Home » HP Manuals » Storage Devices » HP SN3000B » Manual Viewer

HP SN3000B Brocade Fabric OS Administrator's Guide - Supporting Fabric OS v7.0 - Page 234

Firmware download on switches, Switch firmware download process overview

Add to My Manuals
Save this manual to your list of manuals

Page 234 highlights

9 Firmware download on switches Firmware download on switches Brocade fixed-port switches maintain primary and secondary partitions for firmware. The firmwareDownload command defaults to an autocommit option that automatically copies the firmware from one partition to the other. NOTE This section only applies when upgrading from Fabric OS v6.1.x to v6.2.0, or from different versions of v6.2.0, such as patch releases. If you are downgrading from v6.2.0 to v6.1.x, you must enter the firmwareDownload -s command as described in "Test and restore firmware on switches" on page 204. This is not necessary when downgrading from Fabric OS v6.3.0 to v6.2.0 or from Fabric OS v6.4.0 to v6.3.0. Do not override autocommit under normal circumstances; use the default. See "Test and restore firmware on Backbones" on page 206 for details about overriding the autocommit option. Switch firmware download process overview The following list describes the default behavior after you enter the firmwareDownload command (without options) on Brocade fixed-port switches: • The Fabric OS downloads the firmware to the secondary partition. • The system performs a high-availability reboot (haReboot). After the haReboot, the former secondary partition is the primary partition. • The system replicates the firmware from the primary to the secondary partition. The upgrade process first downloads and then commits the firmware to the switch. While the upgrade is proceeding, you can start a session on the switch and use the firmwareDownloadStatus command to observe the upgrade progress if you wish. CAUTION After you start the process, do not enter any disruptive commands (such as reboot) that interrupt the process. The entire firmware download and commit process takes approximately 17 minutes. If there is a problem, wait for the time-out (30 minutes for network problems) before issuing the firmwareDownload command again. Disrupting the process can render the switch inoperable and require you to seek help from your switch service provider. Do not disconnect the switch from power during the process. The switch could be inoperable when rebooted. Upgrading firmware for Brocade fixed-port switches 1. Take the following appropriate action based on what service you are using: • If you are using FTP, SFTP, or SCP, verify that the FTP or SSH server is running on the host server and that you have a valid user ID and password on that server. • If your platform supports a USB memory device, verify that it is connected and running. 196 Fabric OS Administrator's Guide 53-1002446-01

