Publication Number: 53-1000435-01 15 June 2007 Web Tools Administrator’s Guide Supporting Fabric OS v5.3.
Copyright © 2006-2007, Brocade Communications Systems, Incorporated. ALL RIGHTS RESERVED. Brocade, the Brocade B weave logo, Fabric OS, File Lifecycle Manager, MyView, Secure Fabric OS, Brocade, and StorageX are registered trademarks and Tapestry is a trademark of Brocade Communications Systems, Inc., in the United States and/or in other countries. FICON is a registered trademarks of IBM Corporation in the U.S. and other countries.
Document History The following table lists all versions of the Web Tools Administrator’s Guide. Document Title Publication Number Summary of Changes Publication Date Web Tools User’s Guide v2.0 53-0001536-01 N/A September 1999 Web Tools User’s Guide v2.2 53-0001558-02 N/A May 2000 Web Tools User’s Guide v2.3 53-0000067-02 N/A December 2000 Web Tools User’s Guide v3.0 53-0000130-03 N/A July 2001 Web Tools User’s Guide v2.6 53-0000197-02 N/A December 2001 Advanced Web Tools User’s Guide v3.
Document Title Publication Number Summary of Changes Publication Date Web Tools Administrator’s Guide 53-1000049-01 Updates to support new switch types (4900, 7500) and Fabric OS v5.1.0, including FCR, FCIP, and the FR4-18i port blade. Web Tools EZ information is moved to a separate book. January 2006 Web Tools Administrator’s Guide 53-1000049-02 Updates to the FCIP chapter to clarify how to configure tunnels. April 2006 Web Tools Administrator’s Guide 53-1000194-01 Updates for Fabric OS v5.2.
Contents About This Document How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . . x What’s new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Refresh rates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Displaying switches in the fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Using Web Tools and secure mode . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Web Tools Access and HTTP_POLICY . . . . . . . . . . . . . . . . . . . . . 25 Opening modules in a secure fabric. . . . . . . . . . . . . . . . . . . . . . 25 Primary-FCS-only functionality . . . . . . . . . . . . . . . . . . .
Chapter 4 Maintaining Configurations and Firmware Maintaining configurations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Backing Up a configuration file . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Restoring a configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Performing a firmware download . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Chapter 5 Managing Your Ports In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 8 Administering Zoning In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Introducing zoning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Zoning and admin domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 Configuring zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 Opening the Zone Administration window . . . . . . . . . . . . . . . . .
Opening the Performance Monitoring window . . . . . . . . . . . . . . . .126 Creating basic performance monitor graphs . . . . . . . . . . . . . . . . .127 Customizing basic monitoring graphs . . . . . . . . . . . . . . . . . . . . . . .127 Creating advanced performance monitoring graphs . . . . . . . . . . .129 Creating SID-DID Performance Graphs . . . . . . . . . . . . . . . . . .129 Creating an SCSI vs. IP Traffic Graph . . . . . . . . . . . . . . . . . . . .130 Creating SCSI Command Graphs . . . . . . .
Configuring Fabric Watch thresholds. . . . . . . . . . . . . . . . . . . . . . . .159 Configuring threshold traits. . . . . . . . . . . . . . . . . . . . . . . . . . . .159 Configuring threshold alarms . . . . . . . . . . . . . . . . . . . . . . . . . .161 Enabling or disabling threshold alarms for individual elements161 Configuring alarms for FRUs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .162 Displaying Fabric Watch alarm information. . . . . . . . . . . . . . . . . . .
Chapter 17 Configuring Standard Security Features In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .201 Creating and maintaining user-defined accounts. . . . . . . . . . . . . .201 Creating and Deleting User-Defined Accounts. . . . . . . . . . . . .203 Changing Account Parameters . . . . . . . . . . . . . . . . . . . . . . . . .205 Maintaining Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
viii Web Tools Administrator’s Guide Publication Number: 53-1000435-01
About This Document This preface contains the following sections: • How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix • Supported hardware and software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x • What’s new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi • Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
• Chapter 10, “Using the FC-FC Routing Service,” provides information on using the FC-FC Routing Service to share devices between fabrics without merging those fabrics. • Chapter 11, “Working With Diagnostic Features,” provides information about trace dumps, viewing switch health, and interpreting the LEDs. • Chapter 12, “Administering Fabric Watch,” provides information on how to use the Fabric Watch feature to monitor the performance and status of switches and alert you when problems arise.
In those instances in which procedures or parts of procedures documented here apply to some switches but not to others, this guide identifies exactly which switches are supported and which are not. Although many different software and hardware configurations are tested and supported by Brocade Communications Systems, Inc. for 5.3.0, documenting all possible configurations and scenarios is beyond the scope of this document. This document does not support all Fabric OS versions.
Document conventions This section describes text formatting conventions and important notices formats.
Additional information This section lists additional Brocade and industry-specific documentation that you might find helpful. BROCADE RESOURCES The following related documentation is provided on the Brocade Documentation CD-ROM and on the Brocade Web site, through Brocade Connect. NOTE Go to http://www.brocade.com and click Brocade Connect to register at no cost for a user ID and password.
Brocade 24000 • Brocade 24000 Hardware Reference Manual • Brocade 24000 QuickStart Guide Brocade 24000/48000 Port Blade and Filler Panel Replacement Procedure • • • • • • • • • Control Processor Blade Replacement Procedure Blower Assembly Replacement Procedure Cable Management Tray and Guide Replacement Procedure Chassis Door Replacement Procedure WWN Bezel and Card Replacement Procedure Power Supply and Filler Panel Replacement Procedure 14U Rack Mount Kit Installation Procedure Mid-Mount Rack Kit Insta
Brocade 4016 • Brocade 4016 Hardware Reference Manual • Brocade 4016 QuickStart Guide Brocade 3900 Brocade 3900 Hardware Reference Manual (for v4.x software) • • • • • Brocade 3900 QuickStart Guide (for v4.x software) Brocade 3900 Fan Assembly Replacement Procedure Brocade 3900 Motherboard Assembly Replacement Procedure Brocade 3900 Power Supply Replacement Procedure Brocade 3250/3850 • Brocade 3250/3850 Hardware Reference Manual (for v4.x software) • Brocade 3250/3850 QuickStart Guide (for v4.
ISL Trunking Optimizes the performance and availability of SAN fabrics while simplifying ISL management. Two 4 Gbit/sec Brocade switches can automatically group up to eight ISLs into a single logical trunk with a total throughput of up to 32 Gbit/sec. Advanced Zoning Automatically groups SAN fabric-connected devices into logical zones that restrict access to member devices in the zone. Advanced Zoning uses hardware enforcement at both the port and WWN level to provide more robust data protection.
2.
xviii Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Introducing Web Tools 1 Brocade Web Tools is a graphical user interface (GUI) that enables administrators to monitor and manage single or small fabrics, switches, and ports from a standard workstation. It is an optionally licensed product that runs on Brocade Fabric OS. Web Tools provides the administrative control point for Brocade Advanced Fabric Services, including Advanced Zoning, ISL Trunking, Advanced Performance Monitoring, and Fabric Watch.
1 Requirements, installation, and support Brocade has certified and tested Web Tools on the platforms shown in Table 1. TABLE 1 Certified and tested platforms Operating System Browser Java Plug-In1 Solaris 10 Firefox 2.0 1.5.0_06 Linux Red Hat AS4 Firefox 2.0 1.5.0_06 Windows 2003 Server, SP1 Internet Explorer 7.0 1.5.0_06 Windows XP, SP2 Internet Explorer 7.0 1.5.0_06 1. Java Plug-in 1.4.2_08 is also supported, although Java Plug-in 1.5.
Requirements, installation, and support 1 To set the refresh frequency 1. Click Tools > Internet Options in the browser. 2. Click the General tab and click Settings under “Temporary Internet Files.” 3. Click Every visit to the page under “Check for newer versions of stored pages,” as shown in Figure 1 on page 3. Configure your browser to check for newer versions of stored pages every visit to the page. FIGURE 1 Configuring Internet Explorer Installing Java on the workstation Java Plug-in version 1.5.
1 Requirements, installation, and support 3. Follow the instructions to install the JRE. 4. Create a symbolic link from this location... $FIREFOX/plugins/libjavaplugin_oji.so ...to this location: $JRE/plugin/$ARCH/ns600/libjavaplugin_oji.so To install patches on Solaris 1. Search for any required patches for your current version of the JRE at the following Web site: http://sunsolve.sun.com/pub-cgi/show.
Requirements, installation, and support 1 To configure the Java plug-in on Windows 1. From the Start menu button, select Settings > Control Panel > Java. 2. Click the Java tab. FIGURE 2 Java Control Panel 3. In the section Java Applet Runtime Settings, click View The Java Runtime Settings dialog box displays. FIGURE 3 Java Runtime Settings 4.
1 Requirements, installation, and support To configure the Java plug-in for Mozilla family browsers 1. From the Start menu button, select Settings > Control Panel 2. Click the Advanced tab and expand the Default Java for browsers option. FIGURE 4 Default Java for browsers option 3. Select Mozilla family and click OK. 4. Click Apply to apply your settings and close the Java Control Panel. INSTALLING A WEB TOOLS LICENSE You can install a Web Tools license either through telnet or over the Web.
Requirements, installation, and support 1 A list displays, showing all the licenses currently installed on the switch: switch:admin> licenseshow 1A1AaAaaaAAAA1a: ]—This is the license key (excluding the colon). The installed feature is listed below. Zoning license 1A2AaAbbbBBBA1a: SES license 1A3AaAbcbBBCC1d: QuickLoop license If the Web Tools license is not included in the list or is incorrect, continue with step 3. 3. On the command line, type...: licenseadd key ...where key is the license key.
1 Launching Web Tools VALUE LINE LICENSES If your fabric includes a switch with a limited switch license and you are launching Web Tools using that switch, if the fabric exceeds the switch limit indicated in the license, Web Tools allows a 30-day “grace period” in which you can still monitor the switch through Web Tools. However, Web Tools will display warning messages periodically.
Administrative domains 1 If you want to use Web Tools instead of EZSwitchSetup, click Advanced Management in the lower-left corner of this window to launch the Web Tools interface. - Web Tools (see Figure 5 on page 9) This interface opens if the switch is configured with the command line interface (CLI) or Web Tools. • For the Brocade AP7420, the Web Tools—AP Edition interface launches.
1 Administrative domains Admin Domains permit access to a configured set of users. If a switch is part of an Admin Domain, then when you log in with an account that has an administrator role, you can perform switch enable and disable functions and all switch port-level functions such as port enable and port disable. You cannot perform fabric-wide management, as switch membership within a zone does not provide zoning rights on the switch ports.
Role-Based access control 1 ADMIN DOMAINS AND SWITCH WWN Admin Domains are treated as fabrics. Because switches cannot belong to more than one fabric, switch WWNs (world-wide names) are converted so that they appear as unique entities in different Admin Domains (fabrics).
1 Session management switchadmin You can perform all actions on the switch, except the following: • You cannot modify zoning configurations. • You cannot create new accounts. • You cannot view or change account information for any accounts. You can only view your own account and change your account password. zoneadmin You can only create and modify zones. fabricadmin You can do everything the Admin role can do except create new users. basicswitchadmin You have a subset of Admin level access.
Session management 1 When you are presented with the login screen you must provide a user name and a password. Your home Admin Domain is automatically selected. You can optionally specify an Admin Domain other than your home domain. Upon successful login, you are logged in to the specified Admin Domain. NOTE You must log in before you can view Switch Explorer (shown in Figure 5 on page 9). To log in 1.
1 Session management Optional: Click Options to select an Admin Domain other than your default home domain. The Login dialog box displays the Admin Domain options. - Click the Home Domain radio button to log in to your default Admin Domain. Click the User Specified Domain radio button to log in to another Admin Domain instead of your home domain. Type the Admin Domain name or number. FIGURE 8 Login dialog box with Admin Domain options 5.
