SAN Director 16 Port 4Gb blade, HP StorageWorks SAN Director 32 Port 8Gb FC blade), the numbering is contiguous up - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 272
Table 68 Default index/area_ID core PID assignment with no port swap (continued) Port Slot on 1Idx/are blade a Slot 2Idx/are 109/109 108/108 107/107 106/106 9 9/9 8 8/8 25/25 24/24 41/41 40/40 57/57 56/56 73/73 72/72 89/89 88/88 105/105 120 270 Configuring Enterprise-class platforms - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 273
and index. Table 69 Default index/area_ID core PID assignment with no port swap for the HP StorageWorks DC04 SAN Director Switch Port on blade Slot Slot 234/234 41 41/41 105/105 169/169 233/233 40 40/40 104/104 168/168 232/232 39 39/39 103/103 Fabric OS 6.2 administrator guide 271 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 274
Table 69 Default index/area_ID core PID assignment with no port swap for the HP StorageWorks DC04 SAN Director Switch (continued) Port on blade Slot Slot Slot Slot 1Idx/area 2Idx/area 7Idx/area 8Idx/area 27 27/27 91/91 155/155 219/219 26 26/ - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 275
to affect how many slots can be powered up. Powering off a port blade NOTE: In the HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch the core blades and CPs cannot be powered off from the CLI interface. You must manually power off the blades by unseating the blade - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 276
enabled. If a previously-configured B-Series Multi-Protocol Router Blade is removed and one of the following blades is plugged in: • HP StorageWorks 4/256 SAN Director 48 Port 4Gb Blade • HP StorageWorks 4/256 SAN Director 16 Port 4Gb Blade • HP StorageWorks 4/256 SAN Director 32 Port 4Gb Blade • HP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 277
type blades support EX_Ports, they are still retained in the configuration, but they are persistently disabled. HP StorageWorks 4/256 SAN Director 48 Port 4Gb Blade and HP StorageWorks SAN Director 48 Port 8Gb FC Blade enabling exceptions The HP StorageWorkds 4/256 SAN Director 48 Port 4Gb Blade - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 278
-port HP StorageWorks Platform Port Blade supporting 1, 2, 4, and 8 Gb/s port speeds. A 32-port HP StorageWorks Platform Port Blade supporting 1, 2, 4, and 8 Gb/s port speeds. This port blade is compatible only with the HP StorageWorks DC SAN Backbone Director CP Blades. 276 Configuring Enterprise - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 279
HP StorageWorks DC04 SAN Director Switch, the blade becomes faulty. You can correct this by upgrading the firmware on the CP blade in an HP StorageWorks DC SAN Backbone Director or HP StorageWorks DC04 SAN Director Switch chassis using the firmwareDownload command. Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 280
8, "Installing and maintaining firmware" on page 213. Core blades The HP StorageWorks DC SAN Backbone Director supports two CORE8 core blades. This blade is used for intra-chassis switching as well as ICL connectivity to another HP StorageWorks DC SAN Backbone Director chassis. The HP StorageWorks - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 281
Port blades HP StorageWorks 4/256 SAN Director (CP4) HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch B-Series Multi-Protocol Supported Router Blade Supported FS8-18 Supported Supported 1. Can coexist only with HP StorageWorks 4/256 SAN Director 16 Port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 282
to the same two HP StorageWorks DC SAN Backbone Directors or HP StorageWorks DC04 SAN Director Switch chassis. The HP StorageWorks DC04 SAN Director Switch has 2 ICL connector ports at ICL0 and ICL1, each aggregating a set of 8 ports. Thus, each core blade provides 16 ICL ports and there are 32 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 283
is blinking yellow. For additional information about the LED status for blades and ports, see the relevant hardware document. When you connect two HP StorageWorks Backbones, the following features are supported: • 8 Gb/s speed • Trunking • Credit sharing • QoS Fabric OS 6.2 administrator guide 281 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 284
282 Configuring Enterprise-class platforms - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 285
. Once established, FSPF programs the hardware routing tables for all active ports on the switch. FSPF is not involved in frame switching. FSPF uses several frames to perform its functions. Since it may run before fabric routing is set up, FSPF does not use the routing tables to propagate the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 286
port-pased routing or exchange-based routing policies on the following switches: • HP StorageWorks 4/8 and 4/16 SAN Switches • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch 4/32B • HP StorageWorks 8/40 SAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 287
mode, the backbone traffic is load-balanced based on SID, DID, and OXID. Whatever routing policy a switch is using applies to the VE_Ports as well. See Chapter 21, "Configuring and monitoring FCIP extension services" on page 457 for details about VE_Ports. Fabric OS 6.2 administrator guide 285 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 288
, whether it is exchange-based, device-based, or port-based, is configured on a per Logical Switch basis. IOD and DLS settings are set per Logical Switch as well. IOD and DLS settings for the base switch affect all traffic going over the base fabric including any Logical Fabric traffic that uses the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 289
16 SAN Switches • HP StorageWorks SAN Switch 4/32 • HP StorageWorks SAN Switch 4/32B. Static routes are not supported on the following: • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks 4/64 SAN Switch • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 290
If even one switch in the fabric delivers out-of-order exchanges, exchanges are delivered to the target out-of-order, regardless of the policy configured on other switches in the fabric. IMPORTANT: Some devices do not tolerate out-of-order exchanges; in such cases, use the port-based routing policy - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 291
but some do not. Use of out-of-order frame-based delivery can minimize the number of frames dropped, while enabling in-order delivery (IOD) guarantees that frames are either delivered in order or dropped. All HP B-series switches enable IOD by default to ensure frames are delivered in order, as not - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 292
290 Routing traffic - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 293
on HP supported interop configurations, see the HP StorageWorks Fabric interoperability application notes for merging B-Series fabrics with fabrics based on C-Series and M-Series Fibre Channel switches on the following HP website: http://h18000.www1.hp.com/products/storageworks/san/documentation - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 294
292 Interoperability for merged SANs - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 295
and is committed to the configuration database of each affected switch. MS activation is persistent across power cycles and reboots. Before issuing the msplMgmtActivate command, run the msCapabilityShow command to verify that all switches in the fabric support the MS platform service; otherwise, the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 296
switch:admin> msplmgmtdeactivate MS Platform Service is currently enabled. This will erase MS Platform Service configuration information as well as database in the entire fabric is empty (the default), the management server is accessible to all systems connected in-band to the fabric. For more access - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 297
2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 0 done ... switch:admin> Adding a member to the ACL 1. Connect to the switch and log in end the session. 7. At the Update the FLASH? prompt, enter y. Fabric OS 6.2 administrator guide 295 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 298
switch:admin> msconfigure 0 Done 1 Display the access list 2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 2 Port :65:ce:44 10:00:00:60:69:04:11:24 10:00:00:60:69:04:11:23 21:00: y. 296 Configuring the Distributed Management Server - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 299
3 Delete member based on its Port/Node WWN select : (0..3) [3] 1 MS Access list is empty Viewing the contents of the management server database 1. Connect to the switch and log in using an account assigned to the admin role. 2. Enter the msPlatShow command. Fabric OS 6.2 administrator guide 297 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 300
to enable MS Topology Discovery Service in progress.... *MS Topology Discovery enabled locally. switch:admin> mstdenable ALL Request to enable MS Topology Discovery Service in progress.... *MS Topology Discovery enabled locally. *MS Topology Discovery Enable Operation Complete!! 298 Configuring the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 301
. switch:admin> mstddisable all This may erase all NID entries. Are you sure? (yes, y, no, n): [no] y Request to disable MS Topology Discovery Service in progress.... *MS Topology Discovery disabled locally. *MS Topology Discovery Disable Operation Complete!! Fabric OS 6.2 administrator guide 299 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 302
300 Configuring the Distributed Management Server - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 303
overview This chapter describes the HP StorageWorks B-Series iSCSI Director Blade gateway service. The iSCSI gateway service is supported only on the HP StorageWorks 4/256 SAN Director running Fabric OS 5.2.0 or later with one or more iSCSI-enabled HP StorageWorks B-Series iSCSI Director Blade. The - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 304
iSCSI Qualified Names (IQNs) for each target. It presents an iSCSI VT for each native FC target to the IP network and an iSCSI VI for each iSCSI port to the FC fabric. The following figure shows a basic LUN mapping scenario for an FC target with four LUNs. iS C S I virtual target (V T ) F C target - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 305
21 22 23 24 25 Figure default prefix is iqn.2002-12.com.brocade. The Brocade iSCSI gateway service supports SAN must have a unique IQN. A Brocade-created IQN includes 2002-12.com.brocade and the device WWN as shown in the following example: Type Date Auth User defined iqn.2002-12.com.brocade - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 306
the fabric-wide iSCSI VT access. Only the DDs in the active DDSet are enforced. You can create multiple discovery domain sets but only one set can be active at a time. It is also possible to present a single iSCSI portal IP address to the iSCSI initiator when the default iSCSI port configuration is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 307
1 IP network VT 2 iS C S I initiator B DD2 VT 3 iS C S I gateway s ervic e Figure 38 Discovery domain set configuration example Switch-to-iSCSI initiator authentication iSCSI sessions are authenticated using CHAP (Challenge Handshake Authentication Protocol). The iSCSI gateway service supports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 308
HBAs • Alacritech SES2002XT • Qlogic 4050c Checklist for configuring iSCSI After you install the HP StorageWorks B-Series iSCSI Director Blade in the HP StorageWorks 4/256 SAN Director (see the Brocade FC4-16IP Hardware Reference Manual), you configure the iSCSI gateway 306 iSCSI gateway service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 309
1 Activate iSCSI for the HP fosConfig - -enable iscsi StorageWorks B-Series iSCSI Director Blade. "Enabling the iSCSI gateway service" on page 309 2 Configure the IP address portCfg ipif /ge for GbE ports. create "Configuring the GbE interface" on - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 310
the Brocade FC4-16IP Hardware Reference Manual before performing these procedures. NOTE: Only the HP StorageWorks 4/256 SAN Director with an iSCSI-enabled HP StorageWorks B-Series iSCSI Director Blade running Fabric OS 5.2.0 or later supports the iSCSI gateway service. NOTE: You can also configure - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 311
