Home » HP Manuals » Servers » HP Brocade 8/12c » Manual Viewer

HP Brocade 8/12c Brocade Network Advisor SAN User Manual v11.1x (53-1002167-01 - Page 473

Encryption user privileges

Add to My Manuals
Save this manual to your list of manuals

Page 473 highlights

Encryption user privileges 18 Encryption user privileges In the Management application, resource groups are assigned privileges, roles, and fabrics. Privileges are not directly assigned to users; users get privileges because they belong to a role in a resource group. A user can only belong to one resource group at a time. The Management application provides three pre-configured roles: • Storage encryption configuration. • Storage encryption key operations. • Storage encryption security. Table 33 lists the associated roles and their read/write access to specific operations. The functions are enabled from the Encryption Center dialog box: Brocade Network Advisor SAN User Manual 429 53-1002167-01

Section	Page
Contents	3
About This Document	35
Getting Started	45
In this chapter	45
User interface components	45
Dashboard tab	47
SAN tab	52
Icon legend	61
SAN product icons	61
Host product icons	62
SAN group icons	63
Host group icons	63
SAN port icons	63
SAN product status icons	64
Event icons	65
Management server and client	66
Logging into a server	71
Launching a remote client	71
Clearing previous versions of the remote client	72
Launching the Configuration Wizard	72
Changing the database user password	76
Viewing active sessions	77
Disconnecting users	77
Viewing server properties	78
Viewing port status	78
Supported open source software products	79
SAN feature-to-firmware requirements	82
Accessibility features for the Management application	84
Keyboard shortcuts	84
Look and Feel	85
Setting the look and feel	85
Licenses	87
In this chapter	87
Overview	87
Managed count	88
Managed SAN port count calculation	88
Entering the license key	88
Upgrading the application	89
Discovery	91
In this chapter	91
SAN discovery overview	91
FCS policy and seed switches	92
Discovering fabrics	93
Editing the password for multiple devices	97
Configuring SNMP credentials	98
Reverting to a default SNMP community string	99
Removing a fabric from active discovery	99
Rediscovering a previously discovered fabric	100
Deleting a fabric	100
Viewing the fabric discovery state	100
Troubleshooting fabric discovery	101
M-EOSn discovery troubleshooting	102
Virtual Fabric discovery troubleshooting	103
SAN Fabric monitoring	104
Monitoring discovered fabrics	105
Stop monitoring of a discovered fabric	105
SAN Seed switch	106
Seed switch requirements	107
Seed switch failover	108
Changing the seed switch	109
Host discovery	110
Discovering Hosts by Network address or host name	110
Importing Hosts from a CSV file	112
Importing Hosts from a Fabric	113
Importing Hosts from a VM manager	115
Editing Host adapter credentials	116
Removing a host from active discovery	116
Rediscovering a previously discovered fabric	117
Deleting a host adapter from discovery	117
Viewing the host discovery state	118
Troubleshooting host discovery	118
VM Manager Discovery	119
Discovering a VM manager	119
Editing a VM manager	121
Excluding a host from VM manager discovery	121
Including a host in VM manager discovery	122
Removing a VM manager from active discovery	122
Rediscovering a previously discovered VM manager	122
Deleting a VM manager from discovery	123
Viewing the VM manager discovery state	123
Troubleshooting VM manager discovery	124
Application Configuration	125
In this chapter	125
Server Data backup	126
What is backed up?	126
Management server backup	126
Configuring backup to a writable CD	127
Configuring backup to a hard drive	128
Configuring backup to a network drive	129
Enabling backup	131
Disabling backup	131
Viewing the backup status	131
Changing the backup interval	132
Starting immediate backup	132
Reviewing backup events	133
Server Data restore	133
Restoring data	134
Restoring data to a new server	134
SAN Display	135
Setting your FICON display	135
Resetting your display	136
SAN End node display	137
Displaying end nodes	137
SAN Ethernet loss events	138
Enabling SAN Ethernet loss events	138
Disabling SAN Ethernet loss events	138
Event storage	139
