HP StorageWorks HA-Fabric Manager user guide FW 07.00.00/HAFM SW 08.06.
Legal and notice information © Copyright 2001–2005 Hewlett-Packard Development Company, L.P. © Copyright 2005 McDATA Corp. Hewlett-Packard Company makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.
Contents About this guide . . . . . . . . . . . . . Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Intended audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Related documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . Document conventions and symbols . . . . . . . . . . . . . . . . . . Rack stability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . HP technical support . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Floating the Minimap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Anchoring the Minimap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Resizing the Minimap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Status bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Toolbox . . . . . . . . . . . . . . . . . . . . . . . . . . .
Adding a user account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Changing a user account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Removing a user account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Filtering event notifications for a user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Searching for products in a SAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Changing product properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Determining product status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Displaying service requests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Screen . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Creating a rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Managing Event Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Plan conservation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Saving a plan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Exporting a plan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Printing a plan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. .. .. .. . . . . .. .. .. .. .. .. .. .. . . . . .. .. .. .. .. .. .. .. 123 123 123 123 7 Zoning. . . . . .
Adding a set of users to multiple switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147 Using the Security Change Confirmation and Status dialog box . . . . . . . . . . . . . . . . . . . 148 Using the Software tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150 Enabling API authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151 Disabling API authentication on the switch . .
Forcing all clients to polling mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . TCP port numbers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . HAFM function with RMI at TCP port level. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Forcing the RMI registry to use a specific port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . HAFM_sc.bat . . . . . . . . . . . .
Performance event properties . . . . . . . . . . . . . User action event properties . . . . . . . . . . . . . . Device state event properties . . . . . . . . . . . . . Writing Event Management macros . . . . . . . . . . . . . Keyboard shortcuts . . . . . . . . . . . . . . . . . . . . . . . . . .. .. .. .. .. .. .. .. .. .. . . . . . .. .. .. .. .. . . . . . .. .. .. .. .. .. .. .. .. .. . . . . . .. .. .. .. .. .. .. .. .. .. . . . . . .. .. .. .. .. . . . . . .. .. .. .. .. .. .. .. .. .. .
26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 12 SNMP tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 The Unit Properties tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Address Properties dialog box (IP Address tab) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
73 Open Plan dialog box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115 74 Insert Multiple Devices dialog box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116 75 Planned device Properties dialog box. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117 76 Port Properties dialog box. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 14 Open trunking configuration options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 Planning rule parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119 Connection rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121 Property validation rules . . . . . . .
About this guide This guide provides information about: • Using the High Availability Fabric Manager (HAFM) to monitor, configure, and manage the Fibre Channel in which managed products operate. • Managing fabric zoning and HAFM logs. Intended audience This guide is intended for use by data center administrators, LAN administrators, operations personnel, and customer support personnel who: • Administer user access to the HAFM application. • Monitor and manage product operation.
Document conventions and symbols Document conventions Table 1 Convention Element Medium blue text: Figure 1 Cross-reference links and e-mail addresses Medium blue, underlined text (http://www.hp.
TIP: Provides helpful hints and shortcuts. Rack stability WARNING! To reduce the risk of personal injury or damage to equipment: • Extend leveling jacks to the floor. • Ensure that the full weight of the rack rests on the leveling jacks. • Install stabilizing feet on the rack. • In multiple-rack installations, secure racks together. • Extend only one rack component at a time. Racks may become unstable if more than one component is extended.
Helpful web sites For third-party product information, see the following HP web sites: • http://www.hp.com • http://www.hp.com/go/storage • http://www.hp.com/support/ • http://www.docs.hp.
1 HAFM overview The HAFM is a Java-based GUI that enables you to manage users and products, monitor products, and open Element Managers. This chapter describes the following topics: • HAFM components, page 19 • SAN life cycle, page 22 • Searching the online Help, page 23 • System requirements, page 23 HAFM components The HAFM application is installed on the 1U rack-mount appliance (HAFM appliance) to provide local access to managed products.
NOTE: Although products can perform normal operations without an HAFM appliance, the HAFM appliance should operate at all times to monitor product operations, report failures, log event changes, and log configuration changes. HAFM application The application is composed of two parts: the appliance (which runs only on the HAFM appliance) and the client. The server is installed on one HAFM appliance and stores storage area network (SAN)-related information; it does not have a user interface.
There are a two ways to ensure the pubic and private designations of the LANs. • Assign the private LAN IP address, 10.x.x.x, to the LAN you want designated as the private LAN. You must also have the public LAN connection active when the HAFM appliance is booting up. • Configure a specified Ethernet interface on the HAFM appliance to be the public LAN by manually editing a file on the HAFM appliance to explicitly specify which IP address the HAFM application should use as the public LAN.
address as the Internet URL, and then entering a user name and password at a login screen. The PC browser then becomes a management console. • A PC-based Telnet session using the command line interface (CLI). Any platform that supports Telnet client software can be used. SAN life cycle The HAFM application enables you to proceed through the four stages of the managed life cycle of the SAN with confidence. Table 2 describes the different stages in the life cycle.
Searching the online Help To find help topics that contain a particular word or phrase: 1. On the Help window, click the tab with the magnifying glass icon. 2. In the Find field, enter the word or phrase for which you want to search. 3. Press Enter. If any matches are found, a list of topics displays in the panel. The number of times the word or phrase occurs in the topic displays next to the name. 4. Click the name to display that topic. System requirements HAFM has the following requirements.
HAFM client system requirements NOTE: The client system running HAFM must meet the following requirements.A maximum of 8 clients is allowed per HAFM appliance. Table 3 Windows system requirements Processor 1 GHz Intel Pentium III and up Hardware CD-ROM Operating system Windows 2000 Professional with service pack 3 Windows NT 4.
2 Using the HAFM application This chapter provides instructions for using the HAFM application. The following topics are described: • Managing the appliance, page 25 • Viewing the HAFM main window, page 28 • Accessing the HAFM application, page 31 • Monitoring the HAFM application, page 36 • Group Management, page 39 • Exporting and importing data, page 44 • Backing up and restoring data, page 47 Managing the appliance This section describes how to add, remove, log into, and log out of the HAFM appliance.
2. You may specify a new address by typing it in the field, or selecting one from the drop-down list. NOTE: Localhost is the default value. The application automatically determines the local IP address and uses that value as the local host address. 3. The HAFM appliance name displays in the Server Name field. 4. Enter your user ID and password. 5. Select whether you want the application to remember your password the next time you log in. 6. Click Login.
2. From the Network Address drop-down list, select the appliance you want to remove. 9 The selected appliance IP address displays in the Network Address field. IMPORTANT: The appliance will be deleted without confirmation. 3. Click Delete. 4. Click OK.
Viewing the HAFM main window Figure 4 shows the View All display of the HAFM main window. There are nine panels in this view. You can customize your screen view to show only the information that you need (see ”Creating a customized view” on page 70). NOTE: Some panels may be hidden by default. To view all panels, select View > All Panels, or press F12.
Toolbar The toolbar (Figure 4 2) provides buttons to perform various functions. Place your cursor on a toolbar button for information about the button function. NOTE: Depending on your configuration, the buttons on your toolbar may differ from the example. View tab The View tab (Figure 4 3) displays the Master Log, Physical Map (topology), and Product List. Change the default size of the display by placing the cursor on the divider until a double arrow displays.
Anchoring or floating the Minimap You can anchor or float the Minimap to customize your main window. Floating the Minimap To float the Minimap and view it in a separate window, click the Detach button in the upper right-hand corner of the Minimap. Anchoring the Minimap To return the Minimap to its original location on the main window, do one of the following: • Click Attach in the upper right-hand corner of the Minimap. • Click Close in the upper right-hand corner of the Minimap.
as enabled. If Call Home is disabled on any one of the HP switches or on the management application, the icon will appear as disabled. Click the icon to open the Call Home Settings Summary dialog box, which lists whether the Call Home feature is enabled on the management application and on each managed HP switch or director. • Server Name—Displays the name of the appliance to which you are connected. • Client Count—Displays the number of clients.
The VNC Authentication window opens (Figure 5). Figure 5 VNC Authentication window 3. Enter the password and click OK. The Welcome to Windows dialog box opens (Figure 6). NOTE: The default VNC viewer password is password. Figure 6 Welcome to Windows dialog box 4. Click Send Ctrl-Alt-Del at the top of the window to log on to the HAFM appliance desktop.
The Log On to Windows dialog box opens (Figure 7). NOTE: Do not press Ctrl-Alt-Delete on your keyboard. This logs you on to the PC, instead of the HAFM appliance. Figure 7 Log On to Windows dialog box 5. Enter the Windows 2000 user name and password and click OK. The Connect to HAFM dialog box opens (Figure 8). NOTE: The default Windows 2000 user name is Administrator and the default password is password. The user name and password are case sensitive.
7. Enter your user name and password in the User ID and Password boxes. NOTE: If user names have not been established, use the default user name Administrator and password password. HP recommends that you change the default password as soon as possible. To add or modify user names, passwords, and user rights, see ”Managing users” on page 51. 8. If you want your computer to save the login information, select Save Password. 9. Click Login. The HAFM window opens (Figure 9).
• The remote system is configured to connect with the HAFM appliance over a TCP/IP network connection. • No more than seven other remote users are currently logged in to the HAFM application. Operators at remote workstations can manage and monitor all products controlled by the HAFM appliance. Each active connection between a remote workstation and an HAFM appliance and managed product is called a session. To access the HAFM appliance from a remote workstation, perform the following: 1.
Logging out of an appliance To log out of the appliance select SAN > Log Out from the HAFM menu bar. You are logged out of the current appliance and the Connect to HAFM dialog box opens (Figure 8). Monitoring the HAFM application Starting and stopping HAFM Services HAFM Services is the software application that provides services to the HAFM application. HAFM Services runs only on the HAFM appliance. Reviewers - please provide a clearer description of HAFM Services.
The appliance immediately shuts down the appliance-Client connection. The status bar on the Client displays that the appliance connection was lost. All products and connections on the Physical Map stay in the condition they were in when the session ended; they do not turn grey. The Client displays a message stating that a user disconnected the Client from the appliance. NOTE: To prevent this user from reconnecting, remove the user account through the HAFM Server Users dialog box.
You can determine the discovery status of products by looking at the status column in the Product List. Table 6 shows the list of operational statuses and their equivalent discovery states. Table 6 Discovery state equivalent Operational status Discovery state Unknown Offline Operational Online Degraded Failed Grouping on the Physical Map To simplify the Physical Map, devices appear in groups (Figure 11). Groups appear with background shading and are labeled as a group.
To expand all groups on the topology by one level, click the Expand icon on the HAFM toolbox ( ). Group Management Group Management lets you make changes related to the configuration and monitoring of switches and directors to multiple devices at the same time. You can: • Install E/OS firmware on switches and directors. • Initiate data collections on multiple switches. • Create group event logs. Selecting Action tab with Run Data Collection To access the Group Manager: 1. Select the Configure menu. 2.
Figure 12 Select Group Action dialog box Select Run data collection and the following tabs display on the left side. The tabs correspond to the steps for the action. The options that cannot be selected initially, can be selected as previous tabs are completed. • Select Action • Select Switches • Output Options • Execution Options • Data Collection Selecting Action tab with Install E/OS selected The Install E/OS firmware option installs firmware on a group of products.