how to enable the iSCSI gateway service on the HP StorageWorks 4/256 SAN Director. 1. Connect and log in to the switch. 2. Enter the fosConfig --show command to show the current Fabric OS configuration. switch:admin> fosconfig --show FC Routing service:disabled iSCSI service:disabled iSNS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 312
iSNS Client service:disabled Enabling GbE ports By default, GbE ports are enabled on an HP StorageWorks B-Series iSCSI Director Blade installed in the HP StorageWorks 4/256 SAN Director. However, if you insert the HP StorageWorks B-Series iSCSI Director Blade into a slot that was previously occupied - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 313
Arp configuration: IP Address Mac Address Iproute Configuration: IP Address Mask Gateway Metric switch:admin> Configuring the GbE interface NOTE: You can set the TCP/IP parameters of a GbE port even when iSCSI gateway service is disabled. Address resolution protocol (ARP) entries - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 314
. 3. Enter y or yes to continue. IQNs are created. The default value of iqn.2002-12.com.brocade, is used for the prefix unless it has been changed by using the iscsiSwCfg - -modifygw -t command. The port WWN is used as the user-defined portion of the IQN. The following is an example: 312 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 315
Operation 20 2f:7f:00:06:2b:0d:10:ba iqn.2002-12.com.brocade:2f:7f:00:06:2b:0d:10:ba Succeeded Operation 21 2f:9f:00:06:2b:0d:10:ba iqn.2002-12.com.brocade:2f:9f:00:06:2b:0d:10:ba Succeeded Operation Fabric OS 6.2 administrator guide 313 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 316
:ba Succeeded Operation Operation 24 2f:ff:00:06:2b:0d:12:9a iqn.2002-12.com.brocade:2f:ff:00:06:2b:0d:12:9a Succeeded Operation 4. Enter the iscsiCfg --show tgt command to display the status of the created iSCSI VTs. The following is an example: switch:admin> iscsicfg --show tgt - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 317
that contains only the storage attached to the specified WWN. The default value of iqn.2002-12.com.brocade, is used for the fixed prefix, and the port WWN is used as the user-defined portion of the IQN. The following is an example. switch:admin> iscsicfg --easycreate tgt -w 21:00:00:04:cf:e7 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 318
brocade.example:disk001 State/Status: Offline/Defined Auth. Method: None 4. Enter the fcLunQuery command to display a list of connected FC targets and show the LUN configurations. The following is an example. switch 04:cf:e7:73:7e Target Port WWN: 21:00:00:04:cf 2b:0d:12:99 Target Port WWN: 2f:ff:00: - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 319
a pair: LUNs:physical LUNs The following example maps two LUNs attached to port 2f:ff:00:06:2b:0d:12:99 to an iSCSI VT named iqn.2002-12.com.brocade:example-disk001. switch:admin> iscsicfg --add lun -t iqn.2002-12.com.brocade:example-disk001 \ -w 2f:ff:00:06:2b:0d:12:99 -l 1-2:0-1 The - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 320
data base. The following is an example. switch:admin>iscsicfg --delete lun -t iqn.2005-10.com.brocade:tgt1 -l 2-4,5 The operation completed successfully 3. Enter the iscsiCfg --commit all command to commit the changes to the database. If the LUN deletion is one of several configuration changes - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 321
domains and discovery domain sets configured in Fabric OS are not supported if the iSNS service is enabled on the fabric. You can create four discovery domain sets (DDSets), but only one set can be enforced at a time. Discovery domain sets allow you to enable and disable fabric-wide iSCSI VT access - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 322
the -n option to enable the DDSet: switch:admin> iscsicfg --enable ddset -n ddset-engineering This will enable the DDSet specified. Continue (yes, y, no, n) [n]: y The operation completed successfully. iSCSI initiator-to-VT authentication configuration Fabric OS 5.2.0 or later supports both one-way - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 323
options to delete a user name: switch:admin> iscsicfg --deleteusername tgt -t iqn.2002-10.com.brocade:tgt -u isisctgt1 This operation completed successfully Displaying CHAP configurations You can display a list of the user names that have been set up on the fabric for iSCSI initiator authentication - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 324
state for fabric: Out of Sync 3. On each switch, enter the iscsiCfg --show ddset command to find the switch that has the database you want to use: switch:admin> iscsicfg --show ddset Number of records found: 1 Name: ddset-engineering State/Status: Enabled/Committed 322 iSCSI gateway service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 325
-s The following WWNs will be used for any lun query from this switch: Node WWN: 10:00:00:60:69:80:04:4a Port WWN: 21:fd:00:60:69:80:04:4a iSCSI FC zoning overview After you have finished setting up the iSCSI target gateway, you can create an iSCSI FC zone for - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 326
OS Command Reference. For more information on configuring a zone, see "Creating and Maintaining Zones" in the HP StorageWorks Fabric OS 6.2.x administrator guide. IMPORTANT: If you decide to start zoning the devices, you must create zones for all the devices in the SAN or you will not be able to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 327
provide during the zone creation process. IMPORTANT: You must install Brocade Advanced Zoning licenses on all the switches in the fabric before attempting to configure zones. The HP StorageWorks 4/256 SAN Director must have the zoning license installed. Creating an iSCSI FC zone 1. Log in to the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 328
: FCP PortSymb: [23] "iSCSI Virtual Initiator" NodeSymb: [51] "IPAddr: 30.0.127.30 Slot/Port: 3/ge0 Logical pn: 40" Fabric Port Name: 00:00:00:00:00:00:00:00 Permanent Port Name: 50:06:06:9e:00:15:63:00 Port Index: 40 Share Area: No Device Shared in Other AD: No N 012900; 3;50:06:06:9e - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 329
:38 Port Index: 47 Share Area: No Device Shared in Other AD: No The Local Name Server has 11 entries } 5. Write down or copy and paste the WWN information, which you will use for the aliCreate command. To display the FC target WWNs for switches other than the HP StorageWorks 4/256 SAN Director - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 330
about creating and modifying zoning configurations, see "About Zones" in the HP StorageWorks Fabric OS 6.2.x administrator guide and the zoneCreate command in the Fabric OS Command Reference. Creating and enabling a zoning configuration 1. Connect and log in to the switch as admin. 2. Enter the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 331
current Fabric OS configuration. switch:admin> fosconfig --show FC Routing service:disabled iSCSI service:enabled iSNS Client service:disabled Enabling the iSNS client service This section explains how to enable the iSNS client service and configure the iSNS server IP address. Fabric OS supports one - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 332
to verify that the service is enabled: switch:admin> fosconfig --show FC Routing service:disabled iSCSI service:enabled iSNS Client service:enabled 4. Set the IP address of the iSNS server. You can use either the IP address of the GbE port that attaches the HP StorageWorks B-Series iSCSI Director - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 333
service:disabled Clearing the iSNS client configuration The iSNS client configuration can be cleared with a single command. 1. Connect and log in to the switch. 2. Enter the isnscCfg --clear command to clear the iSNS configuration: switch:admin> isnsccfg --clear Cleared iSNS server IP address Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 334
332 iSCSI gateway service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 335
enabled for every port for the following: • HP StorageWorks 4/8 and 4/16 SAN Switches • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch 4/32B • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 336
configure command with either of the following parameters: • switch.login.perPortMax Use this parameter to set the number of virtual N_Port_IDs per port to a value between 0 and 255. The default setting is 126. For the HP StorageWorks 4/256 SAN Director with an HP StorageWorks SAN Director 48 Port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 337
: switch: admin> switchshow switchName:swd77 switchType:32.0 switchState: Online switchMode:Native switchRole:Principal switchDomain: 99 switchId:fffc63 switchWwn:10:00:00:05:1e:35:37:40 zoning: OFF switchBeacon:OFF Area Port Media Speed State Fabric OS 6.2 administrator guide 335 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 338
port WWNs that are listed under portWwn of device(s) connected. The following is sample output for the portShow command: switch: 1Online portPhys: 6In_Sync portScn: 32F_Port port generation number: 148 portId: 630200 portIfId: 43020005 portWwn: 20:02:00:05:1e:35:37:40 portWwn of device(s) connected: - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 339
101 2048 c ... ... ff 630202 c0:50:76:ff:fb:00:17:70 192 2048 c ff 630201 c0:50:76:ff:fb:00:16:80 192 2048 c scr=3 scr=3 scr=3 d_id=FFFFFC d_id=FFFFFC Fabric OS 6.2 administrator guide 337 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 340
338 Administering NPIV - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 341
information about the top n bandwidth-consuming flows from a set of a large number of flows passing through a specific port in the network. You can use Top Talkers to identify the SID/DID pairs that consume the most bandwidth and can then configure them with certain QoS attributes so they get proper - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 342
is routed to the devices through N_Ports 5 and 6. Traffic coming from other ports in Domain 1 would not use E_Port 1, but would use E_Port 2 instead. zones. See the Fabric OS Command Reference for details about the zone command. TI zone failover A TI zone can have failover enabled or disabled: • - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 343
if the dedicated path is broken. • HP recommends that the insistent Domain ID feature be enabled; if a switch changes its active domain ID, the route is broken. See the configure command in the Fabric OS Command Reference for information about setting insistent Domain ID. FSPF routing rules and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 344
phantom switches, and the FC-FC Routing Service. Some VE_Port-based features, such as tape pipelining, require the request and corresponding response traffic to traverse the same VE_Port tunnel across the metaSAN. To ensure that the request and response traverse the same VE_Port tunnel, you must set - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 345
zone in edge fabric 2 = Dedicated path set up by TI zone in backbone fabric Figure 46 Traffic isolation Routing over FCR In addition to setting up TI zones, you must also ensure that the devices are in an LSAN zone so that they can communicate with each other. If failover is enabled and the TI - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 346
Ports in the TI zone Figure 47 TI zone in an edge fabric Xlate Domain 4 Proxy Target In the TI zone, when you designate E_Ports between the front and xlate phantom switches E_Port for the xlate phantom domain) Note that in this configuration the traffic between the front and xlate domains can go - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 347
00:03:00:00(Port WWN for target 2) Limitations of TI zones over FC routers Be aware of the following when configuring TI zones over FC routers: • A TI zone defined within the backbone fabric does not guarantee that edge fabric traffic will arrive at a particular EX_Port. You must set up a TI zone in - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 348
configured in Brocade Native Mode (interopmode 0)): • HP StorageWorks 4/8 and 4/16 SAN Switches • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch 4/32B • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 349
6.0.0 or later. For TI over FCR zones, ports must belong to switches that run Fabric OS 6.1.0 or later. • Traffic Isolation Routing has limited support for FICON FCIP in McDATA Fabric Mode (interopmode 2), in the following configuration only: • HP StorageWorks 400 Multi-Protocol Router with E_Port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 350