Configuring event storage	139
Storing historical events purged from repository	140
Flyovers	140
Configuring flyovers	140
Turning flyovers on or off	143
Viewing flyovers	143
SAN Names	143
Setting names to be unique	144
Setting names to be non-unique	145
Fixing duplicate names	145
Viewing names	146
Adding a name to an existing device	146
Adding a name to a new device	147
Applying a name to a detached WWN	147
Removing a name from a device	148
Editing names	148
Exporting names	148
Importing Names	149
Searching for a device by name	149
Searching for a device by WWN	150
Security	151
Configuring the server name	151
Setting the CHAP secret	152
Configuring login security	152
Configuring the login banner display	153
Disabling the login banner	153
Syslog Registration	154
Registering a server as a Syslog recipient automatically	154
Configuring the Syslog listing port number	154
SNMP Trap Registration	155
Registering a server as a SNMP trap recipient automatically	155
Configuring the SNMP trap listing port number	155
SNMP Trap Forwarding Credentials	156
Configuring SNMP v1 and v2c credentials	156
Configuring SNMP v3 credentials	156
Software Configuration	157
Client export port	157
Configuring the client export port	157
Client/Server IP	159
Memory allocation	163
Configuring memory allocation settings	163
Product communication	166
Configuring SAN communication	166
FTP/SCP	167
Accessing the FTP server folder	167
Server port	171
Configuring the server port	171
Support mode	172
Configuring support mode settings	172
Fabric tracking	174
Enabling fabric tracking	174
Disabling fabric tracking	175
Accepting changes for a fabric	175
Accepting changes for all fabrics	176
Accepting changes for a switch, access gateway, or phantom domain	176
User Account Management	179
In this chapter	179
Users overview	179
Configuration requirements	179
User accounts	180
Creating a new user account	180
Copying a user account	181
Editing a user account	182
Assigning roles and areas of responsibility to a user account	183
Removing roles and areas of responsibility to a user account	183
Disabling a user account	184
Enabling a user account	184
Deleting a user account	185
Unlocking a user account	185
Password policies	186
Configuring a password policy	186
Viewing password policy violators	188
User profiles	188
Viewing your user profile	189
Editing your user profile	189
Changing your password	190
Viewing your password policy	190
Resetting optional messages	191
Configuring e-mail notification	191
Roles	192
Creating a new role	192
Adding privileges to a role	192
Removing privileges from a role	193
Copying a role	194
Editing a role	194
Deleting a role	195
Areas of responsibility	195
Creating an AOR	195
Assigning products to an AOR	196
Removing products from an AOR	196
Copying an AOR	197
Editing an AOR	197
Deleting an AOR	198
LDAP authorization	198
Loading an Active Directory group	198
Assigning roles and AORs to an Active Directory group	199
Removing roles and AORs from an Active Directory group	199
Deleting an Active Directory group	200
Call Home	201
In this chapter	201
About call home	202
System requirements	203
Showing a call home center	204
Hiding a call home center	205
Editing a call home center	205
Editing the Brocade International or IBM call home center	205
Editing the Brocade North America call home center	207
Editing an E-mail call home center	208
Editing the EMC call home center	209
Editing the HP LAN call home center	210
Enabling a call home center	211
Enabling support save	211
Testing the call home center connection	212
Disabling a call home center	212
Viewing Call Home status	213
Assigning a device to the call home center	214
Removing a device from a call home center	214
Removing all devices and filters from a call home center	215
Defining an event filter	215
Call Home for virtual switches	215
Assigning an event filter to a call home center	216
Assigning an event filter to a device	216
Overwriting an assigned event filter	217
Removing an event filter from a call home center	217
Removing an event filter from a device	218
Removing an event filter from the Call Home Event Filters table	218
Searching for an assigned Event Filter	218
View Management	219
In this chapter	219
View management overview	219
