53-1001355-01 28 July 2009 Data Center Fabric Manager Professional User Manual Supporting DCFM 10.3.
Copyright © 2007-2009 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronPoint, IronShield, IronView, IronWare, JetCore, NetIron, SecureIron, ServerIron, StorageX, and TurboIron are registered trademarks, and DCFM, Extraordinary Networks, and SAN Health are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.
Contents About This Document In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . .xx What’s new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xxii Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Feature-to-firmware requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Accessibility features for the Management application . . . . . . . . . . 33 Keyboard shortcuts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Look and Feel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Chapter 2 Discovery In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Data backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 What is backed up? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 Management server backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 Configuring backup to a writable CD . . . . . . . . . . . . . . . . . . . . . 71 Configuring backup to a hard drive. . . . . . . . . . . . . . . . . . . . . . . 72 Configuring backup to a network drive. . . . . . . . . . . .
Contents Software Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 Client export port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 Discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 FTP/SCP overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 IP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102 Memory allocation . . .
Contents Chapter 5 Device Configuration In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131 Configuration repository management . . . . . . . . . . . . . . . . . . . . . .131 Saving switch configurations . . . . . . . . . . . . . . . . . . . . . . . . . .132 Device properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133 Viewing properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Device Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .164 Scheduling technical support information collection . . . . . . .164 Starting immediate technical support information collection 165 Viewing technical support information . . . . . . . . . . . . . . . . . . .165 E-mailing technical support information . . . . . . . . . . . . . . . . .166 Deleting technical support files from the repository . . . . . . . .166 Failure data capture . . . . . . . . . . . . .
Contents Duplicating an event policy . . . . . . . . . . . . . . . . . . . . . . . . . . . .188 Duplicating an ISL offline policy . . . . . . . . . . . . . . . . . . . . . . . .189 Duplicating a PM threshold crossed policy . . . . . . . . . . . . . . .190 Duplicating a security violation policy . . . . . . . . . . . . . . . . . . .191 Editing an event policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .192 Editing an ISL offline policy . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Chapter 8 Reports In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .219 Report types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .219 Generating reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .220 Viewing reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .220 Exporting reports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Open systems tape pipelining . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240 FCIP Fastwrite and Tape Acceleration . . . . . . . . . . . . . . . . . . .240 Virtual Port Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241 FCIP configuration guidelines. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .242 Additional guidelines for tunnel advanced settings . . . . . . . . . . . .243 Data compression . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Chapter 11 Fibre Channel over Ethernet In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .267 FCoE overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .267 DCB exchange protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .267 Enhanced Ethernet features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .268 Enhanced transmission selection. . . . . . . . . . . . . . . . . . . . . . .
Contents LLDP-DCBX configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .291 Adding an LLDP profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .292 Editing an LLDP profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .293 Deleting an LLDP profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .293 Duplicating an LLDP profile. . . . . . . . . . . . . . . . . . . . . . . . . . . .294 Assigning an LLDP profile to a port or ports in a LAG . .
Contents Viewing and editing group properties . . . . . . . . . . . . . . . . . . . . . . .324 General tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .325 Members tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .325 Consequences of removing an encryption switch . . . . . . . . . .326 Security tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .328 HA Clusters tab. . . . . . . . . . . . . . . . . . . . . . . .
Contents Chapter 13 Zoning In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377 Zoning overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377 Special zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377 Online zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .378 Accessing zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Finding a member in one or more zones . . . . . . . . . . . . . . . . .409 Finding a zone member in the potential member list . . . . . . .409 Finding zones in a zone configuration . . . . . . . . . . . . . . . . . . . 410 Finding a zone configuration member in the zones list . . . . . 410 Listing zone members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 411 Removing a member from a zone. . . . . . . . . . . . . . . . . . . . . . . 411 Removing a zone from a zone configuration .
Contents The HP Secure Key Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .440 Obtaining a signed certificate from the HP SKM appliance software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .441 Importing a signed certificate . . . . . . . . . . . . . . . . . . . . . . . . . .442 Exporting the KAC certificate request . . . . . . . . . . . . . . . . . . .443 Setting up a Brocade user. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Quartz . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503 Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .506 Role Based Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . .506 SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .509 Stats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .512 Switch . . . . . .
About This Document In this chapter • How this document is organized . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix • Supported hardware and software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xx • What’s new in this document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxii • Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxiii • Additional information . . . . . . . . . . . . .
About This Document • Appendix A, “Supported Key Management Systems,” provides information about supported key management systems. • Appendix B, “Sybase and Derby Database Fields,” provides reference information related to databases. Supported hardware and software In those instances in which procedures or parts of procedures documented here apply to some switches but not to others, this guide identifies exactly which switches are supported and which are not.
About This Document TABLE 1 Supported Hardware Device Name Terminology used in documentation Brocade 7500 Extension switch1 Brocade 7500E Extension 4 Gbps Router, Extension Switch switch1 4 Gbps Extension Switch FR4-18i Blade 4 Gbps Router, Extension blades Brocade AP7600 switch6 4 Gbps 32-port Switch Brocade 7800 Switch11 8 Gbps 16-FC ports, 6-Gbit ports Extension Switch 10 Brocade 8000 switch 8 Gbps 16-FC-ports, 10 GbE8-Ethernet Port Switch Brocade 415 Host Bus Adapter 4 Gbps 1-port HBA
About This Document TABLE 1 Supported Hardware Device Name Terminology used in documentation FC8-32 Blade FC 8 GB 32-port Blade FC8-48 Blade FC 8 GB 48-port Blade FC10-6 Blade FC 10 - 6 ISL Blade FCoE10-24 Blade 10 Gig FCoE port Blade FX8-24 Blade12, 13 M4700F Fabric Switch M6140 Director Mi10K Director 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports Extension Blade 12 32-Port, 4 Gbps Switch 12 140-Port Director 12 256-Port Director 1 Platform requires Fabric OS v5.1.
About This Document • • • • • Port properties - GigE and FCiP tunnels tabs Properties - device properties, host, and virtual machines tab Zoning - set change limits TI Zone Properties Technical Support for hosts • Information that was changed: • Discovery - Add Fabric, Address Properties • Options - Display and Memory Allocation • FICON Merge • Allow/Prohibit Matrix configure • FCiP - Advance Settings • Resource Groups • Performance - Additional measures • Information that was deleted: • None.
About This Document Notes, cautions, and warnings The following notices and statements are used in this manual. They are listed below in order of increasing severity of potential hazards. NOTE A note provides a tip, guidance or advice, emphasizes important information, or provides a reference to related information. ATTENTION An Attention statement indicates potential damage to hardware or data. Key terms For definitions specific to Brocade and Fibre Channel, see the Brocade Glossary.
About This Document Additional information This section lists additional Brocade and industry-specific documentation that you might find helpful. Brocade resources To get up-to-the-minute information, go to http://my.brocade.com and register at no cost for a user ID and password. For practical discussions about SAN design, implementation, and maintenance, you can obtain Building SANs with Brocade Fabric Switches through: http://www.amazon.
About This Document Getting technical help Contact your switch support supplier for hardware, firmware, and software support, including product repairs and part ordering. To expedite your call, have the following information available: 1. DCFM Serial Number To obtain the DCFM serial number, select Help > License. The DCFM License dialog box displays. 2.
About This Document Document feedback Quality is our first concern at Brocade and we have made every effort to ensure the accuracy and completeness of this document. However, if you find an error or an omission, or you think that a topic needs further development, we want to hear from you. Forward your feedback to: documentation@brocade.
About This Document xxviii DCFM Professional User Manual 53-1001355-01
Chapter User interface overview 1 In this chapter • User interface components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 • Icon legend. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 • Shortcut menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 • Feature-to-firmware requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 User interface components FIGURE 1 Main Window 1. Menu Bar. Lists commands you can perform on the SAN. 2. Toolbar. Provides buttons that enable quick access to dialog boxes and functions. 3. View All tab. Displays the Master Log, Minimap, Connectivity Map (topology), and Product List. For more information, refer to the View All tab. 4. Port Display buttons. Provides buttons that enable quick access to configuring how ports display. For more information, refer to “Port Display buttons” on page 11. 5.
Menu bar 1 Menu bar The menu bar is located at the top of the main window. The following table outlines the many functions available on each menu. TABLE 2 Menu Menu Bar Command Command Options SAN Menu Users. (Professional Plus and Enterprise Edition Only) Select to configure users and user groups. Active Sessions. Select to display the active Management application sessions. Server Properties. Select to display the Server properties. Options. Select to configure the Management application options.
1 TABLE 2 Menu Menu bar Menu Bar Command Command Options Show. Select to determine what products display. Fabrics Only. Select to display only fabrics. Groups Only. Select to display only groups. All Products. Select to display all products. All Ports. Select to display all ports. Enable Flyover Display/Device Tips. Select to enable flyover display. Show Ports. Select to show utilized ports on the selected device. Connected End Devices. Select to show or hide all connected end devices. Hide All.
Menu bar TABLE 2 1 Menu Bar Menu Command Command Options User Port #. Select to display the user port number as the port label. Slot/Port #. Select to display the slot/port number as the port label. Port Display. Select to configure how ports display. Occupied Product Ports. Select to display the ports of the devices in the fabrics (present in the Connectivity Map) that are connected to other devices. UnOccupied Product Ports.
1 TABLE 2 Menu Menu bar Menu Bar Command Command Options Replicate. (Professional Plus and Enterprise Edition Only) Select to replicate the switch Configuration or Security. Swap Blades. (Professional Plus and Enterprise Edition Only) Select to swap blades. CEE Switch. Select to manage a selected switch. CEE. Select to manage a CEE switch, port, or link aggregation group (LAG). FCoE. Select to manage an FCoE port. Firmware Management. Select to download firmware to devices. Routing.
Menu bar TABLE 2 1 Menu Bar Menu Command Command Options Port Fencing. (Professional Plus and Enterprise Edition Only) Select to configure port fencing to protect your SAN from repeated operational or security problems experienced by ports. Port Auto Disable. Select to configure port auto disable flag on individual FC_ports or all ports on a selected device, as well as unblock currently blocked ports. FICON. (Enterprise Edition Only) Select to configure FICON. Configure Fabric.
1 TABLE 2 Menu Menu bar Menu Bar Command Command Options HIstorical Data Collection. (Professional Plus and Enterprise Edition Only) Select to monitor historical data on the entire SAN or selected parts of the SAN. You can also disable historical data monitoring. End-to-End Monitors. (Professional Plus and Enterprise Edition Only) Select to monitor end-to-end connections. Configure Thresholds. (Professional Plus and Enterprise Edition Only) Select to monitor thresholds. Clear Counters.
Menu bar TABLE 2 Menu 1 Menu Bar Command Command Options Audit. Select to display a history of user actions performed through the application (except login/logout). Event. Select to display errors related to SNMP traps and Client-Server communications. Fabric. Select to display the events related to the selected fabric. FICON. Select to display the FICON events related to the selected device or fabric. Product Status. Select to display operational status changes of managed products. Security.
1 TABLE 2 Menu Toolbar Menu Bar Command Command Options Find. Select to search the Online Help. About . Select to view the application information, such as the company information and release number. Toolbar The toolbar is located at the top of the main window and provides icons to perform various functions (Figure 2). FIGURE 2 The Toolbar The icons on your toolbar will vary based on the licensed features on your system. 1. Users. Displays the Server Users dialog box.
View All tab 1 View All tab The View All tab displays the Master Log, Utilization Legend, Minimap, Connectivity Map (topology), and Product List. To open all areas of the View window, select View > Show Panels > All Panels or press F12. You can change the default size of the display by placing the cursor on the divider until a double arrow displays. Click and drag the adjoining divider to resize the window. You can also show or hide an area by clicking the left or right arrow on the divider.
1 Connectivity Map • BB Credit. Displays the BB Credit for the product. • Class. Displays the class to which the product belongs. • Contact. Displays the name of the person or group you should contact about the product. This field is editable at the fabric and device level. • Description. Displays the description of the product. This field is editable at the fabric and device level. • Device Type. Displays the type of device. • Domain ID.
Toolbox 1 Toolbox The toolbox (Figure 4) is located at the top right side of the View window and provides tools to zoom in and out of the Connectivity Map, collapse and expand groups, and fit the topology to the window. FIGURE 4 The Toolbox 1. Zoom In. Use to zoom in on the Connectivity Map 2. Zoom Out. Use to zoom out on the Connectivity Map. 3. Fit in View. Use to scale the map to fit within the Connectivity Map area. 4. Expand. Use to expand the map to show all ports in use on a device. 5. Collapse.
1 Minimap • • • • • Module Name. The name of the module on which the event occurred. Message ID. The message ID of the event. Contributor. The name of the contributor on which the event occurred. Node WWN. The world wide name of the node on which the event occurred. Fabric Name. The name of the fabric on which the event occurred.
Status bar 1 Status bar The status bar (Figure 6) displays at the bottom of the main window. The status bar provides a variety of information about the SAN and the application. The icons on the status bar change to reflect different information, such as the current status of products, fabrics, and backup. FIGURE 6 Status Bar The icons on your status bar will vary based on the licensed features on your system. 1. Connection Status. Displays the Server-Client connection status. 2. Product Status.
1 Icon legend Icon legend Various icons are used to illustrate devices and connections in a SAN. The following tables list icons that display on the Connectivity Map and Product List. Product icons The following table lists the manageable SAN product icons that display on the topology. Fabric OS manageable devices display with blue icons and M-EOS manageable devices display with green icons. If a device is unmanageable it displays with gray icons.
Port icons 1 Group icons The following table lists the manageable SAN product group icons that display on the topology. TABLE 4 Icon Group Icons Description Icon Description Switch Group Host Group Storage Group Unknown Fabric Group Unmanaged Fabric Group Chassis Group Port icons The following table lists the product status icons that display in the Product List.
1 Product status icons Product status icons The following table lists the product status icons that display on the topology. TABLE 6 Product Status Icons Icon Status No icon Healthy/Operational Attention Degraded/Marginal Device Added Device Removed/Missing Down/Failed Routed In Routed Out Unknown/Link Down Event icons The following table lists the event icons that display on the topology and Master Log. For more information about events, refer to “Fault Management” on page 171.
Shortcut menus 1 Shortcut menus You can use the Management application interface main menu to configure, monitor, and troubleshoot your SAN components. The instructions for using these features are documented in the subsequent chapters of this manual. For each SAN component, you can optionally right-click the component and a shortcut menu displays. The table below details the command options available for each component.
1 Shortcut menus TABLE 8 Component Component Shortcut Menus Menu/Submenu Commands Comments Create View Automatically Automatically creates a view with the selected fabric. View name is same as the current label. Map Display Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List.
Shortcut menus TABLE 8 1 Component Shortcut Menus Component Menu/Submenu Commands Comments Collapse or Expand Only available from Connectivity Map Properties Only available for servers. Map Display Only available for chassis group.
1 Shortcut menus TABLE 8 Component Component Shortcut Menus Menu/Submenu Commands Comments Events Enable / Disable > Enable Disable Telnet Telnet through Server Professional Plus and Enterprise Edition Only Configured in Setup Tools. May be more than one item. Setup Tools Professional Plus and Enterprise Edition Only Product Only enabled when the fabric is tracked, and the product is removed and joins another fabric.
Shortcut menus TABLE 8 1 Component Shortcut Menus Component Menu/Submenu Commands Comments Logical Switches > (Fabric OS only) Only available from Product List.
1 Shortcut menus TABLE 8 Component Shortcut Menus Component Menu/Submenu Commands Comments Performance > Real Time Graphs Disabled when all ports are offline. Does not display for Node Origin and Routed instance in a routed fabric. Mapping Product Only available for Brocade HBAs. LightPulse Utility/NT Only available for Emulex devices. Launches with Origin in context for routed device. Emulex Configuration Tool Only available for Emulex devices.
Shortcut menus TABLE 8 1 Component Shortcut Menus Component Menu/Submenu Commands Comments Origin Only available for devices routed in. Not available for enclosures. Destination Only available for devices routed out. Not available for enclosures. Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List.
1 Shortcut menus TABLE 8 Component Shortcut Menus Component Menu/Submenu Commands Comments Properties Switch Port FC Performance > Real-Time Graph Historical Graph (Professional Plus and Enterprise Edition Only) Historical Report (Professional Plus and Enterprise Edition Only) Zoning Enable / Disable > Enable Disable Connected Port Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List.
Shortcut menus TABLE 8 1 Component Shortcut Menus Component Menu/Submenu Commands Comments Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List. Table > Copy ' Group' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Only available from Product List.
1 Shortcut menus TABLE 8 Component Shortcut Menus Component Menu/Submenu Commands Comments Zoning List Zone Members Professional Plus and Enterprise Edition Only Connected Port Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List.
Shortcut menus TABLE 8 1 Component Shortcut Menus Component Menu/Submenu Commands Comments Table > Copy ' Group' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Only available from Product List. Properties Connection Properties FCIP Tunnel Properties Trunk Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Only available from Product List.
1 Shortcut menus TABLE 8 Component Shortcut Menus Component Menu/Submenu Commands Comments White Area of the Product List Port Display > Occupied Product Ports UnOccupied Product Ports Attached Ports Switch to Switch Connections Table > Copy '' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Expand All Collapse All Customize Product List Table > Copy '' Copy Row Copy Table Export Row Export Table Search Select All Size All Columns To Fit Exp
Feature-to-firmware requirements 1 Feature-to-firmware requirements Use the following table to determine whether the Management application features are only available with a specific version of the Fabric OS firmware, M-EOS firmware, or both, as well as if there are specific licensing requirements. TABLE 9 Feature-to-firmware Feature Fabric OS M-EOS Access Gateway (AG) AG connected to Fabric OS devices requires firmware 6.1.1 or later. AG connected to M-EOS devices requires firmware 9.9.
1 Feature-to-firmware requirements TABLE 9 Feature-to-firmware Feature Fabric OS M-EOS Meta SAN Requires Fabric OS 5.2 or later for FC router and router domain ID configuration. Requires Fabric OS 6.0 or later in a mixed Fabric OS and M-EOS fabric. Requires Integrated Routing license. Not available. Performance Requires Fabric OS 5.0 or later for FC_ports, end-to-end monitors, and marching ants. Requires Fabric OS 5.3 or later for GE_ports and FCIP tunnels. Requires Fabric OS 6.
Accessibility features for the Management application 1 Accessibility features for the Management application Accessibility features help users who have a disability, such as restricted mobility or limited vision, to use information technology products successfully. The following list includes the major accessibility features in the Management application: • Keyboard shortcuts • Look and Feel Keyboard shortcuts You can use the keystrokes shown in Table 10 to perform common functions.
1 Look and Feel TABLE 10 Keyboard Shortcuts Menu Item or Function Keyboard Shortcut Zoom In CTRL + NumPad+ Zoom Out CTRL + NumPad- Look and Feel You can configure the Management application to mimic your system settings as well as define the size of the font. ‘Look’ refers to the appearance of graphical user interface widgets and ‘feel’ refers to the way the widgets behave.
Look and Feel 1 4. Click Apply or OK to save your work. 5. Click OK on the message. NOTE Changes do not take affect until after you restart the client. Changing the font size The Options dialog box enables you to change the font size for all components including the Connectivity map of the Management application interface. Font size changes proportionately in relation to the system resolution.
1 36 Look and Feel DCFM Professional User Manual 53-1001355-01
Chapter 2 Discovery In this chapter • Fabric discovery overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Host discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Viewing the discovery state. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Fabric monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Seed switch . . . . . . . .
2 Fabric discovery overview During fabric discovery, if you have defined IPv6 IP addresses for the switch, the Management application remembers the IP address only. If the switch has a DNS name that you have defined, the Management application can remember the DNS name and use that. NOTE Professional edition can discover only 1 fabric. NOTE Professional edition can discover, but not manage M-EOS devices or the Backbone chassis.
Discovering fabrics 2 Discovering fabrics NOTE Fabric OS devices must be running Fabric OS 5.0 or later. M-EOS devices must be running M-EOS 9.6 or later. NOTE Only one copy of the application should be used to monitor and manage the same devices in a subnet. To discover specific IP addresses or subnets, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays.
2 Discovering fabrics 2. Click Add Fabric to specify the IP addresses of the devices you want to discover. The Address Properties dialog box displays. FIGURE 8 Address Properties Dialog Box (IP Address tab) 3. Enter a name for the fabric in the Fabric Name field. 4. Enter an IP address for a device in the IP Address field. For seed switch requirements, refer to “Seed switch requirements” on page 54. NOTE The Backbone Chassis cannot be used as a seed switch.
