53-1001186-01 24 November 2008 Fabric OS Command Reference Manual Supporting Fabric OS v6.2.
Copyright © 2007-2008 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, Fabric OS, File Lifecycle Manager, MyView, and StorageX are registered trademarks and the Brocade B-wing symbol, DCX, and SAN Health are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. All other brands, products, or service names are or may be trademarks or service marks of, and are used to identify, products or services of their respective owners.
Brocade Communications Systems, Incorporated Corporate Headquarters Brocade Communications Systems, Inc. 1745 Technology Drive San Jose, CA 95110 Tel: 1-408-333-8000 Fax: 1-408-333-8101 Email: info@brocade.com Asia-Pacific Headquarters Brocade Communications Singapore Pte. Ltd. 30 Cecil Street #19-01 Prudential Tower Singapore 049712 Singapore Tel: +65-6538-4700 Fax: +65-6538-0302 Email: apac-info@brocade.
Document Title Publication Number Fabric OS Command Reference 53-1000436-01 Fabric OS Command Reference 53-1000599-01 October 2007 Added 13 new commands, Updated 23 commands with new options in support of v6.0. Removed 46 obsolete commands. Edit/revise ~ 150 commands. Added command syntax conventions to Preface.Updated FCS, standby CP, and RBAC tables. Added AD Type to RBAC table (Appendix A). Removed licensed command tables and SupportShow reference. Cosmetic edits throughout.
Contents About This Document In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . xix What is new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xx Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
bannerSet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 bannerShow. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 bcastShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 bladeDisable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 bladeEnable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
configShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 configUpload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101 configure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105 configureChassis. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113 cryptoCfg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
fabSwitchShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .205 fanDisable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .206 fanEnable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .207 fanShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .208 fastboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ficonCupShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .267 ficonHelp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .269 ficonShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .270 fipsCfg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276 firmwareCommit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
historyLastShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .338 historyMode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .339 historyShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .340 httpCfgShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .342 i. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
licenseShow. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .428 linkCost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429 login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431 logout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .432 lsanZoneShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
perfAddUserMonitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .500 perfAddWriteMonitor. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .502 perfCfgClear. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503 perfCfgRestore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .504 perfCfgSave . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
portCfgPersistentDisable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 574 portCfgPersistentEnable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .575 PortCfgQos. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 576 portCfgShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .578 portCfgSpeed. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
portStatsShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .653 portSwap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .657 portSwapDisable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .658 portSwapEnable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .659 portSwapShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .660 portTest . .
sfpShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 718 shellFlowControlDisable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .722 shellFlowControlEnable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .723 slotPowerOff . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .724 slotPowerOn. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .725 slotShow . .
systemVerification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .787 tempShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .789 timeOut . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .790 topologyShow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .791 traceDump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Appendix A Appendix A: Command availability In this appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .849 Command validation checks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .849 Encryption commands and permissions . . . . . . . . . . . . . . . . . . . . .850 General Fabric OS commands and permissions. . . . . . . . . . . . . . .
xviii Fabric OS Command Reference 53-1001186-01
About This Document In this chapter • How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix • Supported hardware and software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix • What is new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xx • Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxii • Notice to the reader . . . . . . . . . . . . . .
• • • • • • • • • • • • • • • Brocade 4024 Brocade 4100 Brocade 4900 Brocade 5000 Brocade 5100 Brocade 5300 Brocade 5410 Brocade 5480 Brocade 7500 Brocade 7600 Brocade 48000 Brocade DCX Backbone Brocade DCX-4S Backbone Brocade Encryption Switch Blades: FA4-18, FC4-16, FC4-16IP, FC4-32, FC4-48, FC10-6, FR4-18i, FC8-16, FC8-32, FC8-48, FS8-18 Although many different software and hardware configurations are tested and supported by Brocade Communications Systems, Inc. for Fabric OS v6.2.
• portCfgFportBuffers • setContext The following commands have been modified to support new command options: • • • • • ad --clear - New -f option to remove all Admin Domains before enabling Virtual Fabrics. auditCfg - New operand to set severity for audit messages. authUtil - Support for device authentication policy “on” mode. configDefault - New -all and -fid operands to support Logical Fabrics. configDownload - New -all -chassis, -fid, and -template operands to support Logical Fabrics.
• portShow - New operands to support FCIP inband management, interface IP address and route configuration display, byte streaming, and TCP connection history and snapshot display. • secPolicyDelete - New option to delete all stale security policies. • supportShowcfgDisable, supportShowcfgEnable, supportShowcfgShow - New crypto operand to set encryption command group. • userConfig - New operands to support Logical Fabric user permissions.
code text Identifies CLI output Identifies syntax examples For readability, command names in the narrative portions of this guide are presented in mixed letter case, for example, switchShow. In examples, command letter case is all lowercase. If there are exceptions, this manual specifically notes those cases in which a command is case-sensitive. Command syntax conventions Command syntax in the synopsis section follows these conventions: command Commands are printed in bold.
CAUTION A Caution statement alerts you to situations that can cause damage to hardware, firmware, software, or data. DANGER A Danger statement indicates conditions or situations that can be potentially lethal or extremely hazardous to you. Safety labels are also attached directly to products to warn of these conditions or situations. Key terms For definitions specific to Brocade and Fibre Channel, see the Brocade Glossary.
Additional information This section lists additional Brocade and industry-specific documentation that you may find helpful. Brocade resources The following related documentation is provided on the Brocade Documentation CD-ROM and on the Brocade Web site, through Brocade Connect. To get up-to-the-minute information, join Brocade Connect. It is free! Go to http://www.brocade.com and click Brocade Connect to register at no cost for a user ID and password.
• • • • • • • Error numbers and messages received supportSave command output Detailed description of the problem, including the switch or fabric behavior immediately following the problem, and specific questions Description of any troubleshooting steps already performed and the results Serial console and Telnet session logs syslog message logs 2.
Document feedback Quality is our first concern at Brocade, and we have made every effort to ensure the accuracy and completeness of this document. However, if you find an error or an omission, or you think that a topic needs further development, we want to hear from you. Forward your feedback to: documentation@brocade.com Provide the title and version number and as much detail as possible about your issue, including the topic heading and page number and your suggestions for improvement.
xxviii Fabric OS Command Reference 53-1001186-01
DRAFT: BROCADE CONFIDENTIAL Chapter 1 Using Fabric OS Commands In this chapter • Understanding role-based access control . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Understanding Virtual Fabric restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Understanding Admin Domain restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . • Using the command line interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
DRAFT: BROCADE CONFIDENTIAL 1 Understanding Virtual Fabric restrictions Appendix A, “Appendix A: Command availability” explains the Role-Based Access Control checks in place to validate command execution, and provides the RBAC permissions for the commands included in this manual. Additional command restrictions apply depending on whether Virtual Fabrics or Admin Domains are enabled in a fabric.
DRAFT: BROCADE CONFIDENTIAL Understanding Admin Domain restrictions 1 • Accounts with user or admin permissions can be granted chassis permissions. A user account with the chassis role can execute chassis-level commands at the user RBAC access level. An admin account with the chassis role can execute chassis-level commands at the admin RBAC access level. Refer to Appendix A, “Appendix A: Command availability” for context and switch type information as it applies to CLI commands.
DRAFT: BROCADE CONFIDENTIAL 1 Using the command line interface • Access to the full range of Fabric OS features, given the license keys installed. • Assistance with configuration, monitoring, dynamic provisioning, and daily management of every aspect of storage area networks (SAN). • A deeper view of the tasks involved in managing a Brocade SAN. • Identification, isolation, and management of SAN events across every switch in the fabric. • Management of Brocade licenses.
Chapter Fabric OS Commands 2 aaaConfig Manages RADIUS and LDAP configuration information.
2 aaaConfig Notes Customers can use centralized RADIUS servers to manage AAA services for a switch, as defined in the RFC 2865 RADIUS specification. Fabric OS v6.1.0 or later is required to configure LDAP while in FIPS mode. Refer to the Fabric OS Administrator’s Guide for configuration procedures. This command can be executed when logged in through the console, Telnet or SSH connection. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
aaaConfig 2 -s secret Specifies a common secret between the switch and the RADIUS server. The secret must be between 8 and 40 characters long. This option is valid only with the -conf radius option, and it is optional. The default value is sharedsecret. -a Specifies the remote authentication protocol for the RADIUS server. This operand is valid only with the -conf radius option, and it is optional. The default value for this operand is CHAP.
2 aaaConfig “radius” When “radius” is specified, the first RADIUS server is contacted. If the RADIUS server is not reachable, the next RADIUS server is contacted. If the authentication fails, the authentication process does not check for the next server in the sequence. “ldap” When “ldap” is specified, the first Active directory (AD) server is contacted. If the AD server is not reachable, the next AD server is contacted.
aaaConfig 2 To replace the AAA service with backup option: switch:admin> aaaconfig --authspec “ldap;local” -backup See Also none Fabric OS Command Reference 53-1001186-01 9
2 ad ad Manages Admin Domain operations.
ad 2 All switches, switch ports and devices in the fabric that are not specified in any other Admin Domain are treated as implicit members of AD0. Members added to AD0 are called explicit members. When a new Admin Domain is created, the members included in the new Admin Domain are automatically removed from the implicit member list of AD0.
2 ad --create arguments Creates a new Admin Domain with optionally specified device or switch members. A newly created Admin Domain is in an activated state. It initially contains no zone database. The newly created Admin Domain remains in the transaction buffer until you issue ad --apply or ad --save. AD0 always exists. Use ad --add to add explicit members to AD0. --deactivate arg Deactivates an Admin Domain. This operation fails if an effective zone configuration exists under the Admin Domain.
ad --select arg 2 Selects an Admin Domain context. This command fails if the corresponding Admin Domain is not activated. This operation succeeds only if you have the specified Admin Domain. This command internally spawns off a new shell within the requested Admin Domain context. Type logout or exit to exit from the selected Admin Domain. The zone transaction is linked to the current shell; therefore, the zone transaction buffer is lost on logout.
2 ad number An Admin Domain can be specified by a number. Valid values include 0 through 255. AD0 and AD255 are always active. AD0 cannot be specified with --activate, --deactivate or --delete actions. AD255 can be specified only with --exec, --show and --validate actions. For all command iterations, with the exception of ad --create, the Admin Domain is specified either by a name or a number. For ad --create, both name and number can be specified: for example, ad --create test_ad/10 -d “100,5; 100,1”.
ad -m mode Examples 2 Specifies the mode in which Admin Domain configuration information is displayed. This operand is valid only with --show and --validate. Valid values for mode include: 0 Displays the Admin Domain configuration in the current transaction buffer. 1 Displays the Admin Domain configuration stored in persistent memory (defined configuration). 2 Displays the currently enforced Admin Domain configuration currently enforced (effective configuration).
2 ad To deactivate Admin Domain 5: switch:admin> ad --deactivate 5 You are about to deactivate an AD. This operation will fail if an effective zone configuration exists in the AD Do you want to deactivate ‘5’ admin domain (yes, y, no, n): [no] y To delete AD13: switch:admin> ad --delete 13 You are about to delete an AD.
ad 2 To display all ADs: switch:admin> ad --show Current AD: 255 : AD255 Transaction buffer configuration: --------------------------------no configuration Defined configuration: ---------------------AD: 1 : AD1 Active Device WWN members: Switch port members: Switch WWN members: Effective configuration: -----------------------AD: 1 : AD1 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12; 1,13; 1,14; 1,15; 10:00:00:60:69:00:02:53; Ac
2 ad To display the Admin Domain effective configuration information: switch:admin> ad --show -m 2 Current AD: 255 : AD255 Effective configuration: -----------------------AD: 1 : AD1 Active Device WWN members: 21:00:00:80:e5:12:8b:37; 21:00:00:80:e5:12:8b:55; 1,0; 1,1; 1,2; 1,3; 1,4; 1,5; 1,6; 1,7; 1,8; 1,9; 1,10; 1,11; 1,12; 1,13; 1,14; 1,15; 10:00:00:60:69:00:02:53; Switch port members: Switch WWN members: To display the configuration information in the transaction buffer: switch:admin> ad --vali
ad 2 1,118; 1,120; 1,121; 2,52; 2,53; 2,54; 2,55; 1,221; AD Number: 4 AD Name: roger_auto Device WWN members: AD Number: 5 AD Name: AD5 Device WWN members: Switch port members: AD Number: 50 AD Name: AD50 Device WWN members: Switch port members: AD Number: 55 AD Name: AD55 Device WWN members: State: Inactive 11:22:33:44:55:66:77:88*; State: Inactive 10:00:00:06:2b:12:69:ff*; 10:00:00:06:2b:12:68:3f; 1,343; State: Active 10:00:00:00:00:17:00:00; 10:00:00:00:00:15:00:00; 2,52; 2,53; 2,54; 2,5
2 ad To abort the Admin Domain management transaction buffer: switch:admin> ad --transabort You are about to abort the outstanding AD transaction. Do you want to abort the AD transaction (yes, y, no, n): [no] y To display the current Admin Domain transaction: switch:admin> ad --transshow Current transaction token is 26816 It is abortable switch:admin> ad --transshow There is no outstanding zoning transaction See Also 20 cfgSave, cfgTransShow, defZone, logout.
ag 2 ag Enables Access Gateway (AG) and manages AG-specific operations. Synopsis ag --help ag --show ag --modeshow | --modeenable |--modedisable ag [--policyenable | --policydisable] policy ag --policyshow ag --mapshow [N_Port] ag [--mapset | --mapadd |--mapdel] N_Port [F_Port1; F_Port2;...] ag --pgshow [pgid] ag --pgcreate- pgid “N_Port1 [;N_Port2;...]” [-n pgname] ag [--pgadd | --pgdel] pgid “N_Port1 [; N_Port2;...
2 ag AG configuration changes are saved persistently as config keys. Use the portCfgnPort command to set a port as N_Port. Notes AG is supported only on selected Brocade hardware platforms. Refer to the Access Gateway Administrator’s Guide for Hardware support and AG configuration procedures. In non-AG mode, the only two actions available are --modeenable and --modeshow. Operands The command takes as input an action and its associated arguments.
ag 2 auto Enables the automatic port configuration policy. When enabled, this policy applies to all ports on the switch. All F_Port to N_Port mapping and port group configurations are ignored. ads Enables the advanced device security (ADS) policy. When enabled, this policy applies to all the ports on the switch. By default all devices have access to the fabric on all ports. --policydisable policy Disables the specified policy for the Access Gateway.
2 ag --pgcreate- pgid “N_Port1 [; N_Port2;...]” [-n pgname] Creates a port group with the ID pgid and a specified list of N_Ports to be included in the policy. The list must be enclosed in quotation marks. Ports must be separated by semicolons. Maximum numbers of ports allowed in a port group is MAX_PORT. Port Group ID must not exceed 64 characters. --pgadd pgid “N_Port1 [; N_Port2;...]” Adds one or more N_Ports to the specified port group. The port list must be enclosed in quotation marks.
ag 2 --failbackenable N_Port Enables the failback policy for a specified N_Port. When failback policy is enabled, ports behave as follows: • If only primary F_Port to N_Port mapping is in place, all F_Ports are automatically rerouted back to the N_Ports to which they were originally mapped as those N_Ports come back online. Only the originally mapped F_Ports fail back. In the case of multiple N_Port failures, only F_Ports that were mapped to the recovered N_Port experience failback.
2 ag --adsadd "F_Port [;F_Port2;...]" "WWN [;WWN2;...]" Adds the specified WWNs to the list of devices allowed to login to the specified F_Ports. Lists must be enclosed in double quotation marks. List members must be separated by semicolons. Replace the F_Port list with an asterisk (*) to add the specified WWNs to all the F_Ports' allow lists. ADS policy must be enabled for this command to succeed. --adsdel "F_Port [;F_Port2;...]" "WWN [;WWN2;...
ag 2 11 0x6d0c01 10:00:00:06:2b:0a:a3:92 2 0 12 0x6d0d02 10:00:00:06:2b:0a:a3:91 3 1 13 0x6d0d01 10:00:00:06:2b:0a:a3:90 3 1 --------------------------------------------------------- 2. To display the current Access Gateway mode: switch:admin> ag --modeshow Access Gateway mode is enabled. switch:admin> ag --modeshow Access Gateway mode is NOT enabled. AG group policy commands 1.
2 ag 6. To enable ADS policy: switch:admin> ag--policyenable ads The policy ADS is enabled 7. To disable ADS policy: switch:admin> ag--policydisable ads The policy ADS is disabled AG port mapping commands 1.
ag 2 6.
2 ag 3. To display failback policy settings for all the N_Ports: switch:admin> ag --failbackshow N_Port failback_bit --------------------------0 0 1 1 2 0 3 1 4.
ag 2 4. To remove port group with pgid 2: switch:admin> ag --pgremove 2 Port Group 2 has been removed successfully switch:admin> ag --pgshow PG_ID N_Ports PG_Name ------------------------------------------0 0;2 pg0 3 1;3 FirstFabric ------------------------------------------- AG Preferred port information commands 1.
2 ag 4.
agshow 2 agshow Displays the Access Gateway information registered with the fabric. Synopsis Description agshow --name [ag_name] | [--local] This command displays the details of the F_Ports and the configured N_Ports in the Access Gateway attached to the fabric shows the following information. Name The name of the Access Gateway. Ports The number of ports in the Access Gateway. Enet IP Addr The IP address of the Access Gateway. Firmware Current firmware running on the Access Gateway.
2 agshow To display the locally registered Access Gateways: switch:admin> agshow --local Worldwide Name Ports Enet IP Addr Firmware Local/Remote Name --------------------------------------------------------------------------------10:00:00:05:1e:04:06:ae 24 10.32.173.64 v6.0.
aliAdd 2 aliAdd Adds a member to a zone alias. Synopsis Description aliadd “aliName”, “member[; member...]” Use this command to add one or more members to an existing zone alias. The alias member list cannot contain another zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the zone configuration to nonvolatile memory with cfgSave.
2 aliCreate aliCreate Creates a zone alias. Synopsis Description alicreate “aliName”, “member[; member...]” Use this command to create a new zone alias. The zone alias member list must have at least one member (empty lists are not allowed). The alias member list cannot contain another zone alias. Refer to the zoneCreate command for more information on name and member specifications. This command changes the defined configuration.
aliDelete 2 aliDelete Deletes a zone alias. Synopsis Description alidelete “aliName” Use this command to delete a zone alias. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the zone configuration to nonvolatile memory with the cfgSave command.
2 aliRemove aliRemove Removes a member from a zone alias. Synopsis Description aliremove “aliName”, “member[; member...]” Use this command to remove one or more members from an existing zone alias. If all members are removed, the zone alias is deleted. This command changes the defined configuration. For the change to become effective, enable the zone configuration with the cfgEnable command.
aliShow 2 aliShow Displays zone alias information. Synopsis Description alishow ["pattern"][, mode] Use this command to display zone configuration information. Use the pattern operand to display only matching zone alias names in the defined configuration. Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
2 aptPolicy aptPolicy Changes or displays the Advanced Performance Tuning (APT) policy. Synopsis aptpolicy [policy] aptpolicy -ap [ap_policy] Description Use this command to display and change the advanced performance tuning (APT) policies on a switch. Several internal performance tuning parameters can be modified with this command. The default parameters (AP shared Link Policy) are optimized for most SAN applications; in most environments, there is no need to modify the default policy.
aptPolicy 2 This policy optimizes the utilization of the available paths by allowing I/O traffic between different SID, DID, or OXID pairs to use different paths. All frames received on an ingress port with the same SID, DID, or OXID parameters take the same path unless there is a fabric event. Refer to dlsSet for the definition of a fabric event. This policy does not support static routes. DLS is always enabled and the DLS setting cannot change with this policy.
2 auditCfg auditCfg Modifies and displays the audit log filter configuration. Synopsis auditcfg --class audit_class auditcfg --enable |--disable auditcfg --severity severity_level auditcfg --show Description Note Operands Use this command to configure the audit logging and to display the audit log configuration.
auditCfg 2 switch:admin> auditcfg --show Audit filter is disabled.
2 auditDump auditDump Displays or clears the audit log. Synopsis auditdump -s | -show auditdump -c | -clear Description Use this command to display or clear the audit log on the switch. The audit log persistently saves the most recent 256 log entries on the switch. On modular platforms, the entries are not shared across CPs. To display or clear the logs, this command must be issued for each CP separately.
authUtil 2 authUtil Displays and sets the authentication configuration. Synopsis authutil authutil --show authutil --set option value authutil --policy -sw option | -dev option authutil --authinit [slotnumber]/portnumber[, [slotnumber/]portnumber...] | allE Description Use this command to display and set local switch authentication parameters. Use --set to change authentication parameters such as protocol, Diffie-Hellman group (DH group), or hash type.
2 authUtil and a higher level of security. When DH group is set to a specified value, only that DH group is enabled. Specifying “*” enables all DH groups 0, 1, 2, 3, and 4, in that order. This means that in authentication negotiation, the NULL DH group s given priority over all other groups. -h sha1 | md5 | all Sets the hash type. Valid values are “sha1”, “md5” or “all”, which sets both hash types. Use this option to disable md5 authentication access by setting the hash type to sha1 only.
authUtil 2 authinit [slotnumber/]portnumber [, [slotnumber]/portnumber...| allE Re-initiates authentication on selected ports after changing the DH-CHAP group, hash type, and shared secret between a pair of switches. This command does not work on Private, Loop, NPIV and FICON devices. The command can re-initiate authentication only if the device was previously authenticated. This command may bring down the E_Ports if the DH-CHAP shared secrets are not installed correctly.
2 authUtil To set the Device policy to passive mode: switch:admin> authutil --policy -dev passive Warning: Activating the authentication policy requires DH-CHAP secrets on both switch and device. Otherwise, the F-port will be disabled during next F-port bring-up.
bannerSet 2 bannerSet Sets the banner on the local switch. Synopsis Description bannerset [banner] Use this command to set the banner on the local switch. The banner is a string of alphanumeric characters. It is displayed whenever you log in to a switch. The banner can be created using the banner operand or by entering the bannerSet command without an operand, making the session interactive. If you enter the banner text using the interactive method, the valid length is 1022 characters.
2 bannerShow bannerShow Displays the banner text. Synopsis Description Note bannershow Use this command to display the contents of the banner. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
bcastShow 2 bcastShow Displays broadcast routing information. Synopsis Description bcastshow Use this command to display the broadcast routing information for all ports in the switch. The broadcast routing information indicates all ports that are members of the broadcast distribution tree: ports that are able to send and receive broadcast frames. Normally, all F_Ports and FL_Ports are members of the broadcast distribution tree.
2 bladeDisable bladeDisable Disables all user ports on a blade. Synopsis Description bladedisable slotnumber Use this command to disable all user ports on a blade. All ports on the blade are taken offline. If the switch was connected to a fabric through this blade, the remaining switches reconfigure, and this switch will reconfigure based on the other blade ports. As each port is disabled, the front panel LED changes to a slow flashing yellow.
bladeEnable 2 bladeEnable Enables all user ports on a blade. Synopsis Description bladeenable slotnumber Use this command to enable all user ports on a blade. All ports within the blade that did not fail the power-on self-test (POST) are enabled (except for persistently disabled ports). They may come online if connected to a device, or remain offline if disconnected. Use bladeEnable to re-enable the blade after making configuration changes or running offline diagnostics.
2 bladeEnable switch:admin> slotshow Slot Blade Type ID Status --------------------------------1 SW BLADE 2 ENABLED 2 UNKNOWN VACANT 3 UNKNOWN VACANT 4 SW BLADE 2 ENABLED 5 CP BLADE 1 ENABLED 6 CP BLADE 1 ENABLED 7 SW BLADE 2 ENABLED 8 UNKNOWN VACANT 9 UNKNOWN VACANT 10 UNKNOWN VACANT See Also 54 bladeDisable, chassisDisable, chassisEnable, portEnable, portDisable, switchDisable, switchShow Fabric OS Command Reference 53-1001186-01
bpPortLoopbackTest 2 bpPortLoopbackTest Performs a functional test of port N->N paths on the BP ports. Synopsis bpportloopbacktest [ -nframes count ] [ -pklen count ] [ -lb_mode mode ] [ -spd_mode mode ] [ -bpports itemlist ] Description Use this command to verify the functional operation of the switch. The test sends frames from a specified blade processor (BP) port transmitter and loops the frames back into the same BP port’s receiver.
2 bpPortLoopbackTest Operands This command has the following operands: -nframes count Specifies the number of frames to send. The test progresses until the specified number of frames has been transmitted on each port. The default value is 8. -pklen count Specifies the size of the packet to be sent. The default is 2112 bytes. The valid range is 100 to 2112 bytes. -lb_mode mode Specifies the loopback point for the test.
bpPortLoopbackTest Diagnostics See Also 2 When it detects failures, the test may report one or more of the following error messages. If errors persist, contact Technical Support. DATA Data received does not match the data sent. ERRSTAT Errors were found in the ASIC statistics. INIT Port failed to initialize. PORTDIED A previously initialized port went to an un-initialized state. STATS Errors were found in the ASIC statistics. TIMEOUT Did not receive a frame in the given timeout period.
2 bpTurboRamTest bpTurboRamTest bpTurboRamTest - MBIST test for AP Blade BP ASICs. Synopsis Description bpturboramtest [ -passcnt count ] [ -bpports itemlist ] Use this command to verify the on-chip static random access memory (SRAM) located in the Blade Processor (BP) ASICs of the Application Processor (AP) Blade. The command makes use of the memory built-in self-test (MBIST) circuitry. The test flow for each SRAM is as follows: 1. Fill RAM with alternating FFFF 0000 pattern.
burninErrClear 2 burninErrClear Clears errors stored in nonvolatile memory during burn-in. Synopsis Description burninerrclear slotnumber Use this command to clear errors that were stored during burn-in in the nonvolatile memory of a specified slot. It is advisable to run the burninErrClear command prior to running diagSetCycle. Note Operands The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 burninErrShow burninErrShow Displays errors stored in nonvolatile memory on a slot during burn-in. Synopsis Description Note Operands burninerrshow slotnumber Use this command to display errors generated during burn-in and stored in nonvolatile memory on a specified slot. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
burninLevel 2 burninLevel Sets the diagnostics burn-in level. Synopsis Description burninlevel [level | -show] Use this command to select or display the burn-in level. When you set the burn-in level to a value other than 0, this command behaves as follows: 1. The diagnostic daemon program performs burn-in testing in place of the power-on self-test (POST) phase II each time a switch blade is powered on. 2. The burn-in test stores errors on the local persistent error storage on which the error occurs.
2 burninStatus burninStatus Displays the diagnostics burn-in status. Synopsis Description Note Operands burninstatus [[--slot] slotnumber] Use this command to display the burn-in status of blade in a specified slot. Command output includes the slot number, state, current run number, current command in the run, total commands in a run, and the burn-in script name. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
cfgActvShow 2 cfgActvShow Displays effective zone configuration information. Synopsis Description cfgactvshow Use this command to display the effective zone configuration information. The current configuration is a single zone configuration that is currently in effect. The devices that an initiator sees are based on this configuration. The effective configuration is built when a specified zone configuration is enabled.
2 cfgAdd cfgAdd Adds a member to a zone configuration. Synopsis Description cfgadd "cfgName", "member[ ;member...]" Use this command to add one or more members to an existing zone configuration. This command changes the Defined Configuration. For the change to take effect, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
cfgClear 2 cfgClear Clears all zone configurations. Synopsis Description cfgclear Use this command to clear all zone information in the transaction buffer. All defined zone objects in the transaction buffer are deleted. If an attempt is made to commit the empty transaction buffer while a zone configuration is enabled, you are warned to first disable the enabled zone configuration or to provide a valid configuration with the same name.
2 cfgCreate cfgCreate Creates a zone configuration. Synopsis Description cfgcreate "cfgName", "member[ ;member...]" Use this command to create a new zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
cfgDelete 2 cfgDelete Deletes a zone configuration. Synopsis Description cfgdelete "cfgName" Use this command to delete a zone configuration. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
2 cfgDisable cfgDisable Disables a zone configuration. Synopsis Description cfgdisable Use this command to disable the current zone configuration. The fabric returns to non-zoning mode, in which all devices see each other. This command ends and commits the current zoning transaction buffer to both volatile and nonvolatile memory. If a transaction is open on a different switch in the fabric when this command is run, the transaction on the other switch is automatically aborted.
cfgEnable 2 cfgEnable Enables a zone configuration. Synopsis Description cfgenable cfgName Use this command to enable a zone configuration. The command builds the specified zone configuration . It checks for undefined zone names, zone alias names, or other inconsistencies, by expanding zone aliases, removing duplicate entries, and then installing the effective configuration.
2 cfgMcdtmode cfgMcdtmode Configures zoning features in McDATA Fabric mode. Synopsis cfgMcdtMode [--enable | --disable | --help] [safezoning | defaultzoning] Description Use this command to enable or disable either the McDATA safe zoning feature or the McDATA default zoning feature. Enabling or disabling safezoning or default zoning on one switch in the fabric enables or disables the specific feature fabric-wide, meaning that the feature is disabled or enabled on all switches in the fabric.
cfgRemove 2 cfgRemove Removes a member from a zone configuration. Synopsis Description cfgremove “cfgName”, “member[; member...]” Use this command to remove one or more members from an existing zone configuration. If all members are removed, the zone configuration is deleted. This command changes the Defined Configuration (see cfgShow). For the change to become effective, enable the configuration with the cfgEnable command.
2 cfgSave cfgSave Saves zone configuration to nonvolatile memory. Synopsis Description cfgsave Use this command to save the current zone configuration. This command writes the defined configuration and the name of the effective configuration to nonvolatile memory in all switches in the fabric. The saved configuration is automatically reloaded at power on, and, if a configuration was in effect at the time it was saved, the same configuration is reinstalled with an automatic cfgEnable command.
cfgSaveActiveToDefined 2 cfgSaveActiveToDefined Saves the active (effective) zoning configuration to the defined configuration in McDATA Fabric mode. Synopsis Description Notes cfgSaveActiveToDefined Use this command in McDATA Fabric mode to move the effective zoning configuration to the defined configuration database. If the Defined Database contains a configuration with the same name, it is replaced. Any non-duplicate zone sets or zones remain unchanged.
2 cfgShow cfgShow Displays zone configuration information. Synopsis Description cfgshow ["pattern"] [, mode] Use this command to display zone configuration information. If no operand is specified, all zone configuration information (both defined and effective) displays. If the local switch has an outstanding transaction, this command displays the most recently edited zone configuration that has not yet been saved.
cfgShow Examples 2 To display all zone configurations that start with "Test": switch:admin> cfgshow "Test*" cfg: Test1 Blue_zone cfg: Test_cfg Red_zone; Blue_zone To display all zone configuration information: switch:admin> cfgshow Defined configuration: cfg: USA1 Blue_zone cfg: USA_cfg Red_zone; Blue_zone zone: Blue_zone 1,1; array1; 1,2; array2 zone: Red_zone 1,0; loop1 alias: array1 21:00:00:20:37:0c:76:8c; 21:00:00:20:37:0c:71:02 alias: array2 21:00:00:20:37:0c:76:22; 21:00:00:20:37:0c:76:28 alias:
2 cfgSize cfgSize Displays zone and Admin Domain database size details. Synopsis Description cfgsize [integer] Use this command to display the size details of the zone database and the Admin Domain database. When executed in non-AD255 context, the size details include the Zone DB maximum size, the committed size, and the transaction size. All sizes are in bytes.
cfgSize 2 To display Admin Domain and zone database information in AD255 context: switch:admin> cfgsize Maximum AD and Zone DB size - 1045274 bytes Total Committed AD and Zone DB size - 3390 bytes AD and Zone DB uncommitted space available - 1041884 bytes Total AD and Zone Transaction buffer size 0 bytes AD Database Size: ----------------committed 3124 bytes transaction 0 bytes Number of ADs in Effective Configuration Each AD's Zone Database Size: ---------------------------cfgsize Info for AD Number:0 c
2 cfgTransAbort cfgTransAbort Aborts the current zoning transaction. Synopsis Description cfgtransabort [token] Use this command to abort the current zoning transaction without committing it. All changes made since the transaction was started are removed and the zone configuration database is restored to the state before the transaction was started. If a transaction is open on a different switch in the fabric when this command is run, the transaction on the other switch remains open and unaffected.
cfgTransShow 2 cfgTransShow Displays information about the current zoning transaction. Synopsis Description Notes cfgtransshow Use this command to display the ID of the current zoning transaction. In addition, the command provides information on whether or not the transaction can be aborted. The transaction cannot be aborted if it is an internal zoning transaction. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 chassisBeacon chassisBeacon Sets chassis beaconing mode. Synopsis Description chassisbeacon [mode] Use this command to enable or disable beaconing on a chassis. Chassis beaconing can be used to locate a failing port. When beaconing mode is turned on, the port LEDs flash green at various rates across the chassis. The beaconing continues until you turn it off. Beaconing mode takes over the port LEDs.
chassisConfig 2 chassisConfig Displays or sets the configuration of the Brocade 48000. Synopsis Description chassisconfig [-f][option] This command is retained for legacy reasons only. It has nothing to do with Virtual Fabrics and chassis configuration related to the Virtual Fabric feature. The chassisConfig command is supported ONLY on the Brocade 48000 and ONLY option 5 is supported.
2 chassisEnable chassisEnable Enables all user ports in a chassis. Synopsis Description chassisenable Use this command to enable a Virtual Fabric-aware chassis. All Fibre Channel ports that passed the power-on self test (POST) are enabled. They may come online if connected to a device, or remain offline if disconnected. Use chassisEnable to re-enable the chassis after making configuration changes or running offline diagnostics.
chassisDisable 2 chassisDisable Disables all user ports in a chassis. Synopsis Description chassisdisable [-force] Use this command to disable a Virtual Fabric-aware chassis. All Fibre Channel ports are taken offline. This command prompts for confirmation unless the -force option is used. If the chassis is partitioned into logical switches that are part of logical fabrics, the remaining switches in these fabrics reconfigure. As each port is disabled, the front panel LED changes to a slow flashing yellow.
2 chassisName chassisName Displays or sets the chassis name. Synopsis Description chassisname [name] Use this command to display or change the name associated with the chassis. Enter this command without parameters to display the current chassis name. Use this command with the name operand to assign a new chassis name. Note Operands The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
chassisShow 2 chassisShow Displays all field replaceable units (FRUs). Synopsis Description chassisshow Use this command to inventory and display the FRU header content for each object in the chassis and chassis backplane version. Refer to the Table 1 for more information about the lines and their meaning. TABLE 1 Command output descriptions Line Description 1 If applicable, the first line displays the chassis backplane version number, in hexadecimal.
2 chassisShow Examples To display all FRUs for a switch: switch:user> chassisshow Chassis Backplane Revision: 1C SW BLADE Slot: 3 Header Version: Power Consume Factor: Factory Part Num: Factory Serial Num: Manufacture: Update: Time Alive: Time Awake: ID: Part Num: Serial Num: Revision Num: CP BLADE Slot: 6 Header Version: Power Consume Factor: Factory Part Num: Factory Serial Num: Manufacture: Update: Time Alive: Time Awake: ID: Part Num: Serial Num: Revision Num: . . .
cliHistory 2 cliHistory Name Synopsis Description Displays switch command history. clihistory This command saves the following information whenever a command is executed on the switch: • • • • • Timestamp Username IP address of the Telnet session Options Arguments This command displays the local CLI command history. The information is saved as part of supportSave as the CH file. It is also saved persistently to compact flash if the switch panics.
2 configDefault configDefault Resets the non-persistent configuration data to factory defaults. Synopsis Description configdefault [-fid FID | -chassis |-all] Use this command to reset the non-persistent configuration settings to their factory defaults. Beginning with Fabric OS v6.2.0, configuration data is grouped into chassis information and switch information. Each configuration type is managed separately.
configDefault 2 Note that configDefault does not completely remove all FCIP tunnels and GbE IP address information. This may be an issue when attempting to use the same information to create new tunnels or modify the existing ones. When issuing configDefault on the Brocade 7500, it persistently disables the ports. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 configDownload configDownload Downloads configuration data to the system.
configDownload 2 • When downloading the chassis configuration, the number of logical switches defined in the configuration download must match the number of logical switches currently defined on the switch. • When downloading the switch configuration, the target FID must be defined in both the configuration download and the current system.
2 configDownload If the configuration file contains the keyword “enable:” followed by a zone_configuration, that zoning configuration is enabled in the fabric. If there is no “enable:” keyword in the configuration file or no zoning configuration by that name exists, or if enable fails for any reason (such as dangling aliases), then the following conditions apply: • The effective configuration remains as it was prior to the configuration download. The “enable:” action is ignored.
configDownload Examples 2 “passwd” Specifies the login password when you use the FTP protocol. Quotation marks are optional. -local Downloads a specified configuration file from a predetermined directory on the local chassis. -USB | -U Downloads a specified configuration file from a predetermined directory on an attached USB device. “file” A file name in quotation marks, for example, "config.txt".
2 configDownload Diagnostics The configuration download may fail for one or more of the following reasons: • The switch has not been disabled. Disabling the switch is not necessary for configuration files containing only certain SNMP or Fabric Watch parameters. You may wish to attempt configDownload first without disabling the switch, and if there is at least one changed parameter outside of Fabric Watch or SNMP, you are prompted to disable the switch before proceeding.
configList 2 configList Lists uploaded configuration files. Synopsis Description Note Operands Examples configlist -local|-USB|-U This command displays a list of names, sizes, and creation dates of configuration files saved on the local chassis or on an attached USB device. These files are created when the configUpload command is executed with the -local or the -USB option. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 configRemove configRemove Deletes a saved configuration file. Synopsis configremove -local|-USB|-U [file] Description This command deletes a configuration file that was previously saved to the local chassis or to an attached USB device by using the configUpload command. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
configShow 2 configShow Displays system configuration settings. Synopsis configshow -pattern “pattern” configshow [-all | -fid FID| -chassis] [-local|-USB|-U] [file] [-pattern "pattern"] Description Use this command to display system configuration settings. Some but not all of these parameters are set by the configure and configureChassis commands. Beginning with Fabric OS v6.2.0, configuration data is grouped into chassis information and switch information.