Selecting Action tab with Create Group Event Log selected Select Create Group Event Log and the following tabs display: • Select Action • Select Switches • Create Log Displaying Select Action tab Displays the Select Group Action options.
Select the Use Group drop down field to select a group and the table is populated with the products in the group. To add a group, move a switch or director from the Available Switches/Directors table to the Selected Switches/Directors table. Select Save and type a group name and click OK. Displaying other tabs • Displaying Select Firmware: Lists all firmware that can be installed on any product in the selected products list. Use this tab to add, revise and delete firmware.
Zooming in and out of the Physical Map You can zoom in or out of the Physical Map to view products and ports. Zooming in To zoom in on the Physical Map, use one of the following methods: 1. Click the zoom-in icon ( ) on the HAFM toolbox. or Select View > Zoom from the HAFM menu bar. The Zoom dialog box opens (Figure 14). Figure 14 Zoom dialog box 2. Select a zoom percentage. 3. Click OK. Zooming out To zoom out of the Physical Map, use one of the following methods: 1.
Exporting and importing data The import and export features are important functions of the application. You can import and export data for many reasons, including to communicate issues to the support center and to capture network status. NOTE: Currently, you can only export to and import from the same releases of the application (for example, export from release 8.0 and import to release 8.0).
• Disk—Saves the exported files to the disk in \Client\Data\sandate\san*.zip. • EMail—Mails the exported files as an e-mail attachment directly from the application. 3. Select the types of files that you want to export from the Files check list. Depending on the export destination you selected in the previous step, some file types may not be available. NOTE: Performance data is an optional feature. If you purchased this option, you can select the switches for data export (Figure 16).
A Confirmation message opens (Figure 17). Figure 17 Export Confirmation message 7. Make a note of the file location and name and click OK. Importing data You can select to import the following information to the application: • SAN File (zip)—Imports an entire SAN in zip format. • Nicknames—Imports the nicknames that were assigned to HP switches using the HAFM appliance and displays them on the Physical Map and Product List as product labels.
The Import dialog box opens (Figure 18). Figure 18 Import dialog box 2. Select the type of file you want to import from the Import From list. 3. Enter the path and file name in the File Name box. NOTE: The default path is \ClientData\san\san*.zip. Importing the rep*.zip file causes errors. 4. Click OK. A confirmation message box opens. • If you selected SAN File, Nicknames, or Properties, continue with step 5. • If you selected Server HBA Mappings or Storage Port Mapping, go to step 6.
• User launch scripts • User-defined sounds • All data exported through the Export option on the SAN menu NOTE: Firmware files are not backed up. Backing up data If you keep a read/writable (CD-RW) disk in the CD recorder drive of the appliance, critical data from the HAFM application is automatically backed up to the CD-RW disk when the data directory content changes or when you restart the HAFM application.
A message displays asking if you want to overwrite the existing files. b. Click Yes. 13.Start HAFM Services by selecting the Start > Programs > HAFM > Start Services. 14.Ensure discovery is turned on by selecting On from the Discover menu. 15.Follow the instructions provided by the InstallShield wizard.
Using the HAFM application
3 Managing the HAFM application This chapter provides instructions for managing and customizing the application. • Accessing HAFM, page 51 • Managing users, page 51 • Managing user groups, page 56 • Discovering a SAN, page 59 • Configuring the SNMP agent, page 67 • Customizing the main window, page 69 Accessing HAFM You can access HAFM two ways: • Log in from a browser-capable PC connected through an Ethernet LAN segment. • Log in remotely with an HAFM client application.
Viewing the list of users Select SAN > Users from the HAFM menu bar to view a list of users, their event notification settings, their e-mail addresses, and a list of user groups to which they belong in the Users dialog box (Figure 19). Figure 19 HAFM 8.6 Server Users dialog box Adding a user account To add a user account: 1. Select SAN > Users from the HAFM menu bar. The HAFM 8.6 Server Users dialog box opens (Figure 19). 2. Click Add. The Add User dialog box opens (Figure 20).
• User ID • Password • Retype Password 4. Select the Enable check box to enable e-mail notification for the user. A message may appear stating that you must enable event notification for the SAN. Click Yes. 5. Click the Filter link to specify the event types for which to send e-mail notifications to this user. See ”Filtering event notifications for a user” on page 54 for details. 6. Click OK. The new user appears in the Server Users dialog box. 7. Click OK.
Filtering event notifications for a user The application provides notification of many different types of SAN events. If a user needs to know only about certain events, you can specify which event notifications are sent to that user. To filter event notification: 1. Select SAN > Users from the HAFM menu bar. The HAFM 8.6 Server Users dialog box opens (Figure 19 on page 52). 2. Click the Filter link in the Email column associated with the user for whom you want to filter events.
The Remote Access dialog box opens (Figure 22). Figure 22 Remote Access dialog box 2. Select the Allow remote management sessions check box to allow others to access the appliance remotely. 3. Enter the maximum number of remote sessions you want to allow. 4. Select whether to allow all or some network addresses to connect. 5. If you select Only network addresses below to connect or All network addresses EXCEPT those below to connect, enter the appropriate addresses in the Network Address box.
3. Click Yes. • The user is disconnected. • The appliance immediately shuts down the appliance-client connection. • The status bar on the client screen shows a message stating that the appliance connection was lost. • All products and connections on the Physical Map stay in the condition they were in when the session ended; they do not turn grey. • The client screen shows a message stating that a user disconnected the client from the appliance.
Creating a user group To create a user group and specify access to certain features and views in the application: 1. Select SAN > Users from the HAFM menu bar. The HAFM 8.6 Server Users dialog box opens (Figure 19 on page 52). 2. Click Add located below the Groups table. The HAFM Group dialog box opens (Figure 24). Figure 24 HAFM Group dialog box 3. Enter information for the new user group in the following boxes: • Name • Description 4.
12.Click OK. The new group appears in the Groups list of the Users dialog box. To add users to this group, follow the instructions in ”Assigning users to groups” on page 58. 13.Click OK. Changing a user group An administrator can change a user group’s access to certain features and views. This provides added security for your SAN as well as your management application. To change a user group: 1. Select SAN > Users from the HAFM menu bar. The HAFM 8.6 Server Users dialog box opens (Figure 19 on page 52). 2.
To assign a user to an existing group, perform the following procedure: 1. Select SAN > Users from the HAFM menu bar. The HAFM 8.6 Server Users dialog box opens (Figure 19 on page 52). 2. Select a user in the Users list. 3. Select the groups to which you want to assign the user in the Groups list. 4. Click . The user is assigned to the selected groups. 5. Click OK. Determining user groups An administrator can determine the groups to which a user belongs through the HAFM Users dialog box. 1.
1. Select Discover > Setup from the HAFM menu bar. The Discover Setup dialog box opens (Figure 25). Figure 25 Discover Setup dialog box NOTE: To discover all SAN products, you must specify each product’s IP address in the Discover Setup dialog box (Out-of-Band tab). If you do not configure the application to discover the devices directly, the connections and attached devices may not appear correctly. 2.
2. Verify the SNMP settings. a. Launch Embedded Web Server (EWS) by opening a web browser application and entering the IP address of the product as the Internet uniform resource locator (URL). For example, http://10.1.1.11. b. Log in and click OK. c. Select Configure from the navigation panel. d. Select the Management tab. The Management and SNMP tab views display. Figure 26 SNMP tab e. Verify that the Enable SNMP Agent option is selected. f.
The Unit Properties tab view displays showing product properties. Figure 27 The Unit Properties tab c. Verify that the type number is one of the following: 003016 003032 003216 003232 004300 004500 005000 006064 006140 d. Verify that the World Wide Name has the correct syntax (xx:xx:xx:xx:xx:xx:xx:xx). 4. Verify SNMP connectivity. a. Use a third-party MIB browser to verify the SNMP connection. b. Change SNMP default timeout.
5. Stop the HAFM appliance Services by selecting the Start > Programs > HAFM > Stop Services. A DOS window displays messages of services being shut down. 6. Increase the default SNMP settings. If the device is running heavy traffic or is known to have slow SNMP response time, moderately increase the SNMP timeout (default timeout is one second) and retry count (default count is one retry). 7. These two values are controlled by two VMParameters residing in the bin\HAFMService.
• Description • IP Address • Subnet Mask associated with the IP address 5. If you want to generate a sequence of IP addresses: • Select the Generate a sequence of IP addresses check box. • Enter the last IP address in the Last IP box. NOTE: octets. All IP addresses in a sequence must be on the same subnet and have the same first three 6. Click OK. Changing an IP address To edit IP addresses or associated subnets that are listed on the Discover Setup dialog box: 1.
1. Select Discover > Setup from the HAFM menu bar. The Discover Setup dialog box opens (Figure 25 on page 60). 2. Select the IP address that you want to change from the Available Addresses list. 3. Click Add. The Address Properties dialog box opens (Figure 28 on page 63). 4. Click the SNMP tab. The Community Strings tab opens (Figure 29). Figure 29 Address Properties dialog box (Community Strings tab) 5. Select an option in the Read box. • Select Default ‘public’ to select the default string.
5. Click Default ‘public’ and Default ‘private’. 6. Click OK. Turning discovery on and off To turn discovery on and off, select Discover > On | Off from the HAFM menu bar. Determining the discovery state NOTE: The Product List panel may be hidden by default. To view the Product List, select View > Product List from the HAFM menu bar or press F9. You can determine the discovery status of products by looking at the Status column in the Product List.
3. On the Address Properties dialog box, click the Product Type and Access tab. Figure 30 Address Properties dialog box (Product Type and Access tab) 4. Select the type of device from the Product Type drop-down list. 5. If you select from the Device Type drop-down list, go to step 16. 6. If you select Switch from the Device Type drop-down list, go to step 14. 7. Enter a user ID in the User ID field. 8. In the Password and Retype Password fields, enter the password. 9. Click OK.
Figure 31 shows the dialog box used to configure the SNMP agent. Figure 31 SNMP Agent Setup dialog box Turning the SNMP agent on or off To turn the SNMP agent on or off, select Monitor > SNMP Agent > On | Off from the HAFM menu bar. Configuring trap recipients To configure the SNMP agent that runs on the appliance and implements the Fibre Alliance MIB, perform the following: 1. Select Monitor > SNMP Agent > Setup from the HAFM menu bar. The SNMP Agent Setup dialog box opens (Figure 31). 2.
7. Enter the User Datagram Protocol (UDP) port number in the Port box. This overrides the default UDP port number for a trap recipient with any legal, decimal UDP number. 8. Select a community string from the Community String list. 9. Click OK. Editing trap recipients To edit an existing trap recipient: 1. Select Monitor > SNMP Agent > Setup from the HAFM menu bar. The SNMP Agent Setup dialog box opens (Figure 31 on page 68). 2. Click the Trap Recipients tab. 3.
You can create views that show only certain fabrics. If you discover or import a SAN with more than 2000 devices, the devices appear on the Product List, but do not appear on the Physical Map. Instead, the topology area shows a message stating that the topology cannot be displayed. You can create a new view to filter the number of devices being discovered.
The Create View dialog box displays (Figure 35). Figure 35 Create View dialog box (Include Assets via Selection option) 5. Select the fabrics you want to include from the Available Fabrics list. NOTE: Other in the Available Fabrics or Selected Fabrics lists refers to all isolated devices and connected sets. You see all newly discovered devices in the category even if the devices were not originally part of the view. Select Other to display all isolated devices. 6.
