Brocade Fabric OS Command Reference - Supporting Fabric OS v7.0.1 (53-1002447-01, March 2012)

ManualsBrandsHP ManualsStorageBrocade 8/24c SAN Switch for BladeSystem c-Class

53-1002447-01

15 December 2011

Fabric OS

Command Reference

Supporting Fabric OS v7.0.1

Summary of content (1132 pages)

PAGE 1
53-1002447-01 15 December 2011 Fabric OS Command Reference Supporting Fabric OS v7.0.
PAGE 2
Copyright © 1999- 2011 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, NetIron, SAN Health, ServerIron, and TurboIron are registered trademarks, and AnyIO, Brocade Assurance, Brocade NET Health, Brocade One, CloudPlex, MLX, VCS, VDX, and When the Mission Is Critical, the Network Is Brocade are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.
PAGE 3
Document History Document title Publication number Fabric OS Reference v2.0 53-0001487-03 September 1999 Fabric OS Reference v2.2 53-0001558-02 May 2000 Fabric OS Reference v2.3 53-0000067-02 December 2000 Fabric OS Reference v3.0 53-0000127-03 July 2001 Fabric OS Reference v2.6 53-0000194-02 December 2001 Fabric OS Reference v3.0 / v4.0 53-0000182-02 March 2002 Fabric OS Reference v4.0.2 53-0000182-03 September 2002 Fabric OS Reference v3.1.
PAGE 4
Document title Publication number Summary of changes Fabric OS Command Reference 53-1000599-03 Corrections and updates to 31 July 2008 commands. Removed “Brocade Optional Features” from Preface. Added trademark note to Preface. Cosmetic edits throughout. Fabric OS Command Reference 53-1001115-01 Added 3 new commands to support Encryption. Modified 1 command. Updated Preface and RBAC/AD table. August 2008 Fabric OS Command Reference 53-1001186-01 Added 14 new commands to support Logical Fabrics.
PAGE 5
Document title Publication number Summary of changes Fabric OS Command Reference 53-1002147-01 April 2011 Added 20 new commands. Modified 102 commands to support Fabric OS v7.0.0 features. Removed 40 commands. 16 commands have deprecated command options. Miscellaneous edits to ~250 additional commands. Updated Preface, surrounding chapters, and permission tables. Fabric OS Command Reference 53-1002447-01 Added 2 new commands. Modified 19 commands to support Fabric OS v7.0.1 features.
PAGE 6
vi Fabric OS Command Reference 53-1002447-01
PAGE 7
Contents About This Document In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix How this document is organized. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix What is new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi New commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 8
Contents aliRemove. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 aliShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 appLoginHistory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 aptPolicy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 auditCfg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 auditDump . . . . .
PAGE 9
Contents cliHistory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122 cmsh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123 configDefault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125 configDownload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127 configList . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133 configRemove . . . .
PAGE 10
Contents fanEnable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261 fanShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262 faPwwn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263 fastBoot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269 fcipChipTest . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271 fcipHelp . . . . . . .
PAGE 11
Contents ficonShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 346 fipsCfg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354 firmwareCommit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 358 firmwareDownload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359 firmwareDownloadStatus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364 firmwareKeyShow . . . . . . . . . . . .
PAGE 12
Contents iodReset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 438 iodSet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439 iodShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 440 ipAddrSet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 441 ipAddrShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 446 ipFilter . . . . . .
PAGE 13
Contents nsAllShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 536 nsCamShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 537 nsShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 540 nsZoneMember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 544 passwd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 547 passwdCfg . . . . . . . . . . .
PAGE 14
Contents portCfgGeMediaType . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 658 portCfgGport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 660 portCfgISLMode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 661 portCfgLongDistance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 663 portCfgLossTov . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 666 portCfgLport . . . . . . . . . . . . . . . . .
PAGE 15
Contents portLoopbackTest . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 754 portMirror . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 758 portName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 762 portPerfShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 764 portRouteShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767 portShow . . . . . . . . . . . . .
PAGE 16
Contents secStatsShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 909 sensorShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 911 serDesTuneMode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 912 setContext . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 914 setDbg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 915 setVerbose . . . . . . . . . . . .
PAGE 17
Contents syslogdIpShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1006 sysMonitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1007 sysShutDown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1014 tempShow. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1016 thConfig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1017 thMonitor . . . . . . . . . . . . . .
PAGE 18
Contents Appendix A Command Availability In this appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1089 Command validation checks . . . . . . . . . . . . . . . . . . . . . . . . . . . 1089 Encryption commands and permissions . . . . . . . . . . . . . . . . . . . 1090 General Fabric OS commands and permissions . . . . . . . . . . . . .
PAGE 19
About This Document In this chapter • • • • • • • • • How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix What is new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi CLI usage conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxii Document conventions .
PAGE 20
TABLE 1 Supported hardware for Fabric OS v7.
PAGE 21
What is new in this document The Fabric OS Command Reference v7.0.1Command supports the current Fabric OS release and the new hardware platforms. New commands The following commands and associated man pages have been added since the publication of the Fabric OS v7.0.0 release of this manual: • appLoginHistory - Displays login history for external applications. The command was introduced in Fabric OS v6.4.0, but did not have a help page. • rtLogTrace - Enables and displays real-time trace logs.
PAGE 22
• roleConfig - Roles are created with default classes (“localuserenvironment” and “nocheck”) and default permissions (OM). A configuration download restores these defaults. • supportSave - If you use anonymous FTP to run supportSave on a chassis with multiple AP blades, configure the FTP Windows server to allow unlimited anonymous users. • turboRamTest - The chassisDisable and chassisEnable commands must be used with this diagnostics.
PAGE 23
For readability, command names in the command titles and in the narrative portions of this guide are presented in mixed letter case, for example, switchShow. In examples, command letter case is all lowercase. Command syntax conventions Command syntax in this document follows these conventions: command Commands are printed in bold. --option, option Command options are printed in bold. -argument, arg Arguments are printed in bold. [] Optional element. variable Variables are printed in italics.
PAGE 24
Key terms For definitions specific to Brocade and Fibre Channel, see the technical glossaries on the Brocade website. See “Brocade resources” on page xxiv for instructions on accessing the information. For definitions of SAN-specific terms, visit the Storage Networking Industry Association online dictionary at: http://www.snia.org/education/dictionary Notice to the reader This document may contain references to the trademarks of the following corporations.
PAGE 25
Release notes are available on the Brocade website. Other industry resources For additional resource information, visit the Technical Committee T11 website. This website provides interface standards for high-performance and mass storage applications for Fibre Channel, storage management, and other applications: http://www.t11.org For information about the Fibre Channel industry, visit the Fibre Channel Industry Association website: http://www.fibrechannel.
PAGE 26
Document feedback Quality is our first concern at Brocade, and we have made every effort to ensure the accuracy and completeness of this document. However, if you find an error or an omission, or you think that a topic needs further development, we want to hear from you. Forward your feedback to: documentation@brocade.com Provide the title and version number and as much detail as possible about your issue, including the topic heading and page number and your suggestions for improvement.
PAGE 27
Chapter Using Fabric OS Commands 1 In this chapter • • • • Understanding Role-Based Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Understanding Virtual Fabric restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Understanding Admin Domain restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Using the command line interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 28
1 Understanding Virtual Fabric restrictions NOTE Virtual Fabrics and Admin Domains are mutually exclusive and are not supported at the same time on a switch. To use Admin Domains, you must first disable Virtual Fabrics; to use Virtual Fabrics, you must first delete all Admin Domains. Use ad --clear -f to remove all Admin Domains. Refer to the Fabric OS Administrator’s Guide for more information.
PAGE 29
Understanding Admin Domain restrictions 1 Understanding Admin Domain restrictions A subset of Fabric OS commands is subject to Admin Domain (AD) restrictions that may be in place. In order to execute an AD-restricted command on a switch or device, the switch or device must be part of a given Admin Domain, and the user must be logged in to that Admin Domain. Six Admin Domain types are supported, as defined in Table 5. TABLE 5 AD types AD Ttpe Definition Allowed Allowed to execute in all ADs.
PAGE 30
1 4 Using the command line interface Fabric OS Command Reference 53-1002447-01
PAGE 31
Chapter Fabric OS Commands 2 aaaConfig Manages RADIUS and LDAP configuration information.
PAGE 32
22 aaaConfig The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: server Specifies an IP address or a server name in dot-decimal notation. IPv6 addresses are supported. If a name is used, a DNS entry must be correctly configured for the server.
PAGE 33
aaaConfig 2 Valid protocols are one of the following: pap Password Authentication Protocol chap Challenge-Handshake Authentication Protocol peap-mschapv2 Protected Extensible Authentication Protocol (requires Fabric OS v5.3.0 or later) --remove server Removes the specified server from the configuration. The server must match one of the IP addresses or the names shown in the current configuration.
PAGE 34
22 aaaConfig "radius;local" Enables the current RADIUS configuration as the primary AAA service and the switch-local database as the secondary AAA service. If "radius" and "local" are specified, and if the RADIUS servers are reachable and the user credentials are correct, the user authentication succeeds. If the user provides credentials from the switch database, the RADIUS authentication fails but login succeeds through the switch database.
PAGE 35
aaaConfig 2 To replace the AAA service with backup option: switch:admin> aaaconfig --authspec "ldap;local" -backup To change the authentication mechanism with the no logout provision: switch:admin> aaaconfig --authspec radius -nologout switch:admin> aaaconfig --show RADIUS CONFIGURATIONS ===================== Position : Server : Port : Secret : Timeout(s) : Auth-Protocol: 1 172.20.1.68 1812 testing123 3 PEAP-MSCHAPv2 LDAP CONFIGURATIONS =================== LDAP configuration does not exist.
PAGE 36
22 ad ad Manages Admin Domain operations.
PAGE 37
ad 2 Before creating Admin Domains, the default zone mode should be set to "No Access". To set the default zone mode to "No Access" execute the following command sequence: switch:admin> ad --select AD0 switch:admin> defzone --noaccess switch:admin> cfgsave Refer to defZone help for more information. All switches, switch ports and devices in the fabric that are not specified in any other Admin Domain are treated as implicit members of AD0. Members added to AD0 are called explicit members.
PAGE 38
22 ad --create arguments Creates a new Admin Domain with optionally specified device or switch members. A newly created Admin Domain is in an activated state. It initially contains no zone database. The newly created Admin Domain remains in the transaction buffer until you issue ad --apply or ad --save. AD0 always exists. Use ad --add to add explicit members to AD0. --deactivate arg Deactivates an Admin Domain. This operation fails if an effective zone configuration exists under the Admin Domain.
PAGE 39
ad 2 --show arguments Displays the membership information of the specified Admin Domain or all Admin Domains. When executed in an AD255 context and an Admin Domain name is not specified, all information about all existing Admin Domains is displayed. When executed in an AD0-AD254 context, the command, by default, displays the members of the current Admin Domain's effective configuration, and therefore you cannot specify an ad_id or mode.
PAGE 40
22 ad -d "dev_list" Specifies the list of devices in an Admin Domain, in quotation marks. Separate each entry in the device list with a semicolon (;). Valid formats include the following: D,PI Uses existing zone D,PI member types. Benefits include the following: • • • Grants port control and zoning on the switch port and the devices attached to that port. PI can be specified as a range; for example, D,[0 to 34]. The port index range is expanded and stored internally.
PAGE 41
ad 2 1 Displays the Admin Domain configuration stored in persistent memory (defined configuration). 2 Displays the currently enforced Admin Domain configuration currently enforced (effective configuration). EXAMPLES To enable AD5: switch:admin> ad --activate 5 You are about to activate a new admin domain.
PAGE 42
22 ad To deactivate Admin Domain 5: switch:admin> ad --deactivate 5 You are about to deactivate an AD. This operation will fail if an effective zone \ configuration exists in the AD Do you want to deactivate '5' admin domain \ (yes, y, no, n): [no] y To delete AD13: switch:admin> ad --delete 13 You are about to delete an AD.
PAGE 43
ad 2 To display all ADs: switch:admin> ad --show Current AD: 255 : AD255 Transaction buffer configuration: --------------------------------no configuration Defined configuration: ---------------------AD: 1 : AD1 Device WWN members: Switch port members: Switch WWN members: Active 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12; 1,13; 1,14; 1,15; 10:00:00:60:69:00:02:53; Effective configuration: -----------------------AD: 1 : AD1 De
PAGE 44
22 ad To display the Admin Domain effective configuration information: switch:admin> ad --show -m 2 Current AD: 255 : AD255 Effective configuration: -----------------------AD: 1 : AD1 Device WWN members: Switch port members: Switch WWN members: Active 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12; 1,13; 1,14; 1,15; 10:00:00:60:69:00:02:53; To display the configuration information in the transaction buffer: switch:admin> ad --valid
PAGE 45
ad 2 1,337; ---------------------------* - Member does not exist + - Member is AD Unaware To abort the Admin Domain management transaction buffer: switch:admin> ad --transabort You are about to abort the outstanding AD transaction.
PAGE 46
22 ag ag Enables Access Gateway (AG) and manages AG-specific operations. SYNOPSIS ag --help ag --show ag --modeshow | --modeenable | --modedisable ag [--policyenable | --policydisable] policy ag --policyshow ag --mapshow [N_Port] ag [--mapset | --mapadd | --mapdel] N_Port [F_Port1; F_Port2;...] ag [--staticadd | --staticdel ] N_Port [F_Port1; F_Port2;...] ag --pgshow [pgid] ag --pgcreate pgid "N_Port1 [;N_Port2;...]" [-n pgname] [-m "lb; mfnm"] ag [--pgadd | --pgdel] pgid "N_Port1 [; N_Port2;...
PAGE 47
ag 2 ag --printalpamap F_Port ag --deletepwwnfromdb PWWN ag --clearalpamap F_Port ag --addwwnmapping N_Port "WWN [;WWN2;...]" | --all ag --delwwnmapping N_Port "WWN [;WWN2;...]" | --all ag --addwwnpgmapping Port_Group "WWN [;WWN2;...]" | --all ag --delwwnpgmapping Port_Group "WWN [;WWN2;...]" | --all ag --addwwnfailovermapping N_Port "WWN [;WWN2;...]" | --all ag --delwwnfailovermapping N_Port "WWN [;WWN2;...]" | --all ag --wwnmappingenable "WWN [;WWN2;...]" | --all ag --wwnmappingdisable "WWN [;WWN2;...
PAGE 48
22 ag AG configuration changes are saved persistently as configuration keys. Use the portCfgNPort command to set a port as N_Port. This command supports multiple configurations for mapping device logins to N_Ports for the purposes of load balancing and redistribution in the event of a fabric change. If multiple mappings are configured, the system considers the available mappings in a fixed order of priority to determine which of the available N_Ports should be assigned to the login request.
PAGE 49
ag • • 2 Advanced Device Security (ADS) policy. This policy restricts access to the fabric at the AG level to a set of authorized devices. Unauthorized access is rejected and the system logs a RASLOG message. You can configure the list of allowed devices for each F_Port by specifying their Port WWN. Refer to the ag --ads* commands for information on managing advanced device security. ADS policy is disabled by default, which means that all devices can connect to the switch.
PAGE 50
22 ag --mapshow [N_Port | device_WWN] Displays the F_Ports that are configured and currently mapped to a given "primary" N_Port. Optionally specify an N_Port to display the F_Ports that are mapped to the specified N_Port only, or specify a device WWN to display the N_Port to which the device WWN is mapped. Failover and failback policies are displayed as enabled (1) or disabled (0). --mapset N_Port [F_Port1;F_Port2;...
PAGE 51
ag 2 --pgremove pgid Deletes the specified port group. The N_Ports in the port group that was deleted are moved to the default port group, which is pgid 0. --pgmapadd pgid "F_Port1[;F_Port2;...]" Maps the specified F_Ports to the PG identified by the pgid. Upon execution, the system identifies the least loaded N_Port in the port group and maps the F_Ports to that N_Port. The port list must be enclosed in double quotation marks. Ports must be separated by semicolons.
PAGE 52
22 ag --failoverenable [N_Port] | -pg pgid Enables the failover policy for a given N_Port or for all N_Ports in the given port group. When failover policy is enabled for a given N_Port, F_Ports behave as follows: • • If only primary F_Port to N_Port mapping is in place, all currently mapped F_Ports fail over to another available N_Port in the event the original N_Port becomes disabled. If multiple N_Ports are available for failover, F_Ports are evenly balanced across all available N_Ports.
PAGE 53
ag 2 --adsset "F_Port [;F_Port2;...]" "WWN [;WWN2;...]" Sets the list of devices that are allowed to login to a specified set of F_Ports. Devices are specified by their world wide names. Lists must be enclosed in double quotation marks. List members must be separated by semicolons. The maximum number of entries in the allowed device list is twice the per port maximum login count. Replace the WWN list with an asterisk (*) to indicate all access on the specified F_Port list.
PAGE 54
22 ag --addwwnmapping N_Port "WWN [;WWN2;...]" | --all Maps one or more device WWNs to a preferred N_Port. All traffic form the specified devices is forced through the specified N_Port, regardless of which F_Port the device logs into. In the event the designated N_Port should become unavailable, an alternate port can serve as a preferred failover port.
PAGE 55
ag 2 --wwnmapshow Displays all device WWN mappings. For each device WWN, the command displays the N_Port number to which it is mapped, the secondary (failover) N_Port, and the port group if applicable. The "Current" field shows the port the device is currently using. If the device is not logged in, the field displays "none." If the device is logged in to a port other than the one it is mapped to, the field displays that port.
PAGE 56
22 ag 2 0x6d0c00 20:0c:00:05:1e:37:11:aa 1 0 10.32.74.109 10;11; 3 0x6d0d00 20:0d:00:05:1e:37:11:aa 0 1 10.32.74.
PAGE 57
ag 2 To disable auto port configuration policy when the switch is disabled: switch:admin> ag --policydisable auto Default factory settings will be restored. Default mappings will come into effect. Please save the current configuration using configupload.
PAGE 58
22 ag To add F_Port 5 to N_Port 2 (observe that N_Port 2 already has mapped F_Ports): switch:admin> ag --mapadd 2 "5" To display the new mappings: switch:admin> ag --mapshow N_Port Configured Static Current Failover Failback PG_ID PG_Name _F_Ports _F_Ports F_Ports ----------------------------------------------------------------0 4;6 None 4;6 1 0 2 SecondFabric 1 7;8;9 None 7;8;9 0 1 0 pg0 2 5;10;11 None 5;10;11 1 0 2 SecondFabric 3 12;13 None 12;13 0 1 0 pg0 ----------------------------------------------
PAGE 59
ag 2 _F_Ports _F_Ports -------------------------------------------------------------0 None None 1 1 N/A N/A 17 2 2 0 0 N/A N/A -------------------------------------------------------------Static N-Port to F-Port Mapping N-Port F-Port -------------------------------------------------------------17 1 -------------------------------------------------------------- AG failover policy commands To display failover policy settings for all N_Ports: switch:admin> ag --failovershow N_Port failover_bit -------------
PAGE 60
22 ag To set and display failback policy settings on a single port: switch:admin> ag --failbackenable 0 Failback policy cannot be enabled since failover policy is disabled for port 0 switch:admin> ag --failbackenable 2 Failback policy is enabled for port 2 switch:admin> ag --failbackenable 3 Failback on N_Port 3 is not supported switch:admin> ag --failbackenable 2 Failback on N_Port 2 is supported Port Group commands To display Port Group information: switch:admin> ag --pgshow PG_ID PG_Name PG_Mode N_Por
PAGE 61
ag 2 To remove the port group with pgid 2: switch:admin> ag --pgremove 2 Port Group 2 has been removed successfully switch:admin> ag --pgshow PG_ID PG_Name PG_Mode N_Ports F_Ports ----------------------------------------------0 pg0 lb,mfnm 0;2 4;5;6 3 FirstFabric lb 1;3 10;11 ----------------------------------------------- To enable managed fabric name monitoring in port group 3: switch:admin> ag --pgsetmodes 3 "mfnm" Managed Fabric Name Monitoring mode has been \ enabled for Port Group 3 switch:admin> a
PAGE 62
22 ag To delete secondary port mapping for F_Ports 7, 8 and 9: switch:admin> ag --prefdel "7;8;9" 3 Preferred N_Port is deleted successfully \ for the F_Port[s] To set secondary port mapping for F_Ports 7, 8 and 9: switch:admin> ag --prefset "7;8;9" 3 Preferred N_Port is set successfully \ for the F_Port[s ADS Policy commands To set the list of allowed devices for Ports 11 and 12 to 'no access': switch:admin> ag --adsset "11;12" "" WWN list set successfully as the Allow Lists of \ the F_Port[s] To set
PAGE 63
ag 2 To enable persistent ALPA in stringent mode: switch:admin> ag --persistentalpaenable 1 -s Persistent ALPA mode is enabled To disable persistent ALPA mode: switch:admin> ag --persistentalpaenable 0 Persistent ALPA mode is enabled To display the ALPA database entries for F_Port 5: switch:admin> ag --printalpamap 5 Hash table for Port 5 data PWWN ALPA ============================================ 20:12:00:05:1e:85:92:88 1 20:07:00:05:1e:01:0b:4a 3 To attempt to remove a device entry from the database
PAGE 64
22 ag To create a WWN to port group mapping for all currently mapped devices (this command does not affect devices not already mapped or connecting later).
PAGE 65
agAutoMapBalance 2 agAutoMapBalance Controls automatic remapping of F_Ports in AG mode. SYNOPSIS agautomapbalance --enable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --disable [-fport | -nport] [-pg Port_Group_Number | -all] agautomapbalance --force agautomapbalance --show agautomapbalance --help DESCRIPTION Use this command to control the automatic rebalancing of F_Ports for login distribution in the event that an F_Port goes offline or an N_Port comes online.
PAGE 66
22 agAutoMapBalance -nport Enables automatic login redistribution in the event that one or more N_Ports come online. When automatic login redistribution is enabled, the F_Ports mapped to the current N_Ports are rebalanced among the N_Ports. --disable Disables automatic login redistribution upon removal or addition of a specified port type. -fport Disables automatic login redistribution in the event that one or more F_Ports go offline.
PAGE 67
agAutoMapBalance 2 To disable automatic login redistribution on F_Port offline events: switch:admin> agautomapbalance --disable -fport To enable automatic login redistribution on F_Ports and N_Ports on port group 1 in the Access Gateway: switch:admin> agautomapbalance --enable -fport pg 1 To disable automatic login redistribution on F_Ports and N_Ports on all port groups in the Access Gateway: switch:admin> agautomapbalance --disable -all SEE ALSO ag, agShow Fabric OS Command Reference 53-1001764-01
PAGE 68
22 agShow agShow Displays the Access Gateway information registered with the fabric. SYNOPSIS agshow agshow --name ag_name agshow --local DESCRIPTION This command displays the details of the F_Ports and the configured N_Ports in the Access Gateway attached to the fabric. The command output displays the following information. Name The name of the Access Gateway. NodeName The World Wide Name of the Access Gateway node. Ports The number of ports in the Access Gateway.
PAGE 69
agShow OPERANDS 2 This command has the following optional operands: --name ag_name Displays information regarding a specific Access Gateway that is registered with this fabric. --local Display information regarding all Access Gateways that are locally registered to this switch.
PAGE 70
22 agShow Local/Remote Name ---------------------------------local L5D_B10_4016_1 local L5D_B14_4024_1 local L5D_B13_200_AG SEE ALSO 44 portCfgNPIVPort Fabric OS Command Reference 53-1001764-01
PAGE 71
aliAdd 2 aliAdd Adds a member to a zone alias. SYNOPSIS DESCRIPTION aliadd "aliName","member[; member...]" Use this command to add one or more members to an existing zone alias. The alias member list cannot contain another zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the zone configuration to nonvolatile memory with the cfgSave command.
PAGE 72
22 aliCreate aliCreate Creates a zone alias. SYNOPSIS DESCRIPTION alicreate "aliName","member[; member...]" Use this command to create a new zone alias. The zone alias member list must have at least one member (empty lists are not allowed). The alias member list cannot contain another zone alias. Refer to the zoneCreate command for more information on name and member specifications. This command changes the defined configuration.
PAGE 73
aliDelete 2 aliDelete Deletes a zone alias. SYNOPSIS DESCRIPTION alidelete "aliName" Use this command to delete a zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the zone configuration to nonvolatile memory with the cfgSave command.
PAGE 74
22 aliRemove aliRemove Removes a member from a zone alias. SYNOPSIS DESCRIPTION aliremove "aliName","member[; member...]" Use this command to remove one or more members from an existing zone alias. If all members are removed, the zone alias is deleted. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.
PAGE 75
aliShow 2 aliShow Displays zone alias information. SYNOPSIS DESCRIPTION alishow ["pattern"][, mode] Use this command to display zone configuration information. Use the pattern operand to display only matching zone alias names in the defined configuration. If no parameters are specified, all zone configuration information (both defined and effective) is displayed. Refer to cfgShow for a description of this display.
PAGE 76
22 appLoginHistory appLoginHistory Displays the history of HTTP login sessions. SYNOPSIS apploginhistory --show apploginhistory --help DESCRIPTION Use this command to display the history of HTTP login sessions from external management applications such as Brocade Network Advisor or Web Tools. The command displays both current sessions and a history of past sessions.
PAGE 77
appLoginHistory 2 active currently: 2011/10/13-15:51:31.203814, 2011/10/13-15:51:33.095638, 2011/10/13-15:52:14.178299, 2011/10/13-15:53:57.547672, SEE ALSO 10.20.10.160, 10.20.10.160, 10.20.10.161, 10.20.10.
PAGE 78
22 aptPolicy aptPolicy Changes or displays the Advanced Performance Tuning (APT) policy. SYNOPSIS aptpolicy [policy] aptpolicy -ap [ap_policy] DESCRIPTION Use this command to display and change the advanced performance tuning (APT) policies on a switch. Several internal performance tuning parameters can be modified with this command. The default parameters (AP shared Link Policy) are optimized for most SAN applications; in most environments, there is no need to modify the default policy.
PAGE 79
aptPolicy 2 • • The FC address of the destination fabric device (DID) for this frame. The FC Originator Exchange ID (OXID) for this frame. This policy optimizes the utilization of the available paths by allowing I/O traffic between different SID, DID, or OXID pairs to use different paths. All frames received on an ingress port with the same SID, DID, or OXID parameters take the same path unless there is a fabric event. Refer to dlsSet for the definition of a fabric event.
PAGE 80
22 auditCfg auditCfg Modifies and displays the audit log filter configuration. SYNOPSIS auditcfg --class audit_class auditcfg --enable | --disable auditcfg --severity severity_level auditcfg --show DESCRIPTION NOTES OPERANDS Use this command to configure the audit logging and to display the audit log configuration.
PAGE 81
auditCfg 2 To display the configuration: switch:admin> auditcfg --show Audit filter is enabled. 1-ZONE 2-SECURITY 3-CONFIGURATION 4-FIRMWARE 5-FABRIC 6-FW 7-LS Severity level: INFO To disable audit logging: switch:admin> auditcfg --disable Audit filter is disabled.
PAGE 82
22 auditDump auditDump Displays or clears the audit log. SYNOPSIS auditdump -s | -show auditdump -c | -clear DESCRIPTION NOTES OPERANDS Use this command to display or clear the audit log on the switch. The audit log persistently saves the most recent 256 log entries on the switch. On modular platforms, the entries are not shared across CPs. To display or clear the logs, this command must be issued for each CP separately.
PAGE 83
authUtil 2 authUtil Displays and sets the authentication configuration. SYNOPSIS authutil authutil --show authutil --set option value authutil --policy -sw option | -dev option authutil --authinit [slot/]port[, [slot/]port...] | allE DESCRIPTION Use this command to display and set local switch authentication parameters. Use --set to change authentication parameters such as protocol, Diffie-Hellman group (DH group), or hash type. When no protocol is set, the default setting of "FCAP, DH- CHAP" is used.
PAGE 84
22 authUtil enabled. Specifying "*" enables all DH groups 0, 1, 2, 3, and 4, in that order. This means that in authentication negotiation, the NULL DH group is given priority over all other groups. In the case of a port that is enabled for encryption and you specify "*", the DH group 4 is selected. -h sha1 | md5 | all Sets the hash type. Valid values are "sha1", "md5" or "all", which sets both hash types. Use this option to disable md5 authentication access by setting the hash type to sha1 only.
PAGE 85
authUtil 2 --authinit [slot/]port [, [slot/]port...| allE Reinitiates authentication on selected ports after changing the DH-CHAP group, hash type, and shared secret between a pair of switches. This command does not work on Private, Loop, NPIV and FICON devices. The command can reinitiate authentication only if the device was previously authenticated. This command may bring down the E_Ports if the DH-CHAP shared secrets are not installed correctly. This command is not supported on encrypted ports ports.
PAGE 86
22 authUtil To set the Device policy to passive mode: switch:admin> authutil --policy -dev passive Warning: Activating the authentication policy requires DH-CHAP secrets on both switch and device. Otherwise, the F-port will be disabled during next F-port bring-up.
PAGE 87
bannerSet 2 bannerSet Sets the banner on the local switch. SYNOPSIS DESCRIPTION bannerset [banner] Use this command to set the banner on the local switch. The banner is a string of alphanumeric characters. It is displayed after you log in to a switch. The banner can be created using the banner operand or interactively by entering the bannerSet command without an operand. If you enter the banner text using the interactive method, the valid length is 1022 characters.
PAGE 88
22 bannerShow bannerShow Displays the banner text. SYNOPSIS DESCRIPTION NOTES bannershow Use this command to display the text of the local switch banner. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To display the banner for a switch: switch:admin> bannershow Banner: Do not disturb the setup on this switch.
PAGE 89
bcastShow 2 bcastShow Displays broadcast routing information. SYNOPSIS DESCRIPTION bcastshow Use this command to display the broadcast routing information for all ports in the switch. The broadcast routing information indicates all ports that are members of the broadcast distribution tree: ports that are able to send and receive broadcast frames. Normally, all F_Ports and FL_Ports are members of the broadcast distribution tree.
PAGE 90
22 bladeCfgGeMode bladeCfgGeMode Configures a GbE port or a 10GbE port on the Brocade FX8-24 blade. SYNOPSIS bladecfggemode --set mode -slot slot bladecfggemode --show -slot slot | -all bladecfggemode --help DESCRIPTION NOTES Use this command to configure the GbE port mode on the Brocade FX8-24 extension blade or to display the configuration. The mode configuration controls which ports are enabled.
PAGE 91
bladeCfgGeMode 2 To display the GbE port mode for all configured slots: switch:admin> bladecfggemode --show -all bladeCfgGeMode: Blade in slot 1 is configured in 1GigE Mode 1GigE mode: only the ge0-9 ports are enabled (xge0 and xge1 \ are disabled) bladeCfgGeMode: Blade in slot 4 is configured in 10GigE Mode 10GigE mode: only xge0 and xge1 are enabled (ge0-9 ports \ are disabled) SEE ALSO None Fabric OS Command Reference 53-1001764-01 65
PAGE 92
22 bladeDisable bladeDisable Disables all user ports on a blade. SYNOPSIS DESCRIPTION bladedisable slot Use this command to disable all user ports on a blade. All Fibre Channel ports on the blade are taken offline. If the switch was connected to a fabric through this blade, the remaining switches reconfigure, and the switch reconfigures based on the other blade ports. As each port is disabled, the front panel LED changes to a slow-flashing amber.
PAGE 93
bladeDisable 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 SEE ALSO 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 ------------------------------------------------------------------------------------------------------------------------------------------------------------ cu cu cu cu cu cu cu cu cu cu cu cu cu cu cu cu cu cu cu
PAGE 94
22 bladeEnable bladeEnable Enables all user ports on a blade. SYNOPSIS DESCRIPTION bladeenable slot Use this command to enable all user ports on a blade. All ports within the blade that did not fail the power-on self-test (POST) are enabled (except for persistently disabled ports). They may come online if connected to a device, or remain offline if disconnected. Use the bladeEnable command to re-enable the blade after making configuration changes or running offline diagnostics.
PAGE 95
bladeEnable 3 4 5 6 7 8 9 10 SEE ALSO UNKNOWN SW BLADE CP BLADE CP BLADE SW BLADE UNKNOWN UNKNOWN UNKNOWN 2 1 1 2 2 VACANT ENABLED ENABLED ENABLED ENABLED VACANT VACANT VACANT bladeDisable, chassisDisable, chassisEnable, portEnable, portDisable, switchDisable, switchShow Fabric OS Command Reference 53-1001764-01 69
PAGE 96
22 bladeSwap bladeSwap Swaps the area numbers for matching port pairs of two blades. SYNOPSIS DESCRIPTION bladeSwap -src source_slot -dest destination_slot Use this command to swap the area numbers for matching port pairs of two blades. All ports must qualify for swapping for this command to succeed. It validates that the blades in the indicated slots are of the same type, have the same number of ports, and that the port pairs are in the same partition.
PAGE 97
bootLunCfg 2 bootLunCfg Transparently configures the boot LUN for an HBA. SYNOPSIS bootluncfg --add HBA_WWN PWWN LUN_ID bootluncfg --delete HBA_WWN [PWWN LUN_ID] bootluncfg --show bootluncfg --help DESCRIPTION Use this command to configure the boot LUN for an HBA. Existing fabric-based boot LUN discovery allows the host's boot LUN information to be stored in the fabric zone database by using a zone name that contains the PWWN of an HBA port. The zone members consist of storage target PWWN and LUN ID.
PAGE 98
22 bootLunCfg EXAMPLES To configure a boot LUN: switch:admin> bootluncfg --add 11:22:ab:44:44:ff:44:ca \ 1b:6c:55:55:55:3a:55:ff 9abc345fa1112410 Operation Successful To display existing Port/LUN mappings: switch:admin> bootluncfgn--show 00:11:22:33:44:55:66:77 00:00:00:00:aa:bb:cc:dd;00:00:00:01:ee:ff:11:22; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 aa:aa:aa:aa:aa:aa:aa:aa 00:00:00:00:11:11:11:11;00:00:00:01:11:11:11:11; \ 00:00:00:02:9a:bc:34:5f;00:00:00:03:a1:11:24:10 bb:aa:aa:aa:aa:aa:aa:aa
PAGE 99
bottleneckMon 2 bottleneckMon Monitors and reports latency and congestion bottlenecks on F_Ports and E_Ports.
PAGE 100
22 bottleneckMon Enabling or disabling bottleneck detection is a switch-wide operation. If Virtual Fabrics are enabled, the configuration is applied per logical switch and affects all ports on the current logical switch. After the (logical) switch-wide bottleneck detection parameters have been set, you can you can fine-tune the configuration for specific ports. A bottleneck is defined as a condition where the offered load at a given port exceeds the throughput at the port.
PAGE 101
bottleneckMon 2 6 seconds in an interval of 10 seconds, and 1 second out of the other 4 seconds was affected by a bottleneck, the display for that interval would show 25% as the percentage of affected seconds (1 out of 4), and state "no data for 6 seconds." However, if there is no traffic because the port is offline, the "no data..." message is displayed. The --status option displays bottleneck configuration details for the current (logical) switch.
PAGE 102
22 bottleneckMon Credit recovery on back-end ports Use the --cfgcredittools commands to enable or disable credit recovery of external back-end ports and to display the configuration. When this feature is enabled, credit is recovered on external back-end ports (ports connected to the core blade or core blade back-end ports) when credit loss has been detected on these ports.
PAGE 103
bottleneckMon 2 --enable Enables bottleneck detection on the switch. This operation is switch-wide and affects all F[L]_Ports and F_Ports. This operation enables bottleneck detection on all eligible ports of a switch, no matter when they become eligible. If you have Virtual Fabrics enabled and you move ports into a bottleneck enabled logical switch from another logical switch, bottleneck detection is enabled upon completion of the move.
PAGE 104
22 bottleneckMon -lsubsectimethresh time_threshold Sets the threshold for latency bottlenecks at the sub-second level. The time_threshold specifies the minimum fraction of a second that must be affected by latency in order for that second to be considered affected by a latency bottleneck. For example, a value of 0.75 means that at least 75% of a second must have had latency bottleneck conditions in order for that second to be counted as an affected second.
PAGE 105
bottleneckMon 2 specifier, the command displays the number of ports affected by bottleneck conditions. A "bottlenecked" port in this output is defined as any port that was affected by a bottleneck for one second or more in the corresponding interval. This command succeeds only on online ports. The following operands are optional: -interval seconds Specifies the time window in seconds over which the percentage of seconds affected by bottleneck conditions is displayed in the output.
PAGE 106
22 bottleneckMon --help Displays the command usage.
PAGE 107
bottleneckMon Feb Feb Feb Feb Feb Feb Feb 26 26 26 26 26 26 26 21:56:30 21:56:20 21:56:10 21:56:00 21:55:50 21:55:40 21:55:30 Feb Feb Feb Feb Feb Feb Feb 26 26 26 26 26 26 26 21:56:40 21:56:30 21:56:20 21:56:10 21:56:00 21:55:50 21:55:40 2 0 0 0 0 0 0 0 To display bottleneck statistics for a single port: switch:admin> bottleneckmon --show \ -interval 5 -span 30 2/4 ============================================= Wed Jan 13 18:54:35 UTC 2010 ============================================= Percentage of
PAGE 108
22 bottleneckMon Jan Jan Jan Jan Jan 13 13 13 13 13 18:54:10 18:54:15 18:54:20 18:54:25 18:54:30 Jan Jan Jan Jan Jan 13 13 13 13 13 18:54:15 18:54:20 18:54:25 18:54:30 18:54:35 20.00 80.00 0.00 0.00 40.00 To display bottleneck configuration details for the switch: switch:admin> bottleneckmon --status Bottleneck detection - Enabled ============================== Switch-wide sub-second latency bottleneck criterion: ==================================================== Time threshold - 0.
PAGE 109
bottleneckMon 2 To enable back-end port credit recovery with the link reset threshold option and to display the configuration: switch:admin> bottleneckmon --cfgcredittools -intport \ -recover onLrThresh switch:admin> bottleneckmon --showcredittools Internal port credit recovery is Enabled with LrOnThresh To disable back-end port credit recovery and to display the configuration: switch:admin> bottleneckmon --cfgcredittools \ -intport -recover off switch:admin> bottleneckmon --showcredittools Internal port
PAGE 110
22 bpPortLoopbackTest bpPortLoopbackTest Sends and receives data from the same BP port to perform a functional test of the port. SYNOPSIS DESCRIPTION bpportloopbacktest [--slot slot] [-nframes count] [-pklen count] [-lb_mode mode] [-spd_mode mode ] [-bpports itemlist ] Use this command to verify the functional operation of the switch. The test sends frames from a specified blade processor (BP) port transmitter and loops the frames back into the same BP port's receiver.
PAGE 111
bpPortLoopbackTest 2 At each pass, a different data type is used to create the frame from a palette of seven. If a pass of seven is requested, seven different frames are used in the test. If eight passes, the first seven frames are unique, and the eighth frame is the same as the first. The data palette of seven consists of the following data types: 1) 2) 3) 4) 5) 6) 7) NOTES CSPAT: 0x7e, 0x7e, 0x7e, 0x7e, ... BYTE_LFSR: 0x69, 0x01, 0x02, 0x05, ... CHALF_SQ: 0x4a, 0x4a, 0x4a, 0x4a, ...
PAGE 112
22 bpPortLoopbackTest 8 Runs test at 8 Gbps (Default for Condor2). 16 Runs test at 16 Gbps (Condor3 only). -bpports itemlist Specifies a list of blade ports to test. By default all valid blade ports in the specified blade are tested. On the Brocade Encryption platforms, ports 80-103 are the only valid ports, because these are the only blade ports with access to the Vader chip. Refer to the itemList help page for further information on the itemlist parameter.
PAGE 113
bpTurboRamTest 2 bpTurboRamTest MBIST test for AP Blade BP ASICs. SYNOPSIS DESCRIPTION bpturboramtest [--slot slot] [ -passcnt count ] [ -bpports itemlist ] Use this command to verify the on-chip static random access memory (SRAM) located in the Blade Processor (BP) ASICs of the Application Processor (AP) blade. The command makes use of the memory built-in self-test (MBIST) circuitry.
PAGE 114
22 bpTurboRamTest EXAMPLES To run the test in default mode: switch:admin> bpturboramtest Running bpturboramtest .............. Board Init Running Vader bist test Vader bist test PASSED Running Ob1 bist test Ob1 bist test PASSED BIST test PASSED on all ASIC(s) Test Complete: bpturboramtest Pass 1 of 1 Duration 0 hr, 1 min & 55 sec (0:1:55:884). Cleaning up after test....... passed.
PAGE 115
bufOpMode 2 bufOpMode Changes or displays the Buffer Optimized Mode. SYNOPSIS bufopmode --set slot [-f] bufopmode --reset slot bufopmode --show slot bufopmode --showall DESCRIPTION Use this command to display or change the buffer optimized mode on a switch. When buffer optimized mode is enabled on a slot, additional buffers are allocated on the internal ports.
PAGE 116
22 bufOpMode Slot 9: buffer optimized mode - Off Slot 10: buffer optimized mode - Off Slot 11: buffer optimized mode - Off Slot 12: buffer optimized mode - On -------------------------------------------------* indicates buffer optimization not supported on this blade To display current buffer optimized mode for a single slot switch:admin> bufopmode --show 12 Slot 12: buffer optimized mode - On To enable buffer optimized mode for a given slot: switch:admin> bufopmode --set 11 The slot must first be power
PAGE 117
bufOpMode 2 Slot 11: buffer optimized mode - Off* Slot 12: buffer optimized mode - Off* ----------------------------------------------------------* indicates buffer optimization not supported on this blade SEE ALSO slotShow, slotPowerOn, slotPowerOff Fabric OS Command Reference 53-1001764-01 91
PAGE 118
22 ceePortLedTest ceePortLedTest DESCRIPTION SEE ALSO 92 See portLedTest.
PAGE 119
ceePortLoopbackTest 2 ceePortLoopbackTest DESCRIPTION SEE ALSO See portLoopbackTest.
PAGE 120
22 ceeTurboRamTest ceeTurboRamTest DESCRIPTION SEE ALSO 94 See turboRamTest.
PAGE 121
cfgActvShow 2 cfgActvShow Displays effective zone configuration information. SYNOPSIS DESCRIPTION cfgactvshow Use this command to display the effective zone configuration information. The current configuration is a single zone configuration that is currently in effect. The devices that an initiator sees are based on this configuration. The effective configuration is built when a specified zone configuration is enabled.
PAGE 122
22 cfgAdd cfgAdd Adds a member to a zone configuration. SYNOPSIS DESCRIPTION cfgadd "cfgName", "member[; member...]" Use this command to add one or more members to an existing zone configuration. This command changes the Defined Configuration. For the change to take effect, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
PAGE 123
cfgClear 2 cfgClear Clears all zone configurations. SYNOPSIS DESCRIPTION cfgclear Use this command to clear all zone information in the transaction buffer. All defined zone objects in the transaction buffer are deleted. If an attempt is made to commit the empty transaction buffer while a zone configuration is enabled, you are warned to first disable the enabled zone configuration or to provide a valid configuration with the same name.
PAGE 124
22 cfgCreate cfgCreate Creates a zone configuration. SYNOPSIS DESCRIPTION cfgcreate "cfgName", "member[;member...]" Use this command to create a new zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
PAGE 125
cfgDelete 2 cfgDelete Deletes a zone configuration. SYNOPSIS DESCRIPTION cfgdelete "cfgName" Use this command to delete a zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
PAGE 126
22 cfgDisable cfgDisable Disables a zone configuration. SYNOPSIS DESCRIPTION cfgdisable Use this command to disable the current zone configuration. The fabric returns to non-zoning mode, a mode in which all devices can see each other. This command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory. If a transaction is open on a different switch in the fabric when this command is run, the transaction on the other switch is automatically aborted.
PAGE 127
cfgEnable 2 cfgEnable Enables a zone configuration. SYNOPSIS DESCRIPTION cfgenable "cfgName" Use this command to enable a zone configuration. The command builds the specified zone configuration . It checks for undefined zone names, zone alias names, or other inconsistencies, by expanding zone aliases, removing duplicate entries, and then installing the effective configuration.
PAGE 128
22 cfgRemove cfgRemove Removes a member from a zone configuration. SYNOPSIS DESCRIPTION cfgremove "cfgName","member[; member...]" Use this command to remove one or more members from an existing zone configuration. If all members are removed, the zone configuration is deleted. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command.
PAGE 129
cfgSave 2 cfgSave Saves the zone configuration to nonvolatile memory. SYNOPSIS DESCRIPTION cfgsave Use this command to save the current zone configuration. This command writes the defined configuration and the name of the effective configuration to nonvolatile memory in all switches in the fabric. The saved configuration is automatically reloaded at power on, and, if a configuration was in effect at the time it was saved, the same configuration is reinstalled with an automatic cfgEnable command.
PAGE 130
22 cfgShow cfgShow Displays zone configuration information. SYNOPSIS DESCRIPTION cfgshow ["pattern"] [, mode] Use this command to display zone configuration information. If no operand is specified, all zone configuration information (both defined and effective) is displayed. If the local switch has an outstanding transaction, this command displays the most recently edited zone configuration that has not yet been saved.
PAGE 131
cfgShow EXAMPLES 2 To display all zone configurations that start with "Test": switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Red_zone; Blue_zone To display all zone configuration information: switch:admin> cfgshow Defined configuration: cfg: USA1 Blue_zone cfg: USA_cfg Red_zone; Blue_zone zone: Blue_zone 1,1; array1; 1,2; array2 zone: Red_zone 1,0; loop1 alias: array1 21:00:00:20:37:0c:76:8c; \ 21:00:00:20:37:0c:71:02 alias: array2 21:00:00:20:37:0c:76:22; \ 21:00:00:20:37:0c:76:28 ali
PAGE 132
22 cfgSize cfgSize Displays zone and Admin Domain database size details. SYNOPSIS DESCRIPTION cfgsize [integer] Use this command to display the size details of the zone database and the Admin Domain database. When executed in a non-AD255 context, the size details include maximum size, the committed size, and the transaction size of the Zone database in bytes.
PAGE 133
cfgSize EXAMPLES 2 To display the zone database on a Brocade 6510 switch:admin> cfgsize Zone DB max size - 1045274 bytes Available Zone DB size - 1041503 bytes committed - 2759 transaction - 0 To display Admin Domain and zone database size information in an AD255 context: switch:admin> cfgsize Maximum AD and Zone DB size - 1045274 bytes Total Committed AD and Zone DB size - 3390 bytes AD and Zone DB uncommitted space available - 1041884 bytes Total AD and Zone Transaction buffer size 0 bytes AD Databas
PAGE 134
22 cfgTransAbort cfgTransAbort Aborts the current zoning transaction. SYNOPSIS DESCRIPTION cfgtransabort [token] Use this command to abort the current zoning transaction without committing it. All changes made since the transaction was started are removed and the zone configuration database is restored to the state before the transaction was started. If a transaction is open on a different switch in the fabric when this command is run, the transaction on the other switch remains open and unaffected.
PAGE 135
cfgTransShow 2 cfgTransShow Displays information about the current zoning transaction. SYNOPSIS DESCRIPTION NOTES cfgtransshow Use this command to display the ID of the current zoning transaction. In addition, the command provides information on whether or not the transaction can be aborted. The transaction cannot be aborted if it is an internal zoning transaction. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 136
22 chassisBeacon chassisBeacon Sets chassis beaconing mode. SYNOPSIS DESCRIPTION chassisbeacon [mode] Use this command to enable or disable beaconing on a chassis. Chassis beaconing can be used to locate a failing chassis in a group of chassis. Use the portBeacon command to locate a failing port, and use the switchBeacon command to locate a failing (logical) switch. When beaconing mode is turned on, the port LEDs flash green at various rates across the chassis.
PAGE 137
chassisDisable 2 chassisDisable Disables all user ports in a chassis. SYNOPSIS DESCRIPTION chassisdisable [-force] Use this command to disable a Virtual Fabric-aware chassis. All Fibre Channel ports are taken offline. This command prompts for confirmation unless the -force option is used. If the chassis is partitioned into logical switches that are part of logical fabrics, the remaining switches in these fabrics reconfigure.
PAGE 138
22 chassisDistribute chassisDistribute Distributes IP filter policies. SYNOPSIS chassisdistribute -db policy_db -fid FID [-force] chassisdistribute -db policy_db -domain domain_list [-force] DESCRIPTION Use this command to manually distribute IP Filter policies. The behavior of this command depends on whether Virtual Fabrics are enabled or disabled.
PAGE 139
chassisDistribute NOTES OPERANDS 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command has the following operands: -db policy_list Specifies the list of policy sets, also called security databases, to be distributed. Currently, only the IPFILTER policy database can be distributed with this command.
PAGE 140
22 chassisEnable chassisEnable Enables all user ports in a chassis. SYNOPSIS DESCRIPTION chassisenable Use this command to enable a Virtual Fabric-aware chassis. All Fibre Channel ports that passed the power-on self test (POST) are enabled. They may come online if connected to a device, or remain offline if disconnected. Use chassisEnable to re-enable the chassis after making configuration changes or running offline diagnostics.
PAGE 141
chassisName 2 chassisName Displays or sets the chassis name. SYNOPSIS DESCRIPTION chassisname [name] Use this command to display or change the name associated with the chassis. Use this command without parameters to display the current chassis name. Use this command with the name operand to assign a new chassis name. NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 142
22 chassisShow chassisShow Displays all field replaceable units (FRUs). SYNOPSIS DESCRIPTION chassisshow Use this command to display the Field Replaceable Unit (FR) header content for each object in the chassis and chassis backplane version. This command displays the following information: 1. The chassis family, for example, DCX 8510. 2. The backplane version number, in hexadecimal: Chassis Backplane Revision: xx 3. The first line of each record contains the object ID.
PAGE 143
chassisShow NOTES 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 144
22 classConfig classConfig Displays RBAC class permissions. SYNOPSIS classconfig --show class_name | -all | -classlist classconfig --showcli command classconfig --showroles class_name classconfig --help DESCRIPTION Use this command to display information about role-based access control (RBAC) permissions for one or all meta-object format (MOF) classes, to display permissions for a specified command, or to display the permissions for a specified MOF class.
PAGE 145
classConfig 2 --showcli command Displays the RBAC permissions for the specified command and associated command options. The output displays the command name, the command options, the RBAC class permissions for each command option, and the MOF class. --showroles class_name Displays the role permissions the specified MOF class. --help Displays the command usage.
PAGE 146
22 classConfig 46. 47. 48. 49. 50. 51. 52. 53. 54. 55. 56. 57. 58. 59. 60. 61. 62. 63. 64. 65. 66. 67. 68.
PAGE 147
classConfig 2 To display the RBAC permissions for the UserManagement class: switch:admin> classconfig --showroles UserManagement Roles that have access to the RBAC class 'usermanagement' are: Role Name --------Admin Factory Root SecurityAdmin Permission ---------OM OM OM OM To display the RBAC permissions for a command: switch:admin> classconfig --showcli classconfig CLI Option Permission RBAC Class ---------------------------------------------------------classconfig help O RoleConfig classconfig show O
PAGE 148
22 cliHistory cliHistory Displays switch command history. SYNOPSIS DESCRIPTION clihistory This command saves the following information whenever a command is executed on the switch: • • • • • Timestamp Username IP address of the Telnet session Options Arguments This command displays the local CLI command history. The information is saved in the SSHOW_SYS file as part of supportSave and in the CTRACE traceDump file, which is also included with the supportSave package.
PAGE 149
cmsh 2 cmsh Opens the CEE command shell. SYNOPSIS DESCRIPTION cmsh Use this command to open a shell for managing 10 GbE interfaces and Layer2/Layer3 protocol services. The CEE management shell provides a hierarchical CLI interface. Refer to the CEE Command Reference and the CEE Administrator's Guide for information on how to use the CEE commands and configuration procedures. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 150
22 cmsh To create an FCoE VLAN: switch:admin> cmsh switch:admin>en switch:admin>#conf t switch:admin>(config)#protocol lldp switch:admin>(conf-lldp)# advertise dcbx-fcoe-app-tlv switch:admin>(conf-lldp)# advertise dcbx-fcoe-logical-link-tlv switch:admin>(conf-lldp)#exit switch:admin>(config)#exit switch:admin>(config)# fcoe encap ethv2 switch:admin>(config)# encap ethv2 switch:admin>(config)# switch:admin>(config)# vlan classifier rule 1 proto \ vlan classifier rule 2 proto fip \ vlan classifier group 1
PAGE 151
configDefault 2 configDefault Resets the nonpersistent configuration data to factory defaults. SYNOPSIS DESCRIPTION configdefault [-fid FID | -all | -switch] Use this command to reset the nonpersistent configuration settings to their factory default values. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately.
PAGE 152
22 configDefault The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS This command has the following operands: -fid FID Specifies the Fabric ID of the logical switch for which to reset the configuration. This operand is valid only in Virtual Fabric mode, and the executing account must have chassis permissions.
PAGE 153
configDownload 2 configDownload Downloads configuration data to the system.
PAGE 154
22 configDownload The system configuration data is downloaded separately. It is grouped into chassis information and switch information. Each configuration type is managed separately and the behavior of configDownload depends on the environment in which the command is executed and which part of the system configuration you wish to download. • In a Virtual Fabric environment, when executed without chassis permissions, this command downloads the switch configuration to the current logical switch only.
PAGE 155
configDownload 2 • After the switch is enabled, if the switch is the primary FCS, then its security and zoning information is propagated to all other switches in the fabric. • After the switch is enabled, if the switch is a non-FCS or a backup FCS, then its security and zoning information will be overwritten by the primary FCS. Security parameters and the switch identity cannot be changed by configDownload.
PAGE 156
22 configDownload -fid FID Downloads the switch configuration to a logical switch specified by its fabric ID. This operand is valid only in a Virtual Fabric environment and requires chassis permissions. -chassis Downloads the chassis configuration only. -switch Downloads the switch configuration only. This operand is valid only in non-VF mode. "host" Specifies the name or the IP address of the external host, from which to download the configuration. IPv4 and IPv6 addresses are supported.
PAGE 157
configDownload • • • • • EXAMPLES 2 The file is not a switch configuration file. The FTP server is not running on the host. The configuration file contains errors. The configuration file's logical switch definitions do not match the definitions on the target switch. Admin Domains are configured on the switch, and you attempt to download a Virtual Fabrics configuration file.