2 configShow -USB | -U [file] Examples Displays the content of a configuration file that was previously created by configUpload and stored on an attached USB device. The output can be optionally filtered by -pattern “pattern”. If file is omitted, the command prompts for a file name. The output format when -USB is specified matches that of configUpload and contains a superset of the information provided when -USB is not specified.
configShow 2 fips.selftests:0 ipfilter.0.name:default_ipv4 ipfilter.0.numofrules:12 ipfilter.0.rule.1:0,0x23,0,0,6,22 ipfilter.0.rule.10:0,0x23,0,0,17,123 ipfilter.0.rule.11:0,0x63,0,0,6,600,1023 ipfilter.0.rule.12:0,0x63,0,0,17,600,1023 ipfilter.0.rule.2:0,0x23,0,0,6,23 ipfilter.0.rule.3:0,0x23,0,0,6,897 ipfilter.0.rule.4:0,0x23,0,0,6,898 ipfilter.0.rule.5:0,0x23,0,0,6,111 ipfilter.0.rule.6:0,0x23,0,0,6,80 ipfilter.0.rule.7:0,0x23,0,0,6,443 ipfilter.0.rule.8:0,0x23,0,0,17,161 ipfilter.0.rule.
2 configShow FOS version = v6.2.0.0 Number of LS = 3 [Switch Configuration Begin : 0] SwitchName = Spirit_66 Fabric ID = 20 [Boot Parameters] boot.name:Spirit_66 boot.ipa:10.32.228.66 boot.licid:10:00:00:05:1e:41:5c:c1 boot.mac:10:00:00:05:1e:41:5c:c1 boot.device:eth0 boot.gateway.ipa:10.32.224.1 [Configuration] acl.clear:0 ag.port.nfportfailback:0x0 ag.port.nfportfailover:0x0 ag.port.nfporttopo.0:0x0 ag.port.nfporttopo.1:0x0 ag.port.nfporttopo.10:0x0 ag.port.nfporttopo.11:0x0 ag.port.nfporttopo.
configUpload 2 configUpload Uploads system configuration data to a file.
2 configUpload whitespace {“ ” | t”} component {“a” - “z” | “A” - “Z” | “0” - “9” | “_” | “-”} value {} Elements enclosed in braces ( {...} ) indicate zero or more occurrences of the enclosed elements. The switch configuration file includes the following sections: [Configuration upload Information] Contains configuration format version, switch firmware version, time stamp, and number of logical switches. This section is the same in the chassis configuration file.
configUpload Notes 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. Do not manually edit a configuration file after uploading the file and before downloading the file to a switch.
2 configUpload Examples To upload the switch configuration interactively from a switch that is not enabled for Virtual Fabrics: switch:admin> configupload Protocol (scp, ftp, local) [ftp]: Server Name or IP Address [host]: 192.168.38.245 User Name [user]: jdoe File Name [config.
configure 2 configure Changes switch configuration settings. Synopsis Description configure Use this command to change switch configuration settings. Beginning with Fabric OS v6.2.0, configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. For information on file format and specific parameters contained in each section, refer to the configUpload help page.
2 configure The configure command runs in interactive mode and presents you with a series of hierarchical menus. Each top-level menu and its associated submenus consist of a text prompt, a selection of valid values, and a default value (in brackets). The following keys control the execution of the command: Return When entered at a prompt with no preceding input, the command accepts the default value (if applicable) and moves to the next prompt.
configure 2 Allow XISL Use An extended interswitch link (XISL) is an interswitch link (ISL) that connects the logical switch to the base switch and carries traffic for multiple logical fabrics. This feature is supported only on Virtual Fabric-aware platforms under the following conditions: Virtual Fabrics must be enabled on the switch, and the switch cannot be a base switch.
2 configure Note that the R_A_TOV, E_D_TOV, WAN_TOV, and MAX_HOPS configuration parameters are interrelated. Assigning a specific value to one or more of these parameters can change the range of allowed values that can be assigned to the other parameters. As a result, you may not be able to set all the values within the range displayed against each parameter.
configure 2 Virtual Channel Settings The switch enables fine-tuning for a specific application by configuring the parameters for eight virtual channels. The first two virtual channels are reserved for switch internal functions and are not available for modification. The default virtual channel settings have already been optimized for switch performance. Changing the default values can improve switch performance but can also degrade performance.
2 configure Zoning Operation Parameters Table 5 lists the configurable zoning operation parameters. TABLE 5 Zoning operation parameters Field Type Default Range Disable NodeName Zone Checking Boolean 0 1 Disable NodeName Zone Checking Specify 1 to disable using node WWN when specifying nodes in the zone database, or specify 0 to enable using node WWN when specifying nodes in the zone data. The default value is 0. This value must be set to 1 for interpretability.
configure 2 Enable CLOSE on OPEN received? If this is set, a CLS is returned immediately to an OPN if no buffers are available. This is required for TachLite. Always send RSCN? Following the completion of loop initialization, a remote state change notification (RSCN) is issued when FL_Ports detect the presence of new devices or the absence of pre-existing devices. When set to 1, an RSCN is issued upon completion of loop initialization, regardless of the presence or absence of new or pre-existing devices.
2 configure switch:admin>configure Configure... Change fabric parameters? Y Change domain[30]: Allow XISL Use [no]: yes Enable a 256 Area Limit[0]: R_A_TOV: (4000..120000) [10000] E_D_TOV: (1000.. 5000) [2000] WAN_TOV: (0..30000) [0] MAX_HOPS: (7..19) [7] Data field size: (256..2112) [2112] Sequence Level Switching: (0..1) [0] Disable Device Probing: (0..1) [0] Suppress Class F Traffic: (0..1) [0] Per-frame Route Priority: (0..1) [0] Long Distance Fabric: (0..1) [0] BB credit: (1..
configureChassis 2 configureChassis Changes chassis-level system configuration settings. Synopsis Description configurechassis Use this command to modify chassis-level system configuration settings. Beginning with Fabric OS v6.2.0, configuration data is grouped into chassis information and switch information. Each configuration type is managed separately. Use the configure command to modify switch configuration parameters.
2 configureChassis System Settings The following system-related parameters are configurable on a Virtual Fabric-aware switch. TABLE 11 System settings Field Type Default Range system.blade.bladeFaultOn HwErrMsk Number 0x0 0x0 to 0xffff system.blade.bladeFaultOnHwErrMsk If this field is set to a value other than 0, then any nonfatal HW ASIC data parity error causes the problem blade to be powered off.
cryptoCfg 2 cryptoCfg Name Synopsis Performs encryption configuration and management functions. cryptocfg --help -nodecfg cryptocfg --help -groupcfg cryptocfg --help -hacluster cryptocfg --help -devicecfg cryptocfg --help -transcfg Description Use the cryptoCfg command to configure and manage the Brocade Encryption Switch and the FS8-18 encryption blade. These platforms support the encryption of data-at-rest for tape devices and disk array logical unit numbers (LUNs).
2 cryptoCfg Function 1.
cryptoCfg Operands 2 The cryptoCfg node initialization and configuration function has the following operands: --help -nodecfg Displays the synopsis for the node initialization and configuration function. This command is valid on all nodes. --initnode Initializes the node to prepare for the configuration of encryption options. Initialization must be performed on every node before configuration options may be set and encryption may be enabled.
2 cryptoCfg Sets the encryption routing policy on the local encryption engine to either shared or partitioned. By default the encryption blade is enabled with a “shared dynamic path selection (DPS)“ configuration. A slotpoweroff followed by a slotpoweron is required on the encryption blade for the configuration change to take effect. The encryption switch must be rebooted for the change to take effect. In Fabric OSv6.2.0, this command requires root permissions.
cryptoCfg host_file_path -usb 2 Specifies the fully qualified path to the file on the host to which the file is to be exported. This includes the file name. Make sure to name your certificates so you can track the file type and the originator switch, for example, name_cpcert.pem. Exports a specified certificate to a mounted USB storage device. When -usb is specified, the following operands are required: dest_filename Specifies the name of the file on the USB device to which the file is to be exported.
2 cryptoCfg dest_filename Specifies the name to be assigned to the imported file. This is a user-generated file name. source_filename Specifies the name of the certificate on the USB storage device from which you are importing. --reg -membernode Registers a member node with the group leader. This command is valid only on the group leader. The encryption group must have been created prior to performing member node registration.
cryptoCfg --dhresponse vault_IP_addr --zeroizeEE slot_number --delete -file local_name --show 2 Accepts the LKM Diffie-Hellman response from the specified NetApp LKM appliance and generates the link key on the node on which this command is issued. The DH response occurs by an automatic trusted link establishment method. The LKM appliance must be specified by its vault_IP_addr. The DH challenge request must be approved on the Net App LKM appliance for this command to succeed.
2 cryptoCfg cryptocfg --eject -membernode node_WWN cryptocfg --leave_encryption_group cryptocfg --genmasterkey cryptocfg --exportmasterkey [-file] cryptocfg --recovermasterkey currentMK | alternateMK -keyID keyID | -srcfile filename cryptocfg --show -groupcfg cryptocfg --show -groupmember -all | node_WWN Description Use these cryptoCfg commands to create or delete an encryption group, to add or remove group member nodes or key vaults, to manage keys including key recovery from backup, and to configure gr
cryptoCfg - 2 Group leader node name: Node WWN Encryption group state: CONVERGED = Encryption group formed successfully. CONVERGING = Encryption group partially formed, member nodes may still be in discovery process. DEGRADED = Nodes lost connection with the group.
2 cryptoCfg Note All EEs in the encryption group must be interconnected through a dedicated local area network (LAN), preferably on the same subnet and on the same VLAN using the GbE Ports on the encryption switch or blade. The two GbE Ports of each member node (Eth0 and Eth1) should be connected to the same IP Network, the same subnet, and the same VLAN. Configure the GbE Ports (I/O sync links) with an IP address for the eth0 Ethernet interface, and also configure a gateway for these I/O sync links.
cryptoCfg certfile 2 Specifies the certificate file. This file must be imported prior to registering the key vault and reside in the predetermined directory where certificates are stored. In the case of the HP SKM, this operand specifies the CA file, which is the certificate of the signing authority on the SKM. Use --show -file -all for a listing of imported certificates. hostname | ip_address Specifies the key vault by providing either a host name or IP address.
2 cryptoCfg --set -hbmisses value --set -hbtimeout value Sets the number of heartbeat misses allowed in a node that is part of an encryption group before the node is declared unreachable. This value is set in conjunction with the time-out value. It must be configured at the group leader node and is distributed to all member nodes in the encryption group. The following operand is required: Specifies the number of heartbeat misses. The default value is 3. The range is 1-15 in integer increments only.
cryptoCfg 2 not online (in DISCOVERING State), use --dereg -membernode. You must remove the EEs from the HA cluster and delete any CryptoTarget container and Crypto LUN configurations from this node prior to initiating a leave operation. --genmasterkey Generates a master key. A master key is needed when an opaque key vault such as RKM is used. The master key must be exported (backed up) before it may be used. This command is valid only on the group leader.
2 cryptoCfg -srcfile filename Specifies the file name when restoring the master key from a file in the predetermined directory on the switch. Use this operand when the master key was backed up to a file rather than to a key vault. The -keyID and the -srcfile operands are mutually exclusive. --show -groupcfg Displays the group-wide encryption policy configuration. This command is valid on all member nodes and on the group leader.
cryptoCfg 2 The command group includes a show option, --show -hacluster. When invoked on a member node, this command displays the committed HA cluster configuration.
2 cryptoCfg node_WWN Specifies the node WWN of the switch or chassis to which the encryption engine belongs. slot_number Specifies the encryption engine slot number on bladed systems. --remove -haclustermember Removes one or both encryption engine members from an already configured HA cluster. This command is valid only on the group leader.
cryptoCfg Function 4. Storage device configuration and management Synopsis cryptocfg --help -devicecfg 2 cryptocfg --create -container disk | tape crypto_target_container_name EE_node_WWN [EE_slot_number] target_PWWN target_NWWN [-initiator initiator_PWWN initiator_NWWN [initiator_PWWN initiator_NWWN]...
2 cryptoCfg cryptocfg --show -container crypto_target_container_name -cfg | -stat cryptocfg --show -tapepool -all | -label pool_label |-num pool_num -cfg | -stat cryptocfg --show -LUN crypto_target_container_name LUN_Num initiator_PWWN -cfg | -stat cryptocfg --show -rekey -all cryptocfg --show -rekey crypto_target_container_name cryptocfg --show -rekey crypto_target_container_name LUN_Num initiator_PWWN cryptocfg --show -tape_sessions -all cryptocfg --show -tape_sessions crypto_target_container_name Descr
cryptoCfg - Container name: (user-generated name) - Encryption algorithm: AES256 -XTS (disk), AES256-CCM (tape), or none 2 Type: disk or tape EE node: node WWN EE slot: slot number EE hosting container Target: target port WWN Target PID: target PID VT: virtual target port WWN VT PID: virtual target PID Number of hosts Number of tape sessions (or re-key sessions) Host: port WWN Host PID: host PID VI: virtual initiator port WWN VI PID: virtual initiator PID Number of LUNs LUN number LUN type: disk or ta
2 cryptoCfg - Type: tape or disk EE node: node WWN EE slot: slot number Target: target port WWN, node WWN VT: virtual target port WWN, node WWN Number of hosts Configuration status: committed or defined For each host: host port WWN, node WWN For each VI: VI port WWN, node WWN Number of LUNs If a re-key session is in progress while the command is run, the following additional information is displayed: • • • • • • • • • • • • • • • • • • • • • • LUN number LUN type: tape or disk LUN serial number Encryp
cryptoCfg 2 • Configuration status: committed or defined Use the --show -LUN command for a listing of Crypto LUN status or configuration information for a specific CTC.
2 cryptoCfg • • • • • Target: PWWN, NWWN VT: PWWN, NWWN Number of hosts Configuration status: committed or defined For each host: - Host PWWN, NW VI: PWWN, NWWN VI PID • Number of LUNs • For each LUN: - LUN number - LUN type: tape or disk - LUN status - Encryption mode: encrypt or cleartext - Encryption format: native or DF compatible - Tape type - Encrypt existing data: disabled or enabled - Rekey: disabled or enabled - Key ID state - Key life (in days) - Volume/pool label - Rekey status If re-key or
cryptoCfg - 2 Number of uncompressed blocks Number of compressed blocks Number of uncompressed bytes Number of compressed bytes Use the --show -rekey command to display all re-key sessions in progress in the encryption group or for a specified container.
2 cryptoCfg • • • • • • • Target PWWN Target NWWN Target PID EE node name: node WWN EE slot number Number of re-key sessions in progress For each re-key session the display includes: - Re-Key session number Percent completion Re-Key state. Displays one of the following: • Re-Key Setup • LUN Prep • Key Update - Operation in progress.
cryptoCfg • • • • • • • • Host NWWN Host PID VI WWN VT NWWN VT PID LUN number Tape session number For each Tape session: Notes 2 Number of uncompressed blocks Number of compressed blocks Number of uncompressed bytes Number of compressed bytes Encryption groups and HA clusters must be configured before performing any CryptoTarget container and Crypto LUN configurations. When adding a LUN to a CryptoTarget container, special attention should be paid to the input format.
2 cryptoCfg crypto_target_container_name Specifies the CTC name for the storage device. The CTC name can be up to 31 characters long and include any alphanumeric characters and underscores. White space and other special characters are not permitted. This operand is required. EE_node_WWN [EE_slot_number] Specifies the WWN of the node to which the encryption engine belongs and on which encryption engine this particular CTC is hosted. This operand is required. On bladed systems, include the slot number.
cryptoCfg 2 new_node_WWN [new_slot_number] Specifies the node WWN of the encryption engine to which failback of all CTCs should occur. On bladed systems, specify the slot number of the new encryption engine. --move -container Moves the specified CTC from its currently configured encryption engine to another encryption engine. This command is valid only on the group leader.
2 cryptoCfg --add -LUN Adds a LUN to a CTC and optionally sets encryption policies for the LUN. LUN policies may be set at this time or after the LUN is added. The maximum number of LUNs you can add in one commit operation is 25. There is a delay of five 5 seconds for each commit operation. This command is valid only on the group leader. The following operands are supported: crypto_target_container_name Specifies the name of the CTC to which the LUN is added. This operand is required.
cryptoCfg native 2 The LUN uses the Brocade metadata format and algorithm for the encryption and decryption of data. This is the default mode. DF_compatible The LUN uses the NetApp DataFort metadata format and algorithm for the encryption and decryption of data. Use of this format requires a NetApp DataFort-compatible license to be present on the encryption switch or the chassis that houses the encryption blade. -encrypt | -cleartext Enables or disables the LUN for encryption.
2 cryptoCfg initiator_PWWN initiator_NWWN Specifies the initiator by its port WWN and node WWN. You may optionally modify the following LUN policy configuration parameters. Refer to cryptocfg --add -LUN for descriptions of these parameters.
cryptoCfg 2 A LUN may become disabled for various reasons, such as a change in policy from encrypted to cleartext, a conflict between LUN policy and LUN, or a missing DEK in the key vault. Force-enabling a LUN while metadata exist on the LUN may result in a loss of data and should be exercised with caution.
2 cryptoCfg -key_lifespan time_in_days | none Specifies the lifespan of the encryption key in days. The key expires after the specified number of days. The default value is none, which means the key does not expire until the value is set. This parameter cannot be modified for tape pools once it is set. --delete -tapepool Deletes the specified tape pool. This command is valid only on the group leader.
cryptoCfg 2 --manual_rekey -all Performs a manual re-keying of all encrypted disk LUNs in the encryption group. This operation may take an extended period of time. --resume_rekey Resumes a suspended re-key session for a specified disk LUN at the termination point. A re-key session may terminate prematurely due to unrecoverable medium or hardware errors. When a re-key session terminates prematurely, the system logs CRITICAL RAS Log and re-key operation failure status messages.
2 cryptoCfg -cfg | -stat --show -LUN Displays either configuration information or runtime status for the specified tape pools. Displays Crypto LUN configuration or runtime status information for a specified CTC. This command is valid on all nodes. The following operands are supported: crypto_target_container_name Specifies the CTC for which to display the Crypto LUN information. LUN_Num Specifies the number of the LUN for which to display information.
cryptoCfg Description 2 Use these cryptoCfg commands to manage the transaction mechanism for those functions that require configuration changes to be committed before they take effect. These functions include “3. High Availability (HA) cluster configuration” and “4. Storage device configuration and management”. Transaction commands must be invoked on the group leader.
2 cryptoCfg To initialize an encryption engine: SecurityAdmin:switch>cryptocfg --initEE This will overwrite previously generated identification and authentication data ARE YOU SURE (yes, y, no, n): y Operation succeeded. To register an encryption engine with the CP or chassis: SecurityAdmin:switch>cryptocfg -regEE Operation succeeded. To enable an encryption engine: SecurityAdmin:switch> cryptocfg --enableEE Operation succeeded.
cryptoCfg 2 To zeroize all critical security parameters on an encryption switch: SecurityAdmin:switch> cryptocfg --zeroizeEE This will zeroize all critical security parameters ARE YOU SURE (yes, y, no, n): [no]y Operation succeeded. To delete a file from the local node: SecurityAdmin:switch> cryptocfg --delete -file /etc/fabos/certs/sw0/foo.pem This will permanently delete the selected file.
2 cryptoCfg Leave node status: Operation Succeeded. To generate the master key (RKM) on the group leader: SecurityAdmin:switch>cryptocfg --genmasterkey Master key generated. The master key should be exported before further operations are performed. To export the master key to the RKM key vault: SecurityAdmin:switch>cryptocfg --exportmasterkey Enter the passphrase: passphrase Master key exported.
cryptoCfg 2 To display an encryption group configuration with an SKM keyvault deployed in HA fashion: SecurityAdmin:switch>cryptocfg --show -groupcfg Encryption Group Name: brocade Failback mode: Auto Heartbeat misses: 3 Heartbeat timeout: 2 Key Vault Type: SKM Key Vault Information: Primary IP address: 10.32.45.14 Secondary IP address: 10.32.45.
2 cryptoCfg Alternate Master KeyID: EE Slot: 0 SP state: Current Master KeyID: Alternate Master KeyID: No HA cluster membership No HA cluster membership 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 Unknown State 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 C. Group-wide policy configuration To set the failback mode to manual failback: SecurityAdmin:switch> cryptocfg --set -failbackmode manual Set failback policy status: Operation Succeeded.
cryptoCfg 2 To display the changes (Note that "HAC2" is in "defined" state until the transaction is committed): SecurityAdmin:switch> cryptocfg --show -hacluster -all Encryption Group Name: brocade_1 Number of HA Clusters: 2 HA cluster name: HAC1 - 1 EE entry Status: Committed WWN Slot Number 11:22:33:44:55:66:77:00 0 Status Online HA cluster name: HAC2 - 2 EE entries Status: Defined WWN Slot Number 10:00:00:05:1e:53:4c:91 0 10:00:00:05:1e:53:74:87 3 Status Online Online To replace an encryption engin
2 cryptoCfg E. Storage device configuration 1. Create a zone that includes initiator and target. a. Determine the device configuration. FabricAdmin:switch>nsshow { Type Pid COS PortName NodeName TTL(sec) N 010600; 2,3;10:00:00:00:c9:2b:c9:3a;20:00:00:00:c9:2b:c9:3a; na NodeSymb: [35] "Emulex LP9002 FV3.82A1 DV5-4.
cryptoCfg 2 3. Add an initiator to the CryptoTarget container and commit the transaction. FabricAdmin:switch>cryptocfg --add -initiator my_disk_tgt 10:00:00:00:c9:2b:c9:3a 20:00:00:00:c9:2b:c9:3a Operation Succeeded FabricAdmin:switch>cryptocfg --commit Operation Succeeded 4. Display the CTC configuration.
2 cryptoCfg Number of host(s): 1 Number of rekey session(s):0 Host: 10:00:00:00:c9:2b:c9:3a 20:00:00:00:c9:2b:c9:3a Host PID: 010600 VI: 20:02:00:05:1e:41:4e:1d 20:03:00:05:1e:41:4e:1d VI PID: 012002 Number of LUN(s): 1 LUN number: 0x0 LUN type: disk LUN serial number: 200000062B0F726D0C000000 Encryption mode: encrypt Encryption format: native Encrypt existing data: disabled Rekey: disabled LUN state: Encryption enabled Encryption algorithm: AES256-XTS Key ID state: Read write Key ID: 3a:21:6a:bd:f2:37:d7
cryptoCfg 2 00:00:00:00:00:00:00:01; 00:00:00:00:00:00:00:02; 00:00:00:00:00:00:00:03; 00:00:00:00:00:00:00:04 zone: testzone1 1,0 Effective configuration: cfg: itcfg zone: itzone 10:00:00:00:c9:2b:c9:3a 20:0c:00:06:2b:0f:72:6d F.
2 cryptoCfg To display CryptoTarget container runtime status information For a disk LUN with re-keying enabled: FabricAdmin:switch> cryptocfg --show -tapepool -LUN my_disk_tgt 0x0 10:00:00:db:69:78:93:0e -stat Container name: my_disk_tgt Type: disk EE node: 10:00:00:05:1e:53:75:01 EE slot: 0 Target: 21:00:00:04:cf:6e:58:2c 20:00:00:04:cf:6e:58:2c Target PID: 0107d5 VT: 20:28:00:05:1e:53:74:fd 20:29:00:05:1e:53:74:fd VT PID: 012805 Number of host(s): 1 Number of rekey session(s):1 Host: 10:00:00:db:69:78:9
cryptoCfg 2 To display all tape sessions in progress on the local node: FabricAdmin:switch>cryptocfg --show -tape_sessions -all Number of tape session(s): 2 Container name: apps92 EE node: 10:00:00:05:1e:43:ee:00 EE slot: 2 Target: 50:03:08:c0:9c:e5:a0:01 Target PID: 8e0100 VT: 20:00:00:05:1e:53:77:e8 VT PID: 019001 Host: 10:00:00:00:c9:52:00:ba Host PID: 8e0200 VI: 20:02:00:05:1e:53:77:e8 VI PID: 019002 LUN number: 0x0 Tape session number: 0 Number of uncompressed blocks: 37466 Number of compressed block
2 dataTypeShow dataTypeShow Displays sample data stream types used in some diagnostic commands. Synopsis datatypeshow [-seed value] Description Use this command to display sample data stream types used in diagnostic commands. There are 20 different sample data types. The command displays an example of each data stream. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
date 2 date Displays or sets the switch date and time. Synopsis Description date [“newdate”] Use this command to display or set the date and time. All switches maintain current date and time in flash memory. Date and time are used for logging events. Normal switch operation does not depend on the date and time; a switch with incorrect date values continues to function properly. This command sets a common date and time for the entire fabric.
2 date Examples To display the current date and time and then modify it: switch:admin> date Fri Jan 29 17:01:48 UTC 2007 switch:admin> date "0227123007" Thu Feb 27 12:30:00 UTC 2007 See Also 164 errShow, ficonCupSet, ficonCupShow, portLogShow, tsClockServer, tsTimeZone, upTime Fabric OS Command Reference 53-1001186-01
dbgShow 2 dbgShow Displays current values of debug and verbosity levels of the specified module. Synopsis Description Note Operands dbgshow [module_name] Use this command to display the current values of debug and verbosity levels of the specified module. If no module name is specified, displays debug and verbosity levels of all modules. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 defZone defZone Sets or displays the default zone access mode. Synopsis Description defzone [--noaccess | --allaccess | --show] Use this command to display or set the Default Zone access mode. Setting the Default Zone mode initializes a zoning transaction (if one is not already in progress), and create reserved zoning objects. A default zone controls device access when zoning is not enabled.
defZone --allaccess 2 Sets the default zone access mode to All Access, initiates a zoning transaction (if one is not already in progress), and deletes the reserved zoning objects by performing the equivalent to the following zoning commands: cfgDelete “d_efault_Cfg” zoneDelete “d_efault_Zone” A cfgSave, cfgEnable, or cfgDisable command must be performed subsequent to the use of this command to commit the changes and distribute them to the fabric.
2 diagClearError diagClearError Clears the diagnostics failure status. Synopsis Description Note Operands diagclearerror [[--slot] slotnumber] -all Use this command to clear the diagnostics failure status. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
diagDisablePost 2 diagDisablePost Disables power-on self-test (POST). Synopsis Description Note diagdisablepost Use this command to disable POST. A reboot is not required for this command to take effect. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 diagEnablePost diagEnablePost Enables power-on self-test (POST) execution at next reboot. Synopsis diagenablepost Description Use this command to enable POST. A reboot is not required for this command to take effect. POST includes two phases: POST Phase I mainly tests hardware and POST Phase II tests system functionality. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
diagHelp 2 diagHelp Displays diagnostic command information. Synopsis Description diaghelp Use this command to display a short description of diagnostic commands. Use default operands when running diagnostics commands. Non-default settings require detailed knowledge of the underlying hardware and are intended for support personnel only. Contact support if you want to use these operands. Note The diaghelp command displays diagnostic commands that may not be available.
2 diagPost diagPost Sets or displays diagnostic POST configuration. Synopsis Description diagpost [mode | -show] Use this command to enable or disable Power-On-Self-Test) POST. The mode is saved in flash memory (and stays in that mode) until the next execution of diagPost. The mode becomes active as soon as this command is executed; it does not require a reboot to take effect.
diagRetry 2 diagRetry Sets or displays diagnostic retry mode. Synopsis Description diagretry [mode | -show] Use this command to enable retry mode if the mode value is nonzero and to disable the retry mode if the mode value is 0. The mode is saved in flash memory (and stays in that mode) until the next execution of diagRetry. The mode becomes active as soon as this command is executed; it does not require a reboot to take effect.
2 diagSetCycle diagSetCycle Sets diagnostic script parameters. Synopsis Description diagsetcycle [ script | -current [-show | -default | -keyword value ..]] Use this command to update diagnostic command parameters. If only a script is specified, the command displays all configuration variables used by the specified script and enters an interactive session. Using the full parameters, variables can be updated non-interactively.
diagShow 2 diagShow Displays diagnostics status. Synopsis Description Note Operands Examples diagshow [--slot number][-uports itemlist][-bports itemlist][-use_bports value] Use this command to display the diagnostics status for the specified list of blade or user ports. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 dbgShow dbgShow Displays current values of debug and verbosity levels of the specified module. Synopsis Description Note Operands dbgshow module_name Use this command to display the current values of debug and verbosity levels of the specified module. If no module name is specified, displays debug and verbosity levels of all modules. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
distribute 2 distribute Distributes data to switches in a fabric. Synopsis Description distribute -p policy_list -d switch_list Use this command to distribute data to a specified list of switches in the fabric.
2 distribute Examples To distribute the Switch Connection Control Policy and Device Connection Control Policy to domains 3 and 5 in the fabric: switch:admin> distribute -p “SCC;DCC” -d “3;5” To distribute the Switch Connection Control Policy, FCS Policy, and Password database to all domains in the fabric that support the distribute feature: switch:admin> distribute -p “SCC;FCS;PWD” -d “*” Wildcard domains are: 1 3 5 To distribute the FCS policy, and the Password database to all domains in the fabric th
dlsReset 2 dlsReset Disables the dynamic load sharing (DLS) option. Synopsis Description dlsreset Use this command to turn off DLS when a fabric change occurs. Refer to dlsSet for a full description of load sharing. This command should be used only if devices connected to the fabric cannot handle occasional routing changes correctly. Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 dlsSet dlsSet Enables the dynamic load sharing (DLS) option. Synopsis Description dlsset Use this command to turn on DLS when a fabric change occurs. Routing is based on the incoming port and the destination domain. This means that all traffic coming in from a port (either from an E_Port or an Fx_Port) and directed to the same remote domain is routed through the same output E_Port. Dynamic Load Sharing (DLS) optimizes fabric routing.
dlsShow 2 dlsShow Displays the setting of the dynamic load sharing (DLS) option. Synopsis Description dlsshow Use this command to display whether DLS is on or off. One of two messages displays: DLS is set The DLS option is turned on. Load sharing is reconfigured with every change in the fabric, and existing routes can be moved to maintain optimal balance. DLS is not set The DLS option is turned off. Once placed, existing routes are never moved to maintain optimal balance.
2 dnsConfig dnsConfig Sets, displays, or removes domain name service (DNS) parameters. Synopsis Description dnsconfig Use this command to display, set, or remove the domain name service parameters. The domain name service parameters are the domain name and the name server IP address for primary and secondary name servers. The dnsconfig command displays IPv4 and IPv6 addresses. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
enclosureShow 2 enclosureShow Displays attributes of the switch enclosure. Synopsis Description enclosureshow attribute Use this command to display attributes of the switch enclosure, including the vendor-specific enclosure identifier and the identifier of the enclosure interface to which the switch is attached. This command applies to products that are embedded in a blade server or storage chassis. Most options are platform-specific.
2 errClear errClear Clears all error log messages for all switch instances on this control processor (CP). Synopsis errclear Description Use this command to clear all internal and external error log messages for all switch instances on the CP where the command is executed. For products that have a single processor, all error log messages are cleared. For products that contain multiple processors , this command does not affect the error logs of the other processor.
errDelimiterSet 2 errDelimiterSet Sets the error log start and end delimiters for messages sent to the console and syslog. Synopsis Description errdelimiterset [-s "start delimiter string"][-e "end delimiter string"] Use this command to set the error log start and end delimiters for log messages sent to the console and syslog. An empty string clears the start and the end delimiters (including the colon) so that they are not displayed.
2 errDump errDump Displays the error log without pagination. Synopsis Description errdump [-a |-r ] Use this command to dump external error log messages. When executed without operands, this command prints all error messages for the logical switch context in which the command is executed. When used with the -a option, the command prints the error messages for the entire chassis. The messages are dumped to the console without page breaks. The -r operand displays the messages in reversed order.
errDump 2 2008/08/25-11:35:04, [FABR-1001], 9041, CHASSIS, WARNING, Spir_67, port 0, incompatible Long distance mode.
2 errFilterSet errFilterSet Sets a filter for an error log destination. Synopsis Description errfilterset [-d “destination"][-v severity] Use this command to set a filter for an error log destination. A filter is set based on the severity level of the messages. If no parameters are specified, this command displays the filters that are currently in use. Note Operands Examples The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
errModuleShow 2 errModuleShow Displays all the defined error log modules. Synopsis Description Note errmoduleshow Use this command to display a list of all defined error log modules. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 errShow errShow Displays the error log messages with pagination. Synopsis Description errshow [-a |-r ] Use this command to display external error log messages one at a time. When executed without operands, this command prints the error messages for the logical switch context in which the command is executed. When used with the -a option, the command prints the error messages for the entire chassis. The messages are displayed with page breaks. The -r operand displays the messages in reversed order.
errShow 2 [Type to continue, Q to stop: 2008/08/25-11:35:04, [FABR-1001], 9041, CHASSIS, WARNING, Spir_67, port 0, incompatible Long distance mode.
2 exit exit Logs out from a shell session. Synopsis Description exit Use this command to log out from a Telnet, SSH, rlogin or serial port session. Telnet and rlogin connections are closed; the serial port returns to the login: prompt. The exit command is an accepted synonym for logout, as is typing Ctrl-D at the beginning of a line. Operands none Examples To exit from a shell session: switch:admin> exit Connection to host lost.
fabPortShow 2 fabPortShow Displays fabric port information. Synopsis Description fabportshow [slotnumber/]portnumber Use this command to display the state of a port, relative to the fabric, as well as a list of pending commands. The following information displays: Port The port number.
2 fabPortShow 0x00000800 Zoning has completed 0x00001000 Segmented by Platform Management 0x00002000 Segmented due to no license 0x00004000 Segmented due to E_Port disabling 0x00008000 DIA already sent for that port 0x00010000 RDI already sent 0x00020000 Port is true T port 0x00040000 Port received an ELP 0x00080000 Port received an ELP RJT 0x00100000 LR pending due to ELP RJT rcv 0x00200000 Received a DIA on this port 0x00400000 Port is the EMT Initiator 0x00800000 Security viola
fabPortShow Examples 2 To display fabric port information: switch:admin> fabportshow 4/14 Fabric Port Information: ======================== Port: State: List: List Count: Flags: nbrWWN: nbrPort: lr_tid: red_ports: 10 11 62 63 62 P3 0x10068418 0 0x280120 10:00:00:60:69:80:06:cf 5 0x1005dbd8, IDLE STATE Open commands pending: ====================== No commands pending See Also portShow Fabric OS Command Reference 53-1001186-01 195
2 fabRetryShow fabRetryShow Displays the retry count of the fabric commands. Synopsis Description Note Use this command to display the retry count of the fabric commands.
fabricLog 2 fabricLog Displays (all users) or manipulates (admin) the fabric log. Synopsis Description Note Operands fabriclog -s | -c | -d | -e | -r size Use this command to display, clear, disable, enable, or resize the fabric log. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, “Using Fabric OS commands” and Appendix A, “Command Availability” for details.
2 fabricLog To change the size of the fabric log: switch:admin> fabriclog -r 64 Warning: This command will clear the logs.
fabricPrincipal 2 fabricPrincipal Sets the principal switch selection mode. Synopsis fabricprincipal --help|-h fabricprincipal [--show|-q] fabricprincipal --enable [-priority|-p priority] [-force|-f] fabricprincipal --disable fabricprincipal [-f] mode Description Use this command to set principal switch selection mode for a switch and to set priorities for principal switch selection.
2 fabricPrincipal [-f ] mode Examples Sets the principal switch mode. Specify 1 to enable principal switch mode. Specify 0 to disable principal switch mode. Optionally use the -f operand to force a fabric rebuild. Mode changes take effect when the fabric rebuilds. This operand is optional.
fabricShow 2 fabricShow Displays fabric membership information. Synopsis Description fabricshow Use this command to display information about switches in the fabric. If the switch is initializing or is disabled, the message “no fabric” is displayed. In a mixed fabric, fabricshow must be executed on a switch that runs Fabric OS v5.3.0 or later; otherwise, IPv6 information is lost, since switches running earlier versions do not recognize an IPv6-configured switch.
2 fabricShow sw5:admin> fabricShow Switch ID Worldwide Name Enet IP Addr FC IP Addr Name --------------------------------------------------------------------------------1: fffc41 10:00:00:60:69:00:02:0b 192.168.64.180 192.168.65.180 >"sw180" 1080::8:800:200C:1234/64 2: fffc42 10:00:00:60:69:00:05:91 192.168.64.60 192.168.65.60 "sw60" The Fabric has 2 switches.
fabStatsShow 2 fabStatsShow Displays the fabric statistics. Synopsis Description fabstatsshow Use this command to display the statistics for the fabric.
2 fabStatsShow Sec Incompatibility: Sec Violation: ECP Error: Duplicate WWN: Eport Isolated: See Also 204 0 0 0 0 0 fabRetryShow Fabric OS Command Reference 53-1001186-01
fabSwitchShow 2 fabSwitchShow Displays the fabric switch state structure information. Synopsis Description Note fabswitchshow Use this command to display the fabric switch state structure information. This command is strictly for debugging; it is not intended as a user command. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 fanDisable fanDisable Disables a fan unit. Synopsis Description Notes fandisable unit Use this command to disable a non-faulty fan unit by setting the RPM speed to 0. This command is not available on non-bladed systems except for the Brocade 4100, 4900, and 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
fanEnable 2 fanEnable Enables a fan unit. Synopsis Description Notes fanenable unit Use this command to set a previously disabled fan unit back to the default RPM speed. This command is not available on non-bladed systems except for the Brocade 4100, 4900, and 5300. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 fanShow fanShow Displays fan status and speed. Synopsis Description fanshow Use this command to display the current status and speed of each fan in the system. Fan status is displayed as: OK Fan is functioning correctly. absent Fan is not present. below minimum Fan is present but rotating too slowly or stopped. above minimum Fan is rotating too quickly. unknown Unknown fan unit installed. faulty Fan has exceeded hardware tolerance and has stopped.
fastboot 2 fastboot Reboots the Control Processor (CP), bypassing Power-On Self-Tests (POST). Synopsis Description fastboot Use this command to immediately reboot the CP. This command is similar to reboot, but skips POST when the system comes back up, reducing boot time significantly. If POST was previously disabled using the diagDisablePost command, then fastboot is the same as reboot. Notes This command is not available on non-bladed systems except for the Brocade 4100 and 4900.
2 fastWriteCfg fastWriteCfg Enables or disables the FC Fastwrite feature. Synopsis fastwritecfg --enable | --disable [slot] fastwritecfg --show Description Notes Use this command to configure FC Fastwrite on a blade in a given slot. Fastwrite minimizes storage latency and improves the number of write transactions per second over long distances. A blade can be configured either to support FC Fastwrite or FCIP (default supported when FC Fastwrite is disabled).
fastWriteCfg 2 To disable FC Fastwrite: switch:admin> fastwritecfg --disable 7 !!!! WARNING !!!! Disabling this feature requires power-cycling of the affected blade to take effect and may take up to 5 minutes to complete. Non-bladed switches will be rebooted. In all cases, data traffic on all the ports (FC and GbE) of the blade will be disrupted.