Session management 1 Sometimes you might be logged out of a session involuntarily, without explicitly clicking the Logout button. You are automatically logged out when: • • • • A physical fabric administrator changes the contents of your currently selected Admin Domain. Your currently selected Admin Domain is removed or invalidated. Your currently selected Admin Domain is removed from your Admin Domain list. You initiate a firmware download from the Web Tools Switch Administration window.
1 16 Session management Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Using the Web Tools Interface 2 In this chapter This chapter contains the following sections: • • • • • • Viewing Switch Explorer . . . . . . . . . . . . . . . . . . . . . . . 17 Displaying tool tips . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Refresh rates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Displaying switches in the fabric . . . . . . . . . . . . . . . . 24 Using Web Tools and secure mode . . . . . . . . . . . . . .
2 Viewing Switch Explorer • Switch View displays an interactive graphic of the switch. • Switch Events and Switch Information are tabs that allow you to view event information and switch information, including connectivity, port, zone and other information. • An indicator bar in the lower-right corner of every module window contains the Admin Domain you are currently in, the user name with which you logged in to the switch, and the role associated with your user account.
Viewing Switch Explorer 2 TASKS The Tasks menu lets you manage, monitor, and perform other tasks. Management section provides access to: • Zone administration This information is collected from the selected switch. This icon is displayed only if a Brocade Advanced Zoning license is installed on the switch. If secure mode (SFOS) is enabled, or if an ACL-based FCS policy is in effect, zoning can be administered only from the primary fabric configuration server (FCS) switch.
2 Viewing Switch Explorer Use the drop-down menu at the top of the Fabric Tree area to view switches in the Fabric Tree by switch name, IP address, or WWN. The background color of the switch icon indicates the current status of the switch. You can mouse over a switch to display the IP address and current status. To manually refresh the status of a switch within the fabric, right-click the switch in the Fabric Tree and choose Refresh.
Viewing Switch Explorer 2 SWITCH VIEW BUTTONS The Switch View buttons let you access the following switch information: • • • • • • Status - click the button to view the status of the switch. Temperature - click the button to view temperature monitors. Power - click the button to view power supply information. Fan - click the button to view the status of the switch fans. Beaconing. Legend - click the button to view the legend for the Switch View.
2 Displaying tool tips If the selected Admin Domain does not include ownership of some ports that are physically present on the switch, these ports are represented as black rectangles with horizontal gray bars indicating they are not accessible. E_Ports are visible in all domains. You cannot launch the Port Management module by clicking these ports.
Displaying tool tips 2 When you hover over the Web Tools buttons, the system displays a brief description of the button. FIGURE 13 Mouseover view of switch information You can right-click a port to quickly perform some basic port administration tasks, as shown in Figure 14.
2 Refresh rates • The Port Admin option opens the Port Administration window • The Port Details option displays read-only information about a port, without opening the Port Administration window. You can export and copy the information from the Port Details window. • The Configure option provides another menu of options to allow you to rename, enable, disable ports, and set persistent enable/disable without opening the Port Administration window.
Using Web Tools and secure mode 2 You should not launch switches running Fabric OS v4.4.x or higher from a fabric tree displayed for a pre-v4.4.x switch, as some features might be disabled. To access Switch Explorer for a particular switch 1. Launch Web Tools as described in “Launching Web Tools” on page 8 and log in to the switch. Switch Explorer is displayed for the switch you logged in to. 2.
2 Working with Web Tools: recommendations PRIMARY-FCS-ONLY FUNCTIONALITY The following Web Tools functionality is reserved for the primary FCS when secure mode is enabled: • Zoning administration is allowed only from the primary FCS switch when secure mode is enabled. For all other switches in a secure fabric, the Zoning button is disabled. • SNMP community strings can be modified only from the primary FCS switch when secure mode is enabled.
Working with Web Tools: recommendations 2 • If switches are accessed simultaneously from different connections (for example, Web Tools, CLI, and API), changes from one connection might not be updated to the other, and some modifications might be lost. Make sure that, when you connect with simultaneous multiple connections, you do not overwrite the work of another connection. • Several tasks in Web Tools make fabric-level changes: for example, the tasks in the Zone Admin module.
2 28 Working with Web Tools: recommendations Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Managing Fabrics and Switches 3 In this chapter This chapter contains the following sections: • • • • • • • • • • • • • • Managing fabrics and switches using Web Tools . . . 29 Opening the telnet window. . . . . . . . . . . . . . . . . . . . . 31 Configuring IP and netmask information . . . . . . . . . 32 Configuring a syslog IP address. . . . . . . . . . . . . . . . . 33 Managing blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Configuring a switch . . . . . . . . . . . . . .
3 Managing fabrics and switches using Web Tools If the switch is not a member of the selected Admin Domain, most tabs in the Switch Administration window display in read-only mode, regardless of what permission level you have. The User tab is editable because most of the information on it does not require switch membership in the current Admin Domain.
Opening the telnet window 3 The remainder of this section describes basic Switch Administration window procedures that are useful for many switch management operations. OPENING THE SWITCH ADMINISTRATION WINDOW Most of the management procedures in this chapter are performed from the Switch Administration window. To open the Switch Administration window 1. Select a switch in Fabric Tree. The switch is displayed in Switch View. 2. Click Switch Admin in the Manage section of the Tasks menu.
3 Configuring IP and netmask information To access telnet through Web Tools 1. Select a switch in Fabric Tree. You are prompted to log in if the OS is version 5.3.0. Otherwise, the selected switch appears in the Switch View. 2. Click the Telnet button in the Other section of the Tasks menu. Web Tools opens two windows: the Telnet window and another HTML-based window which is used to launch the Telnet window. Click OK to close the HTML-based window. The Telnet window remains open. 3.
Configuring a syslog IP address 3 3. In the appropriate IP Address section, enter an IP address (for example, 10.77.77.77). Use the IPv4 Address section and/or the IPv6 Address section to specify IP addresses. 4. For the Brocade 24000 and 48000 directors only: In the Advanced Configuration area, type valid IP addresses for the Ethernet IP and subnet mask for CP0 and CP1. If the Advanced Configuration area is not visible, click the expand arrows expand the area. on the right, to 5. Click Apply. 6.
3 Filtering IP Addresses Filtering IP Addresses Web Tools provides the ability to control what client IP addresses may connect to a switch or fabric To set up IP filtering 1. Open the Switch Administration window as described on page 31. 2. Click the IP Filtering tab. FIGURE 17 IP Filter tab 3. Click Create Policy. The Create IP Filter Policy window opens. 4. Enter a policy name, choose a policy type, and then click the Add Rule button. 5.
Managing blades 3 ENABLE OR DISABLE A BLADE To enable or disable a blade 1. Open the Switch Administration window as described on page 31. 2. Click the Blade tab. The Firmware Version columns display the firmware loaded onto each blade. A blade can have more than one firmware image loaded onto it. The Enable Blade column in the Blade tab pane indicates whether the blade is enabled. FIGURE 18 Blade tab 3. Select the Enable Blade check box for each blade you want to enable.
3 Managing blades 3. Click the Set IP address button. FIGURE 19 Set IP Address dialog box 4. Select a slot number from the drop-down list. 5. Enter the IP address, subnet mask, and Gateway IP address. 6. Select a type from the drop-down list. 7. Click Add to add the new entry to the table. When you click the Add button, the values remain in the fields. 8. To delete a configuration, select a row in the table and click the Delete button.
Configuring a switch 3 3. Click the Show IP Address button. FIGURE 20 Show IP Address dialog box 4. Scroll through the list to view all the information. 5. When you are done, click Close. Configuring a switch Use the Switch tab of the Switch Administration window to perform basic switch configuration. Figure 15 on page 30 shows an example of the Switch tab.
3 Configuring a switch Switch names can be a maximum of 15 characters for Fabric OS v5.3.0. Names must begin with an alphabetic character, but otherwise can consist of alphanumeric and underscore characters. NOTE It is recommended that you customize the chassis name for each switch. Some system messages identify a switch service by the chassis name, so if you assign meaningful chassis names in addition to meaningful switch names, logs will be more useful. You change the chassis name using the CLI.
Rebooting the switch 3 Rebooting the switch When you reboot the switch, the reboot takes effect immediately. Ensure that there is no traffic or other management on the switch, as traffic is interrupted during the reboot; however, frames are not dropped. Be sure to save your changes before the reboot, as any changes that were not saved are lost. PERFORMING A FAST BOOT A fast boot reduces boot time significantly by bypassing the power-on self test (POST). To perform a switch fast boot 1.
3 Changing system configuration parameters • BB Credit The buffer-to-buffer credit is the number of buffers available to attached devices for frame receipt. The default BB Credit is 16. The range is 1–27. • R_A_TOV Resource allocation timeout value (in milliseconds). This variable works with the E_D_TOV to determine switch actions when presented with an error condition. The default is 10000. The possible range is 4000–120000. • E_D_TOV Error detect timeout value (in milliseconds).
Changing system configuration parameters 3 Set this mode to make the current domain ID insistent across reboots, power cycles, and failovers. This mode is required fabric wide to transmit FICON data. FIGURE 21 Configure tab, Fabric subtab To configure fabric parameters 1. Open the Switch Administration window as described on page 31. 2. Disable the switch as described in “Enabling and disabling a switch” on page 37. 3. Click the Configure tab. 4. Click the Fabric subtab. 5.
3 Changing system configuration parameters To enable insistent domain ID mode 1. Open the Switch Administration window as described on page 31. 2. Disable the switch as described in “Enabling and disabling a switch” on page 37. 3. Click the Configure tab. 4. Click the Fabric subtab. 5. Select the Insistent Domain ID Mode check box. 6. Click Apply. 7. Enable the switch as described in “Enabling and disabling a switch” on page 37.
Managing licensed features 3 To configure arbitrated loop parameters 1. Open the Switch Administration window as described on page 31. 2. Disable the switch as described in “Enabling and disabling a switch” on page 37. 3. Select the Configure tab. 4. Select the Arbitrated Loop subtab. 5. Select or clear the check boxes to enable or disable the corresponding arbitrated loop parameters. 6. Click Apply. 7. Enable the switch as described in “Enabling and disabling a switch” on page 37.
3 Managing licensed features The licensed features currently installed on the switch are listed in the License tab of the Switch Administration window, as shown in Figure 22. If the feature is listed, it is installed and immediately available. When you enable some licenses, such as ISL Trunking, you might need to change the state of the port to enable the feature on the link. FIGURE 22 License tab Use the links above the table to export data, copy data, or search the table.
Administering High Availability 3 3. Paste or type a license key in the field. 4. Click Add License. 5. Click Refresh to display the new licenses in the License tab. REMOVING A LICENSE FROM A SWITCH You can remove a license from a switch in the Switch Administration window. ATTENTION Use care when removing licenses. If you remove a license for a feature, that feature will no longer work. Removing the Web Tools license from a switch makes that switch unavailable from Web Tools.
3 Administering High Availability To launch the High Availability window 1. Select a Brocade 24000 or 48000 director from the Fabric Tree. The selected director appears in the Switch View. 2. Click the HA button in the Switch View. The High Availability window opens. FIGURE 23 High Availability window, CP tab Note that the highlight color of the HA Status at the top of the module is the same as the background color of the HA button.
Administering High Availability 3 To synchronize the services 1. Open the High Availability window as described in “Launching the High Availability Module” on page 45. 2. Verify that HA Summary field displays Non-Disruptive Failover Ready. If the HA Status field displays Non-Disruptive Failover Ready, you are done. If the HA Status field displays Disruptive Failover Ready, continue with step 3. 3. Click the Synchronize Services button. The Warning dialog box displays. 4.
3 Monitoring events To initiate a CP failover 1. Open the High Availability window as described in “Launching the High Availability Module” on page 45. 2. Verify that the HA Status field displays Non-Disruptive Failover Ready or Disruptive Failover Ready. 3. Click Initiate Failover. The Warning dialog box displays. 4. Click Yes to initiate a nondisruptive failover. 5. When prompted, close the Web Tools Switch Explorer window and all associated windows, and relaunch Web Tools.
