Hp StorageWorks 2.128 SAN Director Switch User Manual

HP StorageWorksFabric OS 5.x administrator guidePart number: AA–RVHWB–TESecond edition: September 2005

10Host reboots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214Stat

100 Routing trafficViewing routing path informationThe topologyShow and uRouteShow commands provide information about the routing path.1. Connect to t

Fabric OS 5.x administrator guide 1013. Issue the uRouteShow command to display unicast routing information.For the 4/8 SAN Switch, 4/16 SAN Switch, S

102 Routing trafficViewing routing information along a pathYou can display detailed routing information from a source port (or area) on the local swit

Fabric OS 5.x administrator guide 103• Name: The name of the switch.• Out Port: The output port that the frames use to reach the next hop on this path

104 Routing traffic

Fabric OS 5.x administrator guide 1057 Administering FICON fabricsNOTE: FICON is not supported on HP B-Series Fibre Channel switches. The FICON inform

106 Administering FICON fabrics• Switch binding is a security method for restricting devices that connect to a particular switch. If the device is ano

Fabric OS 5.x administrator guide 107The Fabric OS CLI supports only a subset of the HP management features for FICON fabrics. The full set of FICON C

108 Administering FICON fabricsConfiguring switchesThis section describes how to configure a switch in a FICON environment. Use the worksheet shown in

Fabric OS 5.x administrator guide 109Configuring a high-integrity fabricTo configure a high-integrity fabric (cascaded configuration):1. Disable each

Fabric OS 5.x administrator guide 119 SSL certificate files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

110 Administering FICON fabrics7. Respond to the remaining prompts (or press Ctrl-d to accept the other settings and exit).8. Issue the switchEnable c

Fabric OS 5.x administrator guide 111FRU failuresTo display FRU failure information, connect to the switch, log in as admin, and issue one of the foll

112 Administering FICON fabricsA mode register controls the behavior of the switch with respect to CUP itself, and with respect to the behavior of oth

Fabric OS 5.x administrator guide 113NOTE: You cannot use the portCfgPersistentEnable and portCfgPersistentDisable commands to persistently enable and

114 Administering FICON fabricsThe ficoncupshow modereg command displays the mode register bit settings for the switch. A display of 0 indicates that

Fabric OS 5.x administrator guide 115The command format is:ficoncupset modereg [bitname] 0 | 1 The following example sets the mode register bit HCP to

116 Administering FICON fabricsPort and switch naming standardsFabric OS handles differences in port and switch naming rules between CUP and itself as

Fabric OS 5.x administrator guide 117• ficonDbg dump rnid• ficonDbg log• ficonShow ilir• ficonShow lirr• ficonShow rlir• ficonShow rnid• ficonShow swi

118 Administering FICON fabricsBacking up FICON filesThe FICON file access facility is used to store configuration files. This includes IPL and other

Fabric OS 5.x administrator guide 119Figure 3 FICON switch configuration worksheetFICON® Switch Configuration WorksheetFICON® Switch Manufacturer:____

12

120 Administering FICON fabricsSample IOCP configuration file for the SAN Switch 2/32, Core Switch 2/64, and SAN Director 2/128The channel subsystem c

Fabric OS 5.x administrator guide 121IOCP (and not in decimal values); the Domain IDs in the following example are for demonstration purposes only.Sam

122 Administering FICON fabrics/*********************************************************************/ /* MONITOR I OPTIONS

Fabric OS 5.x administrator guide 1238 Configuring the Distributed Management ServerThe HP Fabric OS Distributed Management Server allows a SAN manage

124 Configuring the Distributed Management ServerFor example:Controlling access You can use the msConfigure command to control access to the managemen

Fabric OS 5.x administrator guide 1253. At the select prompt, enter 2 to add a member based on its port/node WWN.4. Enter the WWN of the host to be ad

126 Configuring the Distributed Management Server7. At the Update the FLASH? prompt, enter y.8. Press Enter to update the nonvolatile memory and end t

Fabric OS 5.x administrator guide 127The contents of the management server platform database are displayed. For example:Clearing the management server