two TI zones: one in the Logical Fabric and one in the base fabric. The combination of TI zones in the base fabric and Logical Fabric sets the path through the base fabric for Logical Switches. The TI zone in the Logical Fabric includes the extended XISL (XISL) port numbers, as well as the F_Ports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 351
Fabrics This section describes how you can set up TI zones over FC routers in Logical Fabrics. Figure 53 shows two physical chassis configured into Logical Switches. The initiator in FID1 communicates with the target in FID3 over the EX_Ports in the base switches. Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 352
11 E 12 E 15 E 16 E 13 EX Base switch Domain 2 14 EX = Dedicated Path = Ports in the TI zones Figure 53 Example configuration for TI zones over FC routers in Logical Fabrics Figure 54 shows a logical representation of the configuration in Figure 53. This SAN is similar to that shown in Figure - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 353
failover enabled (the zone is set to the activated state by default): switch:admin> zone --create -t ti -o f bluezone -p "1,1; 2,4; 1,8; 2,6" To create a TI zone with failover disabled and the state set to activated: switch:admin> zone --create -t ti -o an bluezone -p "1,1; 2,4; 1,8; 2,6" Fabric OS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 354
in localized disruption to traffic on ports associated with the traffic isolation zone changes Do you want to enable 'USA_cfg' configuration (yes, y, no, n): [no] y zone config "USA_cfg" is in effect Updating flash ... Creating a TI zone in a base fabric 1. Connect to the switch and log in as admin - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 355
to reactivate your current effective configuration and enforce the TI zones. cfgenable "current_effective_configuration" Examples of modifying a TI zone To add port members to the existing TI zone bluezone: switch:admin> zone --add bluezone -p "3,4; 3,6" Fabric OS 6.2 administrator guide 353 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 356
TI zone in a backbone fabric: switch:admin> zone --add backbonezone -p "3,4; 3,6; 10:00:00:04:1f:03:16:f2;" To disable failover on the existing TI zone bluezone: switch:admin> zone --add -o n bluezone To enable failover and add ports to TI zone greenzone: switch:admin> zone --add -o f greenzone - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 357
information about the TI zone purplezone: switch:admin> zone --show purplezone Defined TI zone configuration: TI Zone Name: redzone: Port List: 1,2; 1,3; 3,3; 4,5 Configured Status: Activated / Failover-Enabled Enabled Status: Activated / Failover-Enabled Fabric OS 6.2 administrator guide 355 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 358
: Port List: 1,2; 1,3; 3,3; 4,5; Configured Status: Activated / Failover-Enabled Enabled Status: Deactivated / Failover-Enabled TI Zone Name: bluezone: Port List: 9,2; 9,3; 8,3; 8,5; Configured Status: Deactivated / Failover-Disabled Enabled Status: Activated / Failover-Enabled Setting up - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 359
isolation zones, the update may result in localized disruption to traffic on ports associated with the traffic isolation zone changes Do you want to enable 'cfg_TI' configuration (yes, y, no, n): [no] y zone config "cfg_TI" is in effect Updating flash ... Fabric OS 6.2 administrator guide 357 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 360
:40:f0:7d 10.32.72.9 0.0.0.0 >"E2switch" The Fabric has 3 switches b. Enter the following commands to create and display a TI zone: E2switch:admin> zone --create -t ti TI_Zone1 -p "9,2; 9,3; 9,6; 1,-1; 4,-1" E2switch:admin> zone --show Defined TI zone configuration: TI Zone Name: TI_Zone1 Port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 361
a particular device to the switch port. Use ingress rate limiting for the following situations: • To reduce existing congestion in the network or proactively avoid congestion. • To enable you to offer flexible bandwidth limit services based on requirements. • To enable more important devices to use - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 362
HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks DC SAN Backbone Director • HP StorageWorks DC04 SAN Director Switch. Virtual Fabrics considerations: If Virtual Fabrics is enabled, the rate limit configuration on a port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 363
switch and log in as admin. 2. Enter the portCfgQos --resetratelimit command. portcfgqos --resetratelimit slot/port where: slot/port The slot and port port installed on every switch that is in the path between a given configured supported. user-defined portion of the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 364
host and target pairs. Path selection between the host,target pairs is governed by FSPF rules and is not affected by QoS priorities. By default, QoS is enabled on E_Ports in port configuration. For example, in Figure 57, QoS should be enabled on the encircled E_Ports. 362 Optimizing fabric behavior - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 365
traffic going across ISLs and through the base fabric XISLs. For example, Figure 58 shows a Logical Fabric that includes H1 and S1. To set the traffic between H1 and S1 to high priority, create a QoS zone in the Logical Fabric with H1 and S1 as members. Then enable QoS on all of the E_Ports shown - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 366
a firmware version earlier than Fabric OS 6.0.0, the frames are dropped. • By default, all devices are assigned medium priority. • To be assigned high or low priority, hosts and targets must be connected to one of the following: • HP StorageWorks 8/8 or 8/24 SAN Switches • HP StorageWorks 8/40 SAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 367
example, if an effective zone configuration has QOSH_z1 (H,T) and QOSL_z2 (H,T), HP StorageWorks Fabric OS Encryption switch user's guide supporting Fabric OS 6.2 • for information about redirection zones. • If QoS is enabled, an additional 16 buffer credits are allocated per port for 8-Gb/s ports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 368
Director platforms. NOTE: For the HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch, QoS is enabled by default on all ports. If you use the portCfgQos - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 369
32 Port 8Gb FC blade, HP StorageWorks SAN Director 48 Port 8Gb FC blade, or B-Series Multi-Protocol Router Blade) • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks 400 Multi-Protocol Router • HP StorageWorks 4/256 SAN Director, using chassis configuration option - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 370
DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch (8-Gb/s port blades) • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch You do not need a license for EX_Ports on the HP StorageWorks 400 Multi-Protocol Router or B-Series Multi-Protocol Router Blade. Enabling the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 371
59 shows a metaSAN consisting of three edge fabrics connected through an HP StorageWorks DC SAN Backbone Director with interfabric links. Host Target Target Edge fabric 1 E_Port Edge fabric 2 E_Port Edge fabric 3 E_Port Fibre Channel switch IFL IFL EX_Ports FC router Long distance IFL - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 372
fabric, a RASLog message displays a warning about FID overlap. NOTE: Backbone fabrics that share connections to the same edge fabrics must have unique backbone FIDs. • MetaSAN A metaSAN is the collection of all SANs interconnected with Fibre Channel routers. 370 Using the FC-FC routing service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 373
. The target responds by sending frames to the proxy host. Hosts and targets are exported from the edge SAN to which they are attached and, correspondingly, imported into the edge SAN reached through Fibre Channel routing. Figure 62 illustrates this concept. Fabric OS 6.2 administrator guide 371 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 374
. Devices are exported from the backbone fabric to one or more edge fabrics using LSANs. See "LSAN zone configuration" on page 386 for more information. NOTE: Management Server Platform services and interopmode are not supported in the backbone fabric. Phantom domains A phantom domain is a domain - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 375
1 and Xlate domain 2 represent Fabrics 2 and 3, respectively. No xlate domain is created for Fabric 4 because there are no LSAN devices in Fabric 4. • Target 1', Target 2', and Target 3' are proxy devices for Target 1, Target 2, and Target 3, respectively. Fabric OS 6.2 administrator guide 373 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 376
ports be identified by a unique PID. In a single fabric, FC protocol guarantees that domain IDs (DIDs) are unique, and so a PID formed by a domain ID and area ID is unique within a fabric. However, the domain IDs and PIDs in one fabric may be duplicated within another fabric, just as IP addresses - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 377
Fibre Channel SANs over IP-based networks. (See "FCIP tunnel configuration" on page 378.) • Configure IFLs for edge and backbone fabric connection. (See "Interfabric link configuration" on page 378.) • Modify port cost for EX_Ports, if you want to change from the default settings. (See "FC - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 378
All Supported Options Option 5: One 384-port switch Blade ID's 17, 18, 24, 31, 36, 39, 37, 51, 55 in slots 1-4, 7-10 Blade ID 16 in slots 5-6 4. If you are configuring EX_Ports on the 8-Gb/s port blades on the HP StorageWorks DC SAN Backbone Director or HP StorageWorks DC04 SAN Director Switch (HP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 379
backbone fabric. switch:admin_06> msplatshow *MS Platform Management Service is NOT enabled. If the MS platform database is enabled, is in strict mode, ACL cannot support Fibre Channel routing in the fabric. switch:admin> fddcfg --showall Local Switch Configuration for all Databases:DATABASE - Accept - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 380
FID: (1-128)[1] switch:admin> fosconfig --enable fcr FC Router service is enabled switch:admin> switchenable FCIP tunnel configuration The optional Fibre Channel over IP (FCIP) Tunneling Service enables you to use "tunnels" to connect instances of Fibre Channel SANs over IP-based networks to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 381
(or VEX_Port) and assigns a FID of 30 to port 7. switch:admin> portcfgexport 7/10 -a 1 -f 30 switch:admin> portcfgexport 7/10 Port 7/10 info Admin: enabled State: NOT OK Pid format: Not Applicable Operate mode: Brocade Native Edge Fabric ID: 30 Preferred Domain ID: 160 Front WWN: 50 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 382
and for information on trunking setup, see "Configuring EX_Port frame trunking" on page 385. 4. Enter the portEnable command to enable the ports that you disabled in step 1. You can now physically attach ISLs from the Fibre Channel Router to the edge fabric. switch:admin> portenable 7/10 5. Enter - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 383
Port 7/10 info Admin: enabled State: NOT OK Pid format: Not Applicable Operate mode: Brocade Native Edge Fabric ID: 30 Preferred Domain ID: 160 Front WWN: 50:06:06:9e:20:38:6e:1e Fabric Parameters: Auto Negotiate R_A_TOV: Not Applicable E_D_TOV: Not Applicable Authentication Type - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 384
0 Port part of other ADs: No 8. Enter the switchShow command to verify that the EX_Port (or VEX_Port), edge FID, and name of the edge fabric switch (containing fcr_Brocade 7500" EX_Port FID Neighbor Switch Info (WWN, enet IP, name 4 95 10:00:00:05:1e:37:00:45 10.32.156.31 "Brocade 7500" 5 95 10: - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 385
as follows: • 0-7 and FCIP Tunnel 16-23 • 8-15 and FCIP Tunnel 24-31 More than two router port sets can exist in an HP StorageWorks 4/256 SAN Director, HP StorageWorks DC SAN Backbone Director, or HP StorageWorks DC04 SAN Director Switch with two B-Series Multi-Protocol Router Blades. • The router - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 386
10 10000 • To set the cost of the EX_Port back to the default, enter a cost value of 0: switch:admin> fcrrouterportcost 7/10 0 6. Enter the portEnable command to enable the ports that you disabled in step 1. switch:admin> portenable 7/10 EX_Port frame trunking configuration In Fabric OS 5.2.0 and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 387