2 fcipChipTest fcipChipTest Tests functionality of components in the FCIP complex. Synopsis Description Notes fcipchiptest [--slot slotnumber][-testtype type][-unit number] Use this command to verify the internal registers and memory of the network processor, FCIP FPGA, compression processor, and GigPHY. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
fcipChipTest Diagnostics 2 When a failure is detected, the test might report one or more of the following error messages: CHIP_TEST_ERR CHIP_TEST_CHIP_INIT_ERR CHIP_TEST_IMAGE_VER_ERR CHIP_TEST_TIMEOUT_ERR CHIP_TEST_HEARBEAT_ERR CHIP_TEST_INVALID_RESULT See Also fcipPathTest Fabric OS Command Reference 53-1001186-01 213
2 fcipHelp fcipHelp Displays FCIP command information. Synopsis fciphelp Description Use this command to display a short description of Fibre Channel over IP (FCIP) commands. FCIP commands require an FCIP license. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
fcipPathTest 2 fcipPathTest Tests the data path of the FCIP complex. Synopsis Description Notes fcippathtest [--slot slotnumber][-unit number][-path mode][-nframes count][-length data_length] [-compress mode] Use this command to verify the data paths in the FCIP complex. All data path modes run tests by comparing Fibre Channel frames or data packets transmitted from and received by the network processor due to the designated loopback.
2 fcipPathTest -compress mode Examples Specifies the compression device for which to select or to bypass data compression for the test. By default, data compression is used. This setting is applicable only to path mode 1 and 2. To run the test on slot 2 with PHY loopback sending 10 frames: switch:admin> fcippathtest --slot 2 -path 2 -nframes 10 Running fcippathtest .............. Test Complete: fcippathtest Pass 10 of 10 Duration 0 hr, 1 min & 50 sec (0:1:50:942). passed.
fcLunQuery 2 fcLunQuery Displays a list of LUN IDs and LUNs for all accessible targets. Synopsis Description Notes Operands Examples fclunquery [-w wwn | -s] Use this command to display a list of LUN IDs and LUNs for all accessible targets. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 fcPing fcPing Sends a Fibre Channel Extended Link Service (ELS) Echo request to a pair of ports or to a single destination. Synopsis fcping [--number frames][--length size][--interval wait][--pattern pattern] [--bypasszone] [--quiet] [source] destination [--help] Description Use this command to send a Fibre Channel ELS Echo request to a pair of ports (a source and a destination) or to a single device.
fcPing Examples 2 --pattern pattern Specifies up to 16 "pad" bytes, which are used to fill out the request frame payload sent. This is useful for diagnosing data-dependent problems in the fabric link. The pattern bytes are specified as hexadecimal characters. For example, --pattern ff fills the request frame with instances of the number 1. If a non-byte aligned pattern is specified, the upper nibble of the last pattern byte is filled with zeros.
2 fcPing received reply from 0x20800: 12 bytes time:1008 usec received reply from 0x20800: 12 bytes time:1038 usec received reply from 0x20800: 12 bytes time:1010 usec 5 frames sent, 5 frames received, 0 frames rejected, 0 frames timeout Round-trip min/avg/max = 1006/1044/1159 usec Pinging 22:00:00:04:cf:75:63:85 [0x217d9] with 12 bytes of data: Request timed out Request timed out Request timed out Request timed out Request timed out 5 frames sent, 0 frames received, 0 frames rejected, 5 frames timeout Ro
fcPing 2 switch:admin> fcping 20:00:00:00:c9:3f:7c:b8 Destination: 20:00:00:00:c9:3f:7c:b8 Pinging 20:00:00:00:c9:3f:7c:b8 [0x370501] with 12 bytes of data: received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:825 usec received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:713 usec received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:714 usec received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:741 usec received reply from 20:00:00:00:c9:3f:7c:b8: 12 bytes time:880 usec 5 frames sent
2 fcpLogClear fcpLogClear Clears the FCPD debug information log. Synopsis Description Note fcplogclear Use this command to clear the debug information logged by the Fibre Channel Protocol daemon (FCPD). The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
fcpLogDisable 2 fcpLogDisable Disables the FCPD debug information log (debug command). Synopsis Description Note fcplogdisable Use this command to disable the logging of debug information by the Fibre Channel Protocol daemon (FCPD). The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 fcpLogEnable fcpLogEnable Enables the FCPD debug information log (debug command). Synopsis Description Note fcplogenable Use this command to enable Fibre Channel Protocol daemon (FCPD) logging. Debug information logging is enabled by default. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
fcpLogShow 2 fcpLogShow Displays the FCPD debug information log (debug command). Synopsis Description Note fcplogshow Use this command to display the debug information logged at various stages during the Fibre Channel Protocol daemon (FCPD) device probing. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 fcpProbeShow fcpProbeShow Displays the Fibre Channel Protocol (FCP) probe information. Synopsis fcpprobeshow [slotnumber/]portnumber Description Use this command to display the Fibre Channel Protocol daemon (FCPD) device probing information for the devices attached to the specified F_Port or FL_Port. This information includes the number of successful logins and SCSI INQUIRY commands sent over this port and a list of the attached devices.
fcpRlsShow 2 fcpRlsShow Displays the Fibre Channel Protocol (FCP) Read Link Status (RLS) information. Synopsis Description fcprlsshow [slotnumber/]portnumber Use this command to display the FCP RLS information for an F_Port or FL_Port. This information describes the number of loss-of-signal, loss-of-sync, CRC errors, and other failure events that have been detected on the specified port.
2 fcrBcastConfig fcrBcastConfig Displays or sets the broadcast frame forwarding option. Synopsis fcrbcastconfig --show fcrbcastconfig --enable -f fabric id fcrbcastconfig --disable -f fabric id fcrbcastconfig --help Description Note Operands Use this command to enable or disable the broadcast frame option or to display the current configuration. If no operands are specified, this command displays the usage. By default, frame forward option is enabled.
fcrBcastConfig 2 To display the new configuration: switch:admin> fcrbcastconfig --show Broadcast configuration is disabled for: fid 2 fid 128 SEE ALSO bcastshow, portRouteShow Fabric OS Command Reference 53-1001186-01 229
2 fcrChipTest fcrChipTest Tests the functionality of FC Router FPGA. Synopsis Description fcrchiptest [--slot slotnumber] [-unit number] [-testtype type] Use this command to test the FC Router Field-programmable gate array (FPGA). This test verifies that all SRAM and register data bits in each ASIC can be independently written and read successfully. The method used is to write a walking 1 pattern to each location.
fcrChipTest Examples 2 To run all tests on slot 7 and FC Router FPGA 1: switch:admin> fcrchiptest --slot 7 -unit 1 -testtype 0 Running fcrchiptest .............. Test Complete: fcrchiptest Pass 1 of 1 Duration 0 hr, 0 min & 4 sec (0:0:4:351). passed.
2 fcrConfigure fcrConfigure Sets FC Router configuration parameters. Synopsis Description fcrconfigure Use this command to configure the FC Router parameters for this platform. This is an interactive command. This command cannot execute on a system with the FC Router feature enabled. First disable FC routing by using fosConfig or disable the switch with switchDisable. Note Operands The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
fcrFabricShow 2 fcrFabricShow Displays the FC Routers on a backbone fabric. Synopsis Description fcrfabricshow Use this command to display information about FC Routers that exist in an FC Router backbone fabric. The existing syntax is maintained for IPv6 support. When IPv6 addresses are not configured, the output of fcrFabricShow displays the IPv4 format. The message "No active FC Routers found" is displayed if no active FC Routers are present on the backbone fabric.
2 fcrFabricShow FC Router WWN: 10:00:00:05:1e:39:51:67, Dom ID: 5, Info: 10.33.36.96, "Scimitar" EX_Port FID Neighbor Switch Info (enet IP, WWN, name) -----------------------------------------------------------------------151 2 10.33.35.80 10:00:00:05:1e:38:01:e7 "B10_3"* FC Router WWN: 10:00:00:05:1e:39:a6:7e, Dom ID: 1, Info: 10.32.66.210, 210::10:32:66:210 "Neptune210" EX_Port FID Neighbor Switch Info (enet IP, WWN, name) -----------------------------------------------------------------------17 76 10.
fcrlSan 2 fcrlSan Configures and displays LSAN policies. Synopsis fcrlsan fcrlsan --add -enforce tag | -speed tag fcrlsan --remove -enforce tag | -speed tag fcrlsan --show -enforce | -speed | all fcrlsan --help Description Use this command to add or remove LSAN tags, or to display existing tags in the configuration. LSAN tagging optimizes an FC router's behavior based on a specified subset of LSANS.
2 fcrlSan Examples --show Displays the specified tag from the LSAN tag configuration. --help Displays command usage. -enforce tag Accepts only the LSANs from the edge fabric that matches the specified tag string into the local FCR database. A valid tag is a string of a maximum of eight characters. The maximum configurable enforced tags is eight. -speed tag Allows the FCR to always import these target devices to the hosts specified in the LSANs that match the speed tag.
fcrLsanCount 2 fcrLsanCount Displays or sets the maximum LSAN count. Synopsis Description fcrlsancount [max-lsan-count] Use this command to set or display the maximum number of LSAN zones that can be configured on the edge fabric. By default, the maximum LSAN count is set to 3000, which is also the minimum. This command lets you create more LSANs on your edge fabric, up to 5000, if needed to support additional devices. The maximum number of supported LSAN devices is 10,000.
2 fcrLsanMatrix fcrLsanMatrix Creates, edits and displays LSAN fabric or FCR matrix information, which binds the LSAN Zone and device database information to specified edge fabric IDs or FCRs.
fcrLsanMatrix • • • • 2 Display the information saved in the cache. Clear the information from the cache and revert to the saved value. Display the information that is saved in the persistent memory (CLI command with no option). Display the static and default/dynamic binding of the backbone to show which edge fabrics or FCRs can access each other. • Verify that the information in the cache is valid and does not disrupt existing import/export devices.
2 fcrLsanMatrix Examples For the following example, assume that the backbone has the following online edge fabrics (FIDs): 1, 2, 4, 5, 7, 8, 10 (currently, 14, 19 are not available).
fcrLsanMatrix 52 10:32:16:90:28:dd:d0:03 52 10:32:16:91:24:dd:d0:07 52 10:32:16:91:25:dd:d0:06 78 10:00:00:06:2b:0d:29:31 78 10:32:16:90:29:dd:d0:07 78 10:32:16:91:24:dd:d0:05 78 10:32:16:91:25:dd:d0:03 82 10:00:00:06:2b:0d:29:30 82 10:00:00:06:2b:0d:2f:ed 82 10:00:00:06:2b:0d:33:4d 82 10:00:00:06:2b:0e:4d:c9 Total devices displayed: 12 0bf001 0bf002 01f002 09f002 08f002 09f001 08f001 01f002 03f002 01f001 03f001 82 82 78 52 82 52 82 78 52 78 52 2a0900 520c00 4e3000 482200 2a0a00 48a100 520f00 4e1400 480
2 fcrLsanMatrix To zero out database execute the following commands: fcrlsanmatrix --add -lsan 0 0 fcrlsanmatrix --add -fcr 00:00:00:00:00:00:00:00 00:00:00:00:00:00:00:00 fcrlsanmatrix --apply -all • In a dual backbone configuration, execute fcrlsanmatrix --fabricview on the FCR switches to confirm that the shared edge fabric FIDs have the same access in both backbones.
fcrPathTest 2 fcrPathTest Tests the data path connection between the FC Router FPGA and the central ASIC. Synopsis Description fcrpathtest [--slot slotnumber][-unit number][-path mode][-nframes count] Use this command to verify the data path connecting the FC Router field-programmable gate array (FPGA) and the central ASIC by sending frames from the FC Router FPGA port N transmitter, and looping the frames back into the same port’s receiver. The loopback is accomplished at the parallel loopback path.
2 fcrPathTest Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. This command is supported only on Brocade FR4-18i blades and Brocade 7500 platforms. The switch must be offline for this test to run. Operands This command has the following operands: --slot slotnumber Specifies the slot number on which the diagnostic operates.
fcrPathTest See Also 2 DIAG-STATS The ASIC internal error counters detected an error in the received frame. This error is similar to ERRSTATS, but includes verifying the Tx/Rx frame count statistics. The DIAG-STATS error can be caused by a faulty SFP or indicate deeper problems in the main board or ASIC. Check for a faulty SFP. Replace the cable or SFP if necessary. DIAG-TIMEOUT The port failed to receive back a frame that was sent out.
2 fcrPhyDevShow fcrPhyDevShow Displays the FC Router physical device information. Synopsis Description fcrphydevshow [-a][-f fabricid][-w wwn][-c][-d] Use this command to display the physical (real) devices that are configured to be exported to other fabrics. A device is considered to be configured to be exported to another fabric if it is a member of an LSAN zone.
fcrPhyDevShow Examples 2 To display the physical devices relevant to this FC Router: fcr:admin> fcrphydevshow Device WWN Physical Exists PID in Fabric ----------------------------------------2 10:00:00:00:c9:2b:6a:68 c70000 3 50:05:07:65:05:84:09:0e 0100ef 3 50:05:07:65:05:84:0b:83 0100e8 Total devices displayed: 3 See Also fcrFabricShow, fcrProxyDevShow, fcrRouteShow, lsanZoneShow, switchShow Fabric OS Command Reference 53-1001186-01 247
2 fcrProxyConfig fcrProxyConfig Displays or configures proxy devices presented by an FC Router. Synopsis Description fcrproxyconfig [-s importedFID devWWN slot][-r importedFID devWWN] Use this command to display or set the persistent configuration of proxy devices presented by the local FC Router. If no optional operand is provided, the command displays the persistent proxy device configuration; otherwise, it sets the specified attributes to its new value.
fcrProxyConfig 2 “WWN does not exist in any proxy device slot” is displayed if the WWN does not exist in any slot for the specified edge fabric. “Too many proxy slots configured. Remove some unused proxy device WWNs from their slots using the -r operand and try again.” is displayed if all slots are used for the specified edge fabric. “The specified slot already contains a WWN, overwrite? [y]” is displayed if the specified slot already contains an entry. You are then prompted for overwrite confirmation.
2 fcrProxyDevShow fcrProxyDevShow Displays FC Router proxy device information. Synopsis Description fcrproxydevshow [-a][-f fabricid][-w wwn] Use this command to display the proxy devices presented by FC Router EX_Ports and information about the proxy devices. A proxy device is a virtual device presented in to a fabric by an FC Router. A proxy device represents a real device on another fabric.
fcrProxyDevShow Examples 2 -f fabricid Display the proxy devices in the specified fabric that are relevant to this FC Router. -w wwn Displays proxy devices with the specified port WWN.
2 fcrResourceShow fcrResourceShow Displays FC Router physical resource usage. Synopsis Description fcrresourceshow Use this command to display the FC Router-available resources. The maximum number allowed versus the currently used is displayed for various resources. The command output includes: LSAN Zones The maximum versus the currently used LSAN zones. LSAN Devices The maximum versus the currently used LSAN device database entries. Each proxy or physical device constitutes an entry.
fcrResourceShow Notes 2 Only configured EX/VEX_Ports are displayed The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 fcrRouterPortCost fcrRouterPortCost Displays or sets an FC Router port cost. Synopsis Description fcrrouterportcost [[slotnumber/]portnumber] [cost] Use this command to set or display the cost of the FC router ports. You can set the cost of the link to one of two fixed values: 1000 or 10000. The option 0 sets the cost of the link to the default value based on link type (EX/VEX). The router module chooses the router port path based on the minimum cost per fabric ID (FID) connection.
fcrRouterPortCost 2 To display the cost on an EX_port: switch:admin> fcrrouterportcost 7/10 0 switch:admin> fcrrouterportcost 7/10 Port Cost -----------------------7/10 1000 To set the cost of an EX_Port and display the result: switch:admin> fcrrouterportcost 7/10 10000 switch:admin> fcrrouterportcost 7/10 Port Cost -----------------------7/10 10000 To set the default cost on the EX_port: switch:admin> fcrrouterportcost 7/10 0 switch:admin> fcrrouterportcost 7/10 Port Cost -----------------------7/10 10
2 fcrRouteShow fcrRouteShow Displays FC Router route information. Synopsis Description fcrrouteshow Use this command to display routes through the FC Router backbone fabric to accessible destination fabrics. An FC Router backbone fabric is the fabric that contains the E_Ports of this platform and routes inter-fabric traffic between imported fabrics, creating a meta-SAN. There are FC Router ports that reside on the backbone fabric. These ports are known as NR_Ports.
fcrXlateConfig 2 fcrXlateConfig Configures a translate (xlate) domain's domain ID and state of persistence for both the EX_Port-attached fabric and the backbone fabric.
2 fcrXlateConfig Operands This command has the following operands: fcrxlateconfig Sets the preferred domain ID (1-239) to preferredDomainID for the translate phantom domain and saves the configuration persistently. The translate domain must be inactive to set the preferred domain ID. The following operands are required: importedFID Specifies the fabric ID (1 through 128) of the fabric that contains the translate domain.
fcrXlateConfig 2 To set the preferred domain ID of the translate domain created in fabric 2, which represents the remote fabric 3, to a value of 8: switch:admin> fcrxlateconfig 2 3 8 xlate domain already configured, overwrite?(n) y To clear the preferred domain ID of the translate domain created in fabric 2, which represents remote fabric 3: switch:admin> fcrxlateconfig -r 2 3 xlate domain deleted To enable translate domain persistence: fcr:admin> fcrxlateconfig --enable persistxd Persist XD is enabled
2 fddCfg fddCfg Manages the fabric data distribution configuration parameters. Synopsis fddcfg --showall fddcfg --localaccept policy_list fddcfg --localreject policy_list fddcfg --fabwideset policy_list Description Use this command to manage the fabric data distribution configuration parameters. These parameters control the fabric-wide consistency policy. Switches can be locally configured to allow or reject a security policy.
fddCfg 2 To set the Fabric-Wide Consistency Policy as tolerant, omit the "S". A valid policy set should be of the form "SCC:S;DCC;FCS". To set the fabric-wide policy to NULL (default) or no fabric-wide consistency, use the policy Set "". Supported policies are Switch Connection Control (SCC), Device Connection Control (DCC), and Fabric Configuration Server (FCS). All members specified in a given policy set are automatically distributed to all participating switches in the fabric that support the policy.
2 fdmiCacheShow fdmiCacheShow Displays abbreviated remote FDMI device information, according to remote domain ID. Synopsis Description fdmicacheshow Use this command to display FDMI cache information for remote domains only. The state of each remote domain, identified by its domain ID, is shown to be unknown, known, unsupported, or error. The revision of the switch also displays, followed by the World Wide Name of the switch. For HBAs, only the HBA identifiers and registered port lists are displayed.
fdmiShow 2 fdmiShow Displays detailed FDMI device information. Synopsis Description fdmishow Use this command to display FDMI information for all HBAs and ports. Detailed FDMI information is displayed for local HBAs and ports. This information includes the HBA with its corresponding ports, along with their respective attributes. Only abbreviated FDMI information is shown for HBA and ports on remote switches.
2 ficonClear ficonClear Clears the records from the specified FICON database. Synopsis Description Note Operands ficonclear database Use this command to remove records from the local FICON database. The command effect depends on the specified database. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, “Using Fabric OS commands” and Appendix A, “Command Availability” for details.
ficonCupSet 2 ficonCupSet Sets FICON-CUP parameters for a switch. Synopsis ficoncupset fmsmode enable | disable ficoncupset modereg bitname 0 | 1 ficoncupset MIHPTO seconds Description Use this command to set FICON-CUP (Control Unit Port) parameters for a switch. All parameters can be set while the switch is online. Changes made by this command take effect immediately. A reboot is not required. Use ficonCupShow to display current settings.
2 ficonCupSet To set the ASM bit in the mode register for the switch: switch:admin> ficoncupset modereg ASM 1 Active=Saved Mode bit is set to 1 To set the MIHPTO value to 60 seconds: switch:admin> ficoncupset MIHPTO 60 MIHPTO has been changed to 60 seconds See Also 266 ficonCupShow Fabric OS Command Reference 53-1001186-01
ficonCupShow 2 ficonCupShow Displays FICON-CUP parameters for a switch. Synopsis ficoncupshow fmsmode ficoncupshow modereg [bitname] ficoncupshow MIHPTO Description Note Operands Use this command to display FICON-CUP (Control Unit Port) parameters for a switch. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 ficonCupShow To display the ASM bit in the mode register for the switch: switch:user> ficoncupshow modereg ASM ASM --1 To display the MIHPTO value for the CUP: switch:user> ficoncupshow MIHPTO MIHPTO for the CUP: 60 seconds See Also 268 ficoncupset Fabric OS Command Reference 53-1001186-01
ficonHelp 2 ficonHelp Displays a list of FICON support commands. Synopsis Description Note ficonhelp Use this command to display a list of FICON support commands with descriptions. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 ficonShow ficonShow Displays the contents of the specified FICON database. Synopsis ficonshow database [fabric] where database is one of the following: ficonshow RNID [fabric] ficonshow LIRR [fabric] ficonshow SwitchRNID [fabric] ficonshow RLIR [fabric] ficonshow ILIR [fabric] Description Use this command to display the contents of a FICON database. The ficonShow database operand is the name of the database to display.
ficonShow 2 Blower [unit number] The Blower. FRU Part Number Displays the FRU part number. FRU Serial Number Displays the FRU serial number. Incident Count Displays the incident count. This number increases by 1 for each incident within the individual switch. Link Incident Description Same as Link Incident Type.
2 ficonShow Byte BB 0xe0 Vendor-specific. 0x00 Unspecified class. 0x01 Direct access storage device, if it is a storage port; otherwise, not channel-to-channel capable. 0x02 Magnetic tape, if it is a storage port; otherwise, a reserved field for a channel port. 0x03 Input unit record, if it is a storage port; otherwise, a reserved field for a channel port. 0x04 Output unit, if it is a storage port; otherwise, a reserved field for a channel port 0x05 Reserved field for a channel port.
ficonShow Protocol 2 Displays whether the traffic is using FICON or FCP. Registered Node WWN Displays the device's node World Wide Name associated with the device HBA. Registered Port WWN Displays the device's channel or storage CU port World Wide Name associated with the device HBA. Note Operands Sequence Number Displays the sequence number of the self-describing node. Serial Number Displays the switch serial number. Switch node WWN Displays the switch node World Wide Name.
2 ficonShow Sequence Number: tag: 0000000169CA 102b } {Fmt Type PID Registered Port WWN Registered Node WWN flag Parm 0x18 N 502e00 50:05:07:64:01:40:0f:ca 50:05:07:64:00:c1:69:ca 0x10 0x200105 Type number: 002064 Model number: 101 Manufacturer: IBM Plant of Manufacture: 02 Sequence Number: 0000000169CA tag: 052e } } To display the local and remote LIRR database: switch:admin> ficonshow LIRR fabric {Fmt Type PID Listener Port WWN Switch Port WWN Listener Type 0x18 N 502b00 50:05:07:64:01:00:15:8d 20:2b
ficonShow 2 Plant of Manufacture: 02 Sequence Number: 0000000169CA tag: 2e00 Switch Port WWN Switch Node WWN 20:2e:00:60:69:80:1e:4e 10:00:00:60:69:80:1e:4e Switch Part Number: 060-0001501-05 Switch Serial Number: 0FT02X801E4E Domain: 20480 Flag 0x00 Node Parameters 0x200a2e } } The local RLIR database has 1 entry.
2 fipsCfg fipsCfg Configures FIPS (Federal Information Processing Standards) mode. Synopsis fipscfg --enable [fips | selftests | bootprom] fipscfg --disable [fips | selftests | bootprom] fipscfg --zeroize fipscfg --show | --showall fipscfg --force fips fipscfg --verify fips Description Notes Use this command to configure FIPS mode on the switch. In this mode, only FIPS-compliant algorithms are allowed.
fipsCfg --force fips 2 This option enables FIPS mode even if prerequisites are not met, except under the following two conditions: 1. In a dual-CP system if HA is not in sync between the two CPs. 2. If selftests is in a disabled state. --verify fips Scans the prerequisites for enabling FIPS and print the failure/success cases. --disable | --enable bootprom Disables or enables the Boot Programmable Read-Only Memory (Boot PROM) on the switch. Boot PROM access is blocked in FIPS mode.
2 fipsCfg To enable FIPS after prerequisites have been met: switch:admin> fipscfg --enable fips FIPS mode has been set to : Enabled Please reboot the system switch:admin> fipscfg --show FIPS mode is : Enabled See Also 278 none Fabric OS Command Reference 53-1001186-01
firmwareCommit 2 firmwareCommit Commits switch firmware. Synopsis Description firmwarecommit Use this command to commit a firmware download to a CP. This command copies an updated firmware image to the secondary partition and commits both partitions of the CP to an updated version of the firmware. This must be done after each firmware download and after the switch has been rebooted and a sanity check is performed to make sure the new image is fine.
2 firmwareDownload firmwareDownload Downloads firmware from a remote host, a local directory, or a USB device.
firmwareDownload 2 For each standalone switch in your fabric, complete all firmware download changes before issuing the firmwareDownload command on the next switch to ensure a nondisruptive download. If firmwareDownload is interrupted due to an unexpected reboot as a result of a software error or power failure, the command automatically recovers the corrupted secondary partition. Wait for the recovery to complete before starting another firmwareDownload.
2 firmwareDownload pfile Specify a fully qualified path for the firmware pfile. Absolute path names may be specified using forward slashes (/). passwd Specify a password. This operand can be omitted, if the firmware is accessible through a local directory or an attached USB device, or if no password is required by the FTP server. This operand is required when accessing an SSH server. -p scp|ftp Specify the file transfer protocol. Valid values are ftp and scp. The values are not case-sensitive.
firmwareDownload 2 Do you want to continue [Y]: y The firmware is being downloaded to the Standby CP. It may take up to 10 minutes. To download the firmware to both CPs on a dual-CP chassis with an attached USB device (You would execute the same command on a single-CP switch with USB support. Output may vary depending on platform.): switch:admin> firmwaredownload -U v6.2.0 Checking system settings for firmwaredownload... Protocol selected: USB Trying address-->AF_INET IP: 127.1.1.
2 firmwareDownload virtualization applications on these blades. WARNING: YOU HAVE ELECTED TO DISABLE THE VERSION COMPATIBILITY CHECKING FEATURE. THIS CAN CAUSE THE VIRTUALIZATION SERVICES TO STOP WORKING. If you want to check the version compatibility, please exit and re-enter this command without the "-c" option. Do you want to continue [Y]: y To download SAS firmware and remove the installed SA image at the same time: switch:admin> firmwaredownload -a sas -e 192.168.126.
firmwareDownloadStatus 2 firmwareDownloadStatus Displays the status of a firmware download. Synopsis Description firmwaredownloadstatus Use this command to display an event log that records the progress and status of events during FOS, SAS, and SA firmwaredownload. The event log is created by the current firmwaredownload command and is kept until another firmwaredownload command is issued. There is a timestamp associated with each event.
2 firmwareDownloadStatus To display the status of a firmware download on a switch: switch:admin> firmwaredownloadstatus [1]: Fri Feb 15 22:17:03 2007 Firmware is being downloaded to the switch. This step may take up to 30 minutes. [2]: Fri Feb 15 22:20:54 2007 Firmware has been downloaded to the secondary partition of the switch. [3]: Fri Feb 15 22:22:19 2007 The firmware commit operation has started. This may take up to 10 minutes.
firmwareDownloadStatus 2 Slot 8 (FR4-18i): Firmware commit has started on the blade. This may take up to 10 minutes. [10]: Mon Dec 19 18:50:51 2007 Slot 8 (FR4-18i): The commit operation has completed successfully. [11]: Mon Dec 19 18:55:39 2007 Slot 5 (CP0, active): Firmware has been downloaded successfully on Standby CP. [12]: Mon Dec 19 18:55:46 2007 Slot 5 (CP0, active): Standby CP reboots. [13]: Mon Dec 19 18:57:06 2007 Slot 5 (CP0, active): Standby CP booted successfully with new firmware.
2 firmwareKeyShow firmwareKeyShow Displays the public key used for signed firmware validation. Synopsis Description Notes firmwarekeyshow This command displays the contents of the public key used for validating the integrity of firmware images when signed firmware validation is enabled. A firmware key should be installed on every switch as a part of the Fabric OS installation. The presence of a firmware key does not imply that the firmware signature is checked during firmwareDownload.
firmwareKeyUpdate 2 firmwareKeyUpdate Updates the public key used for signed firmware validation. Synopsis firmwarekeyupdate firmwarekeyupdate [-p ftp|scp] host,user,keyfile,passwd firmwarekeyupdate -U keyfile Description Use this command to update the public key used for firmware signature validation. The firmware key can be updated over the network, or, if the switch supports this option, from an attached USB device.
2 firmwareKeyUpdate Examples user Specify a user name for FTP or SSH server access. This operand can be omitted, if the firmware key is accessible on a local directory or by anonymous FTP server access. A user name other than “anonymous” is required for SSH server access. keyfile Specify a fully qualified path for the firmware keyfile. Absolute path names may be specified using forward slashes (/).
firmwareRestore 2 firmwareRestore Restores the former active firmware image. Synopsis Description firmwarerestore Use this command to restore the former active Fabric OS firmware image. This command can only be run if auto commit was disabled during the firmwaredownload. This command cannot be used to restore SAS and SA images. After a firmwaredownload and a reboot (with auto commit disabled), the downloaded firmware becomes active.
2 firmwareShow firmwareShow Displays the Fabric OS versions on all firmware partitions in the system. Synopsis Description Note firmwareshow Use this command to display the FOS, SAS, and SA firmware versions. The command shows the firmware versions on both the primary and secondary partitions of the storage device. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
fosConfig 2 fosConfig Displays or modifies Fabric OS features. Synopsis fosconfig --enable feature fosconfig --disable feature fosconfig --show Description Use this command to enable or disable a feature, or to display the current operating status of features on a switch. This command can be run while the switch is online.
2 fosConfig --disable feature Disables a feature on the switch. Valid values for feature are: fcr Disables the FC Routing service on the switch. All enabled EX_Ports and VEX_Ports on the switch must be offline for this command to succeed. . To use this command to disable the FC Routing service only instead of disabling the switch, issue this command, then change the BB fabric ID using fcrConfigure.
fosConfig 2 To enable Virtual Fabrics: switch:admin> fosconfig --enable vf WARNING: This is a disruptive operation that requires a reboot to take effect. All EX ports will be disabled upon reboot. Would you like to continue [Y/N]y To disable Virtual Fabrics: switch:admin> fosconfig --disable vf WARNING: This is a disruptive operation that requires a reboot to take effect.
2 fruReplace fruReplace Provides an interactive interface to help replace a field replaceable unit (FRU). Synopsis frureplace fru Description Use this command to replace a FRU. The command automatically performs the necessary backup and restore operations to accommodate the replacement. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
fspfShow 2 fspfShow Displays Fabric Shortest Path First (FSPF) protocol information. Synopsis Description fspfshow Use this command to display FSPF protocol information and internal data structures of the FSPF module. The command displays the fields listed in the following table. TABLE 12 Note Operands fspfShow display fields Field Description version Version of FSPF protocol. domainID Domain number of local switch. switchOnline State of the local switch.
2 fspfShow Examples To display FSPF protocol information: switch:admin> fspfshow See Also 298 version domainID switchOnline domainValid isl_ports[0] isl_ports[1] trunk_ports[0] trunk_ports[1] f_ports[0] f_ports[1] seg_ports[0] seg_ports[1] active_ports[0] active_ports[1] minLSArrival minLSInterval LSoriginCount startTime fspfQ fabP agingTID agingTo lsrDlyTID lsrDelayTo lsrDelayCount ddb_sem = = = = = = = = = = = = = = = = = = = = = = = = = = 2 131 TRUE TRUE 0x00000000 0x74000000 0x00000000 0x0200000
fwAlarmsFilterSet 2 fwAlarmsFilterSet Enables or disables alarms for Fabric Watch. Synopsis Description Notes fwalarmsfilterset [mode] Use this command to configure alarm filtering for Fabric Watch. By turning off the alarms, all non-environment class alarms are suppressed. By turning on the alarms, all class alarms are generated. This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 fwAlarmsFilterShow fwAlarmsFilterShow Displays alarm filtering for Fabric Watch. Synopsis Description Notes fwalarmsfiltershow Use this command to display whether alarm filtering is enabled or disabled. This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
fwClassInit 2 fwClassInit Initializes all classes under Fabric Watch. Synopsis Description Notes fwclassinit Use this command to initialize all classes under Fabric Watch. The command should only be used after installing a Fabric Watch license to start licensed Fabric Watch classes. Refer to fwConfigure for a list of classes. This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 fwConfigReload fwConfigReload Reloads the Fabric Watch configuration. Synopsis Description Notes fwconfigreload Use this command to reload the Fabric Watch configuration. This command should only be used after downloading a new Fabric Watch configuration file from a host. This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
fwConfigure 2 fwConfigure Displays and modifies the Fabric Watch configuration. Synopsis fwconfigure fwconfigure --enable --port portNumber fwconfigure --disable --port portNumber Description Use this command to display and modify threshold information for the Fabric Watch configuration. Switch elements monitored by Fabric Watch are divided into classes, which are further divided into areas. Each area can include multiple thresholds.
2 fwConfigure TABLE 13 304 fwConfigure Fabric Watch classes and areas Class Area Fabric E_Port downs Fabric reconfigure Domain ID changes Segmentation changes Zone changes Fabric<->QL Fabric logins SFP state changes E_Port Link loss (E_Port) Sync loss (E_Port) Signal loss (E_Port) Protocol error (E_Port) Invalid words (E_Port) Invalid CRCS E_Port) RX Performance (E_Port) TX Performance (E_Port) State Changes (E/VE_Port) Utilization (VE_Port) Packet Loss (VE_Port) F/FL_Port (Optical) Same as Port
fwConfigure 2 In Access Gateway mode, only the following classes are supported. F/FL_Port (Copper) class is supported only on Embedded platforms. .
2 fwConfigure Operands This command has the following optional operands: --enable --port portNumber Enables all thresholds associated with a certain port. --disable --port portNumber Disables all thresholds associated with a certain port.
fwConfigure 2 Select a class => : (1..6) [6] 1 1 : Temperature 2 : Fan 3 : Power Supply 4 : return to previous page Select an area => : (1..
2 fwFruCfg fwFruCfg Displays or modifies FRU state alert configuration. Synopsis Description Notes fwfrucfg [--show] Use this command to configure field-replaceable unit (FRU) states and actions. Based on these configuration settings, Fabric Watch generates action when a FRU state changes. To configure email alerts, use fwMailCfg. This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
fwHelp 2 fwHelp Displays Fabric Watch command information. Synopsis Description Note fwhelp Use this command to display the commands that configure Fabric Watch. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 fwMailCfg fwMailCfg Displays and configures Fabric Watch email alerts. Synopsis Description fwmailcfg Use this command to display or modify the configuration and status of the Fabric Watch email alert in the switch. Switch elements monitored by Fabric Watch are divided into classes, and email alerts are based on the classes. Each class can configure one email address as the alert message's receiver.
fwMailCfg 2 1 : Show Mail Configuration Information 2 : Disable Email Alert 3 : Enable Email Alert 4 : Send Test Mail 5 : Set Recipient Mail Address for Email Alert 6 : Relay Host IP Configuration 7 : Quit Select an item => : (1..
2 fwPortDetailShow fwPortDetailShow Displays the port information for specified user ports. Synopsis Description fwportdetailshow [--p portNumber] | [--s portState] Use this command to print the overall status of a specified port. The output of this command is different for IPv4 and IPv6 addresses.
fwPortDetailShow --s portState 2 Yields a port detail report for the specified portState. Valid portState entries are: h Report based on all healthy ports m Report based on all marginal ports f Report based on all faulty ports o Report based on all offline ports If no option is specified, all ports are displayed.
2 fwPortDetailShow To retrieve a port detailed report: switch:user> fwportdetailshow --s h Port Detail Report Switch Name: switch IP address: 192.168.163.
fwSamShow 2 fwSamShow Generates switch availability monitor (SAM) report. Synopsis Description Notes fwsamshow Use this command to display a switch availability monitor (SAM) report. This report displays uptime and downtime for each port and enables you to check if a particular port is failing more often than the others. The information displayed includes total uptime, total downtime, number of faulty occurrences, and total percent of downtime for each port.
2 fwSamShow 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 See Also 316 U U U U U U U U U U T T T T U U U U U U U U U U F U U U U U U U U U U U U U U U U U U U U U U U U U 0 0 0 0 0 0 0 0 0 0 99 99 100 99 0 0 0 0 0 0 0 0 0 0 99 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
fwSet 2 fwSet Sets port persistence time. Synopsis Description Notes fwset --port --persistence seconds Use this command to set port persistence time, a parameters controlled by Fabric Watch. Port persistence time specifies the time in seconds during which a port must persistently be in a marginal state before being labeled as such. This command requires a Fabric Watch license. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 fwSetToCustom fwSetToCustom Sets boundary and alarm levels to custom values. Synopsis Description fwsettocustom Use this command to set boundary and alarm levels to custom values for all classes and areas in Fabric Watch. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. • Factory default settings are automatically enabled. These settings vary depending on hardware platform, and cannot be modified.
fwSetToCustom 2 1 : Temperature 2 : Fan 3 : Power Supply 4 : return to previous page Select an area => : (1..
2 fwSetToCustom 8 : change custom buffer 18 : return to previous page 9 : apply threshold boundary changes 10 : cancel threshold boundary changes Select choice => : (1..
fwSetToDefault 2 fwSetToDefault Returns boundary and alarm levels to default values. Synopsis Description fwsettodefault Use this command to return boundary and alarm levels to defaults for all classes and areas in Fabric Watch. Fabric Watch uses two types of settings: factory default settings and user-defined custom settings. • Factory default settings are automatically enabled. These settings vary depending on hardware platform and cannot be modified.
2 fwSetToDefault 3 : Power Supply 4 : return to previous page Select an area => : (1..
fwSetToDefault 2 10 : cancel threshold boundary changes Select choice => : (1..