128 Configuring the Distributed Management ServerFor example:Disabling topology discovery1. Connect to the switch and log in as admin.2. Issue the mst

Fabric OS 5.x administrator guide 1299 Working with diagnostic featuresThis chapter provides information on diagnostics and how to display system, por

Fabric OS 5.x administrator guide 13About this guideThis guide provides information about:• Fabric OS procedures• Basic configuration tasks• Security

130 Working with diagnostic featuresThe following example shows a typical boot sequence, including POST messages:If you choose to bypass POST2, or aft

Fabric OS 5.x administrator guide 131For example:For more information on how the overall switch status is determined, see the switchStatusPolicySet co

132 Working with diagnostic featuresFor example::The uptime command displays the length of time the system has been in operation, the total cumulative

Fabric OS 5.x administrator guide 133Displaying the port statistics1. Connect to the switch and log in as admin.2. Issue the portStatsShow command. Po

134 Working with diagnostic featuresThe following example shows output from the portErrShow command:The portErrShow command output provides one output

Fabric OS 5.x administrator guide 135Viewing equipment statusYou can display status for fans, power supply, and temperature.NOTE: The number of fans,

136 Working with diagnostic featuresThe possible status values are:• OK: Power supply is functioning correctly.• Absent: Power supply is not present.•

Fabric OS 5.x administrator guide 137Viewing the port logFabric OS maintains an internal log of all port activity. The port log stores entries for eac

138 Working with diagnostic featuresBecause a portLogDump output is long, a truncated example is presented:Configuring for syslogdThe system logging d

Fabric OS 5.x administrator guide 139In the following example, Fabric OS messages map to local7 facility level 7 in the /etc/syslog.conf file:If you p

14Document conventions and symbolsWARNING! Indicates that failure to follow directions could result in bodily harm or death.CAUTION: Indicates that fa

140 Working with diagnostic features3. Verify the IP address was deleted by issuing the syslogDipShow command.Viewing and saving diagnostic informatio

Fabric OS 5.x administrator guide 141Setting up periodic checking of the remote server1. Connect to the switch and log in as admin.2. Issue the follow

142 Working with diagnostic features

Fabric OS 5.x administrator guide 14310 TroubleshootingTroubleshooting should begin at the center of the SAN—the fabric. Because switches are located

144 TroubleshootingGathering information for technical supportIf you are troubleshooting a production system, you need to gather data quickly. As soon

Fabric OS 5.x administrator guide 145• Commands pdShow and save Core output2. Determine the following host information:• OS version and patch level•HB

146 TroubleshootingThe following is sample output from the fcPing command in which one device accepts the request and another device rejects the reque

Fabric OS 5.x administrator guide 147Checking the Simple Name Server (SNS)1. Issue the nsShow command on the switch to which the device is attached.Fo

148 TroubleshootingChecking for zoning problems1. Issue the cfgActvShow command to determine whether zoning is enabled.If zoning is enabled, it is pos

Fabric OS 5.x administrator guide 1498. Issue the configure command to edit the fabric parameters for the segmented switch.See the HP StorageWorks Fab

Fabric OS 5.x administrator guide 15• Operating system type and revision level• Detailed, specific questionsFor continuous quality improvement, calls

150 TroubleshootingSee ”Administering advanced zoning” on page 177 for additional information about setting up zoning properly. Also see the HP Storag

Fabric OS 5.x administrator guide 151Editing zone configuration members1. Log in to one of the switches in a segmented fabric as admin.2. Issue the cf

152 TroubleshootingChecking fan components1. Log in to the switch as user.2. Issue the fanShow command.3. Check the fan status and speed output.If any

Fabric OS 5.x administrator guide 153For example:3. Issue the portCfgShow command to see how the port is configured.For example:4. Issue the portErrSh

154 TroubleshootingFor example:• A high number of errors relative to the frames transmitted and frames received can indicate a marginal link (see ”Cor

Fabric OS 5.x administrator guide 155For example:NOTE: See ”Viewing the port log” on page 137 for overview information about the output of the portLog