9. Select the columns you want to see in the Product List from the Available Product List Columns list. 10.Click to move your selections to the Selected Product List Columns list. 11.To add, edit, or remove columns, see ”Customizing the Product List” on page 73. 12.Click OK. The new view appears. NOTE: If you select a customized view, any newly discovered devices appear in the list. Editing a customized view To edit a customized view: 1. Select View > Edit View from the HAFM menu bar.
6. Click OK. Deleting a customized view To delete a customized view: 1. Select View > Delete View from the HAFM menu bar. 2. Select the view you want to delete. 3. Click OK. Selecting a customized view To select a customized view click the View tab and select the view name from the list. Customizing the Product List You can customize the Product List by creating views that display certain fabrics or certain levels of detail on the Product List.
8. Select a column from the Available Product List Columns list and click column in the Product List. to display the new The column name moves to the Selected Product List Columns list. 9. Click OK. The new column appears in the Product List. Changing a column on the Product List To edit labels, definitions, information, and icons of existing Product List columns: 1. Select View > Edit View from the HAFM menu bar. 2. Select the view you want to edit. The Edit View dialog box opens (Figure 37 on page 72).
6. Click Remove.
Managing the HAFM application
4 Configuring SAN products and fabrics This chapter provides instructions for configuring products, fabrics, and trap forwarding. • Managing SAN products, page 77 • Configuring Enterprise Fabric Mode, page 82 • Configuring fabric binding, page 83 • Persisting and unpersisting fabrics, page 84 • Configuring trap forwarding, page 87 Managing SAN products Use the HAFM application to manage discovered products.
2. Use a text editor to open the following script: \bin\HAFM_ElementMgr.bat. 3. Under the heading, rem HAFM Element Manager, find the line that begins: ...ElementManagerStandAlone -s ServerIp -p ProductIp -u UserName -pw Password 4. Enter the appropriate values for the following parameters: • ServerIp • ProductIp • UserName • Password Example: ...ElementManagerStandAlone -s 172.16.9.10 -p 172.16.9.211 -u Administrator -pw password 5. Save and close the file. 6.
The Properties dialog box appears (Figure 41). Figure 41 Properties dialog box NOTE: The product you select must be online for you to edit this information. 2. Edit the product properties as appropriate. 3. Click OK. Determining product status Determine product status by looking at the status icons on the Physical Map or the Product List. Table 9 describes the status icons.
Before you display the route between two ports, ensure that: • All switches or directors in the route are managed by the HAFM application and attached to the same appliance. • All switches or directors in the route are attached to the same appliance. • All switches or directors in the route are Director 2/64, Director 2/140, Edge Switch 2/32, Edge Switch 2/16, or Edge Switch 2/24 models and are running firmware 1.3 or higher. • All attached products in the route are in the same zone.
Hiding routes You can hide routes between two ports in a multiswitch fabric. To hide the route: 1. Display the route that you want to hide. See ”Displaying routes between ports” on page 79. 2. Right-click the route and select Hide Route. Displaying properties of routes To display the properties of a route: 1. Display the route that you want to hide. See ”Displaying routes between ports” on page 79. 2. Right-click the route and select Properties. The Route Properties dialog box appears (Figure 44).
The Fabric Properties dialog box appears (Figure 45). Figure 45 Fabric Properties dialog box The nickname is the only fabric property that can be changed. Assigning a nickname to a fabric is optional. However you cannot revert to having no nickname after one has been assigned. You can change the nickname if you choose, but you cannot leave the Nickname box blank after assigning a nickname.
The Enterprise Fabric Mode dialog box appears (Figure 46). Figure 46 Enterprise Fabric Mode dialog box 2. Select the fabric for which you want to configure Enterprise Fabric Mode from the Fabric Name list. The fabric’s current status shows in the Enterprise Fabric Mode box. 3. To enable Enterprise Fabric Mode on the selected fabric, click Activate. To disable Enterprise Fabric Mode on the selected fabric, click Deactivate. NOTE: You must be managing the fabric in order to disable Enterprise Fabric Mode.
The Fabric Binding dialog box appears (Figure 47). Figure 47 Fabric Binding dialog box 2. Select the Enable/Disable check box for the fabric for which you want to configure fabric binding. 3. Click OK. Adding and removing switches With fabric binding enabled, you can add or remove switches from the membership list.
NOTE: Each fabric has an HP principal switch to manage the devices in fabric. If the principal switch changes, the new fabric must be manually persisted. Persisting a fabric To persist a fabric from the HAFM main window, do one of the following: • Select a fabric in the Physical Map or Product List, and then select Configure > Persist Fabric from the menu bar. • Right-click the fabric in the Physical Map or Product List, and then select Persist Fabric.
The Fabric Log lists changes to the persisted fabric. For details about the fabric log, see ”Monitoring events” on page 89. Product status When you add a product to a persisted fabric, is appears with a plus (+) icon (Figure 49). Figure 49 Product added to persisted fabric When you remove a product from a persisted fabric, it appears as a ghost image with a minus ( - ) icon (Figure 50). To find a product that is removed from a persisted fabric, right-click the ghost image, and then select Find Product.
On the Physical Map, the ghost fabric shows its original products with minus symbols (Figure 50). On the Product List, the ghost fabric is shown as offline without products. The fabric log resets after the fabrics merge. When you split merged fabrics, the fabric that includes the principal switch becomes the persisted fabric. When you move a product in a persisted fabric’s topology, the new location is stored on the client.
The Add Trap Recipient dialog box appears (Figure 53). Figure 53 Add Trap Recipient dialog box 3. Enter the appropriate information in the following boxes: • Description • IP Address • Port NOTE: The HAFM appliance interprets trap data and displays the proper port value for all firmware levels. When traps are generated on the switch, firmware versions 4.0 and below send the actual port number and firmware versions 5.X and above add one to the port number to match the specification.
5 Monitoring SAN products This chapter contains the following topics, which describe the tools you can use to monitor SAN products. • Monitoring events, page 89 • Using event notifications, page 92 Monitoring events The HAFM application provides logs that you can use to monitor SAN products. You can view all events or specify which events you want to view.
Figure 54 Master log The following columns are in the master log: • Source—The product on which the event occurred. • Type—The type of event that was performed (for example, client/server communication events). • Description—Description of the event. • Time—The time and date the event occurred. • IP—The IP address of the product on which the event occurred. • Node Name—The name of the node on which the event occurred. • Port Name—The name of the port on which the event occurred.
Exporting log data You can export HAFM log data in tab-delimited format. This feature is useful if you want to provide the data to a third party or include it in a report. 1. On the View Logs dialog box (Figure 55), select the log you want to export. 2. Click Export. The Save dialog box appears. 3. Browse to the folder where you want to save the file. 4. Enter a file name in the File Name box. 5. Click Save. To view the exported file in table format, open the file in Microsoft Excel.
NOTE: When using the View Logs dialog box, you can copy only one row at a time. To copy multiple rows of data, copy the data from the master log on the HAFM main window. Using event notifications You can configure the application to send event notifications to e-mail addresses at certain time intervals. This is a convenient way to keep track of SAN events. You can also configure products to “call home” to notify the support center of product problems.
Configuring Call Home notification When you configure Call Home notification, the appliance automatically dials in to a support center to report system problems. Refer to the HA-Fabric Manager Appliance installation guide for details. Enabling Ethernet events An Ethernet event occurs when the Ethernet link between the appliance and the managed product is lost. To enable Ethernet events notification: 1. Select Monitor > Ethernet Event from the HAFM menu bar.
Monitoring SAN products
6 Optional HAFM features This chapter provides detailed information on using, administering, and configuring optional HAFM features. There are two types of features: • Keyed features, which require the purchase of feature keys. • Features that do not require feature keys, but do require separate keyed features.
4. Enter the feature key in the Key box. 5. Click OK. Event Management Event Management automates tasks that are performed on the SAN.
Figure 61 shows the dialog box you use to create a trigger phrase. Figure 61 Trigger phrase development dialog box Table 10 Trigger operators Operator Value == Number != Number < Number <= Number > Number >= Number Contains String Does Not Contain String Starts With String Ends With String Phrase operators If the rule states that more than one operator must apply, phrase operators describe the relationship between them.
Event triggers also allow you to set time limits so that the trigger occurs only if the event happens within a certain time and date range. For example, you may specify that all offline events between 5 p.m. and 8 a.m. trigger e-mail message and log actions to take place. Schedule triggers Schedule triggers monitor the system clock and fire when the specified time and date conditions are met.
NOTE: You can specify macros for some actions by clicking in the Value column and then right-clicking and selecting an argument from the menu. See ”Writing Event Management macros” on page 246 for instructions. Screen To view Event Management, click the Event Management tab on the HAFM main window. All configured rules appear (Figure 62). From this dialog box, you can manage Event Management rules. See Table 11 for a description of each screen section.
Rules This section provides instructions for writing rules and setting up automated tasks. Before you begin, decide the triggers, actions and schedules you want the rule to follow. For more information see: • Rule ”Triggers” on page 96 • Rule ”Actions” on page 98 • ”Schedule triggers” on page 98 Creating a rule To create a rule: 1. Click the Event Management tab on the HAFM main window to display Event Management information (Figure 62). Figure 62 Event Management tab 2. Click New.
The Add Rule dialog box appears (Figure 63). Figure 63 Add Rule dialog box 3. Enter information in the following boxes: • Name • Group • Description 4. Select the Active check box to make the rule active after you are finished creating it. 5. Select the type of trigger from the trigger list. 6. Follow the instructions on the screen. NOTE: Each selection on the Trigger list or Actions list shows a different dialog box with instructions. Follow the instructions on each dialog box to create rules.
Also from the Event Manager tab, you can manage the Event Management rules. Select a rule and then click the appropriate button to: • Activate the selected rule • Deactivate the selected rule • Edit the selected rule • Copy the selected rule • Delete the selected rule SANtegrity features SANtegrity includes a set of features that enhance security in Storage Area Networks (SANs) that contain a large and mixed group of fabrics and attached devices.
If the director or switch is online, activating Switch Binding populates the Membership List in the Switch Binding - Membership List dialog box (Element Manager). The following WWNs can currently be connected to the director or switch, depending on the connection policy set in the Switch Binding – State Change dialog box: • WWNs of devices connected to F_Ports (F_Port connection policy). The WWN is the WWN of the attached device's port. • WWNs of switches connected to E_Ports (E_Port connection policy).
• To enable Switch Binding (check mark is not in the Enable Switch Binding check box), click the Enable Switch Binding check box to add a check mark. Go on to step 3 to set the Connection Policy. 3. Click one of the Connection Policy options. • Restrict E_Ports—Select if you want to restrict connections from specific switches to switch E_Ports. Switch WWNs can be added to the Switch Membership List to allow connection and removed from the Membership List to prohibit connection.
See ”Editing the Switch Membership List” on page 104” for information on how the Switch Membership List is populated with WWNs according to options set in the Switch Binding – State Change dialog box. 2. If nicknames are configured for WWNs through HAFM and you want these to display instead of WWNs in this dialog box, click Display Options. The Display Options dialog box displays. 3. Click Nickname. 4. Click OK. 5.