Discovering fabrics 2 8. Enter the duration (in seconds) after which the application times out in the Time-out (sec) field. 9. Enter the number of times to retry the process in the Retries field. 10. Select the SNMP version from the SNMP Version list. • If you selected v1, continue with step 11. • If you select v3, the SNMP tab displays the v3 required parameters. Go to step 15. 11. Specify the Read option by selecting Default ‘public’ or Custom. 12.
2 Configuring SNMP credentials 22. Click OK on the Address Properties dialog box. If the seed switch is partitioned, the Undiscovered Seed Switches dialog box displays. a. Select the Select check box for each undiscovered seed switch to discover their fabrics. b. Click OK on the Undiscovered Seed Switches dialog box. 23. Click OK on the Discover Setup dialog box. Configuring SNMP credentials 1. Select Discover > Setup. The Discover Setup dialog box displays. 2.
Reverting to a default SNMP community string 2 12. Enter a context name In the Context Name field. 13. Select the authorization protocol in the Auth Protocol field. 14. Enter the authorization password in the Auth Password field. • If you selected Configure for <256-Port_Director_Name>, go to step 17. • If you did not select Configure for <256-Port_Director_Name>, continue with step 15. 15. Select the privacy protocol in the Priv Protocol field. 16. Enter the privacy password in the Priv Password field.
2 Host discovery Host discovery The Management application enables you to discover individual hosts, import a group of Host from a CSV file, or import all hosts from discovered fabrics. NOTE Host discovery requires HCM Agent 2.0 or later. NOTE SMI and WMI discovery are not supported. Discovering Hosts by IP address or hostname To discover a Host by IP address or hostname, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. 2. Click Add Host.
Importing Hosts from a CSV file 2 9. Click OK on the Add Host Discovery dialog box. If an error occurs, a message displays. Click OK to close the error message and fix the problem. A Host Group displays in Discovered Addresses table with pending status. To update the status from pending you must close and reopen the Discover Setup dialog box. 10. Click Close on the Discover Setup dialog box. Importing Hosts from a CSV file To discover Hosts by importing a CSV file, complete the following steps. 1.
2 Importing Hosts from a Fabric 6. Verify the imported values in the Host List text box. 7. Configure Host credentials, if necessary. To configure host credentials, refer to “Configuring Brocade HBA credentials” on page 47 or “Configuring virtual machine credentials” on page 48. 8. Click OK on the Add Host Discovery dialog box. If an error occurs, a message displays. Click OK to close the error message and fix the problem. A Host Group displays in Discovered Addresses table with pending status.
Configuring Brocade HBA credentials 7. 2 Configure Host credentials, if necessary. To configure host credentials, refer to “Configuring Brocade HBA credentials” on page 47 or “Configuring virtual machine credentials” on page 48. 8. Click OK on the Add Host Discovery dialog box. If an error occurs, a message displays. Click OK to close the error message and fix the problem. A Host Group displays in Discovered Addresses table with pending status.
2 Configuring virtual machine credentials 8. Click OK on the Add Host Discovery dialog box. If an error occurs, a message displays. Click OK to close the error message and fix the problem. A Host Group displays in Discovered Addresses table with pending status. To update the status from pending you must close and reopen the Discover Setup dialog box. 9. Click Close on the Discover Setup dialog box.
Editing Host credentials 2 11. Click OK on the Add Host Discovery dialog box. If an error occurs, a message displays. Click OK to close the error message and fix the problem. A Host Group displays in Discovered Addresses table with pending status. To update the status from pending you must close and reopen the Discover Setup dialog box. 12. Click Close on the Discover Setup dialog box. Editing Host credentials To edit Host credentials, complete the following steps. 1. Select Discover > Setup.
2 Removing a Host from Discovery Removing a Host from Discovery To remove a Host from discovery, complete the following steps. 1. Select Discover > Setup. The Discover Setup dialog box displays. 2. Select the Host you want to remove from discovery. 3. Click Delete. 4. Click OK on the confirmation message. The deleted host displays in the Previously Discovered Addresses table. 5. Click Close on the Discover Setup dialog box.
Troubleshooting discovery 2 • Created host structure differs from discovered host; Discovery ignored • Brocade HBA Discovery Failed: HCM Agent connection failed Troubleshooting discovery If you encounter discovery problems, complete the following checklist to ensure that discovery was set up correctly. 1. Verify IP connectivity by issuing a ping command to the switch. a. Open the command prompt. b. From the Server, type ping . 2.
2 Monitoring discovered fabrics Monitoring discovered fabrics NOTE Monitoring is not supported on Hosts. To monitor a fabric and all associated devices, complete the following steps. 1. Select Discovery > Setup. The Discover Setup dialog box displays. 2. Select the fabric you want to monitor from the Discovered Addresses table. 3. Click Monitor. The monitor function fails if the fabric has user-defined Admin Domains created or if the fabric is merged with another fabric already in the monitored state. 4.
Seed switch 2 Seed switch The seed switch must be running a supported Fabric OS version and must be HTTP-reachable. Sometimes, the seed switch is auto-selected, such as when a fabric segments or when two fabrics merge. Other times, you are prompted (an event is triggered) to change the seed switch, such as in the following cases: • If, during fabric discovery, the Management application detects that the seed switch is not running a supported version, you are prompted to change the seed switch.
2 Seed switch failover Seed switch requirements Depending on your environment, you must meet the following hardware and firmware version requirements for seed switches. Fabric OS devices: • For Fabric OS only fabrics, the seed switch must be running Fabric OS 5.0 or later. • For mixed fabrics (Fabric OS and M-EOS), the seed switch must be running Fabric OS 6.0 or later. For a complete list of all supported Fabric OS hardware, refer to “Supported hardware and software” on page xx.
Changing the seed switch 2 To change the seed switch, complete the following steps. 1. Select Discovery > Setup. The Discover Setup dialog box displays. 2. Select the fabric for which you want to change the seed switch from the Discovered Addresses table. If a device joins or merges with a fabric and fabric tracking is active, you must accept changes to the fabric before the new devices display in the Change Seed Switch dialog box.
2 56 Changing the seed switch DCFM Professional User Manual 53-1001355-01
Chapter Application Configuration 3 In this chapter • Management server and client. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 • Data backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 • Data restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 • Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3 Management server and client Management server and client The Management application has two parts: the Server and the Client. The Server is installed on one machine and stores SAN-related information; it does not have a user interface. To view SAN information through a user interface, you must log in to the Server through a Client. If you are running Professional Edition, the server and the client must be on the same machine.
Management server and client TABLE 14 3 Ports Port Number Ports Description Communication Path Open in Firewall 246 jboss.jrmp.invoker.port - port 5 RMI/JRMP invoker port Client–Server No jboss.pooled.invoker.port - port 6 Pooled invoker port Client–Server No 246 jboss.connector.socket.port - port 7 Socket invoker port Server No 24613 jboss.web.ajp.port - port 8 AJP 1.3 connector port Server No 24611 jboss.web.service.
3 Logging into a server Logging into a server You must log into a Server to monitor a SAN. NOTE You must have an established user account on the Server to log in. To log into a server, complete the following steps. 1. Double-click the desktop icon or open the application from the Start menu. The Log In dialog box displays (Figure 18). FIGURE 18 Log In Dialog Box 2. Enter your user name and password. The defaults are Administrator and password, respectively.
Logging into a remote client 3 Logging into a remote client To log into a remote client, complete the following steps. 1. Open a web browser and enter the IP address of the Management application server in the Address bar. If the web server port number does not use the default (443 if is SSL Enabled; otherwise, the default is 80), you must enter the web server port number in addition to the IP address. For example, :.
3 Changing your password Changing your password To change your password, complete the following steps. 1. Double-click the desktop icon or open from the Start menu. The Log In dialog box displays. FIGURE 20 Log In Dialog Box 2. Enter your user name and password. The defaults are Administrator and password, respectively. If you migrated from a previous release, your username and password do not change. 3. Click Change. The Change Password dialog box displays. 4.
Changing the database user password 3 Changing the database user password To change the database password, complete the following steps in the /bin directory. 1. Open a command window. 2. Type dbpassword and press Enter. Where is your user name, is your current password, and and are your new password. The user name and password defaults are dcfm and passw0rd (zero), respectively.
3 Disconnecting users • Client Type—Displays the type of Management application client. • Connected—Displays the date and time the user connected to the server. 3. Click Close. Disconnecting users To disconnect a user, complete the following steps. 1. Select SAN > Active Sessions. The Active Sessions dialog box displays. 2. Select the user you want to disconnect and click Disconnect. 3. Click Yes on the confirmation message. 4. The user you disconnected receives a ‘you have been disconnected’ message. 5.
Customizing the main window 3 Customizing the main window You can customize the main window to display only the data you need by displaying different levels of detail on the Connectivity Map (topology) or Product List. Zooming in and out of the connectivity map You can zoom in or out of the Connectivity Map to see products and ports. Zooming In To zoom in on the Connectivity Map, use one of the following methods: • Click the zoom-in icon ( ) on the toolbox. • Press CTRL + NumPad+ on the keyboard.
3 Customizing the application Showing levels of detail on the connectivity map You can configure different levels of detail on the Connectivity Map, making Management easier. View Fabrics To view only fabrics, without seeing groups, products or ports: Select View > Show> Fabrics Only. View Groups To view only groups and fabrics, without seeing products or ports: Select View > Show> Groups Only. View Products To view products, groups, and fabrics: Select View > Show> All Products.
Customizing the application 3 Displaying columns To only display specific columns, complete the following steps. 1. Right-click anywhere in the table and select Customize or Table > Customize. The Customize Columns dialog box displays. FIGURE 24 Customize Columns dialog box 2. Choose from the following options: • Select the check box to display a column. OR Select the column name and click Show. • Clear the check box to hide a column. OR Select the column name and click Hide.
3 Customizing the application Changing the order of columns To change the order in which columns display, choose from one of the following options. Rearrange columns in a table by dragging and dropping the column to a new location. OR 1. Right-click anywhere in the table and select Customize or Table > Customize. The Customize Columns dialog box displays. 2. Highlight the name of the column you want to move and use Move Up and Move Down to move it to a new location. 3. Click OK.
Customizing the application 3 Exporting table information You can export the entire table or a specific row to a text file. 1. Choose from one of the following options: • Right-click anywhere in the table and select Table > Export Table. • Select the table row that you want to export and select Table > Export Row. The Save table to a tab delimited file dialog box displays. 2. Browse to the location where you want to save the file. 3. Enter file name in the File Name field. 4. Click Save.
3 Searching for a device in the connectivity map Searching for a device in the connectivity map You can search for a device in the Connectivity map by name, WWN, or device type. 1. Enter all or part of the device type, name, or WWN in the search field. 2. Press Enter or click Search Data backup The Management application helps you to protect your data by backing it up automatically. The data can then be restored, as necessary. NOTE Backing up data takes some time.
Configuring backup to a writable CD 3 Back up directory structure overview The Management server backs up data to two alternate folders. For example, if the backup directory location is D:\Backup, the backup service alternates between two backup directories, D:\Backup and D:\BackupAlt. The current backup is always D:\Backup and contains a complete backup of the system. The older backup is always D:\BackupAlt. If a backup cycle fails, the cause is usually a full CD-RW.
3 Configuring backup to a hard drive 4. Choose one or more of the following options: • Select the Include FTP Root Directory check box. If you select the FTP Root directory, the FTP Root sub-directories, Technical Support and Trace Dump, are selected automatically and you cannot clear the sub-directory selections. If you do not select the FTP Root directory, the sub-directories can be selected individually. • Select the Include Technical Support Directory check box, if necessary.
Configuring backup to a network drive 3 4. Choose one or more of the following options: • Select the Include FTP Root Directory check box. If you select the FTP Root directory, the FTP Root sub-directories, Technical Support and Trace Dump, are selected automatically and you cannot clear the sub-directory selections. If you do not select the FTP Root directory, the sub-directories can be selected individually. • Select the Include Technical Support Directory check box, if necessary.
3 Configuring backup to a network drive 4. Choose one or more of the following options: • Select the Include FTP Root Directory check box. If you select the FTP Root directory, the FTP Root sub-directories, Technical Support and Trace Dump, are selected automatically and you cannot clear the sub-directory selections. If you do not select the FTP Root directory, the sub-directories can be selected individually. • Select the Include Technical Support Directory check box, if necessary.
Enabling backup 3 Enabling backup Backup is enabled by default. However, if it has been disabled, complete the following steps to enable the function. 1. Select SAN > Options. The Options dialog box displays. 2. Select Backup in the Category list. 3. Select the Enable Backup check box. 4. Click Apply or OK. Disabling backup Backup is enabled by default. If you want to stop the backup process, you need to disable backup. To disable the backup function, complete the following steps. 1.
3 Changing the backup interval Changing the backup interval When the backup feature is enabled, your SAN is protected by automatic backups. The backups occur every 24 hours by default. However, you can change the interval at which backup occurs. ATTENTION Do NOT modify the backup.properties file. To change the backup interval, complete the following steps. 1. Select SAN > Options. The Options dialog box displays. 2. Select Backup in the Category list. 3.
Reviewing backup events 3 Reviewing backup events The Master Log, which displays in the lower left area of the main window, lists the events that occur on the Fabric. If you do not see the Master Log, select View > All Panels.
3 Restoring data Restoring data 1. (Windows) Open the Server Management Console from the Start menu on the Management application server. OR (UNIX) Open /bin from the Management application server and type ./smc.sh at the command line. 2. Click the Services tab. The tab lists the Management application services. 3. Click Stop Services to stop all of the services. 4. Click the Restore tab. 5. Browse to the backup location.
Display 3 Display You can reset the display to the default settings. Resetting your display You can reset your system to display the default display settings. Note that returning to current settings after a reset may require configuring each global fabric or group setting individually. The following table (Table 16) details the settings that change with reset and the associated default state. TABLE 16 Display Settings Settings Default State Show port Disabled.
3 End node display End node display The connectivity map can be configured to display or not display end nodes. This option enables you to set the end node display for all newly discovered fabrics. Note that disabling end node display limits the connectivity map to emphasize switch members only. Displaying end nodes To display end nodes when discovering a new fabric, complete the following steps. 1. Select SAN > Options. The Options dialog box displays (Figure 27).
Ethernet events 3 Ethernet events An Ethernet event occurs when the Ethernet link between the Management Server and the managed device is lost. You can configure the application to enable events when the Ethernet connection is lost. Enabling Ethernet events The Options dialog box enables you to configure the Management application to generate an Ethernet event after a device is offline for a specific period of time. To enable Ethernet events, complete the following steps. 1. Select SAN > Options.
3 Disabling Ethernet events Disabling Ethernet events To disable Ethernet events, complete the following steps. 1. Select SAN > Options. The Options dialog box displays. 2. Select Ethernet Event in the Category list. 3. Clear the Enable Ethernet Event check box. 4. Click Apply or OK to save your work. Event storage You can configure the number of historical events in the repository as well as how long the events will be retained.
Flyovers 3 3. Select the Purge Events check box. 4. Enter the number of events (1 through 20000) in the repository in the Maximum Historical Event field. Older events are purged as soon as the maximum events is reached regardless of the retention days. 5. Enter then number of days (1 through 30) you want to store events in the Store Historical Event for days field. The events are purged at the end of the retention period regardless of the number of maximum events. 6. Click OK.
3 Flyovers 5. Select the Product tab (Figure 31) and complete the following steps to select the product properties you want to display on flyover. FIGURE 30 a. Options Dialog Box (Flyovers option, Product tab) Select each property you want to display in the product flyover from the Available Properties table.
Flyovers 3 6. Select the Connection tab (Figure 31) and complete the following steps to select the information you want to display on flyover. FIGURE 31 a. Options Dialog Box (Flyovers option, Connection tab) Select the protocol from the Protocol list. The default protocol is Fibre Channel. Depending on which protocol you select, some properties may not be available for all protocols. b. Select each property you want to display in the connection flyover from the Available Properties table.
3 Turning flyovers on or off FCoE • • • Name Node WWN MAC • • • Port# Port Type FCoE Index # c. Click the right arrow to move the selected properties to the Selected Properties table. d. Use the Move Up and Move Down buttons to reorder the properties in the Selected Properties table. The properties displayed in the Selected Properties table appear in the flyover display. 7. Click Apply or OK to save your work. Turning flyovers on or off Flyovers display when you place the cursor on a product.
Names 3 Names You can use Names as a method of providing familiar simple names to products and ports in your SAN. Using your Management application you can: • • • • • Set names to be unique or non-unique. Fix duplicate names. Associate a name with a product or port WWN currently being discovered. Add a WWN and an associated name for a product or port that is not yet being discovered. Remove or disassociate a name from a WWN.
3 Setting names to be non-unique Setting names to be non-unique You can choose to allow duplicate names in your fabric. To set names to be non-unique, complete the following steps. 1. Select SAN > Options. The Options dialog box displays. 2. Select Names in the Category list. 3. Select Set names to be non-unique to allow duplicate names on your system. 4. Click OK on the Options dialog box. Fixing duplicate names To fix duplicated names, complete the following steps. 1. Select Configure > Names.
Viewing names 3 5. Click OK to close the Configure Names dialog box. 6. Click OK on the confirmation message. Viewing names To view names associated with devices by name, complete the following steps. 1. Select Configure > Names. The Configure Names dialog box displays. 2. Select All Names from the Display list. Only devices with a name display. The table displays the Name, WWN, Operational Status, Type, and a Description of the device. 3. Click OK to close the Configure Names dialog box.
3 Adding a name to a new device Adding a name to a new device To add a new device and name it, complete the following steps. 1. Select Configure > Names. The Configure Names dialog box displays. 2. Enter the WWN of the device in the Detached WWN field. 3. Enter a name for the device in the Name field. 4. Click Add. The new device displays in the table. If you set names to be unique on the Options dialog box and the name you entered already exists, a message indicating the name already in use displays.
Exporting names 3 Exporting names To export the names associated with devices, complete the following steps. 1. Select Configure > Names. The Configure Names dialog box displays. 2. Click Export. The Export Files dialog displays. 3. Browse to the location where you want to save the export file. 4. Enter a name for the file and click Save. 5. Click OK to close the Configure Names dialog box.
3 Searching by name Searching by name You can search for objects (switch, fabric, product, ports, or N Ports) by name. To search by name, complete the following steps. 1. Select Configure > Names. The Configure Names dialog box displays. 2. Select All Names from the Display list. 3. Select Name from the Scope list. 4. Enter the name you want to search for in the Search field. You can search on partial names. 5. Click Search.
Security 3 Security You can configure the Server Name, CHAP secret value, and login banner, and modify whether or not to allow clients to save passwords. When the login banner is enabled, each time a client connects to the server, the login banner displays with a legal notice provided by you. The client's users must acknowledge the login banner to proceed, otherwise they are logged out. Configuring the server name To set the CHAP secret, complete the following steps. 1. Select SAN > Options.
3 Setting the CHAP secret 5. Re-enter the password in the Retype Secret field. If the secret does not meet the application requirements or the CHAP Secret and Retype Secret entries do not match, an error message displays. Click OK to re-enter the CHAP Secret and Retype Secret values. You are about to modify the ID/Secret of this server. Check all products that this server is managing and make sure the corresponding Software ID/Secret is updated appropriately.
Configuring the login banner display 3 Configuring the login banner display To configure the login banner display, complete the following steps. 1. Select SAN > Options. The Options dialog box displays. 2. Select Security Misc in the Category list. 3. Select the Display login banner upon client login check box. 4. Enter the message you want to display every time a user logs into this server in the Banner Message field. This field contains a maximum of 1024 characters. 5.
3 Software Configuration Software Configuration The Management application allows you to configure the following software settings: • • • • • • • Client export port—A port for communication between the client and server. Discovery—HTTP or HTTP over SSL when connecting to the switch. FTP/SCP overview—Internal or external FTP server settings. IP Configuration—Configure the Ethernet ports with the IP address. Memory allocation—Memory allocation for the client and server. Server port—Server port settings.
Discovery 3 3. Enter the client export port number to set a fixed port number for the client in the Client Export Port field. 4. Click Apply or OK to save your work. NOTE Changes to this option take effect after a client restart. 5. Click OK on the “changes take effect after client restart” message. Discovery You can configure connections between the switch and the Management application server. Configuring Discovery To configure discovery, complete the following steps. 1. Select SAN > Options.