PAGE 158
22 configDownload To attempt to download the Virtual Fabric configuration interactively to a switch with configured Admin Domains: switch:admin> configdownload -vf -p sftp \ 10.32.248.119,jdoe,/temp/switch-conf_66.txt,mypassword *** CAUTION *** This command is used to download the VF configuration to the switch. Afterwards, the switch will be automatically rebooted and the new VF settings will be used.
PAGE 159
configList 2 configList Lists uploaded configuration files. SYNOPSIS DESCRIPTION NOTES OPERANDS configlist -local | -USB | -U This command displays a list of names, sizes, and creation dates of configuration files saved on the local chassis or on an attached USB device. These files are created when the configUpload command is executed with the -local or the -USB option. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 160
22 configRemove configRemove Deletes a saved configuration file. SYNOPSIS DESCRIPTION NOTES OPERANDS configremove -local | -USB | -U [file] This command deletes a configuration file that was previously saved to the local chassis or to an attached USB device by using the configUpload command. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 161
configShow 2 configShow Displays system configuration settings. SYNOPSIS configshow configshow [-all | -fid FID | -chassis | -switch] | [-local | -USB | -U] [file] [-pattern "pattern"] DESCRIPTION Use this command to display system configuration settings. Some but not all of these parameters are set by the configure and configureChassis commands. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately.
PAGE 162
22 configShow -local [file] Displays the content of a configuration file that was previously created by configUpload and stored on the chassis. The output can be optionally filtered by -pattern "pattern". If file is omitted, the command prompts for a file name. The output format when -local is specified matches that of configUpload and contains a superset of the information provided when -local is not specified.
PAGE 163
configShow 2 passwdcfg.lockoutthreshold:0 passwdcfg.lockoutduration:30 passwdcfg.adminlockout:0 passwdcfg.repeat:1 passwdcfg.sequence:1 passwdcfg.status:0 fips.mode:0 fips.selftests:0 ipfilter.0.name:default_ipv4 ipfilter.0.numofrules:12 ipfilter.0.rule.1:0,0x23,0,0,6,22 ipfilter.0.rule.10:0,0x23,0,0,17,123 ipfilter.0.rule.11:0,0x63,0,0,6,600,1023 ipfilter.0.rule.12:0,0x63,0,0,17,600,1023 ipfilter.0.rule.2:0,0x23,0,0,6,23 ipfilter.0.rule.3:0,0x23,0,0,6,897 ipfilter.0.rule.4:0,0x23,0,0,6,898 ipfilter.0.
PAGE 164
22 configShow To display switch configuration data for FID 20: switch :admin> configshow -fid 20 [Configuration upload Information] Configuration Format = 2.0 date = Tue Oct 7 14:53:12 2008 FOS version = v6.2.0.0 Number of LS = 3 [Switch Configuration Begin : 0] SwitchName = Spirit_66 Fabric ID = 20 [Boot Parameters] boot.name:Spirit_66 boot.ipa:10.32.228.66 boot.licid:10:00:00:05:1e:41:5c:c1 boot.mac:10:00:00:05:1e:41:5c:c1 boot.device:eth0 boot.gateway.ipa:10.32.224.1 [Configuration] acl.clear:0 ag.
PAGE 165
configUpload 2 configUpload Uploads system configuration data to a file.
PAGE 166
22 configUpload The system configuration data is uploaded separately. It is grouped into chassis information and switch information. Each configuration type is managed separately and the behavior of configUpload depends on the environment in which the command is executed and which part of the system configuration you wish to upload. • In a Virtual Fabric environment, when executed without chassis permissions, this command uploads the current logical switch configuration only.
PAGE 167
configUpload 2 -fid FID Uploads switch configuration data from a logical switch specified by its fabric ID. This parameter is valid only in a Virtual Fabric environment and requires chassis permissions. -chassis Uploads chassis configuration only. -all Uploads all system configuration data including chassis and switch configuration for all logical switches. -switch Uploads the switch configuration only. This operand is not valid in VF mode.
PAGE 168
22 configUpload EXAMPLES To upload the switch configuration interactively from a switch that is not enabled for Virtual Fabrics: switch:admin> configupload Protocol (scp, ftp, sftp, local) [ftp]: sftp Server Name or IP Address [host]: 192.168.38.245 User Name [user]: jdoe File Name [/config.
PAGE 169
configure 2 configure Changes switch configuration settings. SYNOPSIS DESCRIPTION configure Use this command to change switch configuration settings. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. For information on file format and specific parameters contained in each section, refer to the configUpload help page.
PAGE 170
22 configure The following parameters can be modified with the configure command: Fabric Parameters Fabric settings control the overall behavior and operation of the fabric. Some of these settings, such as the domain, are assigned automatically and may differ from one switch to another in a given fabric.
PAGE 171
configure 2 WWN Based persistent PID When enabled, this feature supports both dynamic and static WWN-based PID assignment. In dynamic PID binding, the first area assigned to a device when it logs in is bound to the device WWN and remains persistent through subsequent logins. Every time the device logs into the switch, it is guaranteed to get the same PID. Alternately, you can use the wwnAddress command to create a static WWN-based PID assignment.
PAGE 172
22 configure R_A_TOV The resource allocation time out value specified in milliseconds. This variable works with the variable E_D_TOV to determine switch actions when presented with an error condition. Allocated circuit resources with detected errors are not released until the time value has expired. If the condition is resolved prior to the time out, the internal time-out clock resets and waits for the next error condition. E_D_TOV Error detect time out value specified in milliseconds.
PAGE 173
configure 2 Per-frame Route Priority In addition to the eight virtual channels used in frame routing priority, support is also available for per-frame-based prioritization when this value is set. When Per-frame Route Priority is set to 1, the virtual channel ID is used in conjunction with a frame header to form the final virtual channel ID. Long Distance Fabric When this mode is set to 1, ISLs in a fabric can be up to 100 km long.
PAGE 174
22 configure The values for virtual channel settings are as follows: Field Default Range ____________________________________ VC Priority 2 2 2 to 3 VC Priority 3 2 2 to 3 VC Priority 4 2 2 to 3 VC Priority 5 2 2 to 3 VC Priority 6 3 2 to 3 VC Priority 7 3 2 to 3 F_Port Login Parameters Specifies the F_Port login parameters. The following F_Port login settings are configurable. Unless there are issues with F_Port staging, do not change default values.
PAGE 175
configure 2 Zoning Operation Parameters The following zoning operation parameter can be modified. Disable NodeName Zone Checking Specify 1 to disable using node WWN when specifying nodes in the zone database. Specify 0 to enable using node WWN when specifying nodes in the zone data. The default value is 0. This value must be set to 1 for interpretability.
PAGE 176
22 configure Portlog Events Enable/Disable Settings These settings determine whether or not various types of port events are logged. Each event type displayed on the screen is enabled by default ("on"). When disabled, this event is not logged by the port log. Application Attributes A number of application attributes are configurable. The following table specifies the attributes for applications that can be modified.
PAGE 177
configure 2 R_A_TOV: (4000..120000) [10000] E_D_TOV: (1000.. 5000) [2000] WAN_TOV: (0..30000) [0] MAX_HOPS: (7..19) [7] Data field size: (256..2112) [2112] Sequence Level Switching: (0..1) [0] Disable Device Probing: (0..1) [0] Suppress Class F Traffic: (0..1) [0] Per-frame Route Priority: (0..1) [0] Long Distance Fabric: (0..1) [0] BB credit: (1..
PAGE 178
22 configure Arbitrated Loop parameters (yes, y, no, n): [no] System services (yes, y, no, n): [no] Portlog events enable (yes, y, no, n): [no] ssl attributes (yes, y, no, n): [no] rpcd attributes (yes, y, no, n): [no] cfgload attributes (yes, y, no, n): [no] webtools attributes (yes, y, no, n): [no] SEE ALSO 152 configDefault, configShow, configureChassis, ipAddrSet, portCfgLongDistance, switchDisable, switchEnable, upTime Fabric OS Command Reference 53-1001764-01
PAGE 179
configureChassis 2 configureChassis Changes chassis-level system configuration settings. SYNOPSIS DESCRIPTION configurechassis Use this command to modify chassis-level system configuration settings. Configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. Use the configure command to modify switch configuration parameters.
PAGE 180
22 configureChassis System attributes The following system-related parameters are configurable on a Virtual Fabric-aware switch. system.blade.bladeFaultOnHwErrMsk If this field is set to a value other than 0, then any nonfatal HW ASIC data parity error causes the problem blade to be powered off. The valid range is 0x0 to 0xffff. The default value is 0x0. system.cpuLoad Sets a threshold to define internally when the CPU is busy.
PAGE 181
configureChassis 2 To add a suffix to the uploaded file name: switch:admin> configurechassis Configure...
PAGE 182
22 cryptoCfg cryptoCfg Performs encryption configuration and management functions. SYNOPSIS cryptocfg --help -nodecfg cryptocfg --help -groupcfg cryptocfg --help -hacluster cryptocfg --help -devicecfg cryptocfg --help -transcfg cryptocfg --help -decommission DESCRIPTION Use the cryptoCfg command to configure and manage the Brocade Encryption Switch and the FS8-18 encryption blade. These platforms support the encryption of data-at-rest for tape devices and disk array logical unit numbers (LUNs).
PAGE 183
cryptoCfg 2 cryptocfg --initnode cryptocfg --initEE [slot] cryptocfg --regEE [slot] cryptocfg --enableEE [slot] cryptocfg --disableEE [slot] cryptocfg --export -scp -dhchallenge vault_IP_address | -currentMK | -KACcert | -KACcsr | -CPcert host_IP host_username host_file_path cryptocfg --export -usb -dhchallenge vault_IP_address | -currentMK | -KACcert | -KACcsr | -CPcert dest_filename cryptocfg --import -scp local_name host_IP host_username host_file_path cryptocfg --import -usb dest_filename source_filen
PAGE 184
22 cryptoCfg • • • • • • Group-wide policy configuration. Zeroization of all critical security parameters on the local encryption switch or blade. Certificate display and management. Display of the local encryption engine status. Rebalancing of disk and tape LUNS for optimized performance. Configuring and running key vault diagnostics. Use the --show -localEE command to display encryption engine configuration parameters pertaining to the local node.
PAGE 185
cryptoCfg 2 Some of the certificates generated with this command may need to be exported so that they can be registered with external entities, such as the key vault or the group leader, for mutual authentication. Refer to the Fabric OS Encryption Administrator's Guide for details. The --initnode function must be performed before the --initEE function may be performed. --initEE Initializes the encryption engine (EE).
PAGE 186
22 cryptoCfg --export Exports a certificate from the local encryption switch or blade to a specified external host or to a mounted USB device. This command is valid on all nodes. The files are exported from the predetermined directory that was generated during the node initialization phase. The following operands are supported with the --export command: -scp Exports a specified certificate to an external host using the secure copy (SCP) protocol.
PAGE 187
cryptoCfg 2 Files to be imported include member node CP certificates and key vault certificates. Use the cryptocfg --show -file -all command to view all imported files. The following operands are supported with the --importcommand: -scp Imports a specified certificate from an external host using the secure copy (SCP) protocol. When -scp is specified, the following operands are required: local_name Specifies the name to be assigned to the imported certificate. This is a user-generated file name.
PAGE 188
22 cryptoCfg --dereg -membernode Removes the registration for the specified member node. This command is valid only on the group leader. The node is identified by the switch WWN. member_node_WWN Specifies the member node by its switch WWN. This operand is required when removing a node registration. --dhchallenge Establishes a link key agreement protocol between a node and an instance of the primary or backup NetApp Lifetime Key Management (LKM) appliance.
PAGE 189
cryptoCfg 2 For the SKM, run this command only for the primary key vault. The login credential must match a valid username/password pair configured on the key vault. The same username/password must be configured on all the nodes of any given encryption group to prevent \ivity issues between the SKM and the switch. However, there is no enforcement from the switch to ensure the same username is configured on all nodes.
PAGE 190
22 cryptoCfg diag Runs diagnostic tests including retrieval, archival and synchronization of the tests in the key vault cluster. EXAMPLES To initialize a node and generate certificates (output shows what is generated and where it is stored): SecurityAdmin:switch> cryptocfg --initnode This will overwrite all identification and authentication data ARE YOU SURE (yes, y, no, n): [no] y Notify SPM of Node Cfg Operation succeeded.
PAGE 191
cryptoCfg 2 To register a member node with the group leader: SecurityAdmin:switch> cryptocfg --reg \ -membernode 10:00:00:05:1e:39:14:00 \ enc_switch1_cert.pem 10.32.244.60 Operation succeeded. To deregister a member node: SecurityAdmin:switch> cryptocfg --dereg -membernode 10:00:00:05:1e:53:b6:80 Operation succeeded. \ To generate a trusted link establishment package (TEP): SecurityAdmin:switch> cryptocfg --dhchallenge 10.33.54.231 Operation succeeded.
PAGE 192
22 cryptoCfg 10:00:00:05:1e:47:30:00/3 10.32.72.105 EE_STATE_ONLINE Reachable 10:00:00:05:1e:47:30:00/10 10.32.72.106 EE_STATE_ONLINE Reachable 10:00:00:05:1e:47:30:00/12 10.32.72.107 EE_STATE_ONLINE Reachable EE Slot: 2 SP state: Online Primary Link KeyID: 85:1c:ca:dd:fc:8c:31:fc:87:21:26:d1:24:a0:92:be Secondary Link KeyID:98:4f:b4:98:c0:42:ab:6b:6d:65:ba:f2:fc:aa:b5:8a No HA cluster membership EE Attributes: Link IP Addr : 10.32.72.76 Link GW IP Addr : 10.32.64.1 Link Net Mask : 255.255.240.
PAGE 193
cryptoCfg 2 To display the key vault diagnostics configuration: switch:admin> cryptocfg --kvdiag -show Key vault diagnostic periodic tests Enabled Interval: 5 minute(s) Test Type: (diag) key retrieval/archival readiness Operation succeeded To change the interval at which the key vault diagnostics is run: switch:admin> cryptocfg --kvdiag -interval 60 Key vault diagnostic periodic tests Enabled Interval: 60 minute(s) Test Type: (diag) key retrieval/archival readiness Operation succeeded FUNCTION 2.
PAGE 194
22 cryptoCfg cryptocfg --show -mkexported_keyids key_id cryptocfg --show -groupcfg cryptocfg --show -groupmember -all | node_WWN cryptocfg --show -egstatus -cfg | -stat cryptocfg --sync -encgroup cryptocfg --sync -securitydb DESCRIPTION Use these cryptoCfg commands to create or delete an encryption group, to add or remove group member nodes, key vaults, and authentication cards, to enable or disable system cards, to enable quorum authentication and set the quorum size, to manage keys including key recov
PAGE 195
cryptoCfg • Time of Day on Key Server: time stamp or N/A Server SDK Version: revision number or N/A Node KAC Certificate Validity: Yes (valid) or No (invalid) Time of Day on the Switch: time stamp Client SDK Version: SDK revision number Client Username: node login name for key vault Client Usergroup: user group Connection Timeout: time in seconds Response Timeout: time in seconds Connection Idle Timeout: time in seconds Status message indicating success/readiness for key operations or, if there is a probl
PAGE 196
22 cryptoCfg • - Current master key ID (or primary link key ID): Shows key ID or zero if not configured. - Alternate master key ID (or secondary link key ID): Shows key ID or zeroif not configured. Alternate master key (or secondary link key) state: Not configured, Saved, Created, Propagated, Valid, or Invalid.
PAGE 197
cryptoCfg 2 --reg -keyvault Registers the specified key vault (primary or secondary) with the encryption engines of all nodes present in an encryption group. Upon successful registration, a connection to the key vault is automatically established. This command is valid only on the group leader. Registered certificates are distributed from the group leader to all member nodes in the encryption group. Each node in the encryption group distributes the certificates to their respective encryption engines.
PAGE 198
22 cryptoCfg value Specifies the key vault type. The default is set to no value. This operand is required. Valid values for -keyvault include the following parameters: LKM Specifies the NetApp LKM appliance (trusted key vault). RKM Specifies the RSA Key Manager (RKM) (opaque key repository). SKM Specifies one of the following: the HP Secure Key Manager (SKM) or the HP Enterprise Secure Key Manager (ESKM). Both are opaque key repositories.
PAGE 199
cryptoCfg 2 --set -systemcard> enable | disable Enables or disables the system card usage policy. When the policy is enabled, a system card is required to be inserted in an encryption engine to enable encryption after a power-cycle event. When quorum authentication is enabled (Quorum Size is > 0), this operation requires authentication of a quorum of authentication cards. The policy is disabled by default. This command must be executed on the group leader.
PAGE 200
22 cryptoCfg --exportmasterkey Exports the current master key encrypted in a key generated from a specified pass phrase. By default this command backs up the key to the attached key vaults, or optionally to a predetermined file on the switch. This command is valid only on the group leader. This command prompts for a pass phrase. passphrase Specifies the pass phrase for the master key encryption. A pass phrase must be between 8 and 40 characters in length and can contain any character combination.
PAGE 201
cryptoCfg 2 --show -groupmember Displays detailed information for all encryption group members or for a single member. This command is valid on all member nodes and on the group leader. The following required operands are mutually exclusive: -all Displays information on all nodes in the existing encryption group. node_WWN Displays information on a single specified node. The node is identified by its node WWN.
PAGE 202
22 cryptoCfg To register a NetApp LKM appliance as the primary key vault "LKM1": SecurityAdmin:switch> cryptocfg --reg -regkeyvault \ LKM1 lkmcert.pem 10.33.54.231 primary decru-lkm-1 Register key vault status: Operation Succeeded. To set the key vault type to LKM: SecurityAdmin:switch> cryptocfg --set -keyvault LKM Set key vault status: Operation Succeeded.
PAGE 203
2 cryptoCfg To recover the master key from the key vault to the current location: SecurityAdmin:switch> cryptocfg --recovermasterkey currentMK -keyID bd:ae:2d:0b:b9:1a:ad:18:0d:eb:fe:c9:67:ed:29:b0 Enter the passphrase: passphrase Recover master key status: Operation succeeded.
PAGE 204
22 cryptoCfg Time of Day on the Switch: Fri Jan 29 23:01:55.205779 GMT 2010 Client SDK Version: OpenKey Reference Lib 2.0.9 Client Username: N/A Client Usergroup: N/A Connection Timeout: 20 seconds Response Timeout: 20 seconds Connection Idle Timeout: N/A Key Vault configuration and connectivity checks successful, ready for key operations.
PAGE 205
cryptoCfg 2 Certificate: GL_cpcert.
PAGE 206
22 cryptoCfg cryptocfg --replace [-haclustermember HA_cluster_name] current_node_WWN [slot] new_node_WWN [slot] cryptocfg --show -hacluster -all | HA_cluster_name DESCRIPTION Use these cryptoCfg commands to configure and manage High Availability (HA) clusters. An HA cluster consists of two encryption engines configured to host the CryptoTargets and to provide the active/standby failover and failback capabilities in a pair-wise relationship in a single fabric.
PAGE 207
cryptoCfg 2 node_WWN Specifies the WWN of the switch or chassis to which the encryption engine belongs. This operand is optional; if omitted, only the HA cluster name is defined. You may add EEs separately with the --add -haclustermember command. slot Specifies the encryption engine slot number on bladed systems. --delete -hacluster Deletes the HA cluster with the specified name. This command is valid only on the group leader.
PAGE 208
22 cryptoCfg current_node_WWN [slot Specifies the WWN of the encryption engine to be replaced. This operand is required. On bladed systems, include the encryption engine slot number. new_node_WWN [slot] Specifies the WWN of the encryption engine that is to replace the current encryption engine. This operand is required. On bladed systems, include the encryption engine's slot number.
PAGE 209
cryptoCfg HA cluster name: HAC2 - 2 EE entries Status: Defined WWN Slot Number 10:00:00:05:1e:53:4c:91 0 10:00:00:05:1e:53:74:87 3 2 Status Online Online To replace an encryption engine in HA cluster "HAC2": SecurityAdmin:switch> cryptocfg --replace \ -haclustermember HAC2 10:00:00:05:1e:53:4c:91 \ 10:00:00:05:1e:39:53:67 Replace HA cluster member status: Operation Succeeded.
PAGE 210
22 cryptoCfg cryptocfg --move -container crypto_target_container_name new_node_WWN [new_slot] cryptocfg --add -initiator crypto_target_container_name initiator_PWWN initiator_NWWN [[initiator_PWWN initiator_NWWN]...] cryptocfg --remove -initiator crypto_target_container_name initiator_PWWN [initiator_PWWN...] cryptocfg --add -LUN crypto_target_container_name LUN_Num | LUN_Num_Range initiator_PWWN initiator_NWWN [initiator_PWWN initiator_NWWN]...
PAGE 211
cryptoCfg 2 cryptocfg --resume_rekey crypto_target_container_name LUN_Num initiator_PWWN cryptocfg --discoverLUN crypto_target_container_name cryptocfg --show -container -all -cfg | -stat cryptocfg --show -container crypto_target_container_name -cfg | -stat cryptocfg --show -tapepool -all | -label pool_label | -num pool_num -cfg | -stat cryptocfg --show -LUN crypto_target_container_name LUN_Num initiator_PWWN -cfg | -stat cryptocfg --show -rekey -all cryptocfg --show -rekey crypto_target_container_name cr
PAGE 212
22 cryptoCfg CTC configuration uses a transaction model. Configuration changes must be committed before they take effect. Use the cryptocfg --commit command to commit the transaction. Refer to section "5. Transaction management" for more information. This command set supports the following tasks: • Configure and manage CryptoTarget containers (CTCs). Create, move, or delete a CTC, add or remove initiators (hosts permitted to access the targets), or manually initiate a failback of an encryption engine.
PAGE 213
cryptoCfg - Encrypt existing data: disabled or enabled - Encryption algorithm: AES256-ECB (DF_compatible), AES256-GCM (native) or None (cleartext) - Key ID state: Read, Write, or Key ID not applicable 2 Rekey: disabled or enabled Key life: the key life span (in days) Volume/Pool label: the label for the tape volume or tape pool Internal EE LUN state: Encrypted, Cleartext, or Disabled (Data state is cleartext but metadata exists on the LUN, or vice versa.
PAGE 214
22 cryptoCfg • • • • • • • • • • Key life (in days); number of days until expiration Rekey status: numeric value Key expiration time Rekey session number: numeric value Percentage complete Rekey state: Read or write Phase Rekey role: primary, alternate Block size: numeric value Number of blocks: numeric value Current logical block address (LBA) being processed Use the --show -tapepool command to display tape pool configuration parameters for all Tape pools or for a specific tape pool.
PAGE 215
cryptoCfg - 2 Tape policy type: pool-based or LUN-based Key life: key lifespan in days Volume/pool label LUN state: Refer to the Fabric OS Encryption Administrator's Guide.
PAGE 216
22 cryptoCfg - Volume/pool label: user-defined label Rekey status: numeric value If rekey- or tape sessions are in progress, the command shows the following information: • • Number of rekey sessions in progress: numeric value For each rekey session the display includes the following parameters: - Rekey session number: numeric value Percent completion: numeric value Rekey state: Read or Write phase Use the --show -rekey command to display all rekey sessions in progress on the current node or for a s
PAGE 217
cryptoCfg • • 2 Number of rekey sessions in progress: numeric value For each rekey session the display includes the following parameters: - - - Rekey session number: numeric value Percent completion: numeric value Rekey state. Displays one of the following parameters:  Rekey Setup  LUN Prep  Key Update Operation in progress.
PAGE 218
22 cryptoCfg NOTES Encryption groups and HA clusters must be configured before performing any CryptoTarget container and Crypto LUN configurations. When adding a LUN to a CryptoTarget container, special attention should be paid to the input format. A LUN number can be entered either as a 16-bit (2 bytes) number in hex notation (for example, 0x07) or as a 64-bit (8 bytes) number in WWN format (for example, 00:07:00:00:00:00:00:00). Although the command does accept decimal input, it is not recommended.
PAGE 219
cryptoCfg 2 This operand is optional. You may add initiators at the time when the CTC is created or any time thereafter with the --add -initiator command. The following operands are required when specifying an initiator: initiator_PWWN Specifies the initiator port WWN. initiator_NWWN Specifies the initiator node WWN. --delete -container Deletes a specified CTC. This command removes the virtual target and associated LUNs from the fabric.
PAGE 220
22 cryptoCfg --add -initiator Adds one or more initiators to an existing CTC. An initiator that is added to a CTC facilitates discovering the LUNs of the target as exposed to these initiators. You must still add the initiators when you add the LUN to the CTC to enable access for these initiators. This command is valid only on the group leader.
PAGE 221
cryptoCfg 2 LUN policies are configured per HA or DEK cluster. For multi-path LUNs exposed through multiple target ports and thus configured on multiple CTCs on different EEs in an HA cluster or DEK cluster, the same LUN policies must be configured. Refer to the Fabric OS Administrator's Guide for more information. The following LUN policy parameters can be optionally set: -lunstate encrypted | cleartext Sets the encryption state of a specified disk LUN.
PAGE 222
22 cryptoCfg -newLUN Indicates that the LUN created does not contain any user data and will be part of a replication configuration. This operand is optional. The presence of this operand is incompatible with the -keyID, -key_lifespan, and -enable_rekey options. An RSA RKM must be configured and replication must be enabled (cryptocfg --set replication enabled) before invoking this command. Both primary and remote mirror LUNs must be added to their container with the -newLUN option.
PAGE 223
cryptoCfg • • 2 The -key_lifespan parameter cannot be modified for tape LUNs once it has been set. Exercise caution when modifying policy parameters while tape sessions are in progress. For information on the impact of encryption policy changes while tape sessions are in progress, refer to the Fabric OS Encryption Administrator's Guide. --remove -LUN Removes a LUN from a specified CTC. You must stop all traffic to the LUN from all initiators accessing the LUN you are removing from the CTC.
PAGE 224
22 cryptoCfg This command is valid only on the group leader. The following operands are supported: -label pool_label | -num pool_num Specifies the tape pool volume label or alternately the tape pool ID. This is a user-defined identifier, which must be unique within the encryption group and should match the tape pool label or ID that is configured on the tape backup application. The tape pool label can consist of any combination of characters.
PAGE 225
cryptoCfg 2 --manual_rekey Performs a manual rekeying of a specified LUN associated with a specified CTC. Manual rekeying is performed in both online and offline fashion depending on whether or not the host is online or host I/O is present. If any policy-based rekeying operation is currently in progress, this command aborts with a warning message. This command is valid only on the group leader.
PAGE 226
22 cryptoCfg --show -container Displays all CTCs in the encryption group. This command is valid on all nodes. The following operands are supported: -all -cfg Displays the configuration for all containers in the encryption group. -all -stat Displays the runtime status for all containers hosted on the local node only. crypto_target_container_name Displays information for the specified CryptoTarget container. If the -stat parameter is specified with this operand, the CTC must be hosted on the local node.
PAGE 227
cryptoCfg 2 --show -rekey Displays information about rekey sessions in progress. This command is valid on all nodes. The following operands are mutually exclusive: -all Lists all rekey sessions in progress on the current node. crypto_target_container_name Lists all rekey sessions in progress for a specified CryptoTarget container. You may further specify either one of the following operands: LUN_Num Lists all rekey sessions in progress for a specific Crypto LUN of the specified CryptoTarget container.
PAGE 228
22 cryptoCfg LUN_Num Specifies the number of the LUN whose metadata needs to be reread. initiator_PWWN Specifies the initiator port WWN for the specified LUN. --reclaimWWN Reclaims the WWNs of the specified member node or encryption engine. This command removes the WWNs from the specified entity. Once removed you can reallocate the WWNs. The reclaim operation is disruptive and prompts for confirmation.
PAGE 229
cryptoCfg 2 nscamshow for remote switches: Switch entry for 2 state rev owner known v611 0xfffc01 Device list: count 13 Type Pid COS PortName NodeName NL 0208d3;3;20:0c:00:06:2b:0f:72:6d;20:00:00:06:2b:0f:72:6d; FC4s: FCP PortSymb:[55]"LSI7404XP-LC BR A.1 03-01081-02D FW:01.03.06 Port 1" Fabric Port Name: 20:08:00:05:1e:34:e0:6b Permanent Port Name: 20:0c:00:06:2b:0f:72:6d Port Index: 8 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No b.
PAGE 230
22 cryptoCfg Number of host(s): 1 Configuration status:committed Host: 10:00:00:00:c9:2b:c9:3a \ 20:00:00:00:c9:2b:c9:3a VI: 20:02:00:05:1e:41:4e:1d \ 20:03:00:05:1e:41:4e:1d Number of LUN(s): 0 Operation Succeeded 5. Discover the LUNs seen by the initiators in the CryptoTarget container.
PAGE 231
cryptoCfg 2 Rekey: disabled Internal EE LUN state: Encryption enabled Encryption algorithm: AES256-XTS Key ID state: Read write Key ID:3a:21:6a:bd:f2:37:d7:ea:6b:73:f6:19:72:89:c6:4f Key creation time: Sun Jun 1 20:21:32 2008 New LUN: No Replication LUN type: Primary Operation Succeeded 9. Display Crypto LUN configuration.
PAGE 232
22 cryptoCfg To display the tape pool configuration: FabricAdmin:switch> cryptocfg --show -container -all -cfg Encryption group name: brocade Number of Container(s): 2 Container name: pc21_stk10k Type: tape EE node: 10:00:00:05:1e:53:8a:28 EE slot: 0 Target: 50:01:04:f0:00:b2:ea:6c 50:01:04:f0:00:b2:ea:6b VT: 20:00:00:05:1e:53:8a:24 20:01:00:05:1e:53:8a:24 Number of host(s): 1 Configuration status: committed Host: 10:00:00:06:2b:0f:41:0c 20:00:00:06:2b:0f:41:0c VI: 20:02:00:05:1e:53:8a:24 20:03:00:05:1e:5
PAGE 233
cryptoCfg 2 To display CryptoTarget container runtime status information For a disk LUN with rekeying enabled: FabricAdmin:switch> cryptocfg --show -tapepool \ -LUN my_disk_tgt 0x0 10:00:00:db:69:78:93:0e -stat Container name: my_disk_tgt Type: disk EE node: 10:00:00:05:1e:53:75:01 EE slot: 0 Target: 21:00:00:04:cf:6e:58:2c \ 20:00:00:04:cf:6e:58:2c Target PID: 0107d5 VT: 20:28:00:05:1e:53:74:fd \ 20:29:00:05:1e:53:74:fd VT PID: 012805 Number of host(s): 1 Number of rekey session(s):1 Host: 10:00:00:db:69
PAGE 234
22 cryptoCfg Encryption format: Encrypt existing data: Rekey: Key ID: Key life: Rekey status: Operation Succeeded native enabled enabled not available 300 (days) 0 To display all tape sessions in progress on the local node: FabricAdmin:switch> cryptocfg --show -tape_sessions -all Number of tape session(s): 2 Container name: apps92 EE node: 10:00:00:05:1e:43:ee:00 EE slot: 2 Target: 50:03:08:c0:9c:e5:a0:01 50:03:08:c0:9c:e5:a0:00 Target PID: 8e0100 VT: 20:00:00:05:1e:53:77:e8 20:01:00:05:1e:53:77:e8 VT P
PAGE 235
cryptoCfg 2 To reclaim all WWNs associated with a member node when no containers are present on the node: switch:admin> cryptocfg --reclaimWWN -membernode 10:00:00:05:33:13:7a:e8 Warning: WWN reclaim operation may result in momentary IO disruption. Make sure that the Membernodes are not hosting any container. ARE YOU SURE (yes, y, no, n): [no] y Operation succeeded. Please use "cryptocfg --commit" to commit the configuration.
PAGE 236
22 cryptoCfg OPERANDS The cryptoCfg transaction management function has the following operands: --help transcfg Displays the synopsis for the transaction management function. --commit Commits the transaction. This command saves the defined configuration to nonvolatile storage. Changes are persistent across reboots and power cycles. This command overwrites existing configuration parameters and therefore prompts for confirmation.
PAGE 237
cryptoCfg • • • OPERANDS 2 Device decommissioning is supported only with the LKM and RKM key vaults. Decommissioning of tape devices or snap drive volumes is currently no supported. Decommissioning does not automatically delete the keys. You must manually delete the keys from the key vault to complete the operation. This command has the following operands: --help -decommission Displays the command usage help for the device decommissioning commands.
PAGE 238
22 cryptoCfg 2. Display the key IDs to be deleted manually from the keyvault switch:admin> cryptocfg --show -decommissionedkeyids Please Delete these keyed from the vault: 76:a0:01:f2:34:6e:44:cc:35:e9:be:71:64:ca:5e:90 switch:admin> cryptocfg --show vendorspecifickeyid aa:8b:91:b0:35:6f:da:92:8a:72:b3:97:92:1b:ca:b4 uuid = b7e07a6a-db64-40c2-883a-0bc6c4e923e6 3. Manually delete the keys from the vault. This step requires accessing the Key Vault GUI and deleting the keys manually. 4.
PAGE 239
dataTypeShow 2 dataTypeShow Displays sample data stream types used in some diagnostic commands. SYNOPSIS DESCRIPTION NOTES OPERANDS datatypeshow [-seed value] Use this command to display sample data stream types used in diagnostic commands. There are 25 different sample data types. The command displays an example of each data stream. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 240
22 date date Displays or sets the switch date and time. SYNOPSIS DESCRIPTION date ["newdate"] Use this command to display or set the date and time. All switches maintain current date and time in flash memory. Date and time are used for logging events. Normal switch operation does not depend on the date and time; a switch with incorrect date values continues to function properly. This command sets a common date and time for the entire fabric.
PAGE 241
date EXAMPLES 2 To display the current date and time and then modify it: switch:admin> date Thu Mar 24 17:15:00 UTC 2011 switch:admin> date "03224182011" Thu Mar 24 18:20:26 UTC 2011 SEE ALSO errShow, ficonCupSet, ficonCupShow, portLogShow, tsClockServer, tsTimeZone, upTime Fabric OS Command Reference 53-1001764-01 215
PAGE 242
22 dbgShow dbgShow Displays current values of debug and verbosity levels of the specified module. SYNOPSIS DESCRIPTION NOTES OPERANDS dbgshow [module_name] Use this command to display the current values of debug and verbosity levels of the specified module. If no module name is specified, this command displays a listing of all modules along with debug and verbosity levels. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 243
defZone 2 defZone Sets or displays the default zone access mode. SYNOPSIS DESCRIPTION defzone [--noaccess | --allaccess | --show] Use this command to display or set the Default Zone access mode. Setting the Default Zone mode initializes a zoning transaction (if one is not already in progress), and create reserved zoning objects. A default zone controls device access when zoning is not enabled.
PAGE 244
22 defZone A cfgSave, cfgEnable, or cfgDisable command must be performed subsequent to the use of this command to commit the changes and distribute them to the fabric. If a cfgSave is performed and the fabric is already in the No Access default zone state, a cfgDisable is sent to the fabric. For example: • • defzone --allaccess cfgsave An audit log record is generated for each use of this command. --show Displays the current state of the default zone access mode.
PAGE 245
diagClearError 2 diagClearError Clears the diagnostics failure status. SYNOPSIS diagclearerror [[--slot] slot] -all DESCRIPTION Use this command to clear the diagnostics failure status. When used without operands, this command clears all port failure flags. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 246
22 diagDisablePost diagDisablePost Disables the power-on self-test (POST). SYNOPSIS DESCRIPTION NOTES diagdisablepost Use this command to disable POST. A reboot is not required for this command to take effect. Use the diagPost command to display the current POST status, and use diagEnablePost to enable POST. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 247
diagEnablePost 2 diagEnablePost Enables the power-on self-test (POST). SYNOPSIS DESCRIPTION diagenablepost Use this command to enable POST. A reboot is not required for this command to take effect. POST includes two phases: POST Phase I mainly tests hardware and POST Phase II tests system functionality. Use the diagPost command to display the current POST status, and use diagDisablePost to disable POST.
PAGE 248
22 diagHelp diagHelp Displays diagnostic command information. SYNOPSIS DESCRIPTION diaghelp Use this command to display a short description of diagnostic commands. Use default operands when running diagnostics commands. Non-default settings require detailed knowledge of the underlying hardware and are intended for support personnel only. Contact support if you want to use these operands. NOTES The diagHelp command displays diagnostic commands that may not be available.
PAGE 249
diagPost 2 diagPost Displays the diagnostic power-on self-test (POST) configuration. SYNOPSIS DESCRIPTION NOTES diagpost Use this command to display the current POST configuration. Use diagEnablePost or diagDisablePost to modify the POST configuration. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 250
22 diagRetry diagRetry Sets or displays diagnostic retry mode. SYNOPSIS DESCRIPTION diagretry [mode | -show] Use this command to enable retry mode if the mode value is nonzero and to disable the retry mode if the mode value is 0. The mode value is saved in nonvolatile memory until you change the mode. Changes made by this command do not require a reboot to take effect. Retry mode modifies the behavior of the diagnostic test methods, power-on self-test (POST), and burn-in scripts.
PAGE 251
diagShow 2 diagShow Displays diagnostics status. SYNOPSIS DESCRIPTION NOTES OPERANDS diagshow [--slot number] [-uports itemlist] [-bports itemlist] [-use_bports value] Use this command to display the diagnostics status for the specified list of blade or user ports. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 252
22 distribute distribute Distributes data to switches in a fabric. SYNOPSIS DESCRIPTION distribute -p policy_list -d switch_list Use this command to distribute data to a specified list of switches in the fabric.
PAGE 253
distribute 2 To distribute the Switch Connection Control Policy, Fabric Configuration Server Policy, and Password database to all domains in the fabric that support the distribute feature: switch:admin> distribute -p "SCC;FCS;PWD" -d "*" Wildcard domains are: 1 3 5 To distribute the FCS policy, and the Password database to all domains in the fabric that support the distribute feature: switch:admin> distribute -p "FCS;PWD" -d "*" To distribute the AUTH and FCS policies to all switches in the fabric that
PAGE 254
22 dlsReset dlsReset Disables Dynamic Load Sharing (DLS). SYNOPSIS DESCRIPTION dlsreset Use this command to disable Dynamic Load Sharing. If DLS is turned off, load sharing calculations are used only to place new routes. Once placed, existing routes are never moved from one output E_Port to another, unless the original output E_Port is no longer a recognized path to the remote domain. Optimal balance is rarely achieved with this setting.
PAGE 255
dlsSet 2 dlsSet Enables Dynamic Load Sharing (DLS) without frame loss. SYNOPSIS dlsset dlsset --enable -lossless dlsset --disable -lossless dlsset --help DESCRIPTION Use this command to enable or disable Dynamic Load Sharing (DLS) in the event of a fabric change, to configure DLS without frame loss, and to display the DLS configuration.
PAGE 256
22 dlsSet The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS --enable -lossless Enables the Lossless feature. Frame loss is reduced while the path is rerouted. If DLS is set on the switch, this command adds the Lossless feature to the existing DLS legacy mode.
PAGE 257
dlsSet 2 DLS configuration commands on a switch with a port-based policy: switch:admin> dlsshow DLS is set by default with current routing policy DLS is set with Lossless enabled switch:admin> dlsreset DLS is not set switch:admin> dlsshow DLS is not set switch:admin> dlsset --enable -lossless DLS and Lossless are set switch:admin> dlsshow DLS is set with Lossless enabled switch:admin> dlsset Lossless is set (unchanged) switch:admin> dlsset --disable -lossless Lossless is not set switch:admin> dlsshow DLS
PAGE 258
22 dlsShow dlsShow Displays the setting of the Dynamic Load Sharing (DLS) option. SYNOPSIS DESCRIPTION dlsshow Use this command to display information about Dynamic Load Sharing configuration settings on the switch. Depending on the configuration, the command output displays one of the following messages: • DLS is set - DLS is enabled without the Lossless feature. Load sharing is reconfigured with every change in the fabric, and existing routes can be moved to maintain optimal balance.
PAGE 259
dnsConfig 2 dnsConfig Sets, displays, or removes domain name service (DNS) parameters. SYNOPSIS DESCRIPTION dnsconfig Use this command to display, set, or remove the domain name service parameters. The domain name service parameters are the domain name and the name server IP address for primary and secondary name servers. The dnsconfig command displays IPv4 and IPv6 addresses. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 260
22 enclosureShow enclosureShow Displays attributes of the switch enclosure. SYNOPSIS DESCRIPTION enclosureshow attribute Use this command to display attributes of the switch enclosure, including the vendor-specific enclosure identifier and the identifier of the enclosure interface to which the switch is attached. This command applies to products that are embedded in a blade server or storage chassis. Most options are platform-specific.
PAGE 261
enclosureShow 2 connfuse Information about whether or not the switch has a fuse.
PAGE 262
22 errClear errClear Clears all error log messages for all switch instances on this Control Processor (CP). SYNOPSIS DESCRIPTION NOTES errclear Use this command to clear all internal and external error log messages for all switch instances on the CP where the command is executed. For products with a single processor, all error log messages are cleared. For products that contain multiple processors, this command can be executed on either control processor.
PAGE 263
errDelimiterSet 2 errDelimiterSet Sets the error log start and end delimiters for messages sent to the console and syslog. SYNOPSIS DESCRIPTION errdelimiterset [-s "start_delimiter_string"] [-e "end_delimiter_string"] Use this command to set the error log start and end delimiters for log messages sent to the console and syslog. An empty string clears the start and the end delimiters (including the colon) so that they are not displayed.
PAGE 264
22 errDump errDump Displays the error log without pagination. SYNOPSIS DESCRIPTION errdump [-a | -r ] Use this command to dump external error log messages without any page breaks. When executed without operands, this command prints all error messages for the logical switch context in which the command is executed. When used with the -a option, the command prints the error messages for the entire chassis. The messages are dumped to the console without page breaks.
PAGE 265
errDump EXAMPLES 2 To display the error log for the chassis: switch:admin> errdump -a Fabric OS: v7.0.0 2010/12/17-22:29:17, [SEC-1203], 9036, CHASSIS, INFO,\ Spir_67, Login information : Login successful via \ TELNET/SSH/RSH. IP Addr: 10.106.7.62 2010/12/17-22:29:17, [ZONE-1022], 9037, CHASSIS, INFO, \ Spir_67, The effective configuration has changed to meh. 2010/12/17-22:29:17, [FABR-1001], 9041, CHASSIS, WARNING, \ Spir_67, port 0, incompatible Long distance mode.
PAGE 266
22 errFilterSet errFilterSet Sets a filter for an error log destination. SYNOPSIS DESCRIPTION errfilterset [-d destination][-v severity] Use this command to set a filter for an error log destination. A filter is set based on the severity level of the messages. When used without operands, this command displays the filters that are currently in configured. NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 267
errModuleShow 2 errModuleShow Displays all the defined error log modules. SYNOPSIS DESCRIPTION NOTES errmoduleshow Use this command to display a list of all defined error log modules. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 268
22 errShow errShow Displays the error log messages with pagination. SYNOPSIS DESCRIPTION errshow [-a | -r] Use this command to display external error log messages one at a time. When executed without operands, this command prints the error messages for the logical switch context in which the command is executed. When used with the -a option, the command prints the error messages for the entire chassis. The messages are displayed with page breaks. The -r operand displays the messages in reversed order.
PAGE 269
errShow EXAMPLES 2 To display the error log for the chassis: switch:admin> errshow -a Fabric OS: v6.4.0 2010/08/25-10:10:41, [SEC-1203], 9036, CHASSIS, INFO, \ Spir_67, Login information : Login successful via \ TELNET/SSH/RSH. IP Addr: 10.106.7.62 [Type to continue, Q to stop: 2010/08/25-10:13:41, [ZONE-1022], 9037, CHASSIS, INFO,\ Spir_67, The effective configuration has changed to meh.
PAGE 270
22 exit exit DESCRIPTION SEE ALSO 244 See logout.
PAGE 271
fabRetryShow 2 fabRetryShow Displays the retry count of the fabric commands. SYNOPSIS DESCRIPTION fabretryshow Use this command to display the retry count of the fabric commands.
PAGE 272
22 fabRetryShow NOTES OPERANDS None EXAMPLES To display the retry count of Fabric OS Commands: SEE ALSO 246 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 273
fabricLog 2 fabricLog Displays (all users) or manipulates (admin) the fabric log. SYNOPSIS fabriclog -s | --show [dport] fabriclog -c | --clear [dport] fabriclog -d | --disable fabriclog -e | --enable fabriclog -r size | --resize size fabriclog -h | --help DESCRIPTION Use this command to display, clear, disable, enable, or resize the fabric log. When used with the --show option, this command displays the following information: Time Stamp Time of the event in the following format HH:MM:SS:MS.
PAGE 274
22 fabricLog A3 The non-Principal switch is processing an RDI. S0 The switch is in offline state. P Port state. Port states include the following: PO The port is offline. P1 The port is online. P2 Exchange Link Parameters (ELP) Accept Frame (ACC) received. P3 Link reset occurred on master or E_Port. I0 Trunk Initiator: Exchange Mark Timestamp (EMT) sent. I1 Trunk Initiator: Exchange Trunking Parameters (ETP) Accept Frame (ACC) received. I2 Trunk Initiator: ETP sent.
PAGE 275
fabricLog NOTES OPERANDS 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command has the following operands: -s | --show [dport] Displays the fabric log. Optionally displays the D_Port logs only. -c | --clear [dport] Clears the fabric log. Optionally clears the D_Port logs only. -d | --disable Disables the fabric log.
PAGE 276
22 fabricName fabricName Configures the fabric name parameter. SYNOPSIS fabricname --set fabric_name fabricname --clear fabricname --show fabricname --help DESCRIPTION Use this command to configure a name for the fabric. With Virtual Fabrics it is not uncommon to have multiple fabrics in a single chassis. These logical fabrics are identified by their Fabric ID. With the fabricName command, you can address a fabric by name. This command provides an option for addressing fabrics by name.
PAGE 277
fabricName 2 switch:user> fabricname --show Fabric Name: "my new fabric" To clear the fabric name: switch:user> fabricname --clear Fabric Name cleared! switch:user> fabricname --show Fabric Name is not configured SEE ALSO switchShow, fabricShow Fabric OS Command Reference 53-1001764-01 251
PAGE 278
22 fabricPrincipal fabricPrincipal Sets the principal switch selection mode. SYNOPSIS fabricprincipal --help | -h fabricprincipal [--show | -q] fabricprincipal --enable [ -priority | -p priority] [-force | -f ] fabricprincipal --disable fabricprincipal [-f] mode DESCRIPTION Use this command to set principal switch selection mode for a switch and to set priorities for principal switch selection.
PAGE 279
fabricPrincipal 2 0x01 Highest priority. This is a user-defined value 0x02 Switch was principal prior to sending or receiving a build fabric (BF) request. This value is generated by the switch to initiate a fabric reconfiguration. This value should not be assigned. 0x3 - 0xFE Priority value range. Choose a value in this range to indicate priority. Higher numbers mean lower priority. 0xFF Switch is not capable of acting as a principal switch. This is a user-defined value.
PAGE 280
22 fabricPrincipal To display the principal switch selection priority: switch:admin> fabricprincipal --show Principal Selection Mode: Enable Principal Switch Selection Priority: 0x10 SEE ALSO 254 fabricShow Fabric OS Command Reference 53-1001764-01
PAGE 281
fabricShow 2 fabricShow Displays fabric membership information. SYNOPSIS fabricshow [-membership | -chassis] fabricshow -help DESCRIPTION Use this command to display information about switches in the fabric. If the switch is initializing or is disabled, the message "no fabric" is displayed. Running this command on an FCR or edge switch does not provide any router information; running this command on an edge switch with the -membership option does provide router information.
PAGE 282
22 fabricShow NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command has the following operands: -membership Displays fabric membership information with additional details of the FC Router, if present in the fabric. -chassis Displays information about the chassis including chassis WWN and chassis name.
PAGE 283
fabricShow 2 To show additional details about the chassis: switch:admin> fabricshow -chassis Switch ID Name ENET IP Addr Chassis WWN Chassis Name --------------------------------------------------------------------4:fffc04 sw5100_126_128 10.38.17.126 10:00:00:05:1e:0e:eb:58 Brcd5100 5:fffc05 sw1500_127_128 10.38.17.
PAGE 284
22 fabStatsShow fabStatsShow Displays fabric statistics. SYNOPSIS DESCRIPTION fabstatsshow Use this command to display statistics for the fabric.
PAGE 285
fabStatsShow NOTES 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 286
22 fanDisable fanDisable Disables a fan unit. SYNOPSIS DESCRIPTION NOTES fandisable unit Use this command to disable a nonfaulty fan unit by setting the RPM speed to 0. This command is not available on nonbladed systems except for the Brocade 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 287
fanEnable 2 fanEnable Enables a fan unit. SYNOPSIS DESCRIPTION NOTES fanenable unit Use this command to set a previously disabled fan unit back to the default RPM speed. This command is not available on nonbladed systems except for the Brocade 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 288
22 fanShow fanShow Displays fan status and speed. SYNOPSIS DESCRIPTION fanshow Use this command to display the current status and speed of each fan in the system. Fan status is displayed as follows: OK Fan is functioning correctly. absent Fan is not present. below minimum Fan is present but rotating too slowly or stopped. above minimum Fan is rotating too quickly. unknown Unknown fan unit installed. faulty Fan has exceeded hardware tolerance and has stopped.
PAGE 289
faPwwn 2 faPwwn Manages fabric-assigned port world wide names.
PAGE 290
22 faPwwn A single port can be assigned up to two WWNs, one assigned automatically and one assigned by the user. Only one FA-PWWN can be active at any given time. The user-assigned FA-PWWN takes precedence over the automatically assigned FA-PWWN. This means, the switch will bind the user-assigned FA-PWWN to the port if both a user-assigned and an automatically assigned FA-PWWN are available.
PAGE 291
faPwwn 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS this command has the following operands: --enable Enables the FA-PWWN feature on the specified switch ports or AG ports. If a FA-PWWN is not available for the ports, this command automatically assigners FA-PWWNs to the ports.
PAGE 292
22 faPwwn all Specifies all ports on the logical switch. This operand is valid only with the --show option. --move Moves an active FA-PWWN from a source to the specified destination port. Use this command to move a server across switch ports. If the source port has both a user-assigned and an automatically assigned FA-PWWN, the user-assigned FA-PWWN will be moved to the destination port as a user-assigned FA-PWWN and replace any automatically assigned FA-PWWN that may be active on that port.
PAGE 293
faPwwn 2 To assign an user-assigned FA-PWWN to an AG port: fapwwn --assign -ag 12:34:56:78:90:12:23:45 -port 0 \ -v 11:22:33:44:55:66:77:88 To delete the active FA-PWWN of a switch port: fapwwn --delete -port 10 To delete the active FA-PWWN of an AG port: fapwwn --delete -ag 12:34:56:78:90:12:34:56 -port 10 To display the active FA-PWWN for a single FC port (the real device PWWN is hidden): fapwwn --show -port 10 ----------------------------------------------------------------------Port PPWWN VPWWN PID
PAGE 294
22 faPwwn 11:22:33:44:55:66:77:88 52:00:10:00:00:0f:50:32 2:00:10:00:00:0f:50:33 52:00:10:00:00:0f:50:38 (output split) 11403 Yes AG/User 11404 -- Yes Yes AG/Auto AG/Auto To display the active FA-PWWNs of all ports associated with a single AG (in the following example, one VPWWN is not unassigned): fapwwn --show -ag 10:00:00:05:1e:d7:3d:dc ----------------------------------------------------------AG Port Port Device Port WWN \ ----------------------------------------------------------10:00:00:05:1e
PAGE 295
fastBoot 2 fastBoot Reboots the Control Processor (CP), bypassing the Power-On Self-Test (POST). SYNOPSIS DESCRIPTION fastboot Use this command to perform a "cold reboot" (power off/restart) of the CP bypassing POST when the system comes back up. Bypassing POST can reduce boot time significantly. If POST was previously disabled using the diagDisablePost command, then fastBoot is the same as reBoot. The fastBoot operation is disruptive, and the command prompts for confirmation before executing.
PAGE 296
22 fastBoot To reboot a DCX without executing POST on startup (in the example, HA is enabled): switch:admin> fastboot Warning: This command is being run on a control processor (CP) based system and will cause the active CP to reboot. Are you sure you want to reboot the active CP [y/n]? y Broadcast message from root (pts/0) Sun Feb 28 19:49:45 2010...
PAGE 297
fcipChipTest 2 fcipChipTest Tests functionality of components in the FCIP complex. SYNOPSIS DESCRIPTION NOTES fcipchiptest [--slot slot] [-testtype type] [-unit number] Use this command to verify the internal registers and memory of the network processor, FCIP FPGA, compression processor, and GigPHY. This command is supported only on the Brocade FR4-18i. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 298
22 fcipChipTest CHIP_TEST_IMAGE_VER_ERR CHIP_TEST_TIMEOUT_ERR CHIP_TEST_HEARBEAT_ERR CHIP_TEST_INVALID_RESULT EXAMPLES To run all tests on slot 7 and GbE port 1: switch:admin> fcipchiptest --slot 7 -unit 1 -testtype 0 Running fcipchiptest .............. Test Complete: fcipchiptest Pass 1 of 1 Duration 0 hr, 1 min & 15 sec (0:1:15:351). passed.
PAGE 299
fcipHelp 2 fcipHelp Displays FCIP command information. SYNOPSIS DESCRIPTION NOTES fciphelp Use this command to display a listing of Fibre Channel over IP (FCIP) commands with short descriptions for each command. FCIP commands require an FCIP license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 300
22 fcipLedTest fcipLedTest Exercises the GbE port LEDS on the Brocade 7800 and FX8-24. SYNOPSIS DESCRIPTION fcipledtest [slot | all] Use this command to exercise the GbE port LEDs on the Brocade 7800 and FX8-24. This test cycles through the port LEDs by lighting GREEN and then flashing GREEN on all ports for 3 seconds. As the test continues the ports turn AMBER and then flashing AMBER for 3 seconds. The LEDs turn off when the test has finished. You must disable the switch before running this command.
PAGE 301
fcipPathTest 2 fcipPathTest Tests the data path of the FCIP complex. SYNOPSIS fcippathtest [--slot slot] [-lb_mode mode] [-nframes count] fcippathtest [--slot slot] [-unit number] [-path mode] [-nframes count] [-length data_length] [-compress mode] DESCRIPTION Use this command to verify the data paths in the FCIP complex. All data path modes run tests by comparing Fibre Channel frames or data packets transmitted from and received by the network processor due to the designated loopback.
PAGE 302
22 fcipPathTest 2 External (SERDES) loopback 7 Backend bypass and port loopback -path mode Specifies the loopback mode for the test on the Brocade FR4-18i only. By default, fcipPathTest uses the PHY and central ASIC loopback modes.