master port. For information about setting up E_Port trunking on an edge fabric, see Chapter 20, "Administering ISL trunking" on page 435 in this guide. Supported configurations and platforms The EX_Port trunking is an FCR software feature and requires that you have a trunking license installed on - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 388
id N4 Online EX_Port (fabric id = 2 )(Trunk master) LSAN zone configuration (Trunk port, master is Slot 2 Port 2 ) 10:00:00:05:1e:35:bb:32 "MtOlympus_82" (Trunk port, master is Slot 2 Port 7 ) (Trunk port, master is Slot 2 Port 7 ) (Trunk port, master is Slot 2 Port 7 ) 10:00:00:60:69:80:1d:bc - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 389
setup on both fabrics. If the SANs are under separate administrative control, separate administrators maintain access control. If you are managing other switches in a fabric, HP recommends that you run the defZone --show command on your Fabric OS 5.1.0 and later switches as a precaution. Default - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 390
B (50:05:07:61:00:49:20:b4). switch:admin> nsshow { Type Pid COS PortName NodeName TTL(sec) NL 0508e8; 3; 50:05:07:61:00:5b:62:ed; 50:05:07:61:00:1b:62:ed; na FC4s: FCP [IBM DNEF-309170 F90F] Fabric Port Name: 20:08:00:05:1e:34:11 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 391
LSAN zones, or LSAN count, that can be configured on the edge fabrics. By default, the maximum LSAN count is set to 3000. You can increase the maximum LSAN count to 5000 without disabling the switch. The maximum number of LSAN devices supported is 10000 (this includes both physical and proxy devices - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 392
support this feature. Verify the configured maximum limit against the LSANs configured using the fcrResourceShow command. Configuring backbone fabrics for interconnectivity If you want devices in backbone fabrics to communicate with devices in edge fabrics, follow the steps in the section "Setting - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 393
the state of the host. This helps sensitive hosts to quickly discover the devices without timing out. You set the Speed tag on the FC router, and then configure the LSANs in the target edge fabrics with the tag. For example, in Figure 65 on page 392 assume that the host, H1, needs - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 394
= LSAN Figure 65 Example of setting up Speed LSAN tag Rules for LSAN tagging Note the following rules for configuring LSAN tags: • Configure the tags on the FC router, and not on the edge switches. If Virtual Fabrics are enabled, configure the tags on the base switch on which the EX_ and VEX_Ports - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 395
the edge fabrics to incorporate the tag in the names. 4. Toggle the host or target port to disable the switch before removing an Enforce LSAN tag. You do not need to disable the switch to remove name of an existing LSAN tag. Displaying the LSAN tag configuration 1. Log in to the FC router as admin. - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 396
access its local edge fabrics. The LSAN zone limit supported in the backbone fabric is not limited by the capability of one FC router. In addition, due to the lower LSAN count, the CPU consumption by the FC router is lower. If you configure the metaSAN such that the backbone fabric has two groups of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 397
routers. • You must manually configure the LSAN fabric matrix on these FC routers to match the other FC routers in the backbone fabric. If you have a dual backbone configuration, where two backbone fabrics share edge fabrics, the LSAN fabric matrix and FC router matrix settings for the shared edge - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 398
not occur until the database is changed and activated. When a CP is downgraded from Fabric OS 6.1.0 where the FC router matrix feature is activated to 6.0.x or 5.3.x firmware that does not support that feature, the firmwareDownload script prompts you to delete the FC router matrix binding entries - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 399
proxy PIDs to the same values used with the old hardware. The fcrProxyConfig command is displayed or sets the persistent configuration of proxy devices. Used with the -s slot option, it can also influence the assignment of the xlate domain port number (which is Fabric OS 6.2 administrator guide 397 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 400
considerations By default, EX_Ports and VEX_Ports detect, autonegotiate, and configure the fabric parameters without user intervention. You can, as an option, configure these parameters manually. To change the fabric parameters on a switch in the edge fabric, execute the configure command. To - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 401
where fabricID is the FID of the edge or backbone fabric on which you want to enable broadcast frame forwarding. Broadcast frame forwarding is enabled by default. Disabling broadcast frame forwarding 1. Log in to the FC router as admin. 2. Enter the following command: fcr:admin> fcrbcastconfig - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 402
have 3000 LSAN zones configurable up to a maximum of 5000. On a dual-CP switch, both CPs must have 5.3.0 code or later to select 5000. If the active CP is running Fabric OS 5.3.0 or later with a maximum count of 5000 LSANs and the standby CP is running an earlier firmware version, HA synchronization - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 403
a base fabric is like a backbone fabric. If Virtual Fabrics is enabled, the following rules apply: • EX_Ports and VEX_Ports can be configured only on the base switch. When you enable Virtual Fabrics, the chassis is automatically rebooted. When the switch comes up, only one default Logical Switch is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 404
switch 4 EX (Base switch) Fabric ID 8 E ISL IFL XISL Physical chassis 2 E Logical switch 5 F (Default logical switch) Fabric ID 128 Logical switch 6 F Fabric ID 1 Allows XISL use E Logical switch 7 Fabric ID 15 Logical switch 8 (Base switch) E Fabric ID 8 Figure 68 EX_Ports in a base switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 405
switch. HP recommends that you save your FC-FC routing configuration (using the configUpload command) before performing any downgrades. Fabric OS 6.0.x and earlier releases do not support EX_Ports on 8-Gb/s ports. Downgrades are not allowed on platforms with 8-Gb/s EX_Ports. For further instructions - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 406
to an edge fabric switch through multiple EX_Ports from the same router. 2. Enter the portCfgShow command and confirm that the ports are enabled. 3. Enter the routers and edge switches and save the output. The output can be used to troubleshoot the problem. 404 Using the FC-FC routing service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 407
Fabric OS 6.2 administrator guide 405 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 408
406 Using the FC-FC routing service - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 409
HP StorageWorks 8/40 SAN Switch • HP StorageWorks DC SAN Backbone Director • HP StorageWorks DC04 SAN Director Switch Yes Yes Yes Yes Yes Yes No Yes CRC error reports are available through Web Tools. In a fabric with Virtual Fabrics enabled, the number of Logical Switches that can be configured - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 410
port number where needed in the commands: • HP StorageWorks 4/8 and 4/16 SAN Switches • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch 4/32B • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 411
shared by all ports in the same ASIC chip: • HP StorageWorks 8/8 SAN Switch • HP StorageWorks 8/24 SAN Switche • HP StorageWorks 8/80 SAN Switch • The HP StorageWorks 4/8 and 4/16 SAN Switches allow up to 96 end-to-end monitors. The number of interswitch links configured on the switch affects the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 412
ID 30 (0x1e), AL_PA 0xef on Switch Y. SID 0x051200 Switch X Switch Y DID 0x111eef Host . . . . . . A Dev B Monitor 0 domain 0x05, switch area ID 0x12 AL_PA 0x00 Monitor 1 domain 0x11, switch area ID 0x1e AL_PA 0xef Figure 71 Setting end-to-end monitors on a port End-to-end performance - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 413
-end masks are not supported on the following: • HP StorageWorks DC SAN Backbone Director • HP StorageWorks DC04 SAN Director Switch • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch. On HP StorageWorks SAN Director 48 Port 4Gb FC blades - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 414
is 8 per port in any combination of standard filters and user-defined filters: • HP StorageWorks 4/8 SAN Switch • HP StorageWorks 4/16 SAN Switch • HP StorageWorks 8/8 SAN Switch • HP StorageWorks 8/24 SAN Switches • HP StorageWorks 8/80 SAN Switch For the follwing switches, the maximum number - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 415
HP StorageWorks 8/40 SAN Switch • HP StorageWorks 400 Multi-Protocol Router • HP StorageWorks DC SAN Backbone Director • HP StorageWorks DC04 SAN Director Switch For the HP StorageWorks 4/256 SAN Directors, the maximum number of filters is 12 per port in any combination of standard filters and user - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 416
, and HP StorageWorks DC04 SAN Director Switch platforms Up to 15 different offsets per port (14 offsets when FICON Management Server mode, or fmsmode, is enabled). • HP StorageWorks 4/8 and 4/16 SAN Switches, HP StorageWorks 8/8 and 8/24 SAN Switches, and Brocade 4Gb SAN Switch for HP p-Class - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 417
number 1 on slot 1, port 4 using the perfDelFilterMonitor command: switch:admin> perfdelfiltermonitor 1/4, 1 The specified filter-based monitor is deleted. ISL performance monitoring ISL monitoring is set up on E_Ports automatically in release 4.4.0 and later. Fabric OS 6.2 administrator guide 413 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 418
HP StorageWorks SAN Switch 4/32B, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks 400 Multi-Protocol Router, and HP StorageWorks 4/256 SAN Director. Top Talker can be installed only on switches that run Fabric OS 6.0.0 or later. Top Talker monitors are not supported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 419
, or HP StorageWorks DC04 SAN Director Switch: perfttmon --delete 2/4 Displaying the top n bandwidth-using flows on an F_Port 1. Connect to the switch and log in as admin. 2. Enter the perfTTmon --show command. perfttmon --show [slotnumber/]port [n] [wwn | pid] Fabric OS 6.2 administrator guide 415 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 420
platform: 32 For HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, and FC8-xx port blades 16 For HP StorageWorks SAN Switch 4/32, HP StorageWorks 4/64 SAN Switch, HP StorageWorks SAN Switch 4/32B, HP StorageWorks 400 Multi-Protocol - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 421
flow. • You cannot install a Top Talker monitor on a mirrored port. • Top Talker can monitor only 10,000 flows at a time. • Top Talker is not supported on VE_Ports, EX_Ports, and VEX_Ports. • The maximum number of F_Port Top Talker monitors on an ASIC is 8. If Virtual Fabrics is enabled, the maximum - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 422
8/24 SAN Switches support eight filter-based monitors for trunks. • The following switches support 12 filter-based monitors for trunks: • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch 4/32B • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 423
168.169.40 6 0x11000 0x21fe0 WEB_TOOLS 0x00000004d0baed41 0x0000000067229e98 192.168.169.40 The following example displays a filter-based monitor on a port at 5-second intervals: switch:admin> 167 657 656 655 488 167 26k 179 749 749 749 570 179 Fabric OS 6.2 administrator guide 419 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 424
.40 6 SCSI_WR WEB_TOOLS 0x000000000000033a 192.168.169.40 The following example displays ISL monitor information on a port: switch: -to-end), FLT (filter-based), or ISL (inter-switch link). slotnumber For bladed systems only, specifies the slot number of the port on which the monitor counter is - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 425
