HP StorageWorks 4/256 HP StorageWorks Fabric OS 5.2.x administrator guide (569 - Page 243
Security considerations, Configuring switches
View all HP StorageWorks 4/256 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 243 highlights
NOTE: The Fabric OS CLI supports only a subset of the management features for FICON fabrics. The full set of FICON CUP administrative procedures is available using the Fabric Manager and Web Tools software features. You can also use an SNMP agent and the FICON Management Information Base (MIB). For information on these tools, refer to: • Web Tools-Web Tools Administrator's Guide • Fabric Manager-Fabric Manager Administrator's Guide • SNMP Agent and FICON Management Information Base (MIB)-Fabric OS MIB Reference Manual Security considerations To administer FICON, you must have one of the following roles: • Admin • Operator • SwitchAdmin • FabricAdmin The User and BasicSwitchAdmin roles are view-only. The ZoneAdmin and SecurityAdmin roles have no access. In an Admin Domain-aware fabric, if you use the FICON commands (ficonshow, ficonclear, ficoncupshow, and ficoncupset) for any Admin Domain other than AD0 and AD255, the current switch must be a member of that Admin Domain. The output is not filtered based on the Admin Domain. Configuring switches This section describes how to configure a switch in a FICON environment. Use Table 55 on page 256 to record your configuration information. Following are recommended FICON environment configuration settings: • Disable dynamic load sharing (dlsReset command). If DLS is enabled, traffic on existing ISL ports might be affected when one or more new ISLs is added between the same two switches. Specifically, adding the new ISL might result in dropped frames as routes are adjusted to take advantage of the bandwidth provided. By disabling DLS, you ensure that there will be no dropped frames. A similar situation occurs when an ISL port is taken offline and then brought back online. When the ISL port goes offline, the traffic on that port is rerouted to another ISL with a common destination. When the ISL port comes back online and DLS is enabled, the rerouting of traffic back to the ISL port might result in dropped frames. If DLS is not enabled, traffic will not be routed back. • Configure ports that are connected to 1-Gbit/sec channels for fixed 1-Gbit/sec speed. Otherwise, when using fixed 1-Gbit/sec channels (both G5 and FICON Express), the FICON host might generate erroneous link incidents when the channels are coming online. These link incidents will result in a call home. Other than the generated link incident, the channel will come online and function normally. • Enable in-order delivery (iodSet command). • Enable VC translation link initialization on Extended Fabrics links, to stabilize them. Refer to "Administering Extended Fabrics" on page 325 for details on this option for the portCfgLongDistance command. • Although there are no specific zoning rules related to FICON environments, it is recommended that you follow standard FCP zoning practices. For management purposes, when operating in a mixed environment put FCP devices in one zone and FICON devices in another zone. • The port-based routing policy is recommended for the SAN Switch 4/32 and 4/256 SAN Director on any switch that has FICON devices attached. Other switches in the fabric with Open Systems devices exclusively can still use exchange-based routing. Fabric OS 5.2.x administrator guide 243