PAGE 303
fcipPathTest EXAMPLES 2 To run the test on slot 2 with PHY loopback sending 10 frames: switch:admin> fcippathtest --slot 2 -path 2 -nframes 10 Running fcippathtest .............. Test Complete: fcippathtest Pass 10 of 10 Duration 0 hr, 1 min & 50 sec (0:1:50:942). passed.
PAGE 304
22 fcoe fcoe Manages and displays FCoE configuration.
PAGE 305
fcoe 2 --enable Enables the specified FCoE port. --loginshow Displays information about the devices logged in to the specified FCoE port. --fcmapset Configures the FCMAP values for Fabric Provided MAC Addresses (FPMA) for the specified VLANs. -vlan vid Specifies the VLAN for which to set the FCMAP. fcmapid Specifies the FCMAP to be set. --fcmapunset Unsets the FCMAP for a specified VLAN. Devices previously logged in are disconnected. -vlan vid Specifies the VLAN ID for which the FCMAP is unset.
PAGE 306
22 fcoe (Trunk port, master 2 2 850200 id (Trunk port, master 3 3 850300 id (Trunk port, master 4 4 850400 id (Trunk port, master 5 5 850500 id (Trunk port, master 6 6 850600 id (Trunk port, master 7 7 850700 id (Trunk port, master 8 8 850800 -9 9 850900 -10 10 850a00 -11 11 850b00 -12 12 850c00 -13 13 850d00 -14 14 850e00 -15 15 850f00 -16 16 851000 -17 17 851100 -18 18 851200 -19 19 851300 -20 20 851400 -(output truncated) is Port N8 is Port N8 is Port N8 is Port N8 is Port N8 is Port N8 is Port 10G 10
PAGE 307
2 fcoe 18 ENABLED 20:12:00:05:1e:76:60:80 19 ENABLED 20:13:00:05:1e:76:60:80 20 ENABLED 20:14:00:05:1e:76:60:80 21 ENABLED 20:15:00:05:1e:76:60:80 (output truncated) 0 0 0 0 FCoE FCoE FCoE FCoE VF-Port VF-Port VF-Port VF-Port 00:05:1e:76:60:8a 00:05:1e:76:60:8b 00:05:1e:76:60:8c 00:05:1e:76:60:8d 128 128 128 128 To display FIP and FCMAP configurations on the Brocade 8000: switch:admin> fcoe --fipcfgshow FIP Unsolicited Advertisement Interval = 0 ======================================== VLAN fcmap ==
PAGE 308
22 fcoeLoginCfg fcoeLoginCfg Manages or displays the FCoE login configuration.
PAGE 309
fcoeLoginCfg 2 --transshow Displays the current configuration transaction in progress fabric-wide. --transabort Aborts the FCoE login configuration transaction currently in progress. --purge Purges the specified entries from the effective configuration. Specify one or both of the following operands: -conflicting Purges all conflicting login groups and conflicting VN_Port mappings from the effective configuration.
PAGE 310
22 fcoeLoginCfg To perform a clean-up of the effective configuration: switch:admin> fcoelogincfg --purge -conflicting -nonexisting switch:admin> \ To disable the FCoE login configuration management on the switch: switch:admin> fcoelogincfg --disable switch:admin> fcoelogincfg --show Login management is disabled. Effective Configuration *********************** Login management is disabled.
PAGE 311
fcoeLoginGroup 2 fcoeLoginGroup Creates and manages FCoE login group configuration. SYNOPSIS fcoelogingroup --create lgname -self | -switch swwn [-allowall | member[;member] ...] fcoelogingroup --delete lgname fcoelogingroup --add lgname member[;member] ... fcoelogingroup --remove lgname wwn fcoelogingroup --rename lgname newlgname fcoelogingroup --help DESCRIPTION NOTES Use this command to create or modify the FCoE login management configuration fabric-wide.
PAGE 312
22 fcoeLoginGroup lgname Specifies the name of the login group. --add Adds VN_Port devices to the login group. lgname Specifies the name of the login group to which VN_Port devices are to be added. member Identifies the WWN of the VN_Port. The WWN must be specified in hex as xx.xx.xx.xx.xx.xx.xx.xx. If more than one member is specified, members must be separated by a semicolon. Only specified members are allowed to log in to the switch. --remove Removes VN_Port devices from the login group.
PAGE 313
fcPing 2 fcPing Sends a Fibre Channel Extended Link Service (ELS) Echo request to a pair of ports or to a single destination, or executes a SuperPing.
PAGE 314
22 fcPing NOTES The ELS Echo may not be supported on all devices. In such cases, the response could be either an ELS reject or a request timeout. By default, fcPing sends five ELS Echo requests to each port. When a device does not respond to the ELS Echo request, further debugging may be needed to determine, whether the device does not support ELS Echo, or whether the request is rejected for some other reason. Do not assume that the device is not connected.
PAGE 315
fcPing 2 --quiet Suppresses the diagnostic output. Only zoning information, if applicable, and the summary line are displayed. The following operands are valid only when fcPing is executed to perform a SuperPing: --allpaths [args] destination Executes a SuperPing that covers all available paths to the specified destination. The number of actual paths covered depends on two other parameters that you can optionally specify.
PAGE 316
22 fcPing Pinging 21:00:00:20:37:25:ad:05 [0x211e8] with 12 bytes of data: Request rejected Request rejected Request rejected Request rejected Request rejected 5 frames sent, 0 frames received, 5 frames rejected, 0 frames timeout Round-trip min/avg/max = 0/0/0 usec To display one device that accepts the request and another device that does not respond to the request: switch:admin> fcping 0x020800 22:00:00:04:cf:75:63:85 Source: 0x20800 Destination: 22:00:00:04:cf:75:63:85 Zone Check: Zoned Pinging 0x2080
PAGE 317
fcPing 2 Permanent Port Name: 20:07:00:05:1e:35:10:7f Port Index: 5 Share Area: No Device Shared in Other AD: No Redirect: No Partial: NO N 370501; 3;10:00:00:00:c9:3f:7c:b8;20:00:00:00:c9:3f:7c:b8; na FC4s: FCP NodeSymb: [44] "Emulex LP1050 FV1.81A1 DV5-5.
PAGE 318
22 fcPing Successfully completed superping for all paths SWITCH3--> SWITCH4 STATUS --------------------------------------------------------(2/7,2/EMB)[2] (30/EMB,30/8)[128] (40/9, 40/EMB)[128] SUCCESS Successfully completed superping for all paths To execute a SuperPing and print statistical coverage of each ISL and internal port along the potential paths (in the example, a few errors are recorded on the ISLs 3/205->2/25, 3/204->2/27, 2/42->101/3, and 2/1->101/8, but the internal port analysis shows that
PAGE 319
fcPing 2 To execute a superPing with a coverage count of 1000 and a maxtries value of 5000 (in the example, the ISL (3/204->204/27), could not be covered 1000 times): switch:admin> fcping --allpaths -covcount 1000 -maxtries 5000 -printisl 165 \ Pinging(size:12 bytes) destination domain 165 through all paths | PATH SWITCH1--> SWITCH2--> SWITCH3--> \ ------------------------------------------------------------1.(3/EMB,3/205)[128] (207/25,207/42)[128] (101/3,101/16)[128]\ 2.
PAGE 320
22 fcpLogClear fcpLogClear Clears the FCPD debug information log. SYNOPSIS DESCRIPTION NOTES fcplogclear Use this command to clear the debug information logged by the Fibre Channel Protocol daemon (FCPD). The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 321
fcpLogDisable 2 fcpLogDisable Disables the FCPD debug information log. SYNOPSIS DESCRIPTION NOTES fcplogdisable Use this command to disable the logging of debug information by the Fibre Channel Protocol daemon (FCPD). The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 322
22 fcpLogEnable fcpLogEnable Enables the FCPD debug information log. SYNOPSIS DESCRIPTION NOTES fcplogenable Use this command to enable Fibre Channel Protocol daemon (FCPD) logging. Debug information logging is enabled by default. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 323
fcpLogShow 2 fcpLogShow Displays the FCPD debug information log. SYNOPSIS fcplogshow DESCRIPTION Use this command to display the debug information logged at various stages during the Fibre Channel Protocol daemon (FCPD) device probing. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 324
22 fcpProbeShow fcpProbeShow Displays the Fibre Channel Protocol (FCP) probe information. SYNOPSIS DESCRIPTION fcpprobeshow [slot/]port Use this command to display the Fibre Channel Protocol daemon (FCPD) device probing information for the devices attached to the specified F_Port or FL_Port. This information includes the number of successful logins and SCSI INQUIRY commands sent over this port and a list of the attached devices. For switches running Fabric OS v7.0.
PAGE 325
fcpRlsShow 2 fcpRlsShow Displays the Fibre Channel Protocol (FCP) Read Link Status (RLS) information. SYNOPSIS DESCRIPTION fcprlsshow [slot/]port Use this command to display the FCP RLS information for an F_Port or FL_Port. This information describes the number of loss-of-signal, loss-of-sync, CRC errors, and other failure events detected on the specified port.
PAGE 326
22 fcrBcastConfig fcrBcastConfig Displays or sets the broadcast frame forwarding option. SYNOPSIS fcrbcastconfig --show fcrbcastconfig --enable -f fabric_id fcrbcastconfig --disable -f fabric_id fcrbcastconfig --help DESCRIPTION NOTES OPERANDS Use this command to enable or disable the broadcast frame option or to display the current configuration. If no operands are specified, this command displays the usage. By default, frame forward option is disabled.
PAGE 327
fcrBcastConfig 2 To display the new configuration: switch:admin> fcrbcastconfig --show Broadcast configuration is enabled for FID: 2 128 SEE ALSO bcastShow, portRouteShow Fabric OS Command Reference 53-1001764-01 301
PAGE 328
22 fcrChipTest fcrChipTest Tests the functionality of FC Router FPGA. SYNOPSIS DESCRIPTION fcrchiptest [--slot slot] [-unit number] [-testtype type] Use this command to test the FC Router Field-programmable gate array (FPGA). This test verifies that all SRAM and register data bits in each ASIC can be independently written and read successfully. The method used is to write a walking 1 pattern to each location.
PAGE 329
fcrChipTest 2 2 All FC Router FPGAs DIAGNOSTICS When a failure is detected, the test might report one or more of the following: DMA_ALLOC_FAIL DMA_READ_ABORT DMA_READ_TIMEOUT CHIP_INIT_TIMEOUT BIST_TIMEOUT BIST_FAIL EXAMPLES To run all tests on slot 7 and FC Router FPGA 1: switch:admin> fcrchiptest --slot 7 -unit 1 -testtype 0 Running fcrchiptest .............. Test Complete: fcrchiptest Pass 1 of 1 Duration 0 hr, 0 min & 4 sec (0:0:4:351).
PAGE 330
22 fcrConfigure fcrConfigure Sets FC Router configuration parameters. SYNOPSIS DESCRIPTION fcrconfigure Use this command to configure FC Router parameters. This is an interactive command. Before you can execute this command, you must disable FC routing by using the fosConfig command and disable the switch with the switchDisable command. NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 331
fcrEdgeShow 2 fcrEdgeShow Displays the FIDs of all configured EX_Ports. SYNOPSIS fcredgeshow fcredgeshow [-fid FabricID] fcredgeshow --help DESCRIPTION Use this command without operand to display information about all Fabric IDs (FIDs) that have been created on the chassis and are assigned to EX_Ports. When a FID is specified, fcredgeshow displays information for all EX_Ports configured with the specified FID. For each FID, the command output includes the following: FID Fabric ID of the EX_Port.
PAGE 332
22 fcrEdgeShow To display the EX_Ports configured with a specified FID: switch:admin> fcredgeshow -fid 25 FID EX-port E-port Neighbor Switch (PWWN, SWWN ) ----------------------------------------------------------------25 11 244 20:f4:00:05:1e:38:a4:cb 10:00:00:05:1e:38:a4:cb To display a FID for which no EX_Ports are configured: switch:admin> fcredgeshow -fid 29 No EX-ports with FID 29 SEE ALSO 306 fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow, fcrFabricShow Fabric OS Comman
PAGE 333
fcrFabricShow 2 fcrFabricShow Displays the FC Routers on a backbone fabric. SYNOPSIS DESCRIPTION fcrfabricshow Use this command to display information about FC Routers that exist in an FC Router backbone fabric. The existing syntax is maintained for IPv6 support. When IPv6 addresses are not configured, the output of fcrFabricShow displays the IPv4 format. The message "No active FC Routers found" is displayed if no active FC Routers are present on the backbone fabric.
PAGE 334
22 fcrFabricShow EX_Port FID Neighbor Switch Info (enet IP, WWN, name) ------------------------------------------------------9 2 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3" 10 2 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3" FC Router WWN: 10:00:00:05:1e:39:51:67, Dom ID: 5, Info: 10.33.36.96, "Scimitar" EX_Port FID Neighbor Switch Info (enet IP, WWN, name) -------------------------------------------------------151 2 10.33.35.
PAGE 335
fcrLsan 2 fcrLsan Configures and displays LSAN policies. SYNOPSIS fcrlsan fcrlsan --add -enforce tag | -speed tag fcrlsan --remove -enforce tag | -speed tag fcrlsan --show -enforce | -speed | all fcrlsan --help DESCRIPTION Use this command to add or remove LSAN tags, or to display existing tags in the configuration. LSAN tagging optimizes an FC Router's behavior based on a specified subset of LSANS.
PAGE 336
22 fcrLsan --show Displays the specified tag from the LSAN tag configuration. --help Displays the command usage. -enforce tag Accepts only the LSANs from the edge fabric that matches the specified tag string into the local FCR database. A valid tag is a string of a maximum of eight characters. The maximum configurable enforced tags is eight. -speed tag Allows the FCR to always import these target devices to the hosts specified in the LSANs that match the speed tag.
PAGE 337
fcrLsanCount 2 fcrLsanCount Displays or sets the maximum LSAN count. SYNOPSIS DESCRIPTION fcrlsancount [max_lsan_count] Use this command to set or display the maximum number of LSAN zones that can be configured on the edge fabric. By default, the maximum LSAN count is set to 3000, which is also the minimum. This command allows you to create up to 5000 LSANs on your edge fabric, if needed to support additional devices. The maximum number of supported LSAN devices is 10,000.
PAGE 338
22 fcrLsanMatrix fcrLsanMatrix Creates, modifies, and displays the LSAN fabric matrix or the FCR matrix.
PAGE 339
fcrLsanMatrix 2 NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS If no operands are specified, this command displays the persistent LSAN Zone matrix information. The following operands are optional: --add -lsan FID FID | -fcr wwn wwn Adds the pair of edge fabrics or FCR members that can access each other to the LSAN matrix cache.
PAGE 340
22 fcrLsanMatrix To zero out the database, execute the following commands: - fcrlsanmatrix --add -lsan 0 0 fcrlsanmatrix --add -fcr 00:00:00:00:00:00:00:00 00:00:00:00:00:00:00:00 fcrlsanmatrix --apply -all • In a dual backbone configuration, execute fcrlsanmatrix --fabricview on the FCR switches to confirm that the shared edge fabric FIDs have the same access in both backbones. • Execute fcrlsanmatrix --display -lsan | -fcr and fcrproxydevshow -a.
PAGE 341
fcrLsanMatrix 2 To view the persistent changes: switch:admin> fcrlsanmatrix -lsan LSAN MATRIX is activated Fabric ID 1 Fabric ID 2 -------------------------------------4 5 4 7 10 19 To view the LSAN Zone static and default/dynamic binding in the backbone where online fabrics are: 1, 2, 4, 5, 7, 8, 10: switch:admin> fcrlsanmatrix --fabricview -lsan LSAN MATRIX is activated Fabric ID 1 Fabric ID 2 -------------------------------------4 4 10 Default LSAN Matrix: 1 2 8 5 7 19 To display all proxy devices f
PAGE 342
22 fcrLsanMatrix To view all the static and the default/dynamic fabric binding in the backbone: switch:admin> fcrlsanmatrix --fabricview -lsan LSAN MATRIX is activated Fabric ID 1 Fabric ID 2 -------------------------------------52 78 52 82 78 82 Default LSAN Matrix: 57 91 To add FCR Bindings to the FCR matrix: switch:admin> fcrlsanmatrix --add -fcr 10:00:00:60:69:e2:09:fa \ 10:00:00:60:69:e2:09:fb switch:admin> fcrlsanmatrix --add -fcr 10:00:00:60:69:e2:09:fb \ 10:00:00:60:69:e2:09:fc To remove an entr
PAGE 343
fcrPathTest 2 fcrPathTest Tests the data path connection between the FC Router FPGA and the central ASIC. SYNOPSIS DESCRIPTION fcrpathtest [--slot slot] [-unit number] [-path mode] [-nframes count] Use this command to verify the data path connecting the FC Router field-programmable gate array (FPGA) and the central ASIC by sending frames from the FC Router FPGA port N transmitter, and looping the frames back into the same port's receiver. The loopback is accomplished at the parallel loopback path.
PAGE 344
22 fcrPathTest OPERANDS This command has the following operands: --slot slot Specifies the slot number on which the diagnostic operates. The default is 0 and operates on fixed-port-count products. -unit number Specifies the FC Router FPGA to test. By default, all FC Router FPGAs in the specified slot are tested. Valid number values include the following: 0 FC Router FPGA 0 1 FC Router FPGA 1 2 All FC Router FPGAs -path mode Specifies the loopback point for the test.
PAGE 345
fcrPathTest 2 DIAG-TIMEOUT The port failed to receive back a frame that was sent out. This can be caused by a faulty SFP or indicate deeper problems in the main board or ASIC. Check for a faulty SFP. Replace the SFP if necessary. DIAG-XMIT The specified port failed to transmit frames. This usually indicates an ASIC failure. Replace the blade or the switch.
PAGE 346
22 fcrPhyDevShow fcrPhyDevShow Displays the FC Router physical device information. SYNOPSIS DESCRIPTION fcrphydevshow [-a][-f FID][-w wwn][-c][-d] Use this command to display the physical (real) devices that are configured to be exported to other fabrics. A device is considered to be configured to be exported to another fabric if it is a member of an LSAN zone.
PAGE 347
fcrPhyDevShow 2 local failure the number of times the device login failed because of missing LSAN zones within the device fabric. remote failure the number of times the device login failed due to missing LSAN zones within the remote fabric.
PAGE 348
22 fcrProxyConfig fcrProxyConfig Displays or configures proxy devices presented by an FC Router. SYNOPSIS DESCRIPTION fcrproxyconfig [-s importedFID devWWN slot] [-r importedFID devWWN] Use this command to display or set the persistent configuration of proxy devices presented by the local FC Router. When used without operand, this command displays the persistent proxy device configuration; otherwise, it sets the specified attributes to its new value.
PAGE 349
fcrProxyConfig 2 If no proxy device WWN is stored in any slot for all edge fabrics, the following message is displayed: "All slots empty." NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 350
22 fcrProxyDevShow fcrProxyDevShow Displays FC Router proxy device information. SYNOPSIS DESCRIPTION fcrproxydevshow [-a][-f fabricid][-w wwn] Use this command to display the proxy devices presented by FC Router EX_Ports and information about the proxy devices. A proxy device is a virtual device presented in to a fabric by an FC Router. A proxy device represents a real device on another fabric.
PAGE 351
fcrProxyDevShow 2 -a -f fabricid Display the proxy devices in the specified fabric for all FC Routers in the same backbone fabric whether or not they are relevant to this FC Router. -f fabricid Display the proxy devices in the specified fabric that are relevant to this FC Router. -w wwn Displays proxy devices with the specified port WWN.
PAGE 352
22 fcrResourceShow fcrResourceShow Displays FC Router physical resource usage. SYNOPSIS DESCRIPTION fcrresourceshow Use this command to display the FC Router-available resources. The maximum number allowed versus the currently used is displayed for various resources. The command output includes: LSAN Zones The maximum versus the currently used LSAN zones. LSAN Devices The maximum versus the currently used LSAN device database entries. Each proxy or physical device constitutes an entry.
PAGE 353
fcrResourceShow OPERANDS None EXAMPLES To display the resource usage for the local FC Router: 2 switch:admin> fcrresourceshow Daemon Limits: Max Allowed Currently Used ---------------------------LSAN Zones: 3000 22 LSAN Devices: 10000 1208 Proxy Device Slots: 10000 2 WWN Pool Size Allocated ---------------------------Phantom Node WWN: 8192 3790 Phantom Port WWN: 32768 6446 Port Limits: Max proxy devices: Max NR_Ports: 2000 1000 Currently Used(column 1: proxy, column 2: NR_Ports): 48 | 0 0 49 | 0 0 5
PAGE 354
22 fcrRouterPortCost fcrRouterPortCost Displays or sets an FC Router port cost. SYNOPSIS DESCRIPTION fcrrouterportcost [[slot/]port] [cost] Use this command to set or display the cost of the FC Router ports. You can set the cost of the link to one of two fixed values: 1000 or 10000. The option 0 sets the cost of the link to the default value based on link type (EX/VEX). The router module chooses the router port path based on the minimum cost per fabric ID (FID) connection.
PAGE 355
fcrRouterPortCost 2 To display the cost on an EX_Port: switch:admin> fcrrouterportcost 7/10 0 switch:admin> fcrrouterportcost 7/10 Port Cost -----------------------7/10 1000 To set the cost of an EX_Port and display the result: switch:admin> fcrrouterportcost 7/10 10000 switch:admin> fcrrouterportcost 7/10 Port Cost -----------------------7/10 10000 To set the default cost on the EX_Port: switch:admin> fcrrouterportcost 7/10 0 switch:admin> fcrrouterportcost 7/10 Port Cost -----------------------7/10 10
PAGE 356
22 fcrRouteShow fcrRouteShow Displays FC Router route information. SYNOPSIS DESCRIPTION fcrrouteshow Use this command to display routes through the FC Router backbone fabric to accessible destination fabrics. An FC Router backbone fabric is the fabric that contains the E_Ports of this platform and routes inter-fabric traffic between imported fabrics, creating a meta-SAN. There are FC Router ports that reside on the backbone fabric. These ports are known as NR_Ports.
PAGE 357
fcrXlateConfig 2 fcrXlateConfig Configures a translate (xlate) domain's domain ID and state of persistence for both the EX_Port-attached fabric and the backbone fabric.
PAGE 358
22 fcrXlateConfig NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. Information displayed is not related to the entire backbone. The FC Router displays only connections to an edge fabric for which there are translate domain IDs.
PAGE 359
fcrXlateConfig 2 --show stalexd [importedFID] Displays stale translate domains associated with the specified Fabric ID (1-128). A translate domain becomes stale when the remote edge fabric for which this translate domain was created in the specified edge fabric becomes unreachable. When issued without specifying an imported FID, this command lists all stale translate domains in all edge fabrics connected to the FCR.
PAGE 360
22 fddCfg fddCfg Manages the fabric data distribution configuration parameters. SYNOPSIS fddcfg --showall fddcfg --localaccept policy_list fddcfg --localreject policy_list fddcfg --fabwideset policy_list DESCRIPTION Use this command to manage the fabric data distribution configuration parameters. These parameters control the fabric-wide consistency policy. Switches can be locally configured to allow or reject a security policy.
PAGE 361
fddCfg 2 --localreject policy_list Configures the switch to reject distributions of the specified policies in policy_list. However, a database cannot be rejected if it is specified in the fabric-wide consistency policy. The policies in policy_list must be separated by semicolons and enclosed in quotation marks; for example, "SCC;DCC". --fabwideset policy_list Sets the fabric-wide consistency policy. A database that is set to reject distributions cannot be specified in the fabric-wide consistency policy.
PAGE 362
22 fdmiCacheShow fdmiCacheShow Displays abbreviated remote FDMI device information, according to remote domain ID. SYNOPSIS DESCRIPTION fdmicacheshow Use this command to display FDMI cache information for remote domains only. The state of each remote domain, identified by its domain ID, is shown to be unknown, known, unsupported, or error. The revision of the switch also displays, followed by the world wide name of the switch. For HBAs, only the HBA identifiers and registered port lists are displayed.
PAGE 363
fdmiShow 2 fdmiShow Displays detailed FDMI device information. SYNOPSIS DESCRIPTION fdmishow Use this command to display FDMI information for all HBAs and ports. Detailed FDMI information is displayed for local HBAs and ports. This information includes the HBA with its corresponding ports, along with their respective attributes. Only abbreviated FDMI information is shown for HBA and ports on remote switches.
PAGE 364
22 ficonCfg ficonCfg Configures the specified FICON database. SYNOPSIS ficoncfg --set database port ficoncfg --reset database ficoncfg --help DESCRIPTION NOTES OPERANDS Use this command to configure a FICON database on a specified port. Refer to ficonShow for a description of the database content. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 365
ficonClear 2 ficonClear Clears the records from the specified FICON database. SYNOPSIS DESCRIPTION NOTES OPERANDS ficonclear database Use this command to remove records from the local FICON database. The command effect depends on the specified database. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 366
22 ficonCupSet ficonCupSet Sets FICON-CUP parameters for a switch. SYNOPSIS ficoncupset fmsmode enable | disable ficoncupset modereg bitname 0 | 1 ficoncupset MIHPTO seconds ficoncupset CRP PID CHID DESCRIPTION Use this command to set FICON-CUP (Control Unit Port) parameters for a switch. All parameters can be set while the switch is online. Changes made by this command take effect immediately. A reboot is not required. Use ficonCupShow to display current settings.
PAGE 367
ficonCupSet 2 ACP Alternate control prohibited HCP Host control prohibited MIHPTO Sets the missing interrupt handler primary timeout (MIHPTO) value for the CUP. The following operand is required: seconds Specifies the timeout value in seconds. Provide a decimal value in the range between 15 and 600 seconds. The default timeout value is 180 seconds. If a value greater than 63 seconds is specified, the timeout value is rounded down to the closest value divisible by 10.
PAGE 368
22 ficonCupSet 082300 082400 082400 612400 612400 SEE ALSO 342 1C 1A 1B 1E 1F Oper Reset Reset Reset Reset Prim ficonCupShow Fabric OS Command Reference 53-1001764-01
PAGE 369
ficonCupShow 2 ficonCupShow Displays FICON-CUP parameters for a switch. SYNOPSIS ficoncupshow fmsmode ficoncupshow modereg [bitname] ficoncupshow MIHPTO ficoncupshow LP DESCRIPTION NOTES Use this command to display FICON-CUP (Control Unit Port) parameters for a switch. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 370
22 ficonCupShow EXAMPLES To display the FMS mode for the switch: switch:user> ficoncupshow fmsmode fmsmode for the switch: Enabled To display the mode register for the switch: switch:user> ficoncupshow modereg POSC UAM ASM DCAM ACP HCP -----------------------------1 0 1 1 1 0 To display the ASM bit in the mode register for the switch: switch:user> ficoncupshow modereg ASM ASM --1 To display the MIHPTO value for the CUP: switch:user> ficoncupshow MIHPTO MIHPTO for the CUP: 60 seconds To display the lo
PAGE 371
ficonHelp 2 ficonHelp Displays a list of FICON support commands. SYNOPSIS DESCRIPTION NOTES ficonhelp Use this command to display a list of FICON support commands with descriptions. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 372
22 ficonShow ficonShow Displays the contents of the specified FICON database. SYNOPSIS DESCRIPTION ficonshow database [fabric] Use this command to display the contents of a FICON database. The ficonShow database operand is the name of the database to display. If the fabric operand is absent, the command displays the members of the named database that are local to the switch on which the command was issued.
PAGE 373
ficonShow 2 Incident Count Displays the incident count. This number increases by 1 for each incident within the individual switch. Link Incident Description Same as Link Incident Type. Link Incident Type Indicates the link incident type as one of the following: • • • • • Bit-error-rate threshold exceeded Loss of signal or synchronization NOS recognized Primitive sequence timeout Invalid primitive sequence for port state Listener PID Same as PID. Listener Port Type Same as Port Type.
PAGE 374
22 ficonShow 0x40 Other FC-4s including FCP and updates. 0x60 FC-SB-2 and updates and other FC-4s including FCP and updates. 0x80 FC-4 support not specified. 0xa0 Reserved. 0xc0 Reserved. 0xe0 Vendor-specific. Byte BB Possible values include the following: 0x00 Unspecified class. 0x01 Direct access storage device, if it is a storage port; otherwise, not channel-to-channel capable. 0x02 Magnetic tape, if it is a storage port; otherwise, a reserved field for a channel port.
PAGE 375
ficonShow 2 0xID CHIPID if channel port has registered with the switch. 0xPN If switch has registered with the channel, PN represents the FL port number. Part Number Displays the switch chassis part number. PID Displays the 24-bit Fibre Channel port address in 0xDDAAPP format. DD is Domain ID. AA is Area ID. PP is AL_PA ID. Plant of Manufacture Displays the manufacturer plant name or code. Port Physical port number.
PAGE 376
22 ficonShow Time Stamp Displays the timestamp, expressed in date format. Type Same as Port Type. Type Number Displays the type number of the self-describing node. It also describes the machine type. NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command has the following operands: database Specify the database to display.
PAGE 377
ficonShow 2 tag: 102b } {Fmt Type PID Registered Port WWN Registered Node WWN \ 0x18 N 502e00 50:05:07:64:01:40:0f:ca 50:05:07:64:00:c1:69:ca \ flag Parm 0x10 0x200105 Type number: 002064 Model number: 101 Manufacturer: IBM Plant of Manufacture: 02 Sequence Number: 0000000169CA tag: 052e } } To display the local LIRR database: switch:admin> ficonshow LIRR The Local LIRR database has 0 entries.
PAGE 378
22 ficonShow To display the local RLIR database: switch:user> ficonshow RLIR { {Fmt Type PID Port Incident Count TS Format Time Stamp 0x18 N 502e00 46 1 Time server Mon Jan 13 04:29:33 2003 Port Status: Link not operational Link Failure Type: Loss of signal or synchronization Registered Port WWN Registered Node WWN Flag Node Parameters 50:05:07:64:01:40:0f:ca 50:05:07:64:00:c1:69:ca 0x50 0x200105 Type Number: 002064 Model Number: 101 Manufacturer: IBM Plant of Manufacture: 02 Sequence Number: 0000000169CA
PAGE 379
ficonShow N 0x502b00 2 50:05:07:64:01:00:15:8d } } } The Local ILIR database has 2 entries.
PAGE 380
22 fipsCfg fipsCfg Configures FIPS (Federal Information Processing Standards) mode. SYNOPSIS fipscfg --enable fips | selftests | bootprom] [-nowarn] fipscfg --disable selftests | bootprom] [-nowarn] fipscfg --zeroize [-nowarn] fipscfg --show | --showall fipscfg --force fips fipscfg --verify fips DESCRIPTION Use this command to configure FIPS mode on the switch. In this mode, only FIPS-compliant algorithms are allowed.
PAGE 381
fipsCfg 2 --zeroize [-nowarn] Erases all passwords, shared secrets, private keys, etc. in the system. --show | --showall Displays the current FIPS configuration. --force fips This option enables FIPS mode even if prerequisites are not met, except under the following two conditions: • • In a dual-CP system if HA is not in sync between the two CPs. If selftests is in a disabled state. --verify fips Scans the prerequisites for enabling FIPS and print the failure/success cases.
PAGE 382
22 fipsCfg To attempt enabling FIPS when prerequisites are not met: switch:admin> fipscfg --enable fips SelfTests mode is not enabled. Root account is enabled. Authentication uses MD5 hash algorithm. Authentication uses DH group 0. Telnet port number <23> for the policy \ is in permit state. HTTP port number <80> for the policy \ is in permit state. RPC port number <898> for the policy \ is in permit state.
PAGE 383
fipsCfg 1. 2. 3. 4. 2 Delete all existing CSRs. Delete all existing certificates. Reset the certificate filename to none. Disable secure protocols. Continue (yes, y, no, n): [no] Operation cancelled. Zeroizing Radius configuration: RADIUS configuration does not exist. LDAP configuration does not exist. Zeroizing IPSec static SA configuration. Zeroizing SSH key. Permission denied to perform this operation. Failed to zeroize SSH public key.
PAGE 384
22 firmwareCommit firmwareCommit Commits switch firmware. SYNOPSIS DESCRIPTION firmwarecommit Use this command to commit a firmware download to a CP. This command copies an updated firmware image to the secondary partition and commits both partitions of the CP to an updated version of the firmware. This must be done after each firmware download and after the switch has been rebooted and a sanity check is performed to make sure the new image is fine.
PAGE 385
firmwareDownload 2 firmwareDownload Downloads firmware from a remote host, a local directory, or a USB device. SYNOPSIS To invoke the command in interactive mode: firmwaredownload To download FOS firmware over a network: firmwaredownload [ -s [ -b | -n ] ] [ -p ftp | scp | sftp ] [ -c ] [ -r ] host, user, pfile, passwd To download SAS/SA firmware over a network (deprecated): firmwaredownload -a sas | dmm | application [ -t slot[,slot]...
PAGE 386
22 firmwareDownload All systems supported by this firmware have two partitions of nonvolatile storage (primary and secondary) to store two firmware images. This command always downloads the new image to the secondary partition and then swaps partitions so the secondary partition becomes the primary. By default, firmwareDownload reboots the system and activates the new image. Finally, the command performs a firmwareCommit automatically to copy the new image to the other partition.
PAGE 387
firmwareDownload 2 -n Disables autocommit mode. When autocommit mode is disabled, the firmwareCommit command must be executed manually to propagate the downloaded image to both partitions of the storage device. host Specify a valid FTP or SSH server name or IP address. IPV4 and IPv6 addresses are supported. The firmware is downloaded from the specified host. If a host is not specified, the firmware is considered accessible on a local directory.
PAGE 388
22 firmwareDownload -e Removes all of the installed SA images in the system during SAS firmware download. By default, downloading a SAS image does not remove the installed SA images. If this option is specified, the installed SA images are removed. This option is only valid with the -a sas option. This operand is no longer supported as of Fabric OS v7.0.0. -o Bypasses the checking of Coordinated HotCode Load (HCL).
PAGE 389
firmwareDownload 2 of this command. This command will cause a warm/non-disruptive boot on the active CP, but will require that existing telnet, secure telnet or SSH sessions sessions be restarted. To download firmware interactively: switch:admin> firmwaredownload Server Name or IP Address: 192.168.32.10 User Name: admin File Name: ~admin/dist/FOS7.0.
PAGE 390
22 firmwareDownloadStatus firmwareDownloadStatus Displays the status of a firmware download. SYNOPSIS firmwaredownloadstatus DESCRIPTION Use this command to display an event log that records the progress and status of events during a firmware download. The event log is created by the firmware download process and is kept until you issue another firmwareDownload command. A timestamp is associated with each event.
PAGE 391
firmwareDownloadStatus 2 [5]: Fri Mar 25 16:58:44 2011 Slot 7 (CP1, standby): Firmware commit operation has started to restore the secondary partition. [6]: Fri Mar 25 16:58:45 2011 Slot 7 (CP1, standby): The firmware commit operation has started. This may take up to 10 minutes. [7]: Fri Mar 25 17:05:34 2011 Slot 7 (CP1, standby): The commit operation has completed successfully.
PAGE 392
22 firmwareKeyShow firmwareKeyShow Displays the public key used for signed firmware validation. SYNOPSIS firmwarekeyshow DESCRIPTION This command displays the contents of the public key used for validating the integrity of firmware images when signed firmware validation is enabled. NOTES A firmware key should be installed on every switch as a part of the Fabric OS installation. The presence of a firmware key does not imply that the firmware signature is checked during firmwareDownload.
PAGE 393
firmwareRestore 2 firmwareRestore Restores the former active firmware image. SYNOPSIS DESCRIPTION firmwarerestore Use this command to restore the former active Fabric OS firmware image. This command can only be run if autocommit was disabled during the firmwareDownload process. After a firmwareDownload and a reboot (with autocommit disabled), the downloaded firmware becomes active. If you do not want to commit the firmware and want to restore the former firmware, issue the firmwareRestore command.
PAGE 394
22 firmwareShow firmwareShow Displays the firmware version and download history. SYNOPSIS firmwareshow firmwareshow --history firmwareshow --help DESCRIPTION Use this command to display the firmware versions and the firmware download history. The command shows the firmware versions on both the primary and secondary partitions of the storage device. When this command is issued while a firmware download is in process, an appropriate warning message is displayed.
PAGE 395
firmwareShow 2 To display the firmware download history: switch:admin> firmwareshow --history Firmware version history SEE ALSO Sno Date & Time Switch Name Slot PID 1 Fri Feb 18 12:58:06 2011 CDCX16 7 1556 FOS Version Fabos Version v7.0.0d 2 Wed Feb 16 07:27:38 2011 Fabos Version v7.0.
PAGE 396
22 fmMonitor fmMonitor Manages frame monitor configuration.
PAGE 397
fmMonitor 2 This command requires an Advanced Performance Monitoring license. A Fabric Watch license is optional. Without a Fabric Watch license, you cannot use the alert mechanism, but you can still configure frame monitors and observe the counters. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, mirror ports, GbE ports, and FCoE ports. OPERANDS --create Creates a user-defined frame type to be monitored. A frame type is defined by a unique name and bit pattern.
PAGE 398
22 fmMonitor -pat bit_pattern Specifies a unique combination of values in the first 64 bytes of a frame. The syntax for the bit patterns is as follows: "offset,bitmask, value;[offset, bitmask,value;] ...;" for example, "12,0xFF,0x08;4,0xFF,0x06;40,0xFF,0x08, 0x28;".
PAGE 399
fmMonitor 2 -port port_list Specifies one or more ports on which to install the monitor for the specified frame type. This operand is optional; if omitted, the monitor is installed on all eligible ports. A port list can consist of the following: • • One or more single ports, preceded by a slot number followed by a slash (/) on bladed systems. Multiple ports must be separated by a comma, for example, 8 or 5/8 or 3,5,8.
PAGE 400
22 fmMonitor --delete frame_type Deletes an existing frame type. This command removes the entire configuration, including configured threshold and associated actions. It also removes any frame monitors of the specified type from all ports. This operand is not valid with predefined frame types. --clear frame_type -port port_list Clears the ports on which the specified frame type is monitored from the persistent configuration. --show Displays the specified frame type configuration.
PAGE 401
fmMonitor 2 To save the port configuration persistently: switch:admin> fmmonitor --save SCSI To delete the custom frame monitor "MyFrameMonitor" from all ports: switch:admin> fmmonitor --delmonitor MyFrameMonitor To delete the entire frame type configuration: switch:admin> fmmonitor --delete MyFrameMonitor To clear the counters for the SCSI2_READ monitor from ports 7-10: switch:admin> fmmonitor --clear SCSI2_READ -port 7-10 To display the existing frame types and associated bit patterns on the switch:
PAGE 402
22 fmMonitor -|scsi3reserve|N/A |0 -|ip |N/A |0 -|abts |N/A |0 -|baacc |N/A |0 000002|beta |0000000000000145|10 |None |None |None |None |Email |None |None |None |None |None |N/A |N/A |N/A |N/A |saved To display the number of frames of type ISCSI_RW per second during a five-second interval: switch:admin> fmmonitor --show SCSI_RW -port 1/0-47 -timeinterval 5 2011-02-18 15:52:02 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 ========================================================= slot 1: 630 0 0 0 0 0 0 0 0 0 6
PAGE 403
fosConfig 2 fosConfig Displays or modifies Fabric OS features. SYNOPSIS fosconfig --enable feature fosconfig --disable feature fosconfig --show DESCRIPTION Use this command to enable or disable a feature, or to display the current operating status of features on a switch. This command can be run while the switch is online. The following features are supported (refer to the Notes for limitations): • • • • • NOTES FC Routing service (see fcrConfigure) iSCSI service (not supported in Fabric OS v7.0.
PAGE 404
22 fosConfig ethsw Enables the Ethernet switch service on the switch. The Ethernet switch service is disabled by default. Enabling the Ethernet switch service does not disrupt the FC traffic. --disable feature Disables a feature on the switch. Valid values for feature include the following: fcr Disables the FC Routing service on the switch. All enabled EX_Ports and VEX_Ports on the switch must be offline for this command to succeed.
PAGE 405
fosConfig 2 To enable Virtual Fabrics: switch:admin> fosconfig --enable vf WARNING: This is a disruptive operation that \ requires a reboot to take effect. All EX ports will be disabled upon reboot. Would you like to continue [Y/N]y To disable Virtual Fabrics: switch:admin> fosconfig --disable vf WARNING: This is a disruptive operation that \ requires a reboot to take effect.
PAGE 406
22 fosExec fosExec Executes a command in a specified logical switch context. SYNOPSIS fosexec --fid FID -cmd "cmd [args]" fosexec --fid all [-force] -cmd "cmd [args]" DESCRIPTION Use this command to execute any Fabric OS command on a specified logical switch context or on all logical switches. The target logical switch is identified by its fabric ID (FID). When used with the --fid all option, the specified command is executed in all logical switches.
PAGE 407
fosExec 2 Default Switch: No, Address Mode 0] Index Slot Port Address Media Speed State Proto =================================================== 0 1 0 640000 -N8 No_Module FC 1 1 1 640100 -N8 No_Module FC 2 1 2 640200 -N8 No_Module FC To enable port 5/0 on all logical switches: switch:admin> fosexec --fid all -cmd "portenable 5/0" --------------------------------------------------"portenable" on FID 128: --------------------------------------------------"portenable" on FID 10: A port or ports is/are not
PAGE 408
22 fosExec To display the switch name for all logical switches without confirmation: switch:user> fosexec --fid all -force -cmd "switchname" -----------------------------------"switchname" on FID 10: switch_10 ----------------------------------"switchname" on FID 20: switch_20 SEE ALSO 382 setContext, userConfig Fabric OS Command Reference 53-1001764-01
PAGE 409
frameLog 2 frameLog Displays information about discarded frames. SYNOPSIS framelog --disable framelog --enable framelog --clear framelog --show [-txport [slot/]port] [-rxport [slot/]port] [-sid source_PID][-did destination_PID] [-sfid fabric_ID] [-dfid fabric_ID>] [-mode summary | dump] [-n num_items] DESCRIPTION Use this command to disable or re-enable the frame log, and to display detailed information about the discarded frames logged by the frame log.
PAGE 410
22 frameLog Type Reason for the frame discard. Frames can be discarded for a variety of reasons. The only discard reason currently handled by the frame log is timeout. Count The number of discarded frames logged in the frame log that have the log timestamp, TX port, RX port, SID, DID, SFID and DFID values listed on this line of output. Note that this count may be less than the actual number of such frames discarded, because the frame log cannot log the details of all discarded frames.
PAGE 411
frameLog 2 -sid source_PID Displays only the frames with the specified 24-bit source address in the FC header. The port ID (PID) must be written in hexadecimal and must be prefixed by 0x. -did destination_PID Displays only the frames with the specified 24-bit destination address in the FC header. The port ID (PID) must be written in hexadecimal and must be prefixed by 0x. -sfid fabric_ID Displays only the frames with the specified fabric ID as the source fabric ID.
PAGE 412
22 frameLog SEE ALSO 386 Jan 31 18:34:46 7/32 7/33 timeout 00 03 a0 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 a1 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Jan 31 18:34:46 7/32 7/33 timeout 00 03 a0 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 a1 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Jan 31
PAGE 413
fspfShow 2 fspfShow Displays Fabric Shortest Path First (FSPF) protocol information. SYNOPSIS DESCRIPTION fspfshow Use this command to display FSPF protocol information and internal data structures of the FSPF module. The command displays the following fields: version Version of the FSPF protocol. domainID Domain number of the local switch. switchOnline State of the local switch. domainValid TRUE if the domain of the local switch is currently confirmed. isl_ports Bit map of all ISL ports.
PAGE 414
22 fspfShow lsrDelayTo Link State Record delay time out value in milliseconds. lsrDelayCount Counter of delayed Link State Records. ddb_sem FSPF semaphore ID. event_sch FSPF scheduled events bit map. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 415
fspfShow f_ports[9] = f_ports[10] = f_ports[11] = f_ports[12] = seg_ports[0] = seg_ports[1] = seg_ports[2] = seg_ports[3] = seg_ports[4] = seg_ports[5] = seg_ports[6] = seg_ports[7] = seg_ports[8] = seg_ports[9] = seg_ports[10] = seg_ports[11] = seg_ports[12] = active_ports[0] = active_ports[1] = active_ports[2] = active_ports[3] = active_ports[4] = active_ports[5] = active_ports[6] = active_ports[7] = active_ports[8] = active_ports[9] = active_ports[10] active_ports[11] active_ports[12] minLSArrival = min
PAGE 416
22 fwAlarmsFilterSet fwAlarmsFilterSet Enables or disables alarms for Fabric Watch. SYNOPSIS DESCRIPTION NOTES fwalarmsfilterset [mode] Use this command to configure alarm filtering for Fabric Watch. By turning off the alarms, all nonenvironment class alarms are suppressed. By turning on the alarms, all class alarms are generated. This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 417
fwAlarmsFilterShow 2 fwAlarmsFilterShow Displays alarm filtering for Fabric Watch. SYNOPSIS DESCRIPTION NOTES fwalarmsfiltershow Use this command to display whether alarm filtering is enabled or disabled. This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 418
22 fwClassInit fwClassInit Initializes all classes under Fabric Watch. SYNOPSIS DESCRIPTION NOTES fwclassinit Use this command to initialize all classes under Fabric Watch. The command should only be used after installing a Fabric Watch license to start licensed Fabric Watch classes. Refer to the Fabric Watch Administrator's Guide for a list of supported Fabric Watch classes. This command requires a Fabric Watch license.
PAGE 419
fwConfigReload 2 fwConfigReload Reloads the Fabric Watch configuration. SYNOPSIS DESCRIPTION NOTES fwconfigreload Use this command to reload the Fabric Watch configuration. This command should only be used after downloading a new Fabric Watch configuration file from a host. This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 420
22 fwFruCfg fwFruCfg Displays or modifies FRU state alert configuration. SYNOPSIS DESCRIPTION NOTES fwfrucfg [--show] Use this command to configure states and actions for field-replaceable units (FRUs) and small form-factor pluggables (SFPs). Based on these configuration settings, Fabric Watch generates actions when a FRU or SFP state changes. For SFPs, Fabric Watch monitors state changes in following events: SFP inserted, SPP removed, SFP faulty.
PAGE 421
fwFruCfg WWN WWN SFP SFP Fru SEE ALSO 2 Alarm State: (0..31) [1] Alarm Action: (0..17) [1] Alarm State: (0..19) [0] Alarm Action: (0..
PAGE 422
22 fwHelp fwHelp Displays Fabric Watch command information. SYNOPSIS DESCRIPTION NOTES fwhelp Use this command to display the commands that configure Fabric Watch. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 423
fwMailCfg 2 fwMailCfg Displays and configures Fabric Watch email alerts. SYNOPSIS DESCRIPTION fwmailcfg Use this command to display or modify the configuration and status of the Fabric Watch email alert on the switch. Switch elements monitored by Fabric Watch are divided into classes, and e-mail alerts are based on the classes. Each class can configure up to five e-mail addresses as the alert message's receiver. Multiple e-mail addresses must be separated by a comma.
PAGE 424
22 fwMailCfg 9 : Filter Performance Monitor class 10 : Security class 11 : Resource Monitor class 12 : FRU Class 13 : Quit Select an item => : (0..
PAGE 425
fwMailCfg 2 4 : F/FL Port (Optical) class 5 : Resource class 6 : quit Select a class => : (1..6) [6] 6 Mail Recipient Information ____________________________________ Email Alert = disabled Mail Recipient = NONE 1 : Show Mail Configuration Information 2 : Disable Email Alert 3 : Enable Email Alert 4 : Send Test Mail 5 : Set Recipient Mail Address for Email Alert 6 : Quit Select an item => : (1..
PAGE 426
22 fwPortDetailShow fwPortDetailShow Displays the port information for specified user ports. SYNOPSIS DESCRIPTION fwportdetailshow [--p port] | [--s portState] Use this command to print the overall status of a specified port. The output of this command is different for IPv4 and IPv6 addresses. The overall status is calculated based on the following contributors: Port Errors LFA The number of link loss occurrences exceeding the limit for the time period.
PAGE 427
fwPortDetailShow 2 When used without operands, this command displays information for all ports. NOTES This command requires a Fabric Watch license. Port errors are not supported for virtual ports and SFP errors are not applicable for virtual ports. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 428
22 fwPortDetailShow To retrieve a port detail report for all ports in healthy state: switch:user> fwportdetailshow --s h Port Detail Report \ Report time: 05/21/2007 11:22:58 PM Switch Name: switch IP address: 192.168.163.
PAGE 429
fwSamShow 2 fwSamShow Generates switch availability monitor (SAM) report. SYNOPSIS DESCRIPTION NOTES fwsamshow Use this command to display a switch availability monitor (SAM) report. This report displays uptime and downtime for each port and enables you to check if a particular port is failing more often than the others. The information displayed includes total uptime, total downtime, number of faulty occurrences, and total percent of downtime for each port.
PAGE 430
22 fwSet fwSet Sets port persistence time. SYNOPSIS DESCRIPTION NOTES fwset --port --persistence seconds Use this command to set port persistence time, a parameters controlled by Fabric Watch. Port persistence time specifies the time in seconds during which a port must persistently be in a marginal state before being labeled as such. port persistence is a switch-wide parameter. Use portThconfig to display port persistence time. This command requires a Fabric Watch license.
PAGE 431
fwSetToCustom 2 fwSetToCustom Sets Fabric Watch thresholds and alarm levels to custom values. SYNOPSIS DESCRIPTION fwsettocustom Use this command to set threshold and alarm levels to custom values for all Fabric Watch classes and areas. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. • Factory default settings are automatically enabled. These settings vary depending on hardware platform, and cannot be modified.
PAGE 432
22 fwSetToCustom Trigger : Trigger : Default: TimeBase: Value : Trigger : Trigger : Buffer: Custom: Value : Default: Value : Above Action: None Below Action: Raslog,SNMP None 0 Above Action: None Below Action: Raslog,SNMP 20 10 Class: RESOURCE Area : FLASH ThLevel : Cust (Applied) ActLevel: Def High : Custom: TimeBase: None Value : 110 Trigger : Above Action: Raslog,SNMP Trigger : Below Action: Raslog Default: TimeBase: None Value : 90 Trigger : Above Action: Raslog,SNMP Trigger : Below Action: Raslog
PAGE 433
fwSetToDefault 2 fwSetToDefault Returns Fabric Watch thresholds and alarm levels to default values. SYNOPSIS DESCRIPTION fwsettodefault Use this command to return Fabric Watch thresholds and alarm levels to defaults for all classes and areas in Fabric Watch. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. • Factory default settings are automatically enabled. These settings vary depending on hardware platform and cannot be modified.
PAGE 434
22 fwSetToDefault Value : 0 Trigger : Above Action: None Trigger : Below Action: Raslog,SNMP Buffer: Custom: Value Default: Value : 20 : 10 Class: RESOURCE Area : FLASH ThLevel : Def ActLevel: Def High : Custom: TimeBase: Value : Trigger : Trigger : Default: TimeBase: Value : Trigger : Trigger : Low: Custom: TimeBase: Value : Trigger : Trigger : Default: TimeBase: Value : Trigger : Trigger : Buffer: Custom: Value : Default: Value : SEE ALSO 408 None 110 Above Action: Raslog,SNMP Below Action: Raslog
PAGE 435
h 2 h Displays shell history. SYNOPSIS h history DESCRIPTION OPERANDS EXAMPLES Use this command to view the shell history. The shell history mechanism is similar to the UNIX shell history facility. The h command displays the 20 most recent commands typed into the shell; the oldest commands are replaced as new ones are entered.
PAGE 436
22 haDisable haDisable Disables the High Availability feature. SYNOPSIS hadisable DESCRIPTION Use this command to disable the High Availability (HA) feature on a switch. If the HA feature is already disabled, this command does nothing. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 437
haDump 2 haDump Displays High Availability status information. SYNOPSIS DESCRIPTION hadump Use this command to display information about the status of the High Availability (HA) feature on a switch or a chassis.
PAGE 438
22 haDump NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. OPERANDS None EXAMPLES To view information about the High Availability feature status on a Brocade DCX 8510-8: switch:admin> hadump --------------------------------------TIME_STAMP: Mar 30 12:57:35.
PAGE 439
haEnable 2 haEnable Enables the High Availability feature. SYNOPSIS DESCRIPTION haenable Use this command to enable the High Availability (HA) feature on a switch. If the HA feature is already enabled, this command has no effect. If the HA feature is disabled, this command enables it. The standby CP reboots as part of the process. The command displays a warning message and prompts for confirmation before rebooting the CP.
PAGE 440
22 haFailover haFailover Forces the failover mechanism so that the standby control processor (CP) becomes the active CP. SYNOPSIS hafailover DESCRIPTION Use this command to force the failover mechanism to occur so that the standby CP becomes the active CP. In case the active and standby CPs are not synchronized or the system is not in redundant mode, the command aborts.
PAGE 441
haShow 2 haShow Displays control processor (CP) status. SYNOPSIS DESCRIPTION hashow Use this command to display the control processor status. The display includes the following information: • • • • • • Local CP state (slot number and CP ID), warm or cold, recovering or recovered. Remote CP state (slot number and CP ID). High Availability (enabled or disabled). Heartbeat (up or down).
PAGE 442
22 haShow OPERANDS None EXAMPLES To display CP status on a Brocade DCX 8510-8 with a healthy standby CP: switch:admin> hashow Local CP (Slot 7, CP1) : Active, Warm Recovered Remote CP (Slot 6, CP0) : Standby, Healthy HA Enabled, Heartbeat Up, HA State Synchronized SEE ALSO 416 haDisable, haEnable, haFailover Fabric OS Command Reference 53-1001764-01
PAGE 443
haSyncStart 2 haSyncStart Enables High Availability state synchronization. SYNOPSIS DESCRIPTION hasyncstart Use this command to enable the High Availability (HA) state synchronization. After issuing haSyncStop, the switch does not go back to sync start unless you perform one of the following actions: reboot the active CP, reboot the standby CP, insert a new standby CP (blade), or issue the haSyncStart command The time it takes for the HA sync to complete depends on the system configuration.
PAGE 444
22 haSyncStop haSyncStop Disables High Availability state synchronization. SYNOPSIS DESCRIPTION hasyncstop Use this command to temporarily disable High Availability (HA) synchronization. After issuing haSyncStop, the switch does not go back to sync start unless you perform one of the following actions: reboot the active CP, reboot the standby CP, insert a new standby CP (blade), or issue the haSyncStart command The time it takes for the HA sync to complete depends on the system configuration.