command: switch:admin> perfcfgclear This will clear Performance Monitoring settings in FLASH. The RAM settings won't change. Do you want to continue? (yes, y, no, n): [no] y Please wait... Committing configuration...done. Performance Monitoring configuration cleared from FLASH. Fabric OS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 426
Advanced Performance Monitoring is deleted when the switch is rebooted. Using the Data Center Fabric Manager (DCFM) Enterprise Edition, you can store performance data persistently. For details on this feature, see the DCFM Enterprise User Manual. 422 Administering advanced performance monitoring - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 427
-EL, HP StorageWorks SAN Switch 2/16, and HP StorageWorks MSA SAN Switch 2/8; and switches running Fabric OS 6.x is not supported. Distance levels for extended Inter-Switch Links As the distance between switches and the link speed increases, additional buffer credits are required for the ports used - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 428
you to allocate sufficient numbers of full-size frame buffers on a particular port or to support a long- distance link. Only E_Ports can be configured for extended distances. Changes made by this command are persistent across switch reboots and power cycles. Enter the portCfgLongDistance command to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 429
not have this limitation: • HP StorageWorks 8/8 and 8/24 SAN Switches • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks SAN Director 16 Port 8Gb FC blade • HP StorageWorks SAN Director 32 Port 8Gb FC blade • HP StorageWorks SAN Director 48 Port 8Gb FC blade. • For - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 430
• If you have a distance of 50 km at 8 Gb/s, then (50 km * 8 Gb/s/ 2) + 6 = 206 buffers Example: Consider the HP StorageWorks 8/8 and 8/24 SAN Switches, which have a single 24-port port group and a total of 676 buffer credits for that port group The maximum remaining number of buffer credits for the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 431
User port group size Unreserved buffers (per port group) HP StorageWorks 4/8 and 16 16 4/16 SAN Switches HP StorageWorks 8/8 and 24 24 8/24 SAN Switches HP StorageWorks SAN 32 32 Switch 4/32, HP StorageWorks SAN Switch 4/32B HP StorageWorks 4/64 64 16 SAN Switch HP StorageWorks 8/40 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 432
Switches HP StorageWorks SAN Switch 500 250 100 4/32, HP StorageWorks SAN Switch 4/32B HP StorageWorks 4/64 SAN 500 250 100 Switch HP StorageWorks 8/40 SAN 3388 1694 847 Switch HP StorageWorks 8/80 SAN 588 294 147 Switch N/A 122 N/A N/A 424 74 428 Administering extended fabrics - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 433
This feature is supported only on E_Ports that are configured for long distance and are connected between the following switch or blade models: • HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch • HP StorageWorks SAN Director 16 Port 8Gb FC - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 434
, Long-Distance E-Port, L_Port, Fast Write enabled, QoS enabled, and Trunk Area enabled ports. Configuring ports to support long distance To avoid inconsistency in the fabric, make sure that the vc_translation_link_init parameter is enabled on both ends of the link. By default, the VC translation - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 435
default). When set to 0, the link uses IDLE fill words. The IDLE fill word option is not compatible with QoS configured links and credit recovery enabled links. You must disable these features before configuring long-distance IDLE fill words. On switches running firmware versions earlier than Fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 436
-disable 4. Configure the port to support long-distance links. switch: admin> portcfglongdistance ,LS,0,100 Extended Fabrics device limitations Extended Fabrics is normally not implemented on the following device: • The HP StorageWorks B-Series iSCSI Director - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 437
sequence is an enhanced link reset protocol, and avoids excessive resetting of ports. By default, this option is set to 1 (enabled). It must be set to 1 (enabled) when configuring a trunk over extended fabrics. It must be set to 1 for a long-distance link not configured for ISL R_RDY mode; otherwise - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 438
434 Administering extended fabrics - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 439
, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks 8/8 and 8/24 SAN Switches, Brocade 4Gb SAN Switch for HP c-Class BladeSystem, the HP StorageWorks 4/256 SAN Director using the HP StorageWorks 4/256 SAN Director 16 Port 4Gb Blade, HP StorageWorks 4/256 SAN Director - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 440
be set to the same ISL mode (L0 is the default). For details on extended ISL modes, see Chapter 19, "Administering extended fabrics" on page 423. • If the switch is in Access Gateway mode, the trunk ports must be F_Ports. In Fabric OS 5.2.0 and later, you can configure EX_Ports to use frame-based - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 441
trunk port paths without causing input/output (I/O) failures in cases where the end devices require in-order-delivery (IOD) of frames. You can use this feature with the HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch, HP StorageWorks DC SAN Backbone Director, and the HP StorageWorks - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 442
- 1/10 belong to one HP StorageWorks DC SAN Backbone Director platform, traffic in logical switch 2 is affected whenever traffic for logical switch 1 on ports 1/0 to 1/5 is rebalanced. This effect on logical switch 2 is based on the configuration on logical switch 2: • If logical switch 2 has IOD ON - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 443
exists on the master port of the F-Port Trunk where 4 is a slave port of the F_Port Trunk. Fabric Watch allows you to monitor traffic flow through specified ports on the switch and send alerts when the traffic exceeds or drops below configured thresholds. Fabric Watch monitors only the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 444
ISL Trunking for all ports on the switch. The following example enables trunking on all ports in the switch. switch:admin> switchcfgtrunk 1 Committing configuration...done. switch:admin> Setting port speeds For long-distance ports, if a port is set to autonegotiate the port speed, the maximum speed - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 445
Gb/s supported SFPs installed. The HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, and HP StorageWorks 8/80 SAN Switch, support long-distance modes L0, LE, LS, and LD. The distance supported on each platform depends on the available buffers, number of back-end ports, and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 446
SAN Switch, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/8 and 8/24 SAN Switches, and HP StorageWorks DC SAN Backbone Director, and HP StorageWorks DC04 SAN Director enterprise-class platforms with supported blades and 8 Gb/s SFPs installed only.) The following example sets the speed for port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 447
: • It is supported on switches running Fabric OS 4.4.0 and later. • Extended Fabrics and ISL Trunking licenses are required on all participating switches. • When configuring long distance, the portCfgLongDistance --vc_translation_link_init parameter must be set the same on all ports in an extended - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 448
bandwidth. This feature supports the following: • HP StorageWorks SAN Switch 4/32 • HP StorageWorks 4/64 SAN Switch • HP StorageWorks SAN Switch 4/32B • HP StorageWorks 8/40 SAN Switch • HP StorageWorks 8/80 SAN Switch • HP StorageWorks 8/8 and 8/24 SAN Switches 444 Administering ISL trunking - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 449
• HP StorageWorks 4/256 SAN Director and the HP StorageWorks DC SAN Backbone Director platforms running Fabric OS 6.2.0. F_Port masterless trunking interoperates between Access Gateway (AG), 2 Gb/s, 4 Gb/s, and 8 Gb/s-based platforms. This feature does not work on M-EOS or third party switches. - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 450
ASIC's trunk group of the switch or blade starting from port 0 and must be one of the port's default areas of the trunk group. Authentication 10-bit addressing is the default mode for all dynamically created partitions in the HP StorageWorks DC SAN Backbone Director platform. Authentication occurs - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 451
enabled on those ports; if a port is Fastwrite-enabled, the port cannot be assigned a Trunk Area. FICON is not supported on F_Port trunk ports. However, FICON can still run on ports that are not F_Port trunked within the same switch. HP StorageWorks SAN Director 48 Port 4Gb FC Blade HP StorageWorks - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 452
to another Fabric OS switch with ports in the same port group or quad. A port group or a quad is a set of sequential ports, for example ports 0-3 in the figure shown below. The HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks 8/40 SAN Switch, and the HP StorageWorks 8/80 SAN Switch support - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 453
trunking groups are based on the user port number, with contiguous eight ports as one group, such as 0-7, 8-15, 16-23 and up to the number of ports on the switch (see Figure 77). Figure 77 Trunk group configuration for the HP StorageWorks 8/40 SAN Switch 1. Connect to the switch and log in using - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 454
10 13 -- -- -- 125 125 10 14 -- -- -- 125 126 5. Enable ports 13 and 14: switch:admin> portenable 10/13 switch:admin> portenable 10/14 6. Show the TA port configuration: switch:admin> porttrunkarea --show enabled Slot Port Type State Master TI DI 10 13 F-port Master 10/13 125 125 10 14 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 455
switch:admin> switchshow switchName: SPIRIT_B4_01 switchType: 66.1 switchState: Online switchMode: Native switchRole: Principal switchDomain: 2 switchId: fffc02 switchWwn: 10:00:00:05:1e:41:22:80 zoning: OFF switchBeacon: OFF FC Router: ON FC Router BB Fabric ID: 100 Area Port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 456
39 39 id N4 Online 5. Display TA-enabled port configuration: F-Port 2 NPIV public (Trunk master) F-Port (Trunk port, master is Port 36 ) F-Port (Trunk port, master is Port 36 ) F-Port (Trunk port, master is Port 36 ) switch:admin> porttrunkarea --show enabled Port Type State Master TA DA 36 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 457
a Logical Switch with 256 devices each. The HP StorageWorks DC04 SAN Director Switch supports trunk groups with up to eight ports. The trunking groups are based on the user port number with contiguous eight ports as one group, for example 0-7, 8-15, and 16-23. Fabric OS 6.2 administrator guide 453 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 458
connects two HP StorageWorks DC SAN Backbone Director platforms, must be authenticated. For more information on Virtual Fabrics and how to create a Logical Switch, see Chapter 6, "Managing virtual fabrics" on page 173. The following example shows how to enable a Virtual Fabric and configure the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 459
:admin> fosconfig -enable vf WARNING: This is a disruptive operation that requires a reboot to take effect. All EX ports will be disabled upon reboot. Would you like to continue [Y/N] 2. Specify the E_Ports to authenticate, for example 2, 3, and 4. switch:admin> authutil --authinit 2,3,4 Fabric OS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 460
456 Administering ISL trunking - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 461
21 Configuring and monitoring FCIP extension services FCIP concepts Fibre Channel over IP (FCIP) enables you to connect Fibre Channel SANs over IP-based networks. The HP StorageWorks 400 Multi-Protocol Router and B-Series Multi-Protocol Router Blade uses FCIP to encapsulate Fibre Channel frames - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 462