156 TroubleshootingThe following procedures are for checking switch-specific components.Testing a port’s external transmit and receive path 1. Connect

Fabric OS 5.x administrator guide 157Testing components to and from the HBA1. Connect to the switch and log in as admin.2. Issue the fPortTest command

158 Troubleshooting1. Issue the portCfgShow command to display the port speed settings of all the ports.2. Issue the switchShow command to determine w

Fabric OS 5.x administrator guide 1593. Verify that the event area for the port state entry is pstate. The command entry AC indicates that the port ha

16

160 TroubleshootingTo troubleshoot a marginal link:1. Issue the portErrShow command. For example:2. Establish whether there is a relatively high numbe

Fabric OS 5.x administrator guide 1616. Check the results of the loopback test and proceed as follows:• If the loopback test failed, the port is bad.

162 Troubleshootingaccept PRLI represent a majority of storage targets. Private hosts require the QuickLoop feature, which is not available in Fabric

Fabric OS 5.x administrator guide 16311 Administering extended fabricsThis chapter contains procedures for using the HP Extended Fabrics licensed feat

164 Administering extended fabrics• Starting with Fabric OS 4.4.0, VC translation link initialization (an option of the portCfgLongDistance command) i

Fabric OS 5.x administrator guide 165For dynamic long-distance links, you can approximate the number of buffer credits using the following formula:Buf

166 Administering extended fabrics3. Issue the portCfgLongDistance command, using the following syntax:portcfglongdistance [slotnumber/]portnumber [di

Fabric OS 5.x administrator guide 16712 Administering ISL trunkingThis chapter contains procedures for using the HP ISL Trunking licensed feature, whi

168 Administering ISL trunkingThe maximum number of ports per trunk and trunks per switch depends on the HP StorageWorks model.For detailed informatio

Fabric OS 5.x administrator guide 169• Consider how the addition of a new path affects existing traffic patterns:• A trunking group has the same link

Fabric OS 5.x administrator guide 171 Introducing Fabric OS CLI proceduresThis chapter contains procedures for configuring and managing an HP StorageW

170 Administering ISL trunking• Fabric Watch allows you to monitor traffic flow through specified ports on the switch and send alerts when the traffic

Fabric OS 5.x administrator guide 171Enabling and disabling ISL trunkingYou can enable or disable HP ISL Trunking for a single port or for an entire s

172 Administering ISL trunkingSetting the speed for one port1. Connect to the switch and log in as admin.2. Issue the portCfgSpeed command:portcfgspee

Fabric OS 5.x administrator guide 173The following example sets the speed for all ports on the switch to 2 Gbit/second:The following example sets the

174 Administering ISL trunkingTroubleshooting trunking problemsIf you have difficulty with trunking, try the solutions in this section.Listing link ch

Fabric OS 5.x administrator guide 1754. If you are in buffer-limited mode on the LD port, increase the estimated distance.These changes are implemente

176 Administering ISL trunking

Fabric OS 5.x administrator guide 17713 Administering advanced zoningThis chapter provides procedures for using the HP Advanced Zoning feature. Zoning

178 Administering advanced zoningTo list the commands associated with zoning, use the zoneHelp command. For detailed information on the zoning command

Fabric OS 5.x administrator guide 179Zone objectsA zone object is any device in a zone, such as the: • Physical port number or area ID on the switch•

18 Introducing Fabric OS CLI procedures• Advanced Web Tools: For Advanced Web Tools procedures, see the HP StorageWorks Fabric OS 5.x Advanced Web Too

180 Administering advanced zoningWWNs are specified as 8-byte (16-digit) hexadecimal numbers, separated by colons, for example, 10:00:00:90:69:00:00:8

Fabric OS 5.x administrator guide 181Zoning enforcementSoftware-enforced and hardware-enforced zoning are supported.Software-enforced zoning Zoning en

182 Administering advanced zoningFigure 6 shows a fabric with four non-overlap ping hardware-enforced zones.Table 35 Enforcing hardware zoningFabric t