PAGE 445
help 2 help Displays command help information. SYNOPSIS help [command] help [-p | -page] help --help DESCRIPTION Use this command without operands to display an alphabetical listing of commands for which help is available. When used without an operand, the command listing displays without page break. Pipe the output through the Unix grep command to filter the output. Use the -page operand to display the commands for which help is available one page at a time. Press Enter to go to the next page.
PAGE 446
22 help auditcfg auditdump (output truncated) Tuning policy Modifies and displays audit log filter configuration.
PAGE 447
historyLastShow 2 historyLastShow Displays the latest entry in the field replaceable unit (FRU) history log. SYNOPSIS DESCRIPTION historylastshow Use this command to display the latest entry of the history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards. The type of FRU supported depends on the hardware platform. Each history record contains three lines of information.
PAGE 448
22 historyMode historyMode Displays the mode of the field replaceable unit (FRU) history log. SYNOPSIS DESCRIPTION historymode Use this command to display the mode of the history buffer, which records the insertion and removal of FRUs on a switch or chassis. This command supports two modes of handling new log entries once the history buffer has reached its maximum size: Rotating mode Any new entry exceeding the maximum buffer size overwrites the oldest entry in the log. This is the default mode.
PAGE 449
historyShow 2 historyShow Displays the entire field replaceable unit (FRU) history log. SYNOPSIS DESCRIPTION historyshow Use this command to display the entire history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and world wide name (WWN) cards. The type of FRU supported depends on the hardware platform. Each history record contains three lines of information.
PAGE 450
22 historyShow FAN Unit 3 Factory Part Number: Factory Serial Number: Inserted at Tue Aug 14 10:23:45 2001 20-123456-12 1013456800 WWN Unit 1 Factory Part Number: Factory Serial Number: Inserted at Tue Aug 14 11:03:45 2001 40-0000031-03 1013456800 SW BLADE Slot 3 Factory Part Number: Factory Serial Number: Removed at Tue Aug 14 12:10:09 2001 60-0001532-03 1013456800 CP BLADE Slot 6 Factory Part Number: Factory Serial Number: Removed at Tue Aug 14 13:45:07 2001 60-0001604-02 FP00X600128 SW BLADE Sl
PAGE 451
i 2 i Displays a process summary. SYNOPSIS DESCRIPTION i [processID] Use this command to display information about a specified process or about all processes running on the local switch. One line is displayed per process.
PAGE 452
22 i C Processor utilization for scheduling PRI Priority number of the process; higher numbers mean lower priority NI Nice value used in priority computation ADDR Memory address of the process SZ The total size of the process in virtual memory, in pages WCHAN The address of an event for which a process is sleeping (if blank, process is running) TTY The controlling terminal of the process (? displayed for no controlling terminal) TIME The cumulative execution time for the process CMD The command name of th
PAGE 453
iclCfg 2 iclCfg Enables or disables Inter-chassis links (ICL). SYNOPSIS iclcfg --enable slot/icl_group iclcfg --disable slot/icl_group iclcfg --persistentenable slot/icl_group iclcfg --persistentdisable slot/icl_group iclcfg --help DESCRIPTION NOTES Use this command to enable or disable an inter-chassis link (ICL) or to enable or disable an ICL persistently. The command enables or disables the ICL by enabling or disabling the ports associated with the link.
PAGE 454
22 iclCfg To disable the ICL for ports 16-31 persistently: switch:user> iclcfg --persistentdisable 8/1 To enable the ICL for ports 16-31 persistently: switch:user> iclcfg --persistentdnable 8/1 SEE ALSO 428 None Fabric OS Command Reference 53-1001764-01
PAGE 455
ifModeSet 2 ifModeSet Sets the link operating mode for a network interface. SYNOPSIS DESCRIPTION ifmodeset ["interface"] Use this command to set the link operating mode for a network interface. An operating mode is confirmed with a y or yes at the prompt. If the operating mode selected differs from the current mode, the change is saved and the command exits. Changing the link mode is not supported for all network interfaces or for all Ethernet network interfaces.
PAGE 456
22 ifModeSet Advertise 100 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 100 Mbps / Half Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Half Duplex (yes, y, no, n): [yes] y Committing configuration...done.
PAGE 457
ifModeShow 2 ifModeShow Displays the link operating mode and MAC address for a network interface. SYNOPSIS DESCRIPTION ifmodeshow interface Use this command to display the link operating mode and MAC address for a network interface. On the CP of a Brocade DCX or DCX-S4, this command supports eth0 and eth3 as interface parameters. On all other platforms, only eth0 is supported. The CP on a Brocade DCX or DCX-S4 has two external physical Ethernet management ports, eth1 and eth3.
PAGE 458
22 ifModeShow To display the active interface: ras010:root> ifmodeshow bond0 Currently Active Slave: eth0 SEE ALSO 432 ifModeSet Fabric OS Command Reference 53-1001764-01
PAGE 459
interfaceShow 2 interfaceShow Displays FSPF interface information. SYNOPSIS DESCRIPTION interfaceshow [slot/][port] Use this command to display the two data structures associated with FSPF interfaces (E_Ports) on the switch: • • The permanently allocated interface descriptor block (IDB). The neighbor data structure. This data structure is allocated when a switch port becomes an E_Port.
PAGE 460
22 interfaceShow downReason Type of last State Change Notification that caused this interface to go down. iState Current state of this interface. The state can be UP or DOWN. An interface in DOWN state does not have an allocated neighbor data structure and cannot be used to route traffic to other switches. state Current state of this interface. This E_Port is used to route traffic to other switches only if the state is NB_ST_FULL. lastTransition Time the last state changed on this interface.
PAGE 461
interfaceShow 2 helloTo Hello timeout value, in milliseconds. When this timeout expires, a Hello frame is sent to the neighbor switch through this port. rXmitTo Retransmission timeout value, in milliseconds. It is used to transmit topology information to the neighbor switch. If no acknowledgement is received within this value, the frame is retransmitted. nCmdAcc Total number of commands accepted from the neighbor switch. Number includes Hellos, Link State Updates (LSUs), and LSAs.
PAGE 462
22 interfaceShow When invoked without operands, this command displays the interface information for all ports on the switch (including non-E_Ports). EXAMPLES To display FSPF interface information: switch:user> interfaceshow 1/4 idbP = 0x1008b3d0 Interface 4 data structure: nghbP ifNo masterPort defaultCost cost delay lastScn lastScnTime upCount lastUpTime downCount lastDownTime downReason iState = = = = = = = = = = = = = = 0x1008c668 4 4 (self) 500 500 1 16 Apr 02 20:01:44.458 2 Apr 02 20:01:44.
PAGE 463
interfaceShow nHloOut attLsuOut nLsuOut attLsaOut nLsaOut SEE ALSO = = = = = 2 2 3 3 2 2 nbrStateShow, portShow, switchShow Fabric OS Command Reference 53-1001764-01 437
PAGE 464
22 iodReset iodReset Disables in-order delivery (IOD) on a switch. SYNOPSIS DESCRIPTION iodreset Use this command to disable in-order delivery enforcement on the local switch. IOD is disabled by default, and can only be disabled after it has been enabled with the iodSet command. This command disables the legacy IOD enforcement only. Disabling IOD allows faster rerouting after a fabric topology change, but it may cause out-of-order delivery of frames during fabric topology changes.
PAGE 465
iodSet 2 iodSet Enables in-order delivery (IOD). SYNOPSIS iodset iodset --help DESCRIPTION Use this command to enforce in-order delivery of frames during a fabric topology change. In a stable fabric, frames are always delivered in order, even when the traffic between switches is shared among multiple paths. However, when topology changes occur in the fabric (for instance, a link goes down), traffic is rerouted around the failure and some frames might be delivered out of order.
PAGE 466
22 iodShow iodShow Displays the in-order delivery (IOD) setting. SYNOPSIS DESCRIPTION NOTES iodshow Use this command to display the IOD setting on the switch. By default, IOD is disabled. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 467
ipAddrSet 2 ipAddrSet Sets the Ethernet and FC IP addresses. SYNOPSIS ipaddrset [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-cp cp_number | -chassis] [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-slot slot] [-eth0 | -eth1] [--add x.x.x.x/n | --delete] ipaddrset [-slot slot] -gate [--add x.x.x.
PAGE 468
22 ipAddrSet • • Use the -auto and -noauto options to enable or disable stateless IPv6 autoconfiguration. Use the -ls option with appropriate arguments to set or delete the IPv4 Fibre Channel address and prefix for the IPFC interface of a logical switch. In a Virtual Fabric environment, each logical fabric is represented by a separate IPFC network interface. Each of these network interfaces can be assigned a unique IPv4 FC address and prefix.
PAGE 469
ipAddrSet 2 -ipv6 [-auto | -noauto] Enables or disables stateless IPv6 autoconfiguration on a switch or chassis. When autoconfiguration is enabled, the host automatically performs configuration of IPv6 addresses and periodic nondisruptive reconfiguration. By default, autoconfiguration is disabled. -ls FID Specifies the logical fabric ID for which to configure an IPFC network interface. The FID is a decimal number.
PAGE 470
22 ipAddrSet To configure an IPv4 FC address for the IPFC interface associated with a logical switch with fabric ID 123: switch:admin> ipaddrset -ls 123 --add 11.1.2.4/24 IP address is being changed...Done. To verify the IPv4 FC address for the logical switch: switch:admin> ipaddrshow CHASSIS Ethernet IP Address: 10.32.220.10 Ethernet Subnetmask: 255.255.240.0 CP0 Ethernet IP Address: 10.32.220.11 Ethernet Subnetmask: 255.255.240.0 Host Name: cp0 Gateway IP Address: 10.32.208.
PAGE 471
ipAddrSet 2 To enable DHCP on a standalone, non-AP platform: switch:admin> ipaddrset Ethernet IP Address [192.168.74.102]: Ethernet Subnetmask [255.255.255.0]: Gateway IP Address [192.168.74.
PAGE 472
22 ipAddrShow ipAddrShow Displays IP address information for a switch or control processor (CP). SYNOPSIS ipaddrshow ipaddrshow [-cp cp_number] | -chassis ipaddrshow -slot slot [-eth0 | -eth1 | -gate DESCRIPTION Use this command to display the IP addresses configured in the system. The -cp option displays the IP address for a specified CP on modular platforms, or use the command without arguments to display the IP address on a standalone switch, or the IP addresses for both CPs on a chassis.
PAGE 473
ipAddrShow 2 Refer to the RFC 2462 specification for more information. On modular platforms with intelligent blades, the addresses configured for each slot can be shown with the -slot option. On standalone platforms, all command options are ignored. NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 474
22 ipAddrShow chassis 0 stateless fd00:60:69bc:63:205:1eff:fe39:e45a/64 preferred chassis 0 stateless fec0:60:69bc:63:205:1eff:fe39:e45a/64 preferred cp 0 stateless fd00:60:69bc:63:205:1eff:fe40:6230/64 preferred cp 0 stateless fec0:60:69bc:63:205:1eff:fe40:6230/64 preferred cp 1 stateless fd00:60:69bc:63:205:1eff:fe39:ff2a/64 preferred cp 1 stateless fec0:60:69bc:63:205:1eff:fe39:ff2a/64 preferred IPv6 Gateways: cp 0 fe80:60:69bc:63::3 cp 0 fe80:60:69bc:63::1 cp 0 fe80:60:69bc:63::2 cp 1 fe80:60:69bc:63:
PAGE 475
ipFilter 2 ipFilter Manages the IP filter policies.
PAGE 476
22 ipFilter OPERANDS This command has the following operands: policyname Specifies an IP filter policy name. The policy name is a unique string composed of a maximum of 20 alphanumeric or underscore characters. The default_ipv4 and default_ipv6 names are reserved for default IP filter policies. The policy name is case-insensitive and is always stored as lower case. The policy type identifies the policy as an IPv4 or IPv6 filter. You can create a maximum of eight IP filter policies.
PAGE 477
ipFilter 2 The following arguments are supported with the --addrule option: -sip source_IP Specifies the source IP address. For filters of type IPv4, the address must be a 32-bit address in dot notation, or a CIDR-style IPv4 prefix. For filters of type IPv6, the address must be a 12- bit IPv6 address in any format specified by RFC3513, or a CIDR-style IPv6 prefix.
PAGE 478
22 ipFilter To add a new rule to the policy and specify the source IP address, destination port, and protocol, and to permit the rule: switch:admin> ipfilter --addrule ex1 \ -sip fec0:60:69bc:60:260:69ff:fe80:d4a -dp 23 -proto tcp -act permit \ To display all existing IP filter policies: switch:admin> ipfilter --show Name: Rule 1 2 3 4 5 6 7 8 9 10 11 12 default_ipv4, Type: ipv4, Source IP Protocol any tcp any tcp any tcp any tcp any tcp any tcp any tcp any udp any udp any udp any tcp any udp State: a
PAGE 479
ipFilter 11 12 any any tcp udp Name: Rule 1 2 3 4 5 6 7 8 9 10 11 12 default_ipv6, Type: ipv6, State: defined Source IP Protocol Dest Port any tcp 22 any tcp 23 any tcp 897 any tcp 898 any tcp 111 any tcp 80 any tcp 443 any udp 161 any udp 111 any udp 123 any tcp 600 - 1023 any udp 600 - 1023 2 600 - 1023 permit 600 - 1023 permit Action permit permit permit permit permit permit permit permit permit permit permit permit Name: ex1, Type: ipv6, State: active Rule Source IP Protocol Dest Port Action 1
PAGE 480
22 ipFilter switch:admin> ipfilter --show Name: default_ipv4, Type: ipv4, State: active Name: default_ipv4, Type: ipv4, State: active Rule Source IP Protocol Dest Port 1 any tcp 22 2 any tcp 23 3 any tcp 897 4 any tcp 898 5 any tcp 111 6 any tcp 80 7 any tcp 443 8 any udp 161 9 any udp 111 10 any udp 123 11 any tcp 600 - 1023 12 any udp 600 - 1023 Name: ex2, Type: ipv4, State: defined Rule Source IP Protocol 1 10.32.69.
PAGE 481
ipFilter 12 any udp 600-1023 P I/P 2 any Name: ex2, Type: ipv4, State: defined (modified) Rule Source_IP Proto Dest_Port Action Flow Destination_IP 1 10.32.69.99 tcp 23 P FWD 10.32.69.
PAGE 482
22 ipSecConfig ipSecConfig Configures Internet Protocol security (IPSec) policies for Ethernet management interfaces.
PAGE 483
ipSecConfig • • 2 Flush existing SAs from the kernel SA database (SADB). Display policy parameters. Representation of IP addresses When configuring IPSec policies, IP addresses and ports must be specified in the following format: IP address IPv4 addresses are expressed in dotted decimal notation consisting of numeric characters (0-9) and periods (.), for example, 203.178.141.194.
PAGE 484
22 ipSecConfig type Specifies the policy to be created. Supported policies include the following: policy ips Creates or modifies an IPSec policy. This policy determines the security services afforded to a packet and the treatment of a packet in the network. An IPSec policy allows classifying IP packets into different traffic flows and specifies the actions or transformations performed on IP packets on each of the traffic flows.
PAGE 485
ipSecConfig 2 -mode tunnel | transport Specifies the IPSec transform mode. In tunnel mode, the IP datagram is fully encapsulated by a new IP datagram using the IPSec protocol. In transport mode, only the payload of the IP datagram is handled by the IPSec protocol inserting the IPSec header between the IP header and the upper-layer protocol header. -sa-proposal name Specifies the SA proposal to be included in the transform. You must create the SA proposal first before you can include it in the transform.
PAGE 486
22 ipSecConfig -tag name Specifies a name for the SA. This is a user-generated name. The name must be between 1 and 32 characters in length, and may include alphanumeric characters, dashes (-), and underscores (_). This operand is required. -protocol ah | esp Specifies the IPSec protocol. Encapsulating Security Payload (ESP) provides confidentiality, data integrity and data source authentication of IP packets, and protection against replay attacks.
PAGE 487
ipSecConfig 2 -id identifier Specifies the local identifier. The switch is identified by its IPv4 or IPv6 address. -remoteid identifier Specifies the peer identifier. The remote peer is identified by its IPv4 or IPv6 address. -enc algorithm Specifies the encryption algorithm.
PAGE 488
22 ipSecConfig The following operands are optional (use secCertUtil to import the key files to the local and remote systems) -psk file Specifies the preshared key filename. -pubkey file Specifies the public key filename (in X.509 PEM format). -privkey file Specifies the private key filename (in X.509 PEM format). -peerpubkey file Specifies the peer public key filename (in X.509 PEM format). -lttime number Specifies the key lifetime in seconds. If a lifetime is not specified, the keys do not expire.
PAGE 489
ipSecConfig 2 -ipsec ah | esp Specifies the IPSec protocol. Encapsulating Security Payload (ESP) provides confidentiality, data integrity and data source authentication of IP packets, and protection against replay attacks. Authentication Header (AH) provides data integrity, data source authentication, and protection against replay attacks but, unlike ESP, does not provide confidentiality. -action discard | bypass | protect Specifies the IPSec protection type regarding the traffic flows.
PAGE 490
22 ipSecConfig --delete Deletes a specified policy or all policies of a certain typefrom the configuration database. You can delete IPSec policies, IKE policies, and SADB entries. When deleting IPSec policies, you have the option to delete specific components only, such as the transform or the selector, and recreate these components without having to recreate the entire policy.
PAGE 491
ipSecConfig 2 type Specifies the policy to be displayed. Valid values for type include the following: policy ips Displays the IPSec policy configuration. A policy subtype must be specified when displaying the IPSec policy configuration.
PAGE 492
22 ipSecConfig 2. Create an IPSec SA policy named AH01, which uses AH protection with MD5. switch:admin> ipsecconfig --add policy ips sa -t AH01 -p ah -auth hmac_md5 3. \ Create an IPSec proposal IPSEC-AH to use AH01 as SA. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-AH -sa AH01 4. \ Configure the SA proposal's lifetime in time units. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-AH -lttime 280000 -sa AH01 \ 5. Import the preshared key file (e.g., ipseckey.
PAGE 493
ipSecConfig 3. Create an IPSec proposal IPSEC-ESP to use ESP01 as the SA. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-ESP -sa ESP01 4. \ Configure the SA proposal lifetime in seconds. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-ESP -lttime 280000 -sa ESP01 5. 2 \ Import the public key for the BROCADE300 (Brocade300.pem), the private key for BROCADE300 (Brocade300-key.pem), and the public key of the external host (remote-peer.pem) in X.
PAGE 494
22 ipSecConfig Example 3 The following example illustrates how to secure traffic between two systems using AH with SHA1 and ESP protection with 3DES and configure IKE with preshared keys. The two systems are a switch, a Brocade 300 (IP address 10.33.74.13), and an external UNIX host (IPv4 address 10.33.69.132). 1. On the system console, log in to the switch as Admin and enable IPSec. switch:admin> ipsecconfig --enable 2. Create an IPSec SA policy named AH01, which uses AH protection with SHA1.
PAGE 495
ipSecConfig 2 Example 4 The following example illustrates how to secure traffic between two systems using protection with MD5 and Manually keyed SAs. The two systems are a switch, the BROCADE300 (IPv4 address 10.33.74.13), and an external UNIX host (IPv4 address 10.33.69.132). 1. On the system console, log in to the switch as Admin and enable IPSec. switch:admin> ipsecconfig --enable 2.
PAGE 496
22 ipSecConfig created: Oct 15 23:34:55 2008 current: Oct 15 23:35:06 2008 diff: 11(s) hard: 2621440(s) soft: 2137448(s) last: Oct 15 23:34:55 2008 hard: 0(s) soft: 0(s) current: 540(bytes) hard: 0(bytes) soft: 0(bytes) allocated: 5 hard: 0 soft: 0 sadb_seq=0 pid=10954 refcnt=0 To display a specified IPSec SA: switch:admin> ipsecconfig --show policy ips \ sa -t sa-esp-1 sa-esp-1 ipsec-protocol:esp encryption algorithm: aes128_cbc 3des_cbc authentication algorithm: hmac_sha1 hmac_md5 To display all IPSec
PAGE 497
ipSecConfig 2 switch:admin> ipsecconfig --help modify policy ike Usage: ipsecConfig --modify policy ike ARGUMENTS ARGUMENTS -tag -remote -id -remoteid -enc -hash -prf -dh ike policy name peers ipaddress local identifier peers identifier encryption algorithm hash algorithm prf algorithm dh group number ENCRYPTION ALGORITHM 3des_cbc, aes128_cbc, aes256_cbc, null_enc HASH ALGORITHM hmac_md5, hmac_sha1, aes_xcbc PRF ALGORIT
PAGE 498
22 islShow islShow Displays interswitch link (ISL) information. SYNOPSIS DESCRIPTION islshow Use this command to display the current connections and status of the interswitch link (ISL) for each port on a switch.
PAGE 499
islShow 6:162->160 10:00:00:60:69:e2:09:fa sp:-------- bw: 0.001G 7:384-> 16 10:00:00:05:1e:37:02:73 sp:-------- bw: 10.000G 8:385-> 16 10:00:00:05:1e:37:02:73 sp:-------- bw: 11.000G 2 5 B2400 \ 39 DCX \ 43 B53000 \ To display interswitch links with encryption or compression enabled: switch:user> islshow 1: 33-> 29 10:00:00:60:69:80:4f:84 3 B3200 \ sp: 2.000G bw: 4.000G TRUNK ENCRYPT 2: 39-> 7 10:00:00:60:69:45:68:04 4 B3850 \ sp: 2.000G bw: 8.
PAGE 500
22 itemList itemList Lists parameter syntax information. SYNOPSIS item_list = element | element white item_list element = item | item - item item = num | slot [white]/ [white] num slot = num num = hex | int int = int digit | digit hex = 0x hex digit | hex hex digit digit = 0|1|2|3|4|5|6|7|8|9 hex digit = digit |A|B|C|D|E|F|a|b|c|d|e|f white = *["\\t\\f\\r ,"] DESCRIPTION All kernel diagnostics have at least one item list parameter to specify which ports to test.
PAGE 501
itemList 2 within the current switch (selected during Telnet login) are tested. When specified in an item list, user ports might be specified by either the area portion of the ports Fibre Channel address or with slot/port notation. For nonblade systems, the port number on the silkscreen is the area number, so the two notations are identical.
PAGE 502
22 killTelnet killTelnet Terminates an open Telnet session. SYNOPSIS DESCRIPTION NOTES EXAMPLES killtelnet Use this command to terminate an open Telnet session. The command lists all current Telnet and serial port login sessions and information such as session number, login name, idle time, IP address of the connection, and timestamp of when the login session was opened. The command prompts you to specify the number of the session you want to terminate.
PAGE 503
ldapCfg 2 ldapCfg Maps LDAP AD server roles to default switch roles. SYNOPSIS ldapcfg --maprole ldaprole switchrole ldapcfg --unmaprole ldaprole ldapcfg --show ldapcfg --help DESCRIPTION Use this command to map a Lightweight Directory Access Protocol (LDAP) Active Directory (AD) server role to one of the default roles available on a switch. This command also provides an option to remove an existing mapping.
PAGE 504
22 ldapCfg --unmaprole Removes the mapping between an LDAP role and a switch role. Use the --show option for a listing of existing mappings. The following operand is required: ldaprole Specifies the LDAP AD sever role to be removed from the mapping. --show Displays a table of existing mappings between LDAP roles and their corresponding switch role. --help Displays the command usage.
PAGE 505
lfCfg 2 lfCfg Configures and displays logical fabrics. SYNOPSIS lfcfg [--show | --showall] -cfg lfcfg [--show | --showall] -lisl [-v] lfcfg [--show -xisl [slot/]port | --showall -xisl lfcfg --lislenable lfcfg --help DESCRIPTION Use this command to display logical fabric configuration information, to determine the status of logical interswitch links (LISLs), to enable LISLs between logical switches, and to display information about the XISLs and LISLs associated with each XISL.
PAGE 506
22 lfCfg Port Number of the logical LISL port. remote-domain Domain ID of the base switch in the remote chassis. Name Switch name. State Port state: Online or Offline. Associated physical ports Physical ports associated with the LISL ports. When lfCfg is issued within a logical switch context, only the configuration regarding that switch and the fabrics reachable from that switch is displayed.
PAGE 507
lfCfg 2 --lislenable Re-enables all LISLs in the fabric that were disabled because of some conflict or error condition in the fabric. This command provides the option of manually reestablishing the LISLs after the error condition has been resolved. --help Displays the command usage. EXAMPLES To display logical fabric information for FID 2 in all chassis reachable from the base fabric.
PAGE 508
22 lfCfg Displays status information about the LISLs in the logical switch set by the context: switch:admin> lfcfg --show -lisl -v ID Port# remote-domain Name State Associated Physical Ports 2 384 24 sw0 PT Online 1/29, 2/41, 3/33, 4/24 To display information about all LISLs in the chassis: switch:admin> lfcfg --showall -lisl FID 2 3 Port# 384 385 remote-domain 24 24 Name sw0 sw0 State PT Online PT Online To display all XISLs and the LISLs associated with each XISL: switch:admin> lfcfg --showall -xi
PAGE 509
licenseAdd 2 licenseAdd Adds a license key to a switch. SYNOPSIS DESCRIPTION licenseadd license Use this command to add a license key to a switch. Some features of the switch and the fabric to which it is connected are optional, licensed products. Without a valid license installed for such products, their services are not available. A license key is a string of any length consisting of upper- and lowercase letters and numbers. License keys are case-sensitive.
PAGE 510
22 licenseHelp licenseHelp Displays commands used to administer license keys. SYNOPSIS DESCRIPTION NOTES licensehelp Use this command to display a list of the commands used to administer license keys. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 511
licenseIdShow 2 licenseIdShow Displays the system license ID. SYNOPSIS DESCRIPTION licenseidshow Use this command to display the license ID of the system. Some features of the switch and the fabric are optional, licensed products. Without a license installed for such products, the services provided by these features are not available. This command displays the system license ID used for generating and validating licenses on the system.
PAGE 512
22 licensePort licensePort Manages Dynamic Ports On Demand (DPOD) licenses. SYNOPSIS licenseport --release port licenseport --reserve port licenseport --show licenseport --method dynamic | static DESCRIPTION Use this command to manage and display Dynamic Ports on Demand (DPOD) license assignments. Dynamic Ports On Demand (DPOD) is an optional feature available on all embedded platforms.
PAGE 513
licensePort EXAMPLES 2 To activate Dynamic Ports On Demand: switch:admin> licenseport --method dynamic The POD method has been changed to dynamic. Please reboot the switch now for this change to take effect.
PAGE 514
22 licensePort To disable Dynamic Ports On Demand: switch:admin> licenseport --method static The POD method has been changed to static. Please reboot the switch now for this change to take effect.
PAGE 515
licenseRemove 2 licenseRemove Removes or deactivates a license key. SYNOPSIS DESCRIPTION licenseremove license Use this command to remove an existing license key from a switch or to deactivate the license key. The existing license key must be entered exactly as shown by the licenseShow command. License keys are case-sensitive. When the key has been removed, use the licenseShow command to verify that the key and the associated product have been uninstalled.
PAGE 516
22 licenseRemove Enhanced Group Management license XFJXYHmPtCWC93CLgBD9BZD9AmTFgDStFDJGMaLKC9FgWAfgSE: 8 Gig FC license Expiry Date 03/06/2009 License is expired Hf7MBEEGCFNmTAWXXF99RtHXQN4RRtM3mLGtrWZLAMaTaAY9EB: Storage Application Services license Expiry Date 03/07/2009 SEE ALSO 490 licenseAdd, licenseHelp, licenseIdShow, licenseShow Fabric OS Command Reference 53-1001764-01
PAGE 517
licenseShow 2 licenseShow Displays current license keys. SYNOPSIS DESCRIPTION licenseshow Use this command to display current license keys, along with a list of licensed products enabled by these keys.
PAGE 518
22 licenseShow Fabric Watch license RyeSzRScycazfT0G: Trunking license RyeSzRScycS0fT09: 4 Domain Fabric license To display the license keys on a switch with temporary (expired) licenses installed: switch:admin> licenseShow 7QmYFYJrmDgE9tTS4AYXB9trYSGtMtrQZSTK4ZSC7FC9ZAYAgE: Integrated Routing license Expiry Date 01/16/2008 License is expired 33YBfZfKZ3tQKrRJJRtgmS3JDtCL99P4fYrJYQP7GffS4ASmNE: Enterprise Bundle license Expiry Date 01/16/2008 License is expired To display the license keys on a switch wit
PAGE 519
licenseShow 2 To display an ICL license on a Brocade DCX before and after a firmware upgrade to Fabric OS v7.0.0.
PAGE 520
22 licenseSlotCfg licenseSlotCfg Configures and displays slot-based licensed features. SYNOPSIS licenseslotcfg --add feature slot licenseslotcfg --remove feature slot licenseslotcfg --show licenseslotcfg --help DESCRIPTION Use this command to configure and manage licenses for the Brocade FX8-24 extension blade on the slot where the blade is installed.
PAGE 521
licenseSlotCfg 2 --show Displays slot assignments for all slot-based licenses in the chassis. --help Displays the command usage.
PAGE 522
22 licenseSlotCfg A7N9rATZLYgFa7JBfmGEJKETgCMHFGQMY4gfLmGAa4GA: Advanced FICON Acceleration (FTR_AFA) license Capacity 6 Consumed 2 Configured Blade Slots 3,4 DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA: Advanced Extension (FTR_AE) license Capacity 8 Consumed 4 Configured Blade Slots 3,4,11,12 switch:admin> licenseslotcfg --show FTR_10G license - blade slots configured = 1,3,5,12 FTR_AE license - blade slots configured = 3,4,11,12 FTR_AFA license - blade slots configured = 3,4 To deactivate the Advanced
PAGE 523
licenseSlotCfg 2 Expiry Date 03/06/2009 License is expired Hf7MBEEGCFNmTAWXXF99RtHXQN4RRtM3mLGtrWZLAMaTaAY9EB: Storage Application Services license Expiry Date 03/07/2009 To remove the Advanced Extension license completely (marked inactive): switch:admin> licenseremove \ DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA removing license-key [DXXtN3LmRSMWCSW3XmfSBPfrWKLZ3HMTN73rP9GANJMA] switch:admin> licenseshow SSezcSec9RXTf0dj: Performance Monitor license KgrfCBHgRtfBrGKH4D7f9S3FBX7K3MtTtBHKrYHA4CMB: 10 Gig
PAGE 524
22 linkCost linkCost Sets or displays the Fabric Shortest Path First (FSPF) cost of a link. SYNOPSIS DESCRIPTION linkcost [[slot/]port [cost]] Use this command to set or display the cost of an interswitch link (ISL). The cost of a link is a dimensionless positive number. The Fabric Shortest Path First (FSPF) protocol compares the cost of various paths between a source switch and a destination switch by adding the costs of all the ISLs along each path. FSPF chooses the path with minimum cost.
PAGE 525
linkCost 2 1/7 500 1/8 500 1/9 (E_PORT) 500 1/10 500 1/11 500 1/12 500 1/13 500 1/14 500 1/15 500 Type to continue, Q to stop: To set the ISL cost on a port: switch:admin> linkcost 1/9 1000 To display the new cost value on the same port: switch:admin> linkcost 1/9 Interface1/9 (E_PORT) Cost 1000 (STATIC) To delete the cost value and reset to default: switch:admin> linkcost 1/9 0 To display the change: switch:admin> linkcost 1/9 Interface1/9 (E_PORT) Cost 500 To set the ISL cost to a va
PAGE 526
22 login login Logs in as new user. SYNOPSIS DESCRIPTION login Use this command to log in to the switch with another user name and password, without first logging out from the original session. If you originally connected through a Telnet or rlogin session, that session is left open. This command allows you to access commands that you cannot access at your current user level. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 527
logout 2 logout Logs out from a shell session. SYNOPSIS DESCRIPTION logout Use this command to log out from a shell session. Remote login connections are closed and the local serial connections return to the login prompt. The exit command is accepted as a synonym for logout, as is Ctrl-D at the beginning of a line.
PAGE 528
22 lsanZoneShow lsanZoneShow Displays logical SAN zone information. SYNOPSIS DESCRIPTION lsanzoneshow [-s] [-f fabricid] [-w wwn] [-z zonename] Use this command to display the inter-fabric zones or LSAN zones. These zones are normal WWN zones created in FC Router EX_Port-connected fabrics and backbone fabrics. The LSAN zones are identified by the text string "lsan_" in the zone name. Note that the string is case insensitive so "LSAN_" also is valid.
PAGE 529
lsanZoneShow 2 -w wwn Displays LSAN zones containing the specified port WWN. The WWN format is xx:xx:xx:xx:xx:xx:xx:xx. -z zonename Displays LSAN zones with the specified zone name. The database for zones is displayed per switch, which can differ from the database stored on the other FCR switches.
PAGE 530
22 lsCfg lsCfg Configures and manages a logical switch SYNOPSIS lscfg --create FID [-b | -base] [-f | -force] lscfg --delete FID lscfg --config FID -slot slot1[-slot2] [-port [ port1[-port2]] [-f |-force] lscfg --restore_to_default FID lscfg --restore_slot_to_default slot lscfg --change FID [[-newfid FID] | [-base]] [-force] lscfg --show [-ge] [-provision] lscfg --help DESCRIPTION Use this command to create a logical switch and to modify logical switch configurations.
PAGE 531
lsCfg 2 -b | -base Creates a base logical switch on the chassis. A base logical switch communicates among different logical switches. Legacy switches can be connected to the base logical switch through EX_Ports, and interswitch links (ISLs) between base logical switches enable communication among different logical switches. This operand is optional. -f | -force Executes the command without confirmation. This operand is optional. --delete Deletes a logical switch with the specified fabric ID.
PAGE 532
22 lsCfg -b | -base Turns an existing logical switch into a base switch. When this command is issued on a switch that is already a base switch, this command removes the base switch properties. This command disables the current logical switch. After making the change, you must re-enable the switch. -f | -force Executes the command without confirmation. This operand is optional. --show Displays the partition configuration on a switch or chassis.
PAGE 533
lsCfg 2 To delete a logical switch: switch:admin> lscfg --delete 2 All active login sessions for FID 2 have been terminated. Switch successfully deleted. To assign ports to a logical switch: switch:admin> lscfg --config 2 -port 10-12 This operation requires that the affected ports be disabled. Would you like to continue [y/n]?: y Making this configuration change. Please wait... Configuration change successful. Please enable your ports/switch when you are ready to continue.
PAGE 534
22 lsCfg 7 8 9 10 11 | | | | | | | | | | 2 2 2 2 2 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To display the partition configuration for all slots with the -ge option: switch:admin> lscfg --show -provision -ge Created switches: 128(ds) 2(bs) 1 Slot 1 2 3 4 5 6 7 8 ------------------------------------------------------Port 0 | 128 | 2 | | | | | 128 | 128 | 1 | 128 | 2 | | | | | 128 | 128 | 2 | 128 | 2 | | | | | 128 | 128 | 3 | 128 | 2 | | | | | 128 | 128 | 4 | 128 | 2
PAGE 535
lsCfg 2 To make logical switch FID 1 the base switch without confirmation: switch:admin> lscfg --change 1 -base -force Disabling the current base switch... Disabling switch fid 1 Disabling the proposed new base switch... Disabling switch fid 1 Please enable your switches when ready. To make logical switch FID 1 the base switch with confirmation: switch:admin> lscfg --change 1 -base Creation of a base switch requires that the proposed new base switch on this system be disabled.
PAGE 536
22 lsDbShow lsDbShow Displays the Fabric Shortest Path First (FSPF) link state database. SYNOPSIS DESCRIPTION lsdbshow [domain] Use this command to display an FSPF link state database record for switches in the fabric or for a specified domain. There are two types of database entries: • • The link state database entry, which is permanently allocated. The link state record (LSR), which is allocated when a switch is connected to the fabric.
PAGE 537
lsDbShow 2 lsAge Age, in seconds, of this LSR. An LSR is removed from the database when its age exceeds 3,600 seconds. reserved Reserved for future use. type Type of the LSR. Always 1. options Always 0. lsId ID of this LSR. It is identical to the domain ID. advertiser Domain ID of the switch that originated this LSR. incarn Incarnation number of this LSR. length Total length, in bytes, of this LSR. Includes header and link state information for all links.
PAGE 538
22 lsDbShow EXAMPLES To display the link state record for a switch: switch:admin> lsdbshow 1 Domain = 1 (self), Link State Database Entry pointer = 0x1096da60 lsrP = 0x109784b0 earlyAccLSRs = 0 ignoredLSRs = 0 lastIgnored = Never installTime = Aug 26 18:20:41.
PAGE 539
memShow 2 memShow Displays the amounts of free and used memory in a switch. SYNOPSIS DESCRIPTION NOTES OPERANDS memshow [-b | -k | -m] Use this command to display free and used memory in the switch, as well as the shared memory and buffers used by the kernel. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 540
22 motd motd Sets the banner on the chassis. SYNOPSIS motd --set string motd --show DESCRIPTION Use this command to set the banner on the chassis. The banner is a string of alphanumeric characters. It is displayed before you log in to a switch. NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 541
msCapabilityShow 2 msCapabilityShow Displays the Management Server (MS) capabilities. SYNOPSIS DESCRIPTION NOTES mscapabilityshow Use this command to display the supported capabilities of the Management Server for each switch in the fabric. An asterisk displays next to the name of the local switch. Reliable commit service (RCS) is a fabric-wide capability and is supported only if all the switches in the fabric support the service.
PAGE 542
22 msConfigure msConfigure Configures the Management Server (MS) access control list (ACL). SYNOPSIS DESCRIPTION msconfigure Use this command to configure the MS Access Control List (ACL). The MS allows a Storage Area Network (SAN) management application to retrieve and administer the fabric and Interconnect Elements, such as switches. This application is located at the Fibre Channel well-known address, 0xFFFFFA.
PAGE 543
msConfigure 2 20:02:00:60:69:00:60:15 0 Done 1 Display the access list 2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 0 done ...
PAGE 544
22 msPlatShow msPlatShow Displays the Management Server (MS) platform database. SYNOPSIS DESCRIPTION NOTES msplatshow Use this command to display information from the MS platform database. This command displays the name of each platform object with the platform type (GATEWAY, HOST_BUS_ADAPTER, and so forth), associated management addresses, and associated node names. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 545
msPlatShowDBCB 2 msPlatShowDBCB Displays the Management Server (MS) platform service database control block. SYNOPSIS DESCRIPTION NOTES msplatshowdbcb Use this command to display the control block fields associated with the platform database. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 546
22 msPlClearDB msPlClearDB Clears the Management Server (MS) platform database on all switches in the fabric. SYNOPSIS DESCRIPTION NOTES msplcleardb Use this command to clear the MS platform database in the entire fabric. Because this operation cannot be undone, it should not be performed unless it is intended to resolve a database conflict between two joining fabrics or to establish an entirely new fabric with an empty database.
PAGE 547
msPlMgmtActivate 2 msPlMgmtActivate Activates the Management Server (MS) platform service. SYNOPSIS DESCRIPTION NOTES msplmgmtactivate Use this command to activate the MS platform service throughout the fabric. This command attempts to activate the MS platform service for each switch in the fabric. The change takes effect immediately and is committed to the configuration database of each affected switch. MS activation is persistent across power cycles and reboots.
PAGE 548
22 msPlMgmtDeactivate msPlMgmtDeactivate Deactivates the Management Server (MS) platform service. SYNOPSIS DESCRIPTION NOTES msplmgmtdeactivate Use this command to deactivate the MS platform service throughout the fabric. This command deactivates the MS platform service for each switch in the fabric and commits the change to nonvolatile storage. When an FCS policy is enabled, this command can be issued only from the primary FCS switch.
PAGE 549
msTdDisable 2 msTdDisable Disables the Management Server (MS) topology discovery service. SYNOPSIS mstddisable ["ALL"] DESCRIPTION Use this command to disable the management server topology discovery service on a local switch or an entire fabric. This change takes effect immediately and commits to the configuration database for all affected switches. The change is persistent across power cycles and reboots.
PAGE 550
22 msTdEnable msTdEnable Enables the Management Server (MS) topology discovery service. SYNOPSIS DESCRIPTION NOTES mstdenable ["ALL"] Use this command to enable the MS topology discovery service on the local switch or throughout the fabric. The change takes effect immediately and commits to the configuration database for all affected switches. The change is persistent across power cycles and reboots.
PAGE 551
msTdReadConfig 2 msTdReadConfig Displays the status of The Management Server (MS) topology discovery service. SYNOPSIS DESCRIPTION NOTES mstdreadconfig Use this command to check whether or not the management server topology discovery service is enabled. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 552
22 myId myId Displays the current login session details. SYNOPSIS DESCRIPTION myid Use this command to display the status of the system and the login session details. This includes IPv4 or IPv6 addresses associated with the login session. The login session gives details of the following: NOTES • • CP/switch (or console/serial port) used to log in. • • The current CP mode (Active, Standby, or Unknown).
PAGE 553
nbrStateShow 2 nbrStateShow Displays the state of FSPF neighbors. SYNOPSIS DESCRIPTION nbrstateshow [slot/][port] Use this command to display information about fabric shortest path first (FSPF) neighbors to the local switch or information about a neighbor to a specified port. FSPF defines a neighbor as a remote E_Port interface that is directly attached to the local switch. However, if ports are trunked, the command displays data only about the trunk master.
PAGE 554
22 nbrStateShow port Specify the port number to display, relative to its slot for bladed systems. Use switchShow to list valid ports. This operand is optional; if omitted, all neighbor states are displayed.
PAGE 555
nbrStatsClear 2 nbrStatsClear Resets FSPF interface counters. SYNOPSIS DESCRIPTION NOTES OPERANDS nbrstatsclear [slot/][port] Use this command to reset the counters of fabric shortest path first (FSPF) frames transmitted and received on all interswitch links (ISLs) or on a specified ISL Use this command without operands to reset counters on all interfaces. Use interfaceShow to view the FSPF counters.
PAGE 556
22 nbrStatsClear To verify the changes: switch:admin> interfaceshow 1/0 idbP = 0x10050a38 Interface 0 data structure: nghbP ifNo masterPort defaultCost cost = = = = = 0x1004ce68 0 0 (self) 500 500 (output truncated) SEE ALSO 530 interfaceShow, portShow, switchShow Fabric OS Command Reference 53-1001764-01
PAGE 557
nodeFind 2 nodeFind Displays all device Name Server (NS) entries matching a given WWN, device PID, or alias. SYNOPSIS DESCRIPTION nodefind WWN | PID | ALIAS Use this command to display the NS information for all devices in the fabric that have either a port world wide name (WWN) or a node WWN matching the given WWN; or have a device PID matching the given PID; or have a defined configuration alias to which the device belongs matching the given alias.
PAGE 558
22 nodeFind To display all the device information matching the alias "a320": switch:user> nodefind a320 Local: Type Pid COS PortName NodeName SCR NL 0314d9;3;22:00:00:04:cf:5d:dc:2d;20:00:00:04:cf:5d:dc:2d; 0 FC4s: FCP [SEAGATE ST318452FC 0001] Fabric Port Name: 20:14:00:60:69:80:04:79 Permanent Port Name: 22:00:00:04:cf:5d:dc:2d Device type: Physical Target Port Index: 20 Share Area: No Device Shared in Other AD: No Aliases: a320 NL 0314d6; 3;22:00:00:04:cf:9f:78:7b;20:00:00:04:cf:9f:78:7b; 0 FC4s: FCP [
PAGE 559
nsAliasShow 2 nsAliasShow Displays local Name Server (NS) information, with aliases. SYNOPSIS DESCRIPTION nsaliasshow [-r ][-t] Use this command to display local name server information with the added feature of displaying the defined configuration aliases to which the device belongs. If there are no defined configuration aliases for that device, no alias is displayed. If there is no information in this switch, the following message is displayed: "There is no entry in the Local Name Server.
PAGE 560
22 nsAliasShow EXAMPLES To display local NS information with aliases: switch:user> nsaliasshow { Type Pid COS PortName NodeName TTL(sec) N 010600;3;20:06:00:05:1e:38:81:71;10:00:00:05:1e:38:81:71; na Fabric Port Name: 20:06:00:05:1e:7a:7a:00 Permanent Port Name: 20:06:00:05:1e:38:81:71 Port Index: 6 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No Aliases: MyAlias1 MyAlias2 N 010601;3;23:0d:00:05:1e:38:81:71;50:00:51:e3:88:17:10:0d; na FC4s: FCP PortSymb: [44] "Brocade Ioblaster Port
PAGE 561
nsAliasShow 2 Redirect: No Partial: No Aliases: N 010602;3;10:00:00:00:00:00:00:01;10:00:00:00:00:00:00:01; 3 FC4s: FCP PortSymb: [41] "Brocade Ioblaster Initiator#00,pid#10602.
PAGE 562
22 nsAllShow nsAllShow Displays global name server information. SYNOPSIS DESCRIPTION NOTES OPERANDS nsallshow [type] Use this command to display the 24-bit Fibre Channel addresses of all devices in all switches in the fabric. When used with the type operand, the command displays only devices of the specified FC-4 type. FC-4 type codes are referenced in the Fibre Channel Framing and Signaling (FC-FS) standards documentation (see "TYPE codes - FC-4").
PAGE 563
nsCamShow 2 nsCamShow Displays information about remote devices in the Name Server (NS) cache. SYNOPSIS DESCRIPTION nscamshow [-t] Use this command to display the local NS cache information about the devices discovered in the fabric by the NS cache manager.
PAGE 564
22 nsCamShow Virtual The device is contrived by the switch. NPV The device is connected to the NX_Port, using FDISC to log in to the switch. iSCSI Device is connected to the iSCSI port. iSCSI The second attribute indicates the role of the device. Valid role attributes include the following: Unknown (initiator/target) Device role is not detected Initiator An iSCSI initiator. Target An iSCSI target. Initiator+Target Both an iSCSI initiator and an iSCSI target.
PAGE 565
nsCamShow N 2 Partial: No 5c1700; 3;23:00:00:05:1e:53:e3:8a;50:00:51:e5:3e:38:a0:00; FC4s: FCP PortSymb: [34] "Brocade DPC Entity-Slot#00,DPC#00.
PAGE 566
22 nsShow nsShow Displays local Name Server (NS) information. SYNOPSIS DESCRIPTION nsshow [-r][-t] Use this command to display local NS information about devices connected to a switch. If no information is available for the switch, the command displays the following message: "There is no entry in the Local Name Server." Use nsAllShow to display NS information for all switches in the fabric.
PAGE 567
nsShow 2 Partial Displays "Yes" if t the device entry is incomplete; otherwise displays "No." Devices that are incomplete are displayed by the nsShow and nsCamShow commands, and have routing established, but are not considered during device discovery (for example, during FC-GS Name Server Queries).
PAGE 568
22 nsShow NPV The device is connected to the NX_Port, using FDISC to log in to the switch. iSCSI The device is connected to the iSCSI port. The second attribute indicates the role of the device. Valid role attributes include the following: Unknown (initiator/target) Device role is not detected Initiator An iSCSI initiator. Target An iSCSI target. Initiator+Target Both an iSCSI initiator and an iSCSI target.
PAGE 569
nsShow 2 Partial: No N 010e00;3;21:00:00:e0:8b:12:8a:be;20:00:00:e0:8b:12:8a:be;\ 0x01000001 FC4s: FCP NodeSymb: [41] "QLA2340 FW:v3.03.06 DVR:v9.0.0.2 (w32 IP)" Fabric Port Name: 20:0e:00:05:1e:34:00:70 Permanent Port Name: 21:00:00:e0:8b:12:8a:be Port Index: 14 Share Area: No Device Shared in Other AD: No Redirect: No Partial: No The Local Name Server has 2 entries } To display local name server information with -r and -t options.
PAGE 570
22 nsZoneMember nsZoneMember Displays the information on online devices zoned with a specified device. SYNOPSIS nszonemember pid | wwn nszonemember -a | -u DESCRIPTION Use this command to display information on all online devices zoned with the specified device. The device can be specified by WWN or Port ID (PID). Use this command with the -u option to display all unzoned devices in the entire fabric. Use the -a option to display online zoned device data for each local device.
PAGE 571
nsZoneMember NOTES OPERANDS 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command has the following operands: PID | WWN Specifies the port ID or WWN of the device for which to display zoned devices. -a Displays each local device's online zoned device data, including the device PID and zone alias.
PAGE 572
22 nsZoneMember To display all the unzoned devices in the fabric: switch:admin> nszonemember -u Pid: 0xb01ea9; Aliases: trimm32b_1 Pid: 0xb01eaa; Aliases: trimm32b_2 Pid: 0xb01eab; Aliases: trimm32b_3 Pid: 0xb01eac; Aliases: trimm32b_4 Pid: 0xb01fad; Aliases: trimm32a_5 Pid: 0xb01fae; Aliases: trimm32a_6 Pid: 0xb01fb1; Aliases: trimm32a_7 Pid: 0xb01fb2; Aliases: trimm32a_8 Pid: 0xdc2800; Aliases: Totally 9 unzoned devices in the fabric.
PAGE 573
passwd 2 passwd Changes the password for a specified user. SYNOPSIS DESCRIPTION passwd [user_account] [-old old_password] [-new new_password] Use this command to change a user account password. Passwords can be changed locally on any switch. For the password database to be distributed to other switches in the fabric, the switches must be configured to accept the password database with the fddCfg command. The password database is distributed manually with the distribute command.
PAGE 574
22 passwd NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. The following operand is optional: user_account Specifies the user account for which the password is to be changed. The user account must be an existing account, either default or user-created.
PAGE 575
passwd 2 Password matches one of the previous passwords The password you entered matches one of the previous passwords. You must wait longer to change your password You cannot change the password before the minimum aging period expires. Password contains invalid characters The password you entered contains invalid characters.
PAGE 576
22 passwdCfg passwdCfg Manages the password policies. SYNOPSIS passwdcfg --set options value passwdcfg --disableadminlockout passwdcfg --enableadminlockout passwdcfg --setdefault passwdcfg --showall passwdcfg --help DESCRIPTION Use this command to manage password policies.
PAGE 577
passwdCfg 2 A failed login attempt counter is maintained for each user on each switch instance. The counters for all user accounts are reset to zero when the account lockout policy is enabled. The counter for an individual account is reset to zero when the account is unlocked after the lock-out duration period expires. NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 578
22 passwdCfg -maxpasswordage value Specifies the maximum number of days that can elapse before a password must be changed. This is the password expiration period. -maxpasswordage can be set at 0 to 999. Setting this parameter to 0 disables password expiration. The default value is 0. When -maxpasswordage is set to a nonzero value, -minpasswordage must be set to a value less than or equal to -maxpasswordage.
PAGE 579
passwdCfg 2 --setdefault Resets all password policies to their default values. --help Displays the command usage. DIAGNOSTICS The passwdCfg command may fail for any of the following reasons: Permission failure You not permitted to execute the command. Invalid command line option An unrecognized command line option was specified. Minlength value out of range The -minlength value must be between 8 and 40.
PAGE 580
22 passwdCfg EXAMPLES To display the current password configuration parameters: switch:admin> passwdcfg --showall passwdcfg.minlength: 8 passwdcfg.lowercase: 0 passwdcfg.uppercase: 0 passwdcfg.digits: 0 passwdcfg.punctuation: 0 passwdcfg.history: 1 passwdcfg.minpasswordage: 0 passwdcfg.maxpasswordage: 0 passwdcfg.warning: 0 passwdcfg.lockoutthreshold: 0 passwdcfg.lockoutduration: 30 passwdcfg.
PAGE 581
pathInfo 2 pathInfo Displays routing information and statistics along a path covering multiple switches. SYNOPSIS pathinfo pathinfo -f FID destination_switch [destination_port] [-r] [-t] pathinfo destination_switch [source_port[destination_port]] [-r] [-t] DESCRIPTION Use this command to display routing information from a source port on the local switch to a destination port on another switch. The command output describes the exact data path between these ports, including all intermediate switches.
PAGE 582
22 pathInfo In Port The port on which the switch receives frames. For hop 0, this is source_port. identified by the port index. Domain ID The domain ID of the switch. Name The name of the switch. Out Port The output port that the frames take to reach the next hop. For the last hop, this is destination_port identified by the port index. BW The bandwidth of the output interswitch link (ISL), in Gbps. This parameter does not apply to the embedded port. If the bandwidth is zero, it is displayed as 1 Gbps.
PAGE 583
pathInfo 2 Words The total number of 4-byte Fibre Channel words. Frames The total number of frames. Errors The total number of errors that may have caused a frame not to be received correctly. This includes cyclic redundancy check (CRC) errors, bad end-of-frame (EOF) errors, frame truncated errors, frame-too-short errors, and encoding errors inside a frame.
PAGE 584
22 pathInfo destination_port Specifies the port on the destination switch for the path being traced. This operand returns the state of this port. The embedded port (-1) is used by default, or if you specify a destination port that is not active. The destination is specified as the port index. "-r" Displays the reverse path in addition to the forward path. This operand is optional. -t Displays the command output in traceroute format. When this operand is used, only routing information is displayed.
PAGE 585
pathInfo 2 To display basic path information in traceroute format: switch:admin> pathinfo 91 -t traceroute to domain 91(web225) , 25 hops Hop Domain ID (Name) time taken for the hop ----------------------------------------------1 10 (web229) 0.
PAGE 586
22 pathInfo Target port is Embedded Hop In Port Domain ID (Name) Out Port BW Cost --------------------------------------------------------0 E 9 (web226) 2 1G 1000 Port E 2 Tx Rx Tx Rx --------------------------------------B/s (1s) 0 0 B/s (64s) 1 1 Txcrdz (1s) 0 Txcrdz (64s) 0 F/s (1s) 0 0 F/s (64s) 2743 0 Words 2752748 2822763 Frames 219849 50881 Errors 0 Hop In Port Domain ID (Name) Out Port BW Cost --------------------------------------------------------1 3 10 (web229) 12 1G 1000 Port 3 12 Tx Rx Tx R
PAGE 587
pdShow 2 pdShow Displays data from a panic dump file. SYNOPSIS DESCRIPTION pdshow [panic_dump_file] Use this command to display data from a panic dump file. The panic dump file contains information that might be useful to determine the cause of the system panic. When executed without any arguments, this command displays output from the latest panic dump file available on the switch. If a panic dump file is specified as an argument, the contents of that specific file are displayed.