3 FTP/SCP overview 3. Choose one of the following options: • If you want to connect using HTTP, complete the following steps. a. Select the Connect using HTTP option. a. Enter the connection port number in the Port # field. Continue with step 4. • If you want to connect using HTTPS (HTTP over SSL), complete the following steps. a. Select the Connect using HTTPS (HTTP over SSL) only option. b. Enter the connection port number in the Port # field. Continue with step 4. 4.
FTP/SCP overview 3 Configuring an internal FTP server To configure the internal FTP server settings, complete the following steps. 1. Select SAN > Options. The Options dialog box displays (Figure 37). FIGURE 37 Options Dialog Box (FTP/SCP option) 2. Select FTP/SCP in the Category list. 3. Select the Use built-in FTP Server option to use the default built-in FTP server. All active fields are mandatory. 4. Change your password by entering a new password in the Password and Confirm Password fields. 5.
3 FTP/SCP overview Configuring an external FTP server To configure the external FTP server settings, complete the following steps. 1. Select SAN > Options. The Options dialog box displays. 2. Select FTP/SCP in the Category list. 3. Select the Use External FTP Server and/or SCP Server option. 4. Select the External FTP Server check box to configure the external FTP server. All fields are mandatory. 5. Enter the IP address for the remote host in the Remote Host IP field. 6.
FTP/SCP overview 3 9. Click Test to test the FTP server. A “Server running successfully” or an error message displays. If you receive an error message, make sure your credentials are correct, the server is running, the remote directory path exists, and you have the correct access permission; then try again. 10. Click OK on the message. 11. Click Apply or OK to save your work. Testing the FTP and SCP server To test the FTP and SCP server, complete the following steps. 1. Select SAN > Options.
3 IP Configuration IP Configuration You can configure IP Configuration settings. Configuring IP Configuration settings NOTE The server binds using IPv6 address by default if your Operating System is IPv6-enabled (dual mode or IPv6 only). The server binds using IPv4 address by default if your Operating System is IPv4-enabled. Servers running in dual mode allow the client to communicate from both IPv6 and IPv4 addresses.
IP Configuration 3 Configuring an explicit server IP address If you selected a specific IP address from the Server IP Configuration screen during installation and the selected IP address changes, you will not be able to connect to the server. To connect to the new IP address, you must manually update the IP address information. If the client-to-server communication IP address was configured as the ‘host name’, complete the following steps. 1. Open the Server Management Console from the Start menu. 2.
3 IP Configuration 12. Restart the server to perform SNMP and Syslog auto registration with the new server IP address to all switches. NOTE If the old server IP address displays in SNMP trap and Syslog recipient list, you must manually remove it from the list. The Management application server does not remove the old server IP address during auto-registration. If the client-to-server communication IP address was configured with a specific IP address, complete the following steps. 1.
IP Configuration 3 16. Configure the IP address for Switch - Server IP configuration using the following steps. a. Select SAN > Options. The Options dialog box displays b. Click IP Configuration. The Options dialog box displays c. Select the correct IP address from the Switch - Server IP Configuration list. 17. Restart the server to perform SNMP and Syslog auto registration with the new server IP address to all switches.
3 Memory allocation Memory allocation You can configure memory allocation for the client and server to improve performance. You can trigger switch polling when a state changes or you can poll at intervals when no state change occurs. NOTE SAN size is a consideration in selection of polling periods. Configuring memory allocation settings To configure memory allocation settings, complete the following steps. 1. Select SAN > Options. The Options dialog box displays (Figure 39). 2.
Memory allocation 3 4. Enter the memory allocation (MB) for the server in the Server Memory Allocation field. If your server has a minimum of 2 Gb RAM, change the default server memory value to 1024 MB. If your server is running less than 2 Gb RAM, do not change the default (512 MB). Do not exceed the following server memory values: • For Windows systems, the maximum server memory allocation is 1.4 GB. • For UNIX systems, the maximum server memory allocation is 2 GB.
3 Server port Server port You can configure the server port settings so that you can assign a web server port number and set the server port to be SSL-enabled. Configuring the server port To configure server settings, complete the following steps. 1. Select SAN > Options. The Options dialog box displays (Figure 40). FIGURE 40 Options Dialog Box (Server Port option) 2. Select Server Port in the Category list. 3. Select the Enable SSL check box to enable this function for the server port. 4.
Support mode 3 6. Click Apply or OK to save your work. NOTE Changes to this option take effect after application restart. 7. Click OK on the “changes take effect after application restart” message. Support mode You can configure support settings to allow enhanced diagnostics. Configuring support mode settings To configure support mode settings, complete the following steps. 1. Select SAN > Options. The Options dialog box displays (Figure 41). FIGURE 41 Options Dialog Box (Support Mode option) 2.
3 Fabric tracking 4. Select the Log server support data - Log Level list, and select the type of log data you want to configure. Log level options include: All, Fatal, Error, Warn, Info, Debug, Trace, and Off. Default is Info. 5. Click Apply or OK to save your work. Each log file (except the server log file) is limited to 5 MB. The server log file is limited to 10 MB. When a file reaches the maximum size, and there are less than 10 files for the server or 5 files for the client, a new file is created.
Third-party tools 3 Accepting changes for a fabric To accept all changes to a fabric, choose from one of the following options: • Select a fabric on the Product List or Connectivity Map and select Monitor > Accept Changes. • Right-click a fabric on the Product List or Connectivity Map and select Accept Changes. The added and removed icons and the missing connection dotted yellow line are cleared from the display.
3 Launching a Telnet session Launching a Telnet session You can use Telnet to log in and issue command line-based commands to a switch. NOTE The switch must have a valid IP address. If the device does not have a valid IP address, the Telnet selection will not be available on the Tools menu or the shortcut menu. You must right-click the device icon, select Properties, and enter the device’s IP address before you can open a Telnet session. To launch a telnet session, complete the following steps.
Launching Web Tools 3 Launching Web Tools Use Brocade Web Tools to enable and manage Brocade Access Gateway, Switches, and Directors. You can open Web Tools directly from the application. For more information about Web Tools, refer to the Brocade Web Tools Administrator’s Guide. For more information about Brocade Access Gateway, Switches, and Directors, refer to the documentation for the specific device. To launch a device’s Element Manager, complete the following steps.
3 Launching HCM Agent Launching HCM Agent Use Brocade HCM Agent to enable and manage Brocade HBAs. You can open HCM Agent directly from the application. For more information about HCM Agent, refer to the Brocade HCM Agent Administrator’s Guide. For more information about Brocade HBAs, refer to the documentation for the specific device. To launch a device’s Element Manager, complete the following steps. NOTE You must have Device Administration privileges for the selected device to launch HCM Agent.
Topology layout 3 Topology layout This section provides an overview of topology layout options and instructions for changing the layout. You can customize various parts of the topology, including the layout of devices and connections as well as groups’ background colors, to easily and quickly view and monitor devices in your SAN. The following menu options are available on the View menu. Use these options to customize the topology layout. Map Display.
3 Customizing the layout of devices on the topology Customizing the layout of devices on the topology You can customize the layout of devices by group type or for the entire Connectivity Map. Customizing the layout makes it easier to view the SAN and manage its devices. Group types include Fabric, Host, Storage, and Switch groups. The Map Display Layout list varies depending on what you selected (group type or Connectivity Map). 1.
Changing a group’s background color 3 Changing a group’s background color You can customize the topology by changing a group’s background color. 1. Right-click a group or the Connectivity Map and select Map Display. The Map Display Properties dialog box displays (Figure 42). FIGURE 42 Map Display Dialog Box 2. Select the Custom option and click Change. The Choose a background color dialog box displays (Figure 43). FIGURE 43 Map Display Dialog Box 3.
3 Reverting to the default background color 4. Click OK to change the background color, or click Reset to return all settings to the color currently being displayed on the topology. 5. Click OK on the Map Display Properties dialog box. Reverting to the default background color You can revert back to the default background color. 1. Right-click a group and select Map Display. The Map Display Properties dialog box displays. 2. Select the Default option. 3. Click OK on the Map Display Properties dialog box.
3 Changing the port display Changing the port display You have the option of viewing connected (or occupied) product ports, unoccupied product ports, or attached ports. NOTE Occupied/connected ports are those that originate from a device, such as a switch. Attached ports are ports of the target devices that are connected to the originating device. Select View > Port Display, then select one or more of the following options: • Occupied Product Ports.
3 Grouping on the topology Configuring custom connections NOTE Active zones must be available on the fabric. To create a display of the connected end devices participating in a single zone or group of zones, complete the following steps. 1. Choose from one of the following options: • Select a fabric on the topology and select View > Connected End Devices > Custom. • Right-click a fabric on the topology and select Connected End Devices > Custom.
Grouping on the topology 3 Deleting a custom connection configuration NOTE Active zones must be available on the fabric. To delete a custom connection configuration, complete the following steps. 1. Choose from one of the following options: • Select a fabric on the topology and select View > Connected End Devices > Custom. • Right-click a fabric on the topology and select Connected End Devices > Custom. The Connected End Devices - Custom display for dialog box. 2.
3 122 Grouping on the topology DCFM Professional User Manual 53-1001355-01
Chapter 4 Server Management Console In this chapter • Server management console overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Changing server port numbers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Restoring the database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4 Services Launching the SMC on Linux and Solaris Perform the following steps to launch the server management console on Linux and Solaris systems. 1. On the Management application server, go to the following directory: /bin 2. Type the following at the command line: ./smc Services You must be logged in at the administrator (Windows systems) or root (UNIX systems) level to stop, start, and restart the Management application services.
Refreshing the server status 4 • Status—The status of the service; for example, started or stopped. • Start Time—The date and time the service started. 4. Click Close to close the Server Console. Refreshing the server status To refresh the server status for each of the Management application services, complete the following steps. 1. Launch the Server Console. 2. Click the Services tab. 3.
4 Restarting all services Restarting all services To stop and restart all services, complete the following steps. 1. Launch the Server Console. 2. Click the Services tab. 3. Click Start or Stop to start or stop all services. Note that clicking Restart stops and then restarts all services. NOTE If the server is configured to use an external FTP server, the Server Management Console does not attempt to start the built-in FTP service. 4. Click Close to close the Server Console.
Restoring the database 4 Restoring the database To restore application data files, you must know the path to the backup files. This path is configured from the SAN > Options dialog box. For more information about backup, refer to “Data backup” on page 70. To restore the application data files, complete the following steps. 1. Click the Services tab. 2. Stop all services. 3. Click the Restore tab (Figure 45). FIGURE 45 Restore tab 4.
4 Capturing technical support information Capturing technical support information The Technical Support Information tab of the SMC allows you to capture technical support information for the Management application as well as the configuration files for all switches in discovered fabrics. This information is saved in a zip file in a location that you specify. To capture technical support information, complete the following steps. 1. Select the Technical Support Information tab (Figure 46).
Upgrading HCM on the Management server 4 Upgrading HCM on the Management server The HCM Upgrade tab enables you to upgrade the Management application to include a new version of HCM. To upgrade HCM, complete the following steps. 1. Select the HCM Upgrade tab (Figure 47). FIGURE 47 HCM Upgrade tab 2. Click Browse to select the HCM installation folder location (for example, C:\Program Files\BROCADE\FCHBA on Windows systems and /opt/BROCADE/FCHBA on Solaris and Linux systems). 3. Click Upgrade. 4.
4 130 Upgrading HCM on the Management server DCFM Professional User Manual 53-1001355-01
Chapter 5 Device Configuration In this chapter • Configuration repository management . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Device properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Enhanced group management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Firmware management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • HBA server mapping . . . . . . . . . . . . . . . . .
5 Configuration repository management Saving switch configurations NOTE Save switch configuration is only supported on Fabric OS switches. NOTE To save switch configuration on more than one switch at a time, you must have the Enhanced Group Management license. Configuration files are uploaded from the selected switches and stored in individual files. Files are named with the convention cfg_fabricName_switchName_domainID. 1. Select Configure > FC Switch > Save.
Device properties 5 Device properties You can customize the device Properties dialog boxes to display only the data you need by adding, editing, and deleting property labels. You can also edit property fields to change information. Viewing properties To view the properties for a device or fabric, complete the following step. Right-click any product icon and select Properties.
5 Device properties TABLE 19 Device property fields Field Description Fastwrite Whether fastwrite is On or Off for the FCIP tunnel. FC Port The FC port of the FCIP tunnel. FCoE Capable Whether the device is Fibre Channel over Ethernet capable. FCS Role Whether FCS is supported. Firmware The firmware version. GigE Port The GigE port of the FCIP tunnel. Host Name The host name. IKE Policy # IP Address IPSec Policy # 134 The IKE policy number.
Device properties TABLE 19 5 Device property fields Field Description Remote Member Ports The remote member port of the trunk. Serial # The hardware serial number. Slot # The slot number of the trunk. Source IP Address The IP address of the of the FCIP tunnel source device. Speed (Gb/s) The speed in gigabytes per second. State The device’s state, for example, online or offline. Status The operational status. Switch Name The switch name. Switch IP The switch IP address.
5 Adding a property label Adding a property label You can add a new field to any of the tabs on the Properties dialog box. To add a new field, complete the following steps. 1. Right-click any product icon and select Properties. The Properties dialog box displays. 2. Select the tab to which you want to add a property. 3. Right-click on any label. The new property label displays above the one you select. 4. Select Add. The Add Property dialog box displays. 5. Type a label and description for the property.
Deleting a property label 5 Deleting a property label You can delete any label that you created on any of the tabs from the Properties dialog box. To delete a label, complete the following steps. 1. Right-click any product icon and select Properties. The Properties dialog box displays. 2. Select the tab on which you want to delete a property. 3. Right-click the label for the property you want to delete. 4. Select Delete. 5. Click Yes on the confirmation message. The property you selected is deleted.
5 Firmware management Firmware management A firmware file repository (Windows systems only) is maintained on the server in the following location: C:\Program Files\\data\ftproot\6.1.1\n.n.n\n.n.n\ The firmware repository is used by the internal FTP server that is delivered with the Management application software, and may be used by an external FTP server if it is installed on the same platform as the Management application software.
Importing a firmware file and release notes FIGURE 49 5 Firmware repository 3. View information about a specific firmware file by selecting the firmware file in the Firmware Repository. The Firmware Name, Release Date, and Import Date are displayed. You may also view the Release Notes, if the release notes were imported. Importing a firmware file and release notes Firmware files and release notes can be imported into the Firmware Repository. 1. Select Configure > Firmware Management.
5 Deleting a firmware file 4. Type in the location of the firmware file and release notes, or use Browse to select the location. The Management application supports .zip and .gz compression file types for firmware files. 5. Click OK. You return to the Repository tab. The file is listed in the Firmware Repository when the import is complete and successful. Deleting a firmware file Firmware files can be deleted from the Firmware Repository. 1. Select Configure > Firmware Management.
Downloading firmware 5 Downloading firmware NOTE Non-disruptive firmware download (HCL) is not supported when downgrading from Fabric OS version 6.2 to 6.1. You must remove all non-default logical switches and disable Virtual Fabrics before downgrading. NOTE You cannot use Fabric OS firmware download with command line options in the Management application. You can download firmware using the Firmware Management dialog box. 1. Select Configure > Firmware Management.
5 HBA server mapping 7. If you configured an external server (in the Options dialog box), choose from one of the following options: • Select External FTP Server to download from the external FTP server. • Select SCP Server to download from the external SCP server. 8. Enter the path to the firmware directory (only displays if external server is configured in Options dialog box). 9. Click Download. While the firmware is downloaded to the device, the Status column displays the current download status.
HBA server mapping 5 Creating a new HBA server To create a new server, complete the following steps. 1. Right-click an HBA icon and select Server Port Mapping. The HBA Server Mapping dialog box displays. FIGURE 52 HBA Server Mapping Dialog Box 2. Click New Server. A new server displays in the Servers table in edit mode. 3. Double-click the new server name to make it editable, type a name for the new Server, and press Enter. The name of the new server appears in the Servers table in alphabetical order.
5 HBA server mapping 3. Type a new name for the server. The name of the server appears in the Servers table in alphabetical order with the new name. To assign HBAs to this server, refer to “Associating an HBA with an HBA server” on page 144. 4. Click OK to save your changes and close the HBA Server Mapping dialog box. Deleting an HBA server To delete a server, complete the following steps. 1. Right-click an HBA icon and select Server Port Mapping. The HBA Server Mapping dialog box displays. 2.
HBA server mapping 5 3. Select the HBA from the HBAs table on the left and click the right arrow. The HBA displays in the Servers table. The HBA is now associated with the selected server. 4. Click OK to save your changes and close the HBA Server Mapping dialog box. On the Connectivity Map, the HBA displays in the server. Importing HBA-to-server mapping The HBA Server Mapping dialog box enables you to import externally created HBA-to-Server mapping information into the application.
5 HBA server mapping 4. Click Open on the Import dialog box. The file imports, reads, and applies all changes line-by-line and performs the following: • Checks for correct file structure and well-formed WWNs, and counts number of errors. If more than 5 errors occur, import automatically cancels. Edit the Server HBA mapping file and try again. • Checks for duplicate HBAs. If duplicates exist, a message displays with the duplicate mappings detailed. Click Yes to continue.
Ports 5 Ports You can enable and disable ports, as well as view port details, properties, type, status, and connectivity. Viewing port connectivity The connected switch and switch port information is displayed for all ports. To view port connectivity, choose one of the following steps: • Right-click a product icon and select Port Connectivity. • Select a product icon and select Monitor > Port Connectivity. The Port Connectivity View dialog box displays (Figure 53).
5 Ports TABLE 21 148 Port connectivity fields Field Description Buffer Limited Whether buffers are limited. Buffers Needed/Allocated The ratio of buffers needed relative to the number of buffers allocated. Calculated Status The operational status. There are four possible operation status values: • Up - Operation is normal. • Down - The port is down or the route to the remote destination is disabled. • Disabled - The connection has been manually disabled.
Ports TABLE 21 5 Port connectivity fields Field Description Device Type The device type; for example, target or initiator. FC4 Type The active FC4 type; for example, SCSI. FC Address The Fibre Channel address. Each FC port has both an address identifier and a world wide name (WWN). Flag Whether a flag is on or off. Hard Address The hard address of the device. Host Name The name of the host. Long Distance Whether the connection is considered to be normal or longer distance.
5 Refreshing the port connectivity view TABLE 21 Port connectivity fields Field Description Switch Routing Policy Whether a routing policy, for example, port-based routing policy, is enabled. Switch Secure Mode Whether switch secure mode is enabled. Switch Status The operational status. There are four possible operation status values: • Up - Operation is normal. • Down - The port is down or the route to the remote destination is disabled. • Disabled - The connection has been manually disabled.
Filtering port connectivity 5 Filtering port connectivity To filter results from the port connectivity view, complete the following steps. 1. Click the Filter link from the Port Connectivity View dialog box The Filter dialog box displays (Figure 54). FIGURE 54 Filter Dialog Box 2. Click a blank cell in the Field column to select the property from which to filter the results. 3. Click a blank cell in the Relation column to select an action operation.
5 Viewing port details Resetting the filter Reset immediately clears all existing definitions. You cannot cancel the reset. To reset the Filter dialog box, complete the following steps. 1. Click the Filter link from the Port Connectivity View dialog box. The Filter dialog box displays. 2. Click Reset. All existing definitions are cleared automatically. You cannot cancel the reset. Enabling the filter To enable the filter, select the Filter check box.
Viewing ports and port properties 5 Viewing ports and port properties To view ports on the Connectivity Map, right-click a product icon and select Show Ports. NOTE Show Ports is unavailable when the map display layout is set to Free Form (default). NOTE This feature is only available for connected products. On bridges and CNT products, only utilized Fibre Channel ports display; IP ports do not display.
5 Viewing ports and port properties Depending on the port type, some of the following properties (Table 22) may not be available for all products. TABLE 22 154 Port property fields Field Description # Virtual Session Ports The number of virtual session ports associated with the GE port. Additional Port Info Additional error information relating to the selected port. Address The address of the port. Active FC4 Types The active FC4 types. Active Tunnels The number of active tunnels.
Viewing ports and port properties TABLE 22 5 Port property fields Field Description MAC Address The Media Access Control address assigned to a network adapters or network interface cards (NICs). Manufacturer Plant The name of the manufacturer plant. Modify button Click to launch the Element Manager. Model The model number of the device. Name The name of the switch.
5 Port types TABLE 22 Port property fields Field Description Vendor The product vendor. Virtual FCoE Port Count The number of FC ports on the device. Port types On the Connectivity Map, right-click a switch icon and select Show Ports. The port types display showing which ports are connected to which products. NOTE Show Ports is unavailable when the map display layout is set to Free Form. NOTE This feature is only available for connected products.