Fabric OS 5.x administrator guide 183Figure 6 Hardware-enforced non-overlap ping zonesFigure 7 shows the same fabric components zoned in an overlappin

184 Administering advanced zoningFigure 8 Zoning with hardware assist (mixed-port and WWN zones)Figure 9 Session-based hard zoningIn Figure 9, only th

Fabric OS 5.x administrator guide 185• QuickLoop: Evaluate whether the fabric will also use QuickLoop Fabric Assist (QLFA) or QuickLoop. If you are ru

186 Administering advanced zoningAdding members to an alias1. Connect to the switch and log in as admin. 2. Issue the aliAdd command. 3. Issue the cfg

Fabric OS 5.x administrator guide 187Viewing an alias in the defined configuration1. Connect to the switch and log in as admin. 2. Issue the aliShow c

188 Administering advanced zoningRemoving devices (members) from a zone1. Connect to the switch and log in as admin. 2. Issue the zoneRemove command.

Fabric OS 5.x administrator guide 189Symmetrical segmentation occurs when both ends of an ISL are shut down. Subsequently, no frames are exchanged bet

Fabric OS 5.x administrator guide 19For example:Additional help topicsThe following commands provide help files for specific topics:• diagHelp provide

190 Administering advanced zoningTable 38 Resulting database size: 128K to 256KTable 39 Resulting database size: 256K to 1MCreating and modifying zoni

Fabric OS 5.x administrator guide 191For important considerations for managing zoning in a fabric, and details about the maximum zone database size fo

192 Administering advanced zoningFor example:Clearing changes to a configurationUse the cfgTransAbort command. When this command is executed, all chan

Fabric OS 5.x administrator guide 193Viewing a configuration in the effective zone database1. Connect to the switch and log in as admin. 2. Issue the

194 Administering advanced zoningFor example:3. Issue the zoneObjectExpunge command to delete the zone object. Note that zone configuration names are

Fabric OS 5.x administrator guide 195Managing zoning configurations in a fabricTo modify an existing zone configuration, you can add, delete, or remov

196 Administering advanced zoningcopy of this database. When a change is made to the defined configuration, the switch where the changes were made mus

Fabric OS 5.x administrator guide 197Splitting a fabricIf the connections between two fabrics are no longer available, the fabric segments into two se

198 Administering advanced zoningTable 41 lists considerations for zoning architecture.Table 41 Considerations for zoning architectureItem Description

Fabric OS 5.x administrator guide 19914 Administering advanced performance monitoringThis topic contains procedures for the HP Advanced Performance Mo

Legal and notice information© Copyright 2005 Hewlett-Packard Development Company, L.P.© Copyright 2005 Brocade Communications Systems, Incorporated.He

20 Introducing Fabric OS CLI procedures

200 Administering advanced performance monitoringNOTE: The command examples in this chapter use the slot/port syntax required by the Core Switch 2/64,

Fabric OS 5.x administrator guide 201Monitoring EE performanceEE performance monitoring counts the number of words and CRC errors in Fibre Channel fra

202 Administering advanced performance monitoringNOTE: EE performance monitoring looks at traffic on the receiving port respective to the SID only. In

Fabric OS 5.x administrator guide 203CAUTION: Only one mask per port can be set. When you set a mask, all existing EE monitors are deleted. You can sp

204 Administering advanced performance monitoringThe EE mask has 12 fields, each with a value of on or off. The following example shows how to set and

Fabric OS 5.x administrator guide 205Adding standard filter-based monitorsTable 43 lists the commands for adding standard filter-based monitors to a p

206 Administering advanced performance monitoring• SAN Switch 4/32 (Fabric OS 4.4.0 or later): Up to 15 different offsets per port (14 offsets when FM

Fabric OS 5.x administrator guide 207The following example displays the monitors on slot 1, port 4 using the perfShowFilterMonitor command (the monito

208 Administering advanced performance monitoringThe command format is:perfmonitorshow --class monitor_class [slotnumber/]portnumber [interval]The fol