Monitoring events TABLE 4 3 Event Severity Levels (Continued) Icon and Level Description Warning Warning-level messages highlight a current operating condition that should be checked or it might lead to a failure in the future. For example, a power supply failure in a redundant system relays a warning that the system is no longer operating in redundant mode and that the failed power supply needs to be replaced or fixed.
3 Monitoring events You can click the column head to sort the events by a particular column, and drag the column divider to resize a column. You can also right-click a column heading to resize one or all columns, sort the information in ascending or descending order, or choose which columns are displayed. You can also filter events, as described in “Filtering Fabric and Switch Events” on page 51.
Monitoring events 3 You can click the column head to sort the events by a particular column, and drag the column divider to resize a column. You can also right-click a column heading to resize one or all columns, sort the information in ascending or descending order, or choose which columns are displayed. You can also filter events, as described in “Filtering Fabric and Switch Events,” next.
3 Monitoring events 5. To filter events up until a certain date and time, select the To check box and enter the finish time and date. 6. Click OK. The filter is enabled and the window is refreshed to show the filtered information. To filter events by event severity levels 1. Open the Fabric Events window or the Switch Events tab as described in “Displaying Fabric Events” on page 49 or “Displaying Switch Events” on page 50. 2. Click Filter. The Event Filter dialog box appears. 3. Check Level. 4.
Displaying a fabric summary report 3 Displaying a fabric summary report A fabric summary report lists all of the domains in the fabric and the active paths for each domain. A sample fabric summary report is shown in Figure 28 on page 53. To view a fabric summary report 1. Click Fabric Summary in the Other section of the Tasks menu. The Fabric Summary window appears. 2. Click the Print button to print a topology report. A Print button is located at the top and bottom of the report.
3 Displaying the Name Server entries Admin Domain considerations: The Name Server table is filtered based on Admin Domain membership of the fabric devices. The Name Server table shows only devices that are part of the Admin Domain you are currently logged in to. This includes devices that are direct members of the Admin Domain and devices that are attached to ports that are direct members of the Admin Domain. All other fabric devices are filtered out of the Name Server view for the current Admin Domain.
Physically locating a switch using beaconing 3 3. On the Page Setup dialog box, make the changes specific to your printing preferences and click OK. The Print dialog box appears. 4. Select a printer and click OK in the Print dialog box. To display detailed Name Server information for a particular device 1. Click Name Server in the Monitor section of the Tasks menu. The Name Server window appears. 2. Click a device from the Domain column. 3. Click Detail View.
3 56 Physically locating a switch using beaconing Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Maintaining Configurations and Firmware 4 This chapter contains the following information: • “Maintaining configurations,” next • “Performing a firmware download” on page 60 Maintaining configurations It is important to maintain consistent configuration settings on all switches in the same fabric, because inconsistent parameters (such as inconsistent PID formats) can cause fabric segmentation.
4 Maintaining configurations FIGURE 30 Configure tab, Upload/Download subtab BACKING UP A CONFIGURATION FILE Keep a backup copy of the configuration file in case the configuration is lost or unintentional changes are made. You should keep individual backup files for all switches in the fabric. You should avoid copying configurations from one switch to another. When you back up a configuration file for a Brocade 24000 configured with two logical switches, it is on a logical-switch basis.
Maintaining configurations - 4 iSCSI config (if any) All other config information except Admin Domain configuration information • If you invoke it from AD255 and you are logged in with any role that allows config upload/download), the following will be saved in the configuration file: - Configuration information for zones in all Admin Domains iSCSI configuration (if any) All other configuration information, including zoning from all Admin Domains The filtering depends on the Admin Domain switch owner
4 Performing a firmware download 7. Type the configuration file with a fully qualified path. 8. Select a protocol to use to transfer the file. 9. Click Apply. You can monitor the progress by looking at the Upload/Download progress bar. 10. Enable the switch, as described in “Enabling and disabling a switch” on page 37. Performing a firmware download During a firmware download, the switch reboots and the browser temporarily loses connection with the switch.
Performing a firmware download 4 3. Type the host name or IP address, user name, password, and fully qualified path to the file release.plist. You can enter the IP address in either IPv4 or IPv6 format. The path name should follow the structure below: ////release.plist where the is the path up to the entry point of and is where the unzipped version of Fabric OS has been put.
4 Performing a firmware download • The blade to be upgraded (by slot).
Chapter Managing Your Ports 5 This chapter describes how to manage FC and gigabit Ethernet (GbE) ports. See “Viewing and configuring EX_Ports” on page 140 for information on how to view and configure EX_Ports. In this chapter This chapter contains the following sections: • • • • • • • • Viewing and managing ports using Web Tools . . . . . 63 Configuring ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Assigning a name to a port . . . . . . . . . . . . . . . . . . . .
5 Viewing and managing ports using Web Tools To open the Port Administration window 1. Click an accessible port in the Switch View to open the Port Administration window. The window opens in basic mode (see Figure 33). Click here to display either FC Ports or GbE Ports FIGURE 33 Click here to display either Basic or Advanced Mode Port Administration window, GigE Ports, Basic mode The Port Administration window displays information about the ports on the switch.
Viewing and managing ports using Web Tools 5 • Direct members are ports that have been directly added to the Admin Domain as members. • Indirect members are: - non-owned ports on a member switch - non-owned ports to which member devices are attached • All active ports, as well as any inactive EX_ports are shown. PORT ADMINISTRATION WINDOW COMPONENTS The Port Administration window (shown in Figure 33) has the following components: • Two tabs on the top left: FC Ports and GigE Ports.
5 Viewing and managing ports using Web Tools - Port Statistics—All ports • Basic port information and statistics Note that on the Port Statistics subtab, you can view either absolute values or deltas for port statistics. Viewing the deltas is useful if you want to view current port trends. To reset the counters on the port statistics. click the Clear Counters button. FCIP statistics for a GbE port are the accumulated statistics of all the FCIP tunnels for that GbE port.
Configuring ports Figure 35 5 Port Administration window, Table view Configuring ports Web Tools provides wizards to assist you in configuring ports. This section describes how you can configure FC ports, logical FCIP ports, GbE ports, and NPIV ports. CONFIGURING FC PORTS With the FC Port Configuration wizard, you can configure allowed port types, port speed, and long distance mode for physical ports. The following procedure describes how to open the FC Port Configuration wizard.
5 Configuring ports FIGURE 36 FC Port Configuration Wizard, FC ports 3. From the tree on the left, select the port you want to configure. 4. Click the General subtab. 5. Click the Edit Configuration button. The FC Port Configuration wizard opens. The fields are populated with the current configuration values. 6. Follow the steps in the wizard. If you configure a disabled port as an EX_Port, the wizard displays the Enable Port after configuration check box.
Configuring ports 5 When the wizard prompts you to select allowed port types, if all of these boxes are selected, there are no constraints on port type. The port will negotiate to its preferred type when the switch comes up, depending on what type of device or switch it is connected to. Clearing a check box guarantees that the port will not attempt to function as a port of the unchecked type. At least one type must remain selected. L-Port and F-Port cannot both be cleared.
5 Assigning a name to a port If you configure a disabled port as a VEX_Port, the wizard provides the Enable Port after configuration check box. If you select this check box, the disabled port is automatically enabled after configuration. If you leave this check box cleared, the port remains in the same state after configuration. CONFIGURING GBE PORTS With the GigE Port Configuration wizard, you can configure IP interfaces, and IP routes.
Enabling and disabling a port 5 6. Type a name for the port and click Rename. To delete the existing port name, leave the field blank and click Rename. Enabling and disabling a port On FR4-18i and FC4-16IP port blades, all ports are disabled by default. You can disable and reenable them as needed. If FC Routing is disabled, all EX_Ports are automatically disabled and you cannot enable them until FC Routing is enabled.
5 Enabling and disabling NPIV ports To enable or disable a port over reboots 1. Click a port in the Switch View to open the Port Administration window. 2. Click the FC Ports or GigE Ports tab. 3. From the tree on the left, click the switch or slot that contains the port. 4. From the table, select one or more ports. Use Shift-click and Ctrl-click to select multiple ports. You can select multiple ports from the table. You cannot select multiple ports from the tree. 5.
Activating ports 5 3. From the tree on the left, select the logical port you want to disable. 4. Click the Disable NPIV button. The button is unavailable if NPIV is already disabled on the port. Activating ports Brocade switches come with a preset number of ports enabled. Additional ports can be enabled using the Ports on Demand licenses and the Dynamic Ports on Demand feature (for supported switches only). Ports on Demand is ready to be unlocked in the switch firmware.
5 Activating ports To unlock a Ports on Demand license, you can use the supplied license key or generate a license key. If you need to generate a key, open an Internet browser and go to the Brocade Web site at www.brocade.com. Click Products > Software License Keys and follow the instructions to generate the key. To enable Ports on Demand 1. Install the Brocade Ports on Demand licensed product. For instructions, see “Activating a license on a switch” on page 44. 2.
Swapping port index 5 Reserving and Releasing Licenses On a Port Basis You must be logged in as Admin to reserve and release licenses. NOTE If the Admin Domains feature is enabled, the Dynamic POD configuration is only applied to the ports if the switch is a member of the current Admin Domain. The Dynamic PODs feature is supported on the Brocade 4018, 4020, and 4024 switches only. You must disable the port or switch before reserving or releasing a license. 1.
5 Swapping port index To determine if a port index has been swapped with another switch port 1. Click a port in the Switch View to open the Port Administration window. 2. Click the FC Ports tab. 3. Click the Advanced button. 4. From the tree on the left, select the port you want to swap. 5. Click the General tab. The Port Index attribute in the General tab indicates whether a port has been swapped.
Chapter Administering ISL Trunking 6 In this chapter This chapter contains the following information: • About Interswitch Link Trunking. . . . . . . . . . . . . . . . . 77 • Displaying trunk group information . . . . . . . . . . . . . . 78 • Disabling or reenabling trunking mode on a port. . . 78 About Interswitch Link Trunking Interswitch link (ISL) trunking optimizes network performance by forming trunking groups that can distribute traffic across a shared bandwidth.
6 Displaying trunk group information FIGURE 38 Trunking tab Displaying trunk group information Use this procedure to display the following information about ISL Trunking groups: • Trunk group number identifier • Master port • Member ports To view information on a trunk group 1. Open the Switch Administration window as described on page 31. 2. Click the Trunking tab. 3. Optional: Click Refresh to refresh the information.
Disabling or reenabling trunking mode on a port 6 Trunking is not supported on logical ports, GbE ports, or EX_Ports. Admin Domain considerations: You can enable and disable trunking for a port only when the current Admin Domain owns the switch. You can log into a switch that is not in your Admin Domain, but most of the functionality will be unavailable. To disable or reenable trunking mode on a port 1. Click a port in the Switch View to open the Port Management module (see Figure 33 on page 64). 2.
6 80 Disabling or reenabling trunking mode on a port Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Managing Administrative Domains 7 In this chapter This chapter contains the following information: • • • • • About administrative domains . . . . . . . . . . . . . . . . . . 81 Implementing administrative domains . . . . . . . . . . . 83 Using the Admin Domain window . . . . . . . . . . . . . . . 84 Creating and populating domains . . . . . . . . . . . . . . . 88 Managing administrative domains . . . . . . . . . . . . . .
7 About administrative domains USER-DEFINED ADMIN DOMAINS AD1 through AD254 are user-defined Admin Domains. These user-defined Admin Domains can be created only by a physical fabric administrator in AD255. SYSTEM-DEFINED ADMIN DOMAINS AD0 and AD255 are special Admin Domains and are present in every AD-capable fabric.
Implementing administrative domains 7 • Manage ACL and distribution (can be managed in AD0 if no other Admin Domains are present). • Advanced Performance Monitoring (can be managed in AD0 if no other Admin Domains are present). You cannot manage zones with AD255, because AD255 does not have a zone database associated with it. ADMIN DOMAIN MEMBERSHIP Switches, ports, and devices can be members of an Admin Domain. Admin Domain members can be either direct or indirect members.