Viewing port connection properties 5 Viewing port connection properties You can view the information about products and ports on both sides of the connection. 1. Right-click the connection between two end devices on the Connectivity Map and select Properties. OR Double-click the connection between two devices on the Connectivity Map. The Connection Properties dialog box displays.
5 Viewing port connection properties TABLE 24 Connection property fields Field Description 2-IP Address The IP address of the second switch. 2-Trunk Whether there is a trunk on the second switch. 2-Speed (Gbps) The speed of the second switch. Selected Connection Properties table The connected device port information. Name The name of the switch. Slot # The slot number of the switch. User Port # The user port number of the switch.
Determining inactive iSCSI devices 5 Determining inactive iSCSI devices For router-discovered iSCSI devices, you can view all of the inactive iSCSI devices in one list. To do this, use the Ports Only view and then sort the devices by FC Address. The devices that have an FC address of all zeros are inactive. 1. Select View All, Levels, and then Ports Only from the main window. 2. Use the scroll bar to view the columns to the right and locate the FC Address column in the Ports Only list. 3.
5 Viewing port optics 2. Review the port optics information. • Slot/Port #—The slot and port number of the selected fabric. • FC Address—The Fibre Channel address of the port. • TX Power—The power transmitted to the SFP in dBm and uWatts. NOTE The uWatts display requires devices with Fabric OS 6.1.0 and later. Devices running Fabric OS 6.0.0 and earlier only display dBm. • RX Power—The power received from the port in dBm and uWatts. NOTE The uWatts display requires devices with Fabric OS 6.1.
Port Auto Disable 5 Port Auto Disable The Port Auto Disable dialog box allows you to enable and disable the port auto disable flag on individual FC_ports or on all ports on a selected device, as well as unblock currently blocked ports. NOTE The device must be running Fabric OS 6.3 or later. Viewing the port auto disable status NOTE The device must be running Fabric OS 6.3 or later. 1. Select Configure > Port Auto Disable. The Port Auto Disable dialog box displays.
5 Enabling port auto disable on individual ports • • • • • • • • • Port Type—Displays the port type. Port Number—Displays the port number. Port WWN—Displays the port world wide name. Port Name—Displays the port name. User Port #—Displays the user port number. PID—Displays the port identifier. Connected Port #—Displays the connected port number. Connected Port WWN—Displays the connected port world wide name. Connected Port Name—Displays the connected port name. 3.
Disabling port auto disable on individual ports 5 Disabling port auto disable on individual ports NOTE The device must be running Fabric OS 6.3 or later. 1. Select Configure > Port Auto Disable. The Port Auto Disable dialog box displays. 2. Select the fabric on which you want to disable port auto disable (PAD) from the Fabric list. 3. Choose one of the following options from the Show list to filter the port list: • All Ports (default)—Displays all ports in the fabric.
5 Device Technical Support Device Technical Support You can use Technical Support to collect supportSave data (such as, RASLOG, TRACE and so on) and switch events from Fabric OS devices. You can gather technical data for M-EOS devices using the device’s Element Manager. To gather technical support information for the Management application server, refer to “Capturing technical support information” on page 128.
Starting immediate technical support information collection 5 Starting immediate technical support information collection NOTE The switch must be running Fabric OS 5.2.X or later to collect technical support data. NOTE The HBA must be a managed Brocade HBA. NOTE You must have the SupportSave privilege to perform this task. To capture technical support and event information for specified devices, complete the following steps. 1. Select Monitor > Technical Support > SupportSave.
5 E-mailing technical support information 4. Click the appropriate link to view details. 5. Click OK on the Repository dialog box. E-mailing technical support information To e-mail technical support information, complete the following steps. 1. Select Monitor > Technical Support > View Repository. The Repository dialog box displays. 2. Choose from one of the following options: • Select the Switches tab to e-mail technical support information on switches.
Failure data capture 5 Failure data capture You can use Upload Failure Data Capture to enable, disable, and purge failure data capture files as well as configure the FTP Host for the switch. NOTE Upload Failure Data Capture is only supported on Fabric OS devices. Enabling failure data capture 1. Select Monitor > Technical Support > Upload Failure Data Capture. The Upload Failure Data Capture dialog box displays. FIGURE 59 Upload Failure Data Capture dialog box 2.
5 Disabling failure data capture Disabling failure data capture NOTE Upload Failure Data Capture is only supported on Fabric OS devices. 1. Select Monitor > Technical Support > Upload Failure Data Capture. The Upload Failure Data Capture dialog box displays. 2. Select one or more devices on which you want to disable automatic trace dump from the Available Switches with Upload Failure Data Capture Enabled table. 3. Click the left arrow button.
Viewing the upload failure data capture repository 5 3. Click Change FTP Host. The Change FTP Server dialog box displays. FIGURE 60 Change FTP Server dialog box 4. Choose one of the following options: • Select the Use option to use the Management application FTP server. • Select the Custom option and complete the following steps to configure a FTP server for the selected device. a. Enter the server’s IP address in the Host IP field. c.
5 170 Viewing the upload failure data capture repository DCFM Professional User Manual 53-1001355-01
Chapter 6 Fault Management In this chapter • Fault management overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Event logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Event policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Event notification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6 Event logs Event logs The Management application provides a variety of logs through which you can monitor the SAN. You can view all events that take place in the SAN through the Master Log at the bottom of the main window. You can also view a specific log by selecting an option from the Monitor menu’s Logs submenu. The logs are described in the following list: • Audit Log.
Copying part of a log entry 6 Copying part of a log entry You can copy data from logs to other applications. Use this to analyze or store the data using another tool. To copy part of a log, complete the following steps. 1. Select Monitor > Logs > . The Logs dialog box displays the kind of log you selected. 2. Select the rows you want to copy. • To select contiguous rows, select the first row you want to copy, press Shift, and click the contiguous row or rows you want to copy.
6 Exporting the entire log Exporting the entire log You can export the log data to a tab delimited text file. To export a log, complete the following steps. 1. Select Monitor > Logs > . The Log dialog box displays the kind of log you selected. 2. Right-click a row and select Export Table. The Save table to a tab delimited file dialog box displays. 3. Browse to the location where you want to export the data. 4. Enter a name for the file in the File Name field. 5. Click Save.
Displaying event details from the Master Log 6 5. Enter your e-mail address in the From field. 6. Click OK. E-mailing a range of event details from the Master Log NOTE You must configure e-mail notification before you can e-mail event details from the Master Log. To configure e-mail notification, refer to “Configuring e-mail notification” on page 196. To e-mail event details from the Master Log, complete the following steps. 1. Right-click an entry in the Master Log. 2. Select E-mail > Date.
6 Copying part of the Master Log TABLE 25 Event Details Event Field Description Virtual Fabric ID The virtual fabric identifier. Message ID The message text. Recommended Action The recommended action. Contributors The contributor to this event. Time (Host) The time this event occurred and the host on which it occurred. 4. Click Close to close the Event Details dialog box. Copying part of the Master Log You can copy data from logs to other applications.
Exporting the Master Log 6 Exporting the Master Log You can export the Master Log to a tab delimited text file. Use this to analyze or store the data using another tool. To export the Master Log, complete the following steps. 1. Right-click an entry in the Master Log. 2. Select Table > Export Table. The Save table to a tab delimited file dialog box displays. 3. Browse to the location where you want to export the data. 4. Enter a name for the file in the File Name field. 5. Click Save.
6 Filtering events in the Master Log 2. Select from the following to include or exclude event types. • To include an event type in the filter, select the event from the Available Events table and click the right arrow. • To exclude an event type from the filter, select the event from the Selected Events table and click the left arrow. 3. Click OK. 4. Select one of the following to determine what view to filter events.
Event policies 6 Event policies You can create policies for events you want to monitor. A policy is the mechanism defined by you that identifies the response to specific event types. You can customize the event management policy using triggers and actions, which are explained in this section. You can create a maximum of 10 policies at a time. Policy types You can configure event policies for the following policy types: • • • • Event — use to configure triggers and actions for the following Event types.
6 Adding an event policy Policy triggers A trigger is a logical filter that determines which conditions will initiate a set of predefined actions. You can set multiple triggers. The Management application enables you to set the following triggers: • IP Address — Initiates the defined action when the IP address of a device is encountered. • Node WWN — Initiates the defined action when the Node WWN of a device is encountered.
Adding an ISL offline policy 6 9. Enter all or part of the message ID associated with SNMP traps and Syslog messages in the Message ID field. If the entry matches or is part of the message ID, the policy is triggered. 10. Define the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 255 characters. Multiple values must be separated by a semi-colon.
6 Adding a PM threshold crossed policy 6. Define the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 255 characters. Multiple values must be separated by a semi-colon. When multiple values are entered, as long as at least one value matches the IP address, Node WWN, or Name in the event and all other conditions are met, an action is triggered. IP addresses can either be in IPv4 or IPv6 format and must be complete. A Node WWN is accepted with or without the colon. 7.
Adding a security violation policy 6 9. Select the duration type (Seconds or Minutes) from the Duration list. The maximum duration is 30 minutes. 10. Select the check box in the Actions list for each action you want to occur when this policy is triggered. For a list of the available actions, refer to “Policy actions” on page 180.
6 Defining the broadcast message action 11. Click OK on the Add Event Policy dialog box. 12. Select the Active check box for the policy you want to activate. 13. Click OK on the Event Policies dialog box. Defining the broadcast message action You can define the content of the broadcast message that occurs when a policy is triggered. You can only edit actions from the Add Event Policy, Duplicate Event Policy, or Edit Event Policy dialog boxes.
Defining the launch script action 6 Defining the launch script action NOTE Launch scripts with a user interface are not supported. You can define the path to the script that is launched when a policy is triggered. When the script launches, the Management application does not verify the existence of the script. The script must have the following characteristics: • It must reside on the Management application server.
6 Defining the send e-mail action Defining the send e-mail action You can define the content of the e-mail message that occurs when a policy is triggered. You can only edit actions from the Add Event Policy, Duplicate Event Policy, or Edit Event Policy dialog boxes.
Configuring support data capture action 6 Configuring support data capture action You can configure the Management application to start supportSave capture on Fabric OS devices when a policy is triggered. You can only edit actions from the Add Event Policy, Duplicate Event Policy, or Edit Event Policy dialog boxes.
6 Deleting a policy Deleting a policy 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to delete. Press Ctrl and then click to select more than one policy. 3. Click Delete. 4. Click OK on the Event Policies dialog box. Duplicating an event policy To duplicate an event policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to duplicate in the Policies table. 3.
Duplicating an ISL offline policy 6 10. Edit the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 255 characters. Multiple values must be separated by a semi-colon. When multiple values are entered, as long as at least one value matches the IP address, Node WWN, or Name in the event and all other conditions are met, an action is triggered. IP addresses can either be in IPv4 or IPv6 format and must be complete. A Node WWN is accepted with or without the colon. 11.
6 Duplicating a PM threshold crossed policy 8. Select the duration type (Seconds or Minutes) from the Duration list. The maximum duration is 30 minutes. 9. Select the check box in the Actions list for each action you want to occur when this policy is triggered. For a list of the available actions, refer to “Policy actions” on page 180.
Duplicating a security violation policy 6 11. Select the Active check box to activate the duplicated policy. 12. Click OK on the Event Policies dialog box. Duplicating a security violation policy To duplicate a security violation policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to duplicate in the Policies table. 3. Click Duplicate. The Duplicate Event Policy dialog box displays. 4.
6 Editing an event policy Editing an event policy To edit an event policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to edit in the Policies table. 3. Click Edit. The Edit Event Policy dialog box displays. NOTE You cannot edit the event policy name. 4. Edit the description (255 characters maximum) for the policy in the Description field. 5.
Editing an ISL offline policy 6 Editing an ISL offline policy To edit an ISL offline policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to edit in the Policies table. 3. Click Edit. The Edit Event Policy dialog box displays. 4. Edit the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 255 characters. Multiple values must be separated by a semi-colon.
6 Editing a PM threshold crossed policy Editing a PM threshold crossed policy To edit a PM threshold crossed policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to edit in the Policies table. 3. Click Edit. The Edit Event Policy dialog box displays. 4. Edit the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 255 characters. Multiple values must be separated by a semi-colon.
Editing a security violation policy 6 Editing a security violation policy To edit a security violation policy, complete the following steps. 1. Select Monitor > Event Policies. The Event Policies dialog box displays. 2. Select the policy you want to edit in the Policies table. 3. Click Edit. The Edit Event Policy dialog box displays. 4. Define the trigger in the IP Address, Node WWN, and Name list. The trigger is limited to 255 characters. Multiple values must be separated by a semi-colon.
6 Event notification Event notification The Management application records the SAN events in the Master Log. You can configure the application to send event notifications to e-mail addresses at certain time intervals. This is a convenient way to keep track of events that occur on the SAN. Configuring e-mail notification To send notification of events to users, complete the following steps. 1. Select Monitor > Event Notification > E-mail.
Setting up advanced event filtering 6 8. Select one of the following options: • Select Send to and enter an e-mail address for a user to send a test e-mail to a specific user. • Select Send to all users enabled for notification to send a test e-mail to all users already set to receive notification. 9. Click Send Test E-mail to test the e-mail server. A message displays whether the server was found.
6 Setting up advanced event filtering b. Select the event column for the event from the Event Column list. All event columns are listed in alphabetical order. c. Enter all or part of the event type value in the Value Contains text box. d. Click the right arrow button to move the event type to the Additional Filters - Filter out these Events table. 6. Click the Exclude Events tab. FIGURE 64 a.
SNMP trap and informs registration and forwarding 6 SNMP trap and informs registration and forwarding You can configure the application to send SNMP traps and informs to other computers. To correctly configure trap forwarding, you must configure the target computer’s IP address and SNMP ports. To correctly configure informs, you must enable informs on the switch.
6 Removing a host server 5. Select a fabric from the Targeted Fabric list. 6. Select a severity (None, Critical, Error, Warning, Info, or Debug) from the Severity list. 7. Click OK on the SNMP Setup dialog box. Removing a host server You can remove any host server as the trap recipient on managed Fabric OS devices. To remove a host server, complete the following steps. 1. Select Monitor > SNMP Setup. The SNMP Setup dialog box displays. 2. Click the Other Recipients tab. 3.
Adding an SNMPv3 destination 6 4. Click Add. The Add/Edit Trap Recipient dialog box displays. a. (Optional) In the Description field, enter a description of the trap recipient. b. In the IP Address field, enter the trap recipient’s IP address. The Management application accepts IP addresses in IPv4 or IPv6 formats. c. Enter the trap recipient’s UDP port number, in the port field. d. Click OK on the Add/Edit Trap Recipient dialog box. 5. Click OK on the SNMP Setup dialog box.
6 Editing a destination Editing a destination To edit a destination, complete the following steps. 1. Select Monitor > SNMP Setup. The SNMP Setup dialog box displays. 2. Click the Trap Forwarding tab. 3. Select the destination you want to edit in the Destinations table and click Edit. The Add/Edit Trap Recipient dialog box displays. a. (Optional) In the Description field, edit the description of the trap recipient. b. In the IP Address field, edit the trap recipient’s IP address.
Enabling SNMP informs 6 Enabling SNMP informs NOTE SNMP Informs is only supported on Fabric OS 6.3 or later switches discovered through SNMP v3. For information about discovery through SNMP v3, refer to “Discovering fabrics” on page 39. You can enable SNMP informs on all Informs-capable Fabric OS switches. To enable Informs, complete the following steps. 1. Select Monitor > SNMP Setup. The SNMP Setup dialog box displays. 2. Click the Informs tab. 3. Select the Enable informs option. 4.
6 Syslog forwarding Syslog forwarding NOTE Syslog messages are only available on Fabric OS devices and Brocade HBAs (managed using HCM Agent). Syslog forwarding is the process by which you can configure the Management application to send Syslog messages to other computers. Switches only send the Syslog information through port 514; therefore, if port 514 is being used by another application, you must configure the Management application to listen on a different port.
Registering a host server 6 Registering a host server You can register any host server as the Syslog destination on managed Fabric OS devices. You can register different destinations for different fabrics. To register a host server, complete the following steps. 1. Select Monitor > Syslog Configuration. The Syslog Registration and Forwarding dialog box displays. 2. Click the Other Destination tab. 3. Select Add from the Action list. 4.
6 Editing a destination Editing a destination To edit a destination, complete the following steps. 1. Select Monitor > Syslog Configuration. The Syslog Registration and Forwarding dialog box displays. 2. Click the Syslog Forwarding tab. 3. Select the destination you want to edit in the Destinations table and click Edit. The Add/Edit Syslog Recipient dialog box displays. a. (Optional) In the Description field, edit the description of the Syslog recipient. b.
Disabling Syslog forwarding 6 Disabling Syslog forwarding You can disable Syslog forwarding on all defined destinations. To disable Syslog forwarding, complete the following steps. 1. Select Monitor > Syslog Configuration. The Syslog Registration and Forwarding dialog box displays. 2. Click the Syslog Forwarding tab. 3. Clear the Enable Syslog forwarding check box. 4. Click OK on the Syslog Registration and Forwarding dialog box.
6 208 Disabling Syslog forwarding DCFM Professional User Manual 53-1001355-01
Chapter Performance Data 7 In this chapter • Performance overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209 • Real-time performance data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215 Performance overview Performance monitoring provides details about the quantity of traffic and errors a specific port or device generates on the fabric over a specific time frame.
7 Performance management requirements • • • • • • • • • • • • • • • • • • • • • • Timeout Retransmits — available for FCIP tunnels only. Fast Retransmits — available for FCIP tunnels only. Duplicate Ack Received — available for FCIP tunnels only. Window Size RTT — available for FCIP tunnels only. TCP Out of Order Segments — available for FCIP tunnels only. Slow Start Status — available for FCIP tunnels only. Frames Received — available for 10GE ports only. Overflow Errors — available for 10GE ports only.
Performance management requirements 7 Example of Management application Server IP included in access control list FCRRouter:admin> snmpconfig --show accesscontrol SNMP access list configuration: Entry 0: Access host subnet area 172.26.1.
7 Performance management requirements - To set the SNMP v1 credentials on the device, use the snmpconfig --set snmpv1 command. Example of setting SNMP v1 HCLSwitch:admin> snmpconfig --set snmpv1 SNMP community and trap recipient configuration: Community (rw): [test] Trap Recipient's IP address : [172.26.1.183] Trap recipient Severity level : (0..5) [4] Trap recipient Port : (0..65535) [162] Community (rw): [OrigEquipMfr] Trap Recipient's IP address : [172.26.24.26] Trap recipient Severity level : (0..
Performance management requirements - 7 To set the SNMP v3 credentials on the device, use the snmpconfig --set snmpv3 command. FM_4100_21:admin> snmpconfig --set snmpv3 SNMPv3 user configuration(SNMP users not configured in Fabric OS user database will have physical AD and admin role as the default): User (rw): [snmpadmin1] admin Auth Protocol [MD5(1)/SHA(2)/noAuth(3)]: (1..3) [3] 1 New Auth Passwd: Verify Auth Passwd: Priv Protocol [DES(1)/noPriv(2)/3DES(3)/AES128(4)/AES192(5)/AES256(6)]): (1..
7 Performance management requirements 4. Click the SNMP tab. 5. Select the v1 or v3 from the SNMP Version list. 6. Make sure SNMP credentials match those on the device. 7. Click OK on the Address Properties dialog box. 8. Click OK on the Discover Setup dialog box. - To set SNMP credentials in the Management application, refer to “Configuring SNMP credentials” on page 42. • Make sure that the SNMP security level is set to the appropriate level for the switch.
Real-time performance data 7 • To collect performance on a Virtual Fabric enabled device, use the admin> userconfig --show command to make sure the Fabric OS user has access to all the Virtual Fabrics. Make sure that the SNMPv3 user name is same as the Fabric OS user name. Otherwise, the data is not collected for virtual switches with a non-default VF ID. By default the admin user has access to all Virtual Fabrics.
7 Generating a real-time performance graph Generating a real-time performance graph You can monitor a device’s performance through a performance graph that displays transmit and receive data. The graphs can be sorted by the column headers. You can create multiple real-time performance graph instances. NOTE To make sure that statistic collection for a switch does not fail, you must configure SNMP credentials for the switch. For step-by-step instructions, refer to “Configuring SNMP credentials” on page 42.