Section	Page
Contents	3
Figures	23
Tables	27
About This Document	31
In this chapter	31
How this document is organized	31
Supported hardware and software	32
What’s new in this document	33
Document conventions	34
Text formatting	34
Command syntax conventions	34
Notes, cautions, and warnings	34
Key terms	35
Notice to the reader	35
Additional information	36
Brocade resources	36
Other industry resources	36
Getting technical help	36
Document feedback	37
Understanding Fibre Channel Services	41
In this chapter	41
Fibre Channel services overview	41
Management server	42
Platform services	42
Platform services and Virtual Fabrics	43
Enabling platform services	43
Disabling platform services	43
Management server database	44
Displaying the management server ACL	44
Adding a member to the ACL	44
Deleting a member from the ACL	45
Viewing the contents of the management server database	46
Clearing the management server database	47
Topology discovery	47
Displaying topology discovery status	47
Enabling topology discovery	47
Disabling topology discovery	48
Device login	48
Principal switch	49
E_Port login	49
Fabric login	49
Port login process	49
RSCNs	50
Duplicate Port World Wide Name	51
High availability of daemon processes	51
Performing Basic Configuration Tasks	53
In this chapter	53
Fabric OS overview	53
Fabric OS command line interface	54
Console sessions using the serial port	54
Telnet or SSH sessions	55
Getting help on a command	56
Password modification	57
Default account passwords	57
The Ethernet interface on your switch	58
Virtual Fabrics and the Ethernet interface	58
Displaying the network interface settings	59
Static Ethernet addresses	60
DHCP activation	61
IPv6 autoconfiguration	62
Date and time settings	63
Setting the date and time	63
Time zone settings	64
Network time protocol	65
Domain IDs	66
Displaying the domain IDs	67
Setting the domain ID	67
Switch names	68
Customizing the switch name	68
Chassis names	68
Customizing chassis names	68
Fabric name	69
Configuring the fabric name	69
High availability considerations for fabric names	69
Upgrade and downgrade considerations for fabric names	69
Config file upload and download considerations for fabric names	69
Switch activation and deactivation	70
Disabling a switch	70
Enabling a switch	70
Switch and Backbone shutdown	70
Powering off a Brocade switch	70
Powering off a Brocade Backbone	71
Basic connections	71
Device connection	71
Switch connection	72
Performing Advanced Configuration Tasks	73
In this chapter	73
PIDs and PID binding overview	73
Core PID addressing mode	74
Fixed addressing mode	74
10-bit addressing mode	74
256-area addressing mode	75
WWN-based PID assignment	75
Ports	77
Setting port names	78
Port identification by slot and port number	78
Port identification by port area ID	78
Port identification by index	79
Swapping port area IDs	79
Port activation and deactivation	80
Port decommissioning	81
Setting port speeds	81
Setting the same speed for all ports on the switch	81
Setting port speed for a port octet	82
Blade terminology and compatibility	82
CP blades	85
Core blades	85
Port and application blade compatibility	85
FX8-24 compatibility notes	86
Enabling and disabling blades	86
Enabling blades	87
Disabling blades	88
Blade swapping	88
How blades are swapped	89
Swapping blades	90
Power management	91
Powering off a port blade	91
Powering on a port blade	91
Equipment status	92
Checking switch operation	92
Verifying High Availability features (Backbones only)	92
Verifying fabric connectivity	93
Verifying device connectivity	93
Track and control switch changes	93
Enabling the track changes feature	94
Displaying the status of the track changes feature	94
Viewing the switch status policy threshold values	94
Setting the switch status policy threshold values	95
Audit log configuration	96
Verifying host syslog prior to configuring the audit log	97
Configuring an audit log for specific event classes	97
Configuring FLOGI-time handling of duplicate PWWN	98
Setting the behavior for handling duplicate PWWNs	99
Routing Traffic	101
In this chapter	101
Routing overview	101
Paths and route selection	102
FSPF	102
Fibre Channel NAT	103
Inter-switch links	104
Buffer credits	105
Virtual channels	105
Gateway links	106
Configuring a link through a gateway	107
Routing policies	108
Displaying the current routing policy	108
Exchange-based routing	109
Port-based routing	109
AP route policy	109
Route selection	110
Dynamic Load Sharing	111
Frame order delivery	112
Forcing in-order frame delivery across topology changes	112
Restoring out-of-order frame delivery across topology changes	112
Lossless Dynamic Load Sharing on ports	113
Lossless core	114
Configuring Lossless Dynamic Load Sharing	115
Lossless Dynamic Load Sharing in Virtual Fabrics	115
Enabling forward error correction	115
Frame Redirection	116
Creating a frame redirect zone	117
Deleting a frame redirect zone	117
Viewing redirect zones	118
Managing User Accounts	119
In this chapter	119
User accounts overview	119
Role-Based Access Control	120
The management channel	121
Managing user-defined roles	122
Local database user accounts	123
Default accounts	123
Local account passwords	125
Local account database distribution	126
Distributing the local user database	126
Accepting distributed user databases on the local switch	126
Rejecting distributed user databases on the local switch	127
Password policies	127
Password strength policy	127
Password history policy	128
Password expiration policy	129
Account lockout policy	129
The boot PROM password	131
Setting the boot PROM password for a switch with a recovery string	131
Setting the boot PROM password for a Backbone with a recovery string	132
Setting the boot PROM password for a switch without a recovery string	133