2 fwShow fwShow Displays the class thresholds monitored by Fabric Watch. Synopsis Description fwshow [--port --persistence] | [--disable --port] Use this command to display the thresholds monitored by Fabric Watch. This command also displays the port persistence time and ports with all disabled thresholds.
fwShow 5 : 6 : 7 : 8 : 9 : 10 : 11 : 12 : Select 2 E-Port class F/FL Port (Optical) class Alpa Performance Monitor class End-to-End Performance Monitor class Filter Performance Monitor class Security class Resource class Quit an item => : (1..12) [12] 1 1 : Temperature 2 : Fan 3 : Power Supply 4 : return to previous page Select an area => : (1..
2 fwShow Event 1 occurred 10 times, last at 16:49:02 on 12/09/2011 * Event 5 occurred 1 time, last at 16:30:23 on 12/09/2011 Callbacks: No callbacks are registered.
h 2 h Displays shell history. Synopsis h history Description Use this command to view the shell history. The shell history mechanism is similar to the UNIX Korn shell history facility. The h command displays the 20 most recent commands typed into the shell; the oldest commands are replaced as new ones are entered.
2 haDisable haDisable Disables the High Availability feature. Synopsis Description Note hadisable Use this command to disable the High Availability (HA) feature on a switch. If the HA feature is already disabled, this command does nothing. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, “Using Fabric OS commands” and Appendix A, “Command Availability” for details.
haDump 2 haDump Displays High Availability status information. Synopsis Description hadump Use this command to display information about the status of the High Availability (HA) feature on a switch.
2 haDump Examples To view information about the High Availability feature status: switch:admin> hadump Local CP (Slot 6, CP1): Active, Cold Recovered Remote CP (Slot 5, CP0): Standby, Healthy HA enabled, Heartbeat Up, HA State synchronized SWITCH Ethernet IP Address: 10.32.227.64 Ethernet Subnetmask: 255.255.240.0 Fibre Channel IP Address: 220.220.220.64 Fibre Channel Subnetmask: 255.255.240.0 CP0 Ethernet IP Address: 10.32.227.66 Ethernet Subnetmask: 255.255.240.0 Host Name: cp0 Gateway IP Address: 10.
haEnable 2 haEnable Enables the High Availability feature. Synopsis Description Note haenable Use this command to enable the High Availability (HA) feature on a switch. If the HA feature is already enabled, this command does nothing. The execution of this command is subject to Virtual Fabric or Admin Domain Restrictions that may be in place. Refer to chapter 1, “Using Fabric OS commands” and Appendix A, “Command Availability” for details.
2 haFailover haFailover Forces the failover mechanism so that the standby control processor (CP) becomes the active CP. Synopsis Description Notes hafailover Use this command to force the failover mechanism to occur so that the standby CP becomes the active CP. In case the active and standby CPs are not synchronized or the system is not in redundant mode, the command aborts.
haShow 2 haShow Displays control processor (CP) status. Synopsis Description hashow Use this command to display control processor status. The display includes: • • • • • Local CP state (slot number and CP ID), warm or cold, recovering or recovered. Remote CP state (slot number and CP ID). High Availability (enabled or disabled). Heartbeat (up or down). The Health of the standby CP is defined as follows: Healthy The standby CP is running and the background health diagnostic has not detected any errors.
2 haShow Examples To display CP status on a Brocade 48000, first on a healthy standby CP and then on a faulty standby CP: switch:admin> hashow Local CP (Slot 6, CP1): Active, Cold Recovered Remote CP (Slot 5, CP0): Non-Redundant switch:admin> hashow Local CP (Slot 6, CP1): Active, Warm Recovered Remote CP (Slot 5, CP0): Standby, Failed Backplane PCI fail, severity: CRITICAL HA enabled, Heartbeat Up, HA State not in sync To display CP status on a Brocade DCX with a healthy standby CP: switch:admin> hasho
haSyncStart 2 haSyncStart Enables High Availability state synchronization. Synopsis Description Note Examples hasyncstart Use this command to enable the High Availability (HA) state synchronization. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, “Using Fabric OS commands” and Appendix A, “Command Availability” for details.
2 haSyncStop haSyncStop Disables High Availability state synchronization. Synopsis Description Notes hasyncstop Use this command to temporarily disable High Availability (HA) synchronization. Disabling HA synchronization may cause failover to be disruptive. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, “Using Fabric OS commands” and Appendix A, “Command Availability” for details.
help 2 help Displays help information for commands. Synopsis Description help [command] Use this command without an operand to display an alphabetical list commands for which help is available. At the end of the list are some additional commands which display more lists of grouped commands for a particular subsystem; for example, diagHelp displays a list of diagnostic commands.
2 historyLastShow historyLastShow Displays the latest entry in the field replaceable unit (FRU) history log. Synopsis Description historylastshow Use this command to display the latest entry of the history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and World Wide Name (WWN) cards. The type of FRU supported depends on the hardware platform. Each history record contains three lines of information.
historyMode 2 historyMode Displays or sets the mode of the field replaceable unit (FRU) history log. Synopsis Description historymode [ rot | fi ] Use this command to display or set the mode of the history buffer, which records the insertion and removal of FRUs on a switch or chassis. This command supports two modes of handling new log entries once the history buffer has reached its maximum size: Rotating mode Any new entry exceeding the maximum buffer size overwrites the oldest entry in the log.
2 historyShow historyShow Displays the entire field replaceable unit (FRU) history log. Synopsis Description historyshow Use this command to display the entire history log, which records insertion and removal events for field-replaceable units (FRUs), such as blades, power supplies, fans, and World Wide Name (WWN) cards. The type of FRU supported depends on the hardware platform. Each history record contains three lines of information.
historyShow WWN Unit 1 Factory Part Number: Factory Serial Number: Inserted at Tue Aug 14 11:03:45 2001 40-0000031-03 1013456800 SW BLADE Slot 3 Factory Part Number: Factory Serial Number: Removed at Tue Aug 14 12:10:09 2001 60-0001532-03 1013456800 CP BLADE Slot 6 Factory Part Number: Factory Serial Number: Removed at Tue Aug 14 13:45:07 2001 60-0001604-02 FP00X600128 SW BLADE Slot 3 Factory Part Number: Factory Serial Number: Inserted at Tue Aug 14 13:53:40 2001 60-0001532-03 1013456800 CP BLADE
2 httpCfgShow httpCfgShow Displays the Java plug-in version used by Web. Synopsis Description Note httpcfgshow Use this command to display the version of the Java plug-in supported by Web Tools. This command also displays the URL from which the plug-in can be downloaded. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, “Using Fabric OS commands” and Appendix A, “Command Availability” for details.
i 2 i Displays a process summary. Synopsis Description i [processID] Use this command to display information about a specified process or about all processes running on the local switch. One line is displayed per process. Fields displayed with this command include those shown in Table 16.
2 i Operands This command has the following operand: processID Examples Specifies the process name or process ID for the process to display.
iclCfg 2 iclCfg Enables or disables Inter-chassis links (ICL). Synopsis iclcfg --enable slot/icl_group iclcfg --disable slot/icl_group iclcfg --persistentenable slot/icl_group iclcfg --persistentdisable slot/icl_group iclcfg --help Description Notes Use this command to enable or disable an inter-chassis link (ICL) or to enable or disable an ICL persistently. The command enables or disables the ICL by enabling or disabling the ports associated with the link.
2 iclCfg To enable the ICL for ports 16-31 persistently: switch:user> iclcfg --persistentdnable 8/1 See also 346 none Fabric OS Command Reference 53-1001186-01
ifModeSet 2 ifModeSet Sets the link operating mode for a network interface. Synopsis Description ifmodeset [“interface”] Use this command to set the link operating mode for a network interface. An operating mode is confirmed with a y or yes at the prompt. If the operating mode selected differs from the current mode, the change is saved and the command exits. Changing the link mode is not supported for all network interfaces or for all Ethernet network interfaces.
2 ifModeSet serial console port. Are you sure you really want to do this? (yes, y, no, n): [no] y Proceed with caution. Auto-negotiate (yes, y, no, n): [no] y Advertise 100 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 100 Mbps / Half Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Full Duplex (yes, y, no, n): [yes] y Advertise 10 Mbps / Half Duplex (yes, y, no, n): [yes] y Committing configuration...done.
ifModeShow 2 ifModeShow Displays the link operating mode and MAC address for a network interface. Synopsis Description ifmodeshow interface Use this command to display the link operating mode and MAC address for a network interface. On the CP of a Brocade DCX or DCX-S4, this command supports eth0 and eth3 as interface parameters. On all other platforms, only eth0 is supported. The CP on a Brocade DCX or DCX-S4 has two external physical Ethernet management ports, eth1 and eth3.
2 ifModeShow To display the active interface: ras010:root> ifmodeshow bond0 Currently Active Slave: eth0 See Also 350 ifModeSet Fabric OS Command Reference 53-1001186-01
interfaceShow 2 interfaceShow Displays FSPF interface information. Synopsis Description interfaceshow [slotnumber/][portnumber] Use this command to display the two data structures associated with FSPF interfaces (E_Ports) on the switch: • The permanently allocated interface descriptor block (IDB). • The neighbor data structure. This data structure is allocated when a switch port becomes an E_Port.
2 interfaceShow nghbId Domain ID of the neighbor (adjacent) switch. idbNo IDB number. Should be equal to port_number. remPort Port number on the remote switch connected to this port. nflags Internal FSPF flags. initCount Number of times this neighbor was initialized without the interface going down. lastInit Time of the last initializing state, NB_ST_INIT, on this interface. firstHlo Time of the first hello sent on this interface.
interfaceShow Note Operands attLsuOut Number of attempted transmissions of LSUs to the neighbor switch. nLsuOut Number of LSUs transmitted to the neighbor switch. attLsaOut Number of attempted transmissions of LSAs to the neighbor switch. nLsaOut Number of LSAs transmitted to the neighbor switch. 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 interfaceShow delay lastScn &dbRetransList &lsrRetransList &lsrAckList inactTID helloTID dbRtxTID lsrRtxTID inactTo helloTo rXmitTo nCmdAcc nInvCmd nHloIn nInvHlo nLsuIn nLsaIn attHloOut nHloOut attLsuOut nLsuOut attLsaOut nLsaOut See Also 354 = = = = = = = = = = = = = = = = = = = = = = = = 1 16 0x1008c6a0 0x1008c6c4 0x1008c6e8 0x1008c768 0x1008c7a0 0x1008c7d8 0x1008c848 80000 2000 5000 7 0 2 0 2 3 2 2 3 3 2 2 nbrStateShow, portShow, switchShow Fabric OS Command Reference 53-1001186-01
interopMode 2 interopMode Enables or disables Brocade switch interoperability with McDATA switches. Synopsis Description interopmode [mode [-z McDataDefaultZone] [-s McDataSafeZone]] Use this command to enable or disable Brocade switch interoperability with McDATA switches within a Brocade fabric. Fabric OS v6.0.0 introduced a McDATA Enterprise OS (M-EOS)-compatible McDATA Open Fabric Mode (interopMode 3) on all platforms that support McDATA Fabric Mode (interopMode 2).
2 interopMode • Default zoning should be off, but there is no check that it is turned off. The configuration is reset. If you have a defined or effective configuration and default zoning is on, when you disable the switch and change to McDATA Open Fabric mode, you are informed that all configurations will be lost and that the system will reboot. Responding “yes” puts the system in McDATA Open Fabric mode with default zoning and safe zoning turned off. In v6.0.
interopMode 2 Valid McDataSafeZone: 0 (disabled), 1 (enabled) 3: to turn McDATA Open Fabric mode on To turn Safe Zone on while in interopmode 2: switch:admin> interopMode 2 -s 1 InteropMode: McDATA Fabric Default Zone: Off Safe Zone: On To disable interoperability mode on a disabled switch: switch:admin> interopmode O Interop mode is disabled The switch effective configuration will be lost. The system will reboot to allow the change to take effect.
2 iodDelayReset iodDelayReset Resets the user-defined IOD delay settings to default values. Synopsis Description ioddelayreset domain_id Use this command to reset the user-defined IOD delay settings to default values (-1). This command resets IOD delay values for a specified domain ID that was previously configured with the iodDelaySet command. The switch must be disabled before IOD delay can be reset. Notes The iodDelaySet command is deprecated in Fabric OS v6.2.0.
iodDelayShow 2 iodDelayShow Displays the user-defined IOD delay settings for specified domains. Synopsis Description Note ioddelayshow [ domain_id ] Use this command to display the user-defined IOD delay settings for all domains in the fabric or for a specified domain ID. This command only displays delay values for domain IDs, for which the IOD delay parameter has been previously set with the iodDelaySet command. The command does not display defaults values.
2 iodReset iodReset Disables in-order delivery (IOD) on a switch. Synopsis Description iodreset Use this command to disable in-order delivery enforcement on the local switch. IOD is disabled by default, and can only be disabled after it has been enabled with the iodSet command. This command disables the legacy IOD enforcement only. Disabling IOD allows faster re-routing after a fabric topology change, but it may cause out-of-order delivery of frames during fabric topology changes.
iodSet 2 iodSet Enables in-order delivery (IOD) with or without frame drop. Synopsis iodset iodset --enable -losslessDLS iodset --disable -losslessDLS iodset --show iodset --show Description Use this command to enforce in-order delivery of frames during a fabric topology change and to enable dynamic load sharing (DLS) without frame loss. In a stable fabric, frames are always delivered in order, even when the traffic between switches is shared among multiple paths.
2 iodSet The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. Operands This command has the following operands: --enable -lossLessDls Enables the lossless DLS feature. Frame loss is reduced while the path is rerouted. If IOD is set on the switch, this command adds lossless DLS to the existing IOD legacy mode.
iodShow 2 iodShow Displays the in-order delivery (IOD) setting. Synopsis Description Note iodshow Use this command to display the IOD setting on the switch. By default, IOD is disabled. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 ipAddrSet ipAddrSet Sets the Ethernet and FC IP addresses. Synopsis ipaddrset [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-cp cp_number | -chassis ] [-ipv6 ] [--add x:x:x:x:x:x:x/n | --delete] ipaddrset [-slot slot_umber] [-eth0 | -eth1] [--add x.x.x.x/n | --delete] ipaddrset [-slot slot_number] -gate [--add x.x.x.
ipAddrSet 2 • Use the -auto and -noauto options to enable or disable stateless IPv6 auto configuration. • Use the -ls option with appropriate arguments to set or delete the IPv4 Fibre Channel address and prefix for the IPFC interface of a logical switch. In a Virtual Fabric environment, each logical fabric is represented by a separate IPFC network interface. Each of these network interfaces can be assigned a unique IPv4 FC address and prefix.
2 ipAddrSet -slot number On a chassis with a blade processor (BP), specifies the slot number. On standalone platforms with a hidden BP, such as the AP76500, this parameter is not accepted. -ipv6 [-auto | -noauto] Enables or disables stateless IPv6 auto configuration on a switch or chassis. When auto configuration is enabled, the host automatically performs configuration of IPv6 addresses and periodic non-disruptive re-configuration. By default, auto configuration is disabled.
ipAddrSet 2 To configure a local IPv4 Ethernet address on a Brocade FC4-16E in a chassis (prefix required): switch:admin> ipaddrset -slot 1 -eth0 --add 10.12.34.123/24 To configure a local IPv4 Ethernet address on an AP7600 with a hidden BP: switch:admin>ipaddrset -eth0 --add 10.12.34.123/24 To configure an IPv4 FC address for the IPFC interface associated with a logical switch with fabric ID 123: switch:admin>ipaddrset -ls 123 --add 11.1.2.4/24 IP address is being changed...Done.
2 ipAddrSet Interactive command usage examples To set the IPv4 address details for a switch chassis in interactive mode: switch:admin> ipaddrset -chassis Ethernet IP Address [192.168.166.148]: Ethernet Subnetmask [255.255.255.0]: Committing configuration...Done. To enable DHCP on a standalone, non-AP platform: switch:admin> ipaddrset Ethernet IP Address [192.168.74.102]: Ethernet Subnetmask [255.255.255.0]: Gateway IP Address [192.168.74.
ipAddrShow 2 ipAddrShow Displays IP address information for a switch or control processor (CP). Synopsis ipaddrshow ipaddrshow [-cp cp_number] | -chassis ipaddrshow -slot slot_numb [-eth0 | -eth1 | -gate] Description Use this command to display the IP addresses configured in the system. The -cp option displays the IP address for a specified CP on modular platforms, or use the command without arguments to display the IP address on a standalone switch, or the IP addresses for both CPs on a chassis.
2 ipAddrShow • stateless - Acquired through stateless auto configuration. IP Address state: • tentative • preferred • deprecated Refer to the RFC 2462 specification for more information. On modular platforms with intelligent blades, the addresses configured for each slot can be shown with the -slot option. On standalone platforms, all command options are ignored. Note Operands Examples The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
ipAddrShow 2 Backplane IP address of CP0 : 10.0.0.5 Backplane IP address of CP1 : 10.0.0.
2 ipfilter ipfilter Manages the IP filter policies.
ipfilter 2 case. The policy type identifies the policy as an IPv4 or IPv6 filter. You can create a maximum of eight IP filter policies. --create policyname -type ipv4 | ipv6 Creates an IP filter policy with the specified name and type. The policy created is stored in a temporary buffer and is lost if the policy is not saved to the persistent configuration. --clone policyname -from src_policyname Creates a replica of an existing IP filter policy.
2 ipfilter -sip Specifies the source IP address. For filters of type IPv4, the address must be a 32-bit address in dot notation, or a CIDR-style IPv4 prefix. For filters of type IPv6, the address must be a 12- bit IPv6 address in any format specified by RFC, or a CIDR-style IPv6 prefix. -dp Specifies the destination port number, a range of port numbers, or a service name. -proto Specifies the protocol type, for example tcp or udp. -act Specifies the permit or deny action associated with this rule.
ipfilter Rule 1 2 3 4 5 6 7 8 9 10 11 12 Source IP any any any any any any any any any any any any Protocol tcp tcp tcp tcp tcp tcp tcp udp udp udp tcp udp 2 Dest Port Action 22 permit 23 permit 897 permit 898 permit 111 permit 80 permit 443 permit 161 permit 111 permit 123 permit 600 - 1023 permit 600 - 1023 permit Name: ex1, Type: ipv6, State: defined (modified) Rule Source IP Protocol 1 fec0:60:69bc:60:260:69ff:fe80:d4a tcp Dest Port 23 Action permit To activate the IP Filter policy “ex1”: switc
2 ipfilter To create an IPv4-type IP filter policy: switch:admin> ipfilter --create ex2 -type ipv4 To add a rule to the created policy “ex2”: switch:admin> ipfilter --addrule ex2 -sip 10.32.69.
ipsecConfig 2 ipsecConfig Configures Internet Protocol security (IPsec) policies for Ethernet management interfaces.
2 ipsecConfig • • • • Modify existing IPsec and IKE policies. Delete existing policies and SAs from the configuration database. Flush existing SAs from the kernel SA database (SADB). Display policy parameters. Representation of IP addresses When configuring IPsec policies, IP addresses and ports must be specified in the following format: IP address IPv4 addresses are expressed in dotted decimal notation consisting of numeric characters (0-9) and periods (.), for example, 203.178.141.194.
ipsecConfig 2 type Specifies the policy to be created. Supported policies include: policy ips Creates or modifies an IPsec policy. This policy determines the security services afforded to a packet and the treatment of a packet in the network. An IPsec policy allows classifying IP packets into different traffic flows and specifies the actions or transformations performed on IP packets on each of the traffic flows.
2 ipsecConfig -mode tunnel|transport Specifies the IPsec transform mode. In tunnel mode, the IP datagram is fully encapsulated by a new IP datagram using the IPsec protocol. In transport mode, only the payload of the IP datagram is handled by the IPsec protocol inserting the IPsec header between the IP header and the upper-layer protocol header. -sa-proposal name Specifies the SA proposal to be included in the transform. You must create the SA proposal first before you can include it in the transform.
ipsecConfig 2 -ltbyte number Specifies the SA proposal’s lifetime in bytes. The SA expiries after the specified number of bytes have been transmitted. This operand is optional. sa Defines the Security Association. An SA specifies the IPsec protocol (AH or ESP), the algorithms used for encryption and authentication, and the expiration definitions used in security associations of the traffic. IKE uses these values in negotiations to create IPsec SAs. You cannot modify an SA once it is created.
2 ipsecConfig policy ike Creates or modifies an IKE policy configuration. No subtype is required with this command. The command defines the following IKE policy parameters: IKE version, IP address of the remote entity, IP address of the local entity, encryption algorithm, hash algorithm, PRF algorithm, DH group, authentication method, path and filename of the pre-shared key. The syntax is as follows: ipsecConfig --add | --modify ike arguments.
ipsecConfig 2 The following operands are optional (use secCertUtil import to import the key files to the local and remote systems): -psk file Specifies the pre-shared key filename. -pubkey file Specifies the public key filename (in X.509 PEM format). -privkey file Specifies the private key filename (in X.509 PEM format). -peerpubkey file Specifies the peer public key filename (in X.509 PEM format). -lttime number Specifies the key lifetime in seconds.
2 ipsecConfig -ipsec ah|esp Specifies the IPsec protocol. Encapsulating Security Payload (ESP) provides confidentiality, data integrity and data source authentication of IP packets, and protection against replay attacks. Authentication Header (AH) provides data integrity, data source authentication, and protection against replay attacks but, unlike ESP, does not provide confidentiality. -action discard|bypass|protect Specifies the IPsec protection type regarding the traffic flows.
ipsecConfig --delete 2 Deletes a specified policy or all policies of a certain type from the configuration database. You can delete IPsec policies, IKE policies, and SADB entries. When deleting IPsec policies, you have the option to delete specific components only, such as the transform or the selector, and recreate these components without having to recreate the entire policy.
2 ipsecConfig Displays IPsec selector parameters including IPsec policy name, IP address of the local entity, IP address of the remote entity, direction of traffic flow (inbound or outbound), upper layer protocol used, and IPsec transform index.
ipsecConfig 2 Example 1 Secure traffic between two systems using AH protection with MD5 and configure IKE with pre-shared keys. The two systems are a switch, BROCADE300 (IPv4 address 10.33.74.13), and an external UNIX server (10.33.69.132). 1. On the system console, log into the switch as Admin and enable IPsec. switch:admin> ipsecconfig --enable 2. Create an IPsec SA policy named AH01, which uses AH protection with MD5. switch:admin> ipsecconfig --add policy ips sa -t AH01 -p ah -auth hmac_md5 3.
2 ipsecConfig 4. Configure the SA proposal lifetime in seconds. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-ESP -lttime 280000 -sa ESP01 5. Import the public key for the BROCADE300 (Brocade300.pem), the private key for BROCADE300 (Brocade300-key.pem), and the public key of the external host (remote-peer.pem) in X.509 PEM format from the remote certificate server (10.6.103.139). switch:admin> seccertutil import -ipaddr 10.103.6.139 -remotedir /root/certs -certname \ Brocade300.
ipsecConfig 2 3. Create an IPsec SA policy named ESP01, which uses ESP protection with 3DES. switch:admin> ipsecconfig --add policy ips sa -t ESP01 -p esp -enc 3des_cbc 4. Create an IPsec proposal IPSEC-AHESP to use an AH01 and ESP01 bundle. switch:admin> ipsecconfig --add policy ips sa-proposal -t IPSEC-AHESP -sa AH01,ESP01 5. Import the pre-shared key file (e.g., ipseckey.psk) using the secCertUtil import command. 6. Create an IKE policy for the remote peer.
2 ipsecConfig IPsec display commands To display the IPSec IKE Policy: switch:admin> ipsecconfig --show policy ike -a IKE-01 version:ikev2 remote:10.33.69.132 local-id:10.33.74.13 remote-id:10.33.69.132 encryption algorithm: 3des_cbc hash algorithm: hmac_md5 prf algorithm: hmac_md5 dh group: 2 1 auth method:rsasig public-key:"/etc/fabos/certs/sw0/thawkcert.pem" private-key:"/etc/fabos/certs/sw0/thawkkey.pem" peer-public-key:"/etc/fabos/certs/sw0/spiritcert.
ipsecConfig 2 To display all IPsec transforms: switch:admin> ipsecconfig --show policy ips transform -a policy-A-B action:auto_ipsec mode:transport local:10.33.69.132 remote:10.33.74.13 sa-proposal:ipsec-esp-a-b ike-policy:remote-B To display all IPsec traffic selectors: switch:admin> ipsecconfig --show policy ips selector -a slt-A-B-any local:10.33.69.132 remote:10.33.74.13 direction:outbound upper-layer-protocol:any transform-used:policy-A-B slt-B-A-any local:10.33.74.13 remote:10.33.69.
2 ipsecConfig References [DISR] "DOD IPv6 Standards Profiles for IPv6 Capable Products", v2.0 (6/15/2007). [NIST] "A Profile for IPv6 in the U.S. Government", v1.0 (1/31/2007). [4301] Kent, S. and K. Seo, "Security Architecture for the Internet Protocol", RFC 4301 (Dec 2005). [4302] Kent, S., "IP Authentication Header", RFC4302 (Dec 2005). [4303] Kent, S., "IP Encapsulating Security Payload (ESP)", RFC4303 (Dec 2005). [4306] Kaufman, C., Ed.
iscsiCfg 2 iscsiCfg Configures or displays iSCSI entities.
2 iscsiCfg iscsicfg --show transaction [-h] iscsicfg --clear all [-h] iscsicfg --commit all [-f] [-h] Description Use this command to configure all iSCSI entities (such as authentication (CHAP), discovery domains (DD), discovery domain sets (DDSet), iSCSI virtual targets (VT), and LUN maps). Common actions include --add, --delete, --modify, --show, --enable and --disable; however, not all actions are valid for all operands. Use --commit all to save all entity changes to nonvolatile memory.
iscsiCfg 2 --modify tgt -t target_name -a auth_method [-h] Associates the authentication method auth_method with the target. Valid values for auth_method are CHAP and none. If CHAP is specified, then either one-way or mutual CHAP is enforced, based on the login frame from the host. --addusername tgt -t target_name -u user_list [-h] Binds user names defined in AUTH database to the specific target.
2 iscsiCfg --show dd [-d dd_name] [-h] Displays the DD database; dd_name is optional. ddset Discovery Domain Set parameters. Actions on ddset are: --create ddset -n ddset_name -d dd_list [-h] Creates a DD set entry with the specified ddset_name and dd_list. The DDs in dd_list must already exist. --add ddset -n ddset_name -d dd_list [-h] Adds a new DD to an existing DD set. --delete ddset -n ddset_name [-d dd_list] [-h] Deletes the DD set with ddset_name.
iscsiCfg 2 --commit all [-f] [-h] Commits the iSCSI configuration database to nonvolatile memory. Any modifications made to the database are not saved until an explicit --commit all is issued. If multiple switches in the fabric have uncommitted changes, this operation is rejected. The -f option needs to be used in this case to force the commit operation, in which case uncommitted changes on other switches are erased.
2 iscsiCfg To bind user CHAP to a target: switch:admin> iscsicfg --addusername tgt-t iqn.2005-10.com.brocade.tgt1 -u user1 The operation completed successfully. To unbind user CHAP from a target: switch:admin> iscsicfg --deleteusername tgt -t iqn.2005-10.com.brocade.tgt1 -u user1 The operation completed successfully. To clear the target database: switch:admin> iscsicfg --clear tgt The operation completed successfully.
iscsiCfg 2 To display the DD database: switch:admin> iscsicfg --show dd Number of records found: 1 Name: Status: Num. Members: iqn.2222-23.mytest1 iqn.2343-58.newtest1 iqn.2222-23.mytest3 mynewdd Defined 3 To create a DD set entry: switch:admin> iscsicfg --create ddset -n myddset -d mynewdd The operation completed successfully.
2 iscsiCfg To display the iSCSI initiators that attempted to log in: switch:admin> iscsicfg --show initiator Number of records found: 1 Name iqn.1991-05.com.brocade:initiator1 IP Address 172.16.14.101 switch:admin> iscsicfg --show initiator -i iqn.1991-05.com.brocade:initiator1 Initiator details are: Name IP Address iqn.1991-05.com.brocade:isi154116.englab.brocade.com 172.16.14.101 No. of targets currently accessible to the specified initiator are: 4 iqn.2222-12.com.brocade:tgt1 iqn.2222-12.com.
iscsiChipTest 2 iscsiChipTest Performs functional test of components in iSCSI complex. Synopsis Description Notes iscsichiptest --slot slotnumber -testtype type -unit gbEports Use this command to verify the memory of the network processor and iFlipper FPGA. This command is supported only on the Brocade FR4-16IP blade. On all other platforms, this command displays the message: “Command not applicable to this platform.
2 iscsiHelp iscsiHelp Displays a list of iSCSI support commands. Synopsis Description Note iscsihelp Use this command to display a list of iSCSI support commands with descriptions. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
iscsiPathTest 2 iscsiPathTest Performs functional test of components in iSCSI complex. Synopsis Description Notes iscsipathtest --slot slotnumber -unit number -path mode -nframes count Use this command to verify the functions of the network processor and the iSCSI complex. The CP processor instructs the Network processor BCM1125H in each GigE port to run the tests Multiple frames or data packets are transmitted from the Network processor to designated loopback points and sent back.
2 iscsiPortCfg iscsiPortCfg Displays or modifies iSCSI port parameters. Synopsis iscsiportcfg --clearstats slot/geport iscsiportcfg --default slot/geport iscsiportcfg --show slot/geport [-v] iscsiportcfg --modify slot/geport options Description Use this command to display or modify the iSCSI port parameters.
iscsiPortCfg --show -v Examples 2 Displays port-level protocol parameters, statistics, and session information on the specified port. Options include: Specifies verbose mode, which displays the initiator IP, TSID, and the number of connections in addition to the other port-level information. slot Specifies the slot number. This parameter only supports FC4-16IP blades in Brocade 48000 directors. geport Specifies the port number of a GbE port to be configured in the specified slot.
2 iscsiPortCfg See Also 406 iSCSI Abort Task Set: iSCSI Clear ACA: iSCSI Clear Task Set: iSCSI LUN Reset: iSCSI Target Reset: iSCSI Task Reassign: Non FCP in PDU: Non FCP in Octet: Non FCP out PDU: Non FCP out Octet: 0 0 0 0 0 0 17 2576 17 1352 Session details: Session Number: iSCSI Session Type: Initiator Name: Target Name: ISID: 1 Normal iqn.1991-05.com.microsoft:win-iscsi.lab iqn.2002-12.com.
iscsiSessionCfg 2 iscsiSessionCfg Displays iSCSI session/connection details, clears the associated counters, or deletes an iSCSI session/connection. Synopsis iscsisessioncfg --clearstats [-i initiator_iqn] [-t target_iqn] iscsisessioncfg --delete [-i initiator_iqn] [-t target_iqn] iscsisessioncfg --show [-i initiator_iqn] [-t target_iqn] Description Use this command to display iSCSI session/connection details, clear the associated counters, or delete an iSCSI session/connection.
2 iscsiSessionCfg Max. Burst Length First Burst Length Max outstanding R2T Default time to retain Default time to wait Error recovery level Initial R2T 256KB 512B 1 20s 2s 0 Off iSCSI Operating Login Parameters: Connection Level Connection Index: 1 Parameter Name Self Value Max. Recv.
iscsiSwCfg 2 iscsiSwCfg Displays or configures the iSCSI switch level configuration. Synopsis iscsiswcfg --enableconn -s slot number | all iscsiswcfg --disableconn -s slot number | all iscsiswcfg --showconn -s slot number | all iscsiswcfg --modifygw -t target name iscsiswcfg --showgw Description Note Operands Examples Use this command to display the iSCSI switch level configuration and to configure the iSCSI connection redirection and target name prefix.
2 islShow islShow Displays interswitch link (ISL) information. Synopsis Description islshow Use this command to display the current connections and status of the interswitch link (ISL) for each port on a switch.
isnscCfg 2 isnscCfg Displays or modifies the configuration state of the iSNS client operation. Synopsis isnsccfg --set slot | geport -s server_ip isnsccfg --set -m -s server_ip isnsccfg --reregister isnsccfg --show isnsccfg --clear Description Note Operands Examples Use this command to display and update the configuration state of the iSNS client daemon. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 isnscCfg To register the iSNS objects: switch:admin> isnsccfg --reregister Initiated re-register of iSNS objects with iSNS server To clear the IP address of iSNS server: switch:admin> isnsccfg --clear Cleared iSNS server configuration.
itemList 2 itemList Lists parameter syntax information. Synopsis item_list = element | element white item_list element = item | item - item item = num | slot [white]/ [white] num slot = num num = hex | int int = int digit | digit hex = 0x hex digit | hex hex digit digit = 0|1|2|3|4|5|6|7|8|9 hex digit = digit |A|B|C|D|E|F|a|b|c|d|e|f white = *["\t\f\r ,"] Description All kernel diagnostics have at least one item list parameter to specify which ports to test.
2 itemList The exact type of list varies, depending on the test and the parameter; however, the most common are blade ports and user ports. A list of blade ports is most commonly used by ASIC-level tests such as turboRamTest and represents which ports on the current blade (specified with --slot number) are tested. A list of user ports is used by higher-level tests to specify which user-accessible external ports within the current switch (selected during Telnet login) are tested.
killTelnet 2 killTelnet Terminates an open Telnet session. Synopsis killtelnet Description Use this command to terminate an open Telnet session. The command lists all current Telnet and serial port login sessions and information such as session number, login name, idle time, IP address of the connection, and timestamp of when the login session was opened. The command prompts you to specify the number of the session you want to terminate.
2 ldapCfg ldapCfg Maps LDAP AD server roles to default switch roles. ldapcfg --maprole ldaprole switchrole ldapcfg --unmaprole ldaprole ldapcfg --show ldapcfg --help Description Use this command to map a Lightweight Directory Access Protocol (LDAP) Active Directory (AD) server role to one of the default roles available on a switch. This command also provides an option to remove an existing mapping.
ldapCfg Examples --show Displays a table of existing mappings between LDAP roles and their corresponding switch role. --help Displays command usage.
2 lfCfg lfCfg Configures and displays logical fabrics. Synopsis lfcfg [--show | --showall] -cfg lfcfg [--show | --showall] -lisl [-v] lfcfg --lislenable lfcfg --help Description Use this command to display logical fabric configuration information, to determine the status of logical interswitch links (LISLs), and to enable LISLs between logical switches.
lfCfg remote-domain Domain ID of the base switch in the remote chassis. Name Switch name. State Port state: Online or Offline. 2 Associated physical ports Physical ports associated with the LISL ports. When lfCfg is issued within a logical switch context, only the configuration regarding that switch and the fabrics reachable from that switch is displayed.
2 lfCfg Logical Switch: 1 Fabric Id: 2 State: Online(1) Switch WWN: 10:00:00:60:69:e2:09:fcSwitchName: ------------------------------ Chassis: 53 -----------------------------Chassis WWN: 10:00:00:60:69:e2:09:00 Base Switch WWN: 10:00:00:60:69:e2:09:00 Base Domain: 53 Number of Partitions: 2 Logical Switch: 1 Fabric Id: 2 State: Online(1) Switch WWN: 10:00:00:60:69:e2:09:feSwitchName: To displays information for all fabrics in all chassis reachable from the base fabric.
lfCfg 2 To display information about all LISLs in the chassis: switch:admin> lfcfg --showall -lisl FID 2 3 Port# 384 385 remote-domain 24 24 Name sw0 sw0 State PT Online PT Online FID Port# remote-domain Name State 2 384 24 sw0 PT Online 3 385 24 sw0 PT Online .
2 licenseAdd licenseAdd Adds license keys to switch. Synopsis Description licenseadd “license” Use this command to add license keys to the switch. Some features of the switch and the fabric to which it is connected are optional, licensed products. Without a license installed for such products, their services are not available. A license key is a string of approximately 16 upper- and lowercase letters and numbers. Case is significant. The license must be entered into the system exactly as issued.
licenseHelp 2 licenseHelp Displays commands used to administer license keys. Synopsis Description Notes licensehelp Use this command to display a list of the commands used to administer license keys. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
2 licenseIdShow licenseIdShow Displays the system license ID. Synopsis Description licenseidshow Use this command to display the license ID of the system. Some features of the switch and the fabric are optional, licensed products. Without a license installed for such products, the services provided by these features are not available. This command displays the system license ID used for generating and validating licenses on the system.
licensePort 2 licensePort Manages the Dynamic Ports On Demand (POD) license assignment. Synopsis licensePort --release portnum licensePort --reserve portnum licensePort --show lcensePort --method dynamic | static Description Note Operands Use this command to manage the Dynamic Ports on Demand license assignments. In the Dynamic POD method, the ports are assigned to a POD license in order to come online until they equal the number of online licensed ports.
2 licensePort To display the POD license assignments: switch:admin> licensePort --show 20 ports are available in this switch 1 POD license is installed Dynamic POD method is in use 15 port assignments are provisioned for use in this switch: 10 port assignments are provisioned by the base switch license 5 port assignments are provisioned by the first POD license * 5 more assignments are added if the second POD license is installed 15 ports are assigned to installed licenses: 10 ports are assigned to the ba
licenseRemove 2 licenseRemove Removes the license key from the system. Synopsis Description licenseremove "license" Use this command to remove an existing license key from a switch. The existing license key must be entered exactly as shown by licenseShow, including case. When the key has been entered, use the licenseShow command to verify that the key has been removed and the licensed product uninstalled. After removing a license key, the switch must be rebooted.
2 licenseShow licenseShow Displays current license keys. Synopsis Description Note licenseshow Use this command to display current license keys, along with a list of licensed products enabled by these keys. The message "No license installed on this switch" is displayed when no licenses are installed. For temporary licenses, the expiration date is shown. An expiration notice indicates expired temporary licenses When no licenses are installed, the command displays "No license installed on this switch.
linkCost 2 linkCost Sets or displays the Fabric Shortest Path First (FSPF) cost of a link. Synopsis Description linkcost [[slotnumber/]portnumber [cost]] Use this command to set or display the cost of an interswitch link (ISL). The cost of a link is a dimensionless positive number. The FSPF protocol compares the cost of various paths between a source switch and a destination switch by adding the costs of all the ISLs along each path. FSPF chooses the path with minimum cost.