Filtering real-time performance data 7 Filtering real-time performance data To filter real-time performance data from the Real Time Performance Graphs dialog box, complete the following steps. 1. Open the Real Time Performance Graphs dialog box. For step-by-step instructions, refer to “Generating a real-time performance graph” on page 216. The Real Time Performance Graphs dialog box displays. FIGURE 66 Real Time Performance Graphs dialog box 2. Click Select to change the object type. 3.
7 Exporting real-time performance data 10. Select the granularity at which you want to gather performance data from the Granularity list. 11. Select the Interpolate check box to use interpolation to fill existing gaps, if necessary. 12. (Optional) Click Other Options and select the Use Same Y-axis check box to make the Y-axis range the same for object. The Use Same Y-axis check box is only available when you select Rx MB/sec and Tx MB/sec from the Measures list.
Chapter 8 Reports In this chapter • Report types. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Generating reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Viewing reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Exporting reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Printing reports . . . . .
8 Generating reports Generating reports To generate reports, complete the following steps. 1. Select Monitor > Reports > Generate. The Generate Reports dialog box displays. 2. Select the types of reports you want to generate. • Fabric Ports • Fabric Summary 3. Select the fabrics for which you want to generate reports. 4. Click OK. The generated reports display in the View Reports dialog box. NOTE Hyperlinks in reports are active only as long as the source data is available. 5.
Exporting reports 8 Exporting reports To export reports, complete the following steps. 1. Select Monitor > Reports > View or click the View Report icon. The View Reports dialog box displays. 2. Select the report you want to export in the All Reports list. If you do not see the report you want to export, generate it first by following the instructions in “Generating reports” on page 220. You can select reports by Time, Report Type, or User. 3.
8 Deleting reports Deleting reports To delete reports, complete the following steps. 1. Select Monitor > Reports > View or click the View Report icon. The View Reports dialog box displays. 2. Select the report you want to delete in the All Reports list. If you do not see the report you want to view, generate it first by following the instructions in “Generating reports” on page 220. You can select reports by Time, Report Type, or User. 3. Click Delete Report.
Chapter 9 Host management In this chapter • About host management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Host discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Connectivity map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • HBA server mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Host performance management . .
9 Host discovery Host discovery The Management application enables you to discover individual hosts, import a group of hosts from a CSV file, or import host names from discovered fabrics. The maximum number of host discovery requests that can be accepted is 1000. NOTE Host discovery requires HCM Agent 2.0 or later. SMI and WMI discovery are not supported.
HBA server mapping 9 HBA server mapping HBAs and servers discovered through one or more fabrics can be easily identified in the topology by their product icons. For a list of products and their icons, refer to “Product icons” on page 16. Once identified in the topology, you can create servers and assign the HBAs to them and import an externally created HBA server mapping file (.CSV) to the Management application.
9 Host performance management Host performance management Real-time performance enables you to collect data from managed HBA ports. You can use real-time performance to configure the following options: • Select the polling rate from 10 seconds up to 1 minute. • Select up to 32 ports total from a maximum of 10 devices for graphing performance. • Choose to display the same Y-axis range for both the Tx MB/Sec and Rx MB/Sec measure types for easier comparison of graphs.
Host fault management 9 Host fault management Fault management enables you to monitor your SAN using the following methods: • Monitor logs for specified conditions and notify you or run a script when the specified condition is met. • Create event-based policies, which contain an event trigger and action. • Configure E-mail event notification. • Receive and forward Syslog messages from Fabric OS switches and Brocade HBAs, managed using the Host Connectivity Manager (HCM).
9 Syslog forwarding Syslog forwarding NOTE Syslog messages are only available on Fabric OS devices and Brocade HBAs (managed using the HCM Agent). Syslog forwarding is the process by which you can configure the Management application to send Syslog messages to other computers. Switches only send the Syslog information through port 514; therefore, if port 514 is being used by another application, you must configure the Management application to listen on a different port.
Launching HCM 9 • CEE ports • FCoE ports (CNA only) • Ethernet ports (CNA only) • Diagnostics, which enables you to test the adapters and the devices to which they are connected: • Link status of each adapter and its attached devices • Loopback test, which is external to the adapter, to evaluate the ports (transmit and receive transceivers) and the error rate on the adapter • Read/write buffer test, which tests the link between the adapter and its devices • FC protocol tests, including echo, ping, and t
9 Host security authentication Host security authentication Fibre Channel Security Protocol (FC-SP) is a mechanism used to secure communication between two switches or between a switch and a device such as an HBA port. You can use either the the Management application or the HCM GUI to display the authentication settings and status.
Host security authentication 9 3. Configure the following parameters on the FCSP Authentication dialog box: a. Select the Enable Authentication check box to enable or disable the authentication policy. If authentication is enabled, the port attempts to negotiate with the switch. If the switch does not participate in the authentication process, the port skips the authentication process. The Hash type list shows the following options, but only one option, DHNULL, is supported.
9 supportSave supportSave Host management features support capturing support information for managed Brocade adapters, which are discovered in the Management application. You can trigger SupportSave for multiple adapters at the same time. You can use Technical Support to collect supportSave data (such as, RASLOG, TRACE and so on) and switch events from Fabric OS devices. You can gather technical data for M-EOS devices using the device’s Element Manager. NOTE The switch must be running Fabric OS 5.2.
Chapter 10 Fibre Channel over IP In this chapter • FCIP services licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • FCIP Concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • IP network considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • FCIP trunking overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10 FCIP services licensing FCIP services licensing Most of the FCIP extension services described in this chapter require the High Performance Extension over FCIP/FC license. FICON emulation features require additional licenses. Use the licenseShow command to verify the needed licenses are present on the hardware used on both ends the FCIP tunnel. FCIP Concepts Fibre Channel over IP (FCIP) is a tunneling protocol that enables you to connect Fibre Channel SANs over IP-based networks.
FCIP platforms and supported features 10 FCIP platforms and supported features There are five Brocade platforms that support FCIP: • The 8 Gbps 16-FC ports, 6-Gbps ports extension switch. • The 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports blade (384-port Backbone Chassis, 192-port Backbone Chassis). • The 4 Gbps Extension Switch. • The 4 Gbps Router, Extension switch. • The 4 Gbps Router, Extension blade (384-port Backbone Chassis, 192-port Backbone Chassis, Director Chassis).
10 FCIP platforms and supported features The way FCIP tunnels and virtual ports map to the physical GbE ports depends on the switch or blade model. The 8 Gbps 16-FC ports, 6-Gbps ports extension switch and 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports blade tunnels are not tied to a specific GbE port, and may be assigned to any virtual port within the allowed range.
FCIP trunking overview 10 FCIP trunking overview FCIP trunking is a method for managing the use of WAN bandwidth. Trunking is enabled by creating logical circuits within an FCIP tunnel. A tunnel may have multiple circuits. Each circuit represents a portion of the available Ethernet bandwidth provided by the GbE ports that are connected to the WAN. NOTE FCIP trunking is available only on the 8 Gbps 16-FC ports, 6-Gbps ports extension switch and 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports blade.
10 Adaptive Rate Limiting and QoS priorities Adaptive Rate Limiting and QoS priorities Each FCIP circuit is assigned four TCP connections for managing FC Quality of Service (QoS) priorities over an FCIP tunnel. The priorities are as follows: • F class - F class is the highest priority, and is assigned bandwidth as needed, at the expense of lower priorities, if necessary. • QoS high - The QoS high priority gets at least 50% of the bandwidth.
IPSec implementation over FCIP 10 IPSec implementation over FCIP Internet Protocol security (IPsec) uses cryptographic security to ensure private, secure communications over Internet Protocol networks. IPsec supports network-level data integrity, data confidentiality, data origin authentication, and replay protection.
10 Open systems tape pipelining TABLE 29 IPsec terminology (Continued) Term Definition MAC Message Authentication Code is a key-dependent, one-way hash function used for generating and verifying authentication data. HMAC A stronger MAC because it is a keyed hash inside a keyed hash. SA Security Association is the collection of security parameters and authenticated keys that are negotiated between IPsec peers.
Virtual Port Types 10 Consider the constraints described in Table 30 when configuring tunnels to use OSTP. TABLE 30 Using FCIP Fastwrite and Tape Acceleration FCIP Fastwrite Tape Acceleration Each GbE port supports up to 2048 simultaneous accelerated exchanges, which means a total of 2048 simultaneous exchanges combined for Fastwrite and Tape Acceleration.
10 FCIP configuration guidelines FCIP configuration guidelines FCIP configuration always involves two or more extension switches. The following must take place first before you can successfully configure a working FCIP connection from the Management application: • The Management application must have management port access to the extension switches. • The Management application must be able to discover the fabrics the contain the extension switches.
Additional guidelines for tunnel advanced settings 10 Additional guidelines for tunnel advanced settings The following features are implemented as advanced settings on the Add FCIP Tunnel dialog box: • • • • • Data compression. Open Systems Tape Pipelining (FCIP Fast Write and Tape Acceleration). IPSec and IKE settings for cryptographic security over IP networks. FICON emulation/acceleration features that improve performance in FICON environments. tperf test mode.
10 FICON emulation features FICON emulation features FICON emulation supports FICON traffic over IP WANs using FCIP as the underlying protocol. FICON emulation features support performance enhancements for specific applications. If you are using FCIP for distance extension in a FICON environment, evaluate the need for these features before you run the FCIP configuration wizard. FICON emulation may be configured by selecting Advanced Settings on the Configure Tunnel dialog.
Configuring an FCIP tunnel 10 Configuring an FCIP tunnel When you configure an FCIP extension connection, you create FCIP tunnels and FCIP circuits, between two extension switches. 1. Select Configure > FCIP Tunnels. The FCIP Tunnels dialog box is displayed (Figure 69). All discovered fabrics with extension switches are listed under devices. FIGURE 69 FCIP Tunnels dialog box 2. Select the switch you want to configure under Devices.
10 Configuring an FCIP tunnel 3. Click the Add Tunnel button, or right-click on the switch and select Add Tunnel. The Add FCIP Tunnel dialog is displayed (Figure 70). The name of the switch you selected is displayed in the Switch field under Switch One Settings. This dialog allows you to configure settings for both switches on either end of the tunnel. FIGURE 70 Add FCIP Tunnel dialog box 4.
Adding an FCIP circuit 10 Adding an FCIP circuit FCIP circuits are added by selecting the Add Circuit button on the Add FCIP Tunnel dialog box. The Add FCIP Circuit dialog box is displayed (Figure 71). FIGURE 71 Add FCIP Circuit dialog box 1. Select the GiGE Port used for the Ethernet connection on each switch. The choices available depend on the extension switch or blade model. 2. Select the IP Address Type. IPv4 and IPv6 address formats cannot be mixed. Addresses must be entered in the same format.
10 Configuring FCIP Circuit Advanced Settings 6. If a VLAN ID is used to route frames between the switches over the physical connection, enter the VLAN ID under Switch One Settings. The same VLAN ID is automatically assigned to switch two. 7. Select values for bandwidth settings. An uncommitted bandwidth is not allowed on an FCIP circuit. You must select Committed bandwdith, and set Minimum and Maximum bandwidth values.
Configuring FCIP tunnel advanced settings 10 Configuring FCIP tunnel advanced settings Compression, FCIP fast write and tape pipelining, IPSec and IKE policies, and FICON emulation features are configured as advanced settings. 1. Click Advanced Settings on the Configure Tunnel dialog box. The Advanced Settings dialog box is displayed. This dialog box has a Transmission tab, Security tab, and FICON Emulation tab. 2.
10 Enabling and disabling compression Enabling and disabling compression The procedure for enabling compression for the 4 Gbps Router, Extension Switch and Blade is different than the procedure for enabling compression for the 8 Gbps 16-FC ports, 6-Gbit ports Extension Switch and 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports Extension blade. For 4 Gbps Router, Extension Switch and Blade: 1. Select the Enable Compression check box to enable compression. 2. Click OK to commit your selection.
Configuring IPSec and IKE policies 10 Configuring IPSec and IKE policies IPSec and IKE policies are configured from the Security tab (Figure 73). IPSec and IKE policy creation is an independent procedure. These policies must be known to you before you can configure them. NOTE Fabric OS version 6.3.0 does not support IPSec on the 8 Gbps 16-FC ports, 6-Gbit ports Extension Switch and 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports Extension blade.
10 Configuring FICON emulation Configuring FICON emulation FICON emulation and acceleration features and operating parameters are configured from the FICON Emulation tab (Figure 74). Before you configure these features you must decide which features you want to implement, and you must look closely at the operational parameters to determine if values other than the default values are better for your installation. FIGURE 74 FICON Emulation configuration tab 1.
Viewing FCIP connection properties 10 - FICON Tape Read Max Ops defines a maximum number of concurrent emulated tape read operations. The range is 1-32. - FICON Tape Write Timer defines a time limit for pipelined write chains. This value is be specified in milliseconds (ms). If a pipelined write chain takes longer than this value to complete, the ending status for the next write chain will be withheld from the channel. This limits processing to what the network and device can support.
10 Viewing General FCIP properties Viewing General FCIP properties Take the following steps to view general FCIP properties. 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the Properties tab (Figure 76).
Viewing FCIP FC port properties 10 Viewing FCIP FC port properties Take the following steps to view FCIP FC port properties. 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the FC Ports tab (Figure 77).
10 Viewing FCIP Ethernet port properties Viewing FCIP Ethernet port properties Take the following steps to view Ethernet port properties. 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the GigE Ports tab (Figure 78).
Editing FCIP tunnels 10 Editing FCIP tunnels NOTE You cannot edit an active tunnel; disable the tunnel before making changes. 1. From the FCIP Tunnels dialog box, select the tunnel you want to edit. 2. Select Edit Tunnel. The Edit FCIP Tunnel dialog box displays (Figure 79). FIGURE 79 Edit FCIP Tunnel dialog box 3. Fields and parameters are as described in Configuring an FCIP tunnel. You can edit all editable fields and parameters.
10 Editing FCIP circuits Editing FCIP circuits FCIP circuit settings may be edited from the Edit FCIP Circuit dialog box. The procedure for launching this dialog box for the 4 Gbps Router, Extension Switch and Blade is different than the procedure for the 8 Gbps 16-FC ports, 6-Gbit ports Extension Switch and the 8 Gbps 12-FC port, 10 GbE ports, 2-10 GbE ports Extension blade. The 4 Gbps Router, Extension Switch and Blade have only one circuit per tunnel, and the circuit is edited as part of the tunnel.
Disabling FCIP tunnels FIGURE 80 10 Edit FCIP Circuits dialog box 5. Fields and parameters are as described in Adding an FCIP circuit. You can edit all editable fields and parameters. Disabling FCIP tunnels 1. From the FCIP Tunnels dialog box, select the tunnel you want to disable. 2. Select Disable Tunnel. A confirmation dialog box displays, warning you that when you delete a tunnel, you delete all associated FCIP circuits. 3. Click OK to disable the tunnel. Enabling FCIP tunnels 1.
10 Deleting FCIP tunnels Deleting FCIP tunnels 1. From the FCIP Tunnels dialog box, right-click the tunnel you want to delete. 2. Select Delete Tunnel. A confirmation dialog box displays, warning you of the consequences of deleting a tunnel. 3. Click OK to delete the tunnel. Disabling FCIP circuits 1. From the FCIP Tunnels dialog box, right-click the tunnel that contains the circuit. 2. Select the Circuit tab. 3. Select the circuit from the circuit properties table. 4. Select Disable Circuit.
Displaying FCIP performance graphs for FC ports 10 Displaying FCIP performance graphs for FC ports 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the FC Ports tab. 3. Click Performance > Real Time Graph. Displaying FCIP performance graphs for Ethernet ports 1.
10 Displaying tunnel properties from the FCIP tunnels dialog box Displaying tunnel properties from the FCIP tunnels dialog box Tunnel properties can be displayed from the FCIP Tunnels dialog box. 1. Select a tunnel from the FCIP tunnels dialog box. 2. Select the Tunnel tab. Tunnel properties are displayed (Figure 81).
Displaying FCIP circuit properties from the FCIP tunnels dialog box 10 Displaying FCIP circuit properties from the FCIP tunnels dialog box Tunnel properties can be displayed from the FCIP Tunnels dialog box using the following procedure. 1. Select a tunnel from the FCIP tunnels dialog box. 2. Select the Circuit tab. Circuit properties are displayed (Figure 82).
10 Displaying switch properties from the FCIP Tunnels dialog box Displaying switch properties from the FCIP Tunnels dialog box Switch properties are displayed on the FCIP Tunnels dialog box when you select a switch (Figure 83).
Displaying fabric properties from the FCIP Tunnels dialog box 10 Displaying fabric properties from the FCIP Tunnels dialog box Fabric properties are displayed on the FCIP Tunnels dialog box when you select a switch. (Figure 84).
10 Troubleshooting FCIP Ethernet connections Troubleshooting FCIP Ethernet connections 1. Select an extension blade or switch from the Fabric Tree structure, or right-click an extension blade or switch on the Connectivity Map, and select Properties. 2. Select the GigE Ports tab. 3. Select the Ethernet port. 4. Click Troubleshooting. The following options are presented: 266 - ipPerf—Measures end-to-end IP path performance between a pair of FCIP ports (4 Gbps Router, Extension Switch and Blade only).
Chapter 11 Fibre Channel over Ethernet In this chapter • FCoE overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • QoS configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • LLDP-DCBX configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Access Control List configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11 Enhanced Ethernet features Enhanced Ethernet features Converged Enhanced Ethernet (CEE) is a set of IEEE 802 standard Ethernet enhancements that enable Fibre Channel convergence with Ethernet. The two basic requirements in a lossless Ethernet environment are Enhanced Transmission Selection (ETS) and priority-based flow control. These capabilities allow the Fibre Channel frames to run directly over 10 Gbps Ethernet segments without adversely affecting performance.
FCoE protocols supported 11 FCoE protocols supported The Brocade FCoE converged network adapter supports two layers of protocols: Ethernet link layer and FCoE layer. They are listed in the following sections. Ethernet link layer protocols supported The following protocols support the Ethernet link layer. • • • • • • • • • • • • • 802.1q (VLAN) 802.1Qaz (enhanced transmission selection) 802.1Qbb (priority flow control) 802.3ad (link aggregation) 802.3ae (10 Gb Ethernet) 802.
11 CEE configuration CEE configuration This switch has eight 8 Gbps FC ports and 24 10 Gbps Ethernet CEE ports. You must configure CEE interfaces and ports differently than you configure FC ports, in order to effectively use the converged network features. For example, Priority-based flow control (PFC) and Enhanced transmission selection (ETS) are the two QoS policy enhancements you must configure to create a lossless Ethernet.
CEE configuration tasks 11 CEE configuration tasks The CEE Configuration dialog box enables you to perform the following tasks: • Edit CEE ports for a selected switch. You can also add a link aggregation group (LAG) if a single switch is selected. • Edit a switch or port and configure the following CEE policies: NOTE Access Control List and Spanning Tree Protocol can also be set at the LAG level. • • • • • QoS LLDP-DCBX Access Control List Spanning Tree Protocol 802.
11 Switch policies Switch policies You can configure and enable a number of CEE policies on a switch, port, or link aggregation group (LAG). The following switch policy configurations apply to all ports in a LAG: • CEE map and Traffic Class map • Link Layer Discovery Protocol (LLDP) The following switch policy configurations apply to the LAG itself: • Access Control Lists (ACL) • Spanning Tree Protocol (STP) The switch policies are described in the following sections.
Spanning Tree Protocol policy 11 Spanning Tree Protocol policy The Spanning Tree Protocol (STP) is a Layer 2 protocol that ensures a loop-free topology for any bridged LAN (Layer-2 bridges are typically Ethernet switches). Spanning tree allows a network design to include spare (redundant) links to provide automatic backup paths if an active link fails, without the danger of bridge loops or the need to manually enable or disable these backup links.
11 Link aggregation groups 3. Click Add LAG. The Add LAG dialog box displays. FIGURE 86 Add LAG dialog box 4. Configure the following LAG parameters: NOTE A LAG restriction exists whereby you can add 802.1x-enabled ports to a LAG, but the port will fail when the LAG is saved to the switch. 802.1x-enabled ports are not supported. • Status - Enabled or Disabled. You must enable the LAG to use the CEE functionality. • Name - The system-generated, read-only LAG name.
Editing a CEE switch 11 6. Continue to configure the following LAG parameters. These parameters are disabled until you add a CEE port to the LAG members table. • Mode - Sets all ports added to the LAG members table in either Static or Dynamic mode. The default is Dynamic, Active, but LAG members can be Active or Passive if the LAG member is Dynamic. • Type - Sets the limit on the size of the LAG.