• Because switches are bound to a fabric by World Wide Name (WWN) and domain ID, the Insistent Domain ID option in the Configure Switch Parameters dialog box is automatically enabled if Fabric Binding is enabled. • If Fabric Binding is enabled and the switch is online, you cannot disable Insistent Domain ID. • If Fabric Binding is enabled and the director or switch is offline, you can disable Insistent Domain ID, but this disables Fabric Binding.
to the director or switch port and cannot connect to other devices in the zone with Switch Binding enabled. Port fencing Port Fencing is a policy-based feature that allows the user to set thresholds on port events. If the port generates more events in a user specified time period than the user thinks he should tolerate, the Port Fencing feature blocks the port, disabling transmit and receive traffic until the user has a chance to investigate, solve the problem, and manually unblock the port.
This section describes the following topics: • Options, page 108 • Configuration, page 108 • Global threshold changes, page 109 • Open Trunking log, page 110 Options Access open trunking through the HAFM menu bar. Figure 67 shows the Configure Open Trunking dialog box. Table 12 describes the function of each option.
1. Select Configure > Open Trunking from the HAFM menu bar. The Configure Open Trunking dialog box appears (Figure 67). Figure 67 Configure Open Trunking dialog box 2. Select the Enable Open Trunking check box. 3. Specify the congestion threshold value. If you do not specify a threshold value for a port, open trunking uses a default value that is based on port type (1 Gb/s or 2 Gb/s) and channel bandwidth. 4. Select the Event Notification options, as appropriate. 5. Set the low BB Credit threshold value.
Open Trunking log The Open Trunking log (Figure 68), provides details on flow rerouting through switch ports.
Select Monitor Utilization > On from the main window menu bar (or press Ctrl+U). To turn utilization off: Select Monitor > Utilization > Off from the main window menu bar. See ”Viewing the HAFM main window” on page 28 for details. Monitoring switch performance A performance graph shows transmit, receive, and error data from the switch ports to the connected devices. The graphs can be sorted by the errors, transmit data, or receive data. To monitor switch performance: 1.
Viewing performance data Refer to the HAFM online Help for instructions to generate and view HTML reports of performance data. Exporting performance data To export SAN performance data to communicate issues to the support center, capture network status, and archive historical data see ”Exporting and importing data” on page 44 or refer to the HAFM online Help. NOTE: Currently, you can export only to the same versions of the application.
• Measure—Assigns a unit of measure for the graph • Time Range—Selects a time range • Histogram Display—Shows the percentage of trunk utilization over a period of time Move the Histogram slide-bar to change the period of time displayed. • Linear Display—Shows a linear average of the trunk utilization This function provides a forward-looking trend analysis and is intended to notify the user of resource modeling problems.
• Three tabs: • Physical Map • Product List • Event Management • A menu bar. Click a menu item to see a list of available options. • A device toolbox. The toolbox provides tools to add, select, and connect devices in the SAN. To see a definition of a tool, position your curser over the tool. • Master log. • Minimap. To open the planning window select View > Planned SAN from the HAFM menu bar.
The New Plan dialog box appears (Figure 72). Figure 72 New Plan dialog box 2. Enter a name in the New Plan box. 3. Select one of the following options: • Start with discovered topology to use the discovered topology as the basis for the new plan • Start Empty to start the new plan with an empty topology 4. Click OK. Opening a plan 1. Select SAN > Open Plan from the Planning window menu bar (or press Ctrl+O). The Open Plan dialog box appears (Figure 73). Figure 73 Open Plan dialog box 2.
The Insert Multiple Devices dialog box appears (Figure 74). Figure 74 Insert Multiple Devices dialog box b. Enter a quantity for each device type you want to add. c. Click OK. Arranging devices After adding devices to your plan, you can rearrange them: 1. Click the Select Devices icon ( ) on the devices toolbox. 2. Click a planned device icon and drag it to the desired location. 3. Repeat as necessary. Connecting devices To connect the devices in your plan: 1.
The planned device’s Properties dialog box appears (Figure 75). Figure 75 Planned device Properties dialog box 2. Enter a nickname for the device in the Nickname box (optional). 3. Enter or edit information. 4. Click OK. Deleting devices To delete planned devices right-click on the planned device icon on the Physical Map and select Delete. Displaying a planned device as an installed device Right-click on a planned device icon on the Physical map and select Planned Device.
The Port Properties dialog box appears (Figure 76). Figure 76 Port Properties dialog box 7. Enter a port number in the Port Number box. 8. Select a port type from the Port Type list (available only for multiport devices). 9. Click OK. 10.Optionally, right-click a planned device icon and select Planned Device. The device changes from a planned device to an implemented device. Configuring ports You can configure port numbers and types for planned devices.
The following example shows the syntax for a planning rule: set rule_id = SAN_1 where rule = “check_for_valid IPAddress for (device=switch or device=hub or device=bridge)” and description = “valid IP addresses must be specified for all switches, hubs and bridges” and headline = “Valid IP must be specified/property validation” and errormssg = “The device labeled {0} has invalid IP address” and remedy = “Please specify a valid IP address”; Table 13 Planning rule parameters Parameter Required to load rule?
• Connection rules specify which devices can be connected in a plan (see Table 14). • Property validation rules verify the validity or uniqueness of device names in a plan (see Table 15). • Capacity control rules verify the connections in a plan (see Table 16). Keywords The where rule parameter allows the following keywords: NOTE: Keywords are not case sensitive.
• Operators: =, <, <=, >, >= Table 14 Connection rules Syntax Description do_not_connect (device=x) Never connect device x to device x. do_not_connect (device=x) to (device=y) Never connect device x to y. do_not_connect (device=x) to (device=y) through (device=z) Never connect device x to y through z. do_not_attach (device=x) to (device=y) Never connect device x into a SAN that has device y. connect (device=x) Always connect device x to device x.
The Planning window appears (Figure 71). 2. Select Plan > Set Rules from the Planning window menu bar. The Planning Rules dialog box appears (Figure 77.) Figure 77 Planning Rules dialog box NOTE: If spelling or syntax errors are detected, the rule may not appear in the Planning Rules dialog box. 3. Select the rules you want to apply when evaluating the plan. 4. Click OK. Plan evaluation To evaluate a plan: 1. Select SAN > Open plan from the Planning window menu bar to open the plan. 2.
Plan conservation This section describes how to save, export, and print a plan. Saving a plan After you design a plan, you can save it for future reference. To save a plan with its current name select SAN > Save Plan. from the planning window menu bar: The plan is saved with the current name. To save a plan with a new name: 1. Select SAN > Save as Plan from the Planning window menu bar. The Save As dialog box appears. 2. Enter a new file name in the Save As box. 3. Click OK.
Optional HAFM features
7 Zoning Zoning defines the communication paths in a fabric. A zone consists of initiator and target ports in the SAN. Ports can communicate only with other ports in their zone. However, ports can be members of more than one zone. To zone devices in a fabric, the fabric’s principal switch must be an HP switch and HAFM must discover and manage it. HAFM performs zoning discovery once at startup, and thereafter once every two hours during routine discovery.
Zoning parameter Maximum value Number of zone sets in HAFM zoning library 64 Number of end ports 1024 Number of devices supported (including loop devices) 1024 1. The supported number of zones is based on a zone name with a maximum of 32 characters. On all edge switches and directors (except the Director 2/140), the maximum number of zones decreases if the names are 64 characters long. The limits are based on two members per zone.
• Remove a zone from a zone set (see ”Removing a zone from a zone set” on page 130). • Activate a zone set (see ”Activating a zone set” on page 130). • Deactivate a zone set (see ”Deactivating a zone set” on page 131). • Enable or disable the default zone (see ”Enabling and disabling the default zone” on page 132). • Export a zone set (see ”Exporting a zone set” on page 133). • Import a zone set (see ”Importing a zone set” on page 134). NOTE: occur.
The Zones, Zone Sets, and Potential Zone Members lists are displayed. NOTE: If the Zoning dialog box is open for longer than 30 minutes, the information displayed may not be current. Re-open the dialog box to increase zoning discovery speed and get the updated information. Adding a zone to a zone set To add a new or existing zone to a zone sets: 1. Display the zone library. (See ”Displaying the zone library” on page 127). The Zoning dialog box appears. 2. To create a new zone, click New Zone.
The Add Zone Member dialog box appears (Figure 79). Figure 79 Add Zone Member dialog box 5. Specify a zone member by its domain and port ID or world wide name (WWN) address. NOTE: Zoning by domain and port is supported only in Homogeneous Fabric interop mode. Do one of the following: • Select Domain/Port and enter the domain and port IDs in the appropriate boxes. • Select WWN and enter the WWN address.
4. Press Enter. 5. Select the zones you want to add to the zone set from the Zones list. 6. Click to the right of the Zones list to add the selected zones to the zone set. 7. To activate the zone set, see ”Activating a zone set” on page 130. 8. Click OK. Removing a member from a zone 1. Display the zone library. (See “Displaying the zone library” on page 177.) The Zoning dialog box appears (Figure 78). 2. Expand a zone by clicking the + symbol in the Zones list. 3.
The Activate Zone Set dialog box appears (Figure 80) . Figure 80 Activate Zone Set dialog box 4. Verify the information and click OK. A confirmation message appears (Figure 81). Figure 81 Activate Zone Set confirmation message 5. Click Yes to continue. The Zoning dialog box appears. 6. Click the Active Zone Set tab to view the active zone set and its zones. Verify that the switch is being managed properly. NOTE: occur.
The Deactivate Zone Set dialog box appears (Figure 82). Figure 82 Deactivate Zone Set dialog box The dialog box shows the names of the active zone set, and shows the new active zone set as none. Verify the information in this dialog box. 3. Click OK. The active zone set and its zones are deactivated. NOTE: If the default zone is enabled and the active zone set is deactivated, members of the zone may still be able to communicate.
NOTE: Default zones are only supported in Homogeneous Fabric interop mode. Default zones are not supported in Open Fabric interop mode. If default zoning is not available, the Default Zone button is disabled. To disable the default zone: 1. Display the zone library. (See “Displaying the zone library” on page 177). The Zoning dialog box appears (Figure 78). 2. Select the fabric for which you want to disable the default zone. 3. Disable the default zone by clearing the Default Zone button. 4. Click OK.
The file is saved to the specified folder. 7. Click OK. Importing a zone set To import a zone set XML file into a zone set library: 1. Display the zone library. (See ”Displaying the zone library” on page 127.) The Zoning dialog box appears (Figure 78). 2. Click Import. The Import Zone Set dialog box appears (Figure 84). Figure 84 Import Zone Set dialog box 3. Locate the folder that contains the exported zone set. 4. Select the XML file and click Import.
• Displaying zone members, page 137 • Saving the active zone set to a zoning library, page 138 • Comparing zone sets, page 138 Renaming a zone or zone set To rename a zone or zone set: 1. Display the zone library. (See “Displaying the zone library” on page 177.) The Zoning dialog box appears (Figure 78). 2. Right-click the zone or zone set that you want to rename and select Rename. 3. Enter the new name. (See ”Zoning naming conventions” on page 126.) 4. Press Enter to save the new name.
The Replace Zone Member dialog box appears (Figure 85). Figure 85 Replace Zone Member dialog box 3. Enter the domain and port IDs or the WWN of the replacement member. 4. Click OK. Copying a zone set To copy a zone set: 1. Display the zone library. (See ”Displaying the zone library” on page 127.) The Zoning dialog box appears (Figure 78). 2. Right-click the zone set that you want to copy. • Select Duplicate to copy the zone set. The copied zone set appears. 3.