2 linkCost cost Examples Specifies the static cost of the link connected to the specified port. Valid values are 0 to 65,535. Assigning a value outside this range will fail and generate an error. A value of 0 removes the static cost and the port reverts to its default link cost. If cost is not specified, the command displays the current cost of the specified port.
login 2 login Logs in as new user. Synopsis Description login Use this command to log in to the switch with another user name and password, without first logging out from the original session. If you originally connected through a Telnet or rlogin session, that session is left open. This command allows you to access commands that you cannot access at your current user level. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 logout logout Logs out from a shell session. Synopsis Description logout Use this command to log out from a shell session. Remote login connections are closed and the local serial connections return to the login prompt. The exit command is accepted as a synonym for logout, as is Ctrl-D at the beginning of a line.
lsanZoneShow 2 lsanZoneShow Displays logical SAN zone information. Synopsis Description lsanzoneshow [-s] [-f fabricid] [-w wwn] [-z zonename] Use this command to display the inter-fabric zones or LSAN zones. These zones are normal WWN zones created in FC Router EX_Port-connected fabrics and backbone fabrics. The LSAN zones are identified by the text string “lsan_” in the zone name. Note that the string is case insensitive so “LSAN_” also is valid.
2 lsanZoneShow Examples To display the LSAN zones: switch:admin> lsanzoneshow Fabric ID: 4 Zone Name: lsan_fcr10_0 50:05:07:65:05:84:0b:83 50:05:07:65:05:84:09:0e 10:00:00:00:c9:2b:6a:68 21:00:00:20:37:18:22:55 Fabric ID: 5 Zone Name: lsan_fcr11_0 10:00:00:00:c9:2b:6a:68 21:00:00:20:37:18:22:55 50:05:07:65:05:84:0b:83 50:05:07:65:05:84:09:0e switch# See Also 434 fcrFabricShow, fcrPhyDevShow, fcrProxyDevShow, fcrRouteShow, switchShow Fabric OS Command Reference 53-1001186-01
lsCfg 2 lsCfg Configures and manages a logical switch Synopsis lscfg --create FID [-b | -base] [-f | -force] lscfg --delete FID lscfg --config FID -slot [slot | slot_range] -port [ port | port_range] [-f |-force] lscfg --restore_to_default FID lscfg --restore_slot_to_default slot lscfg --change FID [[-newfid FID] | [-base]] [-force] lscfg --show [-provision] lscfg --help Description Use this command to create a logical switch and to modify logical switch configurations.
2 lsCfg FID Specifies the Fabric ID. Each logical switch in a chassis is assigned a unique fabric identifier. The FID address space is shared between logical switches and EX_Ports. Valid FID values are integers between 1 and 128. The default logical switch is assigned FID 128 by default. This operand is required. -b | -base Creates a base logical switch on the chassis. A base logical switch communicates among different logical switches.
lsCfg 2 -b | -base Turns an existing logical switch into a base switch. When this command is issued on a switch that is already a base switch, this command removes the base switch properties. This command disables the current logical switch. After making the change, you must re-enable the switch. -f | -force Executes the command without confirmation. This operand is optional. --show -provision Displays the partition configuration on a chassis.
2 lsCfg To display the logical switch configuration: switch:admin> lscfg --show Created switches: 128(ds) 1(bs) 2 Port 0 1 2 3 4 5 6 7 8 9 ------------------------------------------------------------------FID 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 2 | 2 | Port 10 11 12 13 14 15 16 17 18 19 ------------------------------------------------------------------FID 128 | 128 | 128 | 128 | 128 | 128 | 128 | 128 | 128 | 128 | Port 20 21 22 23 24 25 26 27 28 29 -------------------------------------------------------------
lsCfg 2 To make Logical switch FID 1 the base switch without confirmation: switch:admin> lscfg --change 1 -base -force Disabling the current base switch... Disabling switch fid 1 Disabling the proposed new base switch... Disabling switch fid 1 Please enable your switches when ready. To make Logical switch FID 1 the base switch with confirmation: switch:admin> lscfg --change 1 -base Creation of a base switch requires that the proposed new base switch on this system be disabled.
2 lsDbShow lsDbShow Displays the Fabric Shortest Path First (FSPF) link state database. Synopsis Description lsdbshow [domain] Use this command to display an FSPF link state database record for switches in the fabric or for a specified domain. There are two types of database entries: • The link state database entry, which is permanently allocated. • The link state record (LSR), which is allocated when a switch is connected to the fabric. The LSR describes the links between connected domains in a fabric.
lsDbShow TABLE 20 Note Operands lsDbShow display fields (Continued) Field Description advertiser Domain ID of the switch that originated this LSR. incarn Incarnation number of this LSR. length Total length, in bytes, of this LSR. Includes header and link state information for all links. chksum Checksum of total LSR, with exception of lsAge field. linkCnt Number of links in this LSR. Each link represents a neighbor in NB_ST_FULL state. flags Always 0. LinkId ID of this link.
2 lsDbShow mOutIfsP[4] mOutIfsP[5] mOutIfsP[6] parent mPathCost mHopsFromRoot = = = = = = 0x00000000 0x00000000 0x00000000 0xf0 0 0 Link State Record: Link State Record pointer = 0x109784b0 lsAge = 321 reserved = 0 type = 1 options = 0x0 lsId = 1 advertiser = 1 incarn = 0x80000185 length = 60 chksum = 0x168a linkCnt = 2, flags = 0x0 LinkId = 91, out port = 28, rem port = LinkId = 91, out port = 29, rem port = See Also 442 28, cost = 500, costCnt = 0, type = 1 29, cost = 500, costCnt = 0, type = 1 i
fosExec 2 fosExec Executes a command in a specified logical fabric context. Synopsis Description Note Operands Examples fosexec -fid FID "cmd" Use this command to manage logical switches in the chassis. This command executes a specified command on a specified logical switch. The logical switch is identified by its fabric ID (FID). The commands you can execute are defined by the role of the account that executes the command. The FID must be part of the FID permission list associated with the account.
2 fosExec 19 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 See Also 444 19 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 id id id id id id id id id id id id id id id ---id N8 N8 N8 N2 N4 N4 N4 N2 N2 N8 N8 N8 N8 N8 N8 N8 N8 N8 N8 No_Light No_Light No_Light No_Light No_Light No_Light No_Light No_Light No_Light No_Light No_Light No_Light No_Light No_Light No_Light No_Module No_Module No_Module No_Light setContext, userConfig Fabric OS Command Reference 53-1001186-01
memShow 2 memShow Displays the amounts of free and used memory in a switch. Synopsis memshow [-b | -k | -m] Description Use this command to display free and used memory in the switch, as well as the shared memory and buffers used by the kernel. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
2 msCapabilityShow msCapabilityShow Displays the Management Server (MS) capabilities. Synopsis mscapabilityshow Description Use this command to display the supported capabilities of the Management Server for each switch in the fabric. An asterisk displays next to the name of the local switch. Notes Reliable commit service (RCS) is a fabric-wide capability and is supported only if all the switches in the fabric support the service.
msConfigure 2 msConfigure Configures the Management Server (MS) access control list (ACL). Synopsis Description msconfigure Use this command to configure the MS Access Control List (ACL). The MS allows a Storage Area Network (SAN) management application to retrieve and administer the fabric and Interconnect Elements, such as switches. This application is located at the Fibre Channel well-known address, 0xFFFFFA. If the MS ACL is empty (default), The MS is available to all systems connected to the fabric.
2 msConfigure 0 Done 1 Display the access list 2 Add member based on its Port/Node WWN 3 Delete member based on its Port/Node WWN select : (0..3) [1] 0 done ...
msPlatShow 2 msPlatShow Displays the Management Server (MS) platform database. Synopsis msplatshow Description Use this command to display information from the MS platform database. This command displays the name of each platform object with the platform type (GATEWAY, HOST_BUS_ADAPTER, and so forth), associated management addresses, and associated node names. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 msPlatShowDBCB msPlatShowDBCB Displays the Management Server (MS) platform service database control block. Synopsis Description Note msplatshowdbcb Use this command to display the control block fields associated with the platform database. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
msPlClearDB 2 msPlClearDB Clears the Management Server (MS) platform database on all switches in the fabric. Synopsis Description Notes msplcleardb Use this command to clear the MS platform database in the entire fabric. Because this operation cannot be undone, it should not be performed unless it is intended to resolve a database conflict between two joining fabrics or to establish an entirely new fabric with an empty database.
2 msPlMgmtActivate msPlMgmtActivate Activates the Management Server (MS) platform service. Synopsis Description Notes msplmgmtactivate Use this command to activate the MS platform service throughout the fabric. This command attempts to activate the MS platform service for each switch in the fabric. The change takes effect immediately and is committed to the configuration database of each affected switch. MS activation is persistent across power cycles and reboots.
msPlMgmtDeactivate 2 msPlMgmtDeactivate Deactivates the Management Server (MS) platform service. Synopsis msplmgmtdeactivate Description Use this command to deactivate the MS platform service throughout the fabric. This command deactivates the MS platform service for each switch in the fabric and commits the change to nonvolatile storage. Notes When an FCS policy is enabled, this command can be issued only from the primary FCS switch.
2 msTdDisable msTdDisable Disables the Management Server (MS) topology discovery service. Synopsis Description Notes mstddisable ["ALL"] Use this command to disable the management server topology discovery service on a local switch or an entire fabric. This change takes effect immediately and commits to the configuration database for all affected switches. The change is persistent across power cycles and reboots.
msTdEnable 2 msTdEnable Enables the Management Server (MS) topology discovery service. Synopsis Description Notes mstdenable ["ALL"] Use this command to enable the MS topology discovery service on the local switch or throughout the fabric. The change takes effect immediately and commits to the configuration database for all affected switches. The change is persistent across power cycles and reboots.
2 msTdReadConfig msTdReadConfig Displays the status of The Management Server (MS) topology discovery service. Synopsis mstdreadconfig Description Use this command to check whether or not the management server topology discovery service is enabled. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
myId 2 myId Displays the current login session details. Synopsis Description myid Use this command to display the status of the system and the login session details. This includes IPv4 or IPv6 addresses associated with the login session. The login session gives details of the following: • CP/switch (or console/serial port) used to log in. • The IP address of the current login session for Telnet or the name of the current console port or the serial port (if modem login used).
2 nbrStateShow nbrStateShow Displays the state of FSPF neighbors. Synopsis Description nbrstateshow [slotnumber/][portnumber] Use this command to display information about fabric shortest path first (FSPF) neighbors to the local switch or information about a neighbor to a specified port. FSPF defines a neighbor as a remote E_Port interface that is directly attached to the local switch. However, if ports are trunked, the command displays data only about the trunk master.
nbrStateShow Examples 2 To display information about a neighbor directly connected to the local switch: switch:user> nbrstateshow 2/0 Local Domain ID: 1 Local Port Domain Remote Port State ------------------------------------------------------16 2 48 NB_ST_FULL See Also interfaceShow Fabric OS Command Reference 53-1001186-01 459
2 nbrStatsClear nbrStatsClear Resets FSPF interface counters. Synopsis Description Note Operands Examples nbrstatsclear [slotnumber/][portnumber] Use this command to reset the counters of fabric shortest path first (FSPF) frames transmitted and received on all interswitch links (ISLs) or on a specified ISL Use this command without operands to reset counters on all interfaces. Use interfaceShow to view the FSPF counters.
nbrStatsClear 2 To reset the counters on a port: switch:admin> nbrstatsclear 1/0 To verify the changes: switch:admin> interfaceshow 1/0 idbP = 0x10050a38 Interface 0 data structure: nghbP ifNo masterPort defaultCost cost = = = = = 0x1004ce68 0 0 (self) 500 500 (output truncated) See Also interfaceShow, portShow, switchShow Fabric OS Command Reference 53-1001186-01 461
2 nodeFind nodeFind Displays all device Name Server (NS) entries matching a given WWN, device PID, or alias. Synopsis Description nodefind WWN | PID | ALIAS Use this command to display the NS information for all devices in the fabric that have either a port World Wide Name (WWN) or a node WWN matching the given WWN; or have a device PID matching the given PID; or have a defined configuration alias to which the device belongs matching the given alias.
nodeFind 2 Device Shared in Other AD: No Aliases: a320 NL 0314d4; 3;22:00:00:04:cf:9f:26:7e;20:00:00:04:cf:9f:26:7e; 0 FC4s: FCP [SEAGATE ST336605FC 0003] Fabric Port Name: 20:14:00:60:69:80:04:79 Permanent Port Name: 22:00:00:04:cf:9f:26:7e Device type: Physical Target Port Index: 20 Share Area: No Device Shared in Other AD: No Aliases: a320 To display all the device information matching the WWN "20:00:00:e0:8b:01:ce:d3": switch:user> nodefind 20:00:00:e0:8b:01:ce:d3 Remote: Type Pid COS PortName NodeNa
2 nsAliasShow nsAliasShow Displays local Name Server (NS) information, with aliases. Synopsis Description nsaliasshow [-r -t] Use this command to display local name server information with the added feature of displaying the defined configuration aliases to which the device belongs. The following message is displayed if there is no information in this switch: There is no entry in the Local Name Server The command nsAllShow displays information from all switches.
nsAliasShow 2 The second part indicates the role of the device. Currently, four roles are defined: • • • • Examples Unknown (initiator/target) - Device role is not detected. Initiator- An iSCSI initiator. Target- An iSCSI target. Initiator+Target- Both an iSCSI initiator and an iSCSI target.
2 nsAliasShow NL NL NL NL The Aliases: DeviceAlias 0214e2; 3;21:00:00:fa:ce:00:21:1e;20:00:00:fa:ce:00:21:1e; FC4s: FCP [STOREX RS2999FCPH3 MT09] Fabric Port Name: 20:04:00:60:69:01:44:22 Permanent Port Name: 21:00:00:fa:ce:00:21:1e Aliases: 0214e4; 3;21:00:00:fa:ce:00:21:e1;20:00:00:fa:ce:00:21:e1; FC4s: FCP [STOREX RS2999FCPH3 CD09] Fabric Port Name: 20:04:00:60:69:01:44:22 Permanent Port Name: 21:00:00:fa:ce:00:21:e1 Aliases: MyAlias1 MyAlias2 0214e8; 3;21:00:00:fa:ce:04:83:c9;20:00:00:fa:ce:04:83
nsAliasShow 2 Fabric Port Name: 20:04:00:60:69:01:44:22 Permanent Port Name: 21:00:00:ad:bc:04:6f:70 Device type: Physical Target Aliases: The Local Name Server has 6 entries } See Also nsAllShow, nsShow, switchShow Fabric OS Command Reference 53-1001186-01 467
2 nsAllShow nsAllShow Displays global name server information. Synopsis Description nsallshow [type] Use this command to display the 24-bit Fibre Channel addresses of all devices in all switches in the fabric. If the type operand is supplied, only devices of specified FC-PH type are displayed. If type is omitted, all devices are displayed. Specifying the type operand causes the switch to send out a query to every switch in the fabric.
nsCamShow 2 nsCamShow Displays information about remote devices in the Name Server (NS) cache. Synopsis Description nscamshow [-t] Use this command to display the local NS cache information about the devices discovered in the fabric by the NS cache manager.
2 nsCamShow Examples To display all switch and device entries discovered by the NS in the fabric: switch:admin> nscamshow nscam show for remote switches: Switch entry for 2 state rev owner known v430 0xfffc01 Device list: count 1 Type Pid COS PortName NodeName N 021200; 2,3;10:00:00:60:69:00:ab:ba;10:00:00:60:69:00:ab:ba; FC4s: FCIP PortSymb: [28] "SEAGATE ST318452FC 0001" Fabric Port Name: 20:02:00:60:69:00:68:19 Permanent Port Name: 10:00:00:60:69:00:ab:ba Switch entry for 4 state rev owner known v320
nsShow 2 nsShow Displays local Name Server (NS) information. Synopsis Description nsshow [-r -t] Use this command to display local NS information about devices connected to this switch. If no information is available for the switch, the command displays the message: “There is no entry in the Local Name Server.” Use nsAllShow to display NS information for all switches in the fabric. Each line of output displays the following information: Type U for unknown, N for N_Port, NL for NL_Port.
2 nsShow -t SCR=1 Fabric detected registration. Register to receive all RSCN requests issued by the fabric controller for events detected by the fabric. SCR=2 Nx_Port detected registration. Register to receive all RSCN requests issued for events detected by the affected Nx_Port. SCR=3 Register to receive all RSCN request issued. The RSCN request returns all effected N_Port_ID pages. Displays the device type. Of the two device type parts, the first part indicates the origination of the device.
nsShow 2 To display local name server information with the -r option. switch:admin> nsshow -r { Type Pid COS PortName NodeName SCR 010100; 3;21:00:00:e0:8b:13:08:10;20:00:00:e0:8b:13:08:10; 1 FC4s: FCP NodeSymb: [41] "QLA2340 FW:v3.03.06 DVR:v9.0.0.
2 nsZoneMember nsZoneMember Displays the information on online devices zoned with a specified device. Synopsis nszonemember pid | wwn nszonemember -a | -u Description Use this command to display information on all online devices zoned with the specified device. The device can be specified by WWN or Port ID (PID). Use this command with the -u option to display all unzoned devices in the entire fabric. Use the -a option to display online zoned device data for each local device.
nsZoneMember -u Examples 2 Displays all unzoned devices in the entire fabric. The device data includes the device PID and zone alias.
2 nsZoneMember Pid: 0xbd1bef Aliases: nstor4b_8 Port: 13 Pid: 0xb00d00 Aliases: ix360_131_196p5 Zoned Members: 2 devices Pid: 0xb00d00 Aliases: ix360_131_196p5 Pid: 0xe07d00 Aliases: hds9200_6p4 hds9200_6p4 Port: 14 Pid: 0xb00e00 Aliases: dl360_130251a dl360_130251a Zoned Members: 2 devices Pid: 0xb00e00 Aliases: dl360_130251a dl360_130251a Pid: 0xba1ae4 Aliases: trimm100a_2 To display all the unzoned devices in the fabric: switch:admin> nszonemember -u Pid: 0xb01ea9; Aliases: trimm32b_1 Pid: 0xb01eaa;
passwd 2 passwd Changes the password for a specified user. Synopsis Description Operands passwd [“user account”] Use this command to change a user account password. When this command is invoked without operand, the password is changed for the current user account. The following operand is optional: "user account" Specifies the user account for which the password is to be changed.
2 passwd • If a you are changing another user’s password with greater privileges than your current login level, you are prompted to enter that user level’s old password and, if your entry is valid, you are prompted for a new password. • If you are changing another user’s password, the target account's AD member list must be a subset of your account's AD member list. • If you are logged in as the root user when changing another user’s password, you are not prompted to enter the old password.
passwd 2 The password you entered contains less than the minimum required number of lowercase characters. Insufficient number of upper case letters The password you entered contains less than the minimum required number of uppercase characters. Insufficient number of digits in password The password you entered contains less than the minimum required number of numeric characters.
2 passwdCfg passwdCfg Manages the password policies. Synopsis passwdcfg --set options value passwdcfg --disableadminlockout passwdcfg --enableadminlockout passwdcfg --setdefault passwdcfg --showall passwdcfg --help Description Use this command to manage password policies.
passwdCfg 2 policy is enforced across all user accounts except the root, factory, and SecurityAdmin role accounts. A separate configuration option, available to the SecurityAdmin and Admin role accounts, may be used to enable and disable applications of the account lockout policy to Admin role accounts. A failed login attempt counter is maintained for each user on each switch instance. The counters for all user accounts are reset to zero when the account lockout policy is enabled.
2 passwdCfg -minpasswordage value Specifies the minimum number of days that must elapse before a password can be changed. -minpasswordage can be set at 0 to 999. The default value is 0. Setting this parameter to a nonzero value discourages a user from rapidly changing a password in order to defeat the password history setting to reuse a recently used password. The minpasswordage policy is not enforced when an administrator changes the password for another user..
passwdCfg 2 -sequence value Specifies the length of sequential character sequences that will be disallowed. A sequential character sequence is defined as a character sequence in which the ASCII value of each contiguous character differs by one. The ASCII value for the characters in the sequence must all be increasing or all decreasing. For example, if the "sequence" value is set to 3, a password "passABCword" is disallowed because it contains the sequence "ABC".
2 passwdCfg lowercase value out of range The -lowercase value specified must be greater than or equal to 0 and less than or equal to -minlength value. uppercase value out of range The -uppercase value specified must be greater than or equal to 0 and less than or equal to -minlength value. digits value out of range The -digits value specified must be greater than or equal to 0 and less than or equal to -minlength value.
pathInfo 2 pathInfo Displays routing information and statistics along a path covering multiple switches. Synopsis pathinfo pathinfo -f FID destination_switch [destination_port] [-r] [-t] pathinfo destination_switch [source_port[destination_port]] [-r] [-t] Description Use this command to display routing information from a source port on the local switch to a destination port on another switch. The command output describes the exact data path between these ports, including all intermediate switches.
2 pathInfo In Port The port on which the switch receives frames. For hop 0, this is source_port. For bladed systems and ports above 256, this parameter is the port index; otherwise, it is the port area. Domain ID The domain ID of the switch. Name The name of the switch. Out Port The output port that the frames take to reach the next hop. For the last hop, this is destination_port. For bladed systems and ports above 256, this parameter is the port index; otherwise, it is the port area.
pathInfo 2 Words The total number of 4-byte Fibre Channel words. Frames The total number of frames. Errors The total number of errors that may have caused a frame not to be received correctly. This includes cyclic redundancy check (CRC) errors, bad end-of-frame (EOF) errors, frame truncated errors, frame-too-short errors, and encoding errors inside a frame. Reverse path The path from port A on switch X to port B on switch Y may be different from the path from port B to port A.
2 pathInfo destination_port Specifies the port on the destination switch for the path being traced. This operand returns the state of this port. The embedded port (-1) is used by default, or if you specify a destination port that is not active. For bladed systems and ports above 256, the destination is specified as the port index; otherwise, it is the port area. "-r" Displays the reverse path in addition to the forward path. This operand is optional.
pathInfo 2 To display basic path information in traceroute format with reverse path option: switch:admin> pathinfo 4 -r -t Target port is Embedded Hop Domain ID (Name) Time/hop ---------------------------------------------------1 11 (mps_daz_1) 32882 usec 2 4 (METEOR) 32882 usec 3 11 (mps_daz_1) 32882 usec 4 97 (pulsar055) 32882 usec To display path information when source port and destination port are provided along with the traceroute option: switch:admin> pathinfo 6 12 13 -t Target port is F_Port Hop
2 pathInfo B/s (64s) 1 1 Txcrdz (1s) 0 Txcrdz (64s) 0 F/s (1s) 0 0 F/s (64s) 2743 0 Words 2752748 2822763 Frames 219849 50881 Errors 0 Hop In Port Domain ID (Name) Out Port BW Cost --------------------------------------------------------1 3 10 (web229) 12 1G 1000 Port 3 12 Tx Rx Tx Rx ----------------------------------------------B/s (1s) 36 76 0 0 B/s (64s) 5 5 5 5 Txcrdz (1s) 0 0 Txcrdz (64s) 0 0 F/s (1s) 1 1 0 0 F/s (64s) 0 0 0 0 Words 240434036 2294316 2119951 2121767 Frames 20025929 54999 162338 5671
pdShow 2 pdShow Displays data from a panic dump file. Synopsis Description pdshow [panic_dump_file] Use this command to display data from a panic dump file. The panic dump file contains information that might be useful to determine the cause of the system panic. When executed without any arguments, this command displays output from the latest panic dump file available on the switch. If a panic dump file is specified as an argument, the contents of that specific file are displayed.
2 perfAddEEMonitor perfAddEEMonitor Adds an end-to-end monitor to a port. Synopsis Description perfaddeemonitor [slotnumber/]portnumber SourceID DestID Use this command to add an end-to-end performance monitor to a port. The performance monitor counts the number of words received, number of words transmitted, and number of CRC errors detected using either of the following two conditions: 1.
perfAddEEMonitor Examples 2 SourceID Specifies the 3-byte SID (Source ID) of the originator device. It should be in "0xDDAAPP" format, where DD is domain ID, AA is area ID and PP is AL_PA ID. For example, 0x050200 has a domain ID of 5, an area ID of 2, and an AL_PA ID of 0. SourceID and DestID both cannot be 0x000000. DestID Specifies the 3-byte DID (destination ID) of the destination device. It should be in "0xDDAAPP" format, where DD is domain ID, AA is area ID and PP is AL_PA ID.
2 perfAddEEMonitor 2. Get name server information. Name server info shows four devices (two of which are virtual) connected to the Encryption Switch along with their PIDs: EncryptionSwitch:SecurityAdmin>nsshow { Type Pid COS PortName NodeName TTL(sec) N 0a0100; 3;2f:ff:00:06:2b:0e:b3:3c;2f:ff:00:06:2b:0e:b3:3c; na FC4s: FCP PortSymb: [18] "SANBlaze V3.
perfAddEEMonitor 2 4. Add another EE monitor on port 1 between the Virtual Target SID and the Target DID: EncryptionSwitch:SecurityAdmin> perfaddeemonitor 1 0x0a2001 0x01a000 End-to-End monitor number 1 added. 5. Display the EE monitors on the Encryption Switch: EncryptionSwitch:SecurityAdmin> perfmonitorshow --class EE 1 There are 2 end-to-end monitor(s) defined on port 1.
2 perfAddIPMonitor perfAddIPMonitor Adds a filter-based performance monitor for IP frame count. Synopsis Description perfaddipmonitor [slotnumber/]portnumber [alias] Use this command to create a filter-based monitor that will count the number of IP traffic frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor. Use the perfMonitorShow command for a listing of valid keys and user-defined aliases.
perfAddReadMonitor 2 perfAddReadMonitor Adds a filter-based performance monitor for the SCSI Read command. Synopsis Description perfaddreadmonitor [slotnumber/]portnumber [alias] Use this command to create a filter-based monitor that counts the number of SCSI FCP Read commands in Fibre Channel frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor.
2 perfAddRWMonitor perfAddRWMonitor Adds a filter-based performance monitor for the SCSI read and write commands. Synopsis Description perfaddrwmonitor [slotnumber/]portnumber [alias] Use this command to create a filter-based monitor that counts the number of SCSI FCP Read and Write commands in Fibre Channel frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor.
perfAddSCSIMonitor 2 perfAddSCSIMonitor Adds a filter-based performance monitor for SCSI frame count. Synopsis Description perfaddscsimonitor [slotnumber/]portnumber [alias] Use this command to create a filter-based monitor that counts the number of SCSI traffic frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor. Use the perfMonitorShow command for a listing of valid keys and user-defined aliases.
2 perfAddUserMonitor perfAddUserMonitor Adds a user-defined filter-based performance monitor. Synopsis Description perfaddusermonitor [slotnumber/]portnumber "grouplist" [alias] Use this command to define a custom filter for frame offsets and values. For every offset, each group of comparison values is evaluated using the Boolean OR operator to determine a match.
perfAddUserMonitor alias Examples 4 SOFi2 5 SOFn2 6 SOFi3 7 SOFn3 2 Specifies a name for the monitor. Strings exceeding 10 characters are truncated. To accommodate spaces, the string must be surrounded by quotation marks. Spaces count toward the character limit but are removed. This operand is optional. By default, the alias is an empty string.
2 perfAddWriteMonitor perfAddWriteMonitor Adds a filter-based performance monitor for the SCSI write command. Synopsis Description perfaddwritemonitor [slotnumber/]portnumber [alias] Use this command to create a filter-based monitor that counts the number of SCSI FCP write commands in Fibre Channel frames. Only frames transmitted are counted. Execution of this command displays a numeric key that uniquely identifies the monitor.
perfCfgClear 2 perfCfgClear Clears the previously saved performance monitoring configuration settings from nonvolatile memory. Synopsis Description Notes perfcfgclear Use this command to clear the previously saved end-to-end and filter configuration settings of performance monitoring from nonvolatile memory. This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.
2 perfCfgRestore perfCfgRestore Restores performance monitoring configuration settings from nonvolatile memory. Synopsis Description Notes perfcfgrestore Use this command to restore the performance monitoring configuration information from nonvolatile memory. This does not restore the information cleared by the perfCfgClear command; rather, it restores the configuration from nonvolatile memory. The perfCfgRestore command overwrites any configuration changes that were not saved.
perfCfgSave 2 perfCfgSave Saves performance monitoring configuration settings to nonvolatile memory. Synopsis Description perfcfgsave Use this command to save the current Performance Monitor configuration for end-to-end (EE) and filter configuration settings of performance monitoring into nonvolatile memory. Configurations are saved persistently across power cycles.
2 perfClearAlpaCrc perfClearAlpaCrc Clears the CRC error count associated with a port and arbitrated loop physical address (AL_PA). Synopsis Description Notes perfclearalpacrc [slotnumber/]portnumber [ALPA] Use this command to clear a specific cyclic redundancy check (CRC) error counter associated with a specific port and AL_PA, or all such counters on a port. This command requires an Advanced Performance Monitoring license.
perfDelEEMonitor 2 perfDelEEMonitor Deletes one or all end-to-end performance monitors from a port. Synopsis Description Notes perfdeleemonitor [slotnumber/]portnumber [monitorId] Use this command to delete an end-to-end performance monitor from a port, or all such monitors associated with a port. This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.
2 perfDelFilterMonitor perfDelFilterMonitor Deletes one or all filter-based performance monitors from a port. Synopsis Description Notes perfdelfiltermonitor [slotnumber/]portnumber [monitorid] Use this command to delete a filter-based performance monitor from a port, or all such monitors associated with a port. This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports.
perfHelp 2 perfHelp Displays performance monitoring help information. Synopsis Description Note perfhelp Use this command to display the help commands available for performance monitoring. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 perfMonitorClear perfMonitorClear Clears counters of end-to-end, filter-based, and ISL performance monitors on a port. Synopsis Description perfmonitorclear --class monitor_class [slotnumber/]portnumber [monitorId] Use this command to clear counters for performance monitors on a port, specified by class. Monitor classes include end-to-end monitors (EE), filter-based monitors (FLT), and interswitch link monitors (ISL).
perfMonitorClear 2 switch:admin> perfmonitorclear --class FLT 1/2 This will clear ALL filter-based monitors' counters on port 2, continue? (yes, y, no, y): [no] y To clear statistics counters for an ISL monitor: switch:admin> perfmonitorclear --class ISL 1 This will clear ISL monitor on port 1, continue? (yes, y, no, n): [no] y See Also perfAddEEMonitor, perfAddIPMonitor, perfAddReadMonitor, perfAddRWMonitor, perfAddSCSIMonitor, perfAddUserMonitor, perfAddWriteMonitor, perfMonitorShow Fabric OS Comman
2 perfMonitorShow perfMonitorShow Displays end-to-end, filter-based, and interswitch Link performance monitors on a port. Synopsis Description perfmonitorshow --class monitor_class [slotnumber/]portnumber [interval] Use this command to display performance monitors on a port. Monitor classes include end-to-end monitors (EE), filter-based monitors (FLT), and interswitch link monitors (ISL). ISL monitors are automatically activated on E_Ports (not including trunk slaves).
perfMonitorShow Notes 2 This command requires an Advanced Performance Monitoring license. This command is not supported on virtual FC ports (VE/VEX_Port), EX_Port, M (Mirror) ports and GbE ports. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 perfMonitorShow To display end-to-end monitors on a port at an interval of every 5 seconds: switch:admin> perfmonitorshow --class EE 8 5 Showing EE monitors 8, 5: Tx/Rx are # of bytes 0 ----Tx Rx ===== 0 0 0 0 1 ----Tx Rx ===== 0 0 0 0 2 ----Tx Rx ===== 0 0 0 0 3 ----Tx Rx ===== 0 0 0 0 4 ----Tx Rx ===== 0 0 0 0 5 ----Tx Rx ===== 0 0 0 0 6 ----Tx Rx ===== 0 0 0 0 7 ----Tx Rx ===== 0 0 0 0 To display cumulative filter monitor information on a port: switch:admin> perfmonitorshow --class FLT 8 Ther
perfMonitorShow 2 To display ISL monitor information on a port: switch:admin> perfmonitorshow --class ISL 1/1 Total transmit count for this ISL: 1462326 Number of destination domains monitored: 3 Number of ports in this ISL: 2 Domain 97: 110379 Domain 98: 13965 Domain 99: 1337982 See Also perfMonitorClear, perfAddEEMonitor, perfAddIPMonitor, perfAddRWMonitor, perfAddReadMonitor, perfAddSCSIMonitor, perfAddUserMonitor, perfAddWriteMonitor Fabric OS Command Reference 53-1001186-01 515
2 perfSetPortEEMask perfSetPortEEMask Sets the overall mask for end-to-end (EE) performance monitors. Synopsis Description perfsetporteemask [slotnumber/]portnumber "TxSIDMsk " "TxDIDMsk " "RxSIDMsk" "RxDIDMsk" Use this command to set the mask for an end-to-end (EE) performance monitor. This command allows selecting the Fibre Channel frames for which to collect performance statistics. When setting the EE mask on a port, all existing EE monitors on that port are deleted.
perfSetPortEEMask TxSIDMsk 2 Specify the transmitting source ID mask in dd:aa:pp format, with quotation marks, where dd is the domain ID mask, aa is the Area ID mask, and pp is AL_PA ID mask. For example, "00:ff:00" uses only the Area ID to trigger the EE monitor. Specify the following values to turn a specific field on or off: Examples 00 Specifies that the field does not trigger EE monitors. ff Specifies that the field does triggers EE monitors.
2 perfShowAlpaCrc perfShowAlpaCrc Displays the CRC error count by port or by arbitrated loop physical address (AL_PA). Synopsis Description perfshowalpacrc [slotnumber/]portnumber [ALPA] Use this command to display the cyclic redundancy check (CRC) error count of one or all devices attached to a port. If the AL_PA operand is specified, only the CRC count for that AL_PA device is displayed. If the AL_PA operand is not specified, the CRC count for all the AL_PA devices on a specified port are displayed.
perfShowPortEEMask 2 perfShowPortEEMask Displays the current address mask for end-to-end performance monitors on a port. Synopsis Description perfshowporteemask [slotnumber/]portnumber Use this command to display the current mask shared across all end-to-end (EE) performance monitors of a port. There are only two commands that can modify the value of the EE mask: perfSetPortEEMask and perfCfgRestore.
2 perfShowPortEEMask RxSID RxDID RxDID RxDID See Also 520 ALPA: Domain: Area: ALPA: on on on on perfAddEEMonitor, perfDelEEMonitor, perfSetPortEEMask Fabric OS Command Reference 53-1001186-01
perfTTmon 2 perfTTmon Installs the Top Talker monitor in the specified mode. Synopsis perfttmon Port Mode (F_Port): perfttmon --add egress | ingress [slotnumber/]portnumber perfttmon --show [slotnumber/]portnumber [number of flows] [wwn| pid] perfttmon --delete [slotnumber/]portnumber Fabric Mode: perfttmon --add fabricmode perfttmon --show dom domain id [number of flows] [wwn| pid] perfttmon --delete fabricmode Description Use this command to install the Top Talker monitor.
2 perfTTmon Operands This command has the following operands: slotnumber For bladed systems only, specifies the slot number of the port on which to install Top Talkers, followed by a slash (/). portnumber Specifies the number of the port on which the Top Talker is to be installed, relative to its slot for bladed systems. Use switchShow for a list of valid ports. F_Port Top Talker commands: --add Installs the Top Talker monitor on a specified F_Port.
perfTTmon 2 To add the Fabric Mode Top Talker: Switch:admin> perfttmon --add fabricmode To delete the Fabric Mode Top Talker: Switch:admin> perfttmon --del fabricmode To display the Fabric Mode Top Talker output: Switch:admin> perfttmon --show dom 1 pid perfttmon --show dom 1 pid ================================================================= Src_PID Dst_PID MB/sec Potential E-Ports ================================================================= 0x03f600 0x011300 121.
2 pkiCreate pkiCreate Creates public key infrastructure (PKI) objects. Synopsis pkicreate Description Use this command to create PKI objects such as a pass-phrase switch private key and CSR and to install a root certificate. This command does not create the switch certificate. Switch certificate should be obtained offline from the Certificate Authority. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
pkiRemove 2 pkiRemove Removes existing public key infrastructure (PKI) objects. Synopsis Description Note pkiremove Use this command to remove PKI objects including the switch private key, private key pass-phrase, CSR, root certificate, and switch certificate. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 pkiShow pkiShow Displays existing public key infrastructure (PKI) objects. Synopsis Description Note pkishow Use this command to display PKI objects, such as switch private key, private key pass-phrase, CSR, root certificate, and switch certificate. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
policy 2 policy Displays or modifies the encryption and authentication algorithms for security policies. Synopsis Description policy option type number [-enc method] [-auth algorithm] [-pfs value] [-dh group] [-seclife seconds] Use this command to display or modify the encryption and authentication algorithms for security policies. You can configure a maximum of 32 Internet key exchange (IKE) and 32 Internet protocol security (IPSec) policies.
2 policy -dh group Specifies the Diffie-Hellman group used in PFS negotiation. This operand is valid only with IKE policies. The default is 1. Values include: 1 Fastest as it uses 768 bit values, but least secure. 14 Slowest as it uses 2048 bit values, but most secure. -seclife seconds Examples Security association lifetime in seconds. A new key is re-negotiated before the specified length of time expires. The valid range for seconds is 28800 to 250000000 or 0. The default is 28800.
policy 2 To display all IPSec policy settings: switch:admin> policy --show ipsec all IPSec Policy 2 ----------------------------------------Authentication Algorithm: SHA-1 Encryption: AES-128 SA Life (seconds): 28800 IPSec Policy 29 ----------------------------------------Authentication Algorithm: SHA-1 Encryption: AES-128 SA Life (seconds): 28800 Operation Succeeded To change (delete and re-create) a policy: switch:admin> policy ike --delete 10 This policy has been successfully deleted.
2 portAddress portAddress Assigns the lower 16 bits of the Fibre Channel Port ID. Synopsis portaddress --bind [slot_number/]port_number [16-bit_address] [--auto] portaddress --unbind [slot_number/]port_number portaddress --show [[slot_number/]port_number] portaddress --findPID 24-bit_Port_ID portaddress --help Description Use this command to bind the 16-bit address to the lower two bytes of a port 24-bit Fibre Channel address, or to unbind the currently bound address for the specified port.
portAddress --show Displays the currently bound address attributes for the specified port. This command shows the lowest two bytes of the Fibre Channel address as well as the current setting for auto mode. If a port is not specified, the display shows all ports on the current partition. A -1 is displayed for ports that have not been assigned an area. Areas are dynamically assigned an address as they are added to a partition.