PAGE 588
22 perfAddEEMonitor perfAddEEMonitor Adds an end-to-end monitor to a port. SYNOPSIS DESCRIPTION perfaddeemonitor [slot/]port SourceID DestID Use this command to add an end-to-end performance monitor to a port.
PAGE 589
perfAddEEMonitor 2 DestID Specifies the 3-byte DID (destination ID) of the destination device. It should be in "0xDDAAPP" format, where DD is domain ID, AA is area ID and PP is AL_PA ID. For example, 0x050200 has a domain ID of 5, an area ID of 2, and an AL_PA ID of 0. SourceID and DestID both cannot be 0x000000. EXAMPLES To add an end-to-end monitor to blade 1 port 2: switch:admin> perfaddeemonitor 1/2 "0x050200" "0x1182ef" End-to-End monitor number 0 added.
PAGE 590
22 perfAddEEMonitor 2. Get name server information. Name server info shows four devices (two of which are virtual) connected to the Encryption Switch along with their PIDs: EncryptionSwitch:Securityadmin> nsshow { Type Pid COS PortName NodeName TTL(sec) N 0a0100;3;2f:ff:00:06:2b:0e:b3:3c;2f:ff:00:06:2b:0e:b3:3c;na FC4s: FCP PortSymb: [18] "SANBlaze V3.
PAGE 591
perfAddEEMonitor 4. 2 Add another EE monitor on port 1 between the Virtual Target SID and the Target DID: EncryptionSwitch:SecurityAdmin> perfaddeemonitor 1 \ 0x0a2001 0x01a000 End-to-End monitor number 1 added. 5. Display the EE monitors on the Encryption Switch: EncryptionSwitch:SecurityAdmin> perfmonitorshow --class EE 1 There are 2 end-to-end monitor(s) defined on port 1.
PAGE 592
22 perfCfgClear perfCfgClear Clears the previously saved performance monitoring configuration settings from nonvolatile memory. SYNOPSIS DESCRIPTION NOTES perfcfgclear Use this command to clear the previously saved end-to-end performance monitoring configuration settings from nonvolatile memory. This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.
PAGE 593
perfCfgRestore 2 perfCfgRestore Restores performance monitoring configuration settings from nonvolatile memory. SYNOPSIS DESCRIPTION NOTES perfcfgrestore Use this command to restore the performance monitoring configuration information from nonvolatile memory. This does not restore the information cleared by the perfCfgClear command; rather, it restores the configuration from nonvolatile memory. The perfCfgRestore command overwrites any configuration changes that were not saved.
PAGE 594
22 perfCfgSave perfCfgSave Saves performance monitoring configuration settings to nonvolatile memory. SYNOPSIS DESCRIPTION perfcfgsave Use this command to save the current Performance Monitor configuration for end-to-end (EE) performance monitors to nonvolatile memory. Configuration changes are saved persistently across power cycles.
PAGE 595
perfClearAlpaCrc 2 perfClearAlpaCrc Clears the CRC error count associated with a port and arbitrated loop physical address (AL_PA). SYNOPSIS DESCRIPTION NOTES perfclearalpacrc [slot/]port [ALPA] Use this command to clear a specific cyclic redundancy check (CRC) error counter associated with a specific port and AL_PA, or all such counters on a port. This command requires an Advanced Performance Monitoring license.
PAGE 596
22 perfDelEEMonitor perfDelEEMonitor Deletes one or all end-to-end performance monitors from a port. SYNOPSIS DESCRIPTION NOTES perfdeleemonitor [slot/]port [monitorId] Use this command to delete an end-to-end performance monitor from a port, or all such monitors associated with a port. This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.
PAGE 597
perfHelp 2 perfHelp Displays performance monitoring help information. SYNOPSIS DESCRIPTION NOTES perfhelp Use this command to display the help commands available for performance monitoring. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 598
22 perfMonitorClear perfMonitorClear Clears counters of end-to-end and ISL performance monitors on a port. SYNOPSIS DESCRIPTION perfmonitorclear --class monitor_class [slot/]port [monitorId] Use this command to clear counters for performance monitors on a port, specified by class. Monitor classes include end-to-end monitors (EE) and interswitch link monitors ISL).
PAGE 599
perfMonitorClear 2 To clear statistics counters for an ISL monitor: switch:admin> perfmonitorclear --class ISL 1 This will clear ISL monitor on port 1, continue? \ (yes, y, no, n): [no] y SEE ALSO perfAddEEMonitor, perfMonitorShow Fabric OS Command Reference 53-1001764-01 573
PAGE 600
22 perfMonitorShow perfMonitorShow Displays end-to-end and interswitch link performance monitors on a port. SYNOPSIS DESCRIPTION perfmonitorshow --class monitor_class [slot/]port [interval] Use this command to display End-to-End (EE) performance monitors on a port. If interval is specified, the command displays a snapshot of the traffic at the specified interval. If no interval is specified, this command displays the following information: Key The monitor number. SID The source Port ID.
PAGE 601
perfMonitorShow 2 interval The interval value must be greater than or equal to 5, and it must be a multiple of 5. In the case of end-to-end monitor, Tx and Rx counts are displayed in the unit of byte when this operand is specified. This operand is optional; if the operand is not specified, this command displays cumulative counts. EXAMPLES To display EE monitors on port 8: switch:admin> perfmonitorshow --class EE 2/8 There are 8 end-to-end monitor(s) defined on port 8.
PAGE 602
22 perfResourceShow perfResourceShow Displays performance monitor resources for a logical switch. SYNOPSIS perfresourceshow --portttRes [[slot/]port] perfResourceShow --eeRes [[slot/]port] perfResourceShow --fabmodeRes perfResourceShow --installed [[slot/]port] perfResourceShow --help DESCRIPTION Use this command to determine the physical resources available to support the installation of performance monitors on a logical switch port.
PAGE 603
perfResourceShow 2 --help Displays the command usage.
PAGE 604
22 perfResourceShow 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | (output | - | - | | - | - | | - | - | | - | 0 | | - | - | | - | 0 | | - | - | | - | - | | - | - | | - | - | | - | 0 | | 1 | - | | - | - | | - | - | truncated) | | | | | | | | | | | | | | - | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - | | | | | | | | | | | | | - | | | | | | | | | | | | | | |
PAGE 605
perfSetPortEEMask 2 perfSetPortEEMask Sets the overall mask for end-to-end (EE) performance monitors. SYNOPSIS DESCRIPTION perfsetporteemask [slot/]port "TxSIDMsk " "TxDIDMsk " "RxSIDMsk" "RxDIDMsk" Use this command to set the mask for an end-to-end (EE) performance monitor. This command allows selecting the Fibre Channel frames for which to collect performance statistics. When setting the EE mask on a port, all existing EE monitors on that port are deleted.
PAGE 606
22 perfSetPortEEMask ff Specifies that the field does triggers EE monitors. TxDIDMsk Specify the transmitting Destination ID mask, in quotation marks, in dd:aa:pp format. RxSIDMsk Specify the receiving Source ID mask, in quotation marks, in dd:aa:pp format. RxDIDMsk Specify the destination ID mask, in quotation marks, in dd:aa:pp format.
PAGE 607
perfShowAlpaCrc 2 perfShowAlpaCrc Displays the CRC error count by port or by arbitrated loop physical address (AL_PA). SYNOPSIS DESCRIPTION perfshowalpacrc [slot/]port [ALPA] Use this command to display the cyclic redundancy check (CRC) error count of one or all devices attached to a port. If the AL_PA operand is specified, only the CRC count for that AL_PA device is displayed. If the AL_PA operand is not specified, the CRC count for all the AL_PA devices on a specified port are displayed.
PAGE 608
22 perfShowPortEEMask perfShowPortEEMask Displays the current address mask for end-to-end performance monitors on a port. SYNOPSIS DESCRIPTION perfshowporteemask [slot/]port Use this command to display the current mask shared across all end-to-end (EE) performance monitors of a port. There are only two commands that can modify the value of the EE mask: perfSetPortEEMask and perfCfgRestore.
PAGE 609
perfShowPortEEMask RxSID RxSID RxDID RxDID RxDID SEE ALSO Area: ALPA: Domain: Area: ALPA: 2 on on on on on perfAddEEMonitor, perfDelEEMonitor, perfSetPortEEMask Fabric OS Command Reference 53-1001764-01 583
PAGE 610
22 perfTTmon perfTTmon Installs the Top Talker monitor in the specified mode. SYNOPSIS perfttmon Port Mode: perfttmon --add egress | ingress [slot/]port perfttmon --show [slot/]port [number_of_flows] [wwn| pid] perfttmon --delete [[slot/]port | -all | -sconfig] Fabric Mode: perfttmon --add fabricmode perfttmon --show dom domain id [number_of_flows] [wwn| pid] perfttmon --delete fabricmode perfttmon --help DESCRIPTION Use this command to install the Top Talker monitor.
PAGE 611
perfTTmon 2 Top Talkers are not supported on FCoE ports or ports configured as mirror ports. Top Talkers are not supported on VE_Ports, EX_Ports, VEX_Ports. You cannot install a Top Talker and an End-to-End Monitor on the same port. Brocade recommends against installing a Top Talkers and an End-to-End Monitor on the ports belonging to the same ASIC chip. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 612
22 perfTTmon Fabric Mode Top Talker commands: --add fabricmode Installs the Top Talker monitor on all switches in the fabric. When a new switch joins the fabric, this command must be run again on the switch. The TT configuration information is not propagated automatically to the new switch. In a mixed chassis configuration containing both 8G and 16G port blades, fabric mode is blocked when FCR is enabled. Port-level Top Talkers will be allowed on 16G blades but not on 8G blades when FCR is enabled.
PAGE 613
perfTTmon 2 To identify and delete a stale Top Talker for an F_Port (the F_Port belonged to a blade that has been removed): Switch:admin> configshow -a | grep perf perf.ToptalkerEnabledonC2:1 perf.ttmonc.
PAGE 614
22 policy policy Displays or modifies the encryption and authentication algorithms for security policies. SYNOPSIS DESCRIPTION policy option type number [-enc method] [-auth algorithm] [-pfs value] [-dh group] [-seclife seconds] Use this command to display or modify the encryption and authentication algorithms for security policies. You can configure a maximum of 32 Internet key exchange (IKE) and 32 Internet protocol security (IPSec) policies.
PAGE 615
policy 2 AES-128 Advanced encryption standard, 128-bit key. AES-256 Advanced encryption standard, 256-bit key. -auth algorithm Specifies the authentication algorithm. The default is SHA-1. Algorithms include the following: SHA-1 Secure hash algorithm. MD5 Message digest 5. AES-XCBC Advanced encryption standard. Valid only with IPSec. -pfs value Specifies the perfect forward secrecy. This operand is valid only with IKE policies. Values are on (default) or off.
PAGE 616
22 policy To display all IKE policy settings: switch:admin> policy --show ike all IKE Policy 1 ----------------------------------------Authentication Algorithm: SHA-1 Encryption: AES-128 Perfect Forward Secrecy: on Diffie-Hellman Group: 1 SA Life (seconds): 28800 IKE Policy 29 ----------------------------------------Authentication Algorithm: SHA-1 Encryption: AES-128 Perfect Forward Secrecy: on Diffie-Hellman Group: 1 SA Life (seconds): 28800 Operation Succeeded To display all IPSec policy settings: swit
PAGE 617
portAddress 2 portAddress Assigns the lower 16 bits of the Fibre Channel Port ID. SYNOPSIS portaddress --bind [slot/]port [16-bit_address] [--auto] portaddress --unbind [slot/]port portaddress --show [[slot/]port] portaddress --findPID 24-bit_Port_ID portaddress --help DESCRIPTION Use this command to bind the 16-bit address to the lower two bytes of a port 24-bit Fibre Channel address, or to unbind the currently bound address for the specified port.
PAGE 618
22 portAddress 16-bit_address Specifies the 16-bit address to be bound to the FC address. Note that only the upper 10 bits of the PID can be used for a unique route. Therefore, not all addresses in the 16-bit range are available. --auto Enables autobinding on the specified port. If the auto feature is enabled, the entire area field of the PID is bound to a single port. With 10-bit routing, up to 4 ports can share the same 8-bit area field of the PID.
PAGE 619
portAddress 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 0x0000 0x0100 0x0200 0x0300 0x0400 0x0500 0x0600 0x0700 0x1800 0x1900 0x1a00 0x1b00 0x1c00 0x1d00 0x1e00 0x1f00 0x1000 0x1100 0x1200 0x1300 0x1400 0x1500 0x1600 0x1700 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 2 bit bit bit bit bit bit bit bit bit bit bit bit bit bit bit b
PAGE 620
22 portAlpaShow portAlpaShow Displays the Arbitrated Loop Physical Addresses (AL_PAs) of devices attached to a port. SYNOPSIS DESCRIPTION NOTES OPERANDS portalpashow [slot/]port Use this command to display the AL_PAs of devices connected to a port, and whether these devices are public or private. If the specified port is not an active FL_Port or if no AL_PAs are present, this command prints an error.
PAGE 621
portBeacon 2 portBeacon Sets port beaconing mode. SYNOPSIS portbeacon --enable [slot/]port portbeacon --disable [slot/]port portbeacon --show [slot/]port portbeacon --help DESCRIPTION Use this command to enable or disable beaconing mode on a specified port. When beaconing mode is enabled on a port, the port LED flashes amber and green for 2.5 seconds each in an alternating pattern. The beaconing mode continues until you turn it off. Beaconing mode is useful if you are trying to locate a specific port.
PAGE 622
22 portBeacon To display beaconing mode on a port: switch:admin> chassisbeacon --show 2/1 PortBeacon status of : slot 2, port 1 is ON SEE ALSO 596 chassisBeacon, switchBeacon Fabric OS Command Reference 53-1001764-01
PAGE 623
portBufferShow 2 portBufferShow Displays the buffer usage information for a port group or for all port groups in the switch. SYNOPSIS DESCRIPTION portbuffershow [[slot/]port] Use this command to display the current long distance buffer information for the ports in a port group. The port group can be specified by giving any port number in that group. If no port is specified, then the long distance buffer information for all of the port groups of the switch is displayed.
PAGE 624
22 portBufferShow Remaining Buffers The remaining (unallocated and reserved) buffers in a port group. A hyphen in one of the display fields indicates that no relevant information is available; there may be no connection to a port, or the port is disabled, or the port is not an E_Port. When invoked without operands, this command displays the long distance buffer information for all the port groups of the switch.
PAGE 625
portCamShow 2 portCamShow Displays port-based filter CAM utilization. SYNOPSIS DESCRIPTION portcamshow [slot/]port Use this command to display the current filter Content-Addressable Memory (CAM) utilization of a specified port. The command displays the following information: SID used Total number of CAM entries used by this port. Note that each CAM entry, either source ID (SID) or destination ID (DID) CAM, can be shared among a certain number of ports, depending on the ASIC.
PAGE 626
22 portCamShow EXAMPLES To display the filter CAM utilization for a single port on a switch: switch:user> portcamshow 3/2 -------------------------------------------------Area SID used DID used SID entries DID entries 34 3 1 350400 2b2200 2b1200 220400 -------------------------------------------------SID Free, DID Free: (61, 511) To display port CAM entries on shared ports (in the example, port 7/31 and 7/39 are shared ports and 7/31 is the primary port): switch:user> portcamshow 7/39 ------------------
PAGE 627
portCfg 2 portCfg Manages port configuration parameters for FC ports, VE_ports, and GbE/10GbE ports. SYNOPSIS portcfg action [slot/] port arguments portcfg action [slot/] ge_port arguments portcfg action [slot/]ve_port options arguments portcfg action [slot/][ge_port options arguments DESCRIPTION Use this command to manage port configuration parameters on FC ports as well as on Gigabit Ethernet (GbE) ports on the Brocade 7800/FX8-24 and on the Brocade FR4-18i.
PAGE 628
22 portCfg In Fabric OS v7.0.0, the restrictions on addressing have been lifted. An IPv4 subnet can span multiple GbE interfaces, and you can now have multiple IPv6 addresses with the same prefix configured on different GbE interfaces on the same extension switch or blade. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 629
portCfg 2 Valid modes for mirrorport include the following: --disable Disables the configuration. When disabled, a port cannot be a mirror port. --enable Enables the configuration. When the mirror port feature is enabled to a port, a mirror connection can use this port to mirror traffic.
PAGE 630
22 portCfg Valid options and arguments for ipif include the following: create src_ipaddr [netmask] mtu_size Creates IP interfaces. Specify the following: src_ipaddr Specifies source IP address in either IPv6 or IPv4 format: src_IPv6_addr/prefix_len Specifies the source IPv6 address of the virtual port if IPv6 is used. The address must be an IPv6 global, unicast address, followed by a prefix. This is used for IPv6 addresses instead of a netmask. The prefix_len operator is required.
PAGE 631
portCfg 2 dest_IPv4_addr netmask Specifies the destination IPv4 address of the virtual port, if IPv4 is used. If an IPv4 address is used, the subnet mask must be specified as well. Use a.b.c.d. format. gateway_router Specifies the IP address of an IP router that can route packets to the destination virtual port IP address. The gateway address must be on the same IP subnet as one of the port IP addresses. This operand is optional with IPv6 addresses.
PAGE 632
22 portCfg delete ipif_addr vlan_id [dst_ipaddr] Deletes an entry from the VLAN tag table. Valid arguments for add and delete include the following: ipif_addr Specifies the locally defined interface address in IPv6 or IPv4 format. vlan_id Specifies the VLAN ID used for this tag. The range is 1 to 4094. l2cos Specifies Layer 2 Class of Service/Priority, as defined in the IEEE 802.1p specification. The range is 0 to 7. Valid only with the add option.
PAGE 633
portCfg 2 To create an interface for a failover crossport on a Brocade FX8-24: 1. Configure the interface for the local XGE port (xge0). switch:admin> portcfg ipif 8/xge0 create 192.168.10.20 \ 255.255.255.0 1500 Operation Succeeded 2. Configure the interface for the nonlocal XGE port (xge1). switch:admin> portcfg ipif 8/xge1 create 192.168.11.20 \ 255.255.255.0 1500 -x Operation Succeeded 3. The IP address 192.168.11.20 will be available for circuits on VE_Ports 22-31.
PAGE 634
22 portCfg 2000::11 2000::1:250 2001:: fe80:: ff01:: ff02:: 128 128 64 64 32 32 * * 2000::1:250 * * * 0 0 0 0 0 0 U U U U U U H L H L G C C C Flags: U=Usable G=Gateway H=Host C=Created(Interface) S=Static L=LinkLayer(Arp) To create an IP route for a failover crossport on a Brocade FX8-24: 1. Configure the iproute for the local XGE port (xge0). switch:admin> portcfg iproute 8/xge0 create 2.2.2.0 \ 255.255.255.0 192.168.11.250 Operation Succeeded 2.
PAGE 635
portCfg 2 To display the VLAN tag configuration (for an explanation of the flags, refer to portShow): switch:admin> portshow vlantag ge2 Port: ge2 Interface Address VlanId L2CoS Flags Destination Address ------------------------------------------------------------192.168.2.10 200 5 Perm Net 0.0.0.0 192.168.0.20 100 0 Perm 192.168.0.10 192.168.0.21 200 0 Perm 192.168.0.
PAGE 636
22 portCfg • NOTES OPERANDS Configure Differentiated Services Code Point (DSCP) markings. Set the committed rate or minimum and maximum rates for the default circuit. Configure a tunnel for FICON emulation. portcfg fcipcircuit - Create, modify, and delete additional FCIP circuits. • • Configure VLAN tagging on the default FCIP circuit. Set or modify the committed rate or minimum and maximum rates for the circuit. Configure or change VLAN tagging on the default circuit.
PAGE 637
portCfg 2 modify [tunnel_arguments][circuit_arguments] Modifies the properties of an existing FCIP tunnel. To modify a tunnel, you must specify at least one of the tunnel or circuit parameters for the command to be effective. Any circuit attribute you change with the fciptunnel modify command affects only the FCIP circuit 0. All other circuits remain unchanged. To modify a circuit other than circuit 0, you must use the fcipcircuit modify command.
PAGE 638
22 portCfg -N | --no-read-pipelining Disables tape read-pipelining. This operand is valid only with fciptunnel create and -t must be specified enabling the feature. The combination of -t and -N effectively enables tape write-pipelining. When using this operand with fciptunnel modify, specify one or more of the following: -t | --tape-pipelining mode Modifies the Open System Tape Pipelining configuration.
PAGE 639
portCfg 2 -i | --ipsec [0|1] Disables (0) or enables (1) Internet Protocol Security (IPSec) on the specified tunnel. Circuits that fall underneath a tunnel inherit the IPSec tunnel attributes. IPSec uses a predefined policy with IKEv2 for key negotiation, ESP transport mode for IPSec, and AES with 256-bit keys for Encryption (AES-GCM-ESP). You must specify a key with this option. On the Brocade FX8-24, IPSec is supported only on VE_Ports 12-21.
PAGE 640
22 portCfg --ficon-tape-read [0|1] Enables (1) or disables (0) FICON Tape Read Pipelining. This feature improves performance for certain applications when reading from FICON tape over extended distances. --ficon-tin-tir [0|1] Enables (1) or disables (0) FICON TIN/TIR emulation. This feature enhances recovery when a TIN/TIR exchange occurs as part of a channel recovery operation during tape emulation. This feature is enabled by default (recommended setting).
PAGE 641
portCfg 2 --max-write-devs value Defines the maximum number of concurrent emulated tape write operations. As concurrency increases, the value of emulation decreases. Excessive concurrency has the potential to oversubscribe packet data memory. The setting has significance only for host (channel) initiated operations at this side and will not affect tape write operations initiated by hosts (channels) attached The default value is 16. The range is 1 to 32.
PAGE 642
22 portCfg -k | --keepalive-timeout timeout Specifies the keep alive timeout in milliseconds. The valid range is 500 ms to 720000 ms. If the tunnel does not already have FICON Emulation enabled, circuits created on the tunnel default to 10000 ms (10 seconds) for the FCIP Trunking keep alive timeout. If FICON emulation is enabled on the FCIP Tunnel when a circuit is created, the keep alive timeout defaults to 1000 ms (1 seconds). -x | --metric metric Specifies the metric for the configured circuit.
PAGE 643
portCfg 2 --dscp-f-class dscp Specifies the DSCP value for F-Class Traffic. The range is 0 to 63. The default value is 0. --dscp-high dscp Specifies the DSCP value for High Priority. The range is 0 to 63. The default value is 0. --dscp-medium dscp Specifies the DSCP value for Medium Priority. The range is 0 to 63. The default value is 0. --dscp-low dscp Specifies he DSCP value for Low Priority. The range is 0 to 63. The default value is 0. delete tunnel_ID Deletes the specified FCIP tunnel.
PAGE 644
22 portCfg modify [circuit_ID] [circuit_arguments Modifies the properties of an existing FCIP circuit. To modify a circuit, you must specify at least one of the optional circuit parameters for the command to be effective. Any circuit attribute you change with the fcipcircuit modify command affects only the specified FCIP circuit. All other circuits remain unchanged. Refer to fciptunnel create and modify for a listing of optional circuit arguments and their descriptions.
PAGE 645
portCfg 2 Valid options and arguments for mgmtroute include the following: create Creates a management route for a specified destination IP Address. The following operands are required: dest_IPv4_addr Specifies the destination IP address for the management route in IPv4 format. netmask Specifies the subnet mask for the IPv4 address in a.b.c.d format. gateway Specifies the IP address of an IP router that can route packets to the destination IP address.
PAGE 646
22 portCfg SACK: On Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 1000 Path MTU Disc: 0 VLAN ID: (Not Configured) L2CoS: (VLAN Not Configured) DSCP: F: 0 H: 0 M: 0 L: 0 Flags: 0x00000000 To set the compression rate to 'moderate' on the tunnel: switch:admin> portcfg fciptunnel 1/12 modify -c 2 Operation succeeded To enable FICON XRC and Teradata emulation on the tunnel: switch:admin> portcfg fciptunnel 1/12 modify \ --ficon-xrc 1 --ficon-tera-read 1 --ficon-tera-write 1 Operation succeeded
PAGE 647
portCfg 2 operation will bring the existing circuit down (if circuit is up) before applying new configuration. Continue with Modification (Y,y,N,n): [ n] y Operation Succeeded 4. Modify existing circuit to change DSCP marking values switch:admin> portcfg fcipcircuit 16 modify 0 \ --dscp-f 32 --dscp-h 16 --dscp-m 8 --dscp-l 4 Operation Succeeded 5. Display the tunnel configuration and circuit values.
PAGE 648
22 portCfg SACK: On Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 10000 Path MTU Disc: 0 VLAN ID: 200 L2CoS: F: 0 H: 0 M: 0 L: DSCP: F: 0 H: 0 M: 0 L: Flags: 0x00000000 0 0 To modify an existing circuit so it becomes the listener: switch:admin> portcfg fcipcircuit 16 modify 2 -C 1 !!!! WARNING !!!! Modify operation can disrupt the traffic on the fcipcircuit specified \ for a brief period of time.
PAGE 649
portCfg 2 To create inband management interfaces for two Brocade 7800 switches on different subnets connected by two routers: 1. Configure the inband management interfaces on the first switch. switch:admin> portcfg mgmtif ge0 create 192.168.1.10 255.255.255.0 2. Configure the inband management route for the management station. switch:admin> portcfg mgmtroute ge0 create 192.168.3.0 \ 255.255.255.0 192.168.1.250 3. Configure the inband management interfaces on the second switch.
PAGE 650
22 portCfg FUNCTION Commands supported only on the Brocade FR4-18i blade. SYNOPSIS portcfg action [slot/]ge_port [if_action] arguments DESCRIPTION Use this command to manage configuration parameters for ports and Gigabit Ethernet (GbE) ports on the Brocade FR4-18i FC blade. The following commands are exclusive to this blade. • • portcfg arp - Add and delete address resolution protocol (ARP) entries. Flush ARP table.
PAGE 651
portCfg 2 The following options and arguments are supported with fciptunnel: create tunnel_id dest_ipaddr src_ipaddr comm_rate Creates an FCIP tunnel. You must specify a tunnel ID, destination and source IP address, and committed rate when creating an FCIP tunnel. Other configuration parameters are optional, and can be added later. tunnel_id Specifies the FCIP tunnel on the GbE port. Valid values are 0 to 7. dest_ipaddr Specifies the IP address for the remote end of the FCIP tunnel.
PAGE 652
22 portCfg -M [0|1] Disables (0) or enables (1) default VC QoS mapping on the specified tunnel. By default VC QoS mapping is disabled. There are two ways of prioritizing network traffic over FCIP tunnels: Differentiated Services Code Point (DSCP) and Layer 2 Class of Service (L2CoS). If the -M option is set, the VC on the FCIP outbound frame is mapped to both a DSCP and L2CoS value. These default values can be modified on a per-FCIP tunnel basis with the fciptunnel qosmap option.
PAGE 653
portCfg 2 -key preshared_key Specifies the preshared key to be used during IKE authentication. Specify a double-quoted string of alphanumeric characters between 12 and 32 bytes in length. This argument must be used together with -ike and -ipsec. NOTE: Only a single IPSec-enabled tunnel can be configured on a port. No other tunnels (IPSec or otherwise) can be configured on the same port. Jumbo frames (packets > 1500 bytes) are not supported on secure tunnels.
PAGE 654
22 portCfg config Creates or modifies a FICON configuration. delete Deletes an existing FICON configuration. The following optional feature arguments are supported with the config and delete options. These configurations are persistent. -x 1|0 Enables (1) or disables (0) XRC emulation. FICON XRC Emulation allows XRC (IBM eXtendedRemote Copy, also known as IBM z/OS Global Mirroring) to operate effectively at extended distances. -w 1|0 Enables (1) or disables (0) Tape Write Pipelining.
PAGE 655
portCfg 2 attached at the opposite side. Too small of a value results in poor performance. The value should be chosen based upon the typical tape channel program that requires optimum performance. The default value is 32. The range is 1 to 100. -c | --wrtMaxDevs value Defines the maximum number of concurrent emulated tape write operations. As concurrency increases, the value of emulation decreases. Excessive concurrency has the potential to oversubscribe packet data memory.
PAGE 656
22 portCfg To modify the committed rate and turn on compression on an existing FCIP tunnel: switch:admin> portcfg fciptunnel 3/ge0 modify 6 -b 1000000-c 1 Operation Succeeded \ To create an FCIP tunnel with VC QoS mapping (default) turned on: switch:admin> portcfg fciptunnel ge1 create 1 192.168.200.109 192.168.200.
PAGE 657
portCfgAlpa 2 portCfgAlpa Configures the AL_PA offset on a specified port or range of ports. SYNOPSIS DESCRIPTION portcfgalpa [slot/]port, mode Use this command to set the Arbitrated Loop Physical Address (AL_PA) offset on a port or a range of ports to either 0x0 (default) or 0x13. Changes made by this command are persistent across switch reboots and power cycles. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 658
22 portCfgAutoDisable portCfgAutoDisable Manages the port autodisable configuration.
PAGE 659
portCfgAutoDisable 2 --add Specifies one or more trigger conditions that will disable the specified ports. Trigger conditions must be separated by a space, for example, LOSN OLS LIP. Trigger conditions are case insensitive. --remove Removes one or more trigger conditions from the port autodisable configuration. --addall Adds all supported trigger conditions to the port autodisable configuration. --removeall Removes all supported trigger conditions from the port autodisable configuration.
PAGE 660
22 portCfgAutoDisable To add all trigger conditions except the LOSN condition: switch:admin> portcfgautodisable --addexcept LOSN 18 switch:admin> portcfgautodisable --show 18 Port Auto Disable: ON Configured Option(s): LOSG OLS NOS LIP To attempt to enable and configure the port autodisable feature on a port for which the feature is already activated (the configuration is not updated): switch:admin> portcfgautodisable Port Auto Disable: ON Configured Option(s): LOSG OLS switch:admin> portcfgautodisable S
PAGE 661
portCfgCompress 2 portCfgCompress Configures a port for compression. SYNOPSIS portcfgcompress --enable [slot]/port portcfgcompress --disable [slot]/port portcfgcompress --help DESCRIPTION Use this command to configure a port for compression. This command enables or disables the compression configuration on the specified port, and saves the configuration persistently. Configuring a port for compression is disruptive. You must disable the port before you can enable compression on the port.
PAGE 662
22 portCfgCompress switch:admin> lscfg --config 15 -port 2 This operation requires that the affected ports be disabled. Would you like to continue [y/n]?: y Checking for cap port 2 After Checking for cap port 2 val 1 port 2 lscfg: The port cannot be moved to the requested switch because port or ports have Encryption/Compression enabled. Please disable the Encryption/Compression configuration.
PAGE 663
portCfgCreditRecovery 2 portCfgCreditRecovery Enables or disables credit recovery on a port. SYNOPSIS portcfgcreditrecovery --enable [slot/]port portcfgcreditrecovery --disable [slot/]port DESCRIPTION Use this command to enable or disable credit recovery on a port. The credit recovery feature enables credits or frames to be recovered. Only ports configured as long distance ports can utilize the credit recovery feature. The default credit recovery configuration is enabled.
PAGE 664
22 portCfgDefault portCfgDefault Resets the port configuration to factory default value. SYNOPSIS DESCRIPTION portcfgdefault [slot/][ge]port Use this command to reset all configuration values on a specified port to their factory defaults. This command persistently disables ports capable of routing, which is the factory default value. Use the portCfgShow command to display the port configuration. This command does not change the state of a port.
PAGE 665
portCfgDefault QOS Port Port Auto Disable: Rate Limit F_Port Buffers NPIV PP Limit: SEE ALSO 2 AE OFF OFF OFF 126 portCfgEport, portCfgGport, portCfgLongDistance, portCfgLport, portCfgPersistentDisable, portCfgPersistentEnable, portCfgShow, portCfgSpeed, portCfgTrunkPort Fabric OS Command Reference 53-1001764-01 639
PAGE 666
22 portCfgDPort portCfgDPort Configures a port as a D_Port. SYNOPSIS portcfgdport --enable [slot/]port_list portcfgdport --disable [slot/]port_list portcfgdport --help DESCRIPTION Use this command to configure a diagnostic port (D_Port). The D_Port is not part of the fabric. It does not carry any interswitch traffic or data traffic.
PAGE 667
portCfgDPort • • 2 A set of ports separated by commas, for example "3,5,7,8"or 5/3,5,7,8 on bladed systems. A wildcard '*' indicates all ports. The wild card should be enclosed in single quotation marks. --enable Configures the specified ports as D_Ports. --disable Clears the D_Port configuration on the specified ports. --help Displays the command usage.
PAGE 668
22 portCfgEncrypt portCfgEncrypt Configures a port for encryption. SYNOPSIS portcfgencrypt --enable [slot]/port portcfgencrypt --disable [slot]/port portcfgencrypt --help DESCRIPTION Use this command to configure a port for encryption. This command enables or disables the encryption configuration on the specified port and saves the configuration persistently. Before you can configure a port for encryption, you must configure the port for authentication.
PAGE 669
portCfgEncrypt 2 To attempt to move a configured port to another logical switch: switch:admin> lscfg --config 15 -port 2 This operation requires that the affected ports be disabled. Would you like to continue [y/n]?: y Checking for cap port 2 After Checking for cap port 2 val 1 port 2 lscfg: The port cannot be moved to the requested switch because port or ports have Encryption/Compression enabled. Please disable the Encryption/Compression configuration.
PAGE 670
22 portCfgEport portCfgEport Enables or disables E_Port capability on a port or locks down a port as an E_Port. SYNOPSIS portcfgeport [slot/]port mode portcfgeport -i [index1[-index2] [...] [-f] mode] portcfgeport -slot [slot1[-slot2] [...] portcfgeport -h DESCRIPTION Use this command to enable or disable E_Port capability on a port or to lock down a port as an E_Port. E_Port capability is enabled by default.
PAGE 671
portCfgEport 2 mode Specifies the E_Port configuration as one of the following: 0 Disables E_Port capability for the specified ports. 1 Enables the ports as E_Ports. This is the default port state. 2 Locks down the ports as E_Ports. This command effectively disables the port's F_Port capability. -h Displays the command usage.
PAGE 672
22 portCfgEXPort portCfgEXPort Sets a port to be an EX_Port, and sets and displays EX_Port configuration parameters.
PAGE 673
portCfgEXPort 2 If the Fabric Parameter value is "Auto Negotiate", the port ID format, R_A_TOV, and E_D_TOV values display the negotiated values indicated by "(N)" next to them. The negotiated values are what the edge switch specifies in the ELP request. If the state is "Not OK", the R_A_TOV and E_D_TOV display "Not Applicable". By default, all EX_Ports are auto-ELP enabled.
PAGE 674
22 portCfgEXPort -m port mode Specifies the port mode. The -m option enforces the same port mode for all the ports connected to the same edge fabric. If this option is selected, the port mode is compared against the online ports. If the modes are different, an error message is posted, and the command fails. Valid values are as follows: 0 Brocade Native mode. 1 McDATA Open Fabric mode. 2 McDATA Fabric mode. 3 MCDATA fabric legacy mode. 5 Brocade Network OS fabric mode.
PAGE 675
portCfgEXPort 2 To enable Brocade Network OS (NOS) fabric mode on port 1/5: switch:admin> portcfgexport 1/5 -a 1 -m 5 Port 1/5 info Admin: enabled State: NOT OK Pid format: Not Applicable Operate mode: Brocade NOS Edge Fabric ID: 128 Preferred Domain ID: 160 Front WWN: 50:00:51:e4:44:40:0e:80 Fabric Parameters: Auto Negotiate R_A_TOV: Not Applicable E_D_TOV: Not Applicable Authentication Type: None DH Group: N/A Hash Algorithm: N/A Edge fabric's primary wwn: N/A Edge fabric's version stamp: N/A SEE ALSO
PAGE 676
22 portCfgFaultDelay portCfgFaultDelay Configures the fault delay for a single FC port. SYNOPSIS portcfgfaultdelay [slot/]port delay portcfgfaultdelay --help DESCRIPTION Use this command to configure the fault delay of an FC port. In the event that the link is noisy after a host power cycle, the switch may go into a soft fault state, which means a delay of R_A_TOV. Setting the mode value to 1 reduces the fault delay value to 1.2 seconds.
PAGE 677
portCfgFaultDelay Locked L_Port Locked G_Port Disabled E_Port Locked E_Port ISL R_RDY Mode RSCN Suppressed Persistent Disable LOS TOV enable NPIV capability QOS E_Port Port Auto Disable: OFF OFF OFF OFF OFF OFF OFF OFF ON AE OFF Rate Limit EX Port Mirror Port Credit Recovery F_Port Buffers Fault Delay: NPIV PP Limit: CSCTL mode: D-Port mode: Compression: Encryption: FEC: OFF OFF OFF ON OFF 1(1.
PAGE 678
22 portCfgFaultDelay FEC .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. Fault Delay 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 where AE:QoSAutoEnable, AN:AutoNegotiate, ..
PAGE 679
portCfgFec 2 portCfgFec Enables or disables the Forward Error Correction flag in the chassis configuration file. SYNOPSIS portcfgfec --enable [slot/]port[-port] portcfgfec --disable [slot/]port[-port] portcfgfec --show portcfgfec --help DESCRIPTION Use this command to enable or disable the Forward Error Correction (FEC) flag on a specified port or on a range of ports, or to display the configuration. If the FEC flag is already enabled on the ports, this command takes no action.
PAGE 680
22 portCfgFec Forward Error Correction configured Displays ON if FEC is enabled on the port. Displays OFF if the feature is disabled (default). --help Displays the command usage.
PAGE 681
portCfgFillword 2 portCfgFillword Configures the fill word for a single 8G FC port. SYNOPSIS portcfgfillword [slot/]port, mode [passive] portcfgfillword --help DESCRIPTION NOTES Use this command to configure the fill word of an 8G FC port. By default, this command disables and re-enables the port and the port comes online with the new fill word setting. When used with the passive option, the new settings are not applied until the next time the port goes offline and comes back online.
PAGE 682
22 portCfgFillword To set the fill word of a port to ARBFF-ARBFF using the -arbff-arbff option: switch:admin> portcfgfillword 2/3, -arbff-arbff To set the fill word of a port to IDLE-ARBFF using the -idle-arbff option: switch:admin> portcfgfillword 27, -idle-arbff switch:admin> portcfgshow 27 Area Number: 27 Speed Level: AUTO(HW) Fill Word(On Active) 2(SW Idle-Arbff) Fill Word(Current) 2(SW Idle-Arbff) (output truncated) To set the fill word of a port to the preferred mode 3 (If hardware arb-arbff fails
PAGE 683
portCfgFportBuffers 2 portCfgFportBuffers Configures F_Port buffer allocation. SYNOPSIS portcfgfportbuffers --enable [slot/]port buffers portcfgfportbuffers --disable [slot/]port DESCRIPTION Use this command to change the default buffer allocation for an F_Port and to allocate a specified number of buffers to the port. When port buffer allocation is enabled, the number of buffers specified override the default F_Port buffer allocation.
PAGE 684
22 portCfgGeMediaType portCfgGeMediaType Sets the selected mode for the ge0 and ge1 ports on the Brocade 7800. SYNOPSIS portcfggemediatype ge_port [optical | copper] portcfggemediatype --help DESCRIPTION Use this command to set the mode for ge0 and ge1 ports on the Brocade 7800. Each of the ge0 and ge1 ports on the Brocade 7800 can be configured as a copper port (RJ45) or an optical port (SFP). The copper ports (RJ45) can only accept copper connections.
PAGE 685
portCfgGeMediaType 2 --help Displays the command usage.
PAGE 686
22 portCfgGport portCfgGport Designates a port as a G_Port; removes G_Port designation. SYNOPSIS portcfggport [slot/]port,mode DESCRIPTION Use this command to designate a port as a G_Port. After successful execution of this command, the switch attempts to initialize the specified port as an F_Port only, and does not attempt loop initialization (FL_Port) on the port. A port designated as a G_Port can become an E_Port. This configuration can be cleared but not set on VE/VEX_Ports.
PAGE 687
portCfgISLMode 2 portCfgISLMode Enables or disables ISL R_RDY mode on a port. SYNOPSIS DESCRIPTION portcfgislmode [slot/]port,mode Use this command to enable or disable interswitch link read-ready (ISL R_RDY) mode on a port. Use the portCfgShow command to determine whether ISL R_RDY mode is enabled on a port. In ISL R_RDY mode, the port sends a primitive signal that the port is ready to receive frames. The port sends an exchange link parameter (ELP) with flow control mode 02.
PAGE 688
22 portCfgISLMode To disable ISL R_RDY mode on a port: switch:admin> portcfgislmode 1/3, 0 SEE ALSO 662 configure, portCfgLongDistance, portCfgShow Fabric OS Command Reference 53-1001764-01
PAGE 689
portCfgLongDistance 2 portCfgLongDistance Configures a port to support long distance links. SYNOPSIS DESCRIPTION portcfglongdistance [slot/]port [distance_level] [vc_translation_link_init] [desired_distance] Use this command to allocate frame buffer credits to a port or to configure a specified long distance link. The port can only be used as an E_Port. Changes made by this command are persistent across switch reboots and power cycles. This configuration can be cleared but not set on VE/VEX_Ports.
PAGE 690
22 portCfgLongDistance distance_level Specify the long distance level as one of the following (the numerical value representing each distance_level is shown in parentheses): L0 (0) Specify L0 to configure the port as a regular port. A total of 20 full-size frame buffers are reserved for data traffic, regardless of the port's operating speed; therefore, the maximum supported link distance is up to 5 km at 2 Gbps, up to 2 km at 4 Gbps and up to 1 km at 8, 10, and 16 Gbps.
PAGE 691
portCfgLongDistance portState: portPhys: portScn: portId: portWwn: Distance: portSpeed: 2 Offline 4 No_Light 0 013f00 20:3f:00:60:69:00:02:48 super long <= 100km 2Gbps Interrupts: Unknown: Lli: Proc_rqrd: Timed_out: Rx_flushed: Tx_unavail: Free_buffer: Overrun: Suspended: Parity_err: 2_parity_err: CMI_bus_err: SEE ALSO 2 9 0 9 0 0 0 0 0 0 0 0 0 0 Link_failure: Loss_of_sync: Loss_of_sig: Protocol_err: Invalid_word: Invalid_crc: Delim_err: Address_err: Lr_in: Lr_out: Ols_in: Ols_out: 0 0 9 0 0 0 0 0 0
PAGE 692
22 portCfgLossTov portCfgLossTov Enables or disables de-bouncing of signal loss for front end ports. SYNOPSIS DESCRIPTION portcfglosstov [slot/]port mode Use this command to enable or disable the de-bouncing of loss of signal for 100 ms for front end ports. Use portCfgShow to display the current setting. If executed without operands, the command prints the usage. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 693
portCfgLport 2 portCfgLport Configures a port as an L_Port. SYNOPSIS DESCRIPTION NOTES portcfglport [[slot/]port] locked_mode [private_mode] [duplex_mode]] Use this command to designate a port as an L_Port, and to configure its behavior. When a port is designated as an L_Port, the switch attempts to initialize that port as a fabric L_Port (FL_Port). The switch will never attempt a point-to-point (F_Port) initialization on the port. By default the L_Port will be a public L_Port.
PAGE 694
22 portCfgLport To display the L_Port conditions: switch:admin> portcfglport [...] Ports of Slot 4 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 ---------------+--+--+--+--+---+--+--+--+--+--+--+--+---+--+--+-[...] Locked L_Port .. Private L_Port .. Locked Loop HD .. Loop Fairness .. (output truncated) SEE ALSO 668 .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ON .. .. .. .... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ON .. .. .. ON .. .. ..
PAGE 695
portCfgNPIVPort 2 portCfgNPIVPort Enables or disables N_Port ID virtualization (NPIV) functionality on a port and sets the per-port login limit. SYNOPSIS portcfgnpivport --enable [slot/]port portcfgnpivport --disable [slot/]port portcfgnpivport --setloginlimit [slot/]port login_limit portcfgnpivport --help portcfgnpivport [slot/]port mode DESCRIPTION Use this command to enable or disable NPIV functionality on a port and to configure the maximum number of logins for this port.
PAGE 696
22 portCfgNPIVPort NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. When using portCfgNPIVPort --disable or --enable on trunked ports, you must disable all trunk member ports before changing the NPIV capability on a trunk member and then re-enable the trunked ports to ensure that the configuration changes take effect.
PAGE 697
portCfgNPIVPort Persistent Disable.. LOS TOV enable .. NPIV capability ON NPIV PP Limit 80 (output truncated) .. .. ON 80 ON .. ON 80 ON .. ON 80 .. .. ON 80 .. .. ON 80 .. .. ON 80 .. .. ON 80 .. .. ON 95 .. .. ON 95 .. .. ON 95 .. .. ON 95 .. .. ON 95 .. .. ON 95 .. .. ON 95 2 .. ..
PAGE 698
22 portCfgNPIVPort SEE ALSO 672 Persistent Disable LOS TOV enable NPIV capability QOS E_Port Port Auto Disable: OFF OFF OFF AE OFF Rate Limit EX Port Mirror Port Credit Recovery F_Port Buffers Fault Delay: NPIV PP Limit: CSCTL mode: Frame Shooter Port D-Port mode: OFF OFF OFF ON 12 0(R_A_TOV) 255 OFF OFF OFF configure, portCfgDefault, portCfgShow Fabric OS Command Reference 53-1001764-01
PAGE 699
portCfgNPort 2 portCfgNPort Enables or disables N_Port functionality for an Access Gateway port. SYNOPSIS portcfgnport [slot/]port1[-port2] [mode] DESCRIPTION Use this command to enable or disable N_Port functionality for an Access Gateway port or for a range of ports. The enabled N_Ports automatically come online if they are connected to an enterprise fabric switch that supports NPIV. When used without operands, this command displays the port configuration.
PAGE 700
22 portCfgOctetSpeedCombo portCfgOctetSpeedCombo Sets port speed combination for a port octet. SYNOPSIS portcfgoctetspeedcombo [slot]port combo portcfgoctetspeedcombo [slot]port -default DESCRIPTION Use this command to configure the speed for a port octet. A Condor 3 ASIC has six octets, each of which contains eight ports. You can configure up to three different speed combinations. When you configure a given port, the combination applies to all ports in the octet.
PAGE 701
portCfgOctetSpeedCombo 2 combo Specifies the speed combination for the ports in the octet. The following speed combinations are supported: 1 Supports autonegotiated or fixed port speeds of 16 Gbps,8 Gbps,4 Gbps, and 2 Gbps. 2 Supports autonegotiated or fixed port speeds of 10 Gbps,8 Gbps,4 Gbps, and 2 Gbps. 3 Supports autonegotiated or fixed port speeds of 16 Gbps and 10 Gbps. -default Sets all octet combination values back to the default value of 1.
PAGE 702
22 portCfgPersistentDisable portCfgPersistentDisable Persistently disables a port or a range of ports. SYNOPSIS portcfgpersistentdisable portcfgpersistentdisable [slot/]port1[-port2] [...] portcfgpersistentdisable -i [index1[-index2] [...] [-f]] portcfgpersistentdisable -slot [slot1[-slot2] [...] portcfgpersistentdisable -h DESCRIPTION Use this command to persistently disable a port or a range of ports.
PAGE 703
portCfgPersistentDisable 2 -i index1[-index2] Persistently disables a port or a range of ports identified by port index numbers. You may specify multiple index ranges separated by a space, for example, -i 33-38 40-60. -f Ignores nonexisting ports. This operand is valid only with the -i option. -slot [slot1[-slot2] Persistently disables all ports on a slot or on a range of slots, for example, -s 3-5. You may specify multiple slot ranges separated by a space, for example, -s 3-5 8-10.
PAGE 704
22 portCfgPersistentDisable Disabled - YES YES - - - - - - - - - - - YES YES Slot 0 32 33 34 35 36 37 38 39 ---------+---+---+---+---+---+---+---+-Disabled YES YES YES YES YES YES YES YES SEE ALSO 678 ficonCupSet, ficonCupShow, portCfgDefault, portDisable, portEnable, portCfgPersistentEnable, portShow, portSwapDisable, portSwapShow, switchShow Fabric OS Command Reference 53-1001764-01
PAGE 705
portCfgPersistentEnable 2 portCfgPersistentEnable Persistently enables a port or a range of ports. SYNOPSIS portcfgpersistentenable portcfgpersistentenable [slot/]port1[-port2] [...] portcfgpersistentenable -i [index1[-index2] [...] [-f]] portcfgpersistentenable -s[lot] [slot1[-slot2] portcfgpersistentenable -h DESCRIPTION Use this command to persistently enable a port or a range of ports. If the port is connected to another switch when this command is issued, the fabric may reconfigure.
PAGE 706
22 portCfgPersistentEnable -i index1[-index2] Persistently enables a port or a range of ports identified by port index numbers. You may specify multiple index ranges separated by a space, for example, 33-38 40-60. -f Ignores nonexisting ports. This operand is valid only with the -i option. -slot [slot1[-slot2] Persistently enables all ports on a slot or on a range of slots, for example, -s 3-5. Multiple slot ranges are not supported with this command. -h Displays the command usage.
PAGE 707
portCfgQoS 2 portCfgQoS Enables or disables QoS, sets the default configuration, and sets and resets the ingress rate limit. SYNOPSIS portcfgqos --disable | --enable [slot/]port portcfgqos --setratelimit [slot/]port ratelimit portcfgqos --resetratelimit [slot/]port portcfgqos --enable | --disable [slot/]port[-port] csctl_mode portcfgqos --default [slot/]port portcfgqos --help DESCRIPTION Use this command to configure traffic prioritization on a port.
PAGE 708
22 portCfgQoS OPERANDS This command has the following operands: slot For bladed systems only, specifies the slot number of the port to configure, followed by a slash (/). port[-port] Specifies the port or port range to be configured, relative to the slot for bladed systems. Use switchShow for a listing of valid ports. You can specify a port range only when you configure CS_CTL-based traffic prioritization. --disable Disables the current configuration on the specified ports.
PAGE 709
portCfgQoS 2 To enable CS_CTL VC mode on a port when QoS is enabled.
PAGE 710
22 portCfgShow portCfgShow Displays port configuration settings. SYNOPSIS portcfgshow portcfgshow [slot/]port portcfgshow -i [ndex1[-index2] [...] [-f]] portcfgshow -slot slot1[-slot2] [...] portcfgshow option [slot/][ge_port] [arguments] [optional_arguments] DESCRIPTION Use this command to display the current configuration of a port. The behavior of this command is platform-specific; output varies depending on port type and platform, and not all options are supported on all platforms.
PAGE 711
portCfgShow 2 Fill Word (Current) Displays the currently effective fill word setting. Possible values are 0(Idle-Idle), 1(arbff-arbff), 2(Idle-arbff), or 3(A-A then SW I-A).This parameter is set by the portcfgFillword command. AL_PA Offset 13 Displays (..) or OFF when the arbitrated loop physical address (AL_PA) on the port is configured to use a 0x0 AL_PA address (default). Displays ON when the address configuration is 0x13 AL_PA. This value is set by the portCfgAlpa command.
PAGE 712
22 portCfgShow RSCN Suppressed Displays ON when RSCN suppression is enabled on the port. Displays (..) or OFF when RSCN suppression is disabled. This value is set by the portCfg rscnsupr command. Persistent Disable Displays ON when the port is persistently disabled; otherwise displays (..) or OFF. This value is set by the portCfgPersistentDisable command. LOS TOV enable Displays ON when LOS TOV is enabled on the port; otherwise displays (..) or OFF. This value is set by the portCfgLossTov command.
PAGE 713
portCfgShow 2 NPIV PP Limit Displays the maximum number of allowed logins for the port. Displays the default of 126 or the configured maximum. This parameter is set with the portCfgNPIVPort --setloginlimit command. CSCTL mode Displays ON if CSCTL mode is enabled on the port. Displays (..) or OFF if the feature is disabled. This parameter is set with the portCfgQos command. D_Port mode Displays ON when the port is configured as a D_Port; otherwise displays (..) or OFF.
PAGE 714
22 portCfgShow -i index1[-index2] Specifies a port or a range of ports identified by port index numbers. You can specify multiple index ranges separated by a space, for example, -i 33-38 40-60. -f Ignores nonexisting ports. This operand is valid only with the -i option. -slot slot1[-slot2] Specifies a slot or a range of slots. You can specify multiple slot ranges separated by a space, for example,-s 1-3 5-7. ge_port Specifies the number of the GbE Port to be displayed.
PAGE 715
portCfgShow 2 -ipsec On the Brocade FR4-18i, this option displays IKE and IPSec policy information on IPSec-enabled tunnels. On the Brocade 7800/FX8-24, this option displays whether IPSec is enabled or disabled. If enabled, the key is displayed. If IPSec is enabled and configured in legacy mode, the mode is displayed as "legacy". The mode information is displayed whether or not you issue the -ipsec option. This operand is optional. -qosmap Displays the VC to QoS mapping.
PAGE 716
22 portCfgShow To display the port configuration settings on a Brocade 5100 for a range of ports specified by their index numbers: switch:admin> portcfgshow -i Speed 8G 8G Fill Word(On Active) 0 0 Fill Word(Current) 0 0 AL_PA Offset 13 .. .. Trunk Port ON ON Long Distance .. .. VC Link Init .. .. Locked L_Port .. .. Locked G_Port .. .. Disabled E_Port .. .. Locked E_Port .. .. ISL R_RDY Mode .. .. RSCN Suppressed .. .. Persistent Disable .. .. LOS TOV enable ON ..
PAGE 717
portCfgShow Credit Recovery Fport Buffers Port Auto Disable CSCTL mode D-Port mode Compression Encryption FEC Fault Delay ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .. .. .. .. ON 0 ON .. .. .
PAGE 718
22 portCfgShow F_Port Buffers NPIV PP Limit: Fault Delay: NPIV PP Limit: D-Port mode: Compression: Encryption: FEC OFF 126 0(R_A_TOV) 126 OFF OFF OFF active To display port configuration settings on a DCX with a Brocade FCOE10-24 blade in Slot 12: switch:admin> portcfgshow -slot 12 Index: 112 113 114 115 116 117 118 119 [truncated] ------------------+---+---+---+-----+---+---+---+-----+---+---+Octet Speed Combo 1 1 1 1 1 1 1 1 1 1[truncated] Speed AN AN AN AN AN AN AN AN AN AN[truncated] Fill Word(On Ac
PAGE 719
portCfgShow VC Link Init Locked L_Port Locked G_Port Disabled E_Port ISL R_RDY Mode RSCN Suppressed Persistent Disable LOS TOV enable NPIV capability QOS E_Port Port Auto Disable: Rate Limit EX Port Mirror Port Credit Recovery F_Port Buffers NPIV PP Limit: CSCTL mode: Fault Delay FEC 2 OFF OFF OFF OFF OFF OFF OFF OFF ON AE OFF OFF ON OFF ON OFF 126 OFF 1(1.