7 Using the Admin Domain window Using the Admin Domain window You can view and manage Admin Domains through the Admin Domain window, shown in Figure 39. You access the Admin Domain window by clicking Admin Domain in the Manage section of the Tasks menu. FIGURE 39 Admin Domain window, summary view The Admin Domain window displays information about the Admin Domains defined in the fabric.
Using the Admin Domain window 7 When you launch the Admin Domain window and select the parent Admin Domains node in the tree on the left side of the module, the Admin Domain window displays summary information about all of the Admin Domains, as shown in Figure 39. You can also select a specific Admin Domain from the tree to display detailed information about that Admin Domain, as shown in Figure 40.
7 Using the Admin Domain window The Admin Domain window also contains Export, Copy, and Search links at the top of the each table. The options are not available if the table does not have any content. NOTE You must accept the Brocade Certificate at the beginning of the login to Web Tools to enable the functionality of Export and Copy. • Click Export to save the contents of the table to a tab-delimited file. • Click Copy to copy the contents of the table in tab-delimited text format to a file.
Using the Admin Domain window 7 REFRESHING FABRIC INFORMATION This function refreshes the display of fabric elements only (switches, ports, and devices). It does not update Admin Domain changes in the Admin Domain window. To refresh the Admin Domain information, see “Refreshing admin domain information,” next. This option allows you to refresh the fabric element information displayed at any time. To refresh the fabric information 1. In the Admin Domain window, click Refresh.
7 Creating and populating domains CLOSING THE ADMIN DOMAIN WINDOW It is very important to remember that any changes you make in the Admin Domain window are not saved automatically. To close the Admin Domain window 1. From the Admin Domain window, click File > Close. If there are changes in the buffer that have not been saved, a warning appears. Confirm that you want to close the Admin Domain session without saving the changes. 2.
Creating and populating domains 7 The Create Admin Domain wizard opens. FIGURE 42 Create Admin Domain wizard 3. In the Name area, assign an Admin Domain name. You can specify a name or let the system assign the name for you. 4. In the ID area, assign an Admin Domain ID. You can specify an ID or let the system assign the ID for you. 5. In the State area. select the Active check box to activate the Admin Domain when you finish creating it. This is the default setting.
7 Creating and populating domains Optional: Click the Manual button to add offline devices. FIGURE 43 Adding members to an Admin Domain 8. Click Next. The wizard displays a summary of the Admin Domain. Read the summary to verify the Admin Domain setup is correct.
Managing administrative domains 7 9. Click Finish to close the wizard. 10. Click Save to save the new Admin Domain configuration to persistent storage. 11. Click Apply to enforce the new Admin Domain configuration as the effective configuration. To activate or deactivate an Admin Domain 1. Open the Admin Domain window. 2. From the tree on the left, select the Admin Domain you want to activate or deactivate. 3. Click the Activate button to activate the Admin Domain.
7 Managing administrative domains The Modify Admin Domain wizard opens on the Membership step. FIGURE 45 Modify Admin Domain wizard 4. Assign members to the Admin Domain by selecting them in the Available Members section and clicking Add, Add Ports, or Add Devices. - Select a switch, port, or device in the Available Members tree and click Add to add the selected element. Alternatively, you can press the Insert key to add your selections.
Managing administrative domains 7 RENAMING ADMIN DOMAINS You can change the name of an Admin Domain, including an auto-assigned ID name. The Admin Domain name cannot exceed 63 chars and can contain alphabetic and numeric characters. The only special character allowed is an underscore ( _ ). NOTE You cannot rename AD0 or AD255. To rename a domain 1. Open the Admin Domain window. 2. From the tree on the left, select the Admin Domain. 3. Click the Rename button. 4. Enter the new name. 5. Click OK. 6.
7 Managing administrative domains To clear the entire Admin Domain configuration 1. Open the Admin Domain window. 2. Click Actions> Clear AD Configuration. 3. In the confirmation dialog box, click Yes to clear the Admin Domain configuration. Click No to cancel the action.
Chapter Administering Zoning 8 This chapter briefly describes zoning and provides the procedures for managing zoning using Brocade Web Tools. It contains the following sections: In this chapter • • • • • • • • Introducing zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Configuring zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 Managing zoning with Web Tools. . . . . . . . . . . . . . . . 97 Managing zone aliases. . . . . . . . . . . . . . . . . . . . . . .
8 Zoning and admin domains Zoning and admin domains Each admin domain has its own zone database, with both defined and effective zone configurations and all related zone objects (zones, zone aliases, and zone members). Within an admin domain, you can configure zoning only with the devices that are present in that admin domain (direct members). If you upgrade a fabric to Fabric OS 5.2.0 or higher, the zone database from the pre-v5.2.0 fabric is referred to as the “root zone database” and is owned by AD0.
Managing zoning with Web Tools 8 SETTING THE DEFAULT ZONING MODE The default zoning mode defines the device accessibility behavior if zoning is not implemented or if there is no effective zone configuration. The default zoning mode has two options: • All Access—All devices within the fabric can communicate with all other devices. • No Access—Devices in the fabric cannot access any other device in the fabric. Web Tools supports default zoning on switches running firmware v5.1.0 or higher.
8 Managing zoning with Web Tools A snapshot is taken of all the zoning configurations at the time you launch the Zone Administration window; this information is not updated automatically by Web Tools. To update this information, see “Refreshing Zone Administration window Information” on page 99. FIGURE 46 Zone Administration window ATTENTION Any changes you make in the Zone Administration window are held in a buffered environment and are not updated in the zoning database until you save the changes.
Managing zoning with Web Tools 8 The Member Selection List panel displays both physical and logical FC ports; however, GbE ports are not supported for zoning. To verify whether you have any unzoned devices, analyze the current configuration for unzoned and offline devices (for more information see “Creating configuration analysis reports” on page 113).
8 Managing zoning with Web Tools Any local zoning changes are buffered by the Zone Administration window until explicitly saved to the fabric. If the fabric zoning database is independently changed by another user or from another interface (for example, the CLI) while Web Tools zoning changes are still pending, the refresh icon starts to blink (after a 15–30 second polling delay).
Managing zoning with Web Tools 8 To save zone changes to the switch zoning database 1. Make the zoning changes in the Zone Administration window. 2. Click Zoning Actions> Save Config Only. NOTE If you have made changes to a configuration, you must enable the configuration before the changes will be effective. To enable the configuration, see “Enabling zone configurations” on page 109.
8 Managing zone aliases To select a zoning view 1. Launch the Zone Administration window as described on page 96. 2. Click View> Choose Fabric Resources View. 3. Choose the way you want to view the fabric resource and click OK. Managing zone aliases An alias is a logical group of port index numbers and WWNs. Specifying groups of ports or devices as an alias makes zone configuration easier, by enabling you to configure zones using an alias rather than inputting a long string of individual members.
Managing zone aliases 8 ADDING AND REMOVING MEMBERS OF A ZONE ALIAS Use the following procedure to add or remove zone alias members. To modify the members of an alias 1. Open the Zone Administration window as described on page 96. 2. Click the Alias tab. 3. Select the alias you want to modify from the Name drop-down list. 4. Select an element in the Member Selection List that you want to add to the alias, or select an element in the Alias Members list that you want to remove. 5.
8 Managing zones The Confirm Deleting Alias dialog box displays. 5. Click Yes. The selected alias is deleted from the Zone Admin buffer. At this point you can either save your changes or save and enable your changes. 6. Click Zoning Actions> Save Config Only to save the configuration changes. To enable the configuration, see “Enabling zone configurations” on page 109. Managing zones A zone is a region within the fabric in which specified switches and devices can communicate.
Managing zones 8 At this point you can either save your changes or save and enable your changes. 11. Click Zoning Actions> Save Config Only to save the configuration changes. To enable the configuration, see “Enabling zone configurations” on page 109. ADDING AND REMOVING MEMBERS OF A ZONE Use the following procedure to add or remove zone members. To modify the members of a zone 1. Open the Zone Administration window as described on page 96. 2. Click the Zone tab. 3.
8 Managing zone configurations COPYING ZONES Use the following procedure to copy a zone configuration. To copy a zone 1. Open the Zone Administration window as described on page 96. 2. Click the Zone tab. 3. Select the zone you want to delete from the Name drop-down list. 4. Click Copy. 5. On Copy an Existing Zone, enter a name for the copied zone. 6. Click OK. The selected zone is copied from the Zone Admin buffer. 7. Click Zoning Actions> Save Config Only to save the configuration changes.
Managing zone configurations 8 Figure 47 shows a sample zoning database and the relationship between the zone aliases, zones, and zoning configuration. The database contains one zoning configuration, myconfig, which contains two zones: Zone A and Zone B. The database also contains four aliases, which are members of Zone A and Zone B. Zone A and Zone B also have additional members other than the aliases.
8 Managing zone configurations 4. On Create New Config, type a name for the new configuration and click OK. The new configuration appears in the Name drop-down list. 5. Expand the Member Selection List to view the nested elements. The choices available in the list depend on the selection made in the View menu. 6. Select an element in the Member Selection List that you want to include in your configuration. The Add Member button becomes active. 7. Click Add Member to add configuration members.
Managing zone configurations 8 3. Select the configuration you want to rename from the Name drop-down list and click Rename. 4. On Rename a Config, type a new configuration name and click OK. The configuration is renamed in the configuration database. 5. Click Zoning Actions> Save Config Only to save the configuration changes. COPYING ZONE CONFIGURATIONS Use the following procedure to copy a zone configuration. To copy a zone 1. Open the Zone Administration window as described on page 96. 2.
8 Managing zone configurations If the zoning database size exceeds the maximum allowed, you cannot enable the zone configuration. The zoning database summary displays the maximum zoning database size (see “Displaying zone configuration summaries” on page 112). To enable a zone configuration 1. Open the Zone Administration window as described on page 96. 2. Click Zoning Actions> Enable Config. 3. On Enable Config, select the configuration to be enabled from the menu. 4.
Managing zone configurations 8 The enabled configuration is listed in the upper-right corner of the Zone Administration window. FIGURE 48 Effective Configuration window To view the enabled zone configuration name without opening the Zone Administration window 1. Select a switch from the Fabric Tree. The selected switch appears in the Switch View. The current zone configuration name (if one is enabled) is displayed in the lower portion of the Switch Events and Switch Information.
8 Managing zone configurations 3. Optional: Click Print located in the Print Effective Zone Configuration dialog box to print the enabled zone configuration details. This launches the print dialog box.
Managing zone configurations 8 CREATING CONFIGURATION ANALYSIS REPORTS The configuration analysis report lists the following: • SAN components that are not included in the configuration. • SAN components that are in the configuration but not in the fabric. To create a configuration analysis report 1. Open the Zone Administration window as described on page 96. 2. Click the Zone Config tab. 3. Select a configuration to be analyzed from the Name drop-down list and click Analyze Zone Config.
8 Managing the zoning database 4. Click Device Accessibility. The Initiator/Target Accessibility Matrix for Config- Device Selection dialog box opens. 5. Select devices you want displayed in the accessibility matrix; click the radio button to select all devices in the fabric or to select a subset of the devices. If you select a subset, you must click the devices from the Select Devices list and click Add to move them to the Evaluate for Accessibility list. 6. Click OK.
Managing the zoning database 8 REMOVING A WWN FROM MULTIPLE ALIASES AND ZONES Use this procedure if you want to remove a WWN from all or most zoning entities. To delete a WWN from the Zone Admin buffer 1. Open the Zone Administration window as described on page 96. 2. Click Edit> Delete WWN. The Delete WWN dialog box opens. 3. Type a WWN value in the WWN field and click OK. The Delete WWN dialog box displays all the zoning elements that include the WWN. 4.
8 Managing the zoning database The search starts from the top of the list, and when the target element is found, it is also selected in the Member Selection List so it can be added or its parent or children can be found. By default, the Member Selection List is searched from beginning to end one time. If you select the wraparound option, the search will continue to loop from the beginning to the end of the Member Selection List. To search for a zone member 1.