Fabric OS 5.x administrator guide 209The following example displays filter-based monitor on a port at an interval of every 6 seconds:The following exa

Fabric OS 5.x administrator guide 212 Performing basic configuration tasksThis chapter contains procedures for performing basic switch configuration t

210 Administering advanced performance monitoringThe command format is:perfmonitorclear --class monitor_class [slotnumber/]portnumber [monitorId]NOTE:

Fabric OS 5.x administrator guide 211Saving and restoring monitor configurationsTo save the current EE and filter monitor configuration settings into

212 Administering advanced performance monitoring

Fabric OS 5.x administrator guide 213A Configuring the PID formatPort identifiers (PIDs) are used by the routing and zoning services in Fibre Channel

214 Configuring the PID format• If you are running dual-fabrics with multipathing software, you can update one fabric at a time without disrupting tra

Fabric OS 5.x administrator guide 215After changing the fabric PID format and verifying correct fabric operation, resave configuration data by running

216 Configuring the PID formatEvaluating the fabricIf there is the possibility that your fabric contains host devices with static PID bindings, evalua

Fabric OS 5.x administrator guide 2171. Collect device, software, hardware, and configuration data.The following is a non-comprehensive list of inform

218 Configuring the PID formatIf either of the first two options are used, the procedures should again be validated in the test environment.Determine

Fabric OS 5.x administrator guide 2191. Schedule an outage for all devices attached to the fabric.2. Back up all data and verify backups. 3. Shut down

22 Performing basic configuration tasks2. Open a terminal emulator application (such as HyperTerminal on a PC, or TERM, TIP, or Kermit in a UNIX® envi

220 Configuring the PID formatChanging to Extended Edge PID formatIn rare cases, you might be affected by the presence in the fabric of drivers that r

Fabric OS 5.x administrator guide 2214. Change the switch configuration in the fabric to Extended Edge PID format:a. Configure Extended Edge PID (Form

222 Configuring the PID formatExample of the configure command on a switch running Fabric OS 5.0.1:Converting port number to area IDExcept for the fol

Fabric OS 5.x administrator guide 223Figure 13 4/256 SAN Director with Extended Edge PID2.017Link10/100 Mb/sActive CP!IOIOIRS - 232Link10/100 Mb/sActi

224 Configuring the PID formatPID format changesThere are several routine maintenance procedures which might result in a device receiving a new PID. E

Fabric OS 5.x administrator guide 225For example:10.After all switches are updated to use the new PID format and reenabled, verify that the fabric has

226 Configuring the PID format11.Issue the command cfgEnable [effective_zone_configuration]. For example:cfgEnable my_zones12.Issue the switchEnable c

Fabric OS 5.x administrator guide 227Executing the AIX procedureThis procedure is not intended to be comprehensive. It provides a starting point from

228 Configuring the PID formatUse the following procedure to swap the port area IDs of two physical switch ports. In order to swap port area IDs, the

Fabric OS 5.x administrator guide 229B Configuring interoperability modeFor supported interoperability configurations and restrictions, see the HP Sto

Fabric OS 5.x administrator guide 23For the Core Switch 2/64 and SAN Director 2/128 (configured with two domains), each logical switch has its own set

230 Configuring interoperability mode

Fabric OS 5.x administrator guide 231C Using the HP Remote Switch featureThe HP Remote Switch feature (Remote Switch), which aids in ensuring gateway

232 Using the HP Remote Switch feature• Suppress Class F Traffic: Use this parameter to disable class F traffic. Some network-bridge devices might not

Fabric OS 5.x administrator guide 233D Understanding legacy password behaviorThe following sections provide password information for early versions of

234 Understanding legacy password behaviorPassword prompting behaviorsTable 49 describes the expected password prompting behaviors of various Fabric O

Fabric OS 5.x administrator guide 235Password migration during firmware changesTable 50 describes the expected outcome of password settings when upgra

236 Understanding legacy password behaviorPassword recovery optionsTable 51 describes the options available when one or more types of passwords are lo

Fabric OS 5.x administrator guide 237EZone merging scenariosTable 52 provides information on merging zones and the expected results.Table 52 Zone merg