2 portAddress 409 410 411 412 413 414 415 5 5 5 5 5 5 5 25 26 27 28 29 30 31 0x1100 0x1200 0x1300 0x1400 0x1500 0x1600 0x1700 8 8 8 8 8 8 8 bit bit bit bit bit bit bit To display the port address binding for port 28: switch:admin>portaddress --show 5/18 Index Slot Port Area Mode =============================== 412 5 28 0x1400 8 bit To display the port bound to a specified address.
portAlpaShow 2 portAlpaShow Displays the Arbitrated Loop Physical Addresses (AL_PAs) of devices attached to a port. Synopsis Description Note Operands Examples portalpashow [slotnumber/]portnumber Use this command to display the AL_PAs of devices connected to a port, and whether these devices are public or private. If the specified port is not an active FL_Port or if no AL_PAs are present, this command prints an error.
2 portBufferShow portBufferShow Displays the buffer usage information for a port group or for all port groups in the switch. Synopsis Description portbuffershow [[slotnumber/]portnumber] Use this command to display the current long distance buffer information for the ports in a port group. The port group can be specified by giving any port number in that group. If no port is specified, then the long distance buffer information for all of the port groups of the switch is displayed.
portBufferShow Operands 2 When invoked without operands, this command displays the long distance buffer information for all the port groups of the switch. The following operands are optional: Examples slotnumber For bladed systems only, specifies the slot number of the port group to display, followed by a slash (/). portnumber Specifies the number of a port associated with the port group, relative to its slot for bladed systems. Use switchShow for a list of valid ports.
2 portCamShow portCamShow Displays port-based filter CAM utilization. Synopsis Description portcamshow [slotnumber/]portnumber Use this command to display the current filter Content-Addressable Memory (CAM) utilization of a specified port. The command displays the following information: Notes SID used Total number of CAM entries used by this port. Note that each CAM entry, either source ID (SID) or destination ID (DID) CAM, can be shared among a certain number of ports, depending on the ASIC.
portCamShow Examples 2 To display the filter CAM utilization for a single port on a switch: switch:user> portcamshow 3/2 -------------------------------------------------Area SID used DID used SID entries DID entries 34 3 1 350400 2b2200 2b1200 220400 -------------------------------------------------SID Free, DID Free: (61, 511) To display port CAM entries on shared ports: In the following example, port 7/31 and 7/39 are shared ports and 7/31 is the primary port.
2 portCfg portCfg Enables or disables a port's configuration. Synopsis Description portcfg action [slot/][ge]port [-range] arguments Use this command to manage configuration parameters for ports and gigabit Ethernet (GbE) ports. The following operations can be performed with this command: • Optionally add and delete Address resolution protocol (ARP) entries. Flush ARP table. • Create, modify, and delete Fibre Channel over IP (FCIP) tunnels. - Delete, reset, and modify QoS mappings on an existing tunnel.
portCfg 2 portcfg arp [slot/][ge]port options arguments Valid options and arguments for arp include: add ipaddr macaddr Adds static ARP entry to the ARP table. Specify IP Address and MAC address for each entry. Use portShow arp with the -lmac option to get the MAC address. delete ipaddr Deletes static ARP entry from the ARP table. Only IP address must be specified to delete the entry. flush fciptunnel Flushes the ARP table. Only dynamic entries can be flushed, static entries cannot be cleared.
2 portCfg both a DSCP and L2CoS value. These default values can be modified on a per-FCIP tunnel basis with the fciptunnel qosmap option. The -M option can be turned on or off any time. Qosmap settings are unaffected by the -M option. -m time Specifies the minimum retransmit time, in milliseconds. The range is 20 to 5,000; the default is 100. -n remote_wwn Specifies the remote-side FC entity WWN.
portCfg 2 -p Control L2 CoS Specifies the pL2_Class_of_Service/Priority, as defined by IEEE 802.1p, for the FCIP control connection. Range is 0-7. Default is 0. -P L2 CoS Specifies the PL2 Class of Service/Priority, as defined by IEEE 802.1p, for the FCIP data connection. Range is 0-7. Default is 0. -bstr Enables Byte Streaming on the specified tunnel. Byte streaming allows the Brocade switch to communicate with third party WAN optimization hardware.
2 portCfg -r retransmissions Specifies the maximum retransmissions for the existing tunnel. Values are 1 to 16; default is 8. If Tape Piplelining is enabled, the default value is calculated based on the minimum retransmit time to ensure that the TCP connection does not time out before the host times out. When changing this value, the value specified must be greater than the calculated value. -s 0|1 Disable (0) or enable (1) selective acknowledgement (SACK) on the existing tunnel.
portCfg 2 -P l2cos Specifies the L2 Class Of Service (COS) Tagging value. Use the portShow fciptunnel geport all -qosmap command to display current values. Supported range is 0-7. ipif Defines the IP interface for both ports of a tunnel. Up to eight IP interfaces per GbE port are supported. The IP network connection between two 7500 routers or two FC4-18i blades is configured by defining IP interfaces for origin and destination virtual ports, and then defining one or more IP routes to connect them.
2 portCfg dest_IPv6_addr/prefix_len Specifies the destination IPv6 address of the virtual port, if IPv6 is used. The address must be an IPv6 global, unicast address, followed by a prefix. This is used for IPv6 addresses instead of a netmask. The prefix_len operand is required. dest_IPv4_addr netmask Specifies the destination IPv4 address of the virtual port, if IPv4 is used. If an IPv4 address is used, the subnet mask must be specified as well. Use a.b.c.d. format.
portCfg mirrorport 2 Configure mirror port on the local port. The port mirroring feature re-routes data frames between two devices to the mirror port. Port mirroring can aid in troubleshooting common FC end-to-end communication problems. The command prompts for confirmation that the specified port be enabled as a mirror port. Once a port is configured as a mirror port, the port can only be used as part of a mirror connection. This command is blocked in Virtual Fabric mode.
2 portCfg --delete ipif_addr vlan_id [dst_ipaddr] Deletes an entry from the VLAN tag table. Valid arguments for mode are: ipif_add Specifies the locally defined interface address in IPv6 or IPv4 format. vlan_id Specifies the VLAN ID used for this tag. Range is 1-4094. L2 CoS Specifies L2 Class of Service/Priority, as defined by IEEE 802.1p. Range is 0-7. dst_ipaddr Optional destination IP address (IPv4 or IPv6). All packets destined for this IP address are tagged accordingly.
portCfg -i 1|0 2 Enables or disables FICON tape read block ID. This feature permits FICON write channel programs containing embedded read block ID commands (Cadres) with a byte count of exactly four bytes to be processed as emulated commands during write emulation processes. 1 is enabled, O is disabled. The following optional parameter specific arguments are supported with the config and delete options.
2 portCfg channel. This limits processing to what the network and device can support. Too small a value limits pipelining performance. Too large a value results in too much data being accepted for one device on a path. The default value is 300 milliseconds (ms). The range is 100-1500. -n |--wrtMaxChains value Defines the maximum amount of data that can be contained in a single CCW chain. If this value is exceeded, emulation is suspended. The default value is 3 (3000000 bytes) The range is 1 Mb-5 Mb.
portCfg 2 -r value Specifies the number of records. The range is 0 to 1,677,721. The default is 200000. -s value Specifies the trigger mask value. The range is 00000000 to FFFFFFFF. The default is 00000003. -t value Specifies the trace mask value. The range is 00000000 to FFFFFFFF. The default is 80000C7B. -z value Specifies the trace record size in bytes. The range is 80 to 240 bytes. The default is 80 bytes.
2 portCfg Examples destination Specifies the destination for the route. This is the IP address of the management station. This operand is required when adding or deleting a route. netmask Specifies the subnet mask. This operand is required when adding or deleting a route. gateway Specifies the gateway IP address. This operand is optional if the destination is in the same subnet as one of the IP interface addresses.
portCfg 2 To enable Fastwrite and read/write Tape Pipelining on an existing tunnel: switch:admin> portcfg fciptunnel ge1 modify 0 -f 1 To create a tunnel with Byte Streaming enabled: switch:admin> portcfg fciptunnel ge0 create 0 90000 -f -bstr To enable Byte Streaming on an existing tunnel: switch:admin> portcfg fciptunnel ge0 modify 0 -bstr 1 To create an IP interface using IPv4: switch:admin> portcfg ipif 4/ge0 create 192.168.100.50 255.255.255.
2 portCfg To configure the internal addresses for the CP and GbE port inband management interfaces: switch:admin> portcfg inbandmgmt ge0 ipaddrset cp 192.168.255.1 255.255.255.0 switch:admin> portcfg inbandmgmt ge0 ipaddrset ge 192.168.255.2 255.255.255.0 To add a route to a management station that is on the same subnet as the management interface IP addresses in the previous example. switch:admin> portcfg inbandmgmt ge0 routeadd 192.168.3.0 255.255.255.
portCfgAlpa 2 portCfgAlpa Configures the AL_PA offset on a specified port or range of ports. Synopsis Description portcfgalpa [slot/]port, mode Use this command to set the Arbitrated Loop Physical Address (AL_PA) offset on a port or a range of ports to either 0x0 (default) or 0x13. Changes made by this command are persistent across switch reboots and power cycles. Note Operands Examples The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 portCfgAutoDisable portCfgAutoDisable Name Enables or disables the port auto disable flag. Synopsis portcfgautodisable --enable [slot/]port[-port] portcfgautodisable --disable [slot/]port[-port] Description Use this command to enable or disable the auto disable feature for a specified port or a range of ports. If the ports are already in the requested configuration, no action is taken.
portCfgAutoDisable 2 To enable the auto disable feature on a range of ports, some of which were previously enabled. The following example enables port 4. switch:admin> portcfgautodisable --enable 2-4 Same configuration for port 2 Same configuration for port 3 To disable the auto disable feature on a port range.
2 portCfgCreditRecovery portCfgCreditRecovery Enables or disables credit recovery on a port. Synopsis Description portcfgcreditrecovery --disable | --enable [slot/]port Use this command to enable or disable credit recovery on a port. The credit recovery feature enables credits or frames to be recovered. Only ports configured as long distance ports can utilize the credit recovery feature. The default credit recovery configuration is enabled.
portCfgDefault 2 portCfgDefault Restores the port configuration to factory default values. Synopsis Description portcfgdefault [slot/][ge]port Use this command to reset any special port configuration values to their factory defaults. This command persistently disables ports capable of routing, which is the factory default value. You can view the current port configuration using the portCfgShow command. This command does not change the state of a port.
2 portCfgEport portCfgEport Enables or disables E_Port capability on a port. Synopsis Description portcfgeport [slot/]port,mode Use this command to enable or disable E_Port capability on a port. E_Port capability is enabled by default. When an interswitch link (ISL) is connected to a port and the port's E_Port capability is disabled, the ISL is segmented, and all traffic between the switches stops. Fabric management data, such as zoning information, can no longer be exchanged through this port.
portCfgEXPort 2 portCfgEXPort Sets a port to be an EX_Port, and sets and displays EX_Port configuration parameters.
2 portCfgEXPort If the Fabric Parameter value is “Auto Negotiate”, the port ID format, R_A_TOV, and E_D_TOV values display the negotiated values indicated by “(N)” next to them. The negotiated values are what the edge switch specifies in the ELP request. If the state is “Not OK”, the R_A_TOV and E_D_TOV display “Not Applicable”. By default, all EX_Ports are auto-ELP enabled.
portCfgEXPort 2 an error message is posted, and the command fails. Valid values are as follows: 0 Brocade Native mode. 1 McDATA Open Fabric mode. 2 McDATA Fabric mode. 3 MCDATA fabric legacy mode. Note that this mapping between mode values and modes is NOT the same as the mapping used when setting interoperability modes with the interopMode, command. -i mode Examples Enables or disables Insistent Domain Id (IDID) for the specified EX_Port. Specify 1 to enable IDID, specify 2 to disable IDID.
2 portCfgFportBuffers portCfgFportBuffers Configures F_Port buffer allocation. Synopsis portcfgfportbuffers --enable [slot/]port buffers portcfgfportbuffers --disable [slot/]port Description Use this command to change the default buffer allocation for an F_Port and to allocate a specified number of buffers to the port. When port buffer allocation is enabled, the number of buffers specified override the default F_Port buffer allocation.
portCfgGport 2 portCfgGport Designates a port as a G_Port; removes G_Port designation. Synopsis Description Note Operands Examples portcfggport [slot/]port,mode Use this command to designate a port as a G_Port. After successful execution of this command, the switch attempts to initialize the specified port as an F_Port only, and does not attempt loop initialization (FL_Port) on the port. A port designated as a G_Port can become an E_Port. This configuration can be cleared but not set on VE/VEX_Ports.
2 portCfgISLMode portCfgISLMode Enables or disables ISL R_RDY mode on a port. Synopsis Description portcfgislmode [slot/]port,mode Use this command to enable or disable interswitch link read-ready (ISL R_RDY) mode on a port. Use the portCfgShow command to determine whether ISL R_RDY mode is enabled on a port. In ISL R_RDY mode, the port sends a primitive signal that the port is ready to receive frames. The port sends an exchange link parameter (ELP) with flow control mode 02.
portCfgISLMode 2 To disable ISL R_RDY mode on a port: switch:admin> portcfgislmode 1/3, 0 See Also configure, portCfgLongDistance, portCfgShow Fabric OS Command Reference 53-1001186-01 565
2 portCfgLongDistance portCfgLongDistance Configures a port to support long distance links. Synopsis Description portcfglongdistance [slot/]port [distance_level] [vc_translation_link_init] [desired_distance] Use this command to allocate sufficient numbers of full size frame buffers on a particular port or to support a specified long distance link. The port can only be used as an E_Port. Changes made by this command are persistent across switch reboots and power cycles.
portCfgLongDistance distance_level 2 Specify the long distance level as one of the following (the numerical value representing each distance_level is shown in parentheses): L0 (0) Specify L0 to configure the port as a regular port. A total of 20 full-size frame buffers are reserved for data traffic, regardless of the port’s operating speed; therefore, the maximum supported link distance is up to 10 km at 1 Gbps, up to 5 km at 2 Gbps, up to 2 km at 4 Gbps and up to 1 km at 8 Gbps.
2 portCfgLongDistance Examples To configure a switch port 63 to support a 100 km link and be initialized using the long distance link initialization protocol: switch:admin> portcfglongdistance 4/15 LS 1 100 switch:admin> portshow 4/15 portCFlags: 0x1 portFlags: 0x20001 PRESENT LED portType: 1.
portCfgLport 2 portCfgLport Configures a port as an L_Port. Synopsis Description Notes portcfglport [[slot/]port] locked_mode [private_mode] [duplex_mode]] Use this command to designate a port as an L_Port, and to configure its behavior. When a port is designated as an L_Port, the switch attempts to initialize that port as a fabric L_Port (FL_Port). The switch will never attempt a point-to-point (F_Port) initialization on the port. By default the L_Port will be a public L_Port.
2 portCfgLport Locked L_Port .. .. .. .. Locked G_Port .. .. .. .. Disabled E_Port .. .. .. .. ISL R_RDY Mode .. .. .. .. RSCN Suppressed .. .. .. .. Persistent Disable.. .. .. .. NPIV capability .. .. .. .. QOS E_Port .. .. .. .. EX Port .. .. .. .. Mirror Port .. .. .. .. Rate Limit .. .. .. .. Credit Recovery .. .. .. .. Fport Buffers .. .. .. .. Port Auto Disable .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .
portCfgNPIVPort 2 portCfgNPIVPort Enables or disables N_Port ID virtualization (NPIV) functionality on a port. Synopsis Description [slot/]port,mode Use this command to enable or disable NPIV functionality on a port. NPIV is only applicable to F_Ports.
2 portCfgNPIVPort Examples To enable NPIV functionality on a port: switch:admin> portcfgnpivport 1/3 1 To display NPIV functionality on a port: switch:admin> portcfgshow Ports of Slot 1 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 -----------------+--+--+--+--+----+--+--+--+----+--+--+--+----+--+--+-Speed AN AN AN AN AN AN AN AN AN AN AN AN AN AN AN AN AL_PA Offset 13 .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. Trunk Port ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON Long Distance .. .. .. .. .. .. .. ..
portCfgNPort 2 portCfgNPort Enables or disables N_Port functionality for an Access Gateway port. Synopsis Description Notes portcfgnport [port_number | port_range] [mode] Use this command to enable or disable N_Port functionality for an Access Gateway port. The enabled N_Port automatically comes online if it is connected to an enterprise fabric switch that supports NPIV NPIV capability should be enabled on the ports connected to the Access Gateway.
2 portCfgPersistentDisable portCfgPersistentDisable Persistently disables a port. Synopsis Description portcfgpersistentdisable [[slot/]port] Use this command to persistently disable a port, or use this command without operands to display the persistently disabled status of all ports on the switch. Persistently disabled ports remain disabled across power cycles, switch reboots, and switch enables. By default, a port is enabled persistently, unless the port is capable of routing.
portCfgPersistentEnable 2 portCfgPersistentEnable Persistently enables a port. Synopsis Description portcfgpersistentenable [[slot/]port] Use this command to persistently enable a port or a range of ports, or use this command without operands to display the persistently disabled status of all ports on the switch. Persistently enabled ports remain enabled across power cycles, switch reboots, and switch enables. By default, a port is enabled persistently, unless the port is capable of routing.
2 PortCfgQos PortCfgQos Enables or disables QoS, sets the default configuration, and sets and resets the ingress rate limit. Synopsis portcfgqos --default | --disable | --enable [slot/]port portcfgqos --setratelimit [slot /]port ratelimit portcfgqos --resetratelimit [slot/]port portcfgqos --help Description Use this command to enable or disable Adaptive Networking/Quality of Service (AN/QoS) on a port, to set or reset the ingress rate limit for the specified port, and to set the default behavior.
PortCfgQos Examples 2 To enable QoS on a port. switch:admin> portcfgqos --enable 3/15 To disable QoS on a port.
2 portCfgShow portCfgShow Displays port configuration settings. Synopsis portcfgshow portcfgshow [[slot/]port] portcfgshow option [slot/][ge]port [arguments] [optional arguments] Description Use this command to display the current configuration of a port. If no operand is specified, this command displays port configuration settings for all ports on a switch, except gigabit Ethernet (GbE) ports.
portCfgShow 2 VC Link Init Displays (..) or OFF when the long distance link initialization option is turned off. Displays ON when it is turned on for long distance mode. This value is set by the portCfgLongDistance command. Locked L_Port Displays ON when the port is locked to L_Port only. Displays (..) or OFF when L_Port lock mode is disabled and the port behaves as a U_Port). This value is set by the portCfgLport command. Locked G_Port Displays ON when the port is locked to G_Port only. Displays (..
2 portCfgShow Port Auto Disable Notes Displays On when the Auto Disable feature is enabled on a port or (..)/OFF when disabled. This feature causes ports to become disabled when they encounter an event that would cause them to reinitialize. This feature is enabled by the portCfgAutoDisable command. The feature is disabled by default. The output of this command may vary depending on the hardware platform and port type.
portCfgShow Locked L_Port .. Locked G_Port .. Disabled E_Port .. ISL R_RDY Mode .. RSCN Suppressed .. Persistent Disable.. NPIV capability ON QOS E_Port ON EX Port .. Mirror Port .. FC Fastwrite .. Rate Limit .. Credit Recovery ON Port Auto Disable .. .. .. .. .. .. .. ON ON .. .. .. .. ON .. .. .. .. .. .. .. ON ON .. .. .. .. ON .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ON ON ON ON ON ON ON ON ON ON .. .. .. .. .. .. .. .. .. .. ON .. .. .. .. .. .. .
2 portCfgShow To display the configuration settings for a port with Access Gateway enabled: SW4016_5311:admin> portcfgshow Ports of Slot 0 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 -----------------+--+--+--+--+----+--+--+--+----+--+--+--+----+--+--+-Speed AN AN AN AN AN AN AN AN AN AN AN AN AN AN AN AN AL_PA Offset 13 .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. Trunk Port ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON ON Locked N_Port .. .. .. .. .. .. .. .. .. .. ON ON .. ON ON ON Persistent Disable.. ..
portCfgShow 2 -----------------------------Iproute Configuration: IP Address Mask Gateway Metric -----------------------------------------------------IPv6ddress Len Gateway Metric -----------------------------------------------------Fciptunnel configuration: IPV4 FCIP TUNNEL(S) ------------------------------------------Tunnel ID 0 Remote IP Addr 192.168.60.180 Local IP Addr 192.168.60.
2 portCfgShow To display VLAN tagging on a GbE port (refer to the portCfg help page for an explanation of the displayed parameters): switch: admin> portcfgshow vlantag 8/ge0 Port: 8/ge0 IpIfAddress VlanId L2 CoS Dest IP Address Flags ----------------------------------------------------192.168.10.1 100 7 192.168.10.1 App 192.168.10.1 100 3 0.0.0.
portCfgSpeed 2 portCfgSpeed Configures the speed for a single port. Synopsis Description portcfgspeed [slotnumber/]portnumber, speed Use this command to set the speed on a specified port. This command disables and then re-enables the port, and the port comes online with the new speed setting. The configuration is saved in nonvolatile memory and is persistent across switch reboots or power cycles. Use the portShow command to display actual port speed levels.
2 portCfgTrunkPort portCfgTrunkPort Enables or disables trunking on a port. Synopsis Description portcfgtrunkport [slot/]port[,] mode Use this command to enable or disable trunking on a port. Use switchCfgTrunk to enable or disable trunking on all ports of a switch. When the command is executed to update the trunking configuration, the port to which the configuration applies is disabled and subsequently re-enabled with the new trunking configuration.
portCfgVEXPort 2 portCfgVEXPort Configures a port as a VEX_Port connected to an FC-IP and sets and displays VEX_Port configuration parameters.
2 portCfgVEXPort The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. Operands This command has the following operands: -a admin Enables or disables the specified port as a VEX_Port. Valid values are 1 (enable as VEX_Port), 2 (disable as VEX_Port and enable as non-VEX_Port). portCfgDefault may also be used to disable VEX_Ports.
portCfgVEXPort 2 Front WWN: 50:06:06:9e:20:9f:ce:10 Principal Switch: 7 principal WWN: 10:00:00:60:69:c0:05:8a Fabric Parameters: Auto Negotiate R_A_TOV: 9000(N) E_D_TOV: 2000(N) Edge fabric's primary wwn: N/A Edge fabric's version stamp: N/A To set the fabric ID of port 2/21 to 5 and the port ID format to core: switch:admin> portcfgvexport 2/21 -f 5 -p 1 To configure port 2/20 as a VEX_Port and set the fabric ID to 4: switch:admin> portcfgvexport 2/20 -a 1 -f 4 To disable fabric parameter negotiation
2 portCmd portCmd Diagnoses intelligent ports. Synopsis Description Notes portcmd action [slot/]geport arguments Use this command to invoke the end-to-end IP path performance (ipperf) characterization feature, or to ping or trace route to a destination IP host from an intelligent GbE port. Virtual LAN (VLAN) tagging is supported on the Brocade FR4-18i and all 7500 platforms that run Fabric OS v6.0.0 or later.
portCmd 2 -r committed_rate Specifies a committed rate for the data stream, in Kbps. If specified, the traffic generator is limited by a traffic shaper. This characterizes the end-to-end IP path performance based on the data rate configured for a tunnel between the same end-points. If a rate is not specified, the traffic generator competes for uncommitted bandwidth. This operand is optional. -t running_time Specifies total time to run the test traffic stream, in seconds.
2 portCmd -d dst_ip Specifies the destination IP address to which to target the ping request. IPv6 addresses are supported. -n num_requests Specifies the number of ping requests. Valid values are 1 to 255. The default is 4. This operand is optional. -q service_type Specifies the type of service in the ping request. The default is 0 and service_type must be an integer from 0 to 255. This operand is optional. -t ttl Specifies the time to live. Valid values are 1 to 255. The default is 100.
portCmd 2 -z size Specifies the size, in bytes, of the trace route packet to use. The default is 64 bytes. In an IPv4 environment, the ICMP/IP header occupies 28 bytes. In an IPv6 environment, it occupies 48 bytes. The total size, including ICMP/IP headers (28 or 48 bytes without IP options), cannot be greater than the IP MTU configured on the interface. This operand is optional. -v vlan_id Specifies the VLAN ID. Values must be in the range of 1 - 4094. There is no default value.
2 portDebug portDebug Sets debug level and verbose level of port modules. Synopsis Description Note Operands Examples portdebug dbg_lvl, vbs_lvl Use this command to set the debug level and verbose level of port modules. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
portDisable 2 portDisable Disables a port. Synopsis Description portdisable [slot/]port Use this command to disable a port. If a port is connected to another switch when disabled, the fabric may reconfigure. Devices connected to this port can no longer communicate with the fabric. If the port was online before being disabled, a state transition will be indicated in one of the following ways: RSCN, SNMP trap, or Web pop-up window.
2 portEnable portEnable Enables a port. Synopsis Description portenable [slot/]port Use this command to enable a port. If a port is connected to another switch when enabled, the fabric may reconfigure. Devices connected to the port can now communicate with the fabric. For ports that come online after being enabled, the following indications might be sent to indicate a state transition: RSCN, SNMP trap, Web pop-up window.
portErrShow 2 portErrShow Displays port error summary. Synopsis Description porterrshow Use this command to display an error summary for all ports. The display contains one output line per port. Numeric values exceeding 999 are displayed in units of thousands (k), or millions (m) if indicated.
2 portErrShow 8: 9: 10: 11: 12: 13: 14: 15: 16: 17: 18: 19: 527k 38m 34 0 777 2.2k 0 0 0 0 0 0 44k 37k 38 0 37 38 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 32 29 12 39k 13 12 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 7 6 7 6 0 4 39k 6.
portFlagsShow 2 portFlagsShow Displays the port status bitmaps for all ports in a switch. Synopsis Description Note portflagsshow Use this command to display the following status for a port: SNMP Displays whether the port is online or offline. Physical Displays the port physical status. Valid values are In_Sync and No_Light. Flags Displays whether there is an SFP inserted in the port, whether the port is active, and the port type.
2 portLedTest portLedTest Cycles user port LEDs. Synopsis Description portledtest [-npass count][-ports itemlist] Use this command to exercise the user port LEDs in the current switch on and off by setting the ATTN LEDs to green for the ON condition and unlighted for the OFF condition. The SPEED LEDs are initially set to black before the command execution. The SPEED LEDs are set to green once the command is executing.
portLogClear 2 portLogClear Clears the port log. Synopsis Description portlogclear Use this command to clear the port log. You might want to clear the port log before triggering an activity so that the log displays only the log events related to that activity. If the port log is disabled, portLogClear enables it. The port log is disabled automatically when certain errors occur to allow the collection of all the information needed to understand the cause of the error.
2 portLogConfigShow portLogConfigShow Displays the current port log configuration. Synopsis Description Note portlogconfigshow Use this command to display the current port log configuration. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
portLogDisable 2 portLogDisable Disables the port log facility. Synopsis Description Note portlogdisable Use this command to disable the port log facility. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 portLogDump portLogDump Displays the port log without page breaks. Synopsis Description portlogdump [count[, saved[, portid]]] Use this command to display the port log, listing all entries in the log without page breaks. This command displays the same information as portLogShow, but portLogShow prompts you to press Enter between each page. If the port log is disabled, the following message displays as the first line: WARNING: port log is disabled Refer to the portLogClear command for more information.
portLogDumpPort 2 portLogDumpPort Displays the port log of a specified port without page breaks. Synopsis Description portlogdumpport portid Use this command to display the port log of a specified port. The command displays all entries in the log without any page breaks. It is identical to portLogShowPort, except that portLogShowPort prompts you to press Enter between each page. Port logs are circular log files in the switch firmware which can save up to 8,192 entries.
2 portLogEnable portLogEnable Enables the port log facility. Synopsis Description Note portLogEnable Use this command to enable the port log facility. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
portLogEventShow 2 portLogEventShow Displays information about port log events. Synopsis Description Note portlogeventshow Use this command to display information about the ID associated with the various port log events. The Disabled field indicates whether the port log for that event ID is disabled (1) or enabled (0). The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 portLoginShow portLoginShow Displays port login status of devices attached to the specified port. Synopsis Description portloginshow [slotnumber/]portnumber Use this command to display port login status received from devices attached to the specified port. For each login, this command displays the following fields: Type Type of login can display one of the following: fd FDISC, Discover F_Port Service Parameters or Virtual N_Port login. fe FLOGI, Fabric Login to Fabric F_Port.
portLogPdisc 2 portLogPdisc Sets or clears the debug_pdisc_flag. Synopsis Description Note Operands portlogpdisc 0 | 1 Use this command to set or clear the debug_pdisc_flag. This command is part of the environmental monitor. A setting of 1 will enable logging of Port Discovery parameters. The PDISC log is disabled by default. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 portLogReset portLogReset Enables the port log facility. Synopsis Description Notes portlogreset Use this command to enable the port log facility. Refer to portLogClear for events that might disable the port log facility. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
portLogResize 2 portLogResize Resizes the port log to a specified number of entries. Synopsis Description Note Operands portlogresize num_entries Use this command to resize the port log to a specified number of entries. If the specified number of entries is less than the already configured port log size, there is no change. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 portLogShow portLogShow Displays the port log with page breaks. Synopsis Description portlogshow [count[, saved]] Use this command to display the port log, page by page. The portLogShow command displays the same information as portLogDump, but one page at a time. The port log is a circular log file in the switch firmware, which can save up to 32,768 entries. Refer to portLogConfigShow to display the current port log size. Once the log has reached the maximum size, new entries displace the oldest ones.
portLogShow fcout Outgoing Fibre Channel information unit. read Information unit header log from read operation. write Information unit header log from write operation. err Information unit header log of an FC error frame. frame FC frame payload. nsRemQ Interswitch name server query. rscn RSCN. xalloc Allocate an exchange. xfree Free an exchange. xerr Exchange error. xstate Exchange state. payload Frame payload. Port Displays the port number that logged the event.
2 portLogShow Tx & Rx Header words 0,1,4 (R_CTL,D_ID,S_ID,OX_ID,RX_ID) and the first payload word. reject FC-PH reject reason. busy FC-PH busy reason. ctin Argument 0 is divided into two 16-bit fields: [A] a bit map indicating whether subsequent arguments are valid (0001 means argument 1 is valid, 0003 means arguments 1 and 2 are valid). [B] the CT-based service command code. Argument 1 is the first word of the CT payload, if applicable (as specified in [A]).
portLogShow 2 Offline 3 Testing 4 Faulty 5 E_Port 6 F_Port 7 Segmented 2 pstate AC Active State LR1 Link Reset: LR Transmit State LR2 Link Reset: LR Receive State LR3 Link Reset: LRR Receive State LF1 Link Failure: NOS Transmit State LF2 Link Failure: NOS Receive State OL1 Offline: OLS Transmit State OL2 Offline: OLS Receive State OL3 Offline: Wait for OLS State LIP reason 8001 Retry loop init. 8002 Start loop after gaining sync. 8003 Restart loop after port reset.
2 portLogShow Note Operands Examples The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details. This command has the following operands: count Specify the maximum number of lines to display. Only the most recent count entries are displayed. This operand is optional. saved Specify a nonzero value to display the saved port log from the last switch fault.
portLogShowPort 2 portLogShowPort Displays the port log of a specified port with page breaks. Synopsis Description portlogshowport [portid] Use this command to display the port log of the specified port, showing all entries in the log with page breaks. It is identical to portLogDumpPort, except that portLogDumpPort does not prompt you to press Enter between each page of output.
2 portLogTypeDisable portLogTypeDisable Disables the port log of a specified type. Synopsis Description Note Operands portlogtypedisable id Use this command to disable the port log for a specified port log type. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
portLogTypeEnable 2 portLogTypeEnable Enables the port log of a specified port log type. Synopsis Description Note Operands portlogtypeenable id Use this command to enable the port log for a specified port log type. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 portLoopbackTest portLoopbackTest Performs a functional test of port N->N path. Synopsis Description portloopbacktest [--slot number][-nframes count][-lb_mode mode][-spd_mode mode] [-ports itemlist] Use this command to verify the functional operation of the switch by sending frames from the port N transmitter and looping them back into the same port’s receiver. The loopback is done at the parallel loopback path. The path traversed in this test does not include the media or the fiber cable.
portLoopbackTest Operands This command has the following operands: --slot number Specifies the slot number on which to run the diagnostics. The ports specified will be relative to this slot number. The default is 0 and designed to operate on fixed-port-count products. -nframes count Specifies the number of frames to send. The test progresses until the specified number of frames has been transmitted on each port. The default value is 10. -lb_mode mode Specifies the loopback mode for the test.
2 portLoopbackTest See Also 622 TIMEOUT Did not receive a frame in the given timeout period. XMIT Frame transmission failure.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
portMirror 2 portMirror Adds, deletes, or displays mirror connections. Synopsis portmirror --show portmirror --add [slotnumber/]portnumber sourceID DestID portmirror --delete [sourceID DestID] Description Use this command to add, delete, or show a mirror connection between two ports, a source and a destination port. The SourceID must be local to the switch. The DestID can be either on the local switch or on a different switch. Any given SourceID can only participate in four mirror connections.
2 portShow -snapstart Resets TCP statistics. The collection of the statistics re-starts when this command is executed. It ends when the -snapshow option is executed. -snapshow Displays the TCP statistics that were collected since startup or since the statistics were reset with the -snapshow command. ipif Displays the IP interface ID, IP address, netmask, and MTU for IPv4 addresses. Displays the prefix instead of the netmask for IPv6 addresses.
2 portShow inbandmgmt Examples Displays the status of the inband management configuration and IP addresses configured to enable inband management on the Brocade 7500 through GbE port interfaces. This command requires a port to be specified and displays the IP addresses for that port. In addition the output shows whether inband management is enabled or disabled. To display the routing table, use the portshow iproute command.
2 portShow Front Phantom: State: OK Cur Dom ID: 160 WWN: 50:00:51:e3:60:ee:0e:14 Pr Switch Info: Dom ID: 5 WWN: 10:00:00:05:1e:34:02:04 Fabric params: R_A_TOV: 10000 E_D_TOV: 2000 PID fmt: core Authentication Type: None Hash Algorithm: N/A DH Group: N/A Edge fabric's primary wwn: N/A Edge fabric's version stamp: N/A portDisableReason: None portCFlags: 0x1 portFlags: 0x903 PRESENT ACTIVE G_PORT U_PORT EX_PORT LOGICAL_ONLINE LOGIN portType: 10.
portShow 2 Interface IP Address NetMask MTU ---------------------------------------------3 192.168.60.103 255.255.255.0 1700 Interface IP Address NetMask MTU ---------------------------------------------4 192.168.60.104 255.255.255.0 1400 Interface IP Address NetMask MTU ---------------------------------------------5 192.168.60.105 255.255.255.0 2000 Interface IP Address NetMask MTU ---------------------------------------------6 192.168.60.106 255.255.255.
2 portShow Keepalive Timeout 10 Max Retransmissions 8 VC QoS Mapping off DSCP Marking (Control): 0, DSCP Marking (Data): 0 VLAN Tagging Not Configured TCP Byte Streaming on Status : Inactive Connected Count: 0 Port: ge1 ------------------------------------------Tunnel ID 0 Tunnel Description "This is a test Description of this tunnel" Remote IP Addr 192.168.10.10 Local IP Addr 192.168.10.
portShow 2 Runtime parameters: Send MSS 1460 Bytes Sender stats: smoothed roundtrip 0 ms (HWM 1 ms), variance 0 (HWM 562) peer advertised window 20443136 Bytes negotiated window scale (shift count) 9 congestion window 169464 Bytes slow start threshold 112500 Bytes operational mode: congestion avoidance 0 packets queued: TCP sequence# NXT(3715211236) 0 packets in-flight (HWM 3) Send.
2 portShow 2 pkt/s 30s avg, 5 pkt/s lifetime avg 34118172 output Bytes 1655 Bps 30s avg, 4305 Bps lifetime avg 951 packets lost (retransmits) 12.25% loss rate 30s avg 38563 input packets 2 pkt/s 30s avg, 4 pkt/s lifetime avg 8208640 input Bytes 699 Bps 30s avg, 1035 Bps lifetime avg Data transfer TCP connection: Local 10.10.9.100:4100, Remote 10.62.0.
portShow 2 IPSec Policy 1 ----------------------------------------Authentication Algorithm: SHA-1 Encryption: AES-128 SA Life (seconds): 28800 Pre-Shared Key testingFIPSandIPSec To display the TCIP connection history after the connection was severed: Switch:admin> portshow fciptunnel ge1 0 -hist Port: ge1 ------------------------------------------Tunnel ID 0 Tunnel Description "This is a test Description of this tunnel" Remote IP Addr 192.168.114.2 Local IP Addr 192.168.114.
2 portShow To display a snapshot of the TCP statistics: Switch:admin> portshow fciptunnel ge1 0 -snapshow Port: ge1 ------------------------------------------Tunnel ID 0 Tunnel Description "This is a test Description of this tunnel" Remote IP Addr 192.168.114.2 Local IP Addr 192.168.114.1 Remote WWN Not Configured Local WWN 10:00:00:05:1e:38:84:65 Compression off Fastwrite off Tape Pipelining off Committed Rate 900000 Kbps (0.
portShow 2 Min Retransmit Time 100 Keepalive Timeout 10 Max Retransmissions 8 VC QoS Mapping off DSCP Marking (Control): 0, DSCP Marking (Data): 0 VLAN Tagging Not Configured TCP Byte Streaming on Status : Active Connected Count: 1 Uptime 5 minutes, 26 seconds TCP data and control statistics snapshots have been reset for tunnel 0 To show the ARP entries with local MAC address for a GbE port: switch:admin> portshow arp 12/ge0 -lmac Port: ge0 Local MAC Address: 00:05:1e:35:1e:e5 IP Address Mac Address Flag
2 portShow iac_credits_timestamp: 0x0000030DF1E6C770 iac_credits_time_savg: 907614 microseconds iac_credits_time_max: 1000221 microseconds iac_e2e_latency_savg: 81800 microseconds iac_e2e_latency_max: 90074 microseconds iac_credits_timer_abort: 0 iac_credits_timer_nobuff: 0 iac_hold_head = 0x00000000 iac_hold_tail = 0x00000000 Internal Knobs for tuning Credit processing: ============================================ ip_api_data_credit_target = 32 ip_api_data_credit_ratio = 80 ip_api_credit_time = 15 ip_api
portShow 2 To display Byte Streaming parameters: switch:admin> portshow fciptunnel ge1 0 -bstr Port: ge1 ------------------------------------------Tunnel ID 0 Remote IP Addr 192.168.32.2 Local IP Addr 192.168.32.1 Remote WWN Not Configured Local WWN 10:00:00:05:1e:41:2f:2e Compression off Fastwrite on Tape Pipelining off Committed Rate 400000 Kbps (0.