11 Editing a CEE port 3. Click Edit. The Edit Switch dialog box displays (Figure 87). FIGURE 87 Edit Switch dialog box 4. Configure the policies for the Edit Switch tabs, which are described in the following sections: • • • • • “QoS configuration” on page 282 “LLDP-DCBX configuration” on page 291 “Access Control List configuration” on page 296 “Spanning Tree Protocol configuration” on page 302 “802.1x authentication” on page 307 5.
Editing a LAG 11 3. Click Edit. The Edit Port dialog box displays. FIGURE 88 Edit Port dialog box 4. Modify the following CEE Port parameters as required: • Status - Enable or Disable. You must enable the LAG to use the CEE functionality. • Interface Mode - None or L2. • L2 Mode - This is enabled if you select L2 as the Interface Mode. You cannot change the Interface Mode to None if it is set to L2 and the port is assigned to a VLAN. 5.
11 Editing a LAG 3. Click Edit. The Edit LAG dialog box displays. FIGURE 89 Edit LAG dialog box 4. Modify the following LAG parameters as required: 5. Configure the following LAG parameters: NOTE A LAG restriction exists whereby you can add 802.1x-enabled ports to a LAG, but the port will fail when the LAG is saved to the switch. 802.1x-enabled ports are not supported. • • • • Status - Enabled or Disabled. You must enable the LAG to use the CEE functionality.
Enabling a CEE port or LAG 7. 11 Continue to configure the following LAG parameters. These parameters are disabled until you add a CEE port to the LAG members table. • Mode - The ports that are LAG members are in either Static or Dynamic mode. You can change the mode of new port members only; you cannot change the mode on existing members of a LAG.
11 Disabling a CEE port or LAG Disabling a CEE port or LAG If you select multiple switches or multiple ports and LAGs from two or more switches, both the Enable button and the Disable button are disabled. 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select one or more CEE ports or link aggregation groups (LAGs) that you want to disable.
CEE Performance 11 CEE Performance Performance monitoring provides details about the quantity of traffic and errors a specific port or device generates on the fabric over a specific time frame. You can also use performance to indicate the devices that create the most traffic and to identify the ports that are most congested. Real Time Performance Graph You can monitor a device’s performance through a performance graph that displays transmit and receive data.
11 Historical Performance Graph Historical Performance Graph The Historical Performance Graph dialog box enables you to customize how you want the historical performance information to display. Generating a historical performance graph 1. Select a CEE port from the CEE Configuration dialog box, and select Historical Graph from the Performance list. A message displays, prompting you to close the CEE Configuration dialog. 2.
Priority-based flow control 11 Priority-based flow control Priority based flow control (PFC) is an enhancement to the existing pause mechanism in Ethernet. PFC creates eight separate virtual links on the physical link and allows any of these links to be paused and restarted independently, enabling the network to create a no-drop class of service for an individual virtual link. Table 31 shows examples of how priority grouping might be allocated in a 15-priority group scenario.
11 Creating a CEE map 3. Click the QoS tab on the Edit Switch dialog box. The QoS dialog box displays. FIGURE 92 QoS, Create CEE Map dialog box 4. Select CEE from the Map Type list. 5. Configure the following CEE Map parameters in the CEE Map table: • Name - Enter a name to identify the CEE map. • Precedence - Enter a value between 1 - 100. This number determines the map’s priority. • Priority Flow Control check box - Check to enable priority flow control on individual priority groups.
Editing a CEE map 11 6. Click the right arrow button to add the map to the CEE Maps table. 7. Click OK. The CEE Confirmation and Status dialog box displays. 8. Review the changes carefully before you accept them. 9. Click Start to apply the changes, or click Close to abort the operation. Editing a CEE map 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit.
11 Deleting a CEE map Deleting a CEE map 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the QoS tab on the Edit Switch dialog box. The QoS dialog box displays. 4. Select a CEE Map that you want to delete from the CEE Maps table. 5. Click Delete. The Delete confirmation dialog displays. 6. Click Yes to confirm.
Assigning a CEE map to a port or link aggregation group 11 Assigning a CEE map to a port or link aggregation group A port can have either a CEE map or a Traffic Class map assigned to it, but it cannot have both. 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a port or LAG, and click Edit. 3. Click the QoS tab on the Edit Port dialog box. The QoS dialog box displays.
11 Creating a traffic class map Creating a traffic class map 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the QoS tab on the Edit Switch dialog box. The QoS dialog box displays. 4. Select Traffic Class from the Map Type list. 5. Name the Traffic Class map. 6. Click the Traffic Class cell in a CoS row and directly enter a value from 0-7.
Deleting a traffic class map 11 Deleting a traffic class map 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the QoS tab on the Edit Switch dialog box. The QoS dialog box displays. 4. Select a Traffic Class Map that you want to delete from the Traffic Class Maps table. 5. Click Delete. The Delete confirmation dialog displays. 6.
11 Assigning a traffic class map to a port or link aggregation group Assigning a traffic class map to a port or link aggregation group You can assign a Traffic Class map to a port or ports under the LAG; however, a port does not require a Traffic Class map be assigned to it. A port can have either a CEE map or a Traffic Class map assigned to it, but it cannot have both. NOTE You cannot configure QoS or LLDP-DCBX on a LAG. 1. Select Configure > CEE Switch > CEE from the menu bar.
LLDP-DCBX configuration 11 LLDP-DCBX configuration Link Layer Discovery Protocol (LLDP) provides a solution for the configuration issues caused by increasing numbers and types of network devices in a LAN environment, because, with LLDP, you can statically monitor and configure each device on a network.
11 Adding an LLDP profile Adding an LLDP profile When LLDP is disabled on the switch, a yellow banner displays on the LLDP-DCBX dialog box, indicating that LLDP-DCBX is not only disabled on the switch, it is also disabled for all ports and LAGs on the switch. 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3.
Editing an LLDP profile 11 Editing an LLDP profile 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the LLDP-DCBX tab on the Edit Switch dialog box. The LLDP Profile dialog box displays. 4. Select an LLDP Profile in the LLDP Profile table. NOTE You can edit the profile.
11 Duplicating an LLDP profile 7. Click OK. The CEE Confirmation and Status dialog box displays. 8. Review the changes carefully before you accept them. 9. Click Start to apply the changes, or click Close to abort the operation. Duplicating an LLDP profile When you duplicate an LLDP profile, you also duplicate the parameters that belong to that LLDP Profile. 1. Select Configure > CEE Switch > CEE from the menu bar.
Assigning an LLDP profile to a port or ports in a LAG 11 Assigning an LLDP profile to a port or ports in a LAG You create LLDP profiles using the Edit Switch dialog box, which you access from the CEE Configuration dialog box. Global configuration parameters, which is the default selection, are displayed in the Assigned Profile table shown in Figure 96.
11 Access Control List configuration 6. Click OK. The CEE Confirmation and Status dialog box displays. 7. Review the changes carefully before you accept them. The port you selected on the CEE Configuration dialog box should now be assigned to the profile you selected from the Available Profiles list. 8. Click Start to apply the changes, or click Close to abort the operation. Access Control List configuration Access control lists (ACL) are sequential lists consisting of permit and deny rules.
Adding an ACL to a switch FIGURE 97 11 Access Control List dialog box 4. Click Add and select Standard or Extended from the Add list. The Add Extended Access Control List includes all the Standard ACL features plus two additional features: Destination and Ether Type. The ACL parameters are described below. FIGURE 98 Add Extended Access Control List dialog box 5. Configure the following Access Control List parameters.
11 Adding an ACL to a switch • Action - Select Permit or Deny from the list. NOTE If Action = Deny is selected for any ACL entity, an informational dialog displays with the following message: “This ACL entity will stop all traffic to the port or LAG on which this ACL is assigned.” • Source - Enter the media access control (MAC) address where the packets originate. Mask is the subnet mask of the source MAC address.
Editing the parameters of an ACL 11 Editing the parameters of an ACL You cannot change the name of the ACL (Standard or Extended) after you have created the ACL on the switch. 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the Access Control List tab on the Edit Switch dialog box. The Access Control List dialog box displays. 4.
11 Duplicating an ACL profile Duplicating an ACL profile 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a switch, and click Edit. 3. Click the Access Control List tab on the Edit Switch dialog box. The Access Control List dialog box displays. 4. Select the ACL that you want to duplicate from the ACLs table. 5. Click Duplicate.
Assigning an ACL to a port or link aggregation group 11 Assigning an ACL to a port or link aggregation group An access control list (ACL) cannot be assigned to a port when the port is a member of a link aggregation group (LAG). An ACL can be assigned to a LAG, however. NOTE The ports and the ports in a link aggregation group (LAG) for the selected switch must be in Layer 2 (L2) mode. If the ports or ports in a LAG are not in L2 mode, the ACL parameters are disabled. 1.
11 Spanning Tree Protocol configuration Spanning Tree Protocol configuration You can configure Spanning Tree Protocol (STP) when editing a LAG, but not when you are adding a LAG. The 8 Gbps 16-FC-ports, 10 GbE 8-Ethernet Port supports the following types of STP: • Spanning Tree Protocol (STP) • Rapid Spanning Tree Protocol (RSTP) - Provides for faster spanning tree convergence after a topology change.
Setting Spanning Tree parameters for a switch 11 Setting Spanning Tree parameters for a switch You cannot configure Spanning Tree Protocol (STP) when adding a new LAG. STP can be configured only after the LAG has been added to the switch. NOTE The ports and the ports in a link aggregation group (LAG) for the selected switch must be in Layer 2 (L2) mode. If the ports or ports in a LAG are not in L2 mode, Spanning Tree Protocol is disabled and the STP parameters are disabled as well. 1.
11 Setting Spanning Tree parameters for a switch 5. Configure the following Spanning Tree Protocol parameters: • Priority - The bridge priority. The value range is 0-61440 and the default value is 32768. The value must be in increments of 4096. • Mode - The spanning tree protocol mode. Options include Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP). • Forward Delay (sec) - The forward delay for the bridge.
Setting Spanning Tree parameters for a switch 11 FIGURE 101 Spanning Tree Protocol dialog box, MSTP 6. Click OK. The CEE Confirmation and Status dialog box displays. 7. Review the changes carefully before you accept them. 8. Click Start to apply the changes, or click Close to abort the operation.
11 STP configurable parameters at the port or LAG level STP configurable parameters at the port or LAG level You cannot configure Spanning Tree Protocol (STP) when adding a new LAG. STP can be configured only after the LAG has been added to the switch. NOTE When STP is disabled on the switch, a yellow banner displays on the dialog box, indicating that STP is not only disabled on the switch, it is also disabled for all ports and LAGs on the switch.
802.1x authentication 11 802.1x authentication 802.1x is a standard authentication protocol that defines a client-server-based access control and authentication protocol. 802.1x restricts unknown or unauthorized clients from connecting to a LAN through publicly accessible ports. You must configure parameters for a port or a link aggregation group (LAG) once a port has been enabled for 802.1x authentication. See Setting 802.1x parameters for a port for more information. NOTE When 802.
11 Disabling 802.1x Disabling 802.1x 1. Select Configure > CEE Switch > CEE from the menu bar. The CEE Configuration dialog box displays, showing the status of all CEE-related hardware and functions. 2. Select a port or LAG, and click Edit. 3. Click the 802.1x tab on the Edit Port dialog box. The 802.1x dialog box displays. 4. Clear the Enable 802.1x check box to disable 802.1x authentication. 5. Click OK. The CEE Confirmation and Status dialog box displays. 6.
Setting 802.1x parameters for a port 11 4. Click the Enable 802.1x check box to enable 802.1x authentication, and click OK. The 802.1x dialog box displays. 5. FIGURE 103 802.1x dialog box 6. Configure the following 802.1x parameters: • Wait Period - The number of seconds the switch waits before sending an EAP request. The value range is 15 to 65535 seconds. The default value is 30.
11 Virtual FCoE port configuration Virtual FCoE port configuration The 8 Gbps 16-FC-ports, 10 GbE 8-Ethernet Port has the following configuration features: • • • • 24 10 Gbps Ethernet ports, which can be enabled for FCoE traffic. One-to-one mapping of FCoE ports with 10 Gbps Ethernet ports. Eight 8 Gbps FC ports. 24 internal FCoE ports, which provide the Ethernet-to-FC bridging capability. You can enable or disable each FCoE trunk individually.
Clearing a stale entry 11 Clearing a stale entry A stale entry is a device that logged in and logged off but, because a port went down after an FLOGI was received, the device failed to receive the message. The entry in the FCoE Connected Devices table becomes stale and you must clear it manually. 1. Select a virtual FCoE port from the FCoE Configuration dialog box and click Connected Devices. The Connected Devices dialog box displays. 2.
11 312 Clearing a stale entry DCFM Professional User Manual 53-1001355-01
Chapter 12 Encryption configuration In this chapter • Gathering information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Encryption user privileges. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Encryption Center features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Smart card usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
12 Gathering information Gathering information Before you use the encryption setup wizard for the first time, you should also have a detailed configuration plan in place and available for reference. The encryption setup wizard assumes the following: • You have a plan in place to organize encryption devices into encryption groups.
Encryption user privileges 12 Encryption user privileges In the Management application, resource groups are assigned privileges, roles, and fabrics. Privileges are not directly assigned to users; users get privileges because they belong to a role in a resource group. A user can only belong to one resource group at a time. The Management application provides three pre-configured roles: • Storage encryption configuration. • Storage encryption key operations. • Storage encryption security.
12 Encryption Center features Encryption Center features The Encryption Center dialog box (Figure 105) is the single launching point for all encryption-related configuration in the Management application. It also provides a table that shows the general status of all encryption-related hardware and functions at a glance. FIGURE 105 Encryption Center dialog box The Encryption Center dialog box differs from the previous Configure Encryption dialog box.
Registering authentication cards from a card reader 12 Registering authentication cards from a card reader When authentication cards are used, one or more authentication cards must be read by a card reader attached to a Management application PC to enable certain security sensitive operations. These include the following: • • • • • Master key generation, backup, and restore operations. Replacement of authentication card certificates. Enabling and disabling the use of system cards.
12 Registering authentication cards from the database Registering authentication cards from the database Smart cards that are already in the Management program’s database can be registered as authentication cards. 1. From the Register Authentication Cards dialog box, select Register from Archive. The Authentication Cards dialog box displays, showing a list of smart cards in the database. 2. Select the card from the table, and click OK. 3.
Registering system cards from a card reader 12 Registering system cards from a card reader System cards are smart cards that can be used to control activation of encryption engines. Encryption switches and blades have a card reader that enables the use of a system card. System cards discourage theft of encryption switches or blades by requiring the use of a system card at the switch or blade to enable the encryption engine.
12 Enabling or disabling the system card requirement Enabling or disabling the system card requirement If you want to use a system card to control activation of an encryption engine on a switch, you must enable the system card requirement. You can use the following procedure to enable or disable the system card requirement. 1. From the Encryption Center select an encryption group, and select the Security menu. The Select Security Settings dialog is displayed. 2.
Viewing and editing switch encryption properties 12 FIGURE 106 Encryption Properties dialog box • • • • Switch Properties table - the properties associated with the selected switch. Name - the name of the selected switch. Node WWN - the world wide name of the node. Switch Status - the health status of the switch. Possible values are Healthy, Marginal, Down, Unknown, Unmonitored, and Unreachable.
12 Viewing and editing switch encryption properties • Firmware Version - the current encryption firmware on the switch. • Primary Key Vault Link Key Status - the possible statuses are as follows: - Not Used – the key vault type is not LKM. - No Link Key – no access request was sent to an LKM yet, or a previous request was not accepted. - Waiting for LKM approval – a request was sent to LKM and is waiting for the LKM administrator’s approval.
Saving the public key certificate 12 • HA Cluster Name - the name of the HA cluster (for example, Cluster1), if in an HA configuration. The name can have a maximum of 31 characters. Only letters, digits, and underscores are allowed. • Media Type - the media type of the encryption engine. Possible values are Disk and Tape. • System Card - the current status of system card information for the encryption engine. (registered or not registered).
12 Viewing and editing group properties Viewing and editing group properties To view encryption group properties, complete the following steps. 1. Select Configure > Encryption. The Encryption Center dialog box displays. 2. If groups are not visible in the Encryption Devices table, select View > Groups from the menu bar. The encryption groups display in the Encryption Devices table. 3.
General tab 12 General tab The properties displayed in the General tab are described below. • Encryption group name - the name of the encryption group. • Group status - the status of the encryption group, which can be OK-Converged or Degraded. Degraded means the group leader cannot contact all of the configured group members. • Deployment mode - the group’s deployment mode, which is transparent. • Failback mode - The group’s failback mode, which can be automatic or manual.
12 Consequences of removing an encryption switch Members tab Remove button You can click the Remove button to remove a selected switch or an encryption group from the encryption group table. • You cannot remove the group leader unless it is the only switch in the group. If you remove the group leader, the Management application also removes the HA cluster, the target container, and the tape pool (if configured) that are associated with the switch.
Consequences of removing an encryption switch 12 FIGURE 108 Removal of switch warning Figure 109 shows the warning message that displays if you click Remove to remove an encryption group.
12 Security tab Security tab The Security tab (Figure 110) displays the status of the master key for the encryption group. NOTE You must enable encryption engines before you back up or restore master keys. Master key actions are as follows: • Back up a master key, which is enabled any time a master key exists. • Restore a master key, which is enabled when either no master key exists or the previous master key has been backed up.
HA Clusters tab 12 HA Clusters tab HA clusters are groups of encryption engines that provide high availability features. If one of the engines in the group fails or becomes unreachable, the other cluster member takes over the encryption and decryption tasks of the failed encryption engine. An HA cluster consists of exactly two encryption engines. See “Creating high availability (HA) clusters” on page 347.
12 Link Keys tab Replacing an encryption engine To replace an encryption engine in an encryption group with another encryption engine within a DEK Cluster, complete the following steps. 1. Select Configure > Encryption. The Encryption Center dialog box displays. 2. If groups are not visible in the Encryption Devices table, select View > Groups from the menu bar. The encryption groups display in the Encryption Devices table. 3.
Tape Pools tab 12 Tape Pools tab Tape pools are managed from the Tape Pools tab. Figure 113 displays the tape pools tab. FIGURE 113 Encryption Group Properties - Tape Pools tab • If you want to remove a tape pool, select one or more tape pools in the list and click Remove. • To modify the tape pool, remove the entry and add a new tape pool. See “Adding tape pools” on page 332 for more information.
12 Tape Pools tab Adding tape pools A tape pool can be identified by either a name or a number, but not both. Tape pool names and numbers must be unique within the encryption group. When a new encryption group is created, any existing tape pools in the switch are removed and must be added. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. If groups are not visible in the Encryption Devices table, select View > Groups from the menu bar.
Encryption Targets dialog box 12 6. Select the Encryption Mode. Choices include Clear Text, DF-Compatible Encryption, and Native Encryption. DF-Compatible Encryption is valid only when LKM is the key vault. The Key Lifespan (days) field is editable only if the tape pool is encrypted. If Clear Text is selected as the encryption mode, the key lifespan is disabled. NOTE You cannot change the encryption mode after the tape pool I/O begins. 7.
12 Encryption Targets dialog box FIGURE 116 Encryption Targets dialog box TABLE 34 Encryption Targets dialog box functionality Feature Description Add button Launches the Storage Encryption Setup Wizard, which enables you to configure a new target for encryption. It is the first step in configuring encryption for a storage device. It is recommended that you zone the host and target together before you add container information.
Redirection zones 12 TABLE 34 Encryption Targets dialog box functionality (Continued) Feature Description Hosts button Launches the Encryption Target Hosts dialog box, where you can configure hosts to access the selected encryption target. LUNs button Launches the Encryption Target LUNs dialog box, where you can display existing LUNs and add new LUNs. The button is enabled only if there are hosts associated with the targets.
12 Creating a new encryption group Creating a new encryption group The following steps describe how to start and run the encryption setup wizard, and then create a new encryption group. NOTE When a new encryption group is created, any existing tape pools in the switch are removed. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. FIGURE 117 Encryption Center - No Group Defined dialog box 2. Select a switch from the encryption group.
Creating a new encryption group 12 4. Click Next. Create a new encryption Group is pre-selected. This is the correct selection for creating a new group. FIGURE 118 Designate Switch Membership dialog box 5. Click Next. The Create a New Encryption Group dialog box displays.