238 Zone merging scenariosThere is a cfg content mismatch.defined: cfg1 zone1: ali1; ali2effective: irrelevant defined: cfg1 zone1: ali3; ali4 effecti

Fabric OS 5.x administrator guide 239F Upgrading firmware in single-CP modeFor all HP StorageWorks switches and directors, the firmwareDownload comman

24 Performing basic configuration tasksNOTE: Record the passwords exactly as entered and store them in a secure place; recovering passwords requires s

240 Upgrading firmware in single-CP mode7. Answer the next prompts as indicated:If you specify no, you must manually issue the firmwareCommit command.

Fabric OS 5.x administrator guide 2417. Enter the full path to the firmware file on the server.For example:8. Enter your password.9. Answer the next p

242 Upgrading firmware in single-CP mode

Fabric OS 5.x administrator guide 243IndexAaccessing switches and fabrics 42account ID 21account privilege levels 22activatinga switch certificate 56p

244correcting link failures 157correcting marginal links 159correcting zoning setup issues 149CRC errors, displaying 200creating a zone 187creating an

Fabric OS 5.x administrator guide 245fru failures 111fru failures, monitoring in FICON environments 107, 111Ggateway 231gateway, remote switch 231gath

246default 23password management information 233password migration during firmware changes 235password prompting behaviors 234password recovery option

Fabric OS 5.x administrator guide 247configuring in a FICON environment 108system status 130switch access 42switch names 28switchshow command 34SWL, I

248

Fabric OS 5.x administrator guide 25Setting the date and time 1. Connect to the switch and log in as admin.2. Issue the date command using the followi

26 Performing basic configuration tasksRepeat the procedure on all switches for which the Time Zone needs to be set. This needs to be done only once;

Fabric OS 5.x administrator guide 275. If you want to generate a single license key, select Generate 1 license key. If you want to generate multiple l

28 Performing basic configuration tasksRemoving a licensed feature1. Connect to the switch and log in as admin. 2. Issue the licenseShow command to di

Fabric OS 5.x administrator guide 292. Connect to the switch and log in as admin. 3. For the 4/8 SAN Switch, 4/16 SAN Switch, SAN Switch 2/8V, SAN Swi

Fabric OS 5.x administrator guide 3About this guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

30 Performing basic configuration tasksDisabling and enabling a port All licensed ports are enabled by default. You can disable and reenable them as n

Fabric OS 5.x administrator guide 31switch vendor. You might need to generate a license key from a transaction key supplied with your purchase. If so,

32 Performing basic configuration tasksFor information on extended ISL modes, which enable longer-distance ISLs, see ”Administering extended fabrics”

Fabric OS 5.x administrator guide 33The fields in the fabricShow display are:• Switch ID: The switch Domain_ID and embedded port D_Id.• Worldwide Name

34 Performing basic configuration tasks3. Issue the portCfgIslMode command:In the following example, slot 2, port 3 is enabled for a gateway link:4. R

Fabric OS 5.x administrator guide 35Verifying device connectivity1. Connect to the switch and log in as admin.2. Optional: Issue the switchShow comman

36 Performing basic configuration tasks• Configuration file change from task• TC feature on• TC feature offAn SNMP-TRAP mode can also be enabled; see

Fabric OS 5.x administrator guide 37For the Core Switch 2/64, SAN Director 2/128, and 4/256 SAN Director: The output is similar to the following:The p

38 Performing basic configuration tasksFor the SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, Brocade 4Gb SAN Switch for HP p-Class BladeSystem,

Fabric OS 5.x administrator guide 393 Configuring standard security featuresThis chapter provides information and procedures for configuring standard

4Verifying fabric connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Verifying device c

40 Configuring standard security featuresEnsuring network securityTo ensure security, Fabric OS supports SSH encrypted sessions. SSH encrypts all mess

Fabric OS 5.x administrator guide 41Commands that require a secure login channel must be issued from an original SSH session. If you start an SSH sess