over IP Fabric OS supports SAN extension between HP StorageWorks 400 Multi-Protocol Router and B-Series Multi-Protocol Router Blades installed on an HP StorageWorks 4/256 SAN Director or an HP StorageWorks DC SAN Backbone Director or HP StorageWorks DC04 SAN Director Switch 458 Configuring and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 463
have 16 physical Fibre Channel ports and 2 physical GbE ports. NOTE: The FCIP Tunneling Service for the HP StorageWorks 400 Multi-Protocol Router and data connections may be configured with different DSCP values. Before configuring DSCP settings, determine if the IP network you are using implements - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 464
data and user credential theft. By default, when creating an FCIP tunnel, IPsec is disabled. Used to provide greater security in tunneling on a B-Series Multi-Protocol Router Blade or an HP StorageWorks 400 Multi-Protocol Router, the IPsec feature does not require you to configure separate security - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 465
for IPsec. • There is no RAS message support for IPsec. • Only a single route is supported on an interface with a secure tunnel. • IPsec can be configured only on IPv4 based tunnels. Secure tunnels cannot be created on an HP StorageWorks 400 Multi-Protocol Router or B-Series Multi-Protocol Router - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 466
can be configured for each GbE port. IPsec default is On. Group 1-768 bits (default) Group 14-2048 bits Creating an IKE and IPsec policy For a complete description of the policy command, see the Fabric OS Command Reference. 1. Connect to the switch Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 467
in seconds. 28800 is the default. The following example shows how to create IKE policy number 10 using 3DES encryption, MD5 authentication, and Diffie-Hellman Group 1: switch:admin> policy --create ike 10 -enc 3des -auth md5 -dh 1 The following policy has been set: IKE Policy 10 Authentication - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 468
:admin> policy --delete ipsec 10 The policy has been successfully deleted. Viewing IPsec information for an FCIP tunnel 1. Connect to the switch and log in using an account assigned to the admin role. 2. Enter the portShow fcipTunnel command. 464 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 469
an HP StorageWorks 400 Multi-Protocol Router or a B-Series Multi-Protocol Router Blade to communicate with supported third party WAN optimization hardware connected on the GigE ports configured for FCIP. This feature is enabled when configuring the FCIP tunnel. Fabric OS 6.2 administrator guide 465 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 470
is allowed to be configured for a GigE port that has TCP Byte Streaming configured. The tunnel cannot have compression enabled; it cannot have FC Fastwrite enabled, and must have a committed rate set on the tunnel. The committed rate must come from communication with the supported third party WAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 471
for those pairs. By default, only Fastwrite-based acceleration is performed on the unassociated pairs. Does not support multiple non-equal-cost path between host and sequential device FCIP Fastwrite and Tape Pipelining configurations To help understand the supported configurations, consider the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 472
enabled on a per-tunnel/per-port basis Unsupported configurations for Fastwrite and Tape Pipelining The configurations shown in Figure 81 are not supported with Fastwrite and Tape Pipelining. These configurations use multiple equal-cost paths. 468 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 473
81 Unsupported configurations with Fastwrite and Tape Pipelining FC Fastwrite concepts FC Fastwrite operates in Fibre Channel network topologies similar to the basic topology shown in Figure 82. FC Fastwrite provides accelerated speeds for SCSI Write operations over long distance Fibre Fabric OS - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 474
Service rather than FCIP. FC Fastwrite is supported in Fabric OS 5.3.x and later. Figure 82 Typical network topology for FC Fastwrite Platforms and OS requirements for FC Fastwrite Fabric OS supports FC Fastwrite between two HP StorageWorks 400 Multi-Protocol Routers or two HP StorageWorks 4/256 SAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 475
FC Fastwrite is implemented in a hardware configuration consisting of two HP StorageWorks 400 Multi-Protocol Router, or two HP StorageWorks 4/256 SAN Director, or two HP StorageWorks DC SAN Backbone Director or HP StorageWorks DC04 SAN Director Switch enterprise-class platforms with B-Series Multi - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 476
slot number in which the B-Series Multi-Protocol Router Blade is installed. A slot number is not required for the HP StorageWorks 400 Multi-Protocol Router. switch:admin> fastwritecfg --enable 7 !!!! WARNING !!!! Enabling FC Fastwrite will require powering off and back on the and it may take up to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 477
to the admin role. 2. Enter the following command: switch:admin> fastwritecfg --disable slot where slot is the slot in which the B-Series Multi-Protocol Router Blade is installed. A slot number is not required for the HP StorageWorks 400 Multi-Protocol Router. Fabric OS 6.2 administrator guide 473 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 478
by default. On an HP StorageWorks 400 Multi-Protocol Router or FC4-18i blade that has already been installed and configured, check the EX_Port status using the portCfgShow command, and persistently disable the ports using the portCfgPersistentDisable command before you configure them. See "Setting - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 479
and Diagnostics Guide. for specific instructions. 13. Check the configuration to ensure that the parameters are correct using the portShow fciptunnel command. 14. Persistently enable the ports using the portCfgPersistentEnable command. 15. Create the same configuration on the HP StorageWorks 400 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 480
Director or HP StorageWorks DC04 SAN Director Switch enterprise-class platform that contains an FR4-18i blade. This parameter does not apply to the stand-alone HP StorageWorks 400 Multi-Protocol Router. ge0|ge1 The Ethernet port used by the tunnel (ge0 or ge1). dest_ipaddr The source IP address - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 481
ports have IP interfaces set. The command syntax is as follows. portCmd --ping [slot/]ge0|ge1 [-s source_ip] [-d dest_ip] [-c L2 class-of-service] [-n num-requests] [-q type-of-service] [-t ttl] [-v vlan tag] [-w wait-time] [-z size] where: slot ge0|ge1 The number of a slot in an HP StorageWorks - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 482
or HP StorageWorks DC04 SAN Director Switch enterprise-class platform that contain an FR4-18i blade. This parameter does not apply to the stand-alone HP StorageWorks 400 Multi-Protocol Router. The Ethernet port used by the tunnel (ge0 or ge1). The tunnel number (0-7). remote_ip_addr The IP address - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 483
enabled, the number of retransmissions is calculated based on the minimum retransmit time to ensure that tunnel does not time out before the host times out (about 80 values is 0 through 63. The default is 0. Before configuring DSCP settings, determine if the IP network you are using implements PHB, - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 484
tunnel FCIP Fastwrite and Tape Pipelining enabled. If TCP Byte Streaming were enabled, FCIP Fastwrite and Tape Pipelining would be disabled. SP3:admin> portshow fciptunnel ge1 1 Port: ge1 Tunnel ID 1 Tunnel Description Not Configured Remote IP Addr 192.168.15.2 Local IP Addr 192.168.15.1 Remote - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 485
Port: ge0 Tunnel ID 0 Tunnel Description Not Configured Remote IP Addr 10.10.12.100 Local IP Addr 10.62.0.100 Remote WWN Not Configured configuration is saved in a persistent database. At this point, all configured FCIP tunnels now appear in the fabric as VE_Ports. Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 486
, the associated ports must be persistently enabled. NOTE: VEX_Port Users: If the fabric is already connected, you must leave the ge0 and ge1 ports disabled until after you have configured the VEX_Port; this will prevent unintentional merging of the two fabrics. 1. Connect to the switch and log in - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 487
command to verify that the port is persistently enabled as shown below: switch:admin06> portcfgpersistentenable 8/16 switch:admin06> portcfgpersistentenable 8/17 switch:admin06> portcfgpersistentenable 8/18 switch:admin06> portcfgpersistentenable 8/19 switch:admin06> portcfgshow Ports of Slot - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 488
Director Switch enterprise-class platform that contains an FR4-18i blade. This parameter does not apply to the stand-alone HP StorageWorks 400 Multi-Protocol Router. The Ethernet port used by the tunnel (ge0 or ge1). The tunnel number (0 - 7). The modify option changes the FCIP tunnel configuration - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 489
QoS settings or delete the QosMap configuration file for a virtual port without bringing the FCIP tunnel down. NOTE: Modified values are not reset to defaults when the tunnel QoS is disabled and enabled. If you want to revert to default values, use the -default option. 1. Connect to the switch and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 490
: If you do not specify a destination IP address, the destination address defaults to 0.0.0.0, and all frames are tagged with the associated VLAN tag. FCIP and ipPerf create and maintain entries in the VLAN tag table through their own configuration procedures. Manual entries are needed on both the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 491
ipPerf in this chapter) is an option of the Fabric OS portCmd command. This option allows you to specify the slot and port information for displaying performance statistics for a pair of ports. For this basic configuration, you can specify the IP addresses of the endpoints, target bandwidth for the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 492
start the WAN tool before setting up a new FCIP tunnel between two sites. You can configure and use the --ipPerf option immediately after installing the IP configuration on the FCIP port (for example, IP address, route entries). Once the basic IP addressing and IP connectivity is established between - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 493
the -i option or the default, 30 seconds. Total Time includes the IP header and payload. Note: There is limited support for black port] [-q diffserv] [-v vlan_id] [-c L2_Cos] where: -s source_ip The source IP address. -d destination_ipThe destination IP address. Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 494
or HP StorageWorks DC04 SAN Director Switch enterprise-class platforms that contains an FR4-18i blade. This parameter does not apply to the stand-alone HP StorageWorks 400 Multi-Protocol Router. ge0|ge1 The Ethernet port used by the tunnel (ge0 or ge1) -s source_ip The source IP interface - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 495
or HP StorageWorks DC04 SAN Director Switch enterprise-class platforms that contains an FR4-18i blade. This parameter does not apply to the stand-alone HP StorageWorks 400 Multi-Protocol Router. ge0|ge1 The Ethernet port used by the tunnel (ge0 or ge1) -s source_ip The source IP interface - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 496
of tunnel 0. switch:admin06> portshow fciptunnel 8/ge0 all -perf Slot: 8 Port: ge0 Tunnel ID 0 Remote IP Addr 192.175.4.200 Local IP Addr 192.175.4.100 Remote WWN Not Configured Local WWN 10: 556200 Bps 30s avg, 491394 Bps lifetime avg 492 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 497
switch:admin06> portshow fciptunnel 8/ge0 0 -params Slot: 8 Port: ge0 Tunnel ID 0 Remote IP Addr 192.175.4.200 Local IP Addr 192.175.4.100 Remote WWN Not Configured Bytes slow start threshold 18HP StorageWorks 400 Multi-Protocol operational mode: Fabric OS 6.2 administrator guide 493 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 498
556200 Bps 30s avg, 491394 Bps lifetime avg 494 Configuring and monitoring FCIP extension services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 499