3. Click OK. Viewing zone and zone set properties You can view information for zones and zone sets, such as name; number of zones, zone sets, or zone members; number of unique zone members; and status. 1. Display the zone library. (See ”Displaying the zone library” on page 127). The Zoning dialog box appears (Figure 78). 2. Right-click a zone or zone set and select Properties. 3. Click Close when you have finished viewing the properties. Finding members in a zone 1. Display the zone library.
The List Zone Members dialog box appears (Figure 86). Figure 86 List Zone Members dialog box 4. Click Close to close the dialog box. Saving the active zone set to a zoning library When you manage a switch’s zone set through one appliance, and then import that switch into a new appliance, you must save the zone set on the new appliance, This allows pre-existing zoning information on the switch to be stored on the new appliance. 1. Select Configure > Zoning from the HAFM menu bar.
The Select a Zone Set dialog box appears. 5. Select a zone set and click OK. The comparison results are displayed.
Zoning
8 SANtegrity Security Center This chapter provides instructions for using the SANtegrity Security Center.
Access the SANtegrity Security Center by clicking the Security tab or F8 on the main window. In order to use the Security Center, the user must have Security Administrator privilege. If not, the Security tab is hidden. Following is additional information about the components of the Security window: • The upper left part of the Security window shows the Fabrics list. All discovered fabrics are listed by their WWNs with their operational status icons on the left side.
NOTE: SANtegrity Authentication can also be accessed from any SANtegrity-capable Element Manager Configure menu by selecting SANtegrity Authentication. Accessing SANtegrity Authentication from the Element Manager lets you manage only one device at a time. Figure 87 Main window with Security tab Displaying the Fabrics list The Fabrics list displays all discovered fabrics listed by their WWNs with their operational status on the left side if the status is available.
NOTE: If a device is managed by the HAFM appliance, when the device displayed on the Security tab is offline or loses a MPI link, the previously discovered value may still display in the top table. If this switch is selected, a blank area displays in the bottom pane with an error message. Using the Authentication table Selecting a fabric When a fabric is selected from the left side, all switches within the fabric are displayed on the top table of the Authentication table.
If the security settings for a switch or director are changed by another management interface, then the following occurs: • If the switch that was changed by another interface is not currently configured by your HAFM appliance user, the top table accepts the changes, and an event is generated in the Security Log.
Figure 88 Main window with Security tab chosen If the check box for EWS or Telnet is not selected, then no user can log into the switch through this interface. When the interfaces are enabled, EWS and Telnet can be set to authenticate to a local database on the switch, a Radius server, or a local database then a Radius server. If the SSH check box is selected then all management data between the workstation and the switch through Telnet is encrypted using the SSH protocol.
A default user is set up in the switch user base. The ID of the user is Administrator and the password is password. There is one default user that displays in the table, with both Telnet and EWS check boxes selected. Adding a new user To add a new user, do the following: 1. Click Add. The Add/Edit User dialog box displays. Figure 89 Add/Edit User dialog box 2. Define all the fields. User ID must be unique. If you add an ID that exists in the system, it will be rejected.
1. Click Apply To. The Apply to Other Products dialog box displays listing the qualified switches and directors. Figure 90 Apply to Other Products dialog box To be listed on this dialog, the following must be met: • The switches and directors must be manageable. • The Element Manager must manage one of the following models: • A 16-port 1 gig or 2 gig Switch • A 32-port 1 gig or 2 gig Switch • A 64-port or 140-port Director • The firmware must be 7.0 or later. 2.
Figure 91 Security Change Confirmation and Status dialog box The Security Change Confirmation and Status dialog box includes the user ID who initiated the changes, the time that the changes were planned, the Server ID from which the changes are populated, and all the affected switches and directors. Server ID is identified by its server name plus IP address. The Detailed Changes table includes all the individual configurations that the security administrator made on the Users tab.
To thoroughly check the new changes, click different products on the product list and view detailed changes. NOTE: Populating user-related settings to multiple products causes the new settings to override the existing settings. Clicking Start causes the HAFM appliance to populate changes to the switch specified in the products list. The Close button is disabled during this process to prevent you from disrupting the process.
Figure 92 Main window Enabling API authentication If API authentication is enabled, the following guidelines must be followed: • There must be a minimum of one entry in the Permitted Software field. If not, a warning message displays when Apply is clicked. • The current HAFM appliance must be included. If not, the current appliance loses manageability and you are forced to use an alternate management interface to disable API authentication.
• If you select Radius Only, the HAFM appliance checks to see whether a Radius server is specified on the Radius Servers tab. If not, the Radius Only and Radius then Local options are not available from the drop-down menu. • If one Radius server is set to Radius Only, the Radius then Local option is available.
• When the server ID is defined only in the HAFM appliance and has not been added to the switch, the current appliance can be removed by not selecting the Include current server check box. If the current appliance is selected, Remove is disabled. • If the server ID and CHAP Secret have been added to the switch, highlight the current appliance, and click Remove. If the current appliance is removed from the Permitted Software list, the Include current server check box is enabled.
1. Select the HAFM appliance and click Change. The Add or Edit Software ID and CHAP Secret dialog box displays. If you modify a CHAP Secret for a non-local server on the Software tab, a message displays indicating you are about to modify the Chap Secret of this HAFM appliance in the switch's local database. The message also says to check the Server Properties dialog box for this switch and make sure the secret is updated accordingly.
Figure 94 Main window with Security tab, Authentication, Device tab To have two connected switches authenticate each other locally, each switch must have its own user ID, Node WWN, and CHAP secret, as well as the other switch’s user ID and CHAP secret. The switch can store more IDs and CHAP secrets if the switch has multiple connections with other switches only. You can also store IDs and CHAP secrets of switches that have no physical connections with this switch.
Understanding the Devices tab display and default settings When you access the Devices tab, do the following: 1. Ensure that the Node Name is already discovered and displayed in a uneditable text field. 2. Define the CHAP secret for the selected switch using one of two ways: • Click Generate to automatically have a CHAP Secret generated and to have it retyped in the Retype Secret field.
• Non-SANtegrity II compatible switches • Non-manageable switches • Non-HP switches • JBOD • HBA • Other storage devices When your HAFM appliance is installed with SANtegrity and you discover a secure or unsecure fabric, the E_port authentication is disabled, and the drop-down menus for port authentication display your HAFM appliance. If a device is SANtegrity capable, your HAFM appliance can discover its current security settings and display them on the table.
Figure 95 Add Device dialog box 1. Type the Node Name. • If Node Name is already in the Authenticated Devices list or is invalid, the new entry is rejected. • If the Node Name is in the Port Authentication List as a connected device, the device can be transferred from the Port Authentication List to the Authenticated Devices list. • If the Node Name is not in the Authenticated Devices list, but is discovered in the fabric and has CHAP secret, a message displays.
Populating a CHAP secret to a current switch 1. Select a CHAP secret for the current switch. 2. Click Apply to populate the CHAP secret in the current switch. Changing a CHAP secret for a switch 1. To modify a pre-defined CHAP secret for the current switch, click Apply. A confirmation message displays that asks if you want to modify the CHAP secret. 2. Click Yes to modify the CHAP secret of the current switch and populate the CHAP secret to all other connected and authenticating devices.
Enabling or disabling E_port and N_port authentication 1. Select or clear the check box for E_port or N_port authentication. The port authentication state overrides the E_port and N_port authentication at the switch level. Changing enable authentication method Select an option from the Enable Authentication Method drop-down list for E_port or N_port.
Changing the port authentication state for a nonmember device that is not managed 1. Select the E_port authentication check box for a device that is not manageable. 2. Change the port authentication state to Force Enabled or Switch Settings. The Secret column changes from No to Needed. 3. Double-click the corresponding Secret column to display the Add User dialog box. 4. Type the CHAP secret. 5. Click OK. The Secret column for that device displays Set. The device is added to the Authenticated Devices list.
Figure 96 Main window with Security tab, Authentication, IP ACL tab If the Enable IP Access Control List check box is selected, the restricted access to the follow IP addresses is enforced. If not checked, management interfaces can access the switch from any IP address. The check box is enabled only if at least one IP address is in the list. Adding a new IP address 1. Click Add. The Add/Edit IP Address or Range dialog box displays. 2. Enter an IP Address or an IP Address Range.
NOTE: If multiple IP address or ranges are selected, Edit is disabled. Removing multiple IP addresses at one time After adding, changing or removing IP addresses, to set the IP Access Control List, perform one of the following: • Click Apply and the changes are reflected for that switch in the Product Configuration table. • Click Apply To and a dialog box with a list of switches displays. • Click Reset and all the changes are dropped and the settings revert to the values that were set before the changes.
Figure 97 Main window with Security tab, Authentication, Radius Servers tab A maximum of three Radius servers can be set up per switch. The device that needs to authenticate by Radius server always display sat the top of the table. If the first device does not respond after a certain amount of time due to connection or other configuration problems, the next device is authenticated and so on. The Radius servers and Sequence table includes information about the following: • The Host Name can be an IP Address.
• Click Edit to display the Add/Edit Radius Server dialog box. Use this dialog box to define all the settings that display in the RADUIS Servers and Sequence table. • Select one or more Radius servers and click Clear to clear the settings. • Adjust the sequence of Radius servers by using the Move Up and Move Down buttons. • Click Reset to reverse the settings to the initial settings that displayed when the tab was first accessed. Applying changes and confirmation 1. Click Apply from the Radius Servers tab.
Figure 98 Security Log • Severity—The severity level of the event: informational, warning, and fatal. • User—The user associated with the event. • Reason—The reason code for the failure. • Description—The security event category includes the description that lists more details of the event and the IP address of the product. • Date and Time—The date and time that the event occurred. The format is yyyy/mm/dd hh:mm:ss:tt.
• The SANtegrity Security Center displays a Product Configuration table that lists all discoverable products and their security settings. The SANtegrity Authentication display does not have this table. • The SANtegrity Security Center Users tab displays an Apply To button. The SANtegrity Authentication Users tab does not have this button. • The SANtegrity Security Center Software tab displays an Apply To button. The SANtegrity Authentication Software tab display does not have this button.
SANtegrity Security Center
A Configuring HAFM through a firewall Networks can use a virtual private network (VPN) or firewall to prohibit communication between servers and clients. This appendix provides optional procedures for configuring HAFM client and server applications to function across remote networks through a firewall. This appendix describes the following topics: • Polling mode, page 169 • TCP port numbers, page 171 Polling mode Generally, the server calls the client when it has new data.
NOTE: This example illustrates the HAFM_c.bat file. The portion of this file starting with rem HAFM Client is also included in the HAFM_sc.bat file. Both files must be modified if they are installed on your computer. setlocal pushd %~dp0\.. call bin\set_cp.bat rem HAFM Client start %JAVA_HOME%\bin\HAFMClient.exe -Xmx256m -Xminf.15 -Xmaxf.35 -classpath %CLASSPATH%-Dsun.java2d.noddraw=true -Dsmp.fabricPersistenceEnabled=true -Dsmp.Mp.max=256 -Dsmp.deployment.prefix=Client/ -Dsmp.callback.passive -Dsmp.