42 Configuring standard security features4. In response to the telnetd prompt, enter on. The telnet interface is enabled. Blocking listenersHP Storage

Fabric OS 5.x administrator guide 43Creating and maintaining user-defined accountsIn addition to the default administrative and user accounts, Fabric

44 Configuring standard security features3. In response to the prompt, enter a password for the account. The password is not displayed when you enter

Fabric OS 5.x administrator guide 45Changing an account passwordAt each level of account access, you can change passwords for that account and account

46 Configuring standard security featuresConfigure at least two RADIUS servers so that if one fails, the other assumes service. You can set the config

Fabric OS 5.x administrator guide 47LinuxThe following procedures work for FreeRADIUS on Solaris and Red Hat Linux. FreeRADIUS is a freeware RADIUS se

48 Configuring standard security featuresEnabling clientsClients are the switches that use the RADIUS server; each client must be defined. By default,

Fabric OS 5.x administrator guide 49Configuring users1. From the Windows Start menu, select Programs > Administrative Tools > Computer Managemen

Fabric OS 5.x administrator guide 5Setting the security level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

50 Configuring standard security features15.In the Add Remote Access Policy window, confirm that the Conditions section displays the groups that you s

Fabric OS 5.x administrator guide 51Adding a RADIUS server to the switch configuration 1. Connect to the switch and log in as admin.2. Issue the follo

52 Configuring standard security featuresChanging the order in which RADIUS servers are contacted for service 1. Connect to the switch and log in as a

Fabric OS 5.x administrator guide 53Browser and Java supportFabric OS supports the following web browsers for SSL connections:• Internet Explorer (Mic

54 Configuring standard security featuresChoosing a CATo ease maintenance and allow secure out-of-band communication between switches, consider using

Fabric OS 5.x administrator guide 555. Enter the requested information. For example:6. If you are set up for secure file copy protocol, you can select

56 Configuring standard security featuresActivating a switch certificateIssue the configure command and respond to the prompts that apply to SSL certi

Fabric OS 5.x administrator guide 577. Browse to the certificate location and select the certificate. For example, select nameRoot.crt.8. Click Open a

58 Configuring standard security featuresTroubleshooting certificatesIf you receive messages in the browser or in a pop-up window when logging in to t

Fabric OS 5.x administrator guide 59You can also use the following MIBs and their associated traps:• FICON-MIB (for FICON environments)• HA-MIB (for t

66 Routing traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97About data routing and

60 Configuring standard security featuresSample SNMPv3 configuration:switch:admin> snmpconfig --set snmpv3 SNMPv3 user configuration: User

Fabric OS 5.x administrator guide 61Sample SNMPv1 configuration:Sample accessControl configuration:switch:admin> snmpconfig --set snmpv1SNMP commun

62 Configuring standard security featuresSample mibCapability configuration:Sample systemGroup configuration (default):Using legacy commands for SNMPv

Fabric OS 5.x administrator guide 63Sample SNMP agent configuration information:switch:admin> agtcfgshowCurrent SNMP Agent Configuration Cu

64 Configuring standard security featuresSample modification of the SNMP configuration values:switch:admin> agtcfgset Customizing MIB-II syste

Fabric OS 5.x administrator guide 65Sample reset of the SNMP agent configuration to default values:switch:admin> agtcfgdefault*****This command wil

66 Configuring standard security featuresSample modification of the options for configuring SNMP MIB traps:The following snmpMibCapSet parameters for

Fabric OS 5.x administrator guide 67Sample view of the SNMP MIB trap setup:Configuring secure file copyUse the configure command to specify that secur

68 Configuring standard security features4/8 SAN Switch, 4/16 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, Brocade 4Gb SAN Switch f

Fabric OS 5.x administrator guide 69The following options are available:5. Enter 2.If no password was previously set, the following message is display

Fabric OS 5.x administrator guide 7Clearing the management server database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

70 Configuring standard security features4/8 SAN Switch, 4/16 SAN Switch, SAN Switch 2/8V, SAN Switch 2/16V, SAN Switch 2/32, Brocade 4Gb SAN Switch f