12 Creating a new encryption group 6. Enter an Encryption Group Name for the encryption group (the maximum length of the group name is 15 characters; letters, digits, and underscores are allowed) and select the Automatic failback mode. NOTE If the name you enter for the encryption group already exists, a pop-up warning message displays. Although unique group names avoid confusion while managing multiple groups, you are not prevented from using duplicate group names.
Creating a new encryption group 12 Key vault address changes Before you add or change a key vault address, you must install the public key certificates for all switches in the encryption group on the key vault. Use the Encryption Group Properties dialog box to check a switch’s connection status to the new key vault and to obtain the switch’s public key certificate.
12 Creating a new encryption group FIGURE 122 Specify Master Key File Name dialog box 14. Enter a file name, or browse to the desired location. 15. Enter the passphrase, which is required for restoring the master key. The passphrase can be between eight and 40 characters, and any character is allowed. 16. Re-type the passphrase for verification.
Creating a new encryption group 12 17. Click Next. The Confirm Configuration panel displays the encryption group name and switch public key certificate file name you specified, shown in Figure 123. FIGURE 123 Confirm Configuration dialog box 18. Click Next to confirm the displayed information. The Configuration Status displays, as shown in Figure 124. The configuration status steps vary slightly depending on the key vault type. • A progress indicator shows that a configuration step is in progress.
12 Creating a new encryption group FIGURE 124 Configuration Status dialog box The Management application sends API commands to verify the switch configuration. The CLI commands are detailed in the Fabric OS Encryption Administrator’s Guide, “Key vault configuration.” • Initialize the switch If the switch is not already in the initiated state, the Management application performs the cryptocfg --initnode command.
Creating a new encryption group 12 • Create a new master key The Management application checks for a new master key. New master keys are generated from the Encryption Group Properties dialog box, Security tab. See “Creating a new master key” on page 372 for more information. • Save the switch’s public key certificate to a file The Management application saves the KAC certificate into the specified file.
12 Adding a switch to an encryption group Adding a switch to an encryption group The setup wizard allows you to either create a new encryption group, or add an encryption switch to an existing encryption group. Use the following procedure to add a switch to an encryption group. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select the switch to be to be added to the group. The switch must not already be in an encryption group. 3.
Adding a switch to an encryption group 12 FIGURE 127 Add Switch to Existing Encryption Group dialog box 5. Select the group to which you want to add the switch, and click Next. The Specify Public Key Certificate Filename panel displays. FIGURE 128 Add switch to an encryption group - Specify Public Key Certificate filename dialog box 6. Specify the name of the file where you want to store the public key certificate that is used to authenticate connections to the key vault, and click Next.
12 Adding a switch to an encryption group FIGURE 129 Add switch to an encryption group - Confirm Configuration dialog box 7. Click Next to confirm the displayed information. The Configuration Status displays. • A progress indicator shows that a configuration step is in progress. A green check mark indicates successful completion of all steps for that Configuration Item. A red stop sign indicates a failed step. • All Configuration Items have green check marks if the configuration is successful.
Creating high availability (HA) clusters 12 8. Note Important Next Steps! below this message, and click Next. Instructions for installing public key certificates for the encryption switch are displayed. These instructions are specific to the key vault type. Copy or print these instructions. FIGURE 131 Add switch to an encryption group - Next Steps dialog box 9. Click Finish to exit the Configure Switch Encryption wizard.
12 Removing engines from an HA cluster 3. Select an encryption group from the tree, and select Group > HA Cluster from the menu bar, or right-click the encryption group and select HA Cluster. Encryption Group Properties are displayed, with the HA Clusters tab selected (Figure 132). Available encryption engines are listed under Non-HA Encryption Engines. 4. Select an available encryption engine, and a destination HA cluster under High-Availability Clusters.
Swapping engines in an HA cluster 12 Swapping engines in an HA cluster Swapping engines is useful when replacing hardware. Swapping engines is different from removing an engine and adding another because when you swap engines, the configured targets on the former HA cluster member are moved to the new HA cluster member. To swap engines, select one engine from the right tree (see Figure 132) and one unclustered engine from the list on the left, and click the double-arrow button.
12 Adding encryption targets Adding encryption targets Adding an encryption target maps storage devices and hosts to virtual targets and virtual initiators within the encryption switch. NOTE It is recommended that you zone the host and target together before configuring them for encryption. If the host and target are not already zoned, you can still configure them for encryption, but afterward you will need to zone the host and target together, and then click the Commit button to commit the changes.
Adding encryption targets 12 5. Click Next to begin. The Select Encryption Engine dialog box displays. The list of engines depends on the scope being viewed. • If the Targets dialog box is showing all targets in an encryption group, the list includes all engines in the group. • If the Targets dialog box is showing all targets for a switch, the list includes all encryption engines for the switch.
12 Adding encryption targets 6. Select the encryption engine (blade or switch) you want to configure, and click Next. The Select Target panel displays. This panel lists all target ports and target nodes in the same fabric as the encryption engine. The Select Target list does not show targets that are already configured in an encryption group. There are two available methods for selecting targets: select from the list of known targets or manually enter the port and node WWNs.
Adding encryption targets 7. 12 Click Next. The Select Hosts panel displays. This panel lists all hosts in the same fabric as the encryption engine. There are two available methods for selecting hosts: select from a list of known hosts or manually enter the port and node world wide names. FIGURE 136 Select Hosts dialog box a. Select a maximum of 1024 hosts from the Host Ports in Fabric list, and click the right arrow to move the host to the Selected Hosts list.
12 Adding encryption targets FIGURE 137 Name Container dialog box 10. Click Next. The Confirmation panel displays.
Adding encryption targets 12 11. Click Next to confirm the displayed information. The Configuration Status displays the target and host that are configured in the target container, as well as the virtual targets (VT) and virtual initiators (VI). NOTE If you can view the VI/VT Port WWNs and VI/VT Node WWNs, the container has been successfully added to the switch. FIGURE 139 Configuration Status dialog box 12. Review the configuration.
12 Adding encryption targets 13. Click Next to confirm the configuration. The Important Instructions dialog box displays. FIGURE 140 Important Instructions dialog box 14. Review the instructions about post-configuration tasks you must complete after you close the wizard. 15. Click Finish to exit the Configure Storage Encryption wizard.
Configuring hosts for encryption targets 12 Configuring hosts for encryption targets Use the Encryption Target Hosts dialog box to edit (add or remove) hosts for an encrypted target. NOTE Hosts are normally selected as part of the Configure Storage Encryption wizard but you can also edit hosts later using the Encryption Target Hosts dialog box. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2.
12 Adding Target Disk LUNs for encryption Adding Target Disk LUNs for encryption The Encryption Target LUNs dialog box lists configured LUNs. The displayed information is different for disk and tape devices. For example, tape volume and label information is included for tape devices. Initially, this list is empty. NOTE If you are using VMware virtualization software or any other configuration that involves mounted file systems on the LUN, you must enable first-time encryption when you create the LUN.
Adding Target Disk LUNs for encryption 12 FIGURE 142 Encryption Target Disk LUNs dialog box 5. Click Add. The Add LUNs dialog box displays. This dialog box includes a table of all LUNs in the storage device that are visible to hosts. LUNs are identified by serial number, or by host WWN and LUN number. The LUN numbers may be different for different hosts.
12 Adding Target Disk LUNs for encryption 6. Select a host from the Host list. There are two possible sources for the list of LUNs: • Specify a range of LUN numbers and click Show LUNs. This fills the table with dummy LUN information. This method works even if the target is offline. You can specify a range of LUN numbers only if a host is chosen from the list. If All Hosts is selected, you will not be able to specify a range but can discover LUNs. • Request discovery and click Show LUNs.
Adding Target Tape LUNs for encryption 12 Adding Target Tape LUNs for encryption You configure a Crypto LUN by adding the LUN to the CryptoTarget container and enabling the encryption property on the Crypto LUN. You must add LUNs manually. After you add the LUNs, you must specify the encryption settings. When configuring a LUN with multiple paths, the same LUN policies must be configured on all the LUN’s paths.
12 Configuring encrypted storage in a multi-path environment 8. Select the desired encryption mode. • If you change a LUN policy from Native Encryption or DF-Compatible Encryption to Clear Text, you disable encryption. • The LUNs of the target which are not enabled for encryption must still be added to the CryptoTarget container with the Clear Text encryption mode option. NOTE The Re-keying interval can only be changed for disk LUNs.
Master keys 12 9. Select target port B, click LUNs, then click Add. Select the LUNs to be encrypted and the encryption policies for the LUNs, making sure that the encryption policies match the policies specified in the other path. 10. Click Commit to make the LUN configuration changes effective in both paths simultaneously. The Management application does not automatically commit LUN configuration changes.
12 Alternate master key Alternate master key The alternate master key is used to decrypt data encryption keys that were not encrypted with the active master key. Restore the alternate master key for the following reasons: • To read an old tape that was created when the group used a different active master key. • To read a tape (or disk) from a different encryption group that uses a different active master key.
Saving the master key to a file 12 4. Select Backup Master Key as the Master Key Action. The Master Key Backup dialog box displays, but only if the master key has already been generated. FIGURE 144 Backup Destination (to file) dialog box 5. Select File as the Backup Destination. 6. Enter a file name, or browse to the desired location. 7. Enter the passphrase, which is required for restoring the master key. The passphrase can be between eight and 40 characters, and any character is allowed. 8.
12 Saving a master key to a key vault Saving a master key to a key vault Use the following procedure to save the master key to a key vault. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select an encryption group from the tree, and click Properties. 3. Select the Security tab. 4. Select Backup Master Key as the Master Key Action. The Backup Master Key for Encryption Group dialog box displays. FIGURE 145 Backup Destination (to key vault) dialog box 5.
Saving a master key to a smart card set 12 Saving a master key to a smart card set A card reader must be attached to the SAN Management application PC to complete this procedure. Recovery cards can only be written once to back up a single master key. Each master key backup operation requires a new set of previously unused smart cards. NOTE Windows operating systems do not require smart card drivers to be installed separately; the driver is bundled with the operating system.
12 Saving a master key to a smart card set FIGURE 146 Backup Destination (to smart cards) dialog box 5. Select A Recovery Set of Smart Cards as the Backup Destination. 6. Enter the recovery card set size. 7. Insert the first blank card and wait for the card serial number to appear. 8. Run the additional cards needed for the set through the reader. As you read each card, the card ID displays in the Card Serial# field. Be sure to wait for the ID to appear. 9.
Restoring a master key from a file 12 Restoring a master key from a file Use the following procedure to restore the master key from a file. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select an encryption group from the tree, and click Properties. 3. Select the Security tab. 4. Select Restore Master Key as the Master Key Action. The Restore Master Key for Encryption Group dialog box displays.
12 Restoring a master key from a key vault Restoring a master key from a key vault Use the following procedure to restore the master key from a key vault. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select an encryption group from the tree, and click Properties. 3. Select the Security tab. 4. Select Restore Master Key as the Master Key Action. The Restore Master Key for Encryption Group dialog box displays.
Restoring a master key from a smart card set 12 Restoring a master key from a smart card set A card reader must be attached to the SAN Management application PC to complete this procedure. Use the following procedure to restore the master key from a set of smart cards. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays. 2. Select an encryption group from the tree, and click Properties. 3. Select the Security tab. 4.
12 Creating a new master key 10. Insert the next card, and repeat step 8 and step 9. 11. Continue until all the cards in the set have been read. 12. Click OK. Creating a new master key Though it is generally not necessary to create a new master key, you may be required to create one due to circumstances such as the following: • The previous master key has been compromised. • Corporate policy might require a new master key every year for security purposes.
Zeroizing an encryption engine 12 Zeroizing an encryption engine Zeroizing is the process of erasing all data encryption keys and other sensitive encryption information in an encryption engine. You can zeroize an encryption engine manually to protect encryption keys. No data is lost because the data encryption keys for the encryption targets are stored in the key vault. Zeroizing has the following effects: • All copies of data encryption keys kept in the encryption switch or encryption blade are erased.
12 Zeroizing an encryption engine 3. Initialize the encryption engine. An automatic power cycle and reboot occurs on the encryption blade and encryption switch. 4. Enable the encryption engine using the Switch Encryption Properties dialog box: a. Select the encryption engine from the Encryption Center dialog box. b. Click the Properties button. The Switch Encryption Properties dialog box displays. FIGURE 151 Switch Encryption Properties dialog box 374 c.
Tracking Smart Cards 12 Tracking Smart Cards Smart Cards, which are credit card-sized cards that contain a CPU and persistent memory, are a secure way to back up and restore a master key. Using Smart Cards is optional. Master keys can also be backed up to a file or key vaults and are only used for encryption groups using RKM or HP SKM key vaults. Even if an encryption group is deleted, the smart cards are still displayed. You must manually delete them.
12 Encryption-related acronyms in log messages Encryption-related acronyms in log messages Fabric OS log messages related to encryption components and features may have acronyms embedded that require interpretation. Table 35 lists some of those acronyms.
Chapter 13 Zoning In this chapter • Zoning overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Zoning configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Traffic isolation zoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Zoning administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
13 Accessing zoning • Traffic Isolation zones (TI zones) Isolate inter-switch traffic to a specific, dedicated path through the fabric. See “Traffic isolation zoning” on page 397 for more information. Online zoning Online zoning allows you to do the following: • • • • • • View both defined and active zone information in the fabric. Create and modify zones and zone configurations in the software zone database. Activate a zone configuration in order to publish the zone information in the selected fabric.
Zoning configuration 13 Invalid zoning name If you enter an invalid zone or zone configuration name, an error or warning message displays depending on the type of fabric you are trying to zone: • For FC Fabrics, if an invalid name is entered for a zone or zone configuration, the application displays a warning message. If there is a naming violation according to the vendor, the Switch returns the error message for the exact information along with the zone configuration activation failure message.
13 Creating a new zone 9. Set zoning policies for FC fabrics, if necessary. For specific instructions, refer to “Enabling or disabling the default zone for fabrics” on page 385 and “Enabling or disabling safe zoning mode for fabrics” on page 386. 10. Click OK or Apply to save your changes. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas.
Viewing zone properties 13 Viewing zone properties 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select an FC fabric from the Zoning Scope list. This identifies the target entity for all subsequent zoning actions and displays the zoning database for the selected entity. 4. Right-click the zone you want to review in the Zones list and select Properties. The Zone Properties dialog box displays. 5.
13 Creating a new member in a zone by WWN 6. Select an option from the Type list. By default, the first time you launch the Zoning dialog box for a Zoning Scope, the Potential Members list displays valid members using the following rules: • If you select the World Wide Name type, the valid members display by the Attached Ports. • If you select the Domain/Port Index type, the valid members display by the ALL Product Ports (both occupied and unoccupied). This option is available for FC fabrics only.
Creating a new member in a zone by domain, port index 7. 13 Add the new member by port name by completing the following steps. a. Select the Existing End Device Node/Port Name option. b. Select a port name from the list. OR Add the new member by port WWN by completing the following steps. a. Select the End Device Node/Port WWN option. b. Enter a port WWN in the End Device Node/Port WWN field.
13 Creating a new member in a zone by alias 6. Select Domain, Port Index from the Member Type list. 7. Add the new member by port name by completing the following steps. a. Select the Existing Switch Port Name option. b. Select a name from the list. OR Create a new member by domain and port index by choosing one of the following options: • Select the Domain, Port Index (decimal) option and enter domain and port values in the fields.
Enabling or disabling the default zone for fabrics 7. 13 Add the new member by alias name by completing the following steps. a. Select the Existing Alias option. b. Select an alias from the list. OR Create a new alias by completing the following steps. a. Select the New Alias option. b. Enter a name in the New Alias field. c. Assign the alias by choosing one of the following options: • Select the WWN option and enter the WWN in the field.
13 Enabling or disabling safe zoning mode for fabrics 5. Click Zoning Policies. The Zoning Policies dialog box displays. NOTE The format and content of this dialog box vary slightly depending on Interop Mode, the target selected in the Zoning Scope list, and whether safe zoning mode is enabled. If safe zoning mode is enabled, the Default Zone button is disabled. If you want to enable the default zone, you need to disable the safe zoning mode. 6.
Creating a new zone alias 7. 13 Click OK to apply your changes and close the Zoning Policies dialog box. 8. Click OK or Apply on the Zoning dialog box to save your changes. Creating a new zone alias An alias is a logical group of port index numbers and WWNs. Specifying groups of ports or devices as an alias makes zone configuration easier, by enabling you to configure zones using an alias rather than inputting a long string of individual members.
13 Removing an object from a zone alias 5. Click Edit. The Edit Alias dialog box displays. 6. Add members to the alias by completing the following steps. 7. a. Select WWN or Domain, Port Index to choose how to display the objects in the Potential Members list. b. Show all discovered fabrics in the Potential Members list by right-clicking in the Potential Members list and selecting Expand All. c. Select one or more members that you want to add to the alias in the Potential Members list.
Exporting zone aliases 13 Exporting zone aliases Use this procedure to export a zone alias. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select Alias from the Type list. 4. Click Export. The Export Alias dialog box displays. 5. Browse to the location to which you want to export the zone alias data. 6. Enter a name for the export file in the File Name field. 7. Click Export Alias. 8.
13 Viewing zone configuration properties 5. Enter a name for the zone configuration. For zone name requirements and limitations, refer to “Zoning naming conventions” on page 378. 6. Press Enter. Depending on the characters included in the name you enter, a message may display informing you the name contains characters that are not accepted by some switch vendors, and asking whether you want to proceed. Click Yes to continue, or No to cancel the zone creation. 7. Add zones to the zone configuration.
Adding zones to zone configurations 13 Adding zones to zone configurations Use this procedure to add one or more zones to a zone configuration. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select an FC fabric from the Zoning Scope list. This identifies the target entity for all subsequent zoning actions and displays the zoning database for the selected entity. 4.
13 Activating a zone configuration There are several conditions that could cause the Activate button to be unavailable. They include the following: • If you do not have access privileges to activate zone configurations, the Activate button on the Zone DB tab will be unavailable. You will not be able to activate a zone configuration unless your access privileges are redefined. • The fabric is not manageable.
Deactivating a zone configuration 7. 13 Click OK to activate the zone configuration. A message box displays informing you that the zones and zone configurations you change will be saved in the zone database and asking whether you want to proceed. Click Yes to confirm the activation, or No to cancel the activation. When you click Yes, a busy window displays indicating the activation is in progress. A status field informs you whether the activation succeeded or failed.
13 Refreshing a zone database Refreshing a zone database Use this procedure to refresh a zone database. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select a zone database from the Zone DB list. 4. Select Refresh from the Zone DB Operation list. A message displays informing you that refresh will overwrite the selected database. Click Yes to continue. 5. Click OK.
Merging two zone databases 13 FIGURE 153 Compare/Merge Zone DBs dialog box 3. Select a database from the Reference Zone DB field. 4. Select a database from the Editable Zone DB field. The Reference Zone DB and Editable Zone DB areas display all available element types (zone configurations, zones, and aliases) for the two selected zone databases. In the Editable zone DB area, each element type and element display with an icon indicator (Table 36) to show the differences between the two databases. 5.
13 Saving a zone database to a switch 7. Select the Differences check box to display only the differences between the selected databases. 8. Select the Sync Scroll Enable check box to synchronize scrolling between the selected databases. 9. Merge zone configurations by completing the followings steps. a. Select one or more zone configuration nodes from the Reference Zone DB area. b. Select an element in the Editable Zone DB area. c. Click Merge. 10. Merge zones by completing the followings steps.
Traffic isolation zoning 13 4. Click Yes on the confirmation message. The selected zone database is saved to the fabric without enabling a specific zone configuration. 5. Click OK to save your work and close the Zoning dialog box. Traffic isolation zoning A Traffic Isolation zone (TI zone) is a special zone that isolates inter-switch traffic to a specific, dedicated path through the fabric. A TI zone contains a list of E_Ports, followed by a list of N_Ports.
13 Creating a traffic isolation zone 7. Add members to each zone. For specific instructions, refer to “Adding members to a traffic isolation zone” on page 399. NOTE You cannot add a traffic isolation zone to a zone configuration. 8. Click OK or Apply to save your changes. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas.
Adding members to a traffic isolation zone 13 Adding members to a traffic isolation zone NOTE Traffic isolation zones are only configurable on a Fabric OS device. Use this procedure to add a member to a zone when the member is listed in the Potential Members list of the Zone DB tab. Only ports can be added as members to a traffic isolation zone. You must add two or more N_ports as well as all E_ports on the path between the N_ports. NOTE You cannot add a device as a member to a traffic isolation zone.