Creating a customized view	220
Editing a customized view	221
Deleting a customized view	223
Copying a view	223
SAN topology layout	224
Customizing the layout of devices on the topology	225
Customizing the layout of connections on the topology	226
Changing a group background color	226
Reverting to the default background color	227
Changing the product label	227
Changing the port label	228
Changing the port display	228
Grouping on the topology	229
Collapsing groups	229
Expanding groups	229
Viewing connections	229
Configuring custom connections	230
Saving a custom connection configuration	230
Deleting a custom connection configuration	231
Customizing the main window	231
Zooming in and out of the Connectivity Map	231
Zooming in	231
Zooming out	232
Showing levels of detail on the Connectivity Map	232
Viewing fabrics	232
Viewing groups	232
Viewing products	232
Viewing ports	232
Exporting the topology	232
Customizing application tables	233
Changing the order of columns	234
Resizing the columns	235
Sorting table information	235
Search	236
Searching for a device	237
Restricting a search by node	237
Searching for an exact match	238
Clearing search results	238
Third-party tools	239
In this chapter	239
About third-party tools	239
Starting third-party tools from the application	240
Launching a Telnet session	240
Launching an Telnet session from the SAN tab	240
Launching an Element Manager	241
Launching Web Tools	242
Launching FCR configuration	243
Launching Name Server	244
Launching HCM Agent	245
Launching Fabric Watch	246
Adding a tool	247
Entering the server IP address of a tool	248
Adding an option to the Tools menu	248
Changing an option on the Tools menu	250
Removing an option from the Tools menu	250
Adding an option to a device’s shortcut menu	251
Changing an option on a device’s shortcut menu	252
Removing an option from a device’s shortcut menu	253
Microsoft System Center Operations Manager (SCOM) plug-in	253
SCOM plug-in requirements	254
Registering a SCOM server	254
Editing a SCOM server	255
Removing a SCOM server	255
Server Management Console	257
In this chapter	257
Server Management Console overview	257
Launching the SMC on Windows	257
Launching the SMC on Linux	258
Services	258
Monitoring and managing Management application services	258
Refreshing the server status	259
Stopping all services	259
Stopping the CIMOM services	259
Starting all services	260
Restarting all services	260
Changing server port numbers	261
AAA Settings	261
Configuring a Radius server	261
Configuring an LDAP server	264
Configuring a TACACS+ server	266
Configuring switch authentication	267
Configuring Windows authentication	268
Configuring local database authentication	268
Displaying the client authentication audit trail	269
Restoring the database	269
Capturing technical support information	271
Upgrading HCM on the Management server	272
Defining the performance data aging interval	273
SMI Agent configuration	274
Launching the SMIA configuration tool on Windows	274
Launching the SMIA configuration tool on Unix	275
Launching a remote SMIA configuration tool	276
Service Location Protocol (SLP) support	276
SLP support includes the following components:	277
Home tab	280
Accessing Management application features	281
Authentication	281
Enabling or disabling CIM client and indication mutual authentication	281
CIMOM configuration	283
Configuring the SMI Agent port number	284
Certificate management	287
Importing a certificate	287
Viewing the configuration summary	289
SAN Device Configuration	293
In this chapter	293
Configuration repository management	293
Saving switch configurations	294
Restoring a switch configuration for a selected device	295
Backing up a switch configuration	296
Restoring a configuration from the repository	298
Viewing configuration file content	299
Searching the configuration file content	300
Deleting a configuration	301
Exporting a configuration	301
Importing a configuration	301
Keeping a copy past the defined age limit	302
Replicating configurations	302
Replicating security configurations	302
Enhanced group management	303
Firmware management	303
Displaying the firmware repository	304
Importing a firmware file and release notes	305
Deleting a firmware file	305
Download firmware	306
