Home » HP Manuals » Servers » HP Brocade 8/12c » Manual Viewer

HP Brocade 8/12c Fabric Watch Administrator's Guide v6.4.0 (53-1001770-01, Jun - Page 65

Security class default settings, Security monitoring guidelines and default settings

Add to My Manuals
Save this manual to your list of manuals

Page 65 highlights

Security monitoring guidelines and default settings 6 Security class default settings Table 6 provides default settings for areas in the Security class. TABLE 6 Security class default settings Area Description Default threshold settings Default alarm settings DCC Violations HTTP Violations Illegal Commands Incompatible Security DB Invalid Certificates Login Violations No FCS Violations SCC Violations SLAP Failures Monitors DCC violations Unit: Violations Time Base: minute Low: 1 High: 4 Buffer: 0 Monitors HTTP violations Unit: Violations Time Base: minute Low: 1 High: 2 Buffer: 0 Monitors illegal commands Unit: Violations Time Base: minute Low: 1 High: 2 Buffer: 0 Monitors incompatible security databases Unit: Violations Time Base: minute Low: 1 High: 2 Buffer: 0 Monitors invalid certificates Unit: Violations Time Base: minute Low: 1 High: 2 Buffer: 0 Monitors login violations Unit: Violations Time Base: minute Low: 1 High: 2 Buffer: 0 Monitors No FCS violations Unit: Violations Time Base: minute Low: 1 High: 2 Buffer: 0 Monitors SCC violations Unit: Violations Time Base: minute Low: 1 High: 2 Buffer: 0 Monitors SLAP failures Unit: Violations Time Base: minute Low: 1 High: 2 Buffer: 0 Changed: 0 Below: 0 Above: 3 In-Between: 0 Changed: 0 Below: 0 Above: 3 In-Between: 0 Changed: 0 Below: 0 Above: 3 In-Between: 0 Changed: 0 Below: 0 Above: 3 In-Between: 0 Changed: 0 Below: 0 Above: 3 In-Between: 0 Changed: 0 Below: 0 Above: 3 In-Between: 0 Changed: 0 Below: 0 Above: 3 In-Between: 0 Changed: 0 Below: 0 Above: 3 In-Between: 0 Changed: 0 Below: 0 Above: 3 In-Between: 0 Threshold state Informative Informative Out_of_range In_range Informative Informative Out_of_range In_range Informative Informative Out_of_range In_range Informative Informative Out_of_range In_range Informative Informative Out_of_range In_range Informative Informative Out_of_range In_range Informative Informative Out_of_range In_range Informative Informative Out_of_range In_range Informative Informative Out_of_range In_range Fabric Watch Administrator's Guide 45 53-1001770-01