-Dsmp.zoning.wait.timeout=180000 -Dsmp.debug -Dsmp.webServer -Dsmp.callback.passive -Dsmp.flavor=%APP_FLAVOR% Server ............... :end popd endlocal TCP port numbers This section provides information about configuring TCP port numbers for remote management interface (RMI) servers and registries to allow the HAFM client and server application to function across firewalls. HAFM function with RMI at TCP port level The HAFM appliance communicates with clients through the RMI server (Figure 99).
• ”Forcing server and client to export port number” on page 173 NOTE: You must configure both the server and client export port numbers. • If the firewall prevents the server from connecting to arbitrary ports on the client, then configure the export port of the client in ”Forcing server and client to export port number” on page 173. Forcing the RMI registry to use a specific port To force the RMI registry to use a specific TCP port for an RMI server, configure the Dsmp.registry.
-Dsmp.fabricPersistenceEnabled=true -Dsmp.Mp.max=256 -Dsmp.deployment.prefix=Client/ -Dsmp.debug -Dsmp.registry.port=XXXX ?Dsmp.flavor=%APP_FLAVOR% Client :end popd endlocal HAFM_c.bat File The HAFM_c.bat file starts the Client only. Edit file to include the parameter -Dsmp.registry.port=XXXX, where XXXX is any TCP port number not being used by another application. You must place this parameter after the %CLASSPATH% parameter.
NOTE: If the firewall prevents the server from connecting to arbitrary ports on the client, then just force the export port of the client (-Dsmp.client.export.port=YYYY). HAFM_sc.bat Place the parameter -Dsmp.server.export.port=XXXX in the server area of the file, and the parameter -Dsmp.client.export.port=YYYY, in the client area of the file, where XXXX and YYYY are any TCP port numbers not used by another application.
this parameter after the %CLASSPATH% parameter. The following example shows the edited file with the added parameters in bold: setlocal pushd %~dp0\.. call bin\set_cp.bat ............... rem HAFM Client start %JAVA_HOME%\bin\HAFMMClient.exe -Xmx256m -Xminf.15 -Xmaxf.35 -Xincgc -classpath %CLASSPATH% -Dsmp.Mp.max=256 -Dsmp.deployment.prefix=Client/ -Dsmp.flavor=HAFM Client rem HAFM Client Debug Mode rem start %JAVA_HOME%\bin\HAFMClientD.exe -Xmx256m -Xminf.15 -Xmaxf.35 -Xincgc -classpath %CLASSPATH% -Dsmp.
Configuring HAFM through a firewall
B Troubleshooting This appendix provides troubleshooting information for the following topics: • Problems with discovery, page 177 • Problems with products, page 179 • Problems with addresses, page 179 • Miscellaneous problems, page 180 • Problems with zoning, page 182 Problems with discovery Table 18 describes possible problems with discovery and suggested resolutions. Table 18 Discovery problems and resolutions Problem Resolution Discovery is turned off. Select Discover > On.
Table 18 Discovery problems and resolutions (continued) Problem Resolution Broadcast request is blocked by routers. Resolution 1: If you know the IP addresses, and they are not in the Available Addresses list: 1. Select Discover > Setup. 2. Click Add. 3. Enter data in the dialog box. 4. Click OK. 5. Repeat steps step 1 through step 4 until all addresses are available. 6. Select the IP addresses you would like to discover in the Available Addresses list. 7.
Problems with products Table 19 describes possible product problems and suggested resolutions. Table 19 Product problems and resolutions Problem Resolution HBAs not connected to SAN Check your physical cables and connectors. Switches not connected to Ethernet Check your physical cables and connectors. Switches not connected to SAN Check your physical cables and connectors.
Miscellaneous problems Table 21 describes possible miscellaneous problems and suggested resolutions. Table 21 Miscellaneous problems and resolutions Problem Cause/resolution Code Execution Error: Array Index Out-Of-Bounds. Retry the command or action. If the problem persists, contact HP customer support. Code Execution Error: Internal Exception Retry the command or action. If the problem persists, contact HP customer support. Code Execution Error: Missing Property File. Retry the command or action.
Table 21 Miscellaneous problems and resolutions (continued) Problem Cause/resolution Mapping a loop to a hub causes the loop group and the outermost portion of the topology's background group color or layout format to revert to the default. Make the background and/or layout changes after mapping the loop to the hub. Receiving error Compatibility between and is unknown.
Problems with zoning The following table lists some possible issues and recommended solutions for zoning errors. Table 22 Zoning problems and resolutions Problem Cause/resolution Receiving zoning errors. Verify that you did not configure zoning on a non-principal switch. The application is not performing zoning discovery very often. Zoning discovery is performed once at startup, and then once every two hours during routine discovery.
C Informational and error messages This appendix lists information and error messages that appear in pop-up message boxes from the HAFM application and the associated Element Managers. The first section of the appendix lists HAFM application messages. The second section lists Element Manager messages. The text of each message is followed by a description and recommended course of action.
HAFM Application Messages This section lists HAFM application information and error messages in alphabetical order. Table 23 HAFM Messages Message Description Action A zone must have at least one zone member. When creating a new zone, one or more zone members must be added. Add one or more zone members to the new zone using the Modify Zone dialog box. A zone set must have at least one zone. When creating a new zone set, one or more zones must be added.
Table 23 HAFM Messages (continued) Message Description Action Are you sure you want to delete this zone set? The selected zone set will be deleted from the zone library. Click Yes to delete the zone set or No to cancel the operation. Are you sure you want to overwrite this zone set? The selected zone set will be overwritten in the zoning library. Click Yes to overwrite or No to cancel. Are you sure you want to remove all members from this zone? All members will be deleted from the selected zone.
Table 23 HAFM Messages (continued) Message Description Action Cannot display route. All switches in route must support routing. You cannot show the route through a fabric that has switches or directors which do not support routing. The route must contain only Edge Switch 2/16s, Edge Switch 2/32s, Director 2/64s, or Director 2/140s. Cannot display route. Device is not a member of a zone in the active zone set.
Table 23 HAFM Messages (continued) Message Description Action Cannot modify product. The selected product cannot be modified. Verify the HAFM appliance-to-product link is up. If the link is up: • The HAFM appliance may be busy. • Another Element Manager instance may be open. • You may not have permission to modify the product. Cannot perform operation. Fabric is unknown. This message displays if no switches in the fabric are connected to the HAFM appliance.
Table 23 HAFM Messages (continued) Message Description Action Connection to management server lost. The connection to the remote HAFM appliance has been lost. Log in to the HAFM appliance again through the HAFM Log In dialog box. Connection to management server lost. Click OK to exit application. The HAFM application at a remote workstation lost the network connection to the HAFM appliance. Re-start the HAFM application to connect to the HAFM appliance. Could not export log to file.
Table 23 HAFM Messages (continued) Message Description Action Duplicate nickname in nickname configuration. Duplicate nicknames cannot be configured. Modify the selected nickname to make it unique. Duplicate World Wide Name in nickname configuration. A World Wide Name can be associated with only one nickname. Modify (to make it unique) or delete the selected World Wide Name. Duplicate zone in zone set configuration. More than one instance of a zone is defined in a zone set.
Table 23 HAFM Messages (continued) Message Description Action Error reading log file. The HAFM application encountered an error while trying to read the log. Try the operation again. If the problem persists, contact the next level of support. Error removing zone or zone member. The HAFM application encountered an internal error. Try the operation again. If the problem persists, contact the next level of support. Error transferring files < message >.
Table 23 HAFM Messages (continued) Message Description Action Management server could not log you on. Verify your username and password. An incorrect username or password (both case sensitive) was used while attempting to log in to the HAFM application. Verify the username and password with the customer’s network administrator and retry the operation. Management server is shutting down. Connection will be terminated.
Table 23 HAFM Messages (continued) Message Description Action Invalid request. Three conditions result in this message: Choose the action that is appropriate to the activity that caused the error: • You tried to add or modify a product from Product View and the network address is already in use. (Network addresses must be unique.) • Network address: Specify a unique network address for the product. • You tried to create a new user with a username that already exists. (A username must be unique.
Table 23 HAFM Messages (continued) Message Description Action Invalid World Wide Name or nickname. The World Wide Name or nickname that you have specified is invalid. The valid format for the World Wide Name is eight two-digit hexadecimal numbers separated by colons (xx:xx:xx:xx:xx: xx:xx:xx). The valid format for a nickname is non blank characters, up to 32 characters. Try the operation again using a valid World Wide Name or nickname. Invalid World Wide Name.
Table 23 HAFM Messages (continued) Message Description No nickname selected. No nickname was Choose a nickname and try again. selected when the command was attempted. No Element Managers installed. No director or switch Element Manager is installed on this workstation. Install the appropriate Element Manager to this workstation. No routing information available. No information is available for the route selected. Choose a different route and try the operation again. No user selected.
Table 23 HAFM Messages (continued) Message Description Action Password and confirmation don’t match. Entries in the password field and confirmation password field do not match. The entries are case sensitive and must be the same. Enter the password and confirmation password again. Remote sessions are not allowed from this network address. Only IP addresses of remote workstations specified at the Remote Access dialog box are allowed to connect to the HAFM appliance.
Table 23 HAFM Messages (continued) Message Description Action Selection is not a World Wide Name. The selection made is not a World Wide Name. Choose a valid World Wide Name before performing this operation. Server shutting down. The HAFM application is closing and terminating communication with the attached product. Reboot the HAFM appliance. If the problem persists, contact the next level of support. SNMP trap address not defined.
Table 23 HAFM Messages (continued) Message Description Action The maximum number of aliases has already been configured. The maximum number of aliases allowed was reached. Delete an existing alias before adding a new alias. The maximum number of management server network addresses has already been configured. The number of HAFM appliance IP addressees that can be defined to the HAFM application has already been configured. Delete an existing IP address before adding a new address.
Table 23 HAFM Messages (continued) Message Description Action The maximum number of zones allowed has already been configured. The maximum number of zones that can be defined was reached. Delete an existing zone before adding a new zone. The maximum number of zone sets has already been configured. The maximum number of zone sets that can be defined was reached. Delete an existing zone set before adding a new zone set. The maximum number of zones per zone set has already been configured.
Table 23 HAFM Messages (continued) Message Description Action This product is not managed by this management server. The product selected is not managed by this HAFM appliance. Choose a product managed by this HAFM appliance or go to the HAFM appliance that manages the affected product. This switch is currently part of this fabric and cannot be removed from the Fabric Membership List. Isolate the switch from the fabric prior to removing it from the Fabric Membership List.
Table 23 HAFM Messages (continued) Message Description Action You must define an SMTP server address. An SMTP server address must be defined and configured for e-mail to be activated. Define the SMTP server address at the Configure E-Mail dialog box. You must define at least one E-mail address. At least one e-mail address must be defined and configured for e-mail to be activated. Define an e-mail address at the Configure E-Mail dialog box. You must define at least one remote network address.
Element Manager Messages This section lists Element Manager information and error messages in alphabetical order. Table 24 Element Manager Messages Message Description Action A Preferred Path already exists between this Source Port and this Destination Domain ID. Please re-configure the desired path. For any source port, only one path may be defined to each destination domain ID. On the Add/Change Preferred Path dialog box, change the preferred path.