2 portShow To displaysthe same information as the previous example but post selected statistical areas: switch:admin> portshow ficon ge0 all -fdcb 10008000 -clear To display the inband management interfaces configured on the 7500: switch:admin> portshow inbandmgmt ge1 Port: ge1 Inband Management: Enabled CP Interface IP Address NetMask MTU ---------------------------------------------0 192.168.255.1 255.255.255.
portStats64Show 2 portStats64Show Displays the 64-bit hardware statistics for a port. Synopsis Description portstats64show [slotnumber/]portnumber Use this command to display the following hardware statistics for a port. Two integers are reported for most values. In such cases, the top word is the most significant. stat64_wtx Number of 4-byte words transmitted. stat64_wrx Number of 4-byte words received. stat64_ftx Number of frames transmitted. stat64_frx Number of frames received.
2 portStats64Show stat64_rateRxPeakByte Rx peak Byte rate (Bps). stat64_PRJTFrames Number of P_RJT frames transmitted. stat64_PBSYFrames Number of P_BSY transmitted. stat64_inputBuffersFull Occasions on which input buffers are full. stat64_rxClass1Frames Class 1 frames received. Note Operands Examples The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
portStats64Show 2 er_bad_eof 0 0 er64_enc_out 0 9131157 er64_disc_c3 0 0 stat64_rateTxFrame stat64_rateRxFrame stat64_rateTxPeakFrame stat64_rateRxPeakFrame stat64_rateTxByte stat64_rateRxByte stat64_rateTxPeakByte stat64_rateRxPeakByte stat64_PRJTFrames top_int : Frames with bad end-of-frame bottom_int : Frames with bad end-of-frame top_int : Encoding error outside of frames bottom_int : Encoding error outside of frames top_int : Class 3 frames discarded bottom_int : Class 3 frames discarded 17 Tx fram
2 portStatsClear portStatsClear Clears the hardware statistics of a port. Synopsis portstatsclear [slot/]port Description Use this command to clear the hardware statistics for a specified port. This command also clears the hardware statistics for the associated three ports in the target port's quad, including ALPA-based CRC monitor, End-to-End monitor, and Filter-based performance monitor statistics. interswitch link (ISL) monitor statistics are not cleared by this command.
portStatsShow 2 portStatsShow Displays port hardware statistics. Synopsis portstatsshow [slotnumber/]portnumber portstatsshow [ge | ip | fcip ] [slotnumber/]geportnumber [ipaddress | tunnelnumber] Description Use this command to display port hardware statistics counters. Some counters are platform- or port-specific and display only on those platforms and ports. All statistics have a maximum 32-bit value of 4,294,967,295.
2 portStatsShow er_toolong The number of frames longer than the maximum frame length. er_bad_eof The number of frames with bad end-of-frame. er_enc_out The number of encoding error outside frames. er_bad_os The number of invalid ordered sets (platform- and port-specific). er_c3_timeout The number of class 3 frames discarded due to timeout (platform- and port-specific). er_c3_dest_unreach The number of class 3 frames discarded due to destination unreachable (platform and port specific).
portStatsShow ipaddress fcip Optionally specifies an IP address to display statistics only for the specified IP address. Displays the GbE statistics on all FCIP tunnels. tunnelnumber Examples 2 Optionally specifies a tunnel ID to display statistics only for the specified FCIP tunnel.
2 portStatsShow ge_stat_tx_bcast_frms ge_stat_tx_vlan_frms ge_stat_tx_pause_frms ge_stat_rx_frms ge_stat_rx_octets ge_stat_rx_ucast_frms ge_stat_rx_mcast_frms ge_stat_rx_bcast_frms ge_stat_rx_vlan_frms ge_stat_rx_pause_frms ge_err_carrier ge_err_length ge_err_crc ge_err_abort ge_err_overrun ge_err_fifo_ovf 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 GE transmitted broadcast frames GE transmitted vlan frames GE transmitted pause frames GE received frames GE received octets GE received unicast frames GE received mult
portSwap 2 portSwap Swaps area numbers of two ports. Synopsis Description portswap [slotnumber1/]portnumber1 [slotnumber2/]portnumber2 Use this command to swap area numbers for a pair of ports. Both ports must be disabled prior to executing this command and the port-swapping feature must be enabled using portSwapEnable. The result of this operation is persistent across reboots and power cycles. To undo a previous port swap, execute portSwap again on the same two ports.
2 portSwapDisable portSwapDisable Disables the portswap feature. Synopsis Description portswapdisable Use this command to disable the portswap feature. The portSwap command cannot be used after this feature is disabled. The disabled state of the portswap feature is persistent across reboots and power cycles. Enabling or disabling the portswap feature does not affect previously performed portswap operations.
portSwapEnable 2 portSwapEnable Enables the portswap feature. Synopsis Description portswapenable Use this command to enable the portswap feature. The portSwap command cannot be used unless the feature is first enabled with this command. The enabled state of the portswap feature is persistent across reboots and power cycles. Enabling or disabling the portswap feature does not affect previously performed portswap operations.
2 portSwapShow portSwapShow Displays the state of the portswap feature. Synopsis portswapshow Description Use this command to display the enabled state of the portswap feature, as well as port and area information for ports whose area number differs from the default area number. The default area number of a port is the same as its switch port number. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
portTest 2 portTest Performs a functional test of a switch in a live fabric. Synopsis Description porttest [-ports itemlist][-iteration count][-userdelay time][-timeout time][-pattern pattern] [-patsize size][-seed seed][-listtype porttype] Use this command to isolate problems in a single replaceable element and to trace problems to near-end terminal equipment, far-end terminal equipment, or the transmission line.
2 portTest • From the default switch to a switch that supports Virtual Fabrics but has the VF feature disabled. To ensure coverage of all ports, it is recommended that you run portTest before enabling Virtual Fabrics on the switch. It is recommended that you run portTest before you configure the logical switches or disable the Virtual Fabric feature on the switches connected to the ports you are testing.
portTestShow 2 portTestShow Displays information from portTest. Synopsis Description Note Operands porttestshow [-ports itemlist] Use this command to display a snapshot of information from portTest. The following information displays: • • • • Pass or fail information on a given port. • • • • • • • • • • • Pattern used in testing. Port type tested. Current state of portTest (NO TEST, TESTING, or TEST DONE).
2 portTrunkArea portTrunkArea Assigns or removes a trunk area (TA) from a port or port trunk group; displays masterless F_Port trunking configuration.
portTrunkArea 2 deskew The time difference for traffic to travel over each F_Port trunk as compared to the F_Port trunk with the shortest travel time in the group. The value is expressed in nanoseconds divided by 10. The firmware automatically sets the minimum deskew value of the shortest F_Port trunk travel time to 15. Master Identifies the master port of the trunk group. Execution of this command is subject to the following restrictions: 1. Only F_Port trunk ports are allowed to be part of a TA.
2 portTrunkArea port Specifies the port number, relative to its slot on bladed systems. -Range Optionally specifies a port range. For example, 9/8-15 on an enterprise-class platform indicates slot 9, ports 8 - 15. Range of ports should fall in the octet trunk range starting from port 0 on a switch or blade. Trunking must be enabled on all ports. --enable Creates a TA assigned to the specified ports.
portTrunkArea Examples 2 To enable masterless F_Port trunking on a standalone switch: 1. Disable ports 36 - 39 by executing portdisable port for each port to be included in the TA. 2. Enable Trunk Area for ports 36 - 39 with area number 37: switch:admin> porttrunkarea --enable 36-39 -area 37 Trunk area 37 enabled for ports 36, 37, 38 and 39. 3. Re-enable ports 36-39 by executing portenable port for each port in the TA. 4.
2 portTrunkArea 32 33 34 35 36 37 38 39 32 33 34 35 36 37 38 39 id id id id id id id id N4 N4 N4 N4 N4 N4 N4 N4 No_Light No_Light No_Light No_Light Online Online Online Online F-Port F-Port F-Port F-Port 20:14:00:05:1e:41:4b:4d 20:15:00:05:1e:41:4b:4d 20:16:00:05:1e:41:4b:4d 2 NPIV public 5.
portTrunkArea 2 4. Enable ports 13 and 14: switch:admin> portenable 10/13 switch:admin> portenable 10/14 5.
2 portZoneShow portZoneShow Displays the enforced zone type of the F_Ports and FL_Ports of a switch. Synopsis Description portzoneshow Use this command to display the enforced zone type of the F_ports and FL_Ports of a switch. Output shows virtual port number (decimal), physical port number (decimal), online status, and if online, port type. If the current zone configuration has been disabled by cfgDisable, the fabric is in non-zoning mode, in which all devices see each other.
powerOffListSet 2 powerOffListSet Sets the order in which slots are powered off. Synopsis Description powerofflistset Use this command to Modify the order in which slots are powered off. This command displays the current order, and then prompts you interactively to confirm or modify the power-off position for each slot.
2 powerOffListSet 2nd 3rd 4th 5th 6th 7th 8th slot slot slot slot slot slot slot to to to to to to to be be be be be be be powered powered powered powered powered powered powered off: off: off: off: off: off: off: (2..10) [9] 2 (3..10) [8] 3 (4..10) [7] 4 (7..10) [7] 10 (7..9) [8] 9 (7..8) [8] 8 (7..
powerOffListShow 2 powerOffListShow Displays the order in which slots are powered off. Synopsis Description powerofflistshow Use this command to display the order in which the physical slots are powered off. Whenever a power supply goes out of service or a field-replaceable unit (FRU) is inserted, the system's available power is compared to the system's required power to determine if there is enough power to operate.
2 psShow psShow Displays power supply status. Synopsis Description psshow Use this command to display the current status of the switch power supplies. The status of each supply is displayed as: OK Power supply functioning correctly. absent Power supply not present. unknown Unknown power supply unit installed. predicting failure Power supply is present but predicting failure. faulty Power supply present but faulty (no power cable, power switch turned off, fuse blown, or other internal error).
reboot 2 reboot Reboots the control processor (CP) in a switch or a director. Synopsis Description reboot [-f] When this command is issued on a switch connected to a fabric, all traffic to and from that switch stops. All Fibre Channel ports on that switch including E_Ports become inactive until the switch comes online.
2 routeHelp routeHelp Displays a list of FSPF-related commands. Synopsis Description Note routehelp Use this command to display a list of fabric-shortest-path-first (FSPF)-related commands. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
secActiveSize 2 secActiveSize Displays the size of the active security database. Synopsis Description secactivesize Use this command to display the size of the active security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 megabyte per logical switch. With up to eight partitions, the total database size on a chassis can be up to 8 megabytes.
2 secAuthSecret secAuthSecret Manages the DH-CHAP shared secret key information. Synopsis secauthsecret --show secauthsecret --set secauthsecret --remove value | --all Description Note Operands Use this command to manage the DH-CHAP shared secret key database used for authentication. This command displays, sets, and removes shared secret key information from the database or deletes the entire database.
secAuthSecret 2 1. WWN for which secret is being set up. 2. Peer secret: The secret of the peer that authenticates to peer. 3. Local secret: The local secret that authenticates peer.
2 secCertUtil secCertUtil Manages certificates on a switch.
secCertUtil Operands 2 This command has the following operands: genkey Generates a public/private key pair. This is the first step in setting up a third-party certificate. When prompted for a key size, enter either 1024 or 2048 bits. The greater the value, the more secure is the connection; however, performance degrades with size. The keys are generated only after all existing CSRs and certificates have been deleted. -nowarn Specifies that no warning is given when overwriting or deleting data.
2 secCertUtil -nowarn export Deletes the specified file without confirmation. This operand is optional. Exports a CSR to a host. This command is typically used to submit a CSR to the Certification Authority (CA) that issues the certificate. The following operands are optional; if omitted, the command prompts interactively for your input. -ldapcacert file name Exports an LDAP CA certificate from the switch to a remote host. -certname certificate name Specifies the name of the certificate to b exported.
secCertUtil 2 -password password Specifies the password for the user account. When using SCP, for security reasons, do not enter a password on the command line. Use the interactive version instead. show Examples Lists all existing PKI-based certificates on the switch. The following operands are optional and exclusive. -ldapcacert Lists existing LDAP certificates. file name Displays the content of the specified certificate.
2 secCertUtil To delete a CSR in non-interactive mode: switch:admin> seccertutil delcsr -nowarn To import an LDAP certificate from a remote host to the local switch in interactive mode: switch:admin> seccertutil import -ldapcacert Select protocol [ftp or scp]: ftp Enter IP address: 195.168.38.206 Enter remote directory: /users/home/remote_certs Enter certificate name (must have ".crt", ".cer" or ".pem" suffix): ldap.
secCertUtil 2 To delete an LDAP CA certificate in interactive mode: switch:admin> seccertutil delete -ldapcacert filename.pem WARNING!!! About to delete certificate: filename.cer ARE YOU SURE (yes, y, no, n): [no] y Deleted LDAP certificate successfully To delete an LDAP CA certificate in non-interactive mode: switch:admin> seccertutil delete -ldapcacert filename.
2 secDefineSize secDefineSize Displays the size of the defined security database. Synopsis Description secdefinesize Use this command to display the size of the defined security database. The command also displays the maximum database size. For switches running Fabric OS v6.2.0 and later, the maximum security database size is 1 Megabyte per logical switch. With up to eight partitions, the total database size on a chassis can be up to 8 Megabytes.
secGlobalShow 2 secGlobalShow Displays the current internal security state information. Synopsis Description secglobalshow Use this command to display security server (secd) specific information as a snapshot of its current state.
2 secGlobalShow Security Defined DataSize 35 bytes Define Sum 215b Zone Size (include enabled configuration) 312 bytes Zone sum e04b215b sec_db: free primaryDLPhase 0 ----wwnDL State----pid tid key sec usec --------- LOG CACHE --------14:08:50 813905136 secipadm_ipchange receives notification 14:08:50 850588912 secProcessIPChange starts processing 14:08:50 850588912 secProcessIPChange acks completion [Output truncated] See Also 688 secActiveSize, secDefineSize Fabric OS Command Reference 53-1001186-0
secHelp 2 secHelp Displays information about security commands. Synopsis Description Note sechelp Use this command to display a list of security commands with a brief description of the commands. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 secPolicyAbort secPolicyAbort Aborts all changes to the defined database that have not been saved. Synopsis Description Notes secpolicyabort Use this command to abort all changes to the defined security database that have not been saved to flash memory and to abort changes to policy creation and modification operations from all the switches if a fabric-wide consistency policy is not set for the particular policy.
secPolicyActivate 2 secPolicyActivate Saves and activates the Defined Security Policy Set. Synopsis Description secpolicyactivate Use this command to activate the current defined security policy to all switches in the fabric. This activates the policy set on the local switch or all switches in the fabric depending on the fabric-wide consistency policy.
2 secPolicyAdd secPolicyAdd Adds members to an existing security policy. Synopsis Description secpolicyadd “name”, “member[;member...]” Use this command to add one or more members to an existing access policy. Each policy corresponds to a management method. The list of members of a policy acts as an access control list for that management method. Before a policy is created, there is no enforcement for that management method; all access is granted.
secPolicyAdd “member” 2 Specify a list of one or more member switches to be included in the security policy. The list must be enclosed in quotation marks; members must be separated by semicolons. Depending on the policy type, members are specified as follows. FCS_POLICY or SCC_POLICY Members This policy type requires member IDs to be specified as WWN strings, Domains, or switch names. If Domain IDs or switch names are used, theswitches associated must be present in the fabric or the command fails.
2 secPolicyCreate secPolicyCreate Creates a new security policy. Synopsis Description secpolicycreate "name" [, "member[;member...]"] Use this command to create a new policy and to edit Switch Connection Control (SCC), Device Connection Control (DCC), and Fabric Configuration Server (FCS) policies on the local switch. All policies can be created only once, except for the DCC_POLICY_nnn. Each DCC_POLICY_nnn must have a unique name.
secPolicyCreate 2 The DCC_POLICY_nnn name has the common prefix DCC_POLICY_ followed by a string of user-defined characters. These characters do not have to be capitalized like regular policy names. Valid values for DCC_POLICY_nnn are user-defined alphanumeric or underscore characters. The maximum length is 30 characters, including the prefix DCC_POLICY_. secpolicycreate DCC_POLICY "*" may be used to indicate DCC lockdown.
2 secPolicyCreate While creating the FCS policy, the local switch WWN is automatically included in the list. Switches included in the FCS list are FCS switches and the remaining switches in the fabric are non-FCS switches. Out of the FCS list, the switch that is in the first position becomes the Primary FCS switch and the remaining switches become backup FCS switches. If the first switch in the FCS list is not reachable, the next switch becomes the Primary.
secPolicyDelete 2 secPolicyDelete Deletes an existing security policy. Synopsis Description secpolicydelete name Use this command to delete an existing security policy from the defined security database. Run secPolicyActivate to delete the policies from the active security policy list. Deleting a security policy does not cause any traffic disruption. Each policy corresponds to a management method. The list of members of a policy acts as an access control list for that management method.
2 secPolicyDelete To delete all stale DCC policies in the fabric: primaryfcs:admin> secpolicydelete ALL_STALE_DCC_POLICY About to clear all STALE DCC policies ARE YOU SURE (yes, y, no, n): [no] y See Also 698 secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPolicyDump, secPolicyRemove, secPolicySave, secPolicyShow Fabric OS Command Reference 53-1001186-01
secPolicyDump 2 secPolicyDump Displays the members of one or all existing security policies. Synopsis Description Notes secpolicydump [“listtype”][, “name”] Use this command to display, without page breaks, the members of an existing policy in the active and defined (saved) databases. When issued without operands, this command displays the members of all security policies. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 secPolicyDump To display all security policies in the active database: switch:admin> secpolicydump "active" ____________________________________________________ ACTIVE POLICY SET FCS_POLICY Pos Primary WWN DId swName -------------------------------------------------1 Yes 10:00:00:05:1e:39:5f:67 3 NeptuneSec 2 No 10:00:00:05:1e:90:09:4a - Unknown SCC_POLICY WWN DId swName -------------------------------------------------10:00:00:05:1e:39:5f:67 3 NeptuneSec 10:00:00:05:1e:90:09:4a - Unknown DCC_POLICY_h1
secPolicyDump 2 To display the FCS policies in the defined database: admin:admin> secpolicydump "Defined","FCS_POLICY" ____________________________________________________ DEFINED POLICY SET FCS_POLICY Pos Primary WWN DId swName -------------------------------------------------1 Yes 10:00:00:05:1e:39:5f:67 3 NeptuneSec 2 No 10:00:00:05:1e:90:09:4a - Unknown To display the SCC policies in the defined database: switch:admin> secpolicydump "Defined","SCC_POLICY" _____________________________________________
2 secPolicyFCSMove secPolicyFCSMove Moves a member in the FCS policy. Synopsis Description Notes secpolicyfcsmove [from, to] Use this command to move an FCS member from one position to another position in the FCS list. Only one FCS can be moved at a time. The first FCS switch in the list that is also present in the fabric is the Primary FCS. If a backup FCS is moved to the first position, it becomes the primary FCS after activation.
secPolicyFCSMove 2 switch:admin> secpolicyfcsmove 3,1 ____________________________________________________ DEFINED POLICY SET FCS_POLICY Pos Primary WWN DId swName -------------------------------------------------1 No 10:00:00:05:1e:35:cd:ef 200 switch3 2 Yes 10:00:00:05:1e:39:5f:67 2 switch1 3 No 10:00:00:05:1e:04:ef:0e 4 switch2 switch:admin> secpolicyactivate About to overwrite the current Active Policy Set. ARE YOU SURE (yes, y, no, n): [no] y secpolicyactivate command was completed successfully.
2 secPolicyRemove secPolicyRemove Removes members from an existing security policy. Synopsis Description Notes secpolicyremove “name” , “member[;member...]” Use this command to remove one or more members from an existing security policy. It is not possible to remove all members from the FCS_POLICY; the local switch WWN cannot be deleted from the FCS policy. In the case of SCC policy, if it is empty after removing all members, all access to the switch itself would be disallowed.
secPolicyRemove 2 parameter can be specified by port number separated by commas, and enclosed in either brackets or parentheses: for example, (2, 4, 6). Ports enclosed in brackets include the devices currently attached to those ports. The following examples illustrate several ways to specify the port values: (1-6) Selects ports 1 through 6. (*) Selects all ports on the switch. [3, 9] Selects ports 3 and 9 and all devices attached to those ports.
2 secPolicySave secPolicySave Saves a defined security policy to persistent memory. Synopsis secpolicysave Description Use this command to save a defined security policy to persistent memory. Secpolicysave saves the modified SCC, DCC, and FCS policies to the Defined Security Policy Set on the local switch. Notes This command is always a local switch operation. A fabric-wide consistency configuration does not affect the behavior of this command.
secPolicyShow 2 secPolicyShow Displays an existing security policy including the FCS policy. Synopsis Description secpolicyshow [“policy_set”[“, name”]] Use this command to display the members of an existing policy in the Active or Defined security policy set. The command can be issued from all FCS switches. This command displays the policy database one page at a time. Use secPolicyDump to display the policy database without page breaks.
2 secPolicyShow To display all security policies from defined databases: switch:admin> secpolicyshow "defined" ____________________________________________________ DEFINED POLICY SET FCS_POLICY Pos Primary WWN DId swName _____________________________________________________ 1 Yes 10:00:00:60:69:30:15:5c 1 primaryfcs 2 No 10:00:00:60:69:30:1e:62 4 switch _________________________________________________________ See Also 708 fddCfg, secPolicyAbort, secPolicyActivate, secPolicyAdd, secPolicyCreate, secPol
secStatsReset 2 secStatsReset Resets one or all security statistics to 0. Synopsis Description secstatsreset [name][,” domain[;domain]”] Use this command to reset one or all security statistics to 0. This command can be issued on any switch to reset the security statistics on the local switch or chassis. If an FCS policy is enabled and secStatsReset is issued on the primary FCS switch, this command can reset security statistics for any or all switches in the fabric.
2 secStatsReset To access DCC policies, enter DCC_POLICY. Violations are not tracked for individual DCC policies. The statistics for all DCC_POLICY violations are grouped together. domain(s) Examples Specify a list of domain IDs on which to reset the security statistics. Specify an asterisk (*) to represent all switches in the fabric or specify a list of domains, separated by semicolons and enclosed in quotation marks.
secStatsShow 2 secStatsShow Displays one or all security statistics. Synopsis Description secstatsshow [name[, “domain[;domain]”]] Use this command to display one or all security statistics. This command can be issued on any switch to display local security statistics. If an FCS policy is enabled and secStatsShow is issued on the primary FCS switch, this command can retrieve and display the security statistics for any or all switches in the fabric.
2 secStatsShow ILLEGAL_CMD To access DCC policies, enter DCC_POLICY. Violations are not tracked for individual DCC policies. The statistics for all DCC_POLICY violations are grouped together. domain Examples Specify one or more domains for which to display the security statistics. Specify an asterisk (*) in quotation marks to represent all switches in the fabric or specify a list of domains separated by semicolons.
sensorShow 2 sensorShow Displays sensor readings. Synopsis sensorshow Description Use this command to display the current temperature, fan, and power supply status and readings from sensors located on the switch. The actual location of the sensors varies, depending on the switch type. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
2 setContext setContext Sets the logical switch context to a specified FID. Synopsis Description setcontext FID Use this command to set the logical switch context to a specified fabric ID (FID). The FID uniquely defines a partition as a logical switch. Use lscfg --show -cfg to display currently configured partitions and their FIDs. A logical switch context defines the boundaries within which a user can execute commands in a Virtual Fabric-aware environment.
setDbg 2 setDbg Sets the debug level of the specified module. Synopsis Description setdbg [module_name][level] Use this command to set the debug level of a specified module. Debug levels filter the display of debug messages to the serial console. By default, no debug messages are displayed. High debug level values can generate a large volume of messages, degrading the system response time. The set of supported modules and their current debug levels are displayed by the command dbgShow.
2 setModem setModem Enables or disables modem dial-in to a control processor (CP). Synopsis Description setmodem [-e] | [-d] Use this command to enable or disable modem dial-in to a CP on those systems that support modem dial-in. When modem dial-in is enabled, you can log in to a CP through a modem, and a modem attached to the CP accepts the call. When modem dial-in is disabled, the modem attached to the CP does not accept the call.
setVerbose 2 setVerbose Specifies module verbose level. Synopsis Description Note Operands Examples setverbose [module_name][level] Use this command to set the verbose level of the specified module. These levels filter the display of the debug message to the serial console. By default, no debug messages are displayed. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 sfpShow sfpShow Displays Small Form-factor Pluggable SFP information. Synopsis Description sfpshow [[slotnumber/]geportnumber | -all] Use this command to display information about Serial Identification SFPs (also known as module definition "4" SFPs). These SFPs provide extended information that describes the SFP’s capabilities, interfaces, manufacturer, and other information. Use this command with no operand to display a summary of all SFPs in the switch.
sfpShow Area 12: -Area 13: -Area 14: -Area 15: -Area 16: id (sw) Vendor: AGILENT (output truncated) 2 Serial No: 0105091301045274 To display detailed SFP information for a Finisar “smart” SFP: switch:user> sfpshow 1/3 Identifier: 3 SFP Connector: 7 LC Transceiver: 050c402000000000 100,200_MB/s M5,M6 sw Inter_dist Encoding: 1 8B10B Baud Rate: 21 (units 100 megabaud) Length 9u: 0 (units 100 meters) Length 50u: 30 (units 10 meters) Length 62.
2 sfpShow To display detailed information for GbE port 0 on an FR4-18i router blade: CS48000:admin> sfpshow 10/ge0 Identifier: 3 SFP Connector: 7 LC Transceiver: 050c402000000000 100,200_MB/s M5,M6 sw Inter_dist Encoding: 1 8B10B Baud Rate: 21 (units 100 megabaud) Length 9u: 0 (units km) Length 9u: 0 (units 100 meters) Length 50u: 30 (units 10 meters) Length 62.
sfpShow 2 Length 9u: 0 (units km) Length 9u: 0 (units 100 meters) Length 50u: 30 (units 10 meters) Length 62.
2 shellFlowControlDisable shellFlowControlDisable Disables XON/XOFF flow control on the console serial port. Synopsis Description shellflowcontroldisable Use this command to disable XON/XOFF flow control on the console serial port. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port. This command cannot run from a Telnet session.
shellFlowControlEnable 2 shellFlowControlEnable Enables XON/XOFF flow control on the console serial port. Synopsis Description shellflowcontrolenable Use this command to enable XON/XOFF flow control to the shell task. Flow control is disabled by default. Because this command changes the flow control on the console serial port, it must be executed from a session that is logged in from the console serial port. This command cannot run from a Telnet session.
2 slotPowerOff slotPowerOff Removes power from a slot. Synopsis Description Note Operands slotpoweroff slotnumber Use this command to turn off the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be of a type that can be powered off. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
slotPowerOn 2 slotPowerOn Restores power to a slot. Synopsis Description Note Operands slotpoweron slotnumber Use this command to turn on the power to a blade unit. The slot must have a valid blade unit present and the blade unit must be currently powered off. The slotShow command reports such slots as being in the state of INSERTED, NOT POWERED ON. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 slotShow slotShow Displays the status of all slots in the system. Synopsis Description slotshow [-m] [-p] Use this command to display the current status of each slot in the system. Depending on the option used, the command retrieves information on blade type, blade ID, status, Brocade model name, and power usage for each slot in the switch or chassis. When no operand is specified, slotShow displays the blade type, blade ID, and status for each slot.
slotShow POWERING UP The blade is present and powering on. LOADING The blade is present, powered on, and loading the initial configuration. 2 DIAG RUNNING POST1 The blade is present, powered on, and running the POST (power-on self-test). DIAG RUNNING POST2 The blade is present, powered on, and running the pre-boot power on self tests. INITIALIZING The blade is present, powered on, and initializing hardware components. ENABLED The blade is on and fully enabled.
2 slotShow 5 6 7 8 9 10 11 12 CORE BLADE CP BLADE CP BLADE CORE BLADE UNKNOWN AP BLADE SW BLADE SW BLADE 52 50 50 52 33 55 51 ENABLED ENABLED ENABLED ENABLED VACANT LOADING DIAG RUNNING POST1 INSERTED, NOT POWERED ON 1 To display power consumption information: switch:user> slotshow -p Slot Blade Type ID DC Power Status Consumption ------------------------------------------------1 SW BLADE 17 33 ENABLED 2 SW BLADE 36 73 ENABLED 3 SW BLADE 39 120 ENABLED 4 AP BLADE 31 140 ENABLED 5 CP BLADE 16 63 ENABL
slotShow 2 To display Brocade model names for each blade in a Brocade DCX-4S: switch:user> slotshow -m lot Blade Type ID Model Name Status -------------------------------------------------1 SW BLADE 51 FC8-48 ENABLED 2 SW BLADE 39 FC10-6 ENABLED 3 CORE BLADE 46 CR4S-8 ENABLED 4 CP BLADE 50 CP8 ENABLED 5 CP BLADE 50 CP8 ENABLED 6 CORE BLADE 46 CR4S-8 ENABLED 7 SW BLADE 51 FC8-48 ENABLED 8 SW BLADE 37 FC8-16 ENABLED See Also bladeDisable, bladeEnable, chassisShow, slotPowerOff, slotPowerOn Fabric OS Comm
2 SnmpConfig SnmpConfig Manages the SNMP agent configuration. Synopsis Description snmpConfig --show | --set | --default [snmpv1 | snmpv3 | accessControl | mibCapability | systemGroup | seclevel] Use this command to manage the configuration of the SNMP agent in the switch. The configuration includes SNMPv1 and SNMPv3 configuration, access control list (ACL), MIB capability, system group, and security level settings. The command supports set, reset to default, and display operations.
SnmpConfig 2 SNMPv1 Configuration Parameters The agent supports six communities and their associated trap recipients and trap recipient severity levels. The first three communities are for read-write (rw) access and the last three are for read-only (ro) access. The default value for the trap recipient of each community is 0.0.0.0. The length of the community string should be in the range of 2 to 16 characters.
2 SnmpConfig The user name must be between 2 and 32 characters long. The default user names are defined with the noAuth and noPriv protocol. The factory default SNMPv3 user names are: User 1: snmpadmin1 User 2: snmpadmin2 User 3: snmpadmin3 User 4: snmpuser1 User 5: snmpuser2 User 6: snmpuser3 The --default option sets the user name and password to default.
SnmpConfig 2 FCIP-MIB Specifying yes means you can access FCIP-MIB variables with an SNMP manager. The default value is yes. SCSI-MIB Specifying yes means you can access FCIP-MIB variables with an SNMP manager. The default value is yes. SW-TRAP Specifying yes means the SNMP management application can receive SW-TRAPS from the switch. The default value is yes. You may also turn individual SW Traps on or off.
2 SnmpConfig 1 Authentication only. 2 Authentication and Privacy. 3 Examples OFF To display the SNMPv1 configuration: switch:admin> snmpConfig --show snmpv1 SNMPv1 community and trap recipient configuration: Community 1: Secret C0de (rw) Trap recipient: 10.32.147.
SnmpConfig 2 To display the mibCapability configuration: switch:admin> snmpconfig --show mibCapability FE-MIB:YES SW-MIB: YES FA-MIB: YES FICON-MIB: YES HA-MIB: YES FCIP-MIB: YES ISCSI-MIB: YES SW-TRAP: YES swFCPortScn: YES swEventTrap: YES swFabricWatchTrap: YES swTrackChangesTrap: YES FA-TRAP: YES connUnitStatusChange: YES connUnitEventTrap: YES connUnitSensorStatusChange: YES connUnitPortStatusChange: YES SW-EXTTRAP: YES FICON-TRAP: YES linkRNIDDeviceRegistration: YES linkRNIDDeviceDeRegistration: YES
2 SnmpConfig See Also References none Refer to the following publications for further information on SNMP: Fabric OS MIB Reference SW_v5_x.
spinFab 2 spinFab Runs functional test of interswitch link (ISL) cabling and trunk group operation. Synopsis Description spinfab [-nmegs count][-ports itemlist][-setfail mode] Use this command to verify the intended functional operation of the interswitch links (ISLs) between switches at the maximum speed by setting up the routing hardware so that test frames received by each E_Port are retransmitted on the same E_Port.
2 spinFab When trunk groups are present, the entire trunk group must be included in the range of ports to test or false failures can occur. If multiple ISL links are present between two switches that support trunking, then it is likely that trunk groups are present and all ports between the two switches should be tested at the same time. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
spinFab 2 ERR_STAT_CRC ERR_STAT_ENCIN ERR_STAT_ENCOUT ERR_STAT_TRUNC FINISH_MSG_ERR INIT MBUF_STATE_ERR NO_SEGMENT PORT_ABSENT PORT_DIED PORT_ENABLE PORT_M2M PORT_STOPPED PORT_WRONG RXQ_RAM_PERR STATS STATS_C3FRX STATS_FRX STATS_FTX TIMEOUT XMIT See Also itemList, portLoopbackTest Fabric OS Command Reference 53-1001186-01 739
2 sshUtil sshUtil Manages public key authentication. Synopsis sshutil allowuser user name sshutil showuser sshutil importpubkey sshutil showpubkeys sshutil delpubkeys sshutil genkey sshutil exportpubkey sshutil delprivkey sshutil help Description Use this command to enable and manage SSH public key authentication on a switch. SSH public key authentication provides a mechanism for authenticating an authorized user without a password.
sshUtil Operands 2 This command supports the following operands: allowuser user name Configures the specified user to perform public key authentication and all related management operations. This operation can only be performed by the default admin. The default admin is, by default, a configured user. Only one user can be configured at any given time.
2 sshUtil genkey prompts for user input on the following parameters: passphrase Accepts a string of arbitrary length. This operand is optional, but creating a pass-phrase is strongly recommended. Good pass phrases are 10-30 characters long, are not simple sentences or otherwise easily guessable and contain a mix of upper and lowercase letters, numbers, and non-alphanumeric characters. There is no way to recover a lost pass phrase.
sshUtil 2 Password: public key is imported successfully. 3.
2 statsClear statsClear Clears port and diagnostic statistics. Synopsis Description statsclear [--slot slotnumber][-uports itemlist][-bports itemlist][-use_bports value] Use this command to clear the port and diagnostics statistics for the specified list of blade or user ports. You can issue this command on the FR4-18i blade in a Brocade chassis; however, the command is not supported by the Brocade platform and does not effect any other feature operations.
stopPortTest 2 stopPortTest Terminates the running portTest. Synopsis Description stopporttest [-ports itemlist] Use this command to stop the currently running portTest. Refer to the portTest command for more information. If portTest is running in non-singlemode, use stopPortTest to stop the test. Note Operands The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 supportFfdc supportFfdc Modifies or displays the first-fault data capture (FFDC) daemon. Synopsis supportffdc [--disable | --enable | --show] Description Use this command to disable or enable the FFDC events, or to display the current configuration. If disabled, the daemon does not capture any data even when a message with FFDC attributes is logged. FFDC is enabled by default. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
supportFtp 2 supportFtp Sets, clears, or displays support FTP parameters and enables or disables auto file transfer. Synopsis supportftp [-S] supportftp -s [-h host][-u username][-p password][-d remotedirectory] supportftp -t hours supportftp -R supportftp -e supportftp -d Description Note Operands Use this command to set, clear, or display support FTP parameters. The parameters set by this command are used by the supportSave and traceDump commands.
2 supportFtp Examples To set the FTP parameters: switch:admin> supportftp -s -h 1080::8:800:200C:417A -u njoe -p password -d support supportftp: ftp parameters changed. To display the FTP parameters: switch:admin> supportftp Host IP Addr: 1080::8:800:200C:417A User name: njoe Remote Dir: support FTP Auto check: Off To set FTP parameters interactively: switch:admin> supportftp -s Host IP Addr[1080::8:800:200C:417A]:192.168.67.
supportSave 2 supportSave Saves RASLOG, TRACE, supportShow, core file, FFDC data, and other support information Synopsis supportsave supportsave [-n] [-c] [-k] [-u user_name -p password -h host_ip -d remote_dir -l protocol] supportsave [-R] supportsave [-U -d remote_dir] Description Use this command to collect RASLOG, TRACE, supportShow, core file, FFDC data and other support information to a remote FTP location.
2 supportSave -u user_name Specifies the user name for the FTP or SCP server. This operand is optional; if omitted, anonymous FTP is used. -p password Specifies the password for the FTP or SCP server. This operand is optional with FTP; if omitted, anonymous FTP is used. -h host_ip Specifies the IPv4 or IPv6 address for the remote server. -d remote_dir Specifies the remote directory to which the file is to be transferred. When saving to a USB device, the predefined /support directory must be used.
supportSave Saving support information Saving support information Saving support information Saving support information Saving support information Saving support information ......(output truncated) for for for for for for chassis:HL_5100_66, chassis:HL_5100_66, chassis:HL_5100_66, chassis:HL_5100_66, chassis:HL_5100_66, chassis:HL_5100_66, 2 module:SSHOW_OS... module:SSHOW_EX... module:SSHOW_FABRIC... module:SSHOW_SERVICE... module:SSHOW_SEC... module:SSHOW_NET...
2 supportShow supportShow Displays switch information for debugging purposes. Synopsis Description supportshow [[slotnumber/]portnumber1-portnumber2] [lines] Use this command to display support information from groups of preselected Fabric OS and Linux commands and other support and debugging information. You can specify the range of ports for which to display this information.
supportShow 2 portnumber1-portnumber2 Specifies the range of ports for which to display supportShow information. If a port range is not specified, the command displays information for all ports. lines Examples Specifies the number of lines for the portLogDump output. This parameter is valid only with the slotnumber/portnumber parameters.
2 supportShow 000000 07:32:30.131 FCPH write 0 40 00fffffd,00fffffd,00000000,00000000,00 000000 07:32:30.131 FCPH seq 0 28 00300000,00000000,00000834,00020182,00 000000 07:32:30.131 PORT Tx 0 40 07:32:30.131 PORT Rx 0 0 07:32:41.887 PORT Rx 0 40 07:32:41.887 PORT Tx 0 0 07:32:41.
supportShowCfgDisable 2 supportShowCfgDisable Disables a group of commands under the supportShow command. Synopsis supportshowcfgdisable os | exception | port | fabric | services | security | network | portlog | systemextend | filter | perfmon | ficon | iswitch | asic_db |iscsi | ag | crypto Description Use this command to disable a group of commands under the supportShow command. Use the supportShowCfgEnable command to enable groups of commands.