Setting the boot PROM password for a Backbone without a recovery string	134
The authentication model using RADIUS and LDAP	135
Setting the switch authentication mode	137
Fabric OS user accounts	137
Fabric OS users on the RADIUS server	138
The RADIUS server	141
LDAP configuration and Microsoft Active Directory	147
Authentication servers on the switch	150
Configuring local authentication as backup	151
Configuring Protocols	153
In this chapter	153
Security protocols	153
Secure Copy	154
Setting up SCP for configuration uploads and downloads	154
Secure Shell protocol	155
SSH public key authentication	155
Secure Sockets Layer protocol	158
Browser and Java support	158
SSL configuration overview	158
Certificate authorities	159
The browser	161
Root certificates for the Java Plug-in	162
Simple Network Management Protocol	163
SNMP and Virtual Fabrics	164
The security level	165
The snmpConfig command	165
Telnet protocol	165
Blocking Telnet	165
Unblocking Telnet	167
Listener applications	167
Ports and applications used by switches	167
Port configuration	168
Configuring Security Policies	169
In this chapter	169
ACL policies overview	169
How the ACL policies are stored	169
Policy members	170
ACL policy management	170
Displaying ACL policies	171
Saving changes without activating the policies	171
Activating policy changes	171
Deleting an ACL policy	171
Adding a member to an existing ACL policy	172
Removing a member from an ACL policy	172
Aborting unsaved policy changes	172
FCS policies	173
FCS policy restrictions	173
Ensuring fabric domains share policies	174
Creating an FCS policy	174
Modifying the order of FCS switches	175
FCS policy distribution	175
DCC policies	176
DCC policy restrictions	177
Creating a DCC policy	177
Deleting a DCC policy	178
DCC policy behavior with Fabric-Assigned PWWNs	179
SCC Policies	180
Creating an SCC policy	181
Authentication policy for fabric elements	181
E_Port authentication	182
Device authentication policy	184
AUTH policy restrictions	185
Authentication protocols	186
Secret key pairs for DH-CHAP	187
FCAP configuration overview	188
Fabric-wide distribution of the Auth policy	191
IP Filter policy	191
Creating an IP Filter policy	191
Cloning an IP Filter policy	192
Displaying an IP Filter policy	192
Saving an IP Filter policy	192
Activating an IP Filter policy	192
Deleting an IP Filter policy	193
IP Filter policy rules	193
IP Filter policy enforcement	196
Adding a rule to an IP Filter policy	197
Deleting a rule to an IP Filter policy	197
Aborting an IP Filter transaction	197
IP Filter policy distribution	197
Managing filter thresholds	198
Policy database distribution	198
Database distribution settings	199
ACL policy distribution to other switches	200
Fabric-wide enforcement	201
Notes on joining a switch to the fabric	202
Management interface security	204
Configuration examples	205
IPsec protocols	206
Security associations	207
Authentication and encryption algorithms	207
IPsec policies	208
IKE policies	208
Creating the tunnel	210
Example of an End-to-end transport tunnel mode	212
Maintaining the Switch Configuration File	215
In this chapter	215
Configuration settings	215
Configuration file format	216
Configuration file backup	218
Uploading a configuration file in interactive mode	219
Configuration file restoration	219
Restrictions	220
Configuration download without disabling a switch	222
Configurations across a fabric	223
Downloading a configuration file from one switch to another same model switch	224
Security considerations	224
Configuration management for Virtual Fabrics	224
Uploading a configuration file from a switch with Virtual Fabrics enabled	224
Restoring logical switch configuration using configDownload	225
Restrictions	226
Brocade configuration form	227
Installing and Maintaining Firmware	229
In this chapter	229
Firmware download process overview	229
Upgrading and downgrading firmware	230
Considerations for FICON CUP environments	231
HA sync state	231
Preparing for a firmware download	232
Connected switches	233
Finding the switch firmware version	233
Obtain and decompress firmware	233
Firmware download on switches	234
Switch firmware download process overview	234
Firmware download on a Backbone	235
Backbone firmware download process overview	236
Firmware download from a USB device	239
Enabling USB	239
Viewing the USB file system	239
Downloading from USB using the relative path	240
Downloading from USB using the absolute path	240
FIPS support	240
Public and private key management	240
The firmwareDownload command	241
Power-on firmware checksum test	242
Test and restore firmware on switches	242
Testing a different firmware version on a switch	242
Test and restore firmware on Backbones	244
Testing different firmware versions on Backbones	244
Validating a firmware download	246
Managing Virtual Fabrics	249
In this chapter	249
Virtual Fabrics overview	249
Logical switch overview	250
Default logical switch	250
Logical switches and fabric IDs	251
Port assignment in logical switches	252
Logical switches and connected devices	253
Logical fabric overview	254
Logical fabric and ISLs	255
Base switch and extended ISLs	256
Management model for logical switches	259
Account management and Virtual Fabrics	259
Supported platforms for Virtual Fabrics	260
Supported port configurations in the fixed-port switches	260
Supported port configurations in the Brocade Backbones	260
Virtual Fabrics interaction with other Fabric OS features	261
Limitations and restrictions of Virtual Fabrics	262
Restrictions on XISLs	263
Restrictions on moving ports	263
Enabling Virtual Fabrics mode	263
Disabling Virtual Fabrics mode	264
Configuring logical switches to use basic configuration values	265
Creating a logical switch or base switch	265
Executing a command in a different logical switch context	267