Table 24 Element Manager Messages (continued) Message Description Action Are you sure you want to delete firmware version? This message requests confirmation to delete a firmware version. Firmware library can store up to 8 firmware versions. Click Yes to delete the firmware version or No to abort the operation. Are you sure you want to delete this address configuration? Confirmation to delete the selected address configuration.
Table 24 Element Manager Messages (continued) Message Description Action Cannot enable beaconing while the system light is on. Occurs when choosing Enable Beaconing option for a failed FRU. Replace FRU and enable beaconing again or enable beaconing on an operating FRU. Cannot enable beaconing while the system error light is on. Beaconing cannot be enabled while the system error light is on. Select Clear System Error Light from Product menu to clear error light, then enable beaconing.
Table 24 Element Manager Messages (continued) Message Description Action Cannot have spaces in field. Spaces are not allowed as part of the entry for this field. Delete spaces from the field entry. Cannot install firmware to a director with a failed CTP card. A firmware version cannot be installed on a director with a failed control processor (CTP) card. Replace the failed CTP card and retry the firmware installation. Cannot install firmware to a switch with a failed CTP card.
Table 24 Element Manager Messages (continued) Message Description Action Cannot retrieve information for port. Port information cannot be retrieved by the Element Manager because the Ethernet link is down or busy. Retry the operation later. If the condition persists, contact the next level of support. Cannot retrieve port configuration. The port configuration cannot be retrieved by the Element Manager because the Ethernet link is down or busy. Retry the operation later.
Table 24 Element Manager Messages (continued) Message Description Action Cannot run diagnostics on a port that is not installed. Port diagnostics cannot be performed on a port card that is not installed. Run diagnostics only on a port that is installed. Cannot run diagnostics on a port card that is not installed. Port diagnostics (loopback tests) cannot be performed on a port that does not have a small form factor (SFF) optical transceiver installed.
Table 24 Element Manager Messages (continued) Message Description Action Cannot set all ports to 2 Gb/sec due to speed restriction on some ports. Displays if you try to set ports to operate at 2 Gb/sec data speed through the Configure Ports dialog box and some ports do not support speed configuration. Replace ports that do not support speed configuration with those that do support more than one configuration. Cannot set all ports to Negotiate due to port speed restriction on some ports.
Table 24 Element Manager Messages (continued) Message Description Action Cannot start firmware install while CTP synchronization is in progress. The director’s CTP cards are synchronizing and firmware cannot be installed until synchronization is complete. Install the firmware after CTP card synchronization completes. Cannot start port diagnostics. Port diagnostics cannot be started at the Element Manager because the Ethernet link is down or busy. Retry the operation later.
Table 24 Element Manager Messages (continued) Message Description Action Could not stop port diagnostics. Port diagnostics could not be stopped by the Element Manager because the Ethernet link is down or busy, or because the director is busy. Retry the operation later. If the condition persists, contact the next level of support. Could not write firmware to flash. A firmware version could not be written from the HAFM appliance to FLASH memory Retry the operation again.
Table 24 Element Manager Messages (continued) Message Description Action Director clock alert mode must be cleared before enabling period synchronization. Clock alert mode is enabled through the Configure FICON Management Server dialog box and you attempted to enable Periodic Date/Time Synchronization through the Configure Date and Time dialog box. Disable clock alert mode through the Configure FICON Management Server dialog box. Director must be offline to configure.
Table 24 Element Manager Messages (continued) Message Description Action Domain IDs must be in the range of 1 to 31. Domain IDs entered in the Configure Preferred Paths dialog box must fall in a specific range. In the Configure Preferred Paths dialog box, change the number in the Destination Domain ID field to a number between 1 and 31, inclusive. Duplicate Community names require identical write authorizations.
Table 24 Element Manager Messages (continued) Message Description Action Error transferring files < message >. An error occurred while transferring files from the PC hard drive to the Element Manager. The message varies, depending on the problem. Try the file transfer operation again. If the problem persists, contact the next level of support. Feature not supported. The ‘product name’ must be running version 05.00.00 or higher.
Table 24 Element Manager Messages (continued) Message Description Action Firmware file not found. The firmware version is not installed (or was deleted) from the firmware library at the HAFM appliance. Add the firmware version to the library and retry the operation. Incompatible configuration between management style and management server. If the Firmware is below the required level, only FICON management style is allowed if the FICON Management Server feature is enabled.
Table 24 Element Manager Messages (continued) Message Description Action Invalid firmware file. The file selected for firmware download is not a firmware version file. Choose the correct firmware version file and retry the operation. Invalid management server address. The IP address specified for the HAFM appliance is unknown to the domain name server (invalid). Verify and enter a valid HAFM appliance IP address. Invalid network address.
Table 24 Element Manager Messages (continued) Message Description Action Invalid value for BB_Credit. At the Configure Fabric Parameters dialog box, the buffer-to-buffer credit (BB_Credit) value must be an integer from 1 through 60 inclusive. Verify and enter a valid number between 1 through 60. Invalid value for Low BB Credit threshold (1-99) %. The Low BB Credit Threshold field in Configure Open Trunking dialog box must have entries in the range from 1 and 99.
Table 24 Element Manager Messages (continued) Message Description Action Invalid value for R_A_TOV. At the Configure Fabric Parameters dialog box, the resource allocation time-out value (R_A_TOV) must be an integer from 10 through 1200 inclusive. Verify and enter a valid number. Invalid value for second (0-59). At the Configure Date and Time dialog box, the SS value (second) must be an integer from 0 through 59 inclusive. Verify and enter a valid time. Invalid value for threshold (1-99)%.
Table 24 Element Manager Messages (continued) Message Description Action Log is currently in use. Access to the log is denied because the log was opened by another instance of the Element Manager. Retry the operation later. If the condition persists, contact the next level of support. Loopback plug(s) must be installed on ports being diagnosed. Press Next to continue. External loopback diagnostics require an optical loopback plug to be installed.
Table 24 Element Manager Messages (continued) Message Description Action Not all of the optical transceivers are installed for this range of ports. Some ports in the specified range do not have optical transceivers installed. Use a port range that is valid for the ports installed. Open Trunking is not installed for this product. Please contact your sales representative. The Open Trunking feature key has not been enabled. This message only displays if the optional Open Trunking feature is installed.
Table 24 Element Manager Messages (continued) Message Description Action Port diagnostics cannot be performed on an inactive port. This displays when port diagnostics is run on a port in an inactive state. Run the diagnostics on an active port. Port speeds cannot be configured at a higher rate than the director speed. This displays when you configure a port to 2 Gb/sec and the director speed is set to 1 Gb/sec. Set the director speed to 2 Gb/sec in the Configure Switch Parameter dialog box.
Table 24 Element Manager Messages (continued) Message Description Action SNMP trap address not defined. If an SNMP community name is defined, a corresponding SNMP trap recipient address must also be defined. Enter a corresponding SNMP trap recipient address. Stop diagnostics failed. The test is already running. Diagnostics for the port was not running and Stop was selected on the Port Diagnostics dialog box. Diagnostics quit for the port for some reason, but the Stop button remains enabled.
Table 24 Element Manager Messages (continued) Message Description Action Switch clock alert mode must be cleared before enabling period synchronization. Clock alert mode is enabled through the Configure FICON Management Server dialog box and user is attempting to enable Periodic Date/Time Synchronization through the Configure Date and Time dialog box. Disable clock alert mode through the Configure FICON Management Server dialog box. The data collection process failed.
Table 24 Element Manager Messages (continued) Message Description Action The link to the director is not available. The Ethernet connection between the HAFM appliance and the director is down or unavailable. Establish and verify the network connection. The link to the switch is not available. The Ethernet connection between the HAFM appliance and the switch is down or unavailable. Establish and verify the network connection. The IPL configuration cannot be deleted.
Table 24 Element Manager Messages (continued) Message Description Action The switch must be offline to change the Management Style. The firmware is below the required level and you attempted to change the management style. Choose Set Online State from the Maintenance menu and click Set Offline. Then change the management style. Set the director or switch back online when finished. The switch must be offline to configure.
Table 24 Element Manager Messages (continued) Message Description Action Unable to save data collection file to destination. The HAFM appliance could not save the data collection file to the specified location (PC hard drive, CD, or network). Retry the operation. If the condition persists, contact the next level of support. You do not have rights to perform this action. Configured user rights do not allow this operation to be performed.
D Configuring remote workstations This appendix describes the procedures for installing the HAFM application on a remote workstation. To run HAFM on a remote workstation, you must first download and install the HAFM application from the HAFM appliance.
The HP StorageWorks HAFM remote client installation screen appears. Figure 100 shows the upper portion of this page. Figure 100 Remote client installation page 4. Click Begin Windows Installation to begin the installation process. 5. If you have read the security agreement information and wish to continue, click Yes.
The HP High Availability Fabric Manager Available Installers page appears (Figure 101). Figure 101 Available Installers page 6. Click Download. The File Download dialog box appears (Figure 102). Figure 102 File Download dialog box 7. Click Open. The system begins downloading the HAFM installer. When the download is complete, the Introduction screen appears.
NOTE: At any time, you may return to the previous page by clicking Previous or quit the Installer by clicking Cancel. 8. Click Next. The License Agreement screen appears,. 9. If you have read the license agreement and agree to accept the terms, click I accept the terms of the License Agreement. 10.Click Next. The Important Information screen appears,. 11.Click Next. The Choose Install Folder screen appears. 12.
The progress of the installation is tracked on the Installing HP StorageWorks HAFM screen. When the installation is complete, the Install Complete dialog box appears. 21.Click Done to close the Install Complete dialog box. Running HAFM • If you selected icons to be created in step 18 of the installation procedure, access the icon in the windows Start menu or desktop to run HAFM. • If you did not create any icons in step 18 of the installation procedure: a.
7. Click Open. The system begins downloading the HAFM installer. When the download is complete, the Introduction screen appears. NOTE: At any time, you may return to the previous page by clicking Previous or quit the installation by clicking Exit. 8. Click Next. The License Agreement screen appears. 9. If you have read the license agreement and agree to accept the terms, click I accept the terms of the License Agreement. 10.Click Next. The Important Information screen appears. 11.Click Next.
17. If desired, select the Start the High Availability Fabric Manager check box to immediately open HAFM. 18.Click Done to close the Install Complete dialog box. Running HAFM Run the HAFM program from the directory in which you saved it (the default is a subdirectory named HAFM in your home directory). 1. In the Terminal window, enter cd HAFM. 2. Press Enter. 3. Enter HAFM_Manager. 4. Press Enter. The HAFM application opens.
The Netscape browser opens. 3. Obtain the HAFM appliance address from your network administrator. 4. Enter the address of the HAFM appliance in the Location (or Address) box of the browser, and press Enter. The HP StorageWorks HAFM page appears. 5. Read the instructions for your operating system. 6. If a reference to fixes is made, click the hyperlink and verify that your system is up to date. 7.
19. Perform one of the following to select a folder on the remote workstation in which to store the HAFM software: • Accept the default location. • Enter the path to a new location. • Click Choose to browse for an appropriate location. • Click Restore Default Location to change the location back to the default. 20.Click Next. If HAFM is already installed on the system, you are prompted to uninstall the existing version. If you want to uninstall the existing software, click Yes and then press Next. 21.
