Home » HP Manuals » Servers » HP Brocade 8/12c » Manual Viewer

HP Brocade 8/12c Fabric Watch Administrator's Guide v6.4.0 (53-1001770-01, Jun - Page 64

Security monitoring guidelines and default settings, Security class areas

Add to My Manuals
Save this manual to your list of manuals

Page 64 highlights

6 Security monitoring guidelines and default settings Security monitoring guidelines and default settings The Security class monitors all attempts to breach your SAN security, helping you fine-tune your security measures. Security class areas Table 5 lists Product Name areas in the security class and describes what each area indicates. Configure the Security class using the thConfig command. TABLE 5 Security class areas Area Indicates DCC violations HTTP violations Illegal command Incompatible security DB Invalid certificates Login violations No-FCS SCC violations SLAP failures (FCAP failures) Telnet violations TS Out of Sync An unauthorized device attempts to log in to a secure fabric. A browser access request reaches a secure switch from an unauthorized IP address. Commands permitted only to the primary Fibre Channel Switch (FCS) are executed on another switch. Secure switches with different version stamps have been detected. Monitors invalid certificates. Login violations which occur when a secure fabric detects a login failure. The switch has lost contact with the primary FCS. SCC violations which occur when an unauthorized switch tries to join a secure fabric. The WWN of the unauthorized switch appears in the ERRLOG. SLAP failures which occur when packets try to pass from a nonsecure switch to a secure fabric. Telnet violations which occur when a Telnet connection request reaches a secure switch from an unauthorized IP address. Time Server (TS) which occur when an out-of-synchronization error has been detected. Security monitoring setting guidelines Use the Security class default settings for area and notification configuration. There is no reason to alter the default settings. 44 Fabric Watch Administrator's Guide 53-1001770-01

Section	Page
About This Document	15
In this chapter	15
How this document is organized	15
Supported hardware and software	16
What’s new in this document	16
New information	16
Changed information	17
Removed information	17
Document conventions	17
Text formatting	17
Notes, cautions, and warnings	18
Key terms	18
Additional information	18
Other industry resources	19
Getting technical help	19
Document feedback	20
Fabric Watch	21
In this chapter	21
Fabric health	21
Fabric Watch overview	22
Role-based access control	22
Fabric Watch licensing	22
Fabric Watch threshold components	23
Switch monitoring components	23
Fabric events monitoring	23
Performance monitoring	23
Security monitoring	24
SFP monitoring	24
Port monitoring	24
System resource monitoring	26
Threshold monitoring using SNMP tables	27
MIB capability configuration parameters	27
Fabric Watch event settings	27
Types of event behaviors	28
Fabric Watch notification types	29
E-mail alert	29
SNMP traps	29
RASlog (switch event)	30
Locked port log	30
Fabric Watch audit messages	30
Data values	31
Reasons to customize Fabric Watch settings	31
Monitoring	32
Threshold and action configuration	32
Event behavior configuration	32
Time base configuration	32
Alert configuration	33
Post-processing of messages	33
Fabric Watch Thresholds	35
In this chapter	35
Threshold values	35
High and low thresholds	35
Buffer values	35
Time bases	37
Time base set to none	37
Time base set to other than none	37
Threshold triggers	39
Above event trigger	39
Below event trigger	40
Changed event trigger	40
Fabric Watch alarm behavior	41
Fabric Watch Threshold Components	43
In this chapter	43
Fabric Watch classes, areas, and elements	43
Classes	43
Class areas	43
Elements	44
Fabric Watch Activation	47
In this chapter	47
Interfaces for activating Fabric Watch	47
Activating Fabric Watch using a Telnet session	47
Activating Fabric Watch using Web Tools	48
Activating Fabric Watch using SNMP	49
Fabric Watch Configuration	53
In this chapter	53
Fabric Watch configuration tasks	53
Setting Fabric Watch custom and default values	55
E-mail notification configuration	55
Showing e-mail configuration information	55
Disabling an e-mail alert	56
Enabling an e-mail alert	56
Sending a test e-mail message	57
Setting recipient e-mail address for e-mail alert	57
Setting the relay host IP address	58
Displaying the relay host configuration	58
Removing the relay host configuration	58
Notification configuration	59
Configuring alarm notifications	59
Fabric, Security, SFP, and Performance Monitoring	61
In this chapter	61
Fabric monitoring guidelines and default settings	61
Fabric class areas	61
Fabric monitoring setting guidelines	62
Fabric class default settings	63
Security monitoring guidelines and default settings	64
Security class areas	64
Security monitoring setting guidelines	64
Security class default settings	65
SFP monitoring guidelines and default settings	67
SFP class areas	67
SFP monitoring setting guidelines	67
SFP class default settings	68
Performance monitoring guidelines and default settings	69
Performance Monitor class areas	69
Performance monitoring setting guidelines	69
Performance Monitor class default settings	69
Configuration options for thConfig command	71
Customizing thConfig command settings	72
Using the nosave command	72
thConfig command restriction	72
Example of thConfig command	73
Recommended settings for Fabric, SFP, Performance, and Security monitoring	74
Port Monitoring	77
In this chapter	77
Port class areas	77
Port class guidelines and default settings	79
Physical port setting guidelines	79
Port class default settings	79
E_Port subclass setting guidelines	81
E_Port class default settings	82
FOP_Port and FCU_Port subclass setting guidelines	84
FOP_Port and FCU_Port subclass default settings	85
VE_Port class default settings	87
Port configuration	88
Custom port settings	88
Using the nosave command	88
portThConfig command procedures	89
Port type: physical port	89
Port type: E_Port	90
Setting the port persistence time	94
Port fencing	94
Recommended high port fencing thresholds	95
Recommended low port fencing thresholds	95
Port fencing configuration using the portFencing command	95
Port fencing configuration using DCFM	96
Recommended port configuration settings	98
System Monitoring	101
In this chapter	101
Environment monitoring	101
Environment class area	101
Environment monitoring setting guidelines	102
Environment class default settings	102
Resource class settings	104
Resource class area	104
Resource class setting guidelines	104
Resource class default settings	104
System monitoring using the sysMonitor command	105
Canceling sysMonitor command configurations	105
Using the nosave command	105
Environment class settings	106
CPU and memory	107
Recommended environment and resource monitoring settings	108
Switch monitoring	109
Switch status policy planning	109
FRU monitoring	111
FRU class areas	111
Configuring FRUs	111
Specifying triggers for FRU alarms	112
Recommended FRU settings	113
Fabric Watch Reports	115
In this chapter	115
Fabric Watch reports	115
Switch Availability Monitor report	116
Generating a Switch Availability Monitor report	116
Switch Health report	117
Generating a Switch Health report	117
Switch Status Policy report	118
Generating a Switch Status Policy report	118
Port Detail report	119
Generating a Port Detail report	119
In this appendix	121
Port threshold configuration using the fwConfigure command	121
Setting port thresholds using the fwConfigure command	122
Refreshing a threshold configuration	124
Disabling a threshold configuration	124
Enabling a threshold	125
Enabling and disabling all port thresholds	125
Changing the threshold boundary level	126
Configuring port fencing using the fwConfigure command	129
Advanced options using the fwConfigure command	132
Changing the numerical values of notification methods	134