Deleting a logical switch	268
Adding and moving ports on a logical switch	268
Displaying logical switch configuration	269
Changing the fabric ID of a logical switch	270
Changing a logical switch to a base switch	270
Setting up IP addresses for a Virtual Fabric	272
Removing an IP address for a Virtual Fabric	272
Configuring a logical switch to use XISLs	272
Changing the context to a different logical fabric	273
Creating a logical fabric using XISLs	273
Administering Advanced Zoning	275
In this chapter	275
Special zones	275
Zoning overview	276
Approaches to zoning	277
Zone objects	278
Zone aliases	279
Zone configurations	279
Zoning enforcement	280
Considerations for zoning architecture	281
Best practices for zoning	282
Broadcast zones	282
Broadcast zones and Admin Domains	282
Broadcast zones and FC-FC routing	283
High availability considerations with broadcast zones	284
Loop devices and broadcast zones	284
Broadcast zones and default zoning mode	284
Zone aliases	284
Creating an alias	285
Adding members to an alias	285
Removing members from an alias	286
Deleting an alias	286
Viewing an alias in the defined configuration	287
Zone creation and maintenance	287
Creating a zone	287
Adding devices (members) to a zone	288
Removing devices (members) from a zone	288
Deleting a zone	289
Viewing a zone in the defined configuration	289
Validating a zone	289
Default zoning mode	290
Setting the default zoning mode	291
Viewing the current default zone access mode	292
Zone database size	292
Zone configurations	292
Creating a zone configuration	293
Adding zones (members) to a zone configuration	293
Removing zones (members) from a zone configuration	294
Enabling a zone configuration	294
Disabling a zone configuration	295
Deleting a zone configuration	295
Clearing changes to a configuration	296
Viewing all zone configuration information	296
Viewing selected zone configuration information	297
Viewing the configuration in the effective zone database	297
Clearing all zone configurations	297
Zone object maintenance	298
Copying a zone object	298
Deleting a zone object	299
Renaming a zone object	300
Zone configuration management	300
Security and zoning	300
Zone merging	301
Fabric segmentation and zoning	303
Zone merging scenarios	303
Traffic Isolation Zoning	307
In this chapter	307
Traffic Isolation Zoning overview	307
TI zone failover	308
FSPF routing rules and traffic isolation	310
Enhanced TI zones	312
Illegal configurations with enhanced TI zones	313
Traffic Isolation Zoning over FC routers	314
TI within an edge fabric	315
TI within a backbone fabric	316
Limitations of TI zones over FC routers	317
General rules for TI zones	317
Supported configurations for Traffic Isolation Zoning	318
Additional configuration rules for enhanced TI zones	319
Trunking with TI zones	319
Limitations and restrictions of Traffic Isolation Zoning	319
Admin Domain considerations for Traffic Isolation Zoning	320
Virtual Fabric considerations for Traffic Isolation Zoning	320
Traffic Isolation Zoning over FC routers with Virtual Fabrics	322
Creating a TI zone	323
Creating a TI zone in a base fabric	325
Modifying TI zones	326
Changing the state of a TI zone	327
Deleting a TI zone	328
Displaying TI zones	328
Troubleshooting TI zone routing problems	329
Setting up TI over FCR (sample procedure)	330
Bottleneck Detection	335
In this chapter	335
Bottleneck detection overview	335
Types of bottlenecks	336
How bottlenecks are reported	336
Using alerting parameters to determine whether alerts are generated	337
Supported configurations for bottleneck detection	338
Limitations of bottleneck detection	338
High availability considerations for bottleneck detection	338
Upgrade and downgrade considerations for bottleneck detection	338
Trunking considerations for bottleneck detection	339
Virtual Fabrics considerations for bottleneck detection	339
Access Gateway considerations for bottleneck detection	339
Advanced bottleneck detection settings	339
Enabling bottleneck detection on a switch	340
Excluding a port from bottleneck detection	341
Displaying bottleneck detection configuration details	342
Changing bottleneck parameters	343
Displaying bottleneck statistics	345
Disabling bottleneck detection on a switch	346
In-flight Encryption and Compression	347
In this chapter	347
In-flight encryption and compression overview	347
Encryption and compression restrictions	348
How encryption and compression are enabled	349
Authentication and key generation	349
Availability considerations	349
Virtual Fabrics considerations	350
Recommendation for compression	350
Configuring encryption and compression	350
Viewing the encryption and compression configuration	351
Configuring and enabling authentication	352
Configuring encryption	353
Configuring compression	354
Disabling encryption	354
Disabling compression	355
Encryption and compression example	355
Example of enabling encryption and compression on a port	356
Example of disabling encryption and compression	358
NPIV	361
In this chapter	361
NPIV overview	361
Upgrade considerations	362
Fixed addressing mode	362
10-bit addressing mode	362
Configuring NPIV	363
Enabling and disabling NPIV	364
Viewing NPIV port configuration information	365
Viewing virtual PID login information	366
Dynamic Fabric Provisioning: Fabric-Assigned WWN	367
In this chapter	367
Introduction to Dynamic Fabric Provisioning using FA-PWWN	367
User- and auto-assigned FA-PWWN behavior	368
Checking for duplicate FA-PWWNs	368
Configuring FA-PWWNs	368
Configuring an FA-PWWN for an HBA connected to an Access Gateway	369
Configuring an FA-PWWN for an HBA connected to an edge switch	370
Supported switches and configurations for FA-PWWN	371
Configuration upload and download considerations for FA-PWWN	372

