HP StorageWorks Fabric OS 5.2.1b Release Notes (AA-RWEYC-TE, June 2007)

IPSec for B-Series MP Router
Blade (FR4–18i)
• IPSec implementation details:
• Pre-shared key
• Main mode (IKE negotiation protocol)
• Tunnel mode i n Encapsulating Security Payload (ESP)
• IPSec specific statistics not provided.
• No NAT or IPV6 support
• FastWrite and Tape Pipelining will not be supported in conjunction with
secure tunnels.
• Jumbo frames will not be supported on secure tunnels.
• ICMP redirect is not supported for IPSec-enabled tunnels.
• Onlyasinglesecuretunnelwillbeallowedonaport.Non-securetunnels
will not be allowed on the sa me port as secure tunnels.
• Modify operations are not allowed on secure tunnels. To change the
configuration of a secure tunnel, you must first delete the tunnel and then
re-create it with the desired options.
• Onlyasinglerouteissupportedonaninterfacewithasecuretunnel.
• An IPSec tunnel cannot be created using the same local I P address if ipperf
is active and using the same local IP address (source IP address).
• Unidirectional supported th roughput is ~104Mbytes/sec a nd bidire ctional
supported throughput is ~90Mbytes/sec.
• An IPSec tunnel takes longer to come online than a non-IPSec tunnel.
• User is not informed with the IPSec mismatch R AS event when configuring
a tunnel with IPSec mismatch on either ends.
Fabric Merge
Do not try to merge fabrics with conflicting domain IDs over a VE_Port. Before
merg
ing two fabrics over FC-IP with VE_P orts at each end, HP recommends
that all domain ID and zoning conflicts be resolved.
Scalability
• Support for Default Zoning policies has been added to Fabric OS 5.1.0.
Typically, when you issue the cfgDisable command in a large fabric
with thousands of devices, the name server indicates to all hosts that they
can communicate with each other. To ensure that all devices in a fabric do
not see each other during a cfgDisable operation, you can activate a
Default Zone with policy set to no access. If Default zoning policies are
enabled, all cfgEnable/disable commands and zoning changes must
be run from a switch in the fabric running Fabric OS 5.1.0/5.2.0a.
• In large fabrics with more than 1,0 00 ports, HP recommends that the MS
Platform Database be disabled. The Platform DB must also be disabled
before downgrading to earlier versions of Fabric OS. This can be done
using the msPLMgmtDeactivate command.
FRU insertion
The FW_FRU_INSERTED message is displayed twice when a power supply
FRU is inserted and powered on. There is no functional impact.
System boot
Not all Fabric OS services are available when the prompt becomes available
during boot up. Wait for all the services to come up before using the switch or
performing zoning actions.
Performance Monitoring
If the user tries to save more than 512 monitors using the perfCfgSave
command, some of the monitors may be lost.
Management — Proxy
switches
If you a re using a Fabric OS 4.x switch as an API or SMI-S proxy to manage a
5.1.0 switch, you must be running Fabric OS 4.4.0d.
HP StorageWorks Fabric OS 5.2.1b release notes
13