PAGE 720
22 portCfgShow Fastwrite off Tape Pipelining off Committed Rate 100000 Kbps (0.100000 Gbps) SACK on Min Retransmit Time 100 Keepalive Timeout 10 Max Retransmissions 8 VC QoS Mapping off DSCP (Control): 0, DSCP (Data): 0 VLAN Tagging Not Configured VC QoS Map: (default) VC DSCP L2CoS VC DSCP L2CoS VC DSCP L2CoS 0 46 7 1 07 0 2 11 3 4 19 3 5 23 3 6 27 0 8 35 0 9 39 0 10 43 4 12 51 4 13 55 4 14 59 4 ------------------------------------------Tunnel ID 1 Remote IP Addr 192.168.100.41 Local IP Addr 192.168.100.
PAGE 721
portCfgShow 2 Interface IPv6 Address Len MTU -------------------------------------------------------0 20::2:10 64 1500 Inband management configuration: Arp configuration: IP Address Mac Address -----------------------------Iproute Configuration: IP Address Mask Gateway Metric -----------------------------------------------------192.168.42.0 255.255.255.0 192.168.2.
PAGE 722
22 portCfgShow TPerf Option: Off IPSec: Enabled (legacy) IPSec Key: '12345678901234567890123456789012' QoS Percentages: High 50%, Med 30%, Low 20% Remote WWN: Not Configured Local WWN: 10:00:00:05:1e:52:fe:00 Flags: 0x00000000 FICON: Off switch:admin> portcfgshow fciptunnel 1/12 ------------------------------------------Tunnel ID: 1/12 Tunnel Description: Compression: Off Fastwrite: Off Tape Acceleration: Off TPerf Option: Off IPSec: Enabled (legacy) QoS Percentages: High 50%, Med 30%, Low 20% Remote WWN:
PAGE 723
portCfgSpeed 2 portCfgSpeed Configures the speed for a port or a range of ports. SYNOPSIS portcfgspeed [slot/]port speed portcfgspeed -i [index1[-index2] [-f] speed] portcfgspeed -slot [slot1[-slot2] [...] speed portcfgspeed -h DESCRIPTION Use this command to set the speed on a specified port or port range. This command disables and then re-enables the ports, and the ports come online with the new speed setting.
PAGE 724
22 portCfgSpeed -slot [slot1[-slot2] Configures all ports on a slot or on a range of slots, for example, -s 3-5. You may specify multiple slot ranges separated by a space, for example, -s 3-5 8-10. speed Sets speed for the specified ports. This operand is required. Valid values are one of the following. 0 Autosensing mode (hardware). The port automatically configures for maximum speed. ax Autosensing mode (hardware). The port automatically configures for maximum speed with enhanced retries.
PAGE 725
portCfgTrunkPort 2 portCfgTrunkPort Enables or disables trunking on a port. SYNOPSIS DESCRIPTION portcfgtrunkport [slot/]port[,] mode Use this command to enable or disable trunking on a port. Use switchCfgTrunk to enable or disable trunking on all ports of a switch. When the command is executed to update the trunking configuration, the port to which the configuration applies is disabled and subsequently re-enabled with the new trunking configuration.
PAGE 726
22 portCfgVEXPort portCfgVEXPort Configures a port as a VEX_Port connected to an FC-IP and sets and displays VEX_Port configuration parameters.
PAGE 727
portCfgVEXPort OPERANDS 2 This command has the following operands: -a admin Enables or disables the specified port as a VEX_Port. Valid values are 1 (enable as VEX_Port), 2 (disable as VEX_Port and enable as non-VEX_Port). portCfgDefault may also be used to disable VEX_Ports. -f fabricid Specifies the fabric ID. Valid values are 1-128. -r ratov Specifies the R_A_TOV used for port negotiation. Valid values are 2000 to 120000.
PAGE 728
22 portCfgVEXPort Fabric Parameters: Auto Negotiate R_A_TOV: 9000(N) E_D_TOV: 2000(N) Edge fabric's primary wwn: N/A Edge fabric's version stamp: N/A To set the fabric ID of port 2/21 to 5 and the port ID format to core: switch:admin> portcfgvexport 2/21 -f 5 -p 1 To configure port 2/20 as a VEX_Port and set the fabric ID to 4: switch:admin> portcfgvexport 2/20 -a 1 -f 4 To disable fabric parameter negotiation on port 2/20 of a VEX_Port: switch:admin> portcfgvexport 2/20 -t 2 SEE ALSO 702 portCfgEXP
PAGE 729
portCmd 2 portCmd Diagnoses intelligent ports.
PAGE 730
22 portCmd bad CRC payloads rx Number of bad CRC payloads received. out of seq PDUs rx Number of out-of-sequence PDUs received. flow control count Flow control count. last rtt Last Round trip in milliseconds (RT traffic only). When issued with the ipperf option, this command determines characteristics of the path to the remote host. The output of the --ipperf -S command includes the following information: Sampling frequency(s) The interval specified with the -i option or the default (30 seconds).
PAGE 731
portCmd OPERANDS 2 This command has the following operands: slot For bladed systems only, specifies the slot number of the port to be configured, followed by a slash (/). ge port Specifies the port number of the GbE port on the blade. --ipperf Determines the path characteristics to the remote host. Valid arguments and their values include the following: -s src_ip Specifies the local IP address to use for sourcing the probe packets.
PAGE 732
22 portCmd -v vlan_id Specifies the VLAN ID. Values must be in the range between 1 and 4094. There is no default value. Note that a VLAN tag entry must exist on the local and remote sides prior to issuing the -v option. A VLAN Tag table entry is dynamically maintained by the ipperf application. See the portCfg help page for details on creating a VLAN tag table. -c L2 Class-of-Service Specifies Class of Service/Priority, as defined by IEEE 802.1p. Valid values are 0 to 7. The default is 0.
PAGE 733
portCmd 2 --traceroute Traces the IP router hops used to reach the host dst_ip from one of the source IP interfaces on the GbE port. Valid arguments include the following: -s src_ip Specifies the local IP address to use for sourcing the probe packets. IPv6 addresses are supported. -d dst_ip Specifies the destination IP address to which to probe the IP router path. IPv6 addresses are supported. -x | -crossport Specifies the source IP address as a crossport.
PAGE 734
22 portCmd -sink | -source Designates the switch to function either as a data sink or a data source. This operand is required. When -sink is specified, TPerf begins to respond to traffic sent by the switch acting as the data source. The process continues to run until it is either terminated by user intervention (Ctrl +C) or, if a value for duration is specified with the -t option, until the process completes the set time frame.
PAGE 735
portCmd 2 -size pdu_size Specifies the PDU size to use (not including headers). The valid range is between 2048 and 10112 bytes. The default is equivalent to the maximum segment size (MSS). This is the maximum size if the -random option is specified. -interval interval Specifies the interval at which the statistics display is refreshed, in seconds. The default is 30 seconds.
PAGE 736
22 portCmd To set the path characteristic to source mode on the remote host using VLAN tagging with the -c option. switch:admin> portcmd --ipperf 8/ge0 \ -s 192.168.10.1 -d 192.168.20.
PAGE 737
portCmd 2 To configure a TPerf source to generate one-way low priority traffic with a random PDU size from 2048 to 4000 bytes and a payload pattern of ones.
PAGE 738
22 portDebug portDebug Sets debug level and verbose level of port modules. SYNOPSIS DESCRIPTION NOTES OPERANDS portdebug dbg_lvl, vbs_lvl Use this command to set the debug level and verbose level of port modules. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 739
portDecom 2 portDecom Decommissions and disables an E_Port without frame loss. SYNOPSIS portdecom portdecom [slot/]port portdecom --help DESCRIPTION Use this command to disable an E_Port without frame loss. The E_Port can either be a single redundant E_Port or an E_Port which is part of a trunk group. The port must be an operational E_Port with at least one other redundant E_Port available to reach all domains that the E_Port can reach.
PAGE 740
22 portDisable portDisable Disables a port or a range of ports. SYNOPSIS portdisable [slot/]port1[-port2] [...] portdisable -i [index1[-index2] [...] [-f]] portdisable -slot [slot1[-slot2] [...] portdisable -h DESCRIPTION Use this command to disable a port or a range of ports. If the port is connected to another switch when disabled, the fabric may reconfigure. Devices connected to this port can no longer communicate with the fabric.
PAGE 741
portDisable EXAMPLES 2 To disable a single port.
PAGE 742
22 portDPortTest portDPortTest Initiates or terminates a D_Port test. SYNOPSIS portdporttest --start [slot/]port_list portdporttest --stop [slot/]port_list portdporttest --show [slot/]port_list | all portdporttest --help DESCRIPTION Use this command to manually terminate or re-initiate testing on a diagnostic port (D_Port). The port must be configured as a D_Port and physically connected to a second D_Port on a remote switch. Refer to the portCfgDPort command for more information.
PAGE 743
portDPortTest 2 Roundtrip link latency Displays roundtrip link latency in nanoseconds or unknown when the test is in progress. Roundtrip link latency is the time required for the light to travel from a given port to the port at the remote side of the link and back again. Estimated cable distance The estimated physical distance of the interswitch link in meters.
PAGE 744
22 portDPortTest EXAMPLES To initiate the D_Port test on a single port: switch:admin> portdporttest --start To terminate the D_Port test on a single port: switch:admin> portdporttest --stop To display the runtime status for a single D_Port while the test is in progress: switch:admin> portdporttest --show 42 D-Port Information: =================== Port: 42 Remote WWNN: 10:00:00:05:33:13:2f:b4 Remote port: 26 Mode: Automatic Start time: Wed Feb 2 01:41:35 2011 End time: Wed Feb 2 01:43:23 2011 Status: PA
PAGE 745
portEnable 2 portEnable Enables a port or a range of ports. SYNOPSIS portenable [slot/]port1[-port2] [...] portenable -i [index1[-index2] [...]] [-f] portenable -slot [slot1[-slot2] portenable -h DESCRIPTION Use this command to enable a port or a range of ports. If a port is connected to another switch when this command is issued, the fabric may reconfigure. After the port is enabled, devices connected to the port can again communicate with the fabric.
PAGE 746
22 portEnable EXAMPLES To enable a single port: switch:admin> portenable 2/4 To enable a range of ports: switch:admin> portenable 2/4-8 To enable multiple port ranges: switch:admin> portenable 2/24-26 3/10-12 4/3-4 To enable a port by specifying its index number: switch:admin> portenable -i 176 portenable: portSwap feature enabled. To enable a range of ports by specifying the corresponding port index range: switch:admin> portenable -i 170-176 portenable: portSwap feature enabled.
PAGE 747
portEncCompShow 2 portEncCompShow Displays encryption and compression port configuration details. SYNOPSIS DESCRIPTION portenccompshow Use this command to display a list of ports that can be configured for encryption or compression. The command displays one section per ASIC and the ports configurable for that ASIC. The output includes the following information: User Port The port index number of the port to be configured. Use the switchShow command to identify the corresponding slot and port number.
PAGE 748
22 portEncCompShow 151 No No No No ----------------------------------88 No No No No 89 No No No No 90 No No No No 91 No No No No 92 No No No No 93 No No No No 94 No No No No 95 No No No No 208 No No No No 209 No No No No 210 No No No No 211 No No No No 212 No No No No SEE ALSO 722 portCfgEncrypt, portCfgCompress Fabric OS Command Reference 53-1001764-01
PAGE 749
portErrShow 2 portErrShow Displays a port error summary. SYNOPSIS DESCRIPTION porterrshow Use this command to display an error summary for all ports. Counts are reported on frames transmitted by the port (Tx) or on frames received by the port (Rx). The display contains one output line per port. Numeric values exceeding 999 are displayed in units of thousands (k), or millions (m) if indicated. Values for the following parameters are displayed: frames tx Number of frames transmitted (Tx).
PAGE 750
22 portErrShow c3-timeout rx The number of receive class 3 frames received at this port and discarded at the transmission port due to timeout (platform- and port-specific). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command is not supported on FCoE ports.
PAGE 751
portFencing 2 portFencing Configures the Fabric Watch port fencing feature. SYNOPSIS portfencing --show portfencing --enable port_type_list | all -area area_list | -area all portfencing --disable port_type_list | all -area area_list | -area all portfencing --help DESCRIPTION Use this command to enable or disable the Fabric Watch port fencing feature for specified port types and Fabric Watch areas.
PAGE 752
22 portFencing The following operands are required with the --enable and --disable options. port_type_list | all Specifies one or more port types for which to enable or disable port fencing. When specifying multiple port types, the list members must be separated by a comma. Alternately, use the all option to specify all of the following port types: e-port Enables or disables port fencing for all E_Ports. fop-port Enables or disables port fencing for all optical F_Ports.
PAGE 753
portFencing 2 To display the current port fencing configuration: switch:admin> portFencing --show Port Type|Area |PF Status ---------|----------------|-----------E-port |CRC |disabled |ITW |enabled |LR |enabled |PE |enabled |ST |enabled FOP-port |CRC |enabled |ITW |enabled |LR |enabled |C3TX_TO |enabled |PE |enabled |ST |enabled Port |CRC |enabled |ITW |disabled |LR |disabled |C3TX_TO |disabled |PE |disabled |ST |disabled SEE ALSO fwHelp, portThConfig Fabric OS Command Reference 53-1001764-01 727
PAGE 754
22 portFlagsShow portFlagsShow Displays the port status bitmaps for all ports in a switch. SYNOPSIS DESCRIPTION portflagsshow Use this command to display the following status for a port: SNMP Displays whether the port is online or offline. Physical Displays the port physical status. Valid values are In_Sync, No_Light (Condor 2 ports only), and No_SigDet (quad small form-factor pluggables (QSFPs) installed without cables). Refer to switchShow help for more information on these states.
PAGE 755
portFlagsShow 19 Offline No_Module 20 Offline No_Module 21 Offline No_Module 22 Offline No_Module (output truncated) PRESENT PRESENT PRESENT PRESENT U_PORT U_PORT U_PORT U_PORT 2 LED LED LED LED To display the port status for QSFPs installed without cables (partial output) : 6 6 6 6 16 Offline No_SigDet PRESENT U_PORT LED 17 Offline No_SigDet PRESENT U_PORT LED 18 Offline No_SigDet PRESENT U_PORT LED 19 Offline No_SigDet PRESENT U_PORT LED To display the port status for QSFPs installed and connected
PAGE 756
22 portLedTest portLedTest Cycles user port LEDs. SYNOPSIS portledtest [--slot slot_number] [-ports itemlist] [-npass count] [-action value] ceeportledtest [--slot slot_number] [-ports itemlist] [-npass count] [-action value] DESCRIPTION Use this command to exercise the user port LEDs in the current switch. When used without a slot or port specifier, all ports are tested.
PAGE 757
portLedTest 2 1 Turn Port status LED off. 2 Turn Port status LED amber. 3 Turn Port status LED green. 16 Turn Port speed LED green. 17 Turn Port speed LED amber. EXAMPLES To test port LEDs: switch:admin> portledtest --slot 1 -ports 1/1-1/5 Running portledtest .............. WARNING: This test should NOT be aborted in the middle. If aborted, current blade or the switch (in-case of Pizza box) may become unusable. Reset the blade or the switch to recover. PASSED.
PAGE 758
22 portLogClear portLogClear Clears the port log. SYNOPSIS DESCRIPTION portlogclear Use this command to clear the port log. It is recommended that you clear the port log before triggering an activity so that the log displays only the log events related to that activity. If the port log is disabled, portLogClear enables it. The port log is disabled automatically when certain errors occur to allow the collection of all the information needed to understand the cause of the error.
PAGE 759
portLogConfigShow 2 portLogConfigShow Displays the current port log configuration. SYNOPSIS DESCRIPTION NOTES portlogconfigshow Use this command to display the current port log configuration. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 760
22 portLogDisable portLogDisable Disables the port log facility. SYNOPSIS DESCRIPTION NOTES portlogdisable Use this command to disable the port log facility. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 761
portLogDump 2 portLogDump Displays the port log without page breaks. SYNOPSIS DESCRIPTION portlogdump [count[, saved]] Use this command to display the port log, listing all entries in the log without page breaks. This command displays the same information as portLogShow, but portLogShow prompts you to press Enter between each page. For an explanation of the information displayed by this command, refer to the portLogShow command.
PAGE 762
22 portLogDumpPort portLogDumpPort Displays the port log of a specified port without page breaks. SYNOPSIS DESCRIPTION portlogdumpport port_index Use this command to display the port log for a single port specified by its port index number. The command displays all entries in the log without any page breaks. This command is identical to portLogShowPort, except that portLogShowPort prompts you to press Enter to display the next page.
PAGE 763
portLogEnable 2 portLogEnable Enables the port log facility. SYNOPSIS DESCRIPTION NOTES portogenable Use this command to enable the port log facility. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 764
22 portLogEventShow portLogEventShow Displays information about port log events. SYNOPSIS portlogeventshow DESCRIPTION Use this command to display information about the ID associated with the various port log events. The Disabled field indicates whether the port log for that event ID is disabled (1) or enabled (0). NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 765
portLoginShow 2 portLoginShow Displays port login status of devices attached to the specified port. SYNOPSIS DESCRIPTION portloginshow [slot/]port Use this command to display port login status received from devices attached to the specified port. For each login, this command displays the following fields: Type Type of login can display one of the following: fd FDISC, Discover F_Port Service Parameters or Virtual N_Port login. fe FLOGI, Fabric Login to Fabric F_Port.
PAGE 766
22 portLoginShow EXAMPLES To display the logins received by Port 23 (revealing one FLOGI (type fe) and two PLOGIs): switch:admin> portloginshow 23 Type PID World Wide Name credit df_sz cos ===================================================== fe 201700 21:00:00:e0:8b:05:a3:c9 3 2048 8 scr=1 ff 201700 21:00:00:e0:8b:05:a3:c9 0 0 8 d_id=FFFC20 ff 201700 21:00:00:e0:8b:05:a3:c9 0 0 8 d_id=FFFFFC SEE ALSO 740 fcpProbeShow, portShow Fabric OS Command Reference 53-1001764-01
PAGE 767
portLogPdisc 2 portLogPdisc Sets or clears the debug_pdisc_flag. SYNOPSIS DESCRIPTION NOTES OPERANDS portlogpdisc 0 | 1 Use this command to set or clear the debug_pdisc_flag. This command is part of the environmental monitor. A setting of 1 enables logging of Port Discovery parameters. The PDISC log is disabled by default. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 768
22 portLogReset portLogReset Enables the port log facility. SYNOPSIS DESCRIPTION NOTES portlogreset Use this command to enable the port log facility. Refer to portLogClear for events that may disable the port log facility. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 769
portLogResize 2 portLogResize Resizes the port log to include a specified number of entries. SYNOPSIS DESCRIPTION NOTES OPERANDS portlogresize num_entries Use this command to resize the port log to include a specified number of entries. If the specified number of entries is less than the already configured port log size, there is no change. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 770
22 portLogShow portLogShow Displays the port log with page breaks. SYNOPSIS DESCRIPTION portlogshow [count[, saved]] Use this command to display the port log with page breaks. This command displays the same information as portLogDump, but one page at a time. The port log is a circular log file in the switch firmware which can save up to 65,536 entries depending on the hardware platform. Use portLogConfigShow to display the current port log size.
PAGE 771
portLogShow 2 ctout A CT based response is transmitted. errlog A message is added to the error log. loopscn A loop state change notification is posted. create A task is created. debug Indicates a debug message. nbrfsm Indicates a neighbor state transition. sn Indicates a speed negotiation state. fcin Indicates an incoming Fibre Channel information unit. fcout Indicates an outgoing Fibre Channel information unit. read Indicates an information unit header log from a read operation.
PAGE 772
22 portLogShow Tx & Rx Frame payload size. scn New state (see state codes below). pstate New physical state (see pstate codes below). ctin The CT-subtype: fc Simple Name Server. f8 Alias Server. ctout The same as ctin. errlog Error level (refer to errShow). loopscn The current loop state during loop initialization. Possible values areas follows: OLP Offline (disconnected or nonparticipating). LIP FL_Port entered INITIALIZING or OPEN_INIT state. LIM LISM completed, FL_Port became the loop master.
PAGE 773
portLogShow 2 ctin Argument 0 is divided into two 16-bit fields: [A] A bit map indicating whether subsequent arguments are valid (0001 means argument 1 is valid, 0003 means arguments 1 and 2 are valid). [B] The CT-based service command code. Argument 1 is the first word of the CT payload, if applicable (as specified in [A]). Argument 2 is the second word of the CT payload, if applicable (as specified in [A]).
PAGE 774
22 portLogShow 4 Faulty 5 E_Port 6 F_Port 7 Segmented pstate Valid pstate values include the following: AC Active State LR1 Link Reset: LR Transmit State LR2 Link Reset: LR Receive State LR3 Link Reset: LRR Receive State LF1 Link Failure: NOS Transmit State LF2 Link Failure: NOS Receive State OL1 Offline: OLS Transmit State OL2 Offline: OLS Receive State OL3 Offline: Wait for OLS State LIP reason Valid LIP reason codes include the following: 8001 Retry loop init. 8002 Start loop after gaining sync.
PAGE 775
portLogShow 2 8009 LIP as requested by the LINIT ELS received. 800a LIP as requested by the LPC ELS received. Speed Negotiation States Valid states include the following: INIT Start negotiation. NM Negotiate master. WS Wait for signal. NF Negotiation follows. NC Negotiation complete. NOTES OPERANDS The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 776
22 portLogShow 17:05:31.775 17:05:31.775 17:05:31.777 17:05:31.778 17:05:31.779 17:05:31.
PAGE 777
portLogShowPort 2 portLogShowPort Displays the port log of a specified port with page breaks. SYNOPSIS DESCRIPTION portlogshowport port_index Use this command to display the port log of a specified port with page breaks. This command displays the same information as portLogDumpPort, except that portLogDumpPort does not prompt you to press Enter to display the next page. If the command is executed while the port log is disabled, a warning message is displayed.
PAGE 778
22 portLogTypeDisable portLogTypeDisable Disables the port log of a specified type. SYNOPSIS DESCRIPTION NOTES OPERANDS portlogtypedisable id Use this command to disable the port log for a specified port log type. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 779
portLogTypeEnable 2 portLogTypeEnable Enables the port log of a specified port log type. SYNOPSIS DESCRIPTION NOTES OPERANDS portlogtypeenable id Use this command to enable the port log for a specified port log type. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 780
22 portLoopbackTest portLoopbackTest Performs a functional test of port N->N path. SYNOPSIS portloopbacktest [--slot slot] [-nframes count] [-lb_mode mode] [-spd_mode mode] [-ports itemlist] ceeportloopbacktest [--slot slot] [-nframes count] [-lb_mode mode] [-spd_mode mode] [-ports itemlist] DESCRIPTION Use this command to verify the functional operation of the switch. The portLoopbackTest and ceePortLoopbackTest commands are platform-specific versions of the same test.
PAGE 781
portLoopbackTest 2 CSPAT: 0x7e, 0x7e, 0x7e, 0x7e, ... BYTE_LFSR: 0x69, 0x01, 0x02, 0x05, ... CHALF_SQ: 0x4a, 0x4a, 0x4a, 0x4a, ... QUAD_NOT: 0x00, 0xff, 0x00, 0xff, ... CQTR_SQ: 0x78, 0x78, 0x78, 0x78, ... CRPAT: 0xbc, 0xbc, 0x23, 0x47, ... RANDOM: 0x25, 0x7f, 0x6e, 0x9a, .... NOTES Do not abort this test prematurely, using CTRL-C or q to quit. Doing so may cause the test to report unexpected errors. This command does not support High Availability (HA).
PAGE 782
22 portLoopbackTest 0 Runs test at 1 Gbps, 2 Gbps, 4 Gbps, and 8 Gbps on 8 G ports. Runs test at 16 Gbps on 16 G ports. 1 Runs test at 1 Gbps (deprecated). 2 Runs test at 2 Gbps. 4 Runs test at 4 Gbps. 8 Runs test at 8 Gbps (Default for 8 G platforms). 10 Runs test at 10 Gbps (Default for 10 G platforms). 16 Runs test at 16 Gbps (Default for 16 G platforms). -ports itemlist Specifies a list of blade ports to test. By default, all of the blade ports in the specified slot (--slot) are used.
PAGE 783
portLoopbackTest 2 To run a functional test on a Brocade 8000: switch:admin> ceeportloopbacktest Running portloopbacktest .............. PASSED.
PAGE 784
22 portMirror portMirror Adds, deletes, or displays port mirror connections. SYNOPSIS portmirror portmirror --show portmirror --add [slot/]port SID DID portmirror --delete SID DID DESCRIPTION Use this command to add, delete, or display a mirror connection between two ports, a source and a destination port. When used without operand, this command displays the usage.
PAGE 785
portMirror 2 State The state of the mirror connection. The state can either be "Defined" or "Enabled." In both cases, the port mirroring connection is persistently stored. A connection that is "Defined" has not been hardware-configured because at least one port is not online. A connection that is "Enabled" has been configured in the hardware. You must enable port mirroring on the port before you can configure mirror connections for that port.
PAGE 786
22 portMirror --delete Deletes a mirror connection between a source and a destination. You must specify a SID and a DID when deleting a mirror connection.
PAGE 787
portMirror 2 To display the mirror connections: switch:admin> portmirror --show Number of mirror connection(s) configured: 3 Mirror_Port SID DID State ---------------------------------------18 0x640c00 0x640800 Enabled 18 0x640700 0x640b00 Enabled 18 0x640700 0x640c00 Enabled To delete a port mirror connection between two local switch ports: switch:admin> portmirror --delete 0x640700 0x640c00 To add a port mirror connection between a local switch port and a remote switch port: switch:admin> portmirror -
PAGE 788
22 portName portName Assigns or displays port names. SYNOPSIS portname portname [slot/]port [-n name] portname -i [index1[-index2][...][-f] [-n name]] portname -slot slot1[-slot2] [...][-n name] portname -h DESCRIPTION Use this command to assign a port name to a specified port or to a range of ports. The port name is included in the portShow output; it should not be confused with the world wide port name.
PAGE 789
portName 2 -n name Specifies the name to be assigned to the ports. The port name is a character string up to 128 characters, including spaces and characters, and excluding commas (,), semicolons (;), backlashes (\), and the at sign (@). To erase a port name, specify this operand as an empty string in double-quotation marks. If the name includes spaces it must be included in double quotation marks. This operand is optional; if omitted, the current port name is displayed.
PAGE 790
22 portPerfShow portPerfShow Displays port throughput performance. SYNOPSIS portperfshow portperfshow [[slot/]port1[-[slot/]port2]] [-tx -rx | -tx | -rx] [-t interval]] portperfshow --help DESCRIPTION Use this command to display throughput information for all ports on a switch or chassis or to display the information for a specified port or port range. Output includes the number of bytes received and transmitted per interval.
PAGE 791
portPerfShow EXAMPLES 2 To display performance information for all ports at a one second (default) interval: switch:user> portperfshow 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 ==================================================================== 630.4m 0 0 0 0 0 0 0 0 0 630.4m 0 0 0 0 0 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 ===================================================================== 0 210.1m 840.5m 210.
PAGE 792
22 portPerfShow To display performance on a single port with at a 5 second interval: switch:user> portperfshow 0 -t 5 0 Total ================= 630.4m 630.4m 0 Total ================= 630.3m 630.3m (output truncated) To display transmitter throughput for a single port at a 5 second interval: switch:user> portperfshow 0 -tx -t 5 0 ======== 210.1m 0 ======== 210.
PAGE 793
portRouteShow 2 portRouteShow Displays routing tables for the specified port. SYNOPSIS DESCRIPTION portrouteshow [slot/]port Use this command to display the port address ID for a specified port and the contents of the following port routing tables: External unicast routing table Displays how the specified port forwards unicast frames to remote domains in the following format: domain_number: ports_bitmap domain_number The remote domain ID to which frames are ultimately routed.
PAGE 794
22 portRouteShow EXAMPLES To display the routing tables for a port: switch:user> portrouteshow 4/15 port address ID: 0x02bf00 external unicast routing table: 1: 0x4 (vc=3) 2: 0x10000 (vc=0) internal unicast routing table: 60: 0x8000 (vc=2) 63: 0x1000 (vc=5) broadcast routing table: 0x10000 SEE ALSO 768 bcastShow, fabricShow, switchShow, topologyShow, uRouteShow Fabric OS Command Reference 53-1001764-01
PAGE 795
portShow 2 portShow Displays status and configuration parameters for ports and GbE ports. SYNOPSIS portshow [slot/][ge]port portshow -i [ index1 [-index2] [...]] [-f] portshow option [slot/]ge_port [optional_args] portshow option [all | ve_port] arguments [optional_arguments] portshow option [all |ge_port] arguments [optional_arguments] DESCRIPTION Use this command to display general port status and specific configuration parameters for a specified port, GbE port, or VE_Port.
PAGE 796
22 portShow NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. Some of the features supported by this command may require a license. In an AD context, if one of the L_Ports or NPIV ports is a part of the current AD, the complete device information attached to the port is shown in the output.
PAGE 797
portShow 2 portType The port's type and revision numbers. POD Port Port on Demand License status. portState The port's SNMP state: Online Up and running. Offline Not online, see portPhys for more detail. Testing Running diagnostics. Faulty Failed diagnostics. Persistently Disabled Persistently disabled. Protocol Protocol used by the port: FC or FCoE. portPhys The port's physical state: No_Card No interface card present. No_Module No module (GBIC or other) present.
PAGE 798
22 portShow portId The port's 24-bit port ID. portIfId The user port's interface ID. portWwn The port's world wide name. portWwn of devices(s) connected The World Wide Port Names of connected devices. Distance The port's long-distance level. In the case of LD mode, the user configured distance and actual distance also are displayed. See portCfgLongDistance for information on long distance levels. Port part of other AD Yes or No.
PAGE 799
portShow 2 DH Group Displays DH group [0-4] if DH-CHAP authentication is used. Otherwise displays N/A. Hash Algorithm Displays hash type (MD5 or SHA-1) if DH-CHAP authentication is used. Otherwise, displays N/A. Edge fabric's primary WWN If the EX_Port is connected to an edge switch with FCS policy enforcement, the WWN of the primary FCS is displayed when the edge fabric is secure and the primary FCS is online. Otherwise, displays "No Primary".
PAGE 800
22 portShow OPERANDS This command has the following port operands: slot For bladed systems only, specifies the slot number of the port to be displayed, followed by a slash (/). port Specifies the number of the port to be displayed, relative to its slot for bladed systems. Use switchShow for a listing of valid port numbers. -i index1[-index2] Specifies a port or a range of ports identified by port index numbers. You can specify multiple index ranges separated by a space, for example, 33-38 40-60.
PAGE 801
portShow 2 To display the current state of a port with encryption enabled: switch:admin> portshow 10/44 portIndex: 348 portName: slot10port44 portHealth: No Fabric Watch License Authentication: None portDisableReason: None portCFlags: 0x1 portFlags: 0x10000103 PRESENT ACTIVE E_PORT T_PORT\ T_MASTER G_PORT U_PORT ENCRYPT LOGIN LocalSwcFlags: 0x0 portType: 24.
PAGE 802
22 portShow To view xlate domains, you must issue the command on chassis with a Brocade FR4-18i blade.
PAGE 803
portShow 2 To display an FCoE port: switch:admin> portshow 8 portIndex: 8 portName: portHealth: HEALTHY Authentication: None portDisableReason: None portCFlags: 0x1 portFlags: 0x2cb03 PRESENT ACTIVE F_PORT G_PORT U_PORT\ LOGICAL_ONLINE LOGIN NOELP LED NSREG ACCEPT FLOGI portType: 17.
PAGE 804
22 portShow ipif Displays the IP interface ID, IP address, netmask, and MTU for IPv4 addresses. Displays the prefix instead of the netmask for IPv6 addresses. Flags are explained in the command output (refer to the example below). iproute Displays the IP address, netmask, gateway, metrics, and flags. Displays the prefix instead of the netmask for IPv6 addresses. A status flag for the IP routes indicates if a route is used for the management interfaces.
PAGE 805
portShow 2 Port: ge0 IP Address Mask Gateway Metric Flags ------------------------------------------------------------192.42.0.0 255.255.255.0 192.168.0.250 0 U G 192.168.0.0 255.255.255.0 * 0 U C 192.168.0.10 255.255.255.255 * 0 U H L 192.168.0.11 255.255.255.255 * 0 U H L 192.168.0.21 255.255.255.255 * 0 U C 192.168.0.250 255.255.255.
PAGE 806
22 portShow 192.168.12.103 192.168.12.201 192.168.21.0 192.168.21.103 192.168.21.201 255.255.255.255 255.255.255.255 255.255.255.0 255.255.255.255 255.255.255.255 * * * * * 0 0 0 0 0 U U U U U C H C C H (crossport) L (crossport) (crossport) (crossport) L (crossport) To display the ARP tables on the Brocade 7800: switch:admin> portshow arp ge0 Port: ge0 IP Address Mac Address Flags -----------------------------------------------------192.168.0.10 00:05:1e:c3:f0:1a Resolved 192.168.0.
PAGE 807
portShow • portShow fcipcircuit - Displays status and configuration for FCIP circuits: • • • OPERANDS 2 TCP statistics for the circuit Circuit-level VLAN tagging configuration Circuit-level Differentiated Services (DSCP) markings portshow mgmtif - Displays the inband management interfaces. portshow mgmtroute- Displays the routes for the inband management interfaces. portShow xtun - Displays FICON and FCP emulation statistics and current runtime conditions.
PAGE 808
22 portShow -d | --detail Displays a full view configuration details for all configured tunnels when used with the all port specifier. This view provides an alternative to specifying a specific VE_Port or to using the --perf option for a comprehensive view. -I | --ip-address Displays the IP addresses configured the specified circuits. You must use this option with either the --summary or the --circuit option. fcipcircuit Displays FCIP circuit configuration and status.
PAGE 809
portShow 2 -it Displays data at the Initiator Target (SID/DID) FCP level. -itn Displays data at the Initiator Target nexus (SID/DID) level. -itl Displays data at the Initiator Target LUN (SID/DID/LUN) level. -twb Displays data at the Exchange (SID/DID/LUN/Exchange) level. command Specifies the type of information to be displayed. This operand is optional; if omitted, the default (-stats) is used. You can specify more than one command option.
PAGE 810
22 portShow -stats Displays global FICON Emulation statistics for the tunnel including FICON XRC Emulation, FICON Tape Write, FICON Tape Read, FICON Teradata Write, and FICON Teradata Read statistics. -fdpb adrs Displays FICON ports or a specific FICON Device Path Block. -fchb adrs Displays FICON logical partitions (LPARs) or a specific FICON Channel Control Block. -fcub adrs Displays FICON images (the same output as with -images) or a specific FICON Control Unit Block. -images Displays FICON images.
PAGE 811
portShow 2 -act Displays the current Active Exchange information. options The following additional option is supported. -clear Resets the specified statistics. This operand is optional; it requires a preceding command. -mem adrs length Specifies the SE memory length in words to display. The valid range for length is 0 to 1024. -dram2 Display the current usage of the dynamic memory allocator. -pools Display the current free pool allocation (FPA) buffer usage. -tcb Displays tunnel statistics.
PAGE 812
22 portShow Tape Read Devs: 32 Tape Write Timer: 300 Tape Max Chain: 3200000 FICON OXID Base: 0x8000 FICON Debug Flags: 0xf7c90000 To display an FCIP tunnel with FICON disabled: switch:admin> portshow fciptunnel 16 ------------------------------------------Tunnel ID: 16 Tunnel Description: Admin Status: Enabled Oper Status: Up Compression: On (Aggressive) Fastwrite: Off Tape Acceleration: Off TPerf Option: Off IPSec: Disabled QoS Percentages: High 50%, Med 30%, Low 20% Remote WWN: Not Configured Local WW
PAGE 813
portShow 2 Keepalive Timeout: 10000 Path MTU Disc: 0 VLAN ID: (Not Configured) L2CoS: (VLAN Not Configured) DSCP: F: 0 H: 0 M: 0 L: 0 Flags: 0x00000000 ------------------------------------------Circuit ID: 1/12.1 Circuit Num: 1 Admin Status: Enabled Oper Status: Up Connection Type: Default Remote IP: 192.168.12.201 Local IP: 192.168.12.
PAGE 814
22 portShow 68856512 Input Bytes 305 Bps 30s Avg, 208 Bps Lifetime Avg 92029 Input Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg TCP Stats: 1444818696 Output Bytes 16044954 Output Packets 841543704 Input Bytes 16054360 Input Packets Retransmits: 0 Round Trip Time: 0 ms Out Of Order: 0 Slow Starts: 0 To display TCP connections for the circuits on the tunnel: switch:admin> portshow fciptunnel 2/12 -c --tcp ------------------------------------------Tunnel ID: 1/12 Tunnel Description: Admin Status: Enabled O
PAGE 815
portShow 2 Remote Port: 49641 Max Seg Size: 1420 Adaptive Rate Limiting Statistics: None (F-Class) Sender Statistics: Bytes Sent: 105833704 Packets Sent: 1135102 Round Trip Time 0 ms, HWM 0 ms, Variance 0, HWM 0 Send Window: 20832768 bytes, scale: 9 Slow Starts: 0 Slow Start Threshold: 16777216 Congestion Window: 16778636 TCP Op State: slow start Next Seq: 0x009a8d38, Min: 0x009a8d38, Max: 0x009a8d38 Unacked data: 0 Retransmit Timeout: 100 ms, Duplicate ACKs 0 Retransmits: 0, max: 0 Fast ReTx: 0, HWM 0, S
PAGE 816
22 portShow To display the FCIP tunnel hierarchy on the Brocade FX8-24: switch:admin> portshow fciptunnel 1/12--hier FCIP Tunnel 1/12 | High Level Tunnel Stats: | Operational Status: Up | Connected Count: 1 | Max Comm Rate: 2500000 | Compression Ratio: 1 : 1 | Compressed Bytes: 0 | Uncompressed Bytes: 0 | Bytes In: 68942140 | Bytes In Avg: 85 | Bytes Out: 30983544 | Bytes Out Avg: 16 | Packets In: 92126 | Packets In Avg: 0 | Packets Out: 70728 | Packets Out Avg: 0 | Aggregate TCP Stats: | TCP Bytes In: 84
PAGE 817
portShow | | | | | | | |--> 2 |---> TCP Conn 1/12.1:15241506 |---> TCP Conn 1/12.1:15241307 |---> TCP Conn 1/12.1:15241308 |---> TCP Conn 1/12.1:15241309 |---> TCP Conn 1/12.1:15241111 |---> TCP Conn 1/12.1:15241111 |---> TCP Conn 1/12.1:15241112 Circuit 1/12.
PAGE 818
22 portShow Local WWN: 10:00:00:05:1e:52:fe:00 Peer WWN: 10:00:00:05:1e:39:a4:76 Circuit Count: 2 Flags: 0x00000000 FICON: Off To display a tunnel on a Brocade FX8-24 with automatic compression enabled in summary view (The "A" flag indicates Auto-Mode: switch:admin> portshow fciptunnel 1/21 -s --------------------------------------------------------------------Tunnel Circuit OpStatus Flags Uptime TxMBps RxMBps ConnCnt CommRt Met --------------------------------------------------------------------1/21 Up
PAGE 819
portShow 2 To display a summary view of an FCIP tunnel and its circuits on the Brocade FX8-24 with the --perf option : switch:admin> portshow fciptunnel 7/12 --summary --perf ---------------------------------------------------------------------Tunnel Circuit TxMBps RxMBps ComRatio RTT(ms) ReTx OutOfSeq SlowStart ---------------------------------------------------------------------1/22 0.00 0.00 1.00:1 0 0 0 1/22 0 1/xge0 0.00 0.00 0 0 0 0 1/22 1 1/xge1 0.00 0.
PAGE 820
22 portShow 1/22 1 1/xge1 192.168.22.101 192.168.22.201 1/31 1/31 0 1/xge0 192.168.31.100 192.168.31.200 1/31 1 1/xge1 192.168.31.101 192.168.31.
PAGE 821
portShow 2 Min Retrans Time: 100 Max Retransmits: 8 Keepalive Timeout: 10000 Path MTU Disc: 0 VLAN ID: (Not Configured) L2CoS: (VLAN Not Configured) DSCP: F: 0 H: 0 M: 0 L: 0 Flags: 0x00000000 ------------------------------------------Circuit ID: 1/21.0 Circuit Num: 0 Admin Status: Enabled (Output truncated) To display a single circuit (circuit 0 on tunnel 16) with VLAN tagging configuration: switch:admin> portshow fcipcircuit 16 0 ------------------------------------------Circuit ID: 16.
PAGE 822
22 portShow Connected Count: 1 Tunnel Duration: 3 days, 19 hours, 54 minutes, 5 seconds Compression Statistics: 0 Uncompressed Bytes 0 Compressed Bytes 1.
PAGE 823
portShow 2 7223112 Input Bytes 27 Bps 30s Avg, 21 Bps Lifetime Avg 45277 Input Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg TCP Stats: 318824216 Output Bytes 3419555 Output Packets 184935644 Input Bytes 3419605 Input Packets Retransmits: 0 Round Trip Time: 0 ms Out Of Order: 0 Slow Starts: 0 Performance Statistics - Priority: High Oper Status: Up Flow Ctrl State: Off Connected Count: 1 Duration: 3 days, 19 hours, 57 minutes, 41 seconds 0 Output Bytes 0 Bps 30s Avg, 0 Bps Lifetime Avg 0 Output Packets 0 p
PAGE 824
22 portShow Connected Count: 1 Duration: 3 days, 19 hours, 57 minutes, 42 seconds 0 Output Bytes 0 Bps 30s Avg, 0 Bps Lifetime Avg 0 Output Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg 0 Input Bytes 0 Bps 30s Avg, 0 Bps Lifetime Avg 0 Input Packets 0 pkt/s 30s Avg, 0 pkt/s Lifetime Avg TCP Stats: 308551588 Output Bytes 3310627 Output Packets 176126612 Input Bytes 3310630 Input Packets Retransmits: 0 Round Trip Time: 0 ms Out Of Order: 0 Slow Starts: 0 To display the inband management interface for all G
PAGE 825
portShow 2 To display the IP routes for all management interfaces on a Brocade 7800: switch:admin> portshow mgmtroute all Inband Management Routes: Port: ge0 IP Address Mask Gateway Metric Flags ------------------------------------------------------------20.20.0.0 255.255.255.0 * 0 U Port: ge1 IP Address Mask Gateway Metric Flags ------------------------------------------------------------192.168.1.0 255.255.255.0 20.20.1.250 0 U G 20.20.1.0 255.255.255.
PAGE 826
22 portShow TotalEmulatedOps MaxRetryQueueDepth TotalCUBusyResponses TotalEmulatedCUBusys TotalSelectiveResets TotalCancels TotalEmulErrors TotalPurgePaths Generated Link Busys = 393653297 = 1201 MaxEgressQueueDepth = 3249 = 0 TotalCUEndResponses = 0 = 0 TotalEmulCUEnd = 0 = 0 TotalChLinkBusy = 0 = 0 TotalAborts = 0 = 0 TotalCuLinkBusy = 0 = 0 Xport LRC CheckErrors= 0 = 70 Failed Generate Frame= 0 WIRE Buffer Percentages LocalFree= 95 LocalLow= 93 \ PeerFree= 95 PeerLow=93 XBAR Buffer Percentages LocalF
PAGE 827
portShow Average Emulated Bytes per chain Average Emulated Read Blocksize Average CCWs in Emulated Chains Read Block Paced Count Read Channel Program Paced Count Read Not Ready Situations Count Current Read FDCBs Count Max Concurrent Read FDCB Count Current Read Limited FDCB Count = = = = = = = = = 2 34670 33379 1 0 0 1 0 0 0 To display the FICON Device Path Blocks: switch:admin> portshow xtun 23 -ficon -fdpb FDPB (FICON Device Path Block - one per path) Count = 4 --------------------------------------
PAGE 828
22 portShow fcrPresent=N fchbValid=Y FCHB Control variables: tinOrigOxid=0xFFFF tirOrigOxid=0xFFFF tinAckOxid=0xFFFF allocChOxid=0xFFFF tinTirOxid=0xFFFF tinAckRxid=0xFFFF allocChOIdx=0x0000 To display FICON FCUB information (FICON Images accessed through the tunnel) switch:admin> portshow xtun 23 -ficon -fcub FCUB (FICON Control Unit Block) Count = 29 FC Egress parms: (0x) Side Path: devRange DevCnt Model =========== ==== ================== ======== ==== ===== 0410083800 H 0x17630164010604** 00-0F 0x
PAGE 829
portShow 2 To display a FICON Teradata, Tape, or XRC emulation statistics for a specified Device Control Block: switch:admin> portshow xtun 16 -ficon -fdcb 0x041008B980 FDCB (FICON Device Control Block):Port=10 Side=Host Active=No DeviceType=TERA ------------------------------------------------------------FDCB (0x) hDom hPrt dDom dPrt lch lcu dev state ============ ==== ==== ==== ==== ==== ==== ==== ===== 0x041008B980 63 04 64 02 02 08 03 0x00 CONTROL ======= active = No Send_SYR = No crrSet = No xrcEstab
PAGE 830
22 portShow immRetryStatus = cuBusyStatus = deUxStatus = deUcStatus = chLinkBusyCount = unusualStsArray = pGb = tag = senseDeviceType = ingressFrameCount= egressFrameCount = 0 devBusyStatus 0 ceDeUxStatus 0 pendDeStatus 0 unusualStatus 1 cuLinkBusyCount 0x00000000 0x0000000000 0x0285CF9E 0xFF30884000000000 0x000000000011ADCE 0x00000000000432AB TERADATA CONTROL ============ writeSuspendFlag = cuBusyRsp = synStatusSent = queuedCntlFrame = unitChkPresented = waitingForSenseData= readEmulAct = OFF OFF OFF
PAGE 831
portShow longIOtimes = 0x0000005D startOfChainDelayCnt= 0x0000 readPacedCount = 0x0000 Ave Chain SIO time endOfChainDelayCnt writePacedCount 2 = 0x5B = 0x0000 = 0.
PAGE 832
22 portShow + 2468974| 37978| 2031144| 35180| | 1980115| 36013| 2323892| 36152| | 2223665| 37441| 2123746| 34138| [...
PAGE 833
portShow Idle Not Accpt Status MaxRetryQueueDepth TotalCUBusyResponses TotalEmulatedCUBusys TotalSelectiveResets TotalCancels TotalEmulErrors TotalPurgePaths Generated Link Busys = = = = = = = = = 0 0 0 0 0 0 0 0 11886003 MaxEgressQueueDepth = TotalCUEndResponses = TotalEmulCUEnd = TotalChLinkBusy = TotalAborts = TotalCuLinkBusy = Xport LRC CheckErrors= Failed Generate Frame= 2 2316 0 0 0 0 0 0 0 WIRE Buffer Percentages LocalFree= 95 LocalLow= 94 PeerFree= 95 PeerLow=93 XBAR Buffer Percentages LocalF
PAGE 834
22 portShow Current Read Limited FDCB Count = 0 Tera Write Emulation Statistical Counts (decimal) ----------------------------------------------------------Current Bytes in write pipe = 0 Maximum Bytes in write pipe = 1405952 Largest write chain processed = 43936 Total number of emulated Write Bytes= 19204226768 Number of emulated Write Chains = 989882 Total number of emulated Write CCWs = 989882 Average Emulated Writes Blocksize = 19400 Average Writes in Emulated Chains = 1 Write emulation slowdowns =
PAGE 835
portShow 2 Bit 24 [0x01000000] = 1 : TRIGGER_ON_NOFDCB_ABORT Bit Bit Bit Bit 23 22 21 20 [0x00800000] [0x00400000] [0x00200000] [0x00100000] = = = = 1 1 0 0 : : : : TRIGGER_ON_LINKDOWN TRIGGER_ON_SENSE_CMD TRIGGER_ON_BUSYATTN TRIGGER_ON_XRCUNS Bit Bit Bit Bit 19 18 17 16 [0x00080000] [0x00040000] [0x00020000] [0x00010000] = = = = 1 0 0 1 : : : : DISPLAY_FDCB_ON_ERROR TRIGGER_ON_LOW_WIREPOOL TRIGGER_ON_READ_UNITCHECK TRIGGER_ON_STATE_SAVE Bit 15 [0x00008000] = 1 : Bit 11 [0x00000800] = 0 : Bi
PAGE 836
22 portShow To display FICON tape performance data: switch:admin> portshow xtun 23 -ficon -tapeperf Tape Performance Monitor Data: =============================== Sample Time Period in ms: 2461 Tape Write Performance Data: ---------------------------Emulated Chains per sec: 480 Emulated CCWs per sec: 3069 Ave Write Block Size: 32760 Emulated Write BPS: 100540440 ---------------------------No Emulated Read operations To display FICON XRC performance data: switch:admin> portshow xtun 23 -ficon -xrcperf XRC
PAGE 837
portShow 2 You can display the TCP history with the fciptunnel -hist command. This command displays a maximum of 16 entries. Once the maximum history length is reached, the oldest entry is removed from the end, and the newest entry is added to the front of the TCP history as future connection failures occur.
PAGE 838
22 portShow Along with history, the system keeps track of the following TCIP statistics, which you can display with the fciptunnel -snapshow option. The statistic is collected from system startup onwards until it is reset with the fciptunnel -snapstart option. Subsequent calls to -snapshow display statistics collected since the system was last reset.
PAGE 839
portShow 2 all | tunnel_id For FCIP-related command options only, specify all to display all FCIP tunnels or a Tunnel ID between 0 and 7 to display a single FCIP tunnel. fciptunnel Displays FCIP tunnel IDs, remote and local IP addresses, remote and local WWNs, compression status, FCIP FastWrite status, Tape Pipelining status, bandwidth rate, SACK status, Minimum Retransmit time, Keepalive Timeout, Maximum Retransmissions, DSCP Marking, tunnel status, tunnel uptime.
PAGE 840
22 portShow -images Displays discovered Images (FCUB). -emul Displays emulated FDCBs. -active Displays active FDCBs. -epcb Displays Emulation Control Block (port specific). -fhpb Displays FICON Host Path Block. -fdpb adrs Displays FICON Device Path Block. -fchb Displays FICON Channel Control Block. -fcub Displays FICON Control Unit Control Block. -fdcb adrs Displays FICON Device Control Block. -mem adrs Displays memory in 256-byte increments: ! for next. -pools Displays current data buffer pool counts.
PAGE 841
portShow 2 Status : Inactive Connected Count: 0 Port: ge1 ------------------------------------------Tunnel ID 0 Tunnel Description "Test Description" Remote IP Addr 192.168.10.10 Local IP Addr 192.168.10.2 Remote WWN Not Configured Local WWN 10:00:00:05:1e:39:37:5f Compression off Fastwrite off Tape Pipelining off Committed Rate 900000 Kbps (0.
PAGE 842
22 portShow peer advertised window 20443136 Bytes negotiated window scale (shift count) 9 congestion window 169464 Bytes slow start threshold 112500 Bytes operational mode: congestion avoidance 0 packets queued: TCP sequence# NXT(3715211236) 0 packets in-flight (HWM 3) Send.
PAGE 843
portShow 2 1655 Bps 30s avg, 4305 Bps lifetime avg 951 packets lost (retransmits) 12.25% loss rate 30s avg 38563 input packets 2 pkt/s 30s avg, 4 pkt/s lifetime avg 8208640 input Bytes 699 Bps 30s avg, 1035 Bps lifetime avg Data transfer TCP connection: Local 10.10.9.100:4100, Remote 10.62.0.100:3226 Performance stats: 41255 output packets 5 pkt/s 30s avg, 5 pkt/s lifetime avg 2149844 output Bytes 252 Bps 30s avg, 271 Bps lifetime avg 1 packets lost (retransmits) 0.
PAGE 844
22 portShow IPSec Policy 1 ----------------------------------------Authentication Algorithm: SHA-1 Encryption: AES-128 SA Life (seconds): 28800 Pre-Shared Key testingFIPSandIPSec To display the TCIP connection history after the connection was severed: Switch:admin> portshow fciptunnel ge1 0 -hist Port: ge1 ------------------------------------------Tunnel ID 0 Tunnel Description "Test Description" Remote IP Addr 192.168.114.2 Local IP Addr 192.168.114.
PAGE 845
portShow 2 Tunnel Description "Test Description" Remote IP Addr 192.168.114.2 Local IP Addr 192.168.114.1 Remote WWN Not Configured Local WWN 10:00:00:05:1e:38:84:65 Compression off Fastwrite off Tape Pipelining off Committed Rate 900000 Kbps (0.
PAGE 846
22 portShow Status : Active Connected Count: 1 Uptime 5 minutes, 26 seconds TCP data and control statistics snapshots have been reset for tunnel 0 To display the FC data path credit data: switch:admin> portshow fciptunnel 9/ge0 0 -credits Slot: 9 Port: ge0 ------------------------------------------Tunnel ID 0 Tunnel Description "Test Description" Remote IP Addr 10.62.0.100 Local IP Addr 10.10.9.
PAGE 847
portShow 2 Data transfer TCP connection: Local 10.10.9.100:4100, Remote 10.62.0.100:3226 IKE Policy 1 IPSec Policy 1 Pre-Shared Key testingFIPSandIPSec To display QoS Mappings: switch:admin> portshow fciptunnel 9/ge0 0 -qosmap Slot: 9 Port: ge0 ------------------------------------------Tunnel ID 0 Tunnel Description "Test Description" Remote IP Addr 10.62.0.100 Local IP Addr 10.10.9.
PAGE 848
22 portShow To display the same information as the previous example but with post display clearing of relevant statistics: switch:admin> portshow ficon ge0 all -fdcb SEE ALSO 822 10008000 -clear authUtil, portCfg, portLoginShow, portCfgLongDistance, switchShow Fabric OS Command Reference 53-1001764-01
PAGE 849
portStats64Show 2 portStats64Show Displays the 64-bit hardware statistics for a port. SYNOPSIS DESCRIPTION portstats64show [slot/]port [-long] Use this command to display 64-bit hardware statistics for a specified port. When used without the -long option, two integers are reported for most values, the lower and upper 32-bits are reported as two separate numbers. In this case, the top word is the most significant.
