HP StorageWorks 8/80 HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 456

Enabling the DCC policy on a Trunk Area, Disabling F_Port trunking, F_Port Trunking monitoring

Page 456 highlights

36 36 id N4 Online 37 37 id N4 Online 38 38 id N4 Online 39 39 id N4 Online 5. Display TA-enabled port configuration: F-Port 2 NPIV public (Trunk master) F-Port (Trunk port, master is Port 36 ) F-Port (Trunk port, master is Port 36 ) F-Port (Trunk port, master is Port 36 ) switch:admin> porttrunkarea --show enabled Port Type State Master TA DA 36 F-port Master 36 37 36 37 F-port Slave 36 37 37 38 F-port Slave 36 37 38 39 F-port Slave 36 37 39 6. Display the trunking information: For example, to display trunk details for a user-assigned TA 37 that includes ports 36-39: switch:admin> porttrunkarea --show trunk Trunk Area 37: 36->23 sp: 4.000G bw: 16.000G deskew 16 MASTER 39->22 sp: 4.000G bw: 4.000G deskew 15 38->21 sp: 4.000G bw: 4.000G deskew 16 37->20 sp: 4.000G bw: 4.000G deskew 16 Enabling the DCC policy on a Trunk Area After you assign a Trunk Area, the portTrunkArea CLI checks whether there are any active DCC policies on the port with the index TA, and then issues a warning to add all the device WWNs to the existing DCC policy with index as TA. All DCC policies that see an Index that no longer exists will not be in effect. 1. Add the WWN of all the devices to the DCC policy against the TA. 2. Enter the secPolicyActivate command to activate the DCC policy. You must enable the TA before issuing the secPolicyActivate command in order for security to enforce the DCC policy on the trunk ports. 3. Turn on the trunk ports. Trunk ports should be turned on after issuing the secPolicyActivate command to prevent the ports from becoming disabled in the case where there is a DCC security policy violation. Disabling F_Port trunking 1. Connect to the switch and log in using an account assigned to the admin role. 2. Enter the portTrunkArea --disable command. This command does not unassign a TA if its previously assigned Area_ID is the same address identifier (Area_ID) of the TA unless all the ports in the trunk group are specified to be unassigned. switch:admin> porttrunkarea --disable 36-39 ERROR: port 36 has to be disabled Disable each port prior to removing ports from the TA. Then reenter the command: switch:admin> porttrunkarea --disable 36-39 Trunk area 37 disabled for ports 36, 37, 38 and 39. F_Port Trunking monitoring For F_Port masterless trunking, you must install Filter, EE, or TT monitors on the F_Port trunk port. Whenever the master port changes, you must move the monitor to the new master port. For example, if a master port goes down, a new master is selected from the remaining slave ports. APM must delete the monitor from the 452 Administering ISL trunking

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457
  • 458
  • 459
  • 460
  • 461
  • 462
  • 463
  • 464
  • 465
  • 466
  • 467
  • 468
  • 469
  • 470
  • 471
  • 472
  • 473
  • 474
  • 475
  • 476
  • 477
  • 478
  • 479
  • 480
  • 481
  • 482
  • 483
  • 484
  • 485
  • 486
  • 487
  • 488
  • 489
  • 490
  • 491
  • 492
  • 493
  • 494
  • 495
  • 496
  • 497
  • 498
  • 499
  • 500
  • 501
  • 502
  • 503
  • 504
  • 505
  • 506
  • 507
  • 508
  • 509
  • 510
  • 511
  • 512
  • 513
  • 514
  • 515
  • 516
  • 517
  • 518
  • 519
  • 520
  • 521
  • 522
  • 523
  • 524
  • 525
  • 526
  • 527
  • 528
  • 529
  • 530
  • 531
  • 532
  • 533
  • 534
  • 535
  • 536
  • 537
  • 538
  • 539
  • 540
  • 541
  • 542
  • 543
  • 544
  • 545
  • 546
  • 547
  • 548
  • 549
  • 550
  • 551
  • 552
  • 553
  • 554
  • 555
  • 556
  • 557
  • 558
  • 559
  • 560
  • 561
  • 562
  • 563
  • 564
  • 565
  • 566
  • 567
  • 568
  • 569
  • 570
  • 571
  • 572
  • 573
  • 574
  • 575
  • 576

452
Administering ISL trunking
36
36
id
N4
Online
F-Port
2 NPIV public (Trunk master)
37
37
id
N4
Online
F-Port (Trunk port, master is Port 36 )
38
38
id
N4
Online
F-Port (Trunk port, master is Port 36 )
39
39
id
N4
Online
F-Port (Trunk port, master is Port 36 )
5.
Display TA-enabled port configuration:
switch:admin>
porttrunkarea
--show enabled
Port
Type
State
Master
TA
DA
-------------------------------------
36
F-port
Master
36
37
36
37
F-port
Slave
36
37
37
38
F-port
Slave
36
37
38
39
F-port
Slave
36
37
39
6.
Display the trunking information:
For example, to display trunk details for a user-assigned TA 37 that includes ports 36-39:
switch:admin>
porttrunkarea
--show trunk
Trunk Area
37: 36->23
sp:
4.000G bw: 16.000G deskew 16 MASTER
39->22
sp:
4.000G bw:
4.000G deskew 15
38->21
sp:
4.000G bw:
4.000G deskew 16
37->20
sp:
4.000G bw:
4.000G deskew 16
Enabling the DCC policy on a Trunk Area
After you assign a Trunk Area, the
portTrunkArea
CLI checks whether there are any active DCC policies
on the port with the index TA, and then issues a warning to add all the device WWNs to the existing DCC
policy with index as TA.
All DCC policies that see an Index that no longer exists will not be in effect.
1.
Add the WWN of all the devices to the DCC policy against the TA.
2.
Enter the
secPolicyActivate
command to activate the DCC policy.
You must enable the TA before issuing the
secPolicyActivate
command in order for security to
enforce the DCC policy on the trunk ports.
3.
Turn on the trunk ports.
Trunk ports should be turned on after issuing the
secPolicyActivate
command to prevent the ports
from becoming disabled in the case where there is a DCC security policy violation.
Disabling F_Port trunking
1.
Connect to the switch and log in using an account assigned to the admin role.
2.
Enter the
portTrunkArea --disable
command
.
This command does not unassign a TA if its previously assigned Area_ID is the same address identifier
(Area_ID) of the TA unless all the ports in the trunk group are specified to be unassigned.
switch:admin>
porttrunkarea
--disable 36-39
ERROR: port 36 has to be disabled
Disable each port prior to removing ports from the TA. Then reenter the command:
switch:admin>
porttrunkarea
--disable 36-39
Trunk area 37 disabled for ports 36, 37, 38 and 39.
F_Port Trunking monitoring
For F_Port masterless trunking, you must install Filter, EE, or TT monitors on the F_Port trunk port. Whenever
the master port changes, you must move the monitor to the new master port. For example, if a master port
goes down, a new master is selected from the remaining slave ports. APM must delete the monitor from the