Section	Page
About This Document	15
In this chapter	15
How this document is organized	15
Supported hardware and software	16
What’s new in this document	16
New information	16
Changed information	17
Removed information	17
Document conventions	17
Text formatting	17
Notes, cautions, and warnings	18
Key terms	18
Additional information	18
Other industry resources	19
Getting technical help	19
Document feedback	20
Fabric Watch	21
In this chapter	21
Fabric health	21
Fabric Watch overview	22
Role-based access control	22
Fabric Watch licensing	22
Fabric Watch threshold components	23
Switch monitoring components	23
Fabric events monitoring	23
Performance monitoring	23
Security monitoring	24
SFP monitoring	24
Port monitoring	24
System resource monitoring	26
Threshold monitoring using SNMP tables	27
MIB capability configuration parameters	27
Fabric Watch event settings	27
Types of event behaviors	28
Fabric Watch notification types	29
E-mail alert	29
SNMP traps	29
RASlog (switch event)	30
Locked port log	30
Fabric Watch audit messages	30
Data values	31
Reasons to customize Fabric Watch settings	31
Monitoring	32
Threshold and action configuration	32
Event behavior configuration	32
Time base configuration	32
Alert configuration	33
Post-processing of messages	33
Fabric Watch Thresholds	35
In this chapter	35
Threshold values	35
High and low thresholds	35
Buffer values	35
Time bases	37
Time base set to none	37
Time base set to other than none	37
Threshold triggers	39
Above event trigger	39
Below event trigger	40
Changed event trigger	40
Fabric Watch alarm behavior	41
Fabric Watch Threshold Components	43
In this chapter	43
Fabric Watch classes, areas, and elements	43
Classes	43
Class areas	43
Elements	44
Fabric Watch Activation	47
In this chapter	47
Interfaces for activating Fabric Watch	47
Activating Fabric Watch using a Telnet session	47
Activating Fabric Watch using Web Tools	48
Activating Fabric Watch using SNMP	49
Fabric Watch Configuration	53
In this chapter	53
Fabric Watch configuration tasks	53
Setting Fabric Watch custom and default values	55
E-mail notification configuration	55
Showing e-mail configuration information	55
Disabling an e-mail alert	56
Enabling an e-mail alert	56
Sending a test e-mail message	57
Setting recipient e-mail address for e-mail alert	57
Setting the relay host IP address	58
Displaying the relay host configuration	58
Removing the relay host configuration	58
Notification configuration	59
Configuring alarm notifications	59
Fabric, Security, SFP, and Performance Monitoring	61
In this chapter	61
Fabric monitoring guidelines and default settings	61
Fabric class areas	61
Fabric monitoring setting guidelines	62
Fabric class default settings	63
Security monitoring guidelines and default settings	64
Security class areas	64
Security monitoring setting guidelines	64
Security class default settings	65
SFP monitoring guidelines and default settings	67
SFP class areas	67
SFP monitoring setting guidelines	67
SFP class default settings	68
Performance monitoring guidelines and default settings	69
Performance Monitor class areas	69
Performance monitoring setting guidelines	69
Performance Monitor class default settings	69
Configuration options for thConfig command	71
Customizing thConfig command settings	72
Using the nosave command	72
thConfig command restriction	72
Example of thConfig command	73
Recommended settings for Fabric, SFP, Performance, and Security monitoring	74
Port Monitoring	77
In this chapter	77
Port class areas	77
Port class guidelines and default settings	79
Physical port setting guidelines	79
Port class default settings	79
E_Port subclass setting guidelines	81
E_Port class default settings	82
FOP_Port and FCU_Port subclass setting guidelines	84
FOP_Port and FCU_Port subclass default settings	85
VE_Port class default settings	87
Port configuration	88
Custom port settings	88
Using the nosave command	88
portThConfig command procedures	89
Port type: physical port	89
Port type: E_Port	90
Setting the port persistence time	94
Port fencing	94
Recommended high port fencing thresholds	95
Recommended low port fencing thresholds	95
Port fencing configuration using the portFencing command	95
Port fencing configuration using DCFM	96
Recommended port configuration settings	98
System Monitoring	101
In this chapter	101
Environment monitoring	101
Environment class area	101
Environment monitoring setting guidelines	102
Environment class default settings	102
Resource class settings	104
Resource class area	104
Resource class setting guidelines	104
Resource class default settings	104
System monitoring using the sysMonitor command	105
Canceling sysMonitor command configurations	105
Using the nosave command	105
Environment class settings	106
CPU and memory	107
Recommended environment and resource monitoring settings	108
Switch monitoring	109
Switch status policy planning	109
FRU monitoring	111
FRU class areas	111
Configuring FRUs	111
Specifying triggers for FRU alarms	112
Recommended FRU settings	113
Fabric Watch Reports	115
In this chapter	115
Fabric Watch reports	115
Switch Availability Monitor report	116
Generating a Switch Availability Monitor report	116
Switch Health report	117
Generating a Switch Health report	117
Switch Status Policy report	118
Generating a Switch Status Policy report	118
Port Detail report	119
Generating a Port Detail report	119
In this appendix	121
Port threshold configuration using the fwConfigure command	121
Setting port thresholds using the fwConfigure command	122
Refreshing a threshold configuration	124
Disabling a threshold configuration	124
Enabling a threshold	125
Enabling and disabling all port thresholds	125
Changing the threshold boundary level	126
Configuring port fencing using the fwConfigure command	129
Advanced options using the fwConfigure command	132
Changing the numerical values of notification methods	134

Match case Limit results 1 per page

Fabric Watch Administrator’s Guide

53-1001770-01

Security monitoring guidelines and default settings

Security class default settings

Table 6

provides default settings for areas in the Security class.

TABLE 6

Security class default settings

Area

Description

Default threshold

settings

Default alarm

settings

Threshold state

DCC Violations

Monitors DCC

violations

Unit: Violations

Time Base: minute

Low: 1

High: 4

Buffer: 0

Changed: 0

Below: 0

Above: 3

In-Between: 0

Informative

Out_of_range

In_range

HTTP Violations

Monitors HTTP

violations

Unit: Violations

Time Base: minute

Low: 1

High: 2

Buffer: 0

Changed: 0

Below: 0

Above: 3

In-Between: 0

Informative

Out_of_range

In_range

Illegal Commands

Monitors illegal

commands

Unit: Violations

Time Base: minute

Low: 1

High: 2

Buffer: 0

Changed: 0

Below: 0

Above: 3

In-Between: 0

Informative

Out_of_range

In_range

Incompatible Security

Monitors

incompatible security

databases

Unit: Violations

Time Base: minute

Low: 1

High: 2

Buffer: 0

Changed: 0

Below: 0

Above: 3

In-Between: 0

Informative

Out_of_range

In_range

Invalid Certificates

Monitors invalid

certificates

Unit: Violations

Time Base: minute

Low: 1

High: 2

Buffer: 0

Changed: 0

Below: 0

Above: 3

In-Between: 0

Informative

Out_of_range

In_range

Monitors login

violations

Unit: Violations

Time Base: minute

Low: 1

High: 2

Buffer: 0

Changed: 0

Below: 0

Above: 3

In-Between: 0

Informative

Out_of_range

In_range

No FCS Violations

Monitors No FCS

violations

Unit: Violations

Time Base: minute

Low: 1

High: 2

Buffer: 0

Changed: 0

Below: 0

Above: 3

In-Between: 0

Informative

Out_of_range

In_range

SCC Violations

Monitors SCC

violations

Unit: Violations

Time Base: minute

Low: 1

High: 2

Buffer: 0

Changed: 0

Below: 0

Above: 3

In-Between: 0

Informative

Out_of_range

In_range

SLAP Failures

Monitors SLAP

failures

Unit: Violations

Time Base: minute

Low: 1

High: 2

Buffer: 0

Changed: 0

Below: 0

Above: 3

In-Between: 0

Informative

Out_of_range

In_range