2 supportShowCfgEnable supportShowCfgEnable Enables a group of commands to be displayed under the supportShow command. Synopsis Description Note Operands Examples supportshowcfgenable os | exception | port | fabric | services | security | network | portlog | system | extend | filter | perfmon | ficon | iswitch | asic_db |ag | crypto Use this command to enable a group of commands to be displayed under the supportShow command. Use the supportShowCfgDisable command to disable groups of commands.
supportShowCfgShow 2 supportShowCfgShow Displays the groups of commands enabled for display by the supportShow command. Synopsis supportshowcfgshow Description Use this command to display the groups of commands enabled for display by the supportShow command. Use the supportShowCfgEnable and the supportShowCfgDisable commands to modify which groups are displayed. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 switchBeacon switchBeacon Sets switch beaconing mode on or off. Synopsis Description switchbeacon [mode] Use this command to enable or disable switch beaconing mode. Switch beaconing can be used to locate a failing unit. When beaconing mode is turned on, the port LEDs flash amber, left to right and right to left, from port 0 to the highest port number and back to port 0. The beaconing mode continues until you turn it off. The beaconing LED pattern continues until you turn it off.
switchCfgPersistentDisable 2 switchCfgPersistentDisable Disables a switch persistently. Synopsis Description switchcfgpersistentdisable Use this command to persistently disable the switch. All Fibre Channel ports are taken offline. If the switch was part of a fabric, the remaining switches reconfigure. The switch remains disabled even after a reboot. The disable process can be observed and verified by watching the front panel LEDs change to slow flashing yellow as each port is disabled.
2 switchCfgPersistentEnable switchCfgPersistentEnable Enables a switch persistently. Synopsis Description switchcfgpersistentenable Use this command to persistently enable a persistently disabled switch. All Fibre Channel ports that passed the power-on self-test (POST) are enabled and come online if connected to a device, or remain offline if disconnected. The switch may need to be enabled if it was previously disabled to make configuration changes or to run diagnostics.
switchCfgSpeed 2 switchCfgSpeed Configures the speed for all ports on a switch. Synopsis Description switchcfgspeed speed Use this command to configure the port speed on a switch. This command sets the speed for all user ports. If any port on the switch is not capable of the specified speed setting, an error message is displayed for that port. The configuration is saved in nonvolatile memory and persists across switch reboots or power cycles.
2 switchCfgTrunk switchCfgTrunk Enables or disables trunking on all the ports of a switch. Synopsis Description switchcfgtrunk mode Use this command to enable or disable trunking on all the ports of a switch. Use portCfgTrunkPort to enable or disable trunking on a single port. When the command is executed to update the trunking configuration, the ports to which the configuration applies are disabled and subsequently re-enabled with the new trunking configuration.
switchDisable 2 switchDisable Disables all user ports on a switch. Synopsis Description switchdisable Use this command to disable all user ports on a switch. All Fibre Channel ports are taken offline. If the switch was part of a fabric, the remaining switches reconfigure. As each port is disabled, the front panel LED changes to a slow flashing yellow. The switch must be disabled before making configuration changes or before running offline diagnostic tests.
2 switchEnable switchEnable Enables all user ports on a switch. Synopsis Description switchenable Use this command to enable all user ports on a switch. All Fibre Channel ports that passed the power-on self test (POST) are enabled. They can come online if connected to a device, or remain offline if disconnected. Use switchEnable to re-enable the switch after making configuration changes or running offline diagnostics. If the switch is connected to a fabric, it rejoins the fabric.
switchName 2 switchName Displays or sets the switch name. Synopsis Description switchname [name] Use this command to display or set the switch name. All switches have a symbolic name that is primarily used for switch management. This name is shown in the Fabric OS CLI prompt, under each switch icon in WebTools, and in the output of various Fabric OS commands, such as fabricShow. Use this command with the name operand to assign a new switch name.
2 switchShow switchShow Displays switch and port status. Synopsis Description switchshow [-portcount] [-iscsi] Use this command to display switch and port status information. Output may vary depending on the switch model. Switch summary information includes the following: switchName Switch name. switchType Switch model and revision numbers. switchState Switch state: Online, Offline, Testing, or Faulty. switchMode Switch operation mode: Native, Interop, or Access Gateway.
switchShow sw Shortwave laser w Longwave laser cu copper id serial ID Speed The speed of the port: 1/8G 125 Mbps 1/4G 250 Mbps 1/2G 500 Mbps 1G 1 Gbps fixed transfer speed N1 1 Gbps negotiated transfer speed 2G 2 Gbps fixed transfer speed N2 2 Gbps negotiated transfer speed 4G 4 Gbps fixed transfer speed N4 4 Gbps negotiated transfer speed 8G 8 Gbps fixed transfer speed N8 8 Gbps negotiated transfer speed 10G 10 Gbps fixed transfer speed N10 10 Gbps negotiated transfer sp
2 switchShow Proto Protocol support by GbE port. ISCSI The ports supports ISCSI. FCIP The port supports FCIP. comment Optionally displays one of the following: Disabled The port is disabled. Bypassed The port is bypassed (loop only). Loopback The port is in loopback mode. E_Port Fabric port; displays the world wide name (WWN) and name of the attached switch. If the port is configured as an EX_Port, the WWN of the attached switch is the same as the router.
switchShow Notes 2 The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details. If a port is configured as a long distance port, the long distance level is displayed in the format of Lx, where x represents the long distance level number. See portCfgLongDistance for the level description.
2 switchShow 0 1 0 640000 1 1 1 640100 2 1 2 640200 3 1 3 640300 4 1 4 640400 5 1 5 640500 6 1 6 640600 7 1 7 640700 8 1 8 640800 9 1 9 640900 10 1 10 640a00 11 1 11 640b00 12 1 12 640c00 13 1 13 640d00 14 1 14 640e00 [output truincated] ---------------- N4 N4 N4 N4 N4 N4 N4 N4 N4 N4 N4 N4 N4 N4 N4 No_Module No_Module No_Module No_Module No_Module No_Module No_Module No_Module No_Module No_Module No_Module No_Module No_Module No_Module No_Module To display a switch in Access Gateway mode: switch:admin
switchShow 2 =================================================== ...
2 switchStatusPolicySet switchStatusPolicySet Sets the policy parameters that determine overall switch status. Synopsis Description switchstatuspolicyset Use this command to set policy parameters for calculating the overall status of the switch enclosure. The policy parameter values determine how many failed or faulty units of each contributor are allowed before triggering a status change in the switch from HEALTHY to MARGINAL or DOWN.
switchStatusPolicySet PowerSupplies Temperatures Fans WWN CP Blade CoreBlade Flash MarginalPorts FaultyPorts MissingSFPs 2 2 2 0 0 0 1 0 2 2 0 2 1 1 1 1 1 1 1 1 1 1 0 Note that the value, 0, for a parameter, means that it is NOT used in the calculation. ** In addition, if the range of settable values in the prompt is (0..0), ** the policy parameter is NOT applicable to the switch. ** Simply hit the Return key. The minimum number of Bad PowerSupplies contributing to DOWN status: (0..
2 switchStatusPolicyShow switchStatusPolicyShow Displays the policy parameters that determine overall switch status. Synopsis Description switchstatuspolicyshow Use this command to view the current policy parameters set for the switch. These policy parameters determine the number of failed or non-operational units allowed for each contributor before triggering a status change in the switch. The command displays the current parameters in a three-column format similar to what is shown in Table 22.
switchStatusPolicyShow Flash MarginalPorts FaultyPorts MissingSFPs See Also 0 2 2 0 2 1 1 1 0 switchStatusPolicySet, switchStatusShow Fabric OS Command Reference 53-1001186-01 775
2 switchStatusShow switchStatusShow Displays overall switch status. Synopsis Description switchstatusshow Use this command to display the overall status for a switch that is configured with IPv4 and IPv6 addresses. In addition, users with a Fabric Watch license are able to view the list of unhealthy ports.
switchStatusShow Missing SFPs monitor 2 HEALTHY All ports are healthy To retrieve a switch health report for a switch that is configured with an IPv4 address: switch:user> switchstatusshow Switch Health Report Switch Name: switch IP address: 10.32.89.
2 switchUptime switchUptime Displays the amount of time the switch has been operating. Synopsis Description Note switchuptime Use this command to display the current time and the amount of time that the switch has been operational. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
switchViolation 2 switchViolation Dumps the DCC violations for a switch. Synopsis Description Notes switchViolation --dump -dcc Use this command to display all Device Connection Control (DCC) violations that have occurred on a switch. Internally the command searches "errdumpall" for the DCC violations. For each DCC violation, the command displays the device WWN and the port where the violation occurred.
2 syslogdFacility syslogdFacility Changes the syslog facility. Synopsis Description syslogdFacility [-l level] Use this command to change the syslog facility to LOG_LOCAL0, LOG_LOCAL1, LOG_LOCAL2, LOG_LOCAL3, LOG_LOCAL4, LOG_LOCAL5, LOG_LOCAL6, or LOG_LOCAL7. Syslog daemon (syslogd) is a process available on most UNIX systems that reads and forwards system messages to the appropriate log files or users, depending on the system configuration.
syslogdIpAdd 2 syslogdIpAdd Configures a switch to forward system messages to specified servers. Synopsis Description syslogdipadd ip_address | host_name Use this command to configure a switch to forward all error log entries to the syslog demon (syslogd) of one or more specified servers. The syslog daemon is a process available on most UNIX systems that reads and forwards system messages to the appropriate log files or users, depending on the system configuration. Up to six servers are supported.
2 syslogdIpAdd 2. Add the DNS name server to the switch: switch:admin> dnsconfig Enter option 1 Display Domain Name Service (DNS) configuration 2 Set DNS configuration 3 Remove DNS configuration 4 Quit Select an item: (1..4) [4] 2 Enter Domain Name: [] brocade.com Enter Name Server IP address in dot/colon notation: [] 192.168.126.120 Enter Name Server IP address in dot/colon notation: [] 192.168.126.
syslogdIpRemove 2 syslogdIpRemove Removes a server that is running the syslog daemon. Synopsis Description Note Operands Examples syslogdipremove ip_address | host_name Use this command to remove a server that is running the syslogd process and to which system messages are sent from the syslog server configuration on the switch. IPv6 and IPv4 syslogd addresses are supported. Use syslogdIPShow to view the current syslog server configuration.
2 syslogdIpShow syslogdIpShow Displays all syslog daemon IP addresses. Synopsis syslogdipshow Description Use this command to display all syslog daemon IP addresses in the configuration database. IPv4 and IPv6 addresses are supported. Note The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS Commands" and Appendix A, "Command Availability" for details.
sysShutDown 2 sysShutDown Provides a graceful shutdown to protect the switch file systems. Synopsis Description sysshutdown On standalone platforms, use this command to shut down the switch operating system. On enterprise-class platforms, when sysShutDown is called on the active control processor (CP), the command shuts down the active CP, standby CP, and any AP blades. After executing this command, manually power off the system. To reboot the system, manually turn the power switch on.
2 sysShutDown To attempt a system shutdown from the standby CP (not supported): switch:admin> sysshutdown Shut down the whole system is not support from the standby CP For shut down the whole system please run the sysshutdown from the active CP See Also 786 haDisable Fabric OS Command Reference 53-1001186-01
systemVerification 2 systemVerification Runs a suite of diagnostic tests on all switches in a fabric. Synopsis Description systemverification [-parameters | -short][[-fru type] -unit id] Use this command to run a comprehensive, system-wide test of all switches in a system. The command initiates a burn-in run on all switches within the current system. The optional -fru and -unit parameters allow you to focus the testing to a single blade in a multi-blade system.
2 systemVerification Diagnostics -fru type Tests a single FRU in the system. Valid values are BLADE, PS, FAN, and WWN; however, only BLADE is supported at this time. Since only one FRU type is supported, this parameter is optional, but -unit is required for single FRU testing. -unit id Tests a single FRU in the system. Specify a FRU ID of type of BLADE. The FRU ID is the slot number of the FRU to be tested.
tempShow 2 tempShow Displays temperature readings. Synopsis tempshow Description Use this command to display the current temperature readings of all temperature sensors in a switch. For each sensor, this command displays the slot number (if applicable), the sensor state, and the temperature. The temperature readings are given in both Centigrade and Fahrenheit. Notes The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place.
2 timeOut timeOut Sets or displays the idle timeout value for a login session. Synopsis Description timeout [timeval] Use this command without operand to display the current timeout value (in minutes) after which idle logins are automatically terminated. Use this command with the timeval operand to set the login timeout value to the specified interval. A value of 0 disables timeout of login sessions. The new timeout value takes effect with the next logins.
topologyShow 2 topologyShow Displays the unicast fabric topology. Synopsis Description topologyshow [domain] Use this command to display the fabric topology as it appears to the local switch. The display varies depending on the hardware configuration. The following rules apply: 1. On all switches, the command displays the number of domains in the fabric and the local Domain IDs. If translate domains are configured, existing translate domains and associated ports are displayed. 2.
2 topologyShow Total Bandwidth The maximum bandwidth of the out port. A bandwidth that is less than 0.512 Gbps is adjusted to the nearest power of 2 value. A bandwidth in the range of 0.512 Gbps Included) to 1 Gbps (not included) is adjusted to the 0.512 Gbps value. No adjustment takes place if the bandwidth is greater or equal to 1 Gbps. Bandwidth Demand The maximum bandwidth demand by the in ports. Flags Note Operands Always D, indicating a dynamic path.
topologyShow Domain: 3 Metric: 10500 Name: fcr_xd_3_5 Path Count: 1 Hops: Out Port: In Ports: Total Bandwidth: Bandwidth Demand: Flags: Domain: Metric: Name: Path Count: 2 11 0 1 2 3 4 5 6 7 8 9 15 8.000 Gbps 1275 % D 111 500 peng3900101 1 Hops: Out Port: In Ports: Total Bandwidth: Bandwidth Demand: Flags: Domain: Metric: Name: Path Count: 2 1 15 0 1 2 3 4 5 6 7 8 9 11 2.
2 topologyShow Path Count: 1 Hops: Out Port: In Ports: Total Bandwidth: Bandwidth Demand: Flags: See Also 794 2 0 23 24 33 38 39 8.
traceDump 2 traceDump Initiates, or removes a trace dump or displays the trace dump status. Synopsis tracedump [-S][-s slot] tracedump -n [-s slot] tracedump -r [-s slot] tracedump -R Description Use this command to initiate a background trace dump, to remove the content of a trace dump, or to display the dump status on the switch. When executed without operands, this command defaults to traceDump -S. Execution of traceDump –n generates a local trace dump locally.
2 traceDump To remove a trace dump: switch:admin> tracedump -r trace dump removed See Also 796 supportFtp, supportSave, supportShow Fabric OS Command Reference 53-1001186-01
trackChangesHelp 2 trackChangesHelp Displays information on the track-changes commands. Synopsis Description Note Examples trackchangeshelp Use this command to display information about the track-changes commands. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
2 trackChangesSet trackChangesSet Enables or disables the track-changes feature. Synopsis Description trackchangesset [mode][, snmptrapmode] This command enables or disables the track-changes feature. An SNMP-TRAP mode can also be enabled. Trackable changes are: • • • • • • Successful login Unsuccessful login Logout Config file change from task Track-changes on Track-changes off The output from the track-changes feature is dumped to the error log for the switch.
trackChangesShow 2 trackChangesShow Displays status of the track-changes feature. Synopsis Description trackchangesshow Use this command to display status of the track-changes feature. It shows whether the feature is enabled or disabled and if SNMP traps are generated. The output from the track-changes feature is dumped to the error log for the switch. Use the errDump command or errShow command to view the error log.
2 trunkDebug trunkDebug Debugs a trunk link failure. Synopsis Description trunkdebug port1 port2 Use this command to debug a trunk link failure.
trunkShow 2 trunkShow Displays trunking information. Synopsis Description trunkshow Use this command to display trunking information of both E_Ports and EX_Ports. The following fields display: Trunking Group Number Displays each trunking group on a switch. All the ports that are part of this trunking group are displayed. Port to port connections Displays the port-to-port trunking connections. Note WWN Displays the WWN of the connected port.
2 trunkShow To display trunking information for a switch that is part of an FC Router backbone fabric interlinking several edge fabrics (see the EX_Port with WWN "10:00:00:05:1e:35:b3:03" and the E_Port with WWN "10:00:00:05:1e:37:12:13" in the output below): switch:admin> trunkshow 4: 49-> 0 10:00:00:05:1e:35:b3:03 54-> 2 10:00:00:05:1e:35:b3:03 53-> 5 10:00:00:05:1e:35:b3:03 50-> 6 10:00:00:05:1e:35:b3:03 51-> 4 10:00:00:05:1e:35:b3:03 52-> 7 10:00:00:05:1e:35:b3:03 55-> 3 10:00:00:05:1e:35:b3:03 48-> 1
tsClockServer 2 tsClockServer Displays or sets the Network Time Protocol (NTP) Server addresses. Synopsis Description tsclockserver [ipaddr [; ipaddr ...]] Use this command to synchronize the local time of the Principal or Primary FCS switch to one or more external NTP servers. This command accepts a list of NTP server addresses. The NTP server addresses can be passed in either IPV4 or IPV6 address format or as a DNS server name.
2 tsClockServer Examples To display the default clock server: switch:admin> tsclockserver LOCL To set the NTP server to a specified IP address: switch:admin> tsclockserver 123.123.123.123 Updating Clock Server configuration...done. switch:admin> tsclockserver 123.123.123.123 To configure multiple NTP servers: switch:admin> tsclockserver "12.134.125.24; 12.234.87.01" Updating Clock Server configuration...done.
tsTimeZone 2 tsTimeZone Displays or sets the system time zone. Synopsis tstimezone --interactive tstimezone timezonename tstimezone --old hourOffset [, minuteOffset] Description Use this command to display or set the system time zone. All switches maintain the current time zone setup in nonvolatile memory. Changing the time zone on a switch updates the local time zone setup and is reflected in local time calculations. All switches are by default in the 0,0 time zone:, which is, GMT.
2 tsTimeZone Examples hourOffset Specifies the number of hours relative to GMT. This operand must be specified as an integer. Valid values are -12 through 12. This operand is required with the --old option. minuteOffset Specifies the number of minutes relative to hour offset. This operand must be specified as an integer and is valid only with the --old option. Valid values are -30, 0, or 30. This operand is optional; if not specified, the value defaults to 0.
tsTimeZone 15) Cuba 32) Netherlands Antilles 16) Dominica 33) Nicaragua 17) Dominican Republic 34) Panama Enter number or control-D to quit ?45 2 49) Virgin Islands (US) Please select one of the following time zone regions.
2 turboRamTest turboRamTest Performs a turbo SRAM test of ASIC chips. Synopsis Description turboramtest [--slot slotnumber][-passcnt count] This command verifies the on chip SRAM located using the turbo-RAM BIST circuitry. The BIST controller is able to perform the SRAM write and read operation at a much faster rate than the PCI operation. This test is supported on all 4 G and 8 G platforms.
upTime 2 upTime Displays length of time the system has been operational. Synopsis Description uptime This command displays the current time, how long the system has been running, how many users are currently logged on, and the system load averages for the past 1, 5, and 15 minutes. If the uptime is less than 60 seconds, the time is displayed in seconds. For times greater than or equal to 60 seconds, the time is displayed in minutes. The output format adjusts accordingly.
2 uRouteConfig uRouteConfig Configures a static route. Synopsis Description urouteconfig in_area domain out_area Use this command to configure static routes. A static route is assigned to a specific path (defined by port number out_area) and does not change when a topology change occurs unless the path used by the route becomes unavailable.
uRouteRemove 2 uRouteRemove Removes a static route. Synopsis Description urouteremove in_area domain Use this command to remove a previously configured static route. After this command is issued, the route to domain for in_area might change to use a different output port, but only if dynamic load sharing (DLS) is set. If DLS is not set, the route remains as is, with its route attribute changed from static to dynamic.
2 uRouteShow uRouteShow Displays unicast routing information. Synopsis Description urouteshow [slotnumber/][portnumber] [domain] Use this command to display the unicast routing information for a port, as it is known by the FSPF path selection and routing task. The routing information describes how a frame that is received from a port on the local switch is to be routed to reach a destination switch. The following information displays: Local Domain ID Domain number of local switch.
uRouteShow domain Examples 2 Specify a remote domain in the fabric for which routing information is to be displayed. This operand is optional; if omitted, the routing information for all domains in the fabric is displayed.
2 usbStorage usbStorage Manages data files on an attached USB storage device. Synopsis usbstorage [-e | --enable] usbstorage [-d | --disable] usbstorage [-l | --list] usbstorage [-r | --remove application area ] usbstorage [-h | --help] Description Notes Use this command to control a USB device attached to the Active CP.
usbStorage 2 firmware\ 380MB 2007 Aug 15 15:13 FW_v6.0.0\ 380MB 2007 Aug 15 15:13 Available space on usbstorage 74% To remove an application area: switch:admin> usbstorage -r firmware FW_v6.0.
2 userConfig userConfig Manages user accounts.
userConfig 2 This command supports the following roles. These roles define access permissions for Fabric OS commands. In a Logical Fabric environment, you can additionally define access to chassis-level commands. An account can have one role in the Logical Fabric, and another role regarding chassis commands. Notes User Non-administrative use, such as monitoring system activity. Operator A subset of administrative tasks for routine switch maintenance.
2 userConfig -l LF_ID For each LF in LF_ID_list, displays a list of users that include that LF in their LFF permissions. Specify a range (1-5), or a list of LF_IDs separated by a comma (1,2,3), or a combination of both (1-5,7). Only users with SecurityAdmin or Admin role may execute this command. -c Displays a list of users who have permission to execute chassis commands. --add |--change Creates a new user account or modifies an existing user account.
userConfig 2 -a AD_ID_list Specifies the Administrative Domains the user is authorized to access. The ADs in AD_ID_list and the existing AD permissions for username must be a subset of the AD permissions of the account that executes this command. This operand is optional. If no AD list is specified with the --add option, AD0 is assigned by default. Use comma-separated lists, ranges, or both, for example -a 0,9,10-15,244. -l LF_ID_list Specifies the Virtual Fabrics the user is authorized to access.
2 userConfig -h AD_ID Specifies the account’s home AD. This operand is optional. • If home AD is specified with the --addad option, it must be one of the • ADs in AD_ID_list. If a home AD is not specified and username did not previously have a home AD, the home AD is set to the lowest numbered AD in the user's AD permissions. If a home AD is specified with the --deletead option, it must be one of the ADs in the AD permissions remaining after the ADs specified in AD_ID_list have been removed.
userConfig 2 --delete username Deletes the specified account from the switch. This command prompts for confirmation. Once an account is deleted, the CLI sessions associated with the account are terminated. The following restrictions apply when you delete an account: • You cannot delete a default account. • You cannot delete your own account.
2 userConfig To delete AD 128 from bob’s AD member list. New home AD is set to 0: switch:admin> userConfig --deletead bob -a 128 -h 0 B. The following examples illustrate how to create and manage user accounts in an LF-enabled environment.
userConfig 2 To remove chassis permissions from the test account for the LFs 1-3. switch:admin> userconfig --deletelf test -l 1-3 -c Broadcast message from root (ttyS0) Sat Jun 14 01:10:02 2008... Security Policy, Password or Account Attribute Change: test will be logged out LFs/chassis role for account test has been successfully deleted.
2 userRename userRename Renames the user login name. Synopsis Description userrename old_username new_username Use this command to change an existing account login name to a new login name. The following rules apply: 1. new_username must begin with a letter and contain only alphanumeric characters or underscores. 2. new_username must be between 1 and 40 characters long. 3. new_username must be different from any existing account login name. 4.
version 2 version Displays firmware version information. Synopsis Description version Use this command to display firmware version information and build dates. The command output includes the following: Kernel The version of switch kernel operating system. Fabric OS The version of switch Fabric OS. Made on The build date of firmware running in switch. Flash The build date of firmware stored in flash proms.
2 wwn wwn Displays the World Wide Name (WWN) and serial number of the switch. Synopsis Description wwn [-sn ] Use this command to display the WWN associated with a switch and to display the switch serial number. The switch WWN is a 64-bit number that has eight colon-separated fields each consisting of one or two hexadecimal digits between 0 and ff. The switch WWN is a factory-set parameter that cannot be changed by the end user.
zone 2 zone Performs specific zone operations, manages Traffic Isolation (TI) Zones, and Frame Redirect (RD) Zones. Synopsis zone --help To perform specific zone operations: zone --copy [source_AD.
2 zone TI zones over FCR is supported only on switches running Fabric OS v6.1.0 or later. Participating devices must be LSAN-zoned to enforce TI. Using TI zones in logical fabrics has several restrictions. For more information, refer to the Fabric OS Administrator’s Guide. 3. Use the --rdcreate and --rddelete options to manage Frame Redirect (RD) Zones. RD zones allow frames to be redirected to devices that can perform additional processing on these frames (for example, encryption).
zone 2 dest_zone_object Identifies the destination zone object within the current Admin Domain. If dest_zone_object is not specified, source_zone_object is copied over with the same name. If the destination zone object is not already present in the Admin Domain, one is created (with type as source_zone_object). -f --expunge “zone_object” --validate Overwrites existing zone object without confirmation. Removes all references to the specified zone object and then deletes the zone object.
2 zone The following operands are supported: -t objecttype Specifies the zone object type. This operand is supported only with the --create option. To create a TI zone, the value is ti. -o optlist Specifies list of options to control activation, deactivation, and failover mode. If this option is not specified the zone is created, by default, with failover enabled, and the zone will be activated. This operand is supported only with the --create and --add options.
zone 2 3. Creating and managing RD Zones: --rdcreate Creates a RD Zone for the specified members. The following operands are required: host_wwn Specifies the port world wide name of the host. target_wwn Specifies the port world wide name of the target. vi_wwn Specifies the port world wide name of the virtual initiator (VI). vt_wwn Specifies the port world wide name of the virtual target (VT). policy restartable | nonrestartable Specifies the policy as either restartable or nonrestartable.
2 zone To copy the cur_cfg1 zone configuration from the root zone database (AD0) to the current Admin Domain: switch:admin> zone --copy AD0.cur_cfg1 To copy the backup_zn zone from the root zone database (AD0) to the current Admin Domain: switch:admin> zone --copy AD0.backup_zn To copy the backup_zn zone from the root zone database (AD0) to the current Admin Domain, with Admin Domain member list filtering: switch:admin> zone --copy -f AD0.
zone 2 To validate all zones in the zone database in the effective configuration: switch:admin> zone --validate -m 2 Effective configuration: cfg: ticonfig zone: regzone 1,4* 1,5* -----------------------------------~ - Invalid configuration * - Member does not exist # - Invalid usage of broadcast zone To prune all the zone members that are not enforceable: switch:admin> zone --validate -f You are about to prune the zone configurations, based on zone --validate output.
2 zone To display all TI zones in the defined configuration: switch:admin> zone --show Defined TI zone configuration: TI Zone Name: Port List: ti_bluezone 2,2; 3,2 Configured Status: Activated / Failover-Disabled Enabled Status: Deactivated TI Zone Name: Port List: ti_redzone 2,1; 3,1 Configured Status: Activated / Failover-Enabled Enabled Status: Activated / Failover-Enabled To display the status of bluezone in the defined configuration: switch:admin>zone --show tibluezone Defined TI zone configurat
zone 2 To display the newly created zone objects: switch:admin> cfgshow Defined configuration: cfg: myHTcfg myHostTarget cfg: r_e_d_i_r_c__fg red_______base; red_0917_00_3f_3f_3f_23_24_25_26_3f_3f_3f_30_32_00_00_00 zone: myHostTarget 00:3f:3f:3f:23:24:25:26; 3f:3f:3f:30:32:00:00:00 zone: red_0917_00_3f_3f_3f_23_24_25_26_3f_3f_3f_30_32_00_00_00 00:3f:3f:3f:23:24:25:26; 3f:3f:3f:30:32:00:00:00; 3f:3f:3f:30:30:00:00:00; 3f:3f:3f:30:31:00:00:00 zone: red_______base 00:00:00:00:00:00:00:01; 00:00:00:00:00:00:0
2 zoneAdd zoneAdd Adds a member to the zone. Synopsis Description zoneadd "zoneName", "member[; member]" Use this command to add one or more members to an existing zone. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command. For the change to become effective, enable the configuration with the cfgEnable command.
zoneCreate 2 zoneCreate Creates a zone. Synopsis Description zonecreate "zonename", "member[; member...]" Use this command to create a new zone, or to create a “broadcast” zone. A broadcast zone is a special zone that specifies the nodes that can receive broadcast traffic. This zone must be named "broadcast". Only one "broadcast" zone can exist within a fabric. This type of zone is enforced by the hardware; the switch controls the data transfer to a port. This command changes the defined configuration.
2 zoneCreate When creating a zone, you can combine different ways of specifying zone members. For example, a zone defined with the following members: "2,12; 2,14; 10:00:00:60:69:00:00:8a" contains all devices connected to switch 2, ports 12 and 14, and to the device with the World Wide Name "10:00:00:60:69:00:00:8a" (either node name or port name), at the port in the fabric to which it is connected.
zoneDelete 2 zoneDelete Deletes a zone. Synopsis Description zonedelete "zonename" Use this command to delete a zone. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory using the cfgSave command. For the change to become effective, enable the configuration with the cfgEnable command. Notes When an FCS policy is enabled, this command can be issued only from the primary FCS switch.
2 zoneHelp zoneHelp Displays a description of zoning commands. Synopsis Description Note zonehelp Use this command to display short descriptions of zoning commands. The execution of this command is subject to Virtual Fabric or Admin Domain restrictions that may be in place. Refer to chapter 1, "Using Fabric OS commands" and Appendix A, "Command Availability" for details.
zoneObjectCopy 2 zoneObjectCopy Copies a zone object. Synopsis Description zoneObjectCopy "objectName", "newName" Use this command to make a copy of an existing zone object and give it a new name. The resulting object is of the same type as the original object. You can use this command for all zone object types, including cfg, zone, and alias. This command changes the defined configuration.
2 zoneObjectExpung zoneObjectExpung Expunges a zone object. Synopsis Description zoneObjectExpunge "objectName" Use this command to expunge a zone object. In addition to deleting the object, this command also removes the object from the member lists of all other objects. After successful execution of this command, the specified object no longer exists the database. You can use this command for all zone object types, including cfg, zone, and alias. This command changes the defined configuration.
zoneObjectRename 2 zoneObjectRename Renames a zone object. Synopsis Description zoneObjectRename "objectName", "newName" Use this command to rename a zone object. You can use this command for all zone object types, including cfg, zone, and alias. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command.
2 zoneRemove zoneRemove Removes a member from a zone. Synopsis Description zoneremove "zonename", "zoneMemberList" Use this command to remove one or more members from an existing zone. If all members are removed, the zone is deleted. This command changes the defined configuration. For the change to be preserved across switch reboots, save the configuration to nonvolatile memory with the cfgSave command. For the change to become effective, enable the configuration with the cfgEnable command.
zoneShow 2 zoneShow Displays zone information. Synopsis Description zoneshow ["pattern"][, mode] Use this command to display zone configuration information. If no parameters are specified, all zone configuration information (both defined and enabled) is displayed. Refer to cfgShow for a description of this display. If a parameter is specified, it is used as a pattern to match zone configuration names, and those that match in the defined configuration are displayed.
2 846 zoneShow Fabric OS Command Reference 53-1001186-01
Chapter 3 Primary FCS commands Primary FCS commands Table 23 summarizes the commands that are available only on the primary Fabric Configuration Server (FCS) when FCS policy is enabled. TABLE 23 Primary FCS commands Command Description aliAdd Must be run from the primary FCS switch. aliCreate Must be run from the primary FCS switch. aliDelete Must be run from the primary FCS switch. aliRemove Must be run from the primary FCS switch. aliShow Can be run on all FCS switches.
3 848 Primary FCS commands Command Description msTdDisable msTdDisable “ALL” must be run from the primary FCS switch. msTdEnable msTdEnable “ALL” must be run from the primary FCS switch. secPolicyAbort Must be run from the primary FCS switch. secPolicyActivate Must be run from the primary FCS switch. secPolicyAdd Must be run from the primary FCS switch. secPolicyCreate Must be run from the primary FCS switch. secPolicyDelete Must be run from the primary FCS switch.
Appendix Appendix A: Command availability A In this appendix • Command validation checks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 849 • Encryption commands and permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . 850 Command validation checks Before a command is executed, it is validated against the following checks. 1. Active or Standby availability: on enterprise-class platforms systems, checks that the command is available on the Control Processor (CP). 2.
A Encryption commands and permissions 4. Virtual Fabric availability: If Virtual Fabrics are enabled, commands are checked for context and switch type as follows: • Virtual Fabric context (VF) = Command applies to the current logical switch only, or to a specified logical switch. Virtual Fabric commands are further constrained by one of the following switch types: • • • • All Switches (All) = Command can be run in any switch context.
A Encryption commands and permissions TABLE 1 Encryption command RBAC availability and admin domain type Command Name User Admin Oper SW Zone Fabric BS Sec Admin Admin Admin Admin Admin Admin Domain Context Switch Type addgroupmember N OM N N N O N OM Disallowed VF DS addmembernode N OM N N N O N OM Disallowed VF DS addhaclustermember N OM N N N OM N O Disallowed VF DS addinitiator N OM N N N OM N O Disallowed VF DS addLUN N OM N N N OM N O
A General Fabric OS commands and permissions TABLE 1 Encryption command RBAC availability and admin domain type (Continued) Command Name User Admin Oper SW Zone Fabric BS Sec Admin Admin Admin Admin Admin Admin Domain Context Switch Type manual_rekey N OM N N N OM N O Disallowed VF DS modify N OM N N N OM N O Disallowed VF DS move N OM N N N OM N O Disallowed VF DS recovermasterkey N OM N N N O N OM Disallowed VF DS regEE N OM N N N O N OM D
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type aliShow O OM O O OM OM O O Allowed VF All aptPolicy O OM O O N OM 0 N SwitchMember CH N/A auditCfg O OM O O O O O OM SwitchMember CH N/A auditDump O OM O O O O O OM SwitchMember CH N/A authUtil N OM N N N N N OM Allowed/
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type chassisConfig O OM OM OM N OM O N Allowed/ SwitchMember CH N/A chassisDisable O OM OM N N OM O N Allowed CH N/A chassisEnablle O OM OM N N OM O N Allowed CH N/A chassisName O OM OM OM N OM O N Allowed/ SwitchMember CH N/A chassis
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type enclosureShow O OM OM OM O OM O OM Allowed CH N/A errClear O OM OM OM O OM O OM SwitchMember CH N/A errDelimiterSet O OM OM OM O OM O OM Allowed/ SwitchMember CH N/A errDump O OM OM OM O OM O OM Allowed VF N/A errFilterSet O OM
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type fcrlsan O OM O O O OM O N SwitchMember VF BS fcrlsanCount O OM O O O OM O N SwitchMember VF BS fcrlsanMatrix O OM O O O OM O N SwitchMember VF BS fcrPathTest O OM OM OM N OM O N SwitchMember CH N/A fcrPhydevShow O OM O O O
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type fwClassInit O OM OM OM N OM O N SwitchMember VF All fwConfigReload O OM OM OM N OM O N SwitchMember VF All fwConfigure O OM OM OM N OM O N SwitchMember VF All fwFruCfg O OM OM OM N OM O N SwitchMember VF All fwHelp O O O O O
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type iodSet O OM O O N OM O N SwitchMember VF All iodShow O OM O O N OM O N Allowed VF All ipAddrSet O OM OM OM O OM O O SwitchMember CH N/A ipAddrShow O OM OM OM O OM O O SwitchMember CH N/A ipFilter O OM N O N OM O OM Switc
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type msPlClearDB O OM OM OM O OM O N Disallowed VF All msPlMgmtActivate O OM OM OM O OM O N Disallowed VF All msPlMgmtDeactivate O OM OM OM O OM O N Disallowed VF All msTdDisable O OM OM OM O OM O N Disallowed VF All msTdEnable O OM
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type perfMonitorShow O OM O OM N OM O N SwitchMember VF All perfSetPortEEMask O OM O OM N OM O N SwitchMember VF All perfShowAlpaCrc O OM O OM N OM O N PortMember VF All perfShowPortEEMask O OM O OM N OM O N PortMember VF All perfTTmo
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type portCfgvExport O OM OM OM O OM OM O PortMember VF All portCmd O OM OM OM O OM OM O SwitchMember VF All portDebug O OM OM OM N OM O N SwitchMember CH N/A portDisable O OM OM OM O OM OM O SwitchMember VF All portEnable O OM OM
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type portSwapShow O OM OM OM O OM OM O Allowed VF All portTest O OM OM OM N OM O N SwitchMember VF DS portTestShow O OM OM OM N OM O N SwitchMember VF DS portTrunkArea O OM OM OM O OM OM O PortMember VF All portZoneShow O OM OM OM
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type shellFlowControlDisable O OM OM OM N OM O N SwitchMember CH N/A shellFlowControlEnable O OM OM OM N OM O N SwitchMember CH N/A slotPowerOff O OM OM OM N OM O N SwitchMember CH N/A slotPowerOn O OM OM OM N OM O N SwitchMember CH N/
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type syslogdIpAdd O OM OM OM O OM O OM SwitchMember CH N/A syslogdIpRemove O OM OM OM O OM O OM SwitchMember CH N/A syslogdIpShow O OM OM OM O OM O OM Allowed CH N/A sysShutdown O OM OM OM O OM O O SwitchMember CH N/A systemVerificati
A General Fabric OS commands and permissions TABLE 2 Fabric OS command RBAC availability and admin domain type Command Name User Admin Oper Sw Zone Fabric BS Sec Admin Domain Admin Admin Admin Admin Admin Context Switch Type zoneObjectExpunge O OM O O OM OM O O Allowed VF All zoneObjectRename O OM O O OM OM O O Allowed VF All zoneRemove O OM O O OM OM O O Allowed VF All zoneShow O OM O O OM OM O O Allowed VF All Fabric OS Command Reference 53-1001186
A 866 General Fabric OS commands and permissions Fabric OS Command Reference 53-1001186-01