Fabric OS 5.x administrator guide 71The following options are available:6. Enter 3. 7. Issue the passwd command at the shell prompt.NOTE: The passwd c

72 Configuring standard security features

Fabric OS 5.x administrator guide 734 Maintaining configurations and firmwareThis chapter contains procedures for maintaining switch configurations an

74 Maintaining configurations and firmware4. Respond to the prompts as follows:For example:Restoring a configurationRestoring a configuration involves

Fabric OS 5.x administrator guide 756. At the Do you want to continue [y/n] prompt, enter y.7. Wait for the configuration to be restored.8. When the p

76 Maintaining configurations and firmwareIf fmsmode is enabled in a configuration file, but is disabled on the switch, the configdownload command fai

Fabric OS 5.x administrator guide 774. In the Product information section on the right side, select Software & drivers.The download drivers &

78 Maintaining configurations and firmwareTo determine whether you need to upgrade connected switches before upgrading your switch, use the following

Fabric OS 5.x administrator guide 79CAUTION: To ensure a nondisruptive download, for each nondirector class switch in your fabric, complete all firmwa

8Checking the switch temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152Checking the power suppl

80 Maintaining configurations and firmwareDo not override an autocommit under normal circumstances; use the default. See ”Upgrading firmware in single

Fabric OS 5.x administrator guide 816. Issue the firmwareDownload command.7. At the Do you want to continue [y/n] prompt, enter y.8. Respond to the pr

82 Maintaining configurations and firmwareLog in again to view the upgrade progress:CAUTION: To successfully download firmware to a director you must

Fabric OS 5.x administrator guide 83NOTE: After you start the process, do not issue any disruptive commands (such as reboot) that will interrupt the p

84 Maintaining configurations and firmware10.Respond to the prompts as follows:The firmware is downloaded to one CP blade at a time, beginning with th

Fabric OS 5.x administrator guide 85Start a new session to view the upgrade progress:Troubleshooting firmware downloadsA firmware download can fail fo

86 Maintaining configurations and firmwareDecide which firmware version you want to be applied to each CP blade. If you want the version on the standb

Fabric OS 5.x administrator guide 875 Configuring Core Switch 2/64, SAN Director 2/128, and 4/256 SAN DirectorThis chapter contains procedures that ar

88 Configuring Core Switch 2/64, SAN Director 2/128, and 4/256 SAN DirectorThe following example shows how to enable port 4 on a blade in slot 2:By po

Fabric OS 5.x administrator guide 89Disabling and enabling port bladesPort blades are enabled by default.You might need to disable a port blade to per

Fabric OS 5.x administrator guide 9Rules for configuring zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

90 Configuring Core Switch 2/64, SAN Director 2/128, and 4/256 SAN DirectorCP bladesCP blades determine the director type:• If CP1 blades are installe

Fabric OS 5.x administrator guide 91Port blade compatibilityTable 16 indicates which blades are supported for each HP StorageWorks director.Setting ch

92 Configuring Core Switch 2/64, SAN Director 2/128, and 4/256 SAN DirectorThe following sections contain procedures for obtaining chassis information

Fabric OS 5.x administrator guide 93Configuring a new SAN Director 2/128 with two domainsBy factory default, the SAN Director 2/128 is configured as o

94 Configuring Core Switch 2/64, SAN Director 2/128, and 4/256 SAN Director5. Use the configure command to configure the sw0 to match your fabric spec

Fabric OS 5.x administrator guide 954. Issue the ipAddrSet command to set and confirm the IP address of sw1 (sw1 takes on a default that must be corre

96 Configuring Core Switch 2/64, SAN Director 2/128, and 4/256 SAN Director

Fabric OS 5.x administrator guide 976 Routing trafficThis chapter describes HP StorageWorks switch routing features and procedures. About data routing

98 Routing trafficYou must disable the switch before changing the routing policy, and reenable it afterward.In the following example, the routing poli

Fabric OS 5.x administrator guide 99In a stable fabric, frames are always delivered in order, even when the traffic between switches is shared among m