Configuring remote workstations
E Reference This appendix provides useful reference information. • Compatibility with other applications, page 235 • Icon legend, page 235 • Event Management, page 239 • Writing Event Management macros, page 246 • Keyboard shortcuts, page 249 Compatibility with other applications The application is designed to operate smoothly with other enterprise applications and network-monitoring programs.
Table 25 Icon Product Icons (continued) Description Tape FCIP Bridge Or Gateway Loop iSCSI Bridge Or Gateway Appliance HP StorageWorks Edge Switch 2/16 HP StorageWorks Edge Switch 2/32 HP StorageWorks Edge Switch 2/24 Generic HP StorageWorks switch or director HP StorageWorks Director 2/64 HP StorageWorks Director 2/140 Product status icons Icon Status No icon Operational Degraded Failed Unknown/Offline Event icons Table 27 Icon Event icons Description Informational Warning Fatal 236 Ref
Band information status icons Table 28 Icon Band information status icons Out-of-band In-band Present Icon Out-of-band In-band Not Present Present Present Failed Not Present Present Failed Not Present Present Failed Present Not Present Failed Failed Failed Planned device icons Icons of planned devices illustrate the device being unpacked from a box. Table 29 illustrates the planned icons for various devices.
Group icons Table 30 Icon Group icons Description Icon Description Host Isolated group Switch Bridge Loop Fabric Connections Figure 103 Online connection with online devices Figure 104 Offline connection and offline loop and storage device 238 Reference
NOTE: In Figure 105, gray lines on the HBA indicate no activity on those connections. Figure 105 Connection performance as displayed on Physical Map Figure 106 Switch on Topology showing ports Event Management Event Management enables you to specify triggers and actions to automate tasks. For example, you can set an event trigger to fire at a certain time and day (everyday at noon) and associate the action of sending an e-mail message.
Table 31 SNMP trap event properties (continued) Property Description Source The cause of the event (for example, user ID or device label) Description Event description (for example, Out-of-band offline) Event Level The severity of the event (for example, informational) Table 32 describes the properties of a device in the SAN.
Table 33 SNMP trap system properties (continued) Property Description VM Version Version of the Java Virtual Machine OS Architecture Operating system architecture OS Name Operating system name OS Version Operating system version Server Name Name of the appliance Subnet Mask Discovered subnet mask Total Memory Total physical memory Trap Forwarding Off Specifies whether trap forwarding is enabled Region Region of the world where the user is located Time Zone User’s time zone User Count
Table 35 describes the properties of a device in the SAN.
Table 36 Performance system properties (continued) Property Description Trap Forwarding Off Specifies whether trap forwarding is enabled Region The region of the world where the user is located Time Zone User’s time zone User Count Number of users User action event properties User action events occur when you change a setting in the appliance. Table 37 describes the user action event properties.
Table 38 User action system properties (continued) Property Description Server Name Name of the appliance Subnet Mask Discovered subnet mask Total Memory Total physical memory Trap Forwarding Off Specifies whether trap forwarding is enabled Region Region of the world where the user is located Time Zone User’s time zone User Count Number of users Table 39 describes the properties of a user.
Table 41 describes the properties about a device in the SAN.
Table 42 Device state system properties (continued) Property Description Trap Forwarding Off Specifies whether trap forwarding is enabled Region Region of the world where the user is located Time Zone User’s time zone User Count Number of users Writing Event Management macros You can write macros for Event Management to add relevant data to the action phrases.
Table 43 Event context properties (continued) Property Description Node Name World wide name of the device that encountered an event Port Name World-wide name of the port that encountered an event Description Description of the event Event Level Severity level of the event Table 44 describes the properties about a device in a SAN.
Table 46 describes the user context properties. Table 46 User context properties Property Description ID The ID of the user who performed the action Role The access level of the user who performed the action (for example, Admin or Browse) Clients for this user The number of client sessions open for the specified user Table 47 describes the properties about the platform and the appliance.
Keyboard shortcuts You can use the keystrokes shown in Table 48 to perform common functions. NOTE: To open a menu using keystrokes, press ALT + the underlined letter. To open a submenu, release the ALT key first, then press SHIFT + the key for the underlined letter of the submenu option.
Reference
F Editing batch files This appendix provides instructions for updating batch files. It includes: • Configuring the application to use dual network cards, page 251 • Setting the Zoning Delay, page 252 • Specifying a host IP address in multi-NIC networks, page 252 • Editing Master Log settings, page 254 Configuring the application to use dual network cards Issues with client-to-server connectivity can be due to different causes.
to read: #SMP Server ${SAN_JRE_DIR}/bin/java -classpath ${CLASSPATH} -Dsmp.deployment.prefix=Server/ -Djava.rmi.server.hostname=x.x.x.x -Dsmp.server.edport=%1 -DZoning=Principal com.smp.server.SANMgrRMI where x.x.x.x is the desired IP address for the Server. Setting the Zoning Delay Edit the batch file to set the application to configure zoning through either ECC or Telnet. If a response is not received within the amount of time specified here, the application ends the operation and report that it failed.
2. Edit the following lines: rem HAFM Server start %JAVA_HOME%\bin\HAFMServer.exe -server -Xmx128m -Xminf.15 -Xmaxf.35 -Xincgc -classpath %CLASSPATH% -Dsmp.mpi.test -Dsmp.deployment.prefix=Server/ -Dsmp.zoning=Principal -Dsmp.zoning.wait.timeout=180000 -Dsmp.webServer -Dsmp.backupManager -Dsmp.locale.customization=en_US_HAFM Server to read: rem HAFM Server start %JAVA_HOME%\bin\HAFMServer.exe -server -Xmx128m -Xminf.15 -Xmaxf.35 -Xincgc -classpath %CLASSPATH% -Dsmp.mpi.test -Dsmp.deployment.
5. Run install_service.bat file. UNIX 1. Open the /bin/HAFM_Mgr file using a text editor (for example, vi). 2. Edit all instances of the following lines: #SMP Server ${SAN_JRE_DIR}/bin/java -classpath ${CLASSPATH} -Dsmp.deployment.prefix=Server/ -Dsmp.server.edport=%1 -DZoning=Principal com.smp.server.SANMgrRMI to read: #SMP Server ${SAN_JRE_DIR}/bin/java -classpath ${CLASSPATH} -Dsmp.deployment.prefix=Server/ -Dsmp.server.edipaddress=x,x,x,x -Dsmp.server.edport=%1 -DZoning=Principal com.
• -Dsmp.log.eventCountAfterTruncate (number of entries to be saved, between 1 and 2000). rem HAFM Server start %JAVA_HOME%\bin\HAFMServer.exe -server -Xmx128m -Xminf.15 -Xmaxf.35 -Xincgc -classpath %CLASSPATH% -Dsmp.Mp.max=128 -Dsmp.autodiscovery=false -Dsmp.mpi.test -Dsmp.deployment.prefix=Server/ -Dsmp.zoning=Principal -Dsmp.zoning.wait.timeout=180000 -Dsmp.log.maxLogDiskSpace=50 -Dsmp.log.eventCountAfterTruncate=1000 -Dsmp.webServer -Dsmp.flavor=HAFM Server UNIX 1.
Editing batch files
Index A C access assigning 52 changing 53 removing 53 accessing, remote HAFM appliances 35 action tab 39, 41 actions, adding to rules 98 activating zone sets 130 active sessions dialog box 36 active sessions, viewing 36 adding IP addresses 63 trap recipients 87 users 52 adding actions 98 adding devices to a plan 115 adding product list columns 73 adding trap recipients 68 admin access, assigning 52, 53 alerts, clearing ISL alerts 86 appliance adding 26 logging out 36 removing 26 arranging device icons 116
on persisted fabrics 86 connections, monitoring utilization 110 conventions document 16 text symbols 16 copying zone sets 136 copying from logs 91 creating columns, product list 73 product list columns 73 zone sets 129 zones 128 creating, user accounts 52 D data backup and restore 47 exporting 44 importing 44 data, exporting 112 deactivating zone sets 131 default TightVNC password 32 Windows 2000 password 33 Windows 2000 user name 33 default community strings 65 degraded icon 236 deleting users 53 zone set
monitoring 89 viewing 90 exec macro components 248 expanding groups 38 exporting events 91 files 44 overview 44 exporting a plan 123 exporting a zone set 133 exporting performance data 112 F fabric binding 102 adding switches 84 online state functions domain ID 105 overview 83 procedure 83 fabric group icon 238 fabric manager messages 184 fabrics changing nicknames for 81 changing properties 81 determining status of 81 persisting 84, 85 unpersisting 84, 85 unpersisting product 85 fabrics list 143 failed ic
user name, default 34 uses 19 host bus adapter icon planned 237 host group icon 238 HP authorized reseller 17 storage web site 18 Subscriber’s choice web site 17 technical support 17 hub icon planned 237 importing 44 importing a zone set 134 information bar 30 IP addresses adding 63 changing 64 removing 64 ISL load balancing 107 ISLs, clearing alerts 86 isolated group icon 238 I JBOD icon 237 icon persisted fabrics 85 icons band information status 237 bridge planned 237 bridge group 238 device 235 fabri
location 29 overview 29 viewing 89 members, finding in zones 137 merging, persisted fabrics 86 messages Element Manager 201 fabric manager 184 HAFM application 184 minimap overview 29 minus icon, persisted fabrics 86 monitoring connection utilization 110 port performance 112 switch performance 111 monitoring events 89 N naming conventions 126 network address add and remove 51 network attached storage icon planned 237 NIC 251 notifications configuring call home 93 configuring e-mail 92 overview 92 O offlin
arranging 116 configuring 116 connecting 116 deleting 117 planning devices, showing as installed 117 evaluating 122 new SAN 114 opening a plan 115 rules configuring 121 file location 118 keywords 120 overview 118 setting 121 writing 118 saving 123 planning module 113 planning window 113 planning rules configuring 121 file location 118 keywords 120 overview 118 setting 121 writing 118 policy engine macros, writing 246 properties device state event 244 performance event 241 SNMP trap 239 user action event 243
Linux systems 231 Solaris systems 229 Windows systems 225 removing IP addresses 64 members from zone 130 trap recipients 88 users 53 zone sets 136 zones 130 removing trap recipients 69 removing, product list columns 74 renaming zone sets 135 zones 135 reports exporting 44 reports, viewing performance 112 routers, blocked broadcast request 178 routes hiding 81 showing 79 viewing 81 rules event triggers overview 97 S SAN files exporting 44 SANtegrity about 102 fabric binding 102 security center v.
online state functions 106 zoning function 106 switch group icon 238 switch icon planned 237 switch, monitoring performance 111 symbols in text 16 system requirements 23 T tape icon planned 237 technical support, HP 17 text symbols 16 TightVNC default password 32 time macro components 247 toolbar, description 29 toolbox, description 31 trap forwarding configuring 87 trap recipients adding 68, 87 editing 69 overview 67 removing 69, 88 triggers 96 event 97 schedule 98 troubleshooting .
default password 33 default user name 33 writing macros 246 Z zone members listing 137 removing from zones 130 zone sets activating 130 comparing 138 creating 129 deactivating 131 default zone 132 deleting 136 duplicating 136 exporting 133 importing 134 naming conventions 126 properties, viewing 137 removing zone 130 renaming 135 zones creating 128 deleting 136 finding in zone sets 137 naming conventions 126 properties, viewing 137 removing 130 renaming 135 zoning library 127 limits 125 naming conventions