Managing the zoning database 8 Access the wizards through the Tools menu in the Zone Administration window. The following sections describe the zoning tasks and the procedure for accessing the wizards for each task. The wizards are self-explanatory, so the specific steps are not documented here. NOTE The left side of each wizard window lists the steps you need to take to complete the task. The current step is in blue, as shown in Figure 51 on page 117.
8 Managing the zoning database Removing offline devices from the zoning database Removing offline devices (WWNs) helps clean the zoning database to save more space for new entries. Use the following procedure to view all devices that are no longer online and remove all or selected offline devices from the zoning database. To remove offline devices from the zoning database 1. Open the Zone Administration window as described on page 96. 2. Click Tools> Remove Offline Devices.
Best practices for zoning 8 The wizard allows you to define one and only one name for each device port (WWN). Devices with one or more aliases are considered already named and are not displayed. NOTE To enter a zone alias name, double-click the Zone Alias field for each device, and type the name. After typing each alias name, you must press Enter or click another zone alias field, or the wizard does not accept the name.
8 120 Best practices for zoning Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Monitoring Performance 9 In this chapter This chapter contains the following sections: • • • • • • Monitoring performance using Web Tools . . . . . . . 121 Opening the Performance Monitoring window . . . . 126 Creating basic performance monitor graphs . . . . . 127 Customizing basic monitoring graphs . . . . . . . . . . . 127 Creating advanced performance monitoring graphs 129 Managing performance graphs . . . . . . . . . . . . . . . .
9 Monitoring performance using Web Tools Graphs within the Performance Monitoring window are updated every 30 seconds. When you first display the graph or if you modify the graph (such as to add additional ports), you might have to wait up to 30 seconds before the new values are shown. When you have multiple graphs open in the Performance Monitoring window, you can: • Click Window> Tile to view all graphs at once, tiled in the Performance Monitoring window.
Monitoring performance using Web Tools 9 The advanced monitoring graphs give more detailed performance information to help you manage your fabric. You can access the basic monitoring graphs on all switches; advanced monitoring graphs are available only on switches that have a Brocade Advanced Performance Monitoring license activated. TABLE 6 Basic performance graphs Graph Type Displays Port Throughput The performance of a port, in bytes per second, for frames received and transmitted.
9 Monitoring performance using Web Tools Table 8 lists each graph and indicates the supported port types for each. The port selection lists for each graph display the supported ports for that graph.
Monitoring performance using Web Tools 9 Figure 52 shows how to access the list of Advanced Performance Monitoring graphs using Web Tools. This example displays the graphs available in the Performance Monitoring window for a Brocade 24000 director with the Advanced Performance Monitoring license installed. Note that the slot number is identified.
9 Opening the Performance Monitoring window CANVAS CONFIGURATIONS A “canvas” is a saved configuration of graphs. The graphs can be either the Web Tools predefined graphs or user-defined graphs. Each canvas can hold up to eight graphs per window, with six shown in Figure 53. Up to 20 canvases can be set up for different users or different scenarios. Each canvas is saved with a name and an optional brief description.
Creating basic performance monitor graphs 9 Creating basic performance monitor graphs Use the following procedure to create the basic performance monitor graphs listed in Table 6 on page 123. To create a basic performance monitor graph 1. Open the Performance Monitor window. 2. Click Performance Graphs> Basic Monitoring> Graph Type. Depending on the type of graph you select, you might be prompted to select a slot or port for which to create a graph (see Figure 55).
9 Customizing basic monitoring graphs To customize basic performance monitoring graphs 1. Create or access the graph you want to customize. See “Creating basic performance monitor graphs” on page 127 for instructions on creating a graph. 2. For Brocade 24000 and 48000 directors, to display detailed port throughput utilization rates for each port in a slot, click the arrows next to a slot. Port information for that slot is displayed in the graph.
Creating advanced performance monitoring graphs 9 c. Click Add to move the selected ports to the Selected Ports list. d. Optional: Click ADD ALL Ports to add all of the ports in the Port Selection List to the Selected Ports list. e. Optional: Click Search to open the Search Port Selection List dialog box, from which you can search for all E_Ports, all F_Ports, or all port names with a defined string. Select the ports you want to add and click Search in the Search Port Selection List dialog box. f.
9 Creating advanced performance monitoring graphs - To specify the port, Source ID and Domain ID, skip to step 4. FIGURE 56 Creating an SID/DID performance graph 3. Click a port from the Slot/Port or Sid/Did Selection List. a. Drag the selected port into the Enter/drag port number field. b. Click Retrieve preset EE monitors. The current end-to-end monitors for that port are displayed in the “Current EE monitors set for selected port” table. c.
Creating advanced performance monitoring graphs 9 To create a SCSI vs. IP Traffic graph 1. Open the Performance Monitoring window. 2. Click Performance Graphs> Advanced Monitoring> SCSI vs. IP Traffic. The SCSI vs. IP Traffic Setup dialog box opens. This dialog box is similar to that shown in Figure 55 on page 128. 3. Double-click the domain to expand the slot/port list. For Brocade 24000 and 48000 directors, click the + signs to expand the ports under each slot, as shown in Figure 55. 4.
9 Managing performance graphs 4. Click the port from the Slot/Port Selection List and drag it into the Enter/drag slot,port field. 5. Optional: For the LUN per port graphs, type a LUN number, in hexadecimal notation. For the Brocade 4100 or 5000 switch, you can enter up to eight LUN masks. For the Brocade 48000 director, you can enter up to four LUN masks. For all other switches running Fabric OS 4.x or v5.x, you can enter up to two LUN masks. For switches running Fabric OS 3.
Managing performance graphs 9 To save graphs 1. Open the Performance Monitoring window. 2. Create basic or advanced Performance Monitor graphs, as described in “Creating basic performance monitor graphs” on page 127 and “Creating advanced performance monitoring graphs” on page 129. The graphs are displayed in the Performance Monitor window. 3. Click File> Save Current Canvas Configuration. The Save Canvas Configuration dialog box opens. 4.
9 Managing performance graphs To print all graphs in a canvas 1. Open the Performance Monitoring window. 2. Click File> Print All Graphs. 3. In the print dialog box, click OK. MODIFYING GRAPHS Use the following procedure to modify an existing graph that is saved in a canvas. To modify an existing graph 1. Open the Performance Monitoring window. 2. Click File> Display Canvas Configurations. The Canvas Configuration List displays.
Chapter Using the FC-FC Routing Service 10 In this chapter This chapter describes how to use the FC-FC Routing Service to share devices between fabrics without merging the fabrics.
10 About fibre channel routing backbone fabric An FC Router can connect two edge fabrics; a backbone fabric connects FC Routers. The backbone fabric is the fabric to which the FC Router switch belongs. A backbone fabric consists of at least one FC Router and possibly a number of Fabric OS-based Fibre Channel switches. Initiators and targets in the edge fabric can communicate with devices in the backbone fabric through the FC Router.
Setting up FC-FC routing 10 When FCR is interoperating with McDATA edge fabrics in Fabric mode and Open mode, it will support the LSANzone with the backbone devices. FCR will support the following McDATA versions: v4.1.1, v5.x, v6.x, v7.x, v8.x. Since Brocade has no way of knowing how the modern McDATA switch will operate natively in the future, there is no guarantee that the 5.3.0 version of FCR will work with any future version of McDATA fabric.
10 Managing FC-FC routing with Web Tools For a multi-FC Router backbone fabric, make sure that each FC Router is connected to a switch in the backbone fabric. 5. Configure LSAN zones on the fabrics that will share devices. See “Viewing and configuring LSAN zones” on page 142. 6. View the information in the EX Ports, LSAN Fabrics, LSAN Zones, and LSAN Devices tabs to make sure that your configuration has succeeded.
Managing FC-FC routing with Web Tools 10 The FC Routing module displays (as shown in Figure 59). If FC-FC Routing is disabled, a message to that effect displays on all the tabs in the module. FIGURE 59 FC Routing module in Disabled mode with General tab selected VIEWING AND MANAGING LSAN FABRICS The LSAN Fabric tab (see Figure 60 on page 140) displays all the LSAN fabrics visible to your switch, in both a tabular and tree form.
10 Viewing and configuring EX_Ports For Brocade switches, this launches Web Tools. For non-Brocade fabrics, this launches the element manager for that switch. FIGURE 60 FC Routing module with LSAN Fabrics tab selected Viewing and configuring EX_Ports The EX_Ports tab (see Figure 61 on page 141) displays all of the EX_Ports on the switch, including configuration and status information. The ports are sorted by slot number, and then by row number within each slot.
Viewing and configuring EX_Ports 10 • Enable or disable an EX_Port. • Persistently enable or disable an EX_Port. ATTENTION During EX_Port configuration, the port is automatically disable, and then reenabled when the changes are applied. Be sure that you do not physically connect a port to a remote fabric before configuring it as an EX_Port; otherwise, the two fabrics merge and you lose the benefit of Fibre Channel routing. You can enable or disable multiple ports at one time.
10 Viewing and configuring FCR router port cost To edit the configuration of an EX_Port 1. Launch the FC Routing module. 2. Click the EX_Ports tab. 3. Select a port to configure, by clicking in the row. 4. Click Edit Configuration in the task bar. This launches the port configuration wizard, which guides you through the port configuration process. The current configuration values are displayed in the wizard steps.
Viewing and configuring LSAN zones 10 • A required name convention. The name of an LSAN zone begins with “LSAN_”. The LSAN name is case insensitive; for example, lsan_ is equivalent to LSAN_, Lsan_ and so on. • Members must be identified by their port WWN, because PIDs are not necessarily unique across fabrics.
10 Configuring the backbone fabric ID Click the Physical Devices or Proxy Devices element in the tree to see a detailed list of the physical or proxy devices. Click the device name in the tree for more detailed information about a specific device, as shown in Figure 62. FIGURE 62 FC Routing module with LSAN Devices tab selected Configuring the backbone fabric ID The FC-FC Routing Service must be disabled when configuring the backbone fabric ID.
Configuring the backbone fabric ID 10 6. Click Set Fabric ID in the task bar. The Configure Backbone Fabric ID window appears. 7. Select a fabric ID from the drop-down menu. The fabric ID is a number from 1 through 128. Web Tools warns you if you select a fabric ID that is already in use. 8. Click OK. 9. Reenable all of the EX_Ports after Web Tools automatically reenables the FC-FC Routing Service.
10 146 Configuring the backbone fabric ID Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Working With Diagnostic Features 11 In this chapter This chapter contains the following information: • Managing trace dumps . . . . . . . . . . . . . . . . . . . . . . 147 • Displaying switch information . . . . . . . . . . . . . . . . . 149 • Interpreting port LEDs . . . . . . . . . . . . . . . . . . . . . . . 154 Managing trace dumps A trace dump is a snapshot of the running behavior within the Brocade switch.
11 Managing trace dumps Using the Trace tab of the Switch Administration window, you can view and configure the trace FTP host target and enable or disable automatic trace uploads. FIGURE 63 Trace tab HOW A TRACE DUMP IS USED The generation of a trace dump causes a CRITICAL message to be logged to the system error log. When a trace dump is detected, issue the supportSave command on the affected switch.
Displaying switch information 11 Setting up for automatic transfer of diagnostic files involves the following tasks: • Specify a remote server to store the files. • Enable the automatic transfer of trace dumps to the server. (Trace dumps overwrite each other by default; sending them to a server preserves information that would otherwise be lost.) You should also set up a periodic checking of the remote server so that you are alerted if the server becomes unavailable and you can correct the problem.
11 Displaying switch information The Fan, Temperature, and Power Status windows have Export, Copy, and Search options at the top of the tables. These options are not available if the table does not have any content. You must accept the Brocade Certificate at the beginning of the login to Web Tools to enable the functionality of Export and Copy. • Click Export to save the contents of the table to a tab-delimited file. • Click Copy to copy the contents of the table in tab-delimited text format to a file.