Guide (SG24-6497-01), and Implementing an IBM/Brocade SAN with 8 Gbps Directors and Switches (SG24-6116-08). The following Fabric OS standard features support FICON fabrics: • Port swapping Redirects resources from a failed port to a healthy port without changing the FICON host configuration. Port - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 500
in a single hop FICON configuration. The HP StorageWorks SAN Director 6 Port 10Gb FC blade is supported for 10 Gb/s ISL links. • HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch, HP StorageWorks 8/40 SAN Switch and HP StorageWorks 8/80 SAN Switch can perform CUP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 501
when you enable fmsmode. • The HP StorageWorks SAN Director 48 Port 4Gb FC blade and HP StorageWorks SAN Director 48 Port 8Gb FC blades must not be inserted in slot 10 of the chassis in a FICON configuration. (Other blades are supported in slot 10, but the HP StorageWorks SAN Director 48 Port 8Gb FC - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 502
to physical ports. CUP Limitations You can configure up to two CUP switches as Logical Switches in a Virtual Fabric-enabled platform for FICON FMS mode. A base switch cannot be configured as a FICON switch. FICON CUP-enabled Logical Switches are not supported as Logical Fabric-capable Logical - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 503
when the interoperable mode is set to 2 is supported on Logical Switches with a 256 area limit port-based area assignment only. • Configure ports for fixed 1 Gb/s speed when there are 1 Gb/s devices attached to them and those devices cannot auto-negotiate speed. Fabric OS 6.2 administrator guide 499 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 504
on the switch from the default exchange-based policy to the required port-based policy for those switches with FICON devices directly attached using the aptPolicy command when working from the command line. For GUI-based procedures, see the Web Tools Administrator's Guide for configuring the routing - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 505
, set a unique domain ID. For instructions on displaying and changing the domain ID, see Chapter 1, "Performing basic configuration tasks" on page 29. 3. Enter the switchDisable command to disable the switch. 4. Enter the configure command. 5. Enter y after the Fabric Parameters prompt. 6. To enable - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 506
] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] Committing configuration...done. switch:admin> switch, log in as user, and enter one of the following commands: • For the local switch: ficonShow rlir • For all switches defined in the fabric: ficonShow rlir fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 507
For all switches defined in the fabric: ficonShow ilir fabric Port swapping If a port malfunctions, or if you want to connect to different devices without having to re-wire your infrastructure, you can move a port's traffic to another port (swap ports) without changing the I/O Configuration Data Set - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 508
port. 3. Install a CUP license on the switch. See Chapter 1, "Performing basic configuration tasks" on page 29. 4. Take the appropriate action based on whether you have both B- and M-series switches in your fabric: • Establish a secure E_Port between the supported platforms. For B-series switches - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 509
a set of ports. Changing fmsmode from enabled to disabled triggers the following events: • A device reset is setting for the switch. switch:admin> ficoncupshow fmsmode fmsmode for the switch: Enabled Setting the MIHPTO value The missing interrupt handler process timeout (MIHPTO) is a configurable - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 510
switch offline. The default setting is 1 (on). UAM User alert mode. When this bit is set on, a warning is issued when an action is attempted that will write CUP parameters on the switch. The default setting is 0 (off). ASM DCAM Active=saved mode. When this bit is set on, all CUP configuration - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 511
on; the port at slot 1, port 1 is enabled persistently: switch:admin> ficoncupshow modereg POSC UAM ASM DCAM ACP HCP 1 0 0 0 1 1 switch:admin> ficoncupset modereg ASM 1 Mode register bit ASM has been set to 1. switch:admin> portenable 1/1 Port and switch naming standards Fabric OS handles - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 512
sign (@). NOTE: Configuration files that contain nonprintable characters should not be edited manually because many editors replace nonprintable characters with some other characters without warning you first. • CUP has a 24-character unique port name limitation; Fabric OS supports port names up to - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 513
not be replaced because Active=Saved mode is enabled. A warning message is displayed in the event log to warn users that the IPL will not be overwritten. Downloading configuration files with Active=Saved mode disabled See Chapter 5, "Maintaining the switch configuration file" on page 163 for more - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 514
value. It must be unique within the fabric. HP recommends that the switch ID (in IOCP or HCD) be set to the same value as the domain ID of the FICON director, which is defined to the FICON director at installation time. This simplifies the configuration and reduces confusion by having a common - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 515
Guide (SG24-6497-00). In the following sample IOCP configuration file, the UNIT value for FICON CUP definitions is 2032 for any FICON director regardless of vendor or platform. All B-Series switches 0D9,1),CUNUMBR=0D9,UNIT=2032,STADET=Y,UNITADD=00 Brocade Domain_ID=25 (in hex CNTLUNIT CUNUMBR=0DB, - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 516
512 FICON fabrics - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 517
Blade Ethernet interfaces create a cascaded FICON switched configuration. The fabric must be set up to provide a secure, or high integrity fabric to enable this configuration to operate in an IBM environment. See "Configuring and monitoring FCIP extension services" on page 457 for an explanation of - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 518
and egress FICON port. • For HP StorageWorks M-series directors (6140 and i10K directors), implement the Allow/Prohibit feature. One Ethernet interface, one IP route and one FCIP tunnel between sites You can ensure a determinate path for FICON commands and responses by configuring only one Ethernet - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 519
The FICON Tape Emulation License is required to enable FICON Tape Read Pipelining. FICON emulation configuration Before you configure FICON emulation, you will need to understand the available options, and if those options are to be implemented in your installation. If FICON emulation is new to you - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 520
and device can support. Too small a value enabled. The default values are assumed for wrtMaxPipe, wrtMaxDev, wrtTimer, and wrtMaxChains. An oxidbase value of 0x7000 is specified. portcfg ficon ge1 0 config -x 1 -w 1 -r 1 -t 1 -l 1 oxidbase 0x7000 516 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 521
is the modify option that changes the FICON emulation configuration options and parameters. The following options turn features on and off. The associates tunnels must be disabled to modify the option settings. If you attempt to do them on an enabled tunnel, the operation is not allowed, and you are - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 522
value defines the base value of an support personnel. The default is 0xF7C80000. • LrcCheck 1|0 enables or disables Transport Lrc Hdr Check. 1 is enable port (ge0 or ge1). • tunnel_id is the tunnel number (0-7). The arguments are as follows: 518 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 523
Support personnel may use this pointer. • Path is the device path, in the format VE-HD-HP-DD-DP-LP-CU-DV. where: • VE is the internal VE_Port number. • HD is the hex value for the Host Domain (the entry domain for this host port into the fabric). • HP : VE HD HP DD DP LP CU DV 24 63 01 64 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 524
|H| 0x00| N/A|0000|0000| 19436| 0| 0| 183111| 32760| |0x10045000|2463046402050102|H| 0x00| N/A|0000|0000| 19456| 0| 0| 183111| 32760| |0x10048000|2463046402050103|H| 0x00| N/A|0000|0000| 19404| 0| 0| 183111| 32760| 520 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 525
|147| 41523| 26894| |0x104B5400|24B102B20F1109F9|H| 0x00|0000|000F|0000|05E8| 4185|155| 38116| 22943| |0x104B5C00|24B102B20F1109FD|H| 0x00|0000|000F|0000|07E2| 3755|143| 40929| 24885| Fabric OS 6.2 administrator guide 521 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 526
522 Configuring and monitoring FICON Extension Services - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 527
is the default addressing mode used in all the platforms, except for the HP StorageWorks DC SAN Backbone Director and HP StorageWorks DC04 SAN Director Switch, that do not have Virtual Fabrics enabled. In this mode, each port has a fixed address assigned by the system based on the port number and - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 528
in Fabric OS 4.0.0 and later. • Native was introduced with the HP StorageWorks SAN Switch 8 and 16, and HP StorageWorks SAN Switch 8-EL and 16-EL. This format supports up to 16 ports per switch. • Core is the default for HP StorageWorks 4/8 and 4/16 SAN Switches, HP StorageWorks 8/8 and 8/24 SAN - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 529
configuration data by running the configUpload command. Before downgrading firmware, change the PID back to supported PIDs such as Core PID. If the database is automatically converted, save the converted database, and then download the older OS. PID format selection All switches in a fabric must - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 530
1 Convert existing fabric to Core PID format, upgrading the version of Fabric OS, if necessary. Set Core PID format for new switch. Host reboot is any multipathing software will respond to a fabric service interruption. If current details about the SAN are already available, it might be possible - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 531
• JBOD drive firmware versions • Multipathing software versions • HBA time-out values • Multipathing software timeout values • Kernel timeout values • Configuration of switch 2. Make a list of manually configurable PID drivers. Some device drivers do not automatically bind by PID, but allow the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 532
the Core Switch PID format enabled, so it is not necessary to perform the PID format change on these switches. Migrating from manual PID binding (such as persistent binding on an HBA) to manual WWN binding and upgrading drivers to versions that do not bind by PID can often be done before setting the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 533
to work closely with the SAN service provider in these cases. Changing to core PID format In Fabric OS release 4.2.0 and later, Native PID format is not supported; the default format is the Core PID format. In Fabric OS 3.1.2 and later, Core PID format is the default configuration. Although the PID - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 534
in the following cases: • When you perform a port swap operation. • When you enable Extended Edge (also known as "displaced PID") PID on the director. If you are using Extended Edge PID format (for example, the HP StorageWorks 4/256 SAN Director with configuration option 5) and would like to map the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 535
of the Fabric OS versions listed below that support the addressing mode: • HP StorageWorks SAN Switch 2/8-EL and HP StorageWorks SAN Switch 2/16-3.1.2 or later • HP StorageWorks SAN Switch 2/8V, HP StorageWorks SAN Switch 2/16V, HP StorageWorks SAN Switch 2/32, HP StorageWorks Core Switch 2/64, HP - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 536
each switch in the fabric 8. Enter the switchDisable command. 9. Enter the configure command and change the Core Switch PID Format to 1. 10. Enter the command cfgEnable [effective_zone_configuration]. For example: cfgEnable my_zones 11. Enter the switchEnable command. Enable the core switches first - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 537