Match case Limit results 1 per page

196

Fabric OS Administrator’s Guide

53-1002446-01

Firmware download on switches

Brocade fixed-port switches maintain primary and secondary partitions for firmware. The

firmwareDownload

command defaults to an autocommit option that automatically copies the

firmware from one partition to the other.

NOTE

This section only applies when upgrading from Fabric OS v6.1.x to v6.2.0, or from different versions

of v6.2.0, such as patch releases. If you are downgrading from v6.2.0 to v6.1.x, you must enter the

firmwareDownload –s

command as described in

“Test and restore firmware on switches”

page 204.

This is not necessary when downgrading from Fabric OS v6.3.0 to v6.2.0 or from Fabric OS v6.4.0

to v6.3.0.

Do not override autocommit under normal circumstances; use the default. See

“Test and restore

firmware on Backbones”

on page 206 for details about overriding the autocommit option.

Switch firmware download process overview

The following list describes the default behavior after you enter the

firmwareDownload

command

(without options) on Brocade fixed-port switches:

•

The Fabric OS downloads the firmware to the secondary partition.

•

The system performs a high-availability reboot (

haReboot

). After the

haReboot

, the former

secondary partition is the primary partition.

•

The system replicates the firmware from the primary to the secondary partition.

The upgrade process first downloads and then commits the firmware to the switch. While the

upgrade is proceeding, you can start a session on the switch and use the

firmwareDownloadStatus

command to observe the upgrade progress if you wish.

CAUTION

After you start the process, do not enter any disruptive commands (such as reboot) that interrupt

the process. The entire firmware download and commit process takes approximately 17 minutes.

If there is a problem, wait for the time-out (30 minutes for network problems) before issuing the

firmwareDownload command again. Disrupting the process can render the switch inoperable and

require you to seek help from your switch service provider.

Do not disconnect the switch from power during the process. The switch could be inoperable

when rebooted.

Upgrading firmware for Brocade fixed-port switches

Take the following appropriate action based on what service you are using:

•

If you are using FTP, SFTP, or SCP, verify that the FTP or SSH server is running on the host

server and that you have a valid user ID and password on that server.

•

If your platform supports a USB memory device, verify that it is connected and running.