Displaying switch information 11 • For Brocade 24000 and 48000 directors and Brocade 4100, 4900, 5000, and 7500 switches, the Fan No. column indicates the fan FRU number. • For Brocade 3900, the Fan No. column indicates the fan number. • The Brocade 200E, 3250, 3850 4012, 4016, 4018, 4020, and 4024 switches do not contain fan FRUs, so for these switch models, the Fan No. column indicates the fan number.
11 Displaying switch information To display the power supply status detail 1. Select a switch from the Fabric Tree. The selected switch appears in the Switch View. The icon on the Power button indicates the overall status of the power supply. 2. Click the Power button on the Switch View. The detailed power supply states are displayed. FIGURE 67 Power Status window CHECKING THE PHYSICAL HEALTH OF A SWITCH The Status button displays the operational state of the switch.
Displaying switch information 11 Click the Status button to display a detailed, customizable switch status report, shown in Figure 68. Note that this is a static report and not a dynamic view of the switch. FIGURE 68 Switch Report window To display a detailed switch status report 1. Select a switch from the Fabric Tree. The selected switch appears in the Switch View. The icon on the Status button indicates the overall status of the switch. 2. Click the Status button on the Switch View.
11 Interpreting port LEDs - View the data in raw XML format View the style sheet for the report View the XML schema for the report FIGURE 69 Switch Report Action menu Interpreting port LEDs The Switch View displays port graphics with blinking LEDs, simulating the physical appearance of the ports. One of the LEDs indicates port status; the other indicates port speed. For LED information, refer to the hardware documentation for the switch you are viewing.
Interpreting port LEDs 11 PORT ICON COLORS The background color of the port icon indicates the port status, as follows: • • • • • • Green (healthy) Yellow (marginal) Red (critical) Gray (unmonitored) If the entire port icon is blue, the port is buffer-limited. If a group of port icons appears dimmed, those ports are not licensed. LED REPRESENTATIONS The port icons are different for different switch models.
11 Interpreting port LEDs BROCADE 48000 DIRECTOR LEDS For the Brocade 48000 director, the representation of the port LEDs on the FC4-32 port blade is not the same as the LEDs on the physical blade. Figure 71 on page 156 compares the LEDs on the physical port card and the Web Tools display. Web Tools Representation Physical Port Card 3 1 ! 2 1 ! 2 4 3 4 FC4 32 1. Port Speed LED for the right port 2. Port Status LED for the right port 3. Port Speed LED for the left port 4.
Chapter Administering Fabric Watch 12 In this chapter This chapter contains the following sections: • • • • • • Introduction to Fabric Watch . . . . . . . . . . . . . . . . . . 157 Using Fabric Watch with Web Tools . . . . . . . . . . . . . 158 Configuring Fabric Watch thresholds . . . . . . . . . . . 159 Configuring alarms for FRUs . . . . . . . . . . . . . . . . . . 162 Displaying Fabric Watch alarm information . . . . . . 163 Configuring email notifications . . . . . . . . . . . . . . . .
12 Using Fabric Watch with Web Tools Using Fabric Watch with Web Tools To administer Fabric Watch operations through the Web Tools Fabric Watch feature, click the Fabric Watch link in the Manage section of the Tasks menu. NOTE Unless the switch is a member of the current Admin Domain context, Fabric Watch is view-only. FIGURE 72 The Fabric Watch window Fabric Watch Explorer, on the left side of the window, displays the available classes. Not all classes are available for all switches.
Configuring Fabric Watch thresholds 12 To open Fabric Watch window 1. Select a switch from the Fabric Tree and log in if necessary. 2. Click Fabric Watch in the Manage section of the Tasks menu. The Fabric Watch window opens, as shown in Figure 72. Configuring Fabric Watch thresholds The Threshold Configuration tab enables you to configure event conditions. From this tab, you configure threshold traits, alarms, and email configuration.
12 Configuring Fabric Watch thresholds To configure threshold traits 1. Open Fabric Watch window. 2. Click the Threshold Configuration tab. FIGURE 73 Threshold configuration in Fabric Watch 3. Click the Trait Configuration subtab. 4. In Fabric Watch Explorer, click a class. 5. Under Area Selection, choose an area from drop-down list. This sets the units in the Units field. The module displays two columns of trait information, labeled System Default and Custom Defined.
Configuring Fabric Watch thresholds 12 10. Type the size of the buffer zone in the Buffer Size field. 11. Click Apply. CONFIGURING THRESHOLD ALARMS After you update the threshold information, use the Alarm Configuration subtab to customize the notification settings for each event setting. To configure threshold alarms 1. Open the Fabric Watch window. 2. Click the Threshold Configuration tab. 3. Click the Alarm Configuration subtab. 4. In Fabric Watch Explorer, click a class. 5.
12 Configuring alarms for FRUs - To disable threshold alarms, click Disabled and click Apply. The threshold alarms are disabled and you do not need to continue with this procedure. - To enable threshold alarms, click Enabled and continue with the next step. 8. Select a behavior type for the threshold alarms: - Click Triggered to receive threshold alarms only when they are triggered by events that you have defined. - Click Continuous to receive threshold alarms at a continuous interval.
Displaying Fabric Watch alarm information 12 Displaying Fabric Watch alarm information From Fabric Watch, you can view two types of reports: • Alarm notifications—Displays the alarms that have occurred for a selected class/area • Alarm configuration—Displays threshold and alarm configurations for a selected class/area DISPLAYING AN ALARM CONFIGURATION REPORT Use the Threshold Configuration tab, Configuration Report subtab to display a report of the configuration for a selected class/area with the follow
12 Configuring email notifications To view alarms 1. Open the Fabric Watch window. 2. In Fabric Watch Explorer, select the class that you want to check for alarms. 3. Click the Alarm Notification tab. 4. In Area Selection, select the area that you want to check for alarms from the drop-down list. All alarms for that area display. For troubleshooting responses to alarms, see the Fabric Watch Administrator’s Guide.
Configuring email notifications 12 To configure the email alert alarm 1. Open the Fabric Watch window. 2. Click the Email Configuration tab. 3. Click the Enable or Disable radio button to enable or disable the email alert status. When you disable email alerts, Fabric Watch does not send email notification even if the email notification method is assigned to monitored areas. 4. Type the email address of the recipient in the Recipient Email Address text box.
12 166 Configuring email notifications Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Administering Extended Fabrics 13 In this chapter This chapter contains the following information: • “About extended link buffer allocation,” next • “Configuring a port for long distance” on page 169 About extended link buffer allocation As the distance between switches and the link speed increases, additional buffer-to-buffer credits are required to maintain maximum performance.
13 About extended link buffer allocation - Auto-Negotiation • Buffer Needed/Allocated—The number of buffers needed and the number of buffers that are actually allocated. • Actual Distance (km)—The actual distance for the link in kilometers. • Desired Distance (km)—Required for a port configured in LD or LS mode (see Table 10 on page 169), the desired distance, in kilometers, for the link.
Configuring a port for long distance 13 NOTE In an AD that does not own the switch, only directly owned ports and E-Ports are shown. E-Ports that are not directly owned are not controllable. Long Distance configuration functionality will be available for controllable ports only, and non-owned E-Ports are viewable only. TABLE 10 Long-distance settings and license requirements Value Description Extended Fabrics License Required? L0 No long-distance setting is enabled.
13 Configuring a port for long distance a. Double-click the Desired Distance field for the port, as shown in Figure 75. b. Type a number in the field to indicate the distance in kilometers. The allowed values depend on the port capability: • If the port capability is 4 GB, type a number between 10 and 125, inclusive. • If the port capability is 2 GB, type a number between 10 and 250, inclusive. • If the port capability is 1 GB, type a number between 10 and 500, inclusive.
Chapter Administering the iSCSI Target Gateway 14 This chapter describes how to use the iSCSI Target Gateway. The gateway is an intermediate device in the network, allowing iSCSI initiators in an IP SAN to access and utilize storage in a Fibre Channel SAN. In this chapter • Supported platforms for iSCSI . . . . . . . . . . . . . . . . . 171 • About the iSCSI service . . . . . . . . . . . . . . . . . . . . . . 171 • Setting up iSCSI Target Gateway Services . . . . . . .
14 About the iSCSI service • For GbE ports on the FC4-16IP blade, the port numbers shall range from ge0 through ge7. The FC4-16IP blade does not support FCIP functionality. The iSCSI standard defines several naming conventions to enable location-independent device identification of storage resources. The FC4-16IP blade recognizes the IQN (iSCSI Qualified Name) formatted iSCSI initiator node name. For example, an iSCSI target name of “iSCSI tgt” will be presented as follows: iqn.2002-12.com.
About the iSCSI service 14 TERMINOLOGY iSCSI target gateway services requires you to understand some additional terminology. Following are terms that will be used in this document to explain how the iSCSI target gateway is implemented. TABLE 11 iSCSI gateway services terminology Term Definition iSCSI Internet-SCSI. A transport carrier of the SCSI protocol over IP.
14 Setting up iSCSI Target Gateway Services SAVING CHANGES There are several ways to save changes on the switch and apply them to the fabric (applies to the iSCSI Target Gateway Admin module only): • Apply—Click Apply and your changes will be transfered from the Web Tools database to the switches database and distributed throughout the fabric. • Abort—Click Abort to cancel the changes before saving them. The configuration is restored to the last saved data point.
Setting up iSCSI Target Gateway Services 14 LAUNCHING THE ISCSI TARGET GATEWAY ADMIN MODULE When you click iSCSI in the Manage section of the Tasks menu, the iSCSI Administration window opens. This option is available on all Brocade 48000 switches with option 5 configured and without a FC4-16IP blade. NOTE Since the entire fabric is scanned when you open the iSCSI Administration window, larger fabrics may take longer to load.
14 Setting up iSCSI Target Gateway Services 2. Click iSCSI in the Manage section of the Tasks menu. iSCSI Administration window opens. NOTE If the iSCSI Target Gateway Services is disabled, you must click the Enable iSCSI button at the top of the window to enable the services. To launch the iSCSI Setup wizard 1. Select a switch from the Fabric Tree and log in, if necessary. The selected switch appears in Switch View. Make sure that your Admin Domain Context is either AD0 or AD255.
Setting up iSCSI Target Gateway Services 14 When you select one of the GbE ports, you can perform the same tasks listed previously: view and capture statistics related to the port, add or delete IP addresses, add or delete IP routes, view current sessions, and view the iSCSI statistics in brief. FIGURE 78 iSCSI Port tab If an IP address or IP route is already configured on the GbE port, then it will not be editable as any edits will disrupt any iSCSI traffic.
14 Setting up iSCSI Target Gateway Services 3. From the left pane, select the GbE port that will be used. 4. Select the IP Interface subtab and select the item on the tab. 5. Click Edit. 6. Click OK when you receive the Warning dialog box. FIGURE 79 7. Edit IP Interface dialog box Enter the subnet mask. 8. Enter the MTU size or accept the default MTU size and click OK. NOTE To change the IP address, delete the current IP address and re-create it.
Setting up iSCSI Target Gateway Services 14 To edit the IP route 1. Open iSCSI Target Gateway Admin as described on page 175. 2. Select the iSCSI Port tab. 3. From the left pane, select the GbE port that will be used. 4. Select the IP Routes tab. 5. Click Edit. A warning dialog box appears. 6. Click OK. 7. Enter a new value for the metric. 8. Click OK. If you want to change a value other than the metric, you will need to delete this route and create another in its place.
14 Setting up iSCSI Target Gateway Services 4. Enter an IQN. The text field will display the value “iqn” and you need to enter the remaining data. 5. Click Add LUNs. 6. On LUN Addition Dialog, select LUNs to add. You will need to expand each unit until you get to the actual LUN. 7. Click Add LUN(s). This will add the selected LUNs to your virtual target. 8. Click Next and click Finish. To use Easy Create 1. Open iSCSI Target Gateway Admin as described on page 175. 2. Select the Targets tab. 3.