PAGE 850
22 portStats64Show er64_disc_c3 Number of class 3 frames discarded. stat64_rateTxFrame Tx frame rate (frames/second). stat64_rateRxFrame Rx frame rate (frames/second). stat64_rateTxPeakFrame Tx peak frame rate (frames/second). stat64_rateRxPeakFrame Rx peak frame rate (frames/seconds). stat64_rateTxWord Tx Word rate (words/seconds). stat64_rateRxWord Rx Word rate (words/seconds). stat64_rateTxPeakWord Tx peak Word rate (words/sec). stat64_rateRxPeakWord Rx peak Word rate (words/sec).
PAGE 851
portStats64Show 2 swConnUnitOpen, open Number of times the FL_Port entered OPEN state. swConnUnitInvalidARB, er_inv_arb Number of invalid arbitrated loops (ARBs). The following counters are platform-specific and applicable only to Condor2 and Goldeneye2 ASICs only. Refer to the Fabric OS Troubleshooting and Diagnostics Guide, Appendix A, for a table that correlates ASIC type with switch models. swConnUnitFTB1Miss, er_type1_miss The number of FCR frames with transmit errors.
PAGE 852
22 portStats64Show 0 bottom_int : Class 3 frames received 0 top_int : Link control frames received 462 bottom_int : Link control frames received stat64_mc_rx 0 top_int : Multicast frames received 0 bottom_int : Multicast frames received stat64_mc_to 0 top_int : Multicast timeouts 0 bottom_int : Multicast timeouts stat64_mc_tx 0 top_int : Multicast frames transmitted 0 bottom_int : Multicast frames transmitted tim64_rdy_pri 0 top_int : Time R_RDY high priority 0 bottom_int : Time R_RDY high priority tim64_
PAGE 853
portStats64Show er64_type2_miss er64_type6_miss er64_zone_miss er64_lun_zone_miss lli64 SEE ALSO 0 0 0 0 0 2 frames with FTB type 2 miss frames with FTB type 6 miss frames with hard zoning miss frames with LUN zoning miss Low level interrupts portStatsClear, portStatsShow Fabric OS Command Reference 53-1001764-01 827
PAGE 854
22 portStatsClear portStatsClear Clears port hardware statistics. SYNOPSIS portstatsclear [slot/]port portstatsclear -i [index1[-index2] [...] [-f]] portstatsclear -slot [slot1[-slot2][...] portstatsclear -h DESCRIPTION Use this command to clear the hardware statistics for the specified ports. Including ALPA-based CRC monitor, End-to-End monitor, and Filter-based performance monitor statistics. You can identify a single port to be cleared by its port number or by its port index number.
PAGE 855
portStatsClear 2 To clear hardware statistics for a range of ports specified by their index numbers: switch:admin> portstatsclear -i 32-40 To clear hardware statistics for multiple port ranges specified by their index numbers: switch:admin> portstatsclear -i 32-40 50-56 To clear hardware statistics for all ports on slots 3-5: switch:admin> portstatsclear -s 3-5 To clear hardware statistics for all ports on slots 3-5 and 7-10: switch:admin> portstatsclear -s 3-5 7-10 SEE ALSO portStats64Show, portStat
PAGE 856
22 portStatsShow portStatsShow Displays port hardware statistics. SYNOPSIS portstatsshow [slot/]port portstatsshow -i [index1[-index2][...] [-f]] portstatsshow -slot [slot1[-slot2][...] portstatsshow ge [slot/]ge port portstatsshow ip [slot/]ge port [ip_address] portstatsshow fcip [slot/]ge port [tunnel_number] portstatsshow -h DESCRIPTION Use this command to display port hardware statistics counters. Some counters are platform- or port-specific and display only on those platforms and ports.
PAGE 857
portStatsShow 2 tim_rdy_pri The number of times that sending R_RDY or VC_RDY primitive signals was a higher priority than sending frames, due to diminishing credit reserves in the transmitter at the other end of the fiber. This parameter is sampled at intervals of 1.8 microseconds, and the counter is incremented by 1 if the condition is true. tim_txcrd_z The number of times that the port was unable to transmit frames because the transmit BB credit was zero.
PAGE 858
22 portStatsShow er_type1_miss The number of FCR frames with transmit errors. er_type2_miss The number of frames with routing errors. er_type6_miss The number of FCR frames with receive errors. er_zone_miss , er_lun_zone_miss The number of frames discarded due to hard zoning miss or LUN zoning miss. If Rx port hard zoning is enabled, frames will be discarded at the Rx port. If TX port hard zoning is enabled, frames will be discarded at the TX port.
PAGE 859
portStatsShow 2 ge_stat_rx_octets The number of octets received on the GbE port. ge_stat_rx_ucast_frms The number of unicast frames received on the GbE port. ge_stat_rx_mcast_frms The number of multicast frames received on the GbE port. ge_stat_rx_bcast_frms The number of broadcast frames received on the GbE port. ge_stat_rx_vlan_frms The number of VLAN frames received on the GbE port. ge_stat_rx_pause_frms The number of pause frames received on the GbE port.
PAGE 860
22 portStatsShow -f Ignores nonexisting ports. This operand is valid only with the -i option. -slot [slot1[-slot2] Displays statistics for all ports on a slot or on a range of slots, for example, -s 3-5. You may specify multiple slot ranges separated by a space, for example, -s 3-5 8-10. ge Displays the GbE port statistics. ip Displays all GbE port statistics related to IP addresses that are not zero. This operand is not supported on the Brocade 7800 and FX8-24 platforms.
PAGE 861
portStatsShow er_type1_miss er_type2_miss er_type6_miss er_zone_miss er_lun_zone_miss er_crc_good_eof er_inv_arb open transfer opened starve_stop fl_tenancy nl_tenancy zero_tenancy 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 frames with FTB type 1 miss frames with FTB type 2 miss frames with FTB type 6 miss frames with hard zoning miss frames with LUN zoning miss Crc error with good eof Invalid ARB loop_open loop_transfer FL_Port opened tenancies stopped due to starvation number of times FL has the tenancy number of
PAGE 862
22 portStatsShow To display port statistics for all IP addresses, slot 8, and GbE1 on the Brocade FR4-18i: switch:admin> portstatsshow ip_err_crc 0 ip_err_hdr_cksum 0 ip_err_tcp_data_chksum 0 ip IP IP IP 8/ge1 CRC Errors Checksum Errors TCP Data Checksum Errors To display port statistics for IP address 192.168.255.10, slot 8, and GbE1 on the Brocade FR4-18i: switch:admin> portstatsshow ip 8/ge1 192.168.255.10 ipaddr 192.168.255.
PAGE 863
portSwap 2 portSwap Swaps the port Address of two ports. SYNOPSIS DESCRIPTION portswap [slot1/]port1 [slot2/]port2 Use this command to swap the 24-bit port address (PID) for a pair of ports. Both ports must be disabled prior to executing this command and the port-swapping feature must be enabled using portSwapEnable. The result of this operation is persistent across reboots and power cycles.
PAGE 864
22 portSwapDisable portSwapDisable Disables the PortSwap feature. SYNOPSIS DESCRIPTION portswapdisable Use this command to disable the PortSwap feature. The portSwap command cannot be used after this feature is disabled. The disabled state of the PortSwap feature is persistent across reboots and power cycles. Enabling or disabling the PortSwap feature does not affect previously performed PortSwap operations.
PAGE 865
portSwapEnable 2 portSwapEnable Enables the PortSwap feature. SYNOPSIS DESCRIPTION portswapenable Use this command to enable the PortSwap feature. The portSwap command cannot be used unless the feature is first enabled with this command. The enabled state of the PortSwap feature is persistent across reboots and power cycles. Enabling or disabling the PortSwap feature does not affect previously performed PortSwap operations.
PAGE 866
22 portSwapShow portSwapShow Displays the state of the PortSwap feature. SYNOPSIS DESCRIPTION NOTES portswapshow Use this command to display the state of the PortSwap feature and information about swapped ports. If portSwap is enabled and ports have been swapped, the command displays the enabled status as well as the swapped ports and the new port address (the 24-bit PID) for these ports.
PAGE 867
portTest 2 portTest Performs a functional test of a switch in a live fabric. SYNOPSIS DESCRIPTION porttest [-ports itemlist] [-iteration count] [-userdelay time] [-timeout time] [-pattern pattern] [-patsize size] [-seed seed] [-listtype porttype] Use this command to isolate problems in a single replaceable element and to trace problems to near-end terminal equipment, far-end terminal equipment, or the transmission line.
PAGE 868
22 portTest Use the stopPortTest command to stop the test. Refer to the stopPortTest help page for more information. Use the portTestShow command to view the current status of portTest. Refer to the portTestShow help page for more information. If there is a port type change during portTest execution, the test continues on a given port as long as it can be supported and it is asked to do so.
PAGE 869
portTest 2 -5 All N->N loopback ports.
PAGE 870
22 portTestShow portTestShow Displays information from portTest. SYNOPSIS DESCRIPTION porttestshow [-ports itemlist] Use this command to display a snapshot of information from portTest. The command output displays statistical data about past test runs and values for parameters that were set when the test was run. Refer to the portTest help page for more information on the displayed parameters. The output includes the following information: Port number Displays test status for the port.
PAGE 871
portTestShow NOTES OPERANDS 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command has the following operand: -ports itemlist Displays test results for the specified ports. This operand is optional; if omitted, data for all ports are displayed. Refer to the itemList help page for further details.
PAGE 872
22 portThConfig portThConfig Configures Fabric Watch event thresholds per port type.
PAGE 873
portThConfig NOTES 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command requires a Fabric Watch license. For more information on port threshold configuration procedures, including default values for specific area high/low thresholds, refer to the Fabric Watch Administrator's Guide.
PAGE 874
22 portThConfig LR Link reset TU Trunk Utilization Only the following areas are valid for VE_Ports. UTIL Port utilization PKTLOSS Packet loss ST State change --set Configures the Fabric Watch thresholds for monitoring a specified area for all ports of a specified port type. When configuring a threshold, you must specify a port type and area. The following operands are optional and valid only with the --set option. Defaults are used unless you configure custom settings.
PAGE 875
portThConfig 2 portlog Locks the port log. Following an event, the port log locks to retain information about an event, preventing the information from being overwritten as the log becomes full. none Event triggers no action. -buffer value Specifies the buffer value for in range behavior. A buffer defines a zone within which event criteria are met, rather than a single threshold value. This operand is valid only with the -trigger options.
PAGE 876
22 portThConfig -area area[,area]... | all Specifies the area. You can either specify one or more areas separated by a comma, or you can specify all to indicate all areas. -port port_list | all Specifies one or more ports or all ports. The port_list operand supports one of the following values: • • • A single port number preceded by the slot number on bladed systems. A set of comma-separated port numbers, preceded by the slot number on bladed systems, for example, 3,8,15, or 1/1,1/9,2/27.
PAGE 877
portThConfig 2 To cancel the custom settings that have previously been saved nonpersistently: switch:admin> portthconfig --cancel ve-port -area util -action_level cust -thresh_level cust \ To display the port threshold configuration for all port types and areas: switch:admin> portthconfig --show PortType: E-port Area : CRC ThLevel : Def ActLevel: Def High : Custom: TimeBase: Minute Value : 1000 Trigger : Above Action: None Trigger : Below Action: None Default: TimeBase: Minute Value : 1000 Trigger : Abo
PAGE 878
22 portThConfig Trigger : Below Action: None Default: TimeBase: Value : Trigger : Trigger : Minute 0 Above Action: None Below Action: None Buffer: Custom: Value : 100 Value : 100 Default: Port persistence time = 18s Area : LR ThLevel : Def ActLevel: Def High : Custom: TimeBase: Value : Trigger : Trigger : Minute 500 Above Action: None Below Action: None TimeBase: Value : Trigger : Trigger : Minute 500 Above Action: None Below Action: None TimeBase: Value : Trigger : Trigger : Minute 0 Above Ac
PAGE 879
portThConfig 2 Custom: TimeBase: Value : Trigger : Trigger : Minute 0 Above Action: None Below Action: None TimeBase: Value : Trigger : Trigger : Minute 0 Above Action: None Below Action: None Default: Buffer: Custom: Value : 100 Default: Value : 100 Port persistence time = 18s To pause and continue E_Port monitoring: switch:admin> portthconfig --pause e-port -area all -port all switch:admin> portthconfig --show e-port -current PortType |Area |PortNo|C# |Value |State |Monitoring ---------|-------|
PAGE 880
22 portThConfig To display current values for CRC errors for all E_Ports: switch:admin> portthconfig --show e-port -area CRC -current PortType |Area |PortNo|C# |Value |State |Monitoring ---------|-------|------|----|---------|-------|---------E-port |CRC |000000|n/a |0 |Info |Continue E-port |CRC |000001|n/a |0 |Info |Continue E-port |CRC |000002|n/a |0 |Info |Continue E-port |CRC |000003|n/a |0 |Info |Continue E-port |CRC |000004|n/a |0 |Info |Continue E-port |CRC |000005|n/a |0 |Info |Continue E-port |C
PAGE 881
portTrunkArea 2 portTrunkArea Assigns or removes a trunk area (TA) from a port or port trunk group; displays masterless F_Port trunking configuration.
PAGE 882
22 portTrunkArea The --show trunk option displays the following information: Trunk Index Displays the trunk index. ptA->ptB ptA indicates the local user port; ptB indicates the remote user port. sp Port speed in Gbps. Bandwidth The bandwidth (Rx, Tx, and the combined total for Tx+Rx) of the trunk group. Values are displayed as either bits per second (Bps), kilobits per second (Kbps), megabits per second (Mbps), or gigabits per second (Gbps), rounded down to the next integer.
PAGE 883
portTrunkArea NOTES 2 • Ports included in a TA share the same port index. The original port index may be removed in the process. This means that D, I zones referring to these indices are no longer part of the switch. For details and workarounds, refer to the Fabric OS Administrator's Guide. • Device Connection Control (DCC) Policy must be removed from ports prior to creating a TA. You can re-enable DCC policy after creating the TA. • You cannot assign a TA while AG mode is enabled.
PAGE 884
22 portTrunkArea trunk Displays configuration details for the port trunk group, including user port, neighboring user port, and master port properties. enabled Displays configuration details for all ports included in a user assigned TA (all ports on which masterless F_Port trunking is enabled). disabled Displays configuration details for all ports not included in a user assigned TA (all ports on which masterless F_Port trunking is not enabled). all Displays configuration details for all ports on a switch.
PAGE 885
portTrunkArea 2 To display trunk details for a user assigned TA 25 that includes ports 24-25: switch:admin> porttrunkarea --show trunk Trunk Index 25: 25->0 sp: 8.000G \ bw: 16.000G deskew 15 MASTER Tx: Bandwidth 16.00Gbps, Throughput 1.63Gbps (11.84%) Rx: Bandwidth 16.00Gbps, Throughput 1.62Gbps (11.76%) Tx+Rx: Bandwidth 32.00Gbps, Throughput 3.24Gbps (11.80%) 24->1 sp: 8.000G bw: 8.000G deskew 15 Tx: Bandwidth 16.00Gbps, Throughput 1.63Gbps (11.84%) Rx: Bandwidth 16.00Gbps, Throughput 1.62Gbps (11.
PAGE 886
22 portZoneShow portZoneShow Displays the enforced zone type of the F_Ports and FL_Ports of a switch. SYNOPSIS DESCRIPTION portzoneshow Use this command to display the enforced zone type of the F_Ports and FL_Ports of a switch. Output shows virtual port number (decimal), physical port number (decimal), online status, and if online, port type. If the current zone configuration has been disabled by cfgDisable, the fabric is in non-zoning mode, in which all devices see each other.
PAGE 887
powerOffListSet 2 powerOffListSet Sets the order in which slots are powered off. SYNOPSIS DESCRIPTION powerofflistset Use this command to Modify the order in which slots are powered off. This command displays the current order, and then prompts you interactively to confirm or modify the power-off position for each slot.
PAGE 888
22 powerOffListSet 6th slot to be powered off: (7..9) [8] 9 7th slot to be powered off: (7..8) [8] 8 8th slot to be powered off: (7..
PAGE 889
powerOffListShow 2 powerOffListShow Displays the order in which slots are powered off. SYNOPSIS DESCRIPTION powerofflistshow Use this command to display the order in which the physical slots are powered off. Whenever a power supply goes out of service or a field-replaceable unit (FRU) is inserted, the system's available power is compared to the system's required power to determine if there is enough power to operate.
PAGE 890
22 psShow psShow Displays power supply status. SYNOPSIS DESCRIPTION psshow Use this command to display the current status of the switch power supplies. The status of each supply is displayed as: OK Power supply functioning correctly. absent Power supply not present. unknown Unknown power supply unit installed. predicting failure Power supply is present but predicting failure. faulty Power supply present but faulty (no power cable, power switch turned off, fuse blown, or other internal error).
PAGE 891
reBoot 2 reBoot Reboots the control processor (CP). SYNOPSIS DESCRIPTION reboot [-f] Use this command to perform a "cold reboot" (power off/restart) of the control processor. This operation may be disruptive, and the command prompts for confirmation before executing. When you reboot a switch connected to a fabric, all traffic to and from that switch stops. All Fibre Channel ports on that switch including E_Ports become inactive until the switch comes back online.
PAGE 892
22 reBoot To reboot a CP on a DCX when HA is enabled: switch:admin> reboot Warning: This command is being run on a control processor (CP) based system and will cause the active CP to reboot. Are you sure you want to reboot the active CP [y/n]? y Broadcast message from root (pts/0) Sun Feb 28 19:49:45 2010... The system is going down for reboot NOW !! To reboot a CP on a DCX when haFailover is disabled: switch:admin> reboot This command is being run on a control processor (CP) based system.
PAGE 893
roleConfig 2 roleConfig Manages user-defined roles.
PAGE 894
22 roleConfig role_name Specifies the name for the role to be created or modified. The name must be unique; it is case-insensitive and can contain only alpha characters. The role name must be at least 4 characters long and cannot exceed 16 characters. The maximum number of user-defined roles allowed on a chassis is 256. This operand is required. The following operands are optional with --add and --change: -desc description Specifies a description for the role of up to 63 characters.
PAGE 895
roleConfig 2 --help Displays the command usage.
PAGE 896
22 routeHelp routeHelp Displays a list of FSPF-related commands. SYNOPSIS DESCRIPTION NOTES routehelp Use this command to display a list of fabric-shortest-path-first (FSPF)-related commands. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 897
rtLogTrace 2 rtLogTrace Manages real-time trace logging. SYNOPSIS rtlogtrace --enable rtlogtrace --disable rtlogtrace --show rtlogtrace --help DESCRIPTION Use this command to enable or disable real-time trace logging and to indicate whether the feature is enabled or disabled. The RTLog facility captures the most recent hardware events and low-level software interrupts on Brocade DCX platforms in real time. When enabled, the RTLog traces are collected as part of the supportsave utility.
PAGE 898
22 secActiveSize secActiveSize Displays the size of the active security database. SYNOPSIS DESCRIPTION secactivesize Use this command to display the size of the active security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 megabyte per logical switch. With up to eight partitions, the total database size on a chassis can be up to 8 megabytes.
PAGE 899
secAuthSecret 2 secAuthSecret Manages the DH-CHAP shared secret key information. SYNOPSIS secauthsecret --show secauthsecret --set secauthsecret --remove value | --all DESCRIPTION Use this command to manage the DH-CHAP shared secret key database used for authentication. This command displays, sets, and removes shared secret key information from the database or deletes the entire database. If you are performing set or remove operations, when the command is completed new data is saved persistently.
PAGE 900
22 secAuthSecret authentication. If switch is configured to do DH-CHAP, it is performed whenever a port or a switch is enabled. Warning: Please use a secure channel for setting secrets. Using an insecure channel is not safe and may compromise secrets. Following inputs should be specified for each entry. 1. WWN for which secret is being set up. 2. Peer secret: The secret of the peer that authenticates to peer. 3. Local secret: The local secret that authenticates peer.
PAGE 901
secCertUtil 2 secCertUtil Manages certificates on a switch.
PAGE 902
22 secCertUtil • • Configure a SSL certificate file name. Enable secure protocols. This command takes an action and associated arguments. If only an action is specified, this command prompts interactively for input values of the associated arguments. The command runs noninteractively when the arguments associated with a given action are specified on the command line. When invoked without operands, this command displays the usage.
PAGE 903
secCertUtil 2 -org organization Specifies the organization. Provide the full name, for example, Brocade. If the organization consists of multiple words, it must be enclosed in double quotes. -orgunit organization unit Specifies the organizational unit, for example, your department name. If the organizational unit consists of multiple words, it must be enclosed in double quotes. -cn common name Specifies the common name. Provide a fully qualified Domain Name, or IP address.
PAGE 904
22 secCertUtil -fcapswcsr Exports the FCAP switch CSR certificate from the switch to the remote host. The FCAP switch CSR is exported as switchIPfcapSw.csr. -fcapcacert Exports the FCAP CA certificate from the switch to the remote host. The FCAP CA certificate is exported as switchIPfcapRootCA.pem. -protocol ftp | scp Specifies the protocol as either FTP or SCP. -ipaddr IP address Specifies the IP address of the remote host. -remotedir remote directory Specifies the remote directory.
PAGE 905
secCertUtil 2 -login login name Specifies the login name for the server. -password password Specifies the password for the user account. When using SCP, for security reasons, do not enter a password on the command line. Use the interactive version instead. show Lists all existing PKI-based certificates on the switch. The following operands are optional and exclusive. -ldapcacert Lists all existing LDAP CA certificates on the switch.. -fcapall Indicates whether FCAP-related files exist or are empty.
PAGE 906
22 secCertUtil To generate a CSR in noninteractive mode: switch:admin> seccertutil gencsr -country US \ -state California -locality "San Jose" \ -org Brocade -orgunit software -cn 192.168.38.206 generating CSR, file name is: 192.168.38.206.csr Done To delete the CSR in interactive mode: switch:admin> seccertutil delcsr WARNING!!! About to delete CSR: 192.168.163.238.
PAGE 907
secCertUtil 2 To import an FCAP CA certificate in interactive mode: switch:admin> seccertutil import -fcapcacert Select protocol [ftp or scp]: scp Enter IP address: 10.32.2.25 Enter remote directory: /users/myname/OPENSSL Enter certificate name (must have ".crt" or ".cer" ".pem" or ".psk" suffix):CACert.pem Enter Login Name: myname myname@10.32.2.25's password: Success: imported certificate [CACert.pem].
PAGE 908
22 secCertUtil To export an FCAP switch certificate in interactive mode: switch:admin> seccertutil export -fcapswcert Select protocol [ftp or scp]: scp Enter IP address: 10.32.2.25 Enter remote directory: /users/myname/OPENSSL Enter Login Name: myname myname@10.32.2.25's password: Success: exported FCAP switch certificate To export an FCAP switch CSR in interactive mode: switch:admin> seccertutil export -fcapswcsr Select protocol [ftp or scp]: scp Enter IP address: 10.32.2.
PAGE 909
secCertUtil 2 To display the FCAP PKI objects: switch:admin> seccertutil show -fcapall List of fcap files: Passphrase : Exist Private Key : Exist CSR : Exist Certificate : Empty Root Certificate: Exist To list all LDAP certificates on a switch: switch:admin> seccertutil show -ldapcacert List of ldap ca certificate files: Sample.
PAGE 910
22 secDefineSize secDefineSize Displays the size of the defined security database. SYNOPSIS DESCRIPTION secdefinesize Use this command to display the size of the defined security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 Megabyte per logical switch. With up to eight partitions, the total database size on a chassis can be up to 8 Megabytes.
PAGE 911
secGlobalShow 2 secGlobalShow Displays the current internal security state information. SYNOPSIS DESCRIPTION secglobalshow Use this command to display security server-specific information as a snapshot of its current state.
PAGE 912
22 secGlobalShow Zone Size (include enabled configuration) 312 bytes Zone sum e04b215b sec_db: free primaryDLPhase 0 ----wwnDL State----pid tid key sec usec --------- LOG CACHE --------14:08:50 813905136 secipadm_ipchange receives notification 14:08:50 850588912 secProcessIPChange starts processing 14:08:50 850588912 secProcessIPChange acks completion (Output truncated) SEE ALSO 886 secActiveSize, secDefineSize Fabric OS Command Reference 53-1001764-01
PAGE 913
secHelp 2 secHelp Displays information about security commands. SYNOPSIS DESCRIPTION NOTES sechelp Use this command to display a list of security commands with a brief description of the commands. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 914
22 secPolicyAbort secPolicyAbort Aborts all unsaved changes to the defined database. SYNOPSIS DESCRIPTION NOTES secpolicyabort Use this command to abort all changes to the defined security database that have not been saved to flash memory and to abort changes to policy creation and modification operations from all the switches if a fabric-wide consistency policy is not set for the particular policy. When an FCS policy is enabled, this command can be issued only from the Primary FCS switch.
PAGE 915
secPolicyActivate 2 secPolicyActivate Saves and activates the Defined Security Policy Set. SYNOPSIS DESCRIPTION secpolicyactivate Use this command to activate the current defined security policy to all switches in the fabric. This activates the policy set on the local switch or all switches in the fabric depending on the fabric-wide consistency policy.
PAGE 916
22 secPolicyAdd secPolicyAdd Adds members to an existing security policy. SYNOPSIS DESCRIPTION secpolicyadd "name","member[;member...]" Use this command to add one or more members to an existing access policy. Each policy corresponds to a management method. The list of members of a policy acts as an access control list for that management method. Before a policy is created, there is no enforcement for that management method; all access is granted.
PAGE 917
secPolicyAdd 2 "member" Specify a list of one or more member switches to be included in the security policy. The list must be enclosed in quotation marks; members must be separated by semicolons. Depending on the policy type, members are specified as follows. FCS_POLICY or SCC_POLICY Members This policy type requires member IDs to be specified as WWN strings, Domains, or switch names. If Domain IDs or switch names are used, the switches associated must be present in the fabric or the command fails.
PAGE 918
22 secPolicyCreate secPolicyCreate Creates a new security policy. SYNOPSIS DESCRIPTION secpolicycreate "name" [, "member[;member...]"] Use this command to create a new policy and to edit Switch Connection Control (SCC), Device Connection Control (DCC), and Fabric Configuration Server (FCS) policies on the local switch. All policies can be created only once, except for the DCC_POLICY_nnn. Each DCC_POLICY_nnn must have a unique name.
PAGE 919
secPolicyCreate 2 secpolicycreate DCC_POLICY "*" may be used to indicate DCC lockdown. This command creates a unique policy for each port in the fabric locking it down to the device connected or creating an empty policy to disallow any device to be connected to it. This can be done only when there are no other DCC policies defined on the switch. The switch must be in an enabled state for DCC lockdown to succeed.
PAGE 920
22 secPolicyCreate To create a device policy to allow two devices to attach to domain 3 ports 1 and 3 (the WWN of first device is 11:22:33:44:55:66:77:aa and the WWN of second device is 11:22:33:44:55:66:77:bb): primaryfcs:admin> secpolicycreate "DCC_POLICY_aB_7", \ "11:22:33:44:55:66:77:aa;11:22:33:44:55:66:77:bb;3[1,3]" DCC_POLICY_abc has been created. To create a SCC policy in a fabric with three switches: 1. Check if a policy exists.
PAGE 921
secPolicyDelete 2 secPolicyDelete Deletes an existing security policy. SYNOPSIS DESCRIPTION secpolicydelete name Use this command to delete an existing security policy from the defined security database. Run secPolicyActivate to delete the policies from the active security policy list. Deleting a security policy does not cause any traffic disruption. Each policy corresponds to a management method. The list of members of a policy acts as an access control list for that management method.
PAGE 922
22 secPolicyDelete To delete all stale DCC policies in the fabric: primaryfcs:admin> secpolicydelete ALL_STALE_DCC_POLICY About to clear all STALE DCC policies ARE YOU SURE (yes, y, no, n): [no] y SEE ALSO 896 secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPolicyDump, secPolicyRemove, secPolicySave, secPolicyShow Fabric OS Command Reference 53-1001764-01
PAGE 923
secPolicyDump 2 secPolicyDump Displays the members of one or all existing security policies. SYNOPSIS secpolicydump ["listtype"][,"name"] DESCRIPTION Use this command to display, without page breaks, the members of an existing policy in the active and defined (saved) databases. When issued without operands, this command displays the members of all security policies. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 924
22 secPolicyDump To display all security policies in the active database: switch:admin> secpolicydump "active" ____________________________________________________ ACTIVE POLICY SET FCS_POLICY Pos Primary WWN DId swName -------------------------------------------------1 Yes 10:00:00:05:1e:39:5f:67 3 NeptuneSec 2 No 10:00:00:05:1e:90:09:4a - Unknown SCC_POLICY WWN DId swName -------------------------------------------------10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown DCC_POLICY_h1
PAGE 925
secPolicyDump 2 To display the SCC policies in the defined database: switch:admin> secpolicydump "Defined","SCC_POLICY" _________________________________________________ DEFINED POLICY SET SCC_POLICY WWN DId swName -----------------------------------------------10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown To display the SCC policies in the active database: switch:admin> secpolicydump "Active","SCC_POLICY" __________________________________________________ ACTIVE POLICY SET SCC_P
PAGE 926
22 secPolicyFCSMove secPolicyFCSMove Moves a member in the FCS policy. SYNOPSIS DESCRIPTION NOTES secpolicyfcsmove [from, to] Use this command to move an FCS member from one position to another position in the FCS list. Only one FCS can be moved at a time. The first FCS switch in the list that is also present in the fabric is the Primary FCS. If a backup FCS is moved to the first position, it becomes the primary FCS after activation.
PAGE 927
secPolicyFCSMove 3 No 2 10:00:00:05:1e:35:cd:ef 200 switch3 switch:admin> secpolicyfcsmove 3,1 ____________________________________________________ DEFINED POLICY SET FCS_POLICY Pos Primary WWN DId swName ------------------------------------------------1 No 10:00:00:05:1e:35:cd:ef 200 switch3 2 Yes 10:00:00:05:1e:39:5f:67 2 switch1 3 No 10:00:00:05:1e:04:ef:0e 4 switch2 switch:admin> secpolicyactivate About to overwrite the current Active Policy Set.
PAGE 928
22 secPolicyRemove secPolicyRemove Removes members from an existing security policy. SYNOPSIS DESCRIPTION NOTES secpolicyremove "name" ,"member[;member...]" Use this command to remove one or more members from an existing security policy. It is not possible to remove all members from the FCS_POLICY; the local switch WWN cannot be deleted from the FCS policy. In the case of SCC policy, if it is empty after removing all members, all access to the switch itself would be disallowed.
PAGE 929
secPolicyRemove 2 (*) Selects all ports on the switch. [3, 9] Selects ports 3 and 9 and all devices attached to those ports. [1-3, 5] Selects ports 1 through 3 and 5 and all devices attached to those ports. [*] Selects all ports on the switch and devices currently attached to those ports. EXAMPLES To remove a member that has a WWN of 12:24:45:10:0a:67:00:40 from SCC policy: switch:admin> secpolicyremove "SCC_POLICY", \ "12:24:45:10:0a:67:00:40" Member(s) have been removed from SCC_POLICY.
PAGE 930
22 secPolicySave secPolicySave Saves a defined security policy to persistent memory. SYNOPSIS DESCRIPTION NOTES secpolicysave Use this command to save a defined security policy to persistent memory. SecPolicySave saves the modified SCC, DCC, and FCS policies to the Defined Security Policy Set on the local switch. This command is always a local switch operation. A fabric-wide consistency configuration does not affect the behavior of this command.
PAGE 931
secPolicyShow 2 secPolicyShow Displays an existing security policy including the FCS policy. SYNOPSIS DESCRIPTION secpolicyshow ["policy_set"[", name"]] Use this command to display the members of an existing policy in the Active or Defined security policy set. The command can be issued from all FCS switches. This command displays the policy database one page at a time. Use the secPolicyDump command to display the policy database without page breaks.
PAGE 932
22 secPolicyShow To display all security policies from defined databases: switch:admin> secpolicyshow "defined" __________________________________________________ DEFINED POLICY FCS_POLICY Pos Primary WWN DId swName __________________________________________________ 1 Yes 10:00:00:60:69:30:15:5c 1 primaryfcs 2 No 10:00:00:60:69:30:1e:62 4 switch ___________________________________________________ SEE ALSO 906 fddCfg, secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPolicyDelete, sec
PAGE 933
secStatsReset 2 secStatsReset Resets one or all security statistics to 0. SYNOPSIS DESCRIPTION NOTES OPERANDS secstatsreset [name][,"domain[;domain]"] Use this command to reset one or all security statistics to 0. This command can be issued on any switch to reset the security statistics on the local switch or chassis. If an FCS policy is enabled and secStatsReset is issued on the primary FCS switch, this command can reset security statistics for any or all switches in the fabric.
PAGE 934
22 secStatsReset To reset DCC_POLICY statistics on domains 1 and 69: primaryfcs:admin> secstatsreset DCC_POLICY, "1;69" Reset DCC_POLICY statistic.
PAGE 935
secStatsShow 2 secStatsShow Displays one or all security statistics. SYNOPSIS DESCRIPTION NOTES OPERANDS secstatsshow [name[,"domain[;domain]"]] Use this command to display one or all security statistics. This command can be issued on any switch to display local security statistics. If an FCS policy is enabled and secStatsShow is issued on the primary FCS switch, this command can retrieve and display the security statistics for any or all switches in the fabric.
PAGE 936
22 secStatsShow EXAMPLES To display the LOGIN policy statistics for the local domain. switch:admin> secstatsshow LOGIN Fabric Statistics: Domain 1: Name Value ========================================= LOGIN 2 To display statistic information for TELNET_POLICY for all switches in the fabric from the primary FCS switch.
PAGE 937
sensorShow 2 sensorShow Displays sensor readings. SYNOPSIS sensorshow DESCRIPTION Use this command to display the current temperature, fan, and power supply status and readings from sensors located on the switch. The actual location of the sensors varies, depending on the switch type. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 938
22 serDesTuneMode serDesTuneMode Configures and displays SerDes values on the Brocade FC8-16. SYNOPSIS serdestunemode --set serdestunemode --reset serdestunemode --show serdestunemode --help DESCRIPTION Use this command to set the SerDes tuning mode for the Brocade FC8-16 port blade and to display the configuration.
PAGE 939
serDesTuneMode 2 To disable SerDes tuning mode and reset the SerDes values to defaults: switch:admin> serdestunemode --reset serdestunemode is turned ff New serdes values reset on slot = 2 New serdes values reset on slot = 7 switch:admin> serdestunemode --show serdestunemode is disabled SEE ALSO None Fabric OS Command Reference 53-1001764-01 913
PAGE 940
22 setContext setContext Sets the logical switch context to a specified FID. SYNOPSIS DESCRIPTION setcontext FID Use this command to set the logical switch context to a specified fabric ID (FID). The FID uniquely defines a partition as a logical switch. Use lscfg --show -cfg to display currently configured partitions and their FIDs. A logical switch context defines the boundaries within which a user can execute commands in a Virtual Fabric-aware environment.
PAGE 941
setDbg 2 setDbg Sets the debug level of the specified module. SYNOPSIS DESCRIPTION setdbg [module_name][level] Use this command to set the debug level of a specified module. Debug levels filter the display of debug messages to the serial console. By default, no debug messages are displayed. High debug level values can generate a large volume of messages, degrading the system response time. The set of supported modules and their current debug levels are displayed by the command dbgShow.
PAGE 942
22 setVerbose setVerbose Specifies module verbose level. SYNOPSIS DESCRIPTION NOTES OPERANDS setverbose [module_name][level] Use this command to set the verbose level of the specified module. These levels filter the display of the debug message to the serial console. By default, no debug messages are displayed. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 943
sfpShow 2 sfpShow Displays Small Form-factor Pluggable (SFP) information. SYNOPSIS sfpshow sfpshow [slot/]geport [ -f] sfpshow -all sfpshow -health DESCRIPTION Use this command to display information about Serial Identification SFPs (also known as module definition "4" SFPs). These SFPs provide extended information that describes the SFP capabilities, interfaces, manufacturer, and other information. Use this command without operands to display a summary of all SFPs in the switch.
PAGE 944
22 sfpShow -all Displays detailed data for all available SFPs on the switch. This operand is not compatible with slot/port operands. -health Displays SFP health status information from Fabric Watch for 10G and 16G SFPs and for 16G QSFPs (Quad Small Form-factor Pluggables). When Fabric Watch monitoring of SFPs is enabled with the thMonitor command, Fabric Watch monitors diagnostic SFP parameters such as current, voltage, receiver power, transmit power, and temperature.
PAGE 945
sfpShow 2 Slot 2/Port 11: id Slot 2/Port 12: id Slot 2/Port 13: id Slot 2/Port 14: id Slot 2/Port 15: id Slot 3/Port 0: id (sw) Vendor: BROCADE \ Serial No: HAA110491000HJ2 Speed: 4,8,16_Gbps Health: Green Slot 3/Port 1: id (sw) Vendor: BROCADE \ Serial No: HAA110491000HN2 Speed: 4,8,16_Gbps Health: Green Slot 3/Port 2: id (sw) Vendor: BROCADE \ Serial No: HAA110491000HZ2 Speed: 4,8,16_Gbps Health: Green Slot 3/Port 3: id (sw) Vendor: BROCADE \ Serial No: HAA110491000HS2 Speed: 4,8,16_Gbps Health: Green S
PAGE 946
22 sfpShow To display detailed information about all SFPs: switch:user> sfpshow -all (output trunctaed) ============= Slot 2/Port 14: ============= Port 30 does not use an SFP! ============= Slot 2/Port 15: ============= Port 31 does not use an SFP! ============= Slot 3/Port 0: ============= Identifier: 3 SFP Connector: 7 LC Transceiver: 700c406000000000 4,8,16_Gbps \ M5,M6 sw Inter,Short_dist Encoding: 6 64B66B Baud Rate: 140 (units 100 megabaud) Length 9u: 0 (units km) Length 9u: 0 (units 100 meters) Le
PAGE 947
sfpShow 2 To display mini-SFPs on a DCX-4S with a FC8-64 blade: switch:user> setcontext 52 switch:user> sfpshow Slot 8/Port 60: id (sw) Vendor: BROCADE \ Serial No: UYA109291003972 Speed: 2,4,8_Gbps Slot 8/Port 61: id (sw) Vendor: BROCADE \ Serial No: UYA109301011012 Speed: 2,4,8_Gbps Slot 8/Port 62: id (sw) Vendor: BROCADE \ Serial No: UYA109291004082 Speed: 2,4,8_Gbps To display mini-SFP details on a DCX with an FC8-64 blade: switch:user> sfpshow 12/8 Identifier: 3 SFP Connector: 7 LC Transceiver: 5
PAGE 948
22 sfpShow Length 50u: 0 (units 10 meters) Length 62.
PAGE 949
shellFlowControlDisable 2 shellFlowControlDisable Disables XON/XOFF flow control on the console serial port. SYNOPSIS DESCRIPTION shellflowcontroldisable Use this command to disable XON/XOFF flow control on the console serial port. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port. This command cannot run from a Telnet session.
PAGE 950
22 shellFlowControlEnable shellFlowControlEnable Enables XON/XOFF flow control on the console serial port. SYNOPSIS DESCRIPTION shellflowcontrolenable Use this command to enable XON/XOFF flow control to the shell task. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port. This command cannot run from a Telnet session.
PAGE 951
slotPowerOff 2 slotPowerOff Removes power from a slot. SYNOPSIS DESCRIPTION NOTES OPERANDS slotpoweroff slot Use this command to turn off the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be of a type that can be powered off. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 952
22 slotPowerOn slotPowerOn Restores power to a slot. SYNOPSIS DESCRIPTION NOTES OPERANDS slotpoweron slot Use this command to turn on the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be currently powered off. The slotShow command reports such slots as being in the state of INSERTED, NOT POWERED ON. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 953
slotShow 2 slotShow Displays the status of all slots in the system. SYNOPSIS DESCRIPTION slotshow [-m] [-p] Use this command to display the current status of each slot in the system. Depending on the option used, the command retrieves information on blade type, blade ID, status, Brocade model name, and power usage for each slot in the switch or chassis. This command does not display the model names for unsupported blades.
PAGE 954
22 slotShow 39 FC10-6 switch blade 43 FS8-18 application processor blade 46 CR4S-8 core blade 50 CP8 control processor blade 51 FC8-48 switch blade 52 Core8 core blade 55 FC8-32 switch blade 74 FCoE10-24 application processor blade 75 FX8-24 application processor blade 77 FC8-64 switch blade 96 FC16-48 switch blade 97 FC16-32 switch blade 98 CR16-8 core blade 99 CR16-4 core blade 125 FC8-32E switch blade 126 FC8-48E switch blade Status Displays the status of the blade as one of the following: VACANT The s
PAGE 955
slotShow 2 INITIALIZING The blade is present, powered on, and initializing hardware components. ENABLED The blade is on and fully enabled. DISABLED The blade is powered on but disabled. FAULTY The blade is faulty because an error was detected. UNKNOWN The blade is inserted but its state cannot be determined. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 956
22 slotShow To display the Brocade model name for each blade on a Brocade DCX 8510-8: switch:user> slotshow -m Slot Blade Type ID Status ------------------------------------------------1 SW BLADE 97 FC16-32 ENABLED 2 SW BLADE 96 FC16-48 ENABLED 3 SW BLADE 97 FC16-32 ENABLED 4 SW BLADE 96 FC16-48 ENABLED 5 CORE BLADE 98 CR16-8 ENABLED 6 CP BLADE 50 CP8 ENABLED 7 CP BLADE 50 CP8 ENABLED 8 CORE BLADE 98 CR16-8 ENABLED 9 SW BLADE 125 FC8-32E ENABLED 10 SW BLADE 126 FC8-48E ENABLED 11 SW BLADE 37 FC8-16 ENABLE
PAGE 957
slotShow 2 To display power consumption information on a Brocade DCX 8510-4: switch:user> slotshow -p Slot Blade Type ID DC Power Status Consumption ------------------------------------------------1 UNKNOWN VACANT 2 SW BLADE 96 180 ENABLED 3 CORE BLADE 99 200 ENABLED 4 CP BLADE 50 40 ENABLED 5 CP BLADE 50 40 ENABLED 6 CORE BLADE 99 200 ENABLED 7 UNKNOWN VACANT 8 AP BLADE 43 235 ENABLED Total DC Power Consumption: 1149 watts Total AC Power Consumption: 1276 watts AC @ 90% efficiency (4355 BTU) Power Effic
PAGE 958
22 snmpConfig snmpConfig Manages the SNMP agent configuration. SYNOPSIS snmpConfig --show | --set | --default | --enable | --disable [snmpv1 | snmpv3 | | mibCapability | systemGroup | seclevel] snmpConfig --set mibCapability [-mib_name mib_name [-bitmask bit_mask]] snmpConfig --enable | --disable mibCapability -mib_name mib_name [-trap_name trap_name] snmpConfig --enable | --disable snmpv1 snmpConfig --help DESCRIPTION Use this command to manage the configuration of the SNMP agent in the switch.
PAGE 959
snmpConfig 2 --set Sets the SNMP agent configuration data of the specified category. This operand displays the current settings and then prompts you to change the values for each parameter. --default Sets the SNMP agent configuration data for a specified item to the default values. Generally, these default values may be available in the configuration database. The command sets to factory defaults if the SNMP agent configuration parameters are not available in the configuration database.
PAGE 960
22 snmpConfig SNMPv1 Configuration Parameters The agent supports six communities and their associated trap recipients and trap recipient severity levels. The first three communities are for read-write (rw) access and the last three are for read-only (ro) access. The default value for the trap recipient of each community is 0.0.0.0. The length of the community string should be in the range of 2 to 16 characters.
PAGE 961
snmpConfig • • 2 User 5: snmpuser2 User 6: snmpuser3 The --default option sets the user name and password to default. If an FCS policy is enabled, the configuration must be updated on the primary switch and the nonprimary switches; unlike community strings, user names and passwords are not distributed for other switches in the fabric. When new passwords are entered for any user entry, a new authKey and privKey are generated. The new passwords must be updated on the client (e.g., MIB browser) as well.
PAGE 962
22 snmpConfig ____________________________________________________ FA-MIB 0x1 Enabled connUnitStatusChange(1) 0x2 Enabled connUnitAddedTrap (2) N/A Enabled connUnitDeletedTrap (3) 0x8 Enabled connUnitEventTrap (4) 0x10 Enabled connUnitSensorStatusChange(5) 0x20 Enabled connUnitPortStatusChange (6) 0x40 Enabled ____________________________________________________ FICON-MIB 0x1 Enabled linkRNIDDeviceRegistration (1) 0x2 Enabled linkRNIDDevicedeRegistration(2) 0x4 Enabled linkLIRRListenerAdded (3) 0x8 Enable
PAGE 963
snmpConfig 2 3 Warning 4 Informational -mib_name mib_name Specifies the name of the MIB to be configured. This operand is required if you want to configure MIB traps noninteractively. Valid MIB names include the following. • • • • • • • • • FE-MIB SW-MIB FA-MIB FICON-MIB HA-MIB FCIP-MIB ISCSI-MIB IF-MIB BD-MIB -bitmask bit_mask Specifies the bit mask for the MIB. Refer to the table above for valid values. --enable mibCapability -mib_name mib_name Enables the specified MIB noninteractively.
PAGE 964
22 snmpConfig SNMP GET security level Specifies security level for all SNMP GET requests. SNMP SET security level Specifies security level for SNMP SET requests only. Values include the following: 0 No security. 1 Authentication only. 2 Authentication and Privacy. 3 OFF EXAMPLES To display the SNMPv1 configuration: switch:admin> snmpConfig --show snmpv1 SNMPv1 community and trap recipient configuration: Community 1: Secret C0de (rw) Trap recipient: 10.32.147.
PAGE 965
snmpConfig 2 To set the access control configuration: switch:admin> snmpconfig --set accessControl SNMP access list configuration: Access host subnet area in dot notation: [0.0.0.0] 192.168.0.0 Read/Write? (true, t, false, f): [true] Access host subnet area in dot notation: [0.0.0.0] 10.32.148.0 Read/Write? (true, t, false, f): [true] f Access host subnet area in dot notation: [0.0.0.0] Read/Write? (true, t, false, f): [true] Access host subnet area in dot notation: [0.0.0.0] 10.33.0.
PAGE 966
22 snmpConfig swPmgrEventTrap: NO swFabricReconfigTrap: NO swFabricSegmentTrap: NO swExtTrap: NO [...] To enable the SW-MIB MIB only without changing the current trap configuration: switch:admin> snmpconfig --enable mibCapability -mib_name SW-MIB Operation succeeded \ switch:admin> snmpconfig --show mibCapability [...
PAGE 967
snmpConfig 2 To display the configuration for all MIBs and associated traps: switch:admin> snmpconfig --show mibCapability FE-MIB: YES SW-MIB: YES FA-MIB: YES FICON-MIB: YES HA-MIB: YES FCIP-MIB: YES ISCSI-MIB: YES IF-MIB: YES BD-MIB: YES SW-TRAP: NO swFault: NO swSensorScn: NO swFCPortScn: NO swEventTrap: NO DesiredSeverity:None swFabricWatchTrap: NO DesiredSeverity:None swTrackChangesTrap: NO swIPv6ChangeTrap: NO swPmgrEventTrap: NO swFabricReconfigTrap: NO swFabricSegmentTrap: NO swExtTrap: NO swStateC
PAGE 968
22 snmpConfig To restore the systemGroup configuration to default values: switch:admin> snmpconfig --default systemGroup ***** This command will reset the agent's system group configuration back to factory default ***** sysDescr = Fibre Channel Switch sysLocation = End User Premise sysContact = Field Support authTraps = 0 (OFF) ***** Are you sure? (yes, y, no, n): [no] y To set the security level: switch:admin> snmpconfig --set seclevel Select SNMP Security Level (0 = No security, 1 = Authentication only
PAGE 969
snmpConfig Trap Entry 2: 10.35.52.
PAGE 970
22 snmpConfig To block access to SNMPv1/2c switch:admin> snmpconfig --disable snmpv1 switch:admin> snmpconfig --show SNMPv1 community and trap recipient configuration: Community 1: ram (rw) Trap recipient: 172.26.4.
PAGE 971
snmpTraps 2 snmpTraps Sends or displays SNMP traps. SYNOPSIS snmptraps --send [-trap_name trap_name] [-ip_address ip_address] snmptraps --show [port] snmptraps --block -port [slot]port | ALL snmptraps --unblock -port [slot]port | ALL snmptraps --help DESCRIPTION Use this command to manage specific Simple Network Management Protocol (SNMP) traps. Use the --send option to send a specific SNMP trap to a recipient indicated by its IP address.
PAGE 972
22 snmpTraps --help Displays the command usage. EXAMPLES To send all traps to the configured recipients: switch:admin> snmpTraps --send Number of traps sent : 27 To send a bottleneck detection trap to recipient 172.16.0.12 switch:admin> snmptraps --send -trap_name \ bd-trap-ip_address 172.16.0.12.
PAGE 973
snmpTraps 2 To configure the switch so that only two ports receive the port traps, you block all traps and then unblock the ports you want to receive the traps: switch:admin> snmpTraps --block ALL switch:admin> snmpTraps --unblock 17 switch:admin> snmpTraps --unblock 18 To display the blocked port status: switch:admin> snmpTraps --show port Port 0 1 2 3 4 5 6 7 8 9 ------------------------------------------------------------------Blocked | | | | | | | | | | Port 10 11 12 13 14 15 16 17 18 19 ------------
PAGE 974
22 spinFab spinFab Runs functional test of interswitch link (ISL) cabling and trunk group operation. SYNOPSIS DESCRIPTION spinfab [-nmegs count] [-framesize bytes] [-ports itemlist] [-setfail mode] [-fports flag] Use this command to verify the intended functional operation of interswitch links (ISLs) at the maximum speed by setting up the routing hardware so that test frames received by each E_Port are retransmitted on the same E_Port.
PAGE 975
spinFab • • 2 Long Distance ports. F_Ports connected to an HBA. The following ports do not support the spinFab test: • • • • • Interchassis links (ICL) ports F_Ports connected to an Access Gateway EX_Ports E_Ports connected to EX_Ports If Access Gateway mode is enabled, spinFab tests only the F_Ports connected to Brocade-branded HBAs and skips all other ports (F_Ports connected to non-Brocade branded HBAs and N_Ports). p>On switches running Fabric OS v7.0.
PAGE 976
22 spinFab 1 Includes F_Ports in the port list for testing. DIAGNOSTICS When it detects failures, the test may report one or more of the following error messages. If errors persist, contact Technical Support.
PAGE 977
sshUtil 2 sshUtil Manages public key authentication. SYNOPSIS sshutil allowuser user name sshutil showuser sshutil importpubkey sshutil showpubkeys sshutil delpubkeys sshutil genkey sshutil exportpubkey sshutil delprivkey sshutil help DESCRIPTION Use this command to enable and manage SSH public key authentication on a switch. SSH public key authentication provides a mechanism for authenticating an authorized user without a password.
PAGE 978
22 sshUtil OPERANDS This command supports the following operands: allowuser user name Configures the specified user to perform public key authentication and all related management operations for outgoing public key authentication. This operation can only be performed by the default admin. The default admin is, by default, a configured user. Only one user can be configured at any given time. The following operand is required: user name Specifies login name for the configured user.
PAGE 979
sshUtil 2 genkey Generates an RSA private/public key pair on the local switch. This option can be performed only by a configured user. This option enables authentication for outgoing connections from the switch to a remote host. You must export the public key to a remote host to complete the setup.
PAGE 980
22 sshUtil /users/home/username/.ssh/id_dsa. Your public key has been saved in \ /users/home/username/.ssh/id_dsa.pub. The key fingerprint is: 3 0:9f:ae:b6:7f:7e:55:e4:b2:7a:51:f0:95:44:5c:d1 2. Import the public key from the remote host to the local switch: switch:username> sshutil importpubkey Enter user name for whom key is imported: username Enter IP address:Remote host IP Address Enter remote directory: ~username/.ssh Enter public key name(must have .pub suffix):id_dsa.
PAGE 981
sshUtil 2. 2 Export the public key to a remote host: switch:username> sshutil exportpubkey Enter IP address: remote host IP Address Enter remote directory: ~username/.ssh Enter login name:username Password:****** public key out_going.pub is exported successfully. 3. Append the public key to the authorized_keys file on the remote host: username@remotehost> cat ~/.ssh/outgoing.pub >> \ ~/.
PAGE 982
22 statsClear statsClear Clears port and diagnostic statistics. SYNOPSIS DESCRIPTION statsclear [--slot slot] [-uports itemlist] [-bports itemlist] [-use_bports value] Use this command to clear the port and diagnostics statistics for the specified list of blade or user ports. You can issue this command on the FR4-18i blade in a Brocade chassis; however, the command is not supported by the Brocade platform and does not affect any other feature operations.
PAGE 983
stopPortTest 2 stopPortTest Terminates the running portTest. SYNOPSIS DESCRIPTION NOTES OPERANDS stopporttest [-ports itemlist] Use this command to terminate the portTest command. Refer to the portTest help page for more information. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 984
22 supportFfdc supportFfdc Modifies or displays the first-fault data capture (FFDC) daemon. SYNOPSIS DESCRIPTION NOTES OPERANDS supportffdc [--disable | --enable | --show] Use this command to disable or enable the FFDC events, or to display the current configuration. If disabled, the daemon does not capture any data even when a message with FFDC attributes is logged. FFDC is enabled by default. When executed without operands, the command prints the usage.
PAGE 985
supportFtp 2 supportFtp Sets, clears, or displays support FTP parameters and enables or disables auto file transfer. SYNOPSIS supportftp [-S] supportftp -s [-h host][-u username][-p password] [-d remotedirectory] [-l protocol] supportftp -t hours supportftp -R supportftp -e supportftp -d DESCRIPTION NOTES OPERANDS Use this command to set, clear, or display supportFtp parameters. The parameters set by this command are used by the supportSave and traceDump commands.
PAGE 986
22 supportFtp -R Clears all supportFtp parameters. -e Enables auto file transfer. Trace dump files are automatically transferred to a designated FTP server. The server parameters must be set before you can enable auto file transfer. -d Disables auto file transfer. EXAMPLES To set the FTP parameters: switch:admin> supportftp -s -h 1080::8:800:200C:417A -u admin -p password -d support -l sftp supportftp: ftp parameters changed.