Properties	308
Viewing Fabric properties	308
Viewing device properties	309
Adding a property label	312
Editing a property label	312
Deleting a property label	313
Editing a property field	313
Ports	314
Viewing port connectivity	314
Refreshing the port connectivity view	317
Enabling a port	317
Disabling a port	317
Filtering port connectivity	318
Enabling the filter	319
Disabling the filter	319
Viewing port details	319
Viewing ports and port properties	320
Port types	323
Showing connected ports	323
Viewing port connection properties	324
Determining inactive iSCSI devices	327
Determining port status	327
Viewing port optics	328
Port Auto Disable	330
Viewing the port auto disable status	331
Configuring port auto disable triggers	332
Enabling port auto disable on individual ports	333
Enabling port auto disable on all ports on a device	334
Disabling port auto disable on individual ports	334
Disabling port auto disable on all ports on a device	335
Unblocking ports	336
Host Port Mapping	337
In this chapter	337
Host port mapping overview	337
Creating a new Host	338
Renaming an HBA Host	338
Deleting an HBA Host	339
Viewing Host properties	339
Associating an HBA with a Host	339
Importing HBA-to-Host mapping	340
Removing an HBA from a Host	341
Exporting Host port mapping	341
Storage Port Mapping	343
In this chapter	343
Storage port mapping overview	343
Creating a storage array	344
Adding storage ports to a storage array	344
Unassigning a storage port from a storage array	345
Reassigning mapped storage ports	345
Editing storage array properties	346
Deleting a storage array	346
Viewing storage port properties	347
Viewing storage array properties	347
Importing storage port mapping	348
Exporting storage port mapping	349
Host management	351
In this chapter	351
Host management	351
HCM software	352
HCM features	352
Host bus adapters	353
Converged network adapters	354
Fabric adapters	355
Host adapter discovery	355
Connectivity map	356
View management	356
Host port mapping	356
Adapter software	358
Driver repository	359
Boot Image Repository	360
Role-based access control	363
Host adapter management privileges	363
Host adapter administrator privileges	363
Host performance management	364
Host security authentication	365
Configuring security authentication using the Management application	365
supportSave on adapters	366
Host fault management	367
Adapter events	367
Event actions	367
Filtering event notifications	367
Syslog forwarding	368
Backup support	368
Configuring backup to a hard drive	368
Enabling backup	369
Disabling backup	369
Adapter port WWN virtualization	370
Configuring fabric-assigned port WWNs on switch ports	370
Configuring Fabric Assigned WWNs on attached AG ports	373
VM Manager	375
Adding a VM Manager	375
Editing VM Manager	376
Deleting VM Manager	376
Fibre Channel over Ethernet	377
In this chapter	377
FCoE overview	377
DCB exchange protocol	378
Enhanced Ethernet features	378
Enhanced transmission selection	378
Priority-based flow control	378
Ethernet jumbo frames	379
FCoE protocols supported	379
Ethernet link layer protocols supported	379
FCoE protocols	379
FCoE Licensing	380
Save running to startup	380
Copying switch configurations to selected switches	380
DCB configuration	381
Switch policies	382
DCB map and Traffic Class map	382
LLDP profiles	382
802.1x policy	382
Opening the DCB Configuration dialog box	383
Minimum DCB configuration for FCoE traffic	383
Adding a LAG	388
Editing a DCB switch	390
Editing a DCB port	391
Editing a LAG	393
Enabling a DCB port or LAG	395
Deleting a LAG	395
QoS configuration	396
Enhanced Transmission Selection	396
Priority-based flow control	396
Creating a DCB map	397
Editing a DCB map	398
Deleting a DCB map	399
Assigning a DCB map to a port or link aggregation group	400
Creating a traffic class map	401
Editing a traffic class map	401
Deleting a traffic class map	402
Assigning a traffic class map to a port or link aggregation group	402
FCoE provisioning	403
Changing the VLAN ID on the default FCoE map	404
Enabling or disabling the FCoE map on the port	405
VLAN classifier configuration	406
Adding a VLAN classifier rule	406
Editing a VLAN classifier rule	408
Deleting a VLAN classifier rule	408
Creating a VLAN classifier group	409