Setting up iSCSI Target Gateway Services 14 To edit an iSCSI Target 1. Open iSCSI Target Gateway Admin as described on page 175. 2. Select the Targets tab. 3. Select the IQN in the left pane of where you want to edit the targets. 4. Click Edit. The VT Configuration wizard opens. 5. Follow the instructions in the wizard to edit an iSCSI virtual target. The wizard is self-explanatory, so the individual steps are not described in this document.
14 Setting up iSCSI Target Gateway Services MANAGING DISCOVERY DOMAINS In this step, you configure discovery domains and discovery domain sets for managing iSCSI device access control. The Discovery Domains pane displays all discovery domains and discovery domain sets and allows you to manage them. When you select DDInfo in the tree in the left pane, you can create a discovery domain.
Setting up iSCSI Target Gateway Services 14 In the wizard: • You can configure the DD. You specify the DD name, and then you can add or remove initiators and targets. You can also add any offline device(s) by entering the IQN name in the IQN name field and clicking Add Offline Devices under the list on the right. The offline device name will be added to the Selected List. • You can also filter out initiator and targets from the tree in the Selection List by using the Filter button.
14 Setting up iSCSI Target Gateway Services 4. Select virtual targets and use the buttons to add or remove them from the DD. 5. Click Next. The opening screen with a list of virtual targets that you added to your DDs is displayed. 6. Click Next. You can verify the virtual targets that you added to your DDs. 7. Click Finish. You can confirm the changes that you made before committing them.
Setting up iSCSI Target Gateway Services 14 The Create DDSet wizard opens. FIGURE 86 Create DDSet wizard 4. Follow the instructions in the wizard to create an iSCSI discovery domain set The wizard is self-explanatory, so the individual steps are not described in this document. To edit a Discovery Domain Set 1. Launch the iSCSI Target Gateway Admin module as described on page 175. 2. Select the Discovery Domains tab. 3. Select a DDSet in the left pane and click Edit. 4.
14 Setting up iSCSI Target Gateway Services The CHAP module pane lists CHAP secrets in a table with the user name and chap secret in encrypted format (*). You can add, delete, or modify CHAP entries. Each CHAP secret has: • User name maximum length of 255 characters • CHAP secret of maximum length of 63 characters FIGURE 87 CHAP tab To create a CHAP user 1. Launch the iSCSI Target Gateway Admin module as described on page 175. 2. Select the CHAP tab. 3. Click Create. 4. Enter the CHAP user name.
Setting up iSCSI Target Gateway Services 14 To bind or remove CHAP users 1. Launch the iSCSI Target Gateway Admin module as described on page 175. 2. Select the CHAP tab. 3. Click Bind/Remove Chap(s). 4. Select a virtual target 5. Enter a new CHAP user, if necessary. 6. Select the CHAP users and click Add or Remove to move them into the appropriate list (unassociated or associated CHAP users). 7. Click Apply.
14 Setting up iSCSI Target Gateway Services The following dialog box is displayed. FIGURE 88 Create an iSCSI FC zone dialog box 3. Click Yes. The Create iSCSI Zone wizard creates a zone called “ISCSI FC ZONE,” which will not be placed into a defined configuration or automatically enabled. 4. Add the ISCSI FC ZONE into a configuration. See “Creating zone configurations” on page 107. To create an iSCSI Fibre Channel zone with an effective zone configuration 1.
Setting up iSCSI Target Gateway Services 14 MANAGING AND TROUBLESHOOTING ACCESSIBILITY The Web Tool iSCSI accessibility feature helps you: • • • • • Verify that both host and target are online. Verify that the effective discovery domain set has both host and target. Allow an initiator or target to access the other. Deny an initiator or target to access the other. Verify that the iSCSI Fibre Channel zone has been set up and, if appropriate, enable the defined configuration.
14 190 Setting up iSCSI Target Gateway Services Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Using the Access Gateway 15 Brocade Access Gateway allows multiple host bus adapters (HBAs) to access the fabric using fewer physical ports. Access Gateway mode transforms the 4012, 4016, 4020, 4024, and 200E into a device management tool that is compatible with different types of fabrics, including Brocade-, Brocade Enterprise OS (EOS), and Cisco-based fabrics. When a switch is in Access Gateway mode, it is logically transparent to the host and the fabric.
15 Displaying the port mapping 5. Click the Enable radio button in the Access Gateway Mode section. 6. Click Apply. 7. Click Yes to restart the switch in Access Gateway mode. To disable Access Gateway mode 1. Select a switch. 2. Click Switch Admin in the Manage section under Tasks. The Switch Administration window opens. 3. Save the switch configuration. 4. On the Switch tab, click the Disable radio button in the Switch Status section. 5.
Configuring port maps 15 Configuring port maps To configure a port map 1. Click a port in the Switch View to open the Port Administration window. 2. Click the FC Ports tab. 3. Click the Edit Configuration button. 4. Click Save. Enabling failover and failback policies The failover and failback policies determine the behavior of the F_Port if the N_Port they are mapped to goes OFFLINE or is disabled. By default, the failover and failback policies are enabled.
15 Converting ports Converting ports To convert an F-port to an N-port 1. Click a port in the Switch View to open the Port Administration window. 2. Select the F-port you want to map. If the F-port is mapped to an N-port, you must unmap it by selecting the mapped N-port and clicking the Edit Configuration button. Select the F-port you want to unmap, click Remove, and then click Save. 3. Click the Edit Configuration button. FIGURE 90 N Port Configuration dialog box 4.
Converting ports 15 1. Click a port in the Switch View to open the Port Administration window. 2. Select the N-port you want to convert to an F-port. If the N-port has F-ports mapped to it, unmap the F-ports by selecting the mapped N-port and clicking the Edit Configuration button. Select the F-port you want to unmap, click Remove, and then click Save. When you have removed all the F-ports, click Save. 3. Click the Edit Configuration button. 4. Select the UnLock N Port radio button. 5. Click Save.
15 196 Converting ports Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Routing Traffic 16 In this chapter This chapter contains the following information: • • • • • “About routing,” next “Displaying FSPF routing” on page 198 “Enabling and disabling dynamic load sharing” on page 199 “Specifying frame order delivery” on page 199 “Configuring link cost” on page 200 About routing For Fabric OS 5.2.0, the supported routing policies are: • Port-based routing Port-based routing assigns a “static route,” in which the path chosen for traffic never changes.
16 Displaying FSPF routing The Routing tab of the Switch Administration window displays routing information. Figure 91 on page 198 shows a Routing tab when the port-based routing policy is enabled. When an exchange-based routing policy is enabled, the Dynamic Load Sharing radio buttons are not displayed. FIGURE 91 Routing tab for port-based routing policy Displaying FSPF routing The Routing tab of the Switch Administration window displays information about routing paths. To view FSPF routing 1.
Enabling and disabling dynamic load sharing 16 Enabling and disabling dynamic load sharing The exchange-based routing policy depends on the Fabric OS dynamic load sharing feature (DLS) for dynamic routing path selection. When this policy is in force, DLS is always enabled and cannot be disabled. When the port-based policy is in force, you can enable DLS to optimize routing. When DLS is enabled, it shares traffic among multiple equivalent paths between switches.
16 Configuring link cost To configure the IOD setting 1. Open the Switch Administration window as described on page 31. 2. Click the Routing tab. 3. Click On in the In-Order Delivery (IOD) area to force in-order frame delivery across topology changes or click Off to restore out-of-order frame delivery across topology changes. 4. Click Apply. Configuring link cost This section describes how to set the cost of an interswitch link (ISL). The cost of a link is a dimensionless positive number.
Chapter Configuring Standard Security Features 17 In this chapter This chapter contains the following information: • • • • Creating and maintaining user-defined accounts . 201 Configuring access control list policies . . . . . . . . . . 209 Configuring SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . 211 Managing RADIUS service . . . . . . . . . . . . . . . . . . . .
17 Creating and maintaining user-defined accounts The User tab of the Switch Administration window (see Figure 92 on page 203) displays account information. You can create and manage accounts depending on your role: TABLE 12 User role and permissions Role Permissions admin Create and manage all predefined and user-defined accounts operator Change your own password and cannot create, modify, or view predefined or user-defined accounts securityadmin Create and manage all security roles.
Creating and maintaining user-defined accounts FIGURE 92 17 User tab To display account information 1. Open the Switch Administration window as described on page 31. 2. Click the User tab. A list of the default and user-defined accounts appears. If you are logged in using the switchadmin role, only your account information is displayed. CREATING AND DELETING USER-DEFINED ACCOUNTS This section describes how to create and delete user-defined accounts. To create a user-defined account 1.
17 Creating and maintaining user-defined accounts The Add User Account dialog box opens. FIGURE 93 Add User Account dialog box 4. Type the user name, which must begin with an alphabetic character. The name can be up to 40 characters long. It is case-sensitive and can contain alphabetic and numeric characters, the dot (.) and the underscore ( _ ). It must be different from all other account names on the logical switch. 5. Select a role from the drop-down menu.
Creating and maintaining user-defined accounts 17 The All option does not mean all of the listed Admin Domains; it means all Admin Domains from AD0 through AD255, regardless of whether they have been created yet. The All radio button is disabled unless the following conditions are met: - The selected role for the target user must be admin or securityadmin. You must be a physical fabric administrator. Selecting All makes the target user account a physical fabric administrator. 11.
17 Creating and maintaining user-defined accounts You can change the description only on user-level accounts. You cannot change the description of the default accounts. You cannot change the description of your own account. 7. Click the Enabled or Disabled radio button to enable or disable the account. You can enable and disable user- and admin-level accounts except for your own account. You cannot enable or disable your own account or the factory account. Only the root account can disable itself.
Creating and maintaining user-defined accounts 17 If you are logged in as admin, you can change the password of your own account, peer admin accounts, switchadmin accounts, and user accounts. You can also change the root or factory account passwords. If you are logged in as a switchadmin, you can only change the password of your own account. 4. Click Change Password. The Set User Account Password dialog box displays.
17 Creating and maintaining user-defined accounts 6. Click OK to close the dialog box. 7. Click Apply to save your changes. FIGURE 94 Configure Password Rules dialog box To expire a password 1. Open the Switch Administration window as described on page 31. 2. Click the User tab. 3. Select the account. 4. Click Expire Password. If the button is unavailable, this means the password is already expired. 5. Click Apply to save your changes. To unlock a password 1.
Configuring access control list policies 17 Configuring access control list policies Support for the Access Control List (ACL) policies is currently defined in the Switch Connection Control (SCC) and Device Connection Control (DCC) policies. These policies are unlike the Secure Fabric OS policies. In Secure Fabric OS where the SCC and DCC policies are always fabric wide policies, these policies located in the Admin module are switch-based. ACL and Secure Fabric OS are mutually exclusive.
17 Configuring access control list policies 5. Select the policy type you want to edit. 6. Click Next and click Create. 7. DCC Option: Select a switch or highlight multiple switches to add to an DCC policy by clicking Add or Add All. To add an offline switch, click Add other Switch and enter the WWN. 8. SCC Option: Select the ports to add to an DCC policy by clicking Add or Add All. 9. Click Finish to confirm the changes to the switch. You must activate the policy in order to implement it.
Configuring SNMP 17 Once a SCC/DCC policy has been created or modified you can distribute it to the rest of the fabric: To deactivate an SCC or DCC policy, you must activate a new or empty policy. To distribute an SCC or DCC Policy 1. Open the Switch Administration window as described on page 31. 2. Select the Distribution tab 3.
17 Configuring SNMP To set trap levels 1. Open the Switch Administration window as described on page 31. 2. Click the SNMP tab. FIGURE 96 SNMP tab 3. Select a trap level for a recipient from the corresponding Trap Level drop-down menu in the SNMPv1 and SNMPv3 sections. The level you select identifies the minimum event level that will prompt a trap. 4. Click Apply.