Enter the configure command and change the Core Switch PID Format to 1. 8. Enter the configEnable [effective_zone_configuration] command. For example: configenable my_config 9. Enter the switchEnable command. Enable the core switches first, and then the edges. Fabric OS 6.2 administrator guide 533 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 538
Enable the port swap feature: portswapenable 3. HP StorageWorks 4/8 and 4/16 SAN Switches, HP StorageWorks 8/8 and 8/24 SAN Switches, HP StorageWorks SAN Switch 4/32, HP StorageWorks 4/64 SAN Switch, HP StorageWorks SAN Switch 4/32B, HP StorageWorks 8/40 SAN Switch, HP StorageWorks 8/80 SAN Switch - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 539
6. Disable the port swap feature: portswapdisable Table 102 Physical port numbers and logical area IDs for swapped ports Slot Slotport Swport Area 2 2 18 19 2 3 19 18 Fabric OS 6.2 administrator guide 535 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 540
536 Configuring the PID format - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 541
to a Yes Yes Yes factory installed switch, do you use the default passwords? Does a user need to know the old passwords when changing passwords using the passwd command? Yes, except when the root user changes another user's password. This is standard UNIX behavior; Fabric OS does not enforce - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 542
take effect? When does the password prompt appear? Is a user forced to answer password prompts before getting access to the firmware? No. Partial changes of all four passwords are allowed. When users connect as root, factory, or admin, the accounts with default password will be prompted for change - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 543
password settings when upgrading or downgrading firmware for various Fabric OS versions. Table 105 Password migration behavior during firmware upgrade/downgrade Topic 4.4.0 to 5.0.1 5.0.1 and later Passwords used when upgrading to a Default accounts and passwords Default accounts and passwords - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 544
540 Understanding legacy password behavior - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 545
on HP supported interop configurations, refer to the HP StorageWorks Fabric interoperability: merging fabrics based on M-Series and B-Series Fibre Channel switches on the following HP website: http://h18000.www1.hp.com/products/storageworks/san/documentation.html. Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 546
542 Mixed fabric configurations for non-merge SANs - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 547
fabric. FC routers are deployed in different configurations in a fabric. Those configurations are listed in the following pages and steps have been provided to integrate the 400 MP Router in a fabric with the HP StorageWorks Configuration during the upgrade The switch Domain ID and backbone fabric - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 548
can be replaced with the new FC router. You are expected to maintain the connections to the edge fabrics and the other router, same as with old router. Configuration parameters described in "To configure the new router:" on page 545 should also be preconfigured on the new routers and match with the - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 549
operating mode is native while configuring the EX_Port using the portcfgexport -m command. 5. Set the backbone Fabric ID by issuing the fcrconfigure command. 6. Set other fabric parameters by issuing the configure command, if they are not default. 7. Manually configure additional values as necessary - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 550
546 Migrating from an MP Router to a 400 MP Router - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 551
CP through the GE ports for tasks such as downloading firmware, SNMP polling, SNMP traps, troubleshooting, and configuration. To facilitate this communication, the HP StorageWorks 400 Multi-Protocol Router uses IP forwarding and IP routing to forward IP traffic through the switch to the management - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 552
new inband management interfaces, so no additional configuration will be required. IP address and routing management The CP and GE port processor Ethernet interfaces must have IP addresses associated with them. By default, there will be no IP addresses associated with these new Ethernet interfaces - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 553
command. These commands will set the appropriate interface based on the GE port number entered. 1. Connect to the switch and log in as admin. 2. Enter the portCfg inbandmgmt command to configure an IP address to the internal interface on the GE port processor. switch:admin> portcfg inbandmgmt ge0 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 554
destination routes. This ensures that the HP StorageWorks 400 Multi-Protocol Router is not acting as a full IP router between the various subnets. To ensure proper connectivity, routes must be added to each hop along the desired path. Displaying IP routes 1. Connect to the switch and log in as admin - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 555
FIPs mode is enabled. If these devices are configured and you try to enter FIPs mode, an error will occur. You must delete the configuration of these devices prior to entering FIPs mode. Examples of supported configurations The examples below demonstrate how to set up your HP StorageWorks 400 Multi - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 556
can be used on all routes specified for the HP StorageWorks 400 Multi-Protocol Routers. This will ensure that only IP traffic destined for the switch's management addresses are routed to the HP StorageWorks 400 Multi-Protocol Routers and all other IP traffic that may be destined for that subnet will - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 557
6. Configure the Management Station. a. Configure the route going to the 7500 L1 management address. linux> route add -host 10.1.1.10 gw 192.168.3.250 b. Configure the route going to the 7500 R1 management address. linux> route add -host 10.1.2.20 gw 192.168.3.250 Fabric OS 6.2 administrator guide - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 558
554 Inband Management - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 559
normal ISL links including the following: • Coordinated fabric services: The Remote Switch fabric configuration fully supports all fabric services, including distributed name service, registered state change notification, and alias service. • Distributed management: Management tools such as Advanced - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 560
be suppressed throughout the entire Remote Switch fabric. To set the access and reconfigure these parameters: 1. Connect to the switch and log in as admin. 2. Enter the switchDisable command to disable the switch. 3. Enter the configure command. 4. At the Fabric Parameters prompt enter yes. 5. Press - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 561
Index A AAA service requests 83 access active ports 49 browser support 108 changing account parameters 73 CP blade 88 creating accounts 71 deleting accounts 72 full fabric 49 IP address changes 30 log in fails 30 NTP 40 password, changing 32 remote access policies 91 secure, HTTPS 108 secure, SSL - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 562
221, 229 B backbone fabric ID 377 backbone-to-edge routing 372, 377 backing up a configuration 165 base switches about 178 creating 185 basic connections 55 binding user names 321 blades compatibility 275, 278 disabling and enabling 273 displaying slot information 279 enabling exceptions for the FC4 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 563
350 user-defined virtual targets 317 zone configurations 253, 254, 328 zones 246 CSR 109 customizing the switch name 40 D Data Center Fabric Manager 29 date and time 37 DCFM 29 DD. See discovery domains DDSet. See discovery domain sets deactivating Admin Domains 203 TI zones 354 default IP Policy - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 564
495 domain, phantom 374 E edge-to-edge routing 377 effective AD configuration 199 effective zone configuration 236 enabling discovery domain sets 320 port 55 Virtual Fabrics 184 zone configuration 328 zone configurations 255 enabling and disabling ISL trunking 440 encryption 108 end-to-end monitors - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 565
secure 100 filter-based monitors 410 adding 411 deleting 413 restoring configuration 421 saving configuration 421 FIPS certificates, installing 158 firmwareDownload 226 Inband Management 551 LDAP certificates, displaying and deleting 158 firmware download 214 auto-leveling 229 connected switches 216 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 566
302 IQNs, changing prefix 304 IQNs, default prefix 303 IQNs, prefix 303 LUN mapping to iSCSI VTs 302 LUN mapping, advanced 303 LUN mapping, basic 302 network 329 physical interface, enabling 310 port, enabling 310 shared secret setting 307 supported initiators 306 translation 301 virtual initiators - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 567
404 NPIV 10-bit addressing mode 333 configuring 334 disabling 333 enabling 333 fixed addressing mode 333 viewing 335 viewing PID login information 336 NTP access 40 P packet size 311 password 30 boot prom 78 changing 74 changing defaults 32 default 32 limits 32 Fabric OS 6.2 administrator guide 563 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 568
platforms, FC routing supported 367 POD activating 50 activating ports 49 enabling ports 55 full fabric access 49 policies, routing 283 policy account lockout 77 adding members 127 changes, saving 126 creating 125 creating, SCC 125 members, adding 127 members, identifying 118 password expiration 76 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 569
maximum allowed 70 setting changing passwords 32 default zone mode 200 mask for end-to-end monitors 409 PROM password 79, 80 security level 102 switch date and time 37 the IP address 35 time zone 39 time zones 38 traffic prioritization 365 setting chassis configurations 275 setting port speeds 440 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 570
fabrics, about 177 logical ISLs (LISL) 179 logical switch configuration, displaying 187 logical switch to base switch change 187 logical switches, about 173 logical switches, creating 185 logical switches, deleting 186 overview 173 platform services 293 ports, moving 186 restrictions 183 supported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 571
236 schemes 236 soft-zoning 234 splitting a fabric 262 storage-based 234 troubleshooting 262 types 234 viewing 248 viewing configurations 257 zone configuration clearing 258 zone configurations creating 254 deleting 256 disabling 255 enabling 255 removing 255 zone database and Admin Domains - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 572
568 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 573
set configuration example 305 39 HP StorageWorks B-Series iSCSI Director Blade ports 309 40 iSCSI gateway service in an iSCSI FC zone 324 41 iSCSI network with iSNS server and clients 329 42 Traffic Isolation zone creating a dedicated path through the fabric 340 43 Fabric incorrectly configured - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 574
445 77 Trunk group configuration for the HP StorageWorks 8/40 SAN Switch 449 78 Network using FCIP 458 79 Single tunnel, Fastwrite and Tape Pipelining enabled 467 80 Multiple tunnels to multiple ports, Fastwrite and Tape Pipelining enabled on a per-tunnel/per-port basis . . . 468 81 Unsupported - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 575
number of Logical Switches per chassis 183 51 AD user types 194 52 Ports and devices in CLI output 207 53 Admin Domain interaction with Fabric OS features 209 54 Configuration upload and download scenarios in an AD context 212 55 Effects of firmware changes on accounts and passwords 214 56 - HP StorageWorks 8/80 | HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 576
70 HP StorageWorks enterprise-class platform terminology and abbreviations 275 71 Port blades supported by each platform 278 72 LED behavior 281 73 Supported iSCSI initiators 306 74 iSCSI target gateway configuration steps 307 75 Comparison of traffic behavior when failover is enabled or
HP StorageWorks
Fabric OS 6.2 administrator guide
Part number: 5697-0016
Edition: May 2009