PAGE 987
supportSave 2 supportSave Saves RASLOG, TRACE, supportShow, core file, FFDC data, and other support information SYNOPSIS supportsave supportsave [-n] [-c] [-k] [-u user_name -p password -h host_ip -d remote_dir -l protocol] supportsave [-R] supportsave [-U -d remote_dir] supportsave [-t timeout_multiplier] DESCRIPTION Use this command to collect RASLOG, TRACE, supportShow, core file, FFDC data and other support information to a remote FTP location.
PAGE 988
22 supportSave The -c option is mutually exclusive with -u, -p, -h, and -d. -k Specifies that the supportFtp auto file transfer configuration transfer only core and FFDC files in noninteractive mode. -u user_name Specifies the user name for the FTP, SCP, or SFTP server. This operand is optional; if omitted, anonymous FTP is used. -p password Specifies the password for the FTP, SCP, or SFTP server. This operand is optional with FTP; if omitted, anonymous FTP is used.
PAGE 989
supportSave 2 automatically generate and transfer latest one. \ There will be two trace dump files transferred after this command. OK to proceed? (yes, y, no, n): [no] y Host IP or Host Name: 192.168.126.
PAGE 990
22 supportSave To run supportSave without confirmation on a Brocade DCX with AP blades included using supportFTP parameters (only Active CP output is shown): switch:admin> supportsave -n -c Saving support information for chassis:ras2,module:RAS... Saving support information for chassis:ras2,module:TRACE_OLD... Saving support information for chassis:ras2,module:TRACE_NEW... Saving support information for chassis:ras2,module:FABRIC... Saving support information for chassis:ras2,module:CORE_FFDC...
PAGE 991
supportShow 2 supportShow Displays switch information for debugging purposes. SYNOPSIS supportshow supportshow [slot /]port1[-port2] [lines] DESCRIPTION Use this command to display support information from groups of preselected Fabric OS and Linux commands and other support and debugging information. You can specify a port or a range of ports for which to display this information.
PAGE 992
22 supportShow fcip FCIP group commands, disabled by default. ag Access Gateway group commands, disabled by default. dce_hsl DCE group commands, enabled by default. crypto Encryption group commands, disabled by default. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 993
supportShow filter perfmon ficon iswitch asic_db fcip ag dce_hsl 2 disabled disabled disabled enabled enabled disabled (not applicable to this platform) enabled enabled **** Begin start_port_log_cmd group **** Sun Dec 6 05:10:14 PST 2009 portlogdump: CURRENT CONTEXT -- 0 , 128 portlogdump : time task event port cmd args ------------------------------------------------Sat Dec 5 23:54:37 2009 23:54:37.560 FCPH read 56 16 02fffc23,00fffc19, \ bb000000,00000000,04 3401bb 23:54:37.
PAGE 994
22 supportShowCfgDisable supportShowCfgDisable Disables a group of commands under the supportShow command. SYNOPSIS DESCRIPTION supportshowcfgdisable os | exception | port | fabric | services | security | network | portlog | system | extend | filter | perfmon | ficon | iswitch | asic_db | ag | dce_hsl | crypto | fcip Use this command to disable a group of commands under the supportShow command. Use the supportShowCfgEnable command to enable groups of commands.
PAGE 995
supportShowCfgDisable 2 asic_db Disables the ASIC DB group commands. ag Disables the Access Gateway group commands. dce_hsl Disables the DCE group commands. crypto Disables the encryption group commands fcip Disables the FCIP group commands. Supported only on the Brocade 7800/FX8-24 and FR4-18i.
PAGE 996
22 supportShowCfgEnable supportShowCfgEnable Enables a group of commands to be displayed under the supportShow command. SYNOPSIS DESCRIPTION supportshowcfgenable os | exception | port | fabric | services | security | network | portlog | system | extend | filter | perfmon | ficon | iswitch | asic_db | ag | dce_hsl |crypto | fcip Use this command to enable a group of commands to be displayed under the supportShow command. Use the supportShowCfgDisable command to disable groups of commands.
PAGE 997
supportShowCfgEnable 2 asic_db Enables the ASIC DB group commands. ag Enables the Access Gateway group commands. dce_hsl Disables the DCE group commands crypto Enables the encryption group commands. fcip Enables the FCIP group commands. Supported only on the Brocade 7800/FX8-24 and FR4-18i platforms.
PAGE 998
22 supportShowCfgShow supportShowCfgShow Displays the groups of commands enabled for display by the supportShow command. SYNOPSIS DESCRIPTION supportshowcfgshow Use this command to display the groups of commands enabled for display by the supportShow command. Use the supportShowCfgEnable and the supportShowCfgDisable commands to modify which groups are displayed.
PAGE 999
supportShowCfgShow iswitch asic_db fcip ag dce_hsl SEE ALSO 2 enabled enabled enabled enabled enabled supportShow, supportShowCfgDisable, supportShowCfgEnable Fabric OS Command Reference 53-1001764-01 973
PAGE 1000
22 switchBeacon switchBeacon Sets switch beaconing mode on or off. SYNOPSIS DESCRIPTION switchbeacon [mode] Use this command to enable or disable switch beaconing mode. Switch beaconing can be used to locate a failing unit. When beaconing mode is turned on, the port LEDs flash amber, left to right and right to left, from port 0 to the highest port number and back to port 0. The beaconing mode continues until you turn it off. The beaconing LED pattern continues until you turn it off.
PAGE 1001
switchCfgPersistentDisable 2 switchCfgPersistentDisable Disables a switch persistently. SYNOPSIS DESCRIPTION switchcfgpersistentdisable Use this command to persistently disable the switch. All Fibre Channel ports are taken offline. If the switch was part of a fabric, the remaining switches reconfigure. The switch remains disabled even after a reboot. As each port is disabled, the front panel LEDs change to a slow-flashing amber.
PAGE 1002
22 switchCfgPersistentEnable switchCfgPersistentEnable Enables a switch persistently. SYNOPSIS DESCRIPTION switchcfgpersistentenable Use this command to persistently enable a persistently disabled switch. All Fibre Channel ports that passed the power-on self-test (POST) are enabled and come online if connected to a device, or remain offline if disconnected. The switch may need to be enabled if it was previously disabled to make configuration changes or to run diagnostics.
PAGE 1003
switchCfgSpeed 2 switchCfgSpeed Configures the speed for all ports on a switch. SYNOPSIS DESCRIPTION switchcfgspeed speed Use this command to configure the port speed on a switch. This command sets the speed for all user ports. If any port on the switch is not capable of the specified speed setting, an error message is displayed for that port. The configuration is saved in nonvolatile memory and persists across switch reboots or power cycles.
PAGE 1004
22 switchCfgTrunk switchCfgTrunk Enables or disables trunking on all the ports of a switch. SYNOPSIS DESCRIPTION switchcfgtrunk mode Use this command to enable or disable trunking on all the ports of a switch. Use portCfgTrunkPort to enable or disable trunking on a single port. When the command is executed to update the trunking configuration, the ports to which the configuration applies are disabled and subsequently re-enabled with the new trunking configuration.
PAGE 1005
switchDisable 2 switchDisable Disables all user ports on a switch. SYNOPSIS DESCRIPTION switchdisable Use this command to disable all user ports on a switch. All Fibre Channel ports are taken offline. If the switch was part of a fabric, the remaining switches reconfigure. As each port is disabled, the front panel LED changes to a slow-flashing amber. The switch must be disabled before making configuration changes or before running offline diagnostic tests.
PAGE 1006
22 switchEnable switchEnable Enables all user ports on a switch. SYNOPSIS DESCRIPTION switchenable Use this command to enable all user ports on a switch. All Fibre Channel ports that passed the power-on self test (POST) are enabled. They can come online if connected to a device, or remain offline if disconnected. Use switchEnable to re-enable the switch after making configuration changes or running offline diagnostics. If the switch is connected to a fabric, it rejoins the fabric.
PAGE 1007
switchName 2 switchName Displays or sets the switch name. SYNOPSIS DESCRIPTION switchname [name] Use this command to display or set the switch name. All switches have a symbolic name that is primarily used for switch management. This name is shown in the Fabric OS CLI prompt, under each switch icon in Web Tools, and in the output of various Fabric OS Commands, such as fabricShow. Use this command with the name operand to assign a new switch name.
PAGE 1008
22 switchShow switchShow Displays switch and port status. SYNOPSIS switchshow switchshow [-slot slot] -portname switchshow [-portcount |-iscsi | -qsfp] DESCRIPTION Use this command to display switch, blade, and port status information. Output may vary depending on the switch model. When used without operands, switchShow displays the following information: switchName Switch name. switchType Switch model and revision numbers. switchState Switch state: Online, Offline, Testing, or Faulty.
PAGE 1009
switchShow 2 LS Attributes On a switch in Virtual Fabric mode, this field displays logical switch attributes, including the fabric ID associated with the logical switch, the switch role (default switch or base switch), and the fabric Address Mode (0, 2 or 3). If Virtual Fabrics are disabled, only the Address Mode is displayed. The fabric Address Mode value is set by the configure command (Enable a 256 Area Limit).
PAGE 1010
22 switchShow 10G 10 Gbps fixed transfer speed N10 10 Gbps negotiated transfer speed 16G 16 Gbps fixed transfer speed N16 10 Gbps negotiated transfer speed AN Autonegotiating UN Unknown State Port state information. Valid states include the following: No_Card No interface card present. No_Module No module (GBIC or other) present. Mod_Val Module validation in process. Mod_Inv Module speed mismatch or incompatible SFP. No_Light The module is not receiving light.
PAGE 1011
switchShow 2 Online The port is up and running. Proto Protocol support by GbE port. Valid protocols include the following: ISCSI The port supports ISCSI (deprecated). FCIP The port supports FCIP. FCoE The port supports Fibre Channel over Ethernet. comment Optionally displays one of the following: Copper or Optical Displays which GbE port is currently active: Copper indicates that the RJ45 GbE port is currently active. Only copper connections are accepted (default).
PAGE 1012
22 switchShow EX_Port Router port; displays the WWN of the attached edge switch. VF_Port FCoE Virtual F_Port. For these ports, the number of NPIV or external device logins is displayed ("n VN-Port(s)"), instead of the WWN of the internal port. VF_Port Disabled FCoE Virtual F_Port is disabled. Mirror Port The port is a mirror port. (Trunk master) The port is the master port in a group of trunking ports. (Trunk port, master is port #x) The port is configured as a trunking port; the master port is port #x.
PAGE 1013
switchShow 2 (logical) Indicates a logical port. The switchShow output shows all logical ports currently present in the logical switch. The command displays -1 for the slot for logical ports and the user port number for slot port. The logical port numbers are not persistent and may change when the logical interswitch links (LISLs) are deleted and recreated. A logical port is shown to be in one of the following states: E_Port (if the port is online), offline, or disabled.
PAGE 1014
22 switchShow OPERANDS This command has the following operands: -slot slot Displays blade information. You can specify this operand with -portname, but not with any other operand. -portname Displays the name for each port on the switch. The port name is set by the portName command. You can specify this operand with -slot, but not with any other operand. -portcount Displays the number of ports on the switch. This operand is exclusive.
PAGE 1015
switchShow 10:00:00:05:1e:56:5f:a9 0x690107 (AoQ) 11 id N4 Online FC F-Port 10:00:00:05:1e:56:5f:a8 0x690106 (AoQ) 12 12 -N8 No_Module FC 13 13 -N8 No_Module FC 14 14 -N8 No_Module FC 15 15 -N8 No_Module FC 16 16 id N8 No_Light FC 17 17 id N8 Online FC F-Port 1 N Port + 3 NPIV public (AoQ) 18 18 -N8 No_Module FC 19 19 -N8 No_Module FC 20 20 -N8 No_Module FC 21 21 -N8 No_Module FC 22 22 -N8 No_Module FC 23 23 -N8 No_Module FC 24 24 -N8 No_Module FC 25 25 -N8 No_Module FC 26 26 -N8 No_Module FC 27 27 -N8 No_
PAGE 1016
22 switchShow 380 381 382 383 769 12 44 32f480 -N8 No_Module 12 45 32f580 -N8 No_Module 12 46 32f680 -N8 No_Module 12 47 32f780 -N8 No_Module -1 769 ---- Online E-Port \ 10:00:00:05:1e:40:f0:79 "Switch 1" (logical) 770 -1 770 ---- Offline (logical) 785 -1 785 ---- Offline \ Disabled (logical, reason why port was disabled) (output truncated) To display switch configuration information on the Brocade 8000: switch:admin> switchshow switchName: elara133 switchType: 76.
PAGE 1017
switchShow 2 To display blade information and port names: switch:admin> switchshow -slot 5 -portname FC Router: OFF Allow XISL Use: OFF LS Attributes:[FID: 128, Base Switch: No, Default Switch:\ Yes, Address Mode 0] Slot Blade Type ID Status ------------------------------------------------5 COREBLADE 52 ENABLED Index Slot Port Name =================================================== 384 5 0 MyName_portname0 385 5 1 -----386 5 2 ------ To display QSFP information on a Brocade DCX 8510-4: • • • Ports 3/6
PAGE 1018
22 switchShow 398 399 400 401 402 403 404 405 406 407 408 409 410 5 5 5 5 5 5 5 5 5 5 5 5 5 E-Port 411 5 E-Port 412 5 E-Port 413 5 E-Port 414 5 415 5 1152 5 1153 5 1154 5 1155 5 1156 5 1157 5 1158 5 1159 5 1160 5 1161 5 1162 5 1163 5 1164 5 1165 5 1166 5 1167 5 1168 5 1169 5 1170 5 1171 5 1172 5 1173 5 1174 5 1175 5 1177 5 1178 5 1179 5 1180 5 1181 5 1182 5 1183 5 416 8 417 8 418 8 419 8 420 8 421 8 422 8 992 14 14 ------15 14 ------16 13 ------17 13 ------18 5 ------19 5 ------20 5 ------21 5 ------22
PAGE 1019
switchShow 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 Fabric OS Command Reference 53-1001764-01 8 7 15 -----id 8 8 14 ------8 9 14 ------8 10 6 ------8 11 6 ------8 12 6 ------8 13 6 ------8 14 14 ------8 15 14 ------8 16 13 ------8 17 13 ------8 18 5 ------8 19 5 ------8 20 5 ------8 21 5 ------8 22 13 ------8 23 1
PAGE 1020
22 switchShow 1211 1212 1213 1214 1215 8 8 8 8 8 59 60 61 62 63 0 0 0 8 8 -------------------------- ---id id 16G 16G 16G 16G 16G No_Module No_Module No_Module No_SigDet No_SigDet FC FC FC FC FC To display media type information (relevant output excerpts only): • The following example shows switchshow output for the ge0 and ge1 ports on a Brocade 7800. The ge0 port is a copper port (default). The ge1 has an SFP installed (copper or optical): [...] ge0 cu ge1 id ge2 -ge3 -ge4 id ge5 -[...
PAGE 1021
switchStatusPolicySet 2 switchStatusPolicySet Sets the policy parameters that determine the overall switch status. SYNOPSIS DESCRIPTION switchstatuspolicyset Use this command to set policy parameters for calculating the overall status of the switch. The policy parameter values determine how many failed or faulty units of each contributor are allowed before triggering a status change in the switch from HEALTHY to MARGINAL or DOWN.
PAGE 1022
22 switchStatusPolicySet ErrorPorts Percentage of ports segmented and disabled due to security violations or Fabric Watch port fencing. To determine the current status of the switch for each component monitored issue the switchStatusShow command. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 1023
switchStatusPolicySet 2 To change the switch policy parameters on a Brocade DCX 8510-8: switch:admin> switchstatuspolicyset To change the overall switch status policy parameters The current overall switch status policy parameters: Down Marginal ---------------------------------PowerSupplies 0 0 Temperatures 0 0 Fans 1 0 WWN 0 0 CP 0 0 Blade 0 0 CoreBlade 0 0 Flash 0 0 MarginalPorts 0.00%[0] 0.00%[0] FaultyPorts 0.00%[0] 0.00%[0] MissingSFPs 0.00%[0] 0.00%[0] ErrorPorts 0.00%[0] 0.
PAGE 1024
22 switchStatusPolicyShow switchStatusPolicyShow Displays the policy parameters that determine the overall switch status. SYNOPSIS DESCRIPTION switchstatuspolicyshow Use this command to view the current policy parameters set for the switch. These policy parameters determine the number of failed or nonoperational units allowed for each contributor before triggering a status change in the switch.
PAGE 1025
switchStatusShow 2 switchStatusShow Displays overall switch status. SYNOPSIS DESCRIPTION switchstatusshow Use this command to display the overall status for a switch. In addition, users with a Fabric Watch license are able to view a listing of unhealthy ports that includes the port index number, the port name, and the port status.
PAGE 1026
22 switchStatusShow Marginal ports monitor Faulty ports monitor Missing SFPs monitor Error ports monitor HEALTHY HEALTHY HEALTHY HEALTHY Port 032 port32 is FAULTY To display a switch health report on Brocade DCX 8510-8: switch:user> switchstatusshow Switch Health Report Report time: 03/12/2011 12:57:01 PM Switch Name: VF128_CDCX16_114057 IP address: 10.20.114.
PAGE 1027
switchUptime 2 switchUptime Displays the amount of time the switch has been operating. SYNOPSIS DESCRIPTION NOTES switchuptime Use this command to display the current time and the amount of time that the switch has been operational. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 1028
22 switchViolation switchViolation Dumps the DCC violations for a switch. SYNOPSIS DESCRIPTION NOTES switchViolation --dump -dcc Use this command to display all Device Connection Control (DCC) violations that have occurred on a switch. Internally the command searches "errdumpall" for the DCC violations. For each DCC violation, the command displays the device WWN and the port where the violation occurred.
PAGE 1029
syslogdFacility 2 syslogdFacility Sets or displays the syslog facility. SYNOPSIS DESCRIPTION NOTES OPERANDS syslogdFacility [-l level] Use this command to set the syslog facility to a specified log file, or use this command without operands to display the current syslog facility. The syslog daemon (syslogd) reads and forwards system messages to the log file specified by this command. You must configure the servers to receive system messages by adding them with the syslogdIpAdd command.
PAGE 1030
22 syslogdIpAdd syslogdIpAdd Configures a switch to forward system messages to specified servers. SYNOPSIS DESCRIPTION syslogdipadd ip_address Use this command to configure a switch to forward all error log entries to the syslog daemon (syslogd) of one or more specified servers. The syslog daemon is a process available on most UNIX systems that reads and forwards system messages to the appropriate log files or users, depending on the system configuration. Up to six servers are supported.
PAGE 1031
syslogdIpRemove 2 syslogdIpRemove Removes a server that is running the syslog daemon. SYNOPSIS DESCRIPTION NOTES OPERANDS syslogdipremove ip_address Use this command to remove a server that is running the syslogd process and to which system messages are sent from the syslog server configuration on the switch. IPv6 and IPv4 syslogd addresses are supported. Use syslogdIPShow to view the current syslog server configuration.
PAGE 1032
22 syslogdIpShow syslogdIpShow Displays all syslog daemon IP addresses. SYNOPSIS DESCRIPTION NOTES syslogdipshow Displays the list of servers that are running the syslogd daemon and to which system messages are sent. Servers are specified in the configuration database by IP address. IPv4 and IPv6 addresses are supported. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 1033
sysMonitor 2 sysMonitor Configures Fabric Watch thresholds for environment and system resources.
PAGE 1034
22 sysMonitor If any configured area exceeds the currently effective threshold settings, the Fabric Watch daemon can take one or more of the following actions: • • • Send an SNMP message. Log a RAS log message. Send an E-mail alert (valid only for the environment and resource class). Fabric Watch thresholds vary depending on the class and platform. Refer to the Fabric Watch Administrator's Guide for defaults and configuration guidelines.
PAGE 1035
sysMonitor 2 -action actions Specifies the actions triggered by a configured event condition. Valid values include one or more of the following actions. If more than one action is specified, the actions must be separated by commas. snmp Event triggers an SNMP trap. raslog Event triggers a RASlog message. email Event triggers an e-mail. none Event triggers no action. -buffer value Specifies the buffer value for in-range behavior.
PAGE 1036
22 sysMonitor -current Displays current values for a specified class or area. This operand is optional and valid only with the --show option. The output includes the class, area, port number, circuit ID (for the Brocade 7800 and FS8-24 only), Value, State, and Monitoring Status (pause or continue). The State field reports whether the current value is above, in range, or below (info) the configured threshold.
PAGE 1037
sysMonitor 2 --show cpu | mem Displays system memory or CPU usage. --help Displays the command usage.
PAGE 1038
22 sysMonitor Buffer: Custom: Value Default: Value : 10 : 10 To display current temperature values: switch:admin> sysmonitor --show env -area temp -c Class |Area |Index|Value |State | Monitoring ------|------|------|------|-----------------ENV |TEMP |000001|39 |InRange|Continue ENV |TEMP |000002|35 |InRange|Continue ENV |TEMP |000003|42 |InRange|Continue ENV |TEMP |000004|44 |InRange|Pause To configure Fabric Watch custom thresholds for flash memory: switch:admin> sysmonitor --config resouurce -area fl
PAGE 1039
sysMonitor 2 To pause monitoring of the resources class for a single element: switch:admin> sysmonitor --pause resource -area all -index 0 switch:admin> sysmonitor --show resource -current Class |Area |Index |Value |State |Monitoring ---------|-------|------|---------|-------|-------------RESOURCE |FLASH |000000|78 |InRange|Pause To continue monitoring of the resources class: switch:admin> sysmonitor --continue resource -area all -index 0 switch:admin> sysmonitor --show resource -current Class |Area |Ind
PAGE 1040
22 sysShutDown sysShutDown Provides a graceful shutdown to protect the switch file systems. SYNOPSIS DESCRIPTION sysshutdown On standalone platforms, use this command to shut down the switch operating system. On enterprise-class platforms, when sysShutDown is called on the active control processor (CP), the command shuts down the active CP, standby CP, and any AP blades.
PAGE 1041
sysShutDown 2 To attempt a system shutdown from the standby CP (not supported): switch:admin> sysshutdown Shut down the whole system is not support from the standby CP For shut down the whole system please run the sysshutdown from the active CP SEE ALSO haDisable Fabric OS Command Reference 53-1001764-01 1015
PAGE 1042
22 tempShow tempShow Displays temperature readings. SYNOPSIS DESCRIPTION NOTES tempshow Use this command to display the current temperature readings of all temperature sensors in a switch. For each sensor, this command displays the sensor ID (an index number), the slot number (if applicable), the sensor state (OK or absent), and the temperature. The temperature readings are given in both Centigrade and Fahrenheit.
PAGE 1043
thConfig 2 thConfig Configures Fabric Watch thresholds for the SFP, fabric, filter, security and EE monitor classes.
PAGE 1044
22 thConfig NOTES Monitoring of Condor 3-based 10G SFPs, 16G SFPs, and 16G QSFPs (quad small form-factor pluggables) is by default disabled. Use the thMonitor command to enable monitoring of these advanced SFPs. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. The Fabric and Security classes are not supported in Access Gateway mode.
PAGE 1045
thConfig 2 FC Tracks the number of times the fabric reconfigures. DC Tracks the number of Domain ID changes. SC Tracks the number of segmentation changes. ZC Tracks the number of zoning conflicts. FL Tracks the number of fabric logins. SECURITY Monitors the Security class. Valid areas for the security class include the following: TV Tracks the number of Telnet violations. HV Tracks the number of HTTP violations. SV Tracks the number of switch connection control (SCC) policy violations.
PAGE 1046
22 thConfig EE Monitors the End-to-End Performance Monitor class. Valid areas for the EE class include the following: RXP Monitors receive performance as the percentage of word frames traveling from the configured SID to the DID. TXP Monitors transmit performance as the percentage of word frames traveling from the configured DID to the SID. --set class -area area Configures Fabric Watch thresholds for monitoring a specified class and area.
PAGE 1047
thConfig 2 -lowth -value value Specifies the low threshold for triggering a specified alert action. To change the default value, provide an integer value. -trigger above | below Specifies the actions for in range behavior. In range is defined as the space above the low threshold and below the high threshold. The below operand is not supported with the -sfptype option. -action actions Specifies the actions triggered by a configured event condition. Valid values include one or more of the following actions.
PAGE 1048
22 thConfig The following operands are optional and valid only with the --show option. -current Displays current values for a specified class and area, as registered by Fabric Watch, or for all port types and areas. The output includes the class, area, port number, circuit number if applicable, current value, Fabric Watch State, and Monitoring State (pause or continue). The SFP type is displayed for the SFP class.
PAGE 1049
thConfig 2 To set high thresholds for the security class and login violation area with SNMP alerts and save the thresholds nonpersistently: switch:admin> thconfig --set security -area lv -highth-value 0 -trigger above \ -action snmp -nosave \ switch:admin> thconfig --set security -area lv -highth -value 0 -trigger below \ \ -action none -nosave \ To cancel the custom settings that have previously been saved nonpersistently.
PAGE 1050
22 thConfig Custom: TimeBase: Value : Trigger : Trigger : None 85 Above Action: Raslog Below Action: Raslog Low: Custom: TimeBase: None Value : -5 Trigger : Below Action: Raslog Buffer: Custom: Value : 0 To pause and then resume monitoring of the SFP area: switch:admin> thconfig --pause SFP -area all -port all switch:admin> thconfig --continue SFP -area all -port all To display the monitoring status for the QSFPs: switch:admin> thconfig --show sfp -sfptype qsfp -c Class |Area |Index |Value |State |Mo
PAGE 1051
thMonitor 2 thMonitor Enables monitoring of small form-factor pluggables (SFPs). SYNOPSIS thmonitor --enable brcdsfp thmonitor --disable brcdsfp thmonitor --show DESCRIPTION NOTES Use this command to enable Fabric Watch threshold monitoring for 10G and 16G SFPs and for 16G QSFPs. Fabric Watch does not monitor 10G and 16G SFPs or 16G QSFPs unless monitoring is explicitly enabled with this command. This command requires a Fabric Watch license.
PAGE 1052
22 timeOut timeOut Sets or displays the idle timeout value for a login session. SYNOPSIS DESCRIPTION timeout [timeval] Use this command without an operand to display the current timeout value (in minutes) after which idle logins are automatically terminated. Use this command with the timeval operand to set the login timeout value to the specified interval. A value of 0 disables timeout of login sessions. The new timeout value takes effect with the next logins.
PAGE 1053
topologyShow 2 topologyShow Displays the unicast fabric topology. SYNOPSIS DESCRIPTION topologyshow [domain] Use this command to display the fabric topology as it appears to the local switch. The display varies depending on the hardware configuration. The following rules apply: • On all switches, the command displays the number of domains in the fabric and the local Domain IDs. If translate domains are configured, existing translate domains and associated ports are displayed.
PAGE 1054
22 topologyShow Total Bandwidth The maximum bandwidth of the out port. A bandwidth that is less than 0.512 Gbps is adjusted to the nearest power of 2 value. A bandwidth in the range of 0.512 Gbps (included) to 1 Gbps (not included) is adjusted to the 0.512 Gbps value. No adjustment takes place if the bandwidth is greater or equal to 1 Gbps. Bandwidth Demand The maximum bandwidth demand by the in ports. Flags Always D, indicating a dynamic path.
PAGE 1055
topologyShow Name: fcr_xd_3_5 Path Count: 1 Hops: Out Port: In Ports: Total Bandwidth: Bandwidth Demand: Flags: Domain: Metric: Name: Path Count: 2 2 11 0 1 2 3 4 5 6 7 8 9 15 8.000 Gbps 1275 % D 111 500 peng3900101 1 Hops: Out Port: In Ports: Total Bandwidth: Bandwidth Demand: Flags: (output truncate) 1 15 0 1 2 3 4 5 6 7 8 9 11 2.000 Gbps 4000 % D The command is executed from the backbone in a fabric with five switches.
PAGE 1056
22 traceDump traceDump Initiates, or removes a trace dump or displays the trace dump status. SYNOPSIS tracedump [-S] tracedump -n [-s slot] tracedump -r [-s slot] | -R tracedump -c [-s slot] DESCRIPTION Use this command to initiate a background trace dump, to remove the content of a trace dump, or to display the dump status on the switch. When executed without operands, this command defaults to traceDump -S. Execution of traceDump -n generates a local trace dump locally.
PAGE 1057
traceDump 2 -R Clears the status of a particular trace dump on all slots. -c Clears all trace dump buffers. This operation resets the trace buffer contents. -s slot Specifies the slot number from which a trace dump is generated. If a slot is not supplied, the trace dump is generated from the local slot. This operand is optional.
PAGE 1058
22 trackChangesHelp trackChangesHelp Displays commands for the track-changes feature. SYNOPSIS DESCRIPTION NOTES trackchangeshelp Use this command to display a list of commands available for the track-changes feature. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 1059
trackChangesSet 2 trackChangesSet Configures the track-changes feature. SYNOPSIS DESCRIPTION trackchangesset [mode][,snmptrapmode] Use this command to enable or disable the track-changes feature and to configure the SNMP-TRAP mode. When enabled, this command tracks the following changes: • • • • Successful login Unsuccessful login Logout Enabling or disabling of the track-changes feature The output from the track-changes feature is dumped to the switch error log.
PAGE 1060
22 trackChangesShow trackChangesShow Displays the track-changes configuration. SYNOPSIS DESCRIPTION NOTES trackchangesshow Use this command to display the configuration of the track-changes feature. The output indicates whether the feature is enabled or disabled, and whether SNMP traps are generated. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 1061
trunkDebug 2 trunkDebug Debugs a trunk link failure. SYNOPSIS DESCRIPTION NOTES OPERANDS trunkdebug port1 port2 Use this command to debug a trunk link failure.
PAGE 1062
22 trunkShow trunkShow Displays trunking information. SYNOPSIS DESCRIPTION trunkshow [-perf] Use this command to display trunking information of both E_Ports and EX_Ports. The command displays the following fields: Trunking Group Number Displays each trunking group on a switch. All ports that are part of this trunking group are displayed. Port to port connections Displays the port-to-port trunking connections. WWN Displays the world wide name of the connected port.
PAGE 1063
trunkShow NOTES OPERANDS 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command has the following operand: -perf Displays the total bandwidth, throughput, and percentage of link utilization information for the trunk group (Rx, Tx, and combined total for Tx+Rx). This operand is optional.
PAGE 1064
22 trunkShow 52 4 4 013400 id N4 Online EX-Port \ (Trunk port, master is Slot 4 Port 1 ) 53 4 5 013500 id N4 Online EX-Port \ (Trunk port, master is Slot 4 Port 1 ) 54 4 6 013600 id N4 Online EX-Port \ (Trunk port, master is Slot 4 Port 1 ) 55 4 7 013700 id N4 Online EX-Port \ (Trunk port, master is Slot 4 Port 1 ) 64 7 0 014000 id N4 Online E-Port \ (Trunk port, master is Slot 7 Port 7 ) 65 7 1 014100 id N4 Online E-Port \ (Trunk port, master is Slot 7 Port 7 ) 66 7 2 014200 id N4 Online E-Port \ (Trunk
PAGE 1065
tsClockServer 2 tsClockServer Displays or sets the Network Time Protocol (NTP) Server addresses. SYNOPSIS DESCRIPTION tsclockserver [ipaddr [; ipaddr ...]] Use this command to synchronize the local time of the Principal or Primary FCS switch to one or more external NTP servers. This command accepts a list of NTP server addresses. The NTP server addresses can be passed in either IPV4 or IPV6 address format or as a DNS server name.
PAGE 1066
22 tsClockServer To set the NTP server to a specified IP address: switch:admin> tsclockserver 123.123.123.123 Updating Clock Server configuration...done. switch:admin> tsclockserver 123.123.123.123 To configure multiple NTP servers: switch:admin> tsclockserver "12.134.125.24; 12.234.87.01" Updating Clock Server configuration...done.
PAGE 1067
tsTimeZone 2 tsTimeZone Displays or sets the system time zone. SYNOPSIS tstimezone --interactive tstimezone timezonename tstimezone --old hourOffset[,minuteOffset] DESCRIPTION Use this command to display or set the system time zone. All switches maintain the current time zone setup in nonvolatile memory. Changing the time zone on a switch updates the local time zone setup and is reflected in local time calculations. All switches are by default in the 0,0 time zone:, which is, GMT.
PAGE 1068
22 tsTimeZone minuteOffset Specifies the number of minutes relative to hour offset. This operand must be specified as an integer and is valid only with the --old option. Valid values are -30, 0, or 30. This operand is optional; if not specified, the value defaults to 0. timezonename Specifies the name of a time zone from the time zone database. Use tstimezone --interactive for a listing of valid time zone name. --interactive Interactively sets the timezone in name format.
PAGE 1069
tsTimeZone 2 16) Dominica 33) Nicaragua 17) Dominican Republic 34) Panama Enter number or control-D to quit ?45 Please select one of the following time zone regions.
PAGE 1070
22 turboRamTest turboRamTest Performs a turbo SRAM test of ASIC chips. SYNOPSIS turboramtest [--slot slot] [-passcnt count] ceeturboramtest [--slot slot] [-passcnt count] DESCRIPTION Use this command to verify the chip SRAM located in the ASIC using the turbo-RAM BIST circuitry. The BIST controller is able to perform the SRAM write and read operation at a much faster rate than the PCI operation. The turboRamTest and ceeTurboRamTest commands are platform-specific versions of the same test.
PAGE 1071
upTime 2 upTime Displays length of time the system has been operational. SYNOPSIS DESCRIPTION uptime This command displays the current time, how long the system has been running, how many users are currently logged on, and the system load averages for the past 1, 5, and 15 minutes. If the uptime is less than 60 seconds, the time is displayed in seconds. For times greater than or equal to 60 seconds, the time is displayed in minutes. The output format adjusts accordingly.
PAGE 1072
22 uRouteConfig uRouteConfig Configures a static route. SYNOPSIS DESCRIPTION urouteconfig in_area domain out_area Use this command to configure static routes. A static route is assigned to a specific path (defined by port number out_area) and does not change when a topology change occurs unless the path used by the route becomes unavailable.
PAGE 1073
uRouteRemove 2 uRouteRemove Removes a static route. SYNOPSIS DESCRIPTION urouteremove in_area domain Use this command to remove a previously configured static route. After this command is issued, the route to domain for in_area might change to use a different output port, but only if Dynamic Load Sharing (DLS) is set. If DLS is not set, the route remains as is, with its route attribute changed from static to dynamic.
PAGE 1074
22 uRouteShow uRouteShow Displays unicast routing information. SYNOPSIS DESCRIPTION urouteshow [slot/][port] [domain] Use this command to display the unicast routing information for a port, as it is known by the FSPF path selection and routing task. The routing information describes how a frame that is received from a port on the local switch is to be routed to reach a destination switch. The following information displays: Local Domain ID Domain number of local switch.
PAGE 1075
uRouteShow NOTES OPERANDS 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command has the following operands: slot For bladed systems only, specify the slot number of the input port whose routes are displayed, followed by a slash (/).
PAGE 1076
22 usbStorage usbStorage Manages data files on an attached USB storage device. SYNOPSIS usbstorage [-e | --enable] usbstorage [-d | --disable] usbstorage [-l | --list] usbstorage [-r | --remove area target] usbstorage [-h | --help] DESCRIPTION NOTES Use this command to control a USB device attached to the Active CP.
PAGE 1077
usbStorage 2 To list the contents of the attached USB device: switch:admin> usbstorage -l firmwarekey\ 0B 2010 Aug support\ 106MB 2010 Aug support1034\ 105MB 2010 Aug config\ 0B 2010 Aug firmware\ 380MB 2010 Aug FW_v6.4.0\ 380MB 2010 Aug Available space on usbstorage 15 15:13 24 05:36 23 06:11 15 15:13 15 15:13 15 15:13 74% To remove a firmware target from the firmware application area: switch:admin> usbstorage -r firmware FW_v6.0.
PAGE 1078
22 userConfig userConfig Manages user accounts.
PAGE 1079
userConfig 2 Use the distribute command to distribute the account database manually to other switches in the fabric. Target switches must be configured to accept the database. Accounts that are not consistent with the distributed database are overwritten. Account recovery from backup or access to backup data is not supported.. This command supports the following roles. These roles define access permissions for Fabric OS Commands.
PAGE 1080
22 userConfig --showad Displays Admin Domain permissions in an AD-enabled environment. The following operand is required: -a AD_ID_list For each AD in AD_ID_list, displays a list of users that include that AD in their AD permissions. Specify a range (1-5) or a list of AD_IDs separated by a comma (1,2,3), or a combination of both (1-5,7). Only users with SecurityAdmin or Admin role may execute this command. --showlf Displays Logical Fabric permissions in an LF-enabled environment.
PAGE 1081
userConfig 2 -r role In an AD-enabled environment, this operand specifies the role for the account. In an LF-enabled environment, this operand specifies the account's role for all LFs provided with the LF list. When you create a user account in an LF-enabled environment, you can specify only one role for the user. This role is associated with each of the LF IDs in the specified LF_ID_list.
PAGE 1082
22 userConfig The following optional operands are available only with the --change option: -e yes | no Enables or disables an account. Specify "yes" to enable or "no" to disable an account. Once an account is disabled, the CLI sessions associated with the account are terminated. -u Unlocks the specified user account. User accounts can get locked after several attempts to log in with an invalid password. Refer to the passwdCfg help page for more information.
PAGE 1083
userConfig 2 -l LF_ID_list Specifies the logical fabric IDs to be added or deleted. Specify a range (1-5) or a list of AD_IDs separated by comma (1,2,3), or a combination of both (1-5,7). -r role Specifies the role associated with the LFID list given in this command. This operand is required when you specify an LF_ID_list. -c [chassis_role] Specifies the account's access permissions regarding chassis-level commands. To remove an account's chassis permissions, specify -c only.
PAGE 1084
22 userConfig To disable the account "joe": switch:admin> userconfig --change joe -e no Broadcast message from root Sat Apr 2 03:03:32 2005... Security Policy, Password or Account Attribute \ Change: joe will be logged out Attribute for account joe has been successfully changed.
PAGE 1085
userConfig 2 To change the test account's access permissions for the Logical l Fabrics 5 and 6 to ZoneAdmin and the chassis permission to user: switch:admin> userconfig --change test -r zoneadmin \ -l 1-5 -c user -h 4 Broadcast message from root (ttyS0) Sat Jun 14 01:05:28 2008...
PAGE 1086
22 version version Displays firmware version information. SYNOPSIS DESCRIPTION version Use this command to display firmware version information and build dates. The command output includes the following: Kernel The version of switch kernel operating system. Fabric OS The version of switch Fabric OS. Made on The build date of firmware running in switch. Flash The build date of firmware stored in flash proms.
PAGE 1087
wwn 2 wwn Displays the world wide name (WWN) and factory serial number of the switch or chassis. SYNOPSIS DESCRIPTION wwn [-sn] Use this command to display the WWN associated with a switch or chassis and to display the factory serial number. The WWN is a 64-bit number that has eight colon-separated fields each consisting of one or two hexadecimal digits between 0 and ff. The WWN is a factory-set parameter that cannot be changed by the end user.
PAGE 1088
22 wwn To display the WWN on a Brocade 5100: switch:admin> wwn 10:00:00:05:1e:7a:7a:00 To display the WWN and factory serial number: switch:admin> wwn -sn WWN: 10:00:00:05:1e:82:3c:2a SN: ALM0602E003 switch:admin> chassisshow | grep ALM0602E003 Factory Serial Num: ALM0602E003 SEE ALSO 1062 chassisShow, fabricShow, licenseIdShow, switchShow Fabric OS Command Reference 53-1001764-01
PAGE 1089
wwnAddress 2 wwnAddress Binds an FC Port ID to a device WWN. SYNOPSIS wwnaddress --bind [WWN] [PID] wwnaddress --unbind [WWN] wwnaddress --show wwnaddress --findPID [WWN] wwnaddress --help DESCRIPTION Use this command to manage address assignments for a given device world wide name. The allocation of a PID to a specified device WWN supports the persistence of the PID based on the WWN of the device to which the PID is bound.
PAGE 1090
22 wwnAddress --show Displays all WWN-PID entries currently present in the partition. --findPID Displays the PID currently bound to the specified device WWN. WWN Specifies the device WWN. --help Displays the command usage.
PAGE 1091
zone 2 zone Performs specific zone operations, manages Traffic Isolation (TI) Zones, and Frame Redirect (RD) Zones.
PAGE 1092
22 zone Use the --showTIerrors option to generate a report of potential routing problems in the local Domain. If the command detects errors, it outputs the ID of the current domain, and for each record, it displays the following information: Error Type Error or Warning. Affected Remote Domain Domain where the traffic drop is likely to be happening. Affected Local Port Device port shared by the TI zones. Affected TI Zones Lists the names of the TI zones implicated in the problem.
PAGE 1093
zone 2 1. Commands for performing specific zone operations --copy Copies a specified zone object or all zone objects from the source_AD into the current AD. The current AD transaction buffer is used for this operation. The following operands are optional: source_AD Specifies the source Admin Domain of the zone objects. If unspecified, objects are copied within the current AD. source_zone_object Specifies the zone object under the source_AD.
PAGE 1094
22 zone 2 Uses the currently enforced zone database. "zone_object" Specifies a zone object. A zone object can be a zone member, a zone alias, or a zone. 2. Creating and managing TI Zones Use these commands to create and manage TI Zones. --create Creates a TI Zone with specified options and port list. --add Adds port list members and the failover option to existing TI zones. --remove Removes port list members from existing zones. Removal of the last member from an active TI zone generates a warning.
PAGE 1095
zone 2 -p portlist Specifies the lists of ports to be included, added or removed from a TI zone. The syntax for portlist is "D,I" (Domain, Index). The port list must be enclosed in double quotation marks. List members must be separated by semicolons, followed by a space. When you create TI zones over FCR, for a TI within an Edge fabric use "-1"in "I" (of "D,I") in to denote Front and Translate phantom in the E_Port list.
PAGE 1096
22 zone FCR | noFCR Indicates whether or not this RD zone should function across a Fibre Channel router (FCR). Specify FCR to support FCR. Specify noFCR if you do not wish to support FCR. --rddelete name Deletes the RD Zone specified by name. RD Zones are unique in that the zone name is not user-defined. It is derived based on members and the specified configuration. Use cdfgShow to display currently implemented RD zone by name. EXAMPLES 1.
PAGE 1097
zone 2 To delete all references associated with zone member 100,5: switch:admin> zone --expunge"100,5" You are about to expunge one configuration or member. This action could result in removing many zoning configurations recursively. [Removing the last member of a configuration removes the configuration.
PAGE 1098
22 zone To prune all the zone members that are not enforceable: switch:admin> zone --validate -f You are about to prune the zone configurations, based on zone --validate output. Do you want to prune the zone configurations (yes, y, no, n): [no] y 2. Traffic isolation zone commands To create an activated traffic isolation zone with failover enabled (default). switch:admin> zone --create -t ti purplezone -p "1,1; 2,4; 1,8; 2,6" \ To create a deactivated traffic isolation zone with failover disabled:.
PAGE 1099
zone 2 TI Zone Name: ti_red Port List: 4,4; 5,5; 3,3 Configured Status: Activated / Failover-Enabled Enabled Status: Activated / Failover-Enabled To display all TI zones in the defined configuration in ascending order: switch:admin> zone --show -ascending Defined TI zone configuration: TI Zone Name: ti_blue Port List: 10:00:00:00:00:01:00:01; \ 10:00:00:00:00:01:00:04; 3,9; 4,55 Configured Status: Activated / Failover-Disabled Enabled Status: Deactivated TI Zone Name: Port List: ti_red 3,3; 4,4; 5,5 Co
PAGE 1100
22 zone To troubleshoot TI zone problems: switch:admin> zone --showTIerrors My Domain: 1 Error type: ERROR Affected Remote Domain: 2 Affected Local Port: 3 Affected TI Zones: ti1, ti2 Affected Remote Ports: 6, 7, 8, 9 3.
PAGE 1101
zoneAdd 2 zoneAdd Adds a member to the zone. SYNOPSIS DESCRIPTION zoneadd "zoneName", "member[; member]" Use this command to add one or more members to an existing zone. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command. For the change to become effective, enable the configuration with the cfgEnable command.
PAGE 1102
22 zoneCreate zoneCreate Creates a zone. SYNOPSIS DESCRIPTION zonecreate "zonename", "member[; member...]" Use this command to create a new zone, or to create a "broadcast" zone. A broadcast zone is a special zone that specifies the nodes that can receive broadcast traffic. This zone must be named "broadcast". Only one "broadcast" zone can exist within a fabric. This type of zone is enforced by the hardware; the switch controls the data transfer to a port.
PAGE 1103
zoneCreate 2 When creating a zone, you can combine different ways of specifying zone members. For example, a zone defined with the following members: "2,12; 2,14; 10:00:00:60:69:00:00:8a" contains all devices connected to switch 2, ports 12 and 14, and to the device with the world wide name "10:00:00:60:69:00:00:8a" (either node name or port name), at the port in the fabric to which it is connected.
PAGE 1104
22 zoneDelete zoneDelete Deletes a zone. SYNOPSIS DESCRIPTION zonedelete "zonename" Use this command to delete a zone. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory using the cfgSave command. For the change to become effective, enable the configuration with the cfgEnable command. NOTES The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
PAGE 1105
zoneHelp 2 zoneHelp Displays a description of zoning commands. SYNOPSIS DESCRIPTION NOTES zonehelp Use this command to display short descriptions of zoning commands. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to Chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
PAGE 1106
22 zoneObjectCopy zoneObjectCopy Copies a zone object. SYNOPSIS DESCRIPTION zoneObjectCopy "objectName", "newName" Use this command to make a copy of an existing zone object and give it a new name. The resulting object is of the same type as the original object. You can use this command for all zone object types, including cfg, zone, and alias. This command changes the defined configuration.
PAGE 1107
zoneObjectExpunge 2 zoneObjectExpunge Expunges a zone object. SYNOPSIS DESCRIPTION zoneObjectExpunge "objectName" Use this command to expunge a zone object. In addition to deleting the object, this command also removes the object from the member lists of all other objects. After successful execution of this command, the specified object no longer exists the database. You can use this command for all zone object types, including cfg, zone, and alias. This command changes the defined configuration.
PAGE 1108
22 zoneObjectExpunge alias: array2 alias: loop1 SEE ALSO 1082 21:00:00:20:37:0c:71:02 21:00:00:20:37:0c:76:22; \ 21:00:00:20:37:0c:76:28 21:00:00:20:37:0c:76:85; \ 21:00:00:20:37:0c:71:df cfgAdd, cfgClear, cfgDelete, cfgDisable, cfgEnable, cfgRemove, cfgSave, cfgShow, zoneObjectCopy, zoneObjectRename Fabric OS Command Reference 53-1001764-01
PAGE 1109
zoneObjectRename 2 zoneObjectRename Renames a zone object. SYNOPSIS DESCRIPTION zoneObjectRename "objectName", "newName" Use this command to rename a zone object. You can use this command for all zone object types, including cfg, zone, and alias. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
PAGE 1110
22 zoneRemove zoneRemove Removes a member from a zone. SYNOPSIS DESCRIPTION zoneremove "zonename", "zoneMemberList" Use this command to remove one or more members from an existing zone. If all members are removed, the zone is deleted. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command. For the change to become effective, enable the configuration with the cfgEnable command.
PAGE 1111
zoneShow 2 zoneShow Displays zone information. SYNOPSIS zoneshow [--sort] [pattern][, mode] zoneshow --help DESCRIPTION NOTES Use this command to display zone configuration information. This command includes sorting and search options to customize the output. If a pattern is specified, the command displays only matching match zone configuration names in the defined configuration.
PAGE 1112
22 zoneShow To sort the zones in ascending order: switch:admin> zoneShow --sort Defined configuration: cfg: cfg1 red zone: blue 10:00:00:00:00:01:00:00; 3,4; 44,5 zone: red 1,2; 2,3; 3,4; 4,5 Effective configuration: cfg: cfg1 zone: red 1,2 2,3 3,4 4,5 To display the red zone only using pattern search: switch:admin> zoneshow red zone: red 3,4; 1,2; 4,5; 2,3 To combine a pattern search with the sorting option: switch:admin> zoneshow --sort red zone: red 1,2; 2,3; 3,4; 4,5 To display the filtered content
PAGE 1113
Chapter 3 Primary FCS Commands In this chapter • Primary FCS commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1087 Primary FCS commands Table 6 summarizes the commands that are available only on the primary Fabric Configuration Server (FCS) when FCS policy is enabled. TABLE 6 Primary FCS commands Command Description aliAdd Must be run from the primary FCS switch. aliCreate Must be run from the primary FCS switch.
PAGE 1114
3 Primary FCS commands TABLE 6 1088 Primary FCS commands (Continued) Command Description msTdDisable msTdDisable “ALL” must be run from the primary FCS switch. msTdEnable msTdEnable “ALL” must be run from the primary FCS switch. secPolicyAbort Must be run from the primary FCS switch. secPolicyActivate Must be run from the primary FCS switch. secPolicyAdd Must be run from the primary FCS switch. secPolicyCreate Must be run from the primary FCS switch.
PAGE 1115
Appendix A Command Availability In this appendix • • • Command validation checks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1089 Encryption commands and permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1090 General Fabric OS commands and permissions . . . . . . . . . . . . . . . . . . . . . 1093 Command validation checks Before a command is executed, it is validated against the following checks. 1.
PAGE 1116
A Encryption commands and permissions Virtual Fabric commands are further constrained by one of the following switch types: 5. All Switches (All) = Command can be run in any switch context. Base Switch (BS) = Command can be run only on the base switch. Default Switch (DS) = Command can be run only on the default switch. N/A = Switch type is not applicable to the command. Chassis context (CH) = Command applies to the chassis on which it is executed.
PAGE 1117
A Encryption commands and permissions TABLE 7 Encryption command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper SW Zone Fabric BS Sec Admin Admin Admin Admin Admin Admin Domain Context Switch type addLUN N OM N N N OM N O Disallowed VF DS addmembernode N OM N N N O N OM Disallowed VF DS clearstats N OM N N N OM N O Disallowed VF DS commit N OM N N N OM N O Disallowed VF DS createcontainer N OM N N N OM N O D
PAGE 1118
A Encryption commands and permissions TABLE 7 Encryption command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper SW Zone Fabric BS Sec Admin Admin Admin Admin Admin Admin Domain Context Switch type leave_encryption_group N OM N N N O N OM Disallowed VF DS manual_rekey N OM N N N OM N O Disallowed VF DS modify N OM N N N OM N O Disallowed VF DS move N OM N N N OM N O Disallowed VF DS rebalance N OM N N N O N OM
PAGE 1119
A General Fabric OS commands and permissions General Fabric OS commands and permissions Refer to Table 8 for Fabric OS commands. NOTE For some commands, permissions per operands may be different from general access permissions. Use the classConfig --showcli command to display permission details for a specified command.
PAGE 1120
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type bpTurboRamTest O OM OM OM N OM O N SwitchMember CH N/A bufOpMode O OM OM OM O OM OM O SwitchMember VF All ceePortLedTest O OM OM OM N OM O N SwitchMember CH N/A ceePortLoopbackTest O OM OM OM N OM O N SwitchMember CH N
PAGE 1121
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type configureChassis N OM O O O O O OM SwitchMember CH N/A dataTypeShow O OM OM OM N OM O N SwitchMember CH N/A date O OM OM OM O OM O OM Allowed/ SwitchMember CH N/A dbgShow O OM OM OM N OM O N SwitchMember CH N/A defZon
PAGE 1122
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type faPwwn 0 OM OM OM O OM OM 0 PortMember VF All fastBoot O OM OM OM O OM O O SwitchMember CH N/A fcipChipTest O OM OM OM N OM O N SwitchMember CH N/A fcipHelp O O O O O O O O Allowed Disallowed N/A fcipLedTest O OM O
PAGE 1123
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type ficonClear O OM OM OM N OM O N SwitchMember VF All ficonCupSet O OM OM OM N OM O N SwitchMember VF All ficonCupShow O OM OM OM N OM O N SwitchMember VF All ficonHelp O O O O O O O O Allowed Disallowed N/A ficonShow O
PAGE 1124
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type haSyncStart O OM O OM N OM O O SwitchMember CH N/A haSyncStop O OM O OM N OM O O SwitchMember CH N/A help O O O O O O O O Allowed Disallowed N/A historyLastShow O OM OM OM N OM O N Allowed CH N/A historyMode O OM O
PAGE 1125
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type memShow O O O O O O O O Allowed CH N/A motd OM OM OM OM O OM OM O Allowed CH N/A msCapabilityShow O OM OM OM O OM O N Allowed VF All msConfigure O OM OM OM O OM O N SwitchMember VF All msPlatShow O OM OM OM O OM
PAGE 1126
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type perfSetPortEEMask O OM O OM N OM O N SwitchMember VF All perfShowAlpaCrc O OM O OM N OM O N PortMember VF All perfShowPortEEMask O OM O OM N OM O N PortMember VF All perfTTmon O OM O OM N OM O N SwitchMember VF All po
PAGE 1127
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type portCfgPersistentEnable O OM OM OM O OM OM O Allowed/ PortMember VF All portCfgQos O OM OM OM O OM OM O PortMember VF All portCfgShow O OM OM OM O OM OM O PortMember VF All portCfgSpeed O OM OM OM O OM OM O PortMember V
PAGE 1128
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type portRouteShow O OM OM OM O OM O N PortMember VF All portShow O OM OM OM O OM OM O PortMember VF All portStats64Show O OM OM OM N OM O N PortMember VF All portStatsClear O OM OM OM N OM O N SwitchMember VF All portStat
PAGE 1129
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type secPolicyShow O OM N O N OM O OM Allowed/ AD0/Disallowed VF All secStatsReset O OM N O N OM O OM AD0/Disallowed VF All secStatsShow O OM N O N OM O OM AD0/Disallowed VF All sensorShow O OM OM OM N OM O N Allowed CH N/A
PAGE 1130
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type switchName O OM OM OM O OM O OM Allowed/ SwitchMember VF All switchShow O OM OM OM O OM O O Allowed/ Disallowed VF All switchStatusPolicySet O OM OM OM N OM O N SwitchMember VF All switchStatusPolicyShow O OM OM OM N OM O
PAGE 1131
A General Fabric OS commands and permissions TABLE 8 Fabric OS command RBAC availability and Admin Domain type (Continued) Command name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch type userConfig (for all other options) N OM N N N N N OM SwitchMember CH/VF All/NA version O O O O O O O O Allowed VF N/A wwn O O O O O O O O Allowed/ SwitchMember CH and VF VF All wwnAddress O OM OM OM O OM O OM Allowed VF
PAGE 1132
A 1106 General Fabric OS commands and permissions Fabric OS Command Reference 53-1002447-01