Managing RADIUS service 17 3. Type a contact name, description, and location in the SNMP Information section. 4. Optional: Select the Enable Authentication Trap check box to allow authentication traps to be sent to the reception IP address. 5. Click Apply. To set SNMPv1 configuration parameters 1. Open the Switch Administration window as described on page 31. 2. Click the SNMP tab (see Figure 96). 3. Double-click a community string in the SNMPv1 section and type a new community string. 4.
17 Managing RADIUS service You should set up RADIUS service through a secure connection such as SSH. The three choices in the drop-down menu when RADIUS is selected as the primary service are: • Switch Database when RADIUS Authentication Fails—When selected, the switch user login database will be checked whenever RADIUS authentication fails. • Switch Database When RADIUS Times Out—Switch user login database is checked only if the physical connection to the RADIUS server fails.
Managing RADIUS service 17 Use the AAA Service tab of the Switch Administration window to manage the RADIUS service (see Figure 98). FIGURE 98 AAA Service tab ENABLING AND DISABLING RADIUS SERVICE At least one RADIUS server must be configured before you can enable RADIUS service. To enable or disable RADIUS service 1. Open the Switch Administration window as described on page 31. 2. Click the AAA Service tab. 3. To enable RADIUS service, select RADIUS from the Primary AAA Service drop-down menu.
17 Managing RADIUS service CONFIGURING THE RADIUS SERVICE The configuration is chassis-based, so it applies to all logical switches (domains) on the switch and replicates itself on a standby CP, if one is present. It is saved in a configuration upload, and so it can be applied to other switches in a configuration download. You should configure at least two RADIUS servers so that if one fails, the other will assume service. You can configure the RADIUS service even if it is disabled.
Managing RADIUS service 17 MODIFYING THE RADIUS SERVER ORDER The RADIUS servers are contacted in the order they are listed, starting from the top of the list and moving to the bottom. To modify the order in which the RADIUS servers are contacted 1. Open the Switch Administration window as described on page 31. 2. Click the AAA Service tab. 3. Click a RADIUS server from the RADIUS Configuration list. 4. Click the up and down arrows to rearrange the order of the RADIUS servers. 5. Click Apply.
17 218 Managing RADIUS service Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter Administering FICON CUP Fabrics 18 In this chapter This chapter contains the following sections: • • • • • • Enabling port-based routing on the Brocade 4100, 5000, and 48000 220 Enabling or disabling FMS mode . . . . . . . . . . . . . . . 221 Configuring FMS parameters . . . . . . . . . . . . . . . . . . 222 Displaying code page information . . . . . . . . . . . . . . 223 Displaying the control device state . . . . . . . . . . . . . 223 Configuring CUP port connectivity . . . . . . . . . . . .
18 Enabling port-based routing on the Brocade 4100, 5000, and 48000 Enabling port-based routing on the Brocade 4100, 5000, and 48000 Port-based path selection is a routing policy in which paths are chosen based on ingress port and destination only. This also includes user-configured paths. All Brocade 4100, 5000, and 48000 switches with FICON devices attached must have port-based routing policy enabled. Port-based routing is a per-switch routing policy.
Enabling or disabling FMS mode 18 Enabling or disabling FMS mode FICON Management Server (FMS) is used to support switch management using CUP. To be able to use the CUP functionality, all switches in the fabric must have FICON Management Server mode (FMS mode) enabled. FMS mode is a per-switch setting. After FMS mode is enabled, you can activate a CUP license without rebooting the director. You can use Web Tools to install a CUP license.
18 Configuring FMS parameters Configuring FMS parameters FMS parameters control the behavior of the switch with respect to CUP itself, as well as the behavior of other management interfaces (director console, Alternate Managers). You can configure FMS parameters for a switch only after FMS mode is enabled on the switch. All FMS parameter settings are persistent across switch power cycles. There are six FMS parameters, as described in the table below.
Displaying code page information 18 To configure FMS mode parameters 1. Click a FICON-enabled switch from the Fabric Tree. 2. Open the Switch Administration window as described on page 31. 3. Click the FICON CUP tab. The FICON CUP tabbed page displays, with the FICON Management Server subtabbed page in front (see Figure 99 on page 220). All attributes on this tab are read-only until FMS mode is enabled. 4. To enable or disable an FMS mode parameter, click the check box next to the parameter.
18 Configuring CUP port connectivity You can manually reset allegiance to bring the control device back to the neutral state by clicking Reset Allegiance in the FICON CUP Busy Error display (see Figure 100).
Configuring CUP port connectivity 18 When creating a new configuration or editing an existing configuration, keep in mind that Web Tools port name input is restricted to printable ASCII characters. Therefore, when Web Tools displays a port name, if there are characters beyond printable ASCII characters (which would have been created by the Host Program), those characters are displayed as dots (.). When initially installed, a switch allows any port to dynamically communicate with any other port.
18 Configuring CUP port connectivity 4. Click the CUP Port Connectivity subtab (see Figure 101). FIGURE 101 Configuring CUP port connectivity CREATING OR EDITING CUP PORT CONNECTIVITY CONFIGURATIONS Use the following procedure to create a new CUP port connectivity configuration or to edit an existing configuration. To create or edit CUP port connectivity configurations 1. Display the CUP port connectivity configuration list, as described on page 225. 2.
Configuring CUP port connectivity 18 3. Optional: Select the check box corresponding to a port you want to block on the Block column. Repeat this step for all ports you want to block. Select the Block All check box to block all ports. 4. Optional: Select the check box corresponding to a port you want to prohibit on the Prohibit column. Repeat this step for all ports you want to prohibit. Select the Prohibit All check box to prohibit all ports.
18 Configuring CUP port connectivity ACTIVATING A CUP PORT CONNECTIVITY CONFIGURATION When you activate a saved CUP port connectivity configuration on the switch, the preceding configuration (currently activated) is overwritten. To activate a saved CUP port connectivity configuration 1. Open the CUP port connectivity configuration list, as described on page 225. 2. Click the saved configuration from the list. 3. Click Activate.
Configuring CUP port connectivity 18 To delete a saved CUP port connectivity configuration 1. Display the CUP port connectivity configuration list, as described on page 225. 2. Click the saved configuration from the list. 3. Click Delete. The Delete CUP Port Connectivity Configuration confirmation dialog box displays. 4. Click Yes to delete the selected configuration; click No to cancel the deletion.
18 230 Configuring CUP port connectivity Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Chapter 19 Limitations In this chapter This section provides the following information: • General Web Tools limitations . . . . . . . . . . . . . . . . . 231 • Platform-specific limitations. . . . . . . . . . . . . . . . . . . 235 General Web Tools limitations Table 14 lists general Web Tools limitations that apply to all browsers and switch platforms.
19 General Web Tools limitations TABLE 14 232 Web Tools limitations (Continued) Area Details Firmware download There are multiple phases to firmware download and activation. When Web Tools reports that firmware download has completed successfully, this indicates that a basic sanity check, package retrieval, package unloading, and verification was successful. Web Tools forces a full package install. A reboot is required to activate the newly downloaded firmware.
General Web Tools limitations TABLE 14 19 Web Tools limitations (Continued) Area Details Loss of Connection Occasionally, you might see the following message when you try to retrieve data from the switch or send a request to the switch: Switch Status Checking The switch is not currently accessible. The dialog title may vary, because it indicates which module is having the problem. This is caused by the loss of HTTP connection with the switch, due to a variety of possible problems.
19 General Web Tools limitations TABLE 14 234 Web Tools limitations (Continued) Area Details Refresh option in browsers Web Tools must be restarted when the Ethernet IP address is changed using the NetworkConfig View command. Web Tools appears to hang if it is not restarted after this operation is executed. Workaround: Restart the browser.
Platform-specific limitations 19 Platform-specific limitations Table 15 lists Web Tools limitations that are specific to the Brocade 24000 director when it is configured to have two domains. TABLE 15 Platform-specific limitations Area Details Switch View Neither CP is updated in the Switch View when switch 0 is being rebooted. The CP data displayed on this Switch View is dependent on switch 0, and that data is not available when switch 0 is rebooting.
19 236 Platform-specific limitations Web Tools Administrator’s Guide Publication Number: 53-1000435-01
Index Numerics 2 domain/4 domain fabric licenses, 8 A About Discovery Domains (DD), 182 Access Control List. See ACL access control. See RBAC. Access Gateway mode configuration, 191 enable, 191 enable, Web Tools, 191, 192 accessing Switch Administration window, 138 switch event report, 50 telnet window, 32 activating CUP port connectivity configuration, 228 licenses, 44 Ports on Demand, 73 AD. See Admin Domains.
Index CHAP authentication, 173 secret, editing, 186 user, creating, 186 chassis name, changing, 38 class F traffic, 40 clearing the zoning database, 116 closing Admin Domain window, 88 sessions, 14 Zone Administration window, 101 code page, displaying, 223 configuration Access Gateway mode, 191 upload, 191 configuration file Admin Domain considerations, 58 backing up, 58, 59 downloading, 59 restoring, 59 saving, 57 configuring arbitrated loop parameters, 42 backbone fabric ID, 144 CUP port connectivity, 22
Index defining device aliases, 118 deleting Admin Domains, 93 CUP port connectivity configuration, 228 user accounts, 205 WWN from zoning database, 115 zone aliases, 103 zone configurations, 109 zones, 106 device aliases, defining, 118 device probing, 40 devices only view, 101 devices only zoning, 101 direct port membership in Admin Domains, 64 disabling automatic trace uploads, 149 blades, 34 dynamic load sharing, 199 Fabric Watch threshold alarms, 161 FICON Management Server mode, 221 ports, 71 RADIUS se
Index fabric topology report, 53 Fabric Tree, 19 fabric view, 101 fabric view zoning, 101 Fabric Watch about, 157 alarms, 161 thresholds, 159 failover, initiating, 47 FAN frame notification parameters, configuring, 42 fan status, 150, 151 fast boot, 39 FC ports, configuring, 67 FC Routing module, 138 FC targets, searching for iSCSI Target Gateway, 181 FC-FC routing about, 135 setting up, 137 supported switches, 135 FCIP ports, configuring, 69 FCR router cost, 142 FCS policies configured from CLI, 26 featur
Index discovery domains (DD), 182 discovery domains (DD), about, 182 discovery domains, creating, 183 discovery domains, editing, 183 editing an iSCSI target, 181 enabling, 176 FC LUN, 173 FC virtual initiator, 173 GbE, 173 IQN, 173 iSCSI fibre channel zone members, editing, 187 iSCSI fibre channel zone, creating, 187 iSCSI fibre channel zone, creating with an effective zone configuration, 188 iSCSI fibre channel zone, creating with no effective zone configuration, 187 iSCSI initiator, 173 iSCSI initiators
Index ports, enabling, 72 O opening in secure mode, 25 Performance Monitoring window, 126 Switch Administration window, 31 P passwords changing, 206 expiring, 208 rules, 207 unlocking, 208 PDU, 173 performance graphs adding to a canvas, 133 modifying, 134 printing, 133 types of, 122 Performance Monitoring window, 126 per-frame routing priority, 40 persistently disable a port, 71 physically locating switch using beaconing, 55 PID format, 40 platforms, supported, 2 platform-specific limitations, 235 pollin
Index restoring configuration file, 59 right-click menu, 23 RLS probing enabling and disabling, 43 Role-Based Access Control. See RBAC router cost path, 142 routes, configuring, 197 S saving performance graphs, 132 zoning changes, 87, 100 SCC/DCC policy activate, 210 create, 209 deactivate, 211 delete, 210 distribute, 211 edit, 210 SCSI command graph, 131 SCSI vs.
Index switch report, 38 switch status, 152 switches in the fabric, 25 trunk groups, 78 Viewing and configuring FCR router port costs, 142 viewing FCR router cost, 142 virtual channel settings, configuring, 42 virtual targets, creating for iSCSI Target Gateway, 179, 180 W Web Tools Access Gateway mode, enable, 191 Web Tools, launching, 8 WWN adding to zones, 114 removing from zones, 115 replacing in zones, 115 Z Zone Admin module saving changes, 87 Zone Administration window about, 97 closing, 101 refresh