13 Enabling a traffic isolation zone Enabling a traffic isolation zone NOTE Traffic isolation zones are configurable only on a Fabric OS device. Use this procedure to enable a traffic isolation zone. When a zone configuration in the same zone database is activated, the enabled TI zones are also activated at that time. Traffic isolation zones are enabled by default when you create them. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2.
Enabling failover on a traffic isolation zone 13 Enabling failover on a traffic isolation zone NOTE Traffic isolation zones are only configurable on a Fabric OS device. Use this procedure to enable failover on a traffic isolation zone. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select an FC fabric from the Zoning Scope list.
13 Zoning administration 4. Right-click the traffic isolation zone you want to disable failover on in the Zones list and clear the Configured Failover check box. 5. Click OK or Apply to save your changes. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas.
Comparing zone databases 13 FIGURE 154 Compare/Merge Zone DBs dialog box 3. Select a database from the Reference Zone DB field. 4. Select a database from the Editable Zone DB field. The Reference Zone DB and Editable Zone DB areas display all available element types (zone configurations, zones, and aliases) for the two selected zone databases. In the Editable zone DB area, each element type and element display with an icon indicator (Table 36) to show the differences between the two databases. 5.
13 Setting change limits on zoning activation 8. Select the Sync Scroll Enable check box to synchronize scrolling between the selected databases. 9. Click Previous or Next to navigate line-by-line in the Editable Zone DB area. 10. Click Close. To merge two zone databases, refer to “Merging two zone databases” on page 394.
Deleting a zone 13 3. Enter the maximum number of zone database changes that can be made for that fabric before a zone configuration is activated. To set a limit, enter a positive integer. To allow unlimited changes, enter 0. 4. Repeat step 2 and step 3 for each fabric on which you want to set limits. 5. To set a limit for new, undiscovered fabrics, enter a value in the Default Change Count for New Fabrics field. The default value is 0 (Unlimited). 6.
13 Deleting a zone alias Deleting a zone alias Use this procedure to delete a zone alias. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select Alias from the Type list. 4. Right-click the zone alias you want to delete and select Delete. 5. Click Yes on the confirmation message. To selected zone alias is deleted from the Alias list. 6. Click OK or Apply on the Zoning dialog box to save your changes.
Clearing the fabric zone database 13 Clearing the fabric zone database Use this procedure to clear a Fabric Zone database. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Select an FC fabric from the Zoning Scope list. This identifies the target entity for all subsequent zoning actions and displays the zoning databases for the selected entity. 3. Select the Fabric Zone DB from the Zone DB list. 4. Select Clear All from the Zone DB Operation list. 5.
13 Duplicating a zone alias Duplicating a zone alias Use this procedure to duplicate a zone alias. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select Alias from the Type list. 4. Right-click the zone alias you want to duplicate and select Duplicate. The duplicated zone alias displays in the Alias list (for example, _Copy). 5. Edit the name. To edit the name, refer to Renaming a zone alias. 6.
Finding a member in one or more zones 13 5. Type a new name for the zone configuration if desired. If not, proceed to Step 5. If you key in a new name, press Enter to save the name. Depending on the characters included in the name you enter, a message may display informing you the name contains characters that are not accepted by some switch vendors, and asking whether you want to proceed. Click Yes to continue, or No to cancel the renaming.
13 Finding zones in a zone configuration 4. Select the zone member in the Zones list that you want to find in the Potential Members list. Press SHIFT or CTRL and click each zone to select more than one zone. 5. Click Find < between the Potential Members list and the Zones list. - If the member is found, it is highlighted in the Potential Members list. - If there are no ports listed in the Potential Members list, a message displays informing you that additional action is required.
Listing zone members 13 5. Click Find < between the Zones list and the Zone Configs list. - If the zone is found, it is highlighted in the Zones list. If the zone is not found, a message displays informing you of this. Click OK to close the message box. Listing zone members Use this procedure to identify the zone in the active zone configuration of the fabric to which an individual port belongs and the WWN zone members in that zone.
13 Removing a zone from a zone configuration 6. Click OK or Apply to save your changes. A message displays informing you that any zones or zone configurations you have changed will be saved in the zone database, and warning you to make sure no other user is making changes to the same areas. Removing a zone from a zone configuration Use the following procedure to remove a zone from a zone configuration. Note that the zone is not deleted; it is only removed from the zone configuration. 1.
Renaming a zone configuration 13 6. Press Enter to save the new name. For FC Fabrics, if an invalid name is entered for a zone or zone configuration, the application displays a warning message. If there is a naming violation according to the vendor, the switch returns the error message for the exact information along with the zone configuration activation failure message. 7. Click OK or Apply to save your changes.
13 Replacing zone members Replacing zone members A zone member can be replaced in a specific, selected zone, or, if it is the member of more than one zone, it can be replaced in all the zones to which it belongs. 1. Select Configure > Zoning > Fabric. The Zoning dialog box displays. 2. Click the Zone DB tab if that tab is not automatically displayed. 3. Select an FC fabric from the Zoning Scope list.
Chapter 14 Troubleshooting In this chapter • FC troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • IP troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Fabric tracking troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Supportsave troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Zoning troubleshooting . . . . . . . . .
14 FC troubleshooting Tracing FC routes The Management application enables you to select a source port and a destination port and displays the detailed routing information from the source port or area on the local switch to the destination port or area on another switch. Trace route cannot be performed on the offline devices or virtual devices. NOTE Trace route is only supported on Fabric OS switches running Fabric OS 5.2 or later. To trace routes, complete the following steps. 1.
Troubleshooting device connectivity 14 • Reverse Route. This tab shows the path from the destination port to the source port. NOTE This reverse route may sometimes be different from the forward route. • FC Ping. This tab shows the minimum, maximum and average round trip times between the selected device port WWNs and the domain controller. It details whether the selected device port WWNs are zoned or not.
14 Troubleshooting device connectivity 3. Click OK. The following diagnostic tests are performed: • • • • • Device Status Switch port health status Zone configuration in the fabric Edge fabric - FC router physical connection status. Active ACL DCC policy check (Fabric OS only) The Device Connectivity Troubleshooting Results dialog box displays. If no problems are found, the diagnostic test is marked with a check mark.
IP troubleshooting 14 IP troubleshooting NOTE IP troubleshooting is only available for Fabric OS devices. You can perform the following operations using IP troubleshooting: • Ping. Use to confirm that the configured FCIP tunnels are working correctly. • Trace Route. Use to view the route information from a source port on the local device to a destination port on another device and determine where connectivity is broken. • Performance. Select to view FCIP tunnel performance between two devices.
14 IP troubleshooting TABLE 37 FCIP IP Ping Response Details Field or Component Description Maximum Round Trip Time The longest time, in milliseconds, of any response. If no response, the round trip times is 0. Average Round Trip Time The average time, in milliseconds, of all responses. If no response, the round trip times is 0. The bottom table (IP Ping Details) provides details for each ping attempt. TABLE 38 7.
Tracing IP routes 14 Tracing IP routes The Management application enables you to select an source and a target and displays the detailed routing information from the source port or area on the local switch to the destination port or area on another switch. Trace route cannot be performed on the offline devices or virtual devices. NOTE Trace route is only supported on Fabric OS devices running Fabric OS 5.2 or later. To trace routes, complete the following steps. 1.
14 Viewing FCIP tunnel performance 7. Click Close on the IP Traceroute Result dialog box. 8. Click Cancel on the IP Traceroute dialog box. Viewing FCIP tunnel performance NOTE IP Performance is only supported on the 4 Gbps Router, Extension Switch and Encryption Blade running Fabric OS 5.2 or later. NOTE If you run IP Performance over a link also being used for production traffic, it will impact the production traffic performance. To view FCIP tunnel performance, complete the following steps. 1.
Client browser troubleshooting 14 TABLE 40 7. Field/Component Description DELAY The average round trip time to send a packet of data and receive the acknowledgement. PMTU (Path Maximum Transmission Unit) The largest packet size that can be transmitted over the end-to- end path without fragmentation. This value is measured in bytes and includes the IP header and payload. IP Performance tries the configured Fabric OS Jumbo MTU value (anything over 15000, then 1500, then 1260.
14 Fabric tracking troubleshooting Fabric tracking troubleshooting The following section states a possible issue and the recommended solution for fabric tracking errors. TABLE 42 Fabric tracking issues Problem Resolution If a switch is replaced by another switch having the same IP address but a different node WWN while fabric tracking is on, the Management application does not update the Product List, Connectivity Map or switch properties with the new node WWN.
Zoning troubleshooting 14 Zoning troubleshooting The following section states some possible issues and recommended solutions for zoning errors. TABLE 45 Zoning issues Problem Resolution Cannot perform zoning on a new switch. You must use telnet (or the Product Type and Access tab in the Add Properties dialog box) to change the default password on the new switch before you can use the Management application to perform zoning.
14 426 Zoning troubleshooting DCFM Professional User Manual 53-1001355-01
Appendix A Supported Key Management Systems In this appendix • Key management systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • The NetApp Lifetime Key Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • The RSA Key Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • The HP Secure Key Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Thales Encryption Manager for Storage. .
A The NetApp Lifetime Key Manager The NetApp Lifetime Key Manager The NetApp Lifetime Key Manager (LKM) resides on an FIPS 140-2 Level 3-compliant network appliance. The encryption engine and LKM appliance communicate over a trusted link. A trusted link is a secure connection established between the Encryption switch or blade and the NetApp LKM appliance, using a shared secret called a link key. One link key per encryption switch is established with each LKM appliance.
Obtaining and importing the LKM certificate A Obtaining and importing the LKM certificate Certificates must be exchanged between LKM and the encryption switch to enable mutual authentication. You must obtain a certificate from LKM, and import it into the encryption group leader. The encryption group leader exports the certificate to other encryption group members. To obtain and import an LKM certificate, do the following. 1. Open an SSH connection to the NetApp LKM appliance and log in. host$ssh admin@10.
A Exporting the KAC certificate signing request Exporting the KAC certificate signing request If you are using the SAN Management program, the KAC certificate signing request (CSR) is exported to a location you specify when you create a new encryption group or add a switch to an encryption group. You can also export the KAC CSR from the Switch Properties view.
Importing the signed KAC certificate A Importing the signed KAC certificate The signed KAC certificate must be imported into the switch or blade that generated the CSR. If you are using the SAN Management program, do the following. 1. Select Configure > Encryption from the menu bar. The Encryption Center dialog box displays the status of all encryption-related hardware and functions at a glance. It is the single launching point for all encryption-related configuration. 2.
A Registering the certificates Registering the certificates The switch’s KAC certificate must be registered on the LKM appliance, and the LKM certificate must be registered on the switch. 1. From the external host, register the KAC certificate you exported from the group leader with the NetApp LKM appliance. host$echo lkmserver certificate set 10.32.244.71 \ ‘cat kac_lkm_cert.pem‘ | ssh -l admin 10.33.54.231 Pseudo-terminal will not be allocated because stdinis not a terminal. admin@10.33.54.
Registering the certificates A NODE LIST Total Number of defined nodes: 2 Group Leader Node Name: 10:00:00:05:1e:41:7e Encryption Group state: CLUSTER_STATE_CONVERGED Node Name IP address Role 10:00:00:05:1e:41:9a:7e 10.32.244.71 GroupLeader 10:00:00:05:1e:39:14:00 10.32.244.60 MemberNode (current node) 5. Exchange certificates between the LKM key vault and the member node, starting with exporting the KAC certificate from the member node to an SCP-capable external host.
A LKM appliance cluster support LKM appliance cluster support LKM appliances can be clustered together to provide high availability (HA) failover/failback capabilities. When LKM appliances are clustered, both LKMs in the cluster must be registered and configured with the link keys before starting any crypto operations. If two LKM key vaults are configured, they must be clustered.
Establishing the trusted link A 2. To add the encryption group leader to an LKM appliance third party key sharing group, enter lkmserver add --type third-party --key-sharing-group "/" followed by the group leader IP address. lkm-1>lkmserver add --type third-party --key-sharing-group \ "/" 10.32.244.71 NOTICE: LKM Server third-party 10.32.244.71 added. Cleartext connections not allowed. 3. From the external host, enter echo lkmserver set ‘cat kac_cert_lkm.
A The RSA Key Manager The RSA Key Manager Communication with the RSA Key Manager (RKM) is secured by wrapping DEKs in a master key. The encryption engine must generate its own master key, send DEKs to RKM encrypted in the master key, and decrypt DEKs received from RKM using the same master key. The master key may optionally be stored as a key record in the RKM key vault as a backup, but RKM does not assume responsibility for the master key.
Submitting the CSR to a certificate authority A The following example exports a CSR to USB storage. SecurityAdmin:switch>cryptocfg --export -usb KACcsr kac_rkm_cert.pem Operation succeeded. If you export the CSR to a USB storage device, you will need to remove the storage device from the switch, and then attach it to a computer that has access to a third party certificate authority (CA). If you are using the SAN Management application, this can be your SAN Management application workstation.
A Uploading the KAC and CA certificates onto the RKM appliance 7. Click Save. If you are using the CLI, you can import the signed KAC certificate to the switch from a file on a LAN attached host, or you can write it to a USB storage device, attach the USB storage device to the switch or blade, and import the certificate from that device. The following describes both options. 1. Log into the switch to which you wish to import the certificate as Admin or SecurityAdmin. 2.
Uploading the KAC and CA certificates onto the RKM appliance A 8. Select the Key Classes tab. For each of the following key classes, perform steps a. through h. to create the class. The key classes must be created only once, regardless of the number of nodes in your encryption group and regardless of the number of encryption groups that will be sharing this RKM. kcn.1998-01.com.brocade:DEK_AES_256_XTS kcn.1998-01.com.brocade:DEK_AES_256_CCM kcn.1998-01.com.brocade:DEK_AES_256_GCM kcn.1998-01.com.
A RKM Appliance cluster support 10. Register the RKM key vault on the group leader using the CA certificate for the CA that signed the RKM key vault certificate. The path to the file was entered in the SSLCAcertificateFile field. The group leader automatically shares this information with other group members. SecurityAdmin:switch>cryptocfg --import -scp SecurityAdmin:switch>cryptocfg --reg -keyvault primary 11.
Obtaining a signed certificate from the HP SKM appliance software A Obtaining a signed certificate from the HP SKM appliance software The following steps describe how to get a signed certificate from the Hewlett Packard Secure Key Manager (HP SKM) appliance. You will need this information when you create a new encryption group with the HP SKM key vault, and you must obtain a signed certificate for each switch. 1. Select Tools > Internet Options on your Internet browser.
A Importing a signed certificate Importing a signed certificate After a signed certificate is obtained, it must be imported and registered. 1. Select a switch from the Encryption Targets dialog box, and click the Properties tab. FIGURE 156 Switch Properties dialog box 2. Click the Import button. The Import Signed Certificate dialog box displays. FIGURE 157 Import Signed Certificate dialog box 3. Browse to the location of the stored, signed certificate, and click OK.
Exporting the KAC certificate request A Exporting the KAC certificate request A KAC certificate request must be exported for each encryption node to an SCP-capable host. 1. Log into the group leader as Admin or SecurityAdmin. 2. Set the SKM key vault type by entering the cryptocfg --set -keyvault command with the SKM option. Successful execution sets the key vault type for the entire encryption group. SecurityAdmin:switch>cryptocfg --set -keyvault SKM Set key vault status: Operation Succeeded. 3.
A Registering the Brocade user name and password on the switch Registering the Brocade user name and password on the switch You must register the user name and password that was added to the SKM appliance in “Setting up a Brocade user” on the switch. 1. Register a user password and user name by issuing the following command at the switch. SecurityAdmin:switch>cryptocfg --reg -KAClogin 2. When prompted, enter the user name specified in step 5 of “Setting up a Brocade user”. 3.
Adding the local CA to the trusted CAs list A Adding the local CA to the trusted CAs list You must now update the Trusted CAs list with the local CA name you created in “Setting up the local certificate authority”. 1. Select the Security tab on the SKM key manager. 2. Select Trusted CA Lists under Certificates and CAs. The Trusted CA Lists page is displayed. 3. Select Default under Profile Name. 4. Click Properties. A properties dialog box is displayed. 5. Click Edit.
A Downloading the local CA certificate file 4. Select Create Certificate Request. Successful completion is indicated when the new entry for the server certificate appears on the Certificate List with a Certificate Status of Request Pending. 5. Select the pending server certificate from the list. 6. Select Properties. A Certificate Request Information dialog box is displayed. 7. Copy the key contents, beginning with ---BEGIN CERTIFICATE REQUEST--- and ending with ---END CERTIFICATE REQUEST---.
Creating an SKM Key vault High Availability cluster A 6. Select the Device tab on the SKM key manager. 7. Select KMS Server under Device Configuration. The Key Management Services Configuration page is displayed. 8. Select Edit under KMS Server Settings. 9. Click the check boxes for the following: - Use SSL Allow Key and Policy Configuration Operations Allow Key Export 10. Type in the server certificate name in the Server Certificate field. 11. Select Save to save these settings. 12.
A Copying the local CA certificate Copying the local CA certificate 1. Select the Security tab. 2. Select Local CAs under Certificates & CAs. 3. Select the name of the local CA from the Local Certificate Authority list. The CA Certificate Information is displayed. 4. Copy the key contents, beginning with ---BEGIN CERTIFICATE REQUEST--- and ending with ---END CERTIFICATE REQUEST---. Be careful not to include any extra characters.
Signing the KAC certificate A 14. Select Join. 15. You are prompted to confirm the operation. Select Confirm. The Cluster Configuration page displays, showing the cluster members. Repeat the procedure to add more members, as needed. Delete the temporary cluster key file when finished. You should also verify that the same server certificate configured for all cluster members by selecting the Device tab, and select KMS Server Settings.
A Importing a signed certificate (SAN Management program) Importing a signed certificate (SAN Management program) The public key certificate from the switch is used to authenticate connections to the key vault. 1. Select a switch from the Encryption Targets dialog box, and click the Properties tab. FIGURE 158 Switch Properties dialog box 2. Click the Import button. The Import Signed Certificate dialog box displays. FIGURE 159 Import Signed Certificate dialog box 3.
Thales Encryption Manager for Storage A Thales Encryption Manager for Storage Communication with the Thales Encryption Manager for Storage (TEMS) is referred to as NCKA in operational descriptions in this appendix. NCKA is secured by wrapping DEKs in a master key. The encryption engine must generate its own master key, send DEKs to NCKA encrypted in the master key, and decrypt DEKs received from NCKA using the same master key.
A Signing the CSR Signing the CSR 1. Export the certificate signing request (CSR) certificate from the switch. Cryptocfg -export -scp -KACsr NOTE On some host systems this request does not work. If that is true for your system, copy the .csr file above manually to the workstation you are using to interface with the key vault. 2. Under the certificate column in the user table, click on the pen icon for the newly created user.
Registering the certificates A Registering the certificates Examples below are for the two Thales key vaults installed. Commands assume the exported signed certificates were saved as brcduser1@ncka-1 and brcduser1@ncka-2 for the primary and secondary key vaults and the data port IP addresses are 10.32.44.112 and 10.32.44.114. 1. Set the key vault type. cryptocfg --set -keyvault NCKA 2. Register the signed KAC certificates. cryptocfg --reg -KACcert brcduser1@ncka-1.
A 454 Registering the certificates DCFM Professional User Manual 53-1001355-01
Appendix B Sybase and Derby Database Fields In this appendix • Capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Client_view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Collector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . • Config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
B Database tables and fields Database tables and fields Capability TABLE 46 Field Definition Format Size NAME * Name of the capability. varchar 256 DESCRIPTION Optional detailed description about the capability. varchar 512 Size TABLE 47 CARD_CAPABILITY Field Definition Format CARD_ID * DB ID of the card. int CAPABILITY_ * Name of the capability detected on the card. varchar ENABLED 1 = the capability is enabled on the card.
B Client_view TABLE 49 CARD Field Definition ID * Format Size int CORE_SWITCH_ID * Core switch DB ID. int SLOT_NUMBER The number of the physical slot in the chassis where the blade is plugged in. For fixed blades, SlotNumber is zero. smallint TYPE ID of the blade to identify the type. smallint EQUIPEMNT_TYPE The type of the blade. It is either SW BLADE or CP BLADE. varchar 16 STATE State of the blade, such as ENABLED or DISABLED.
B Client_view TABLE 51 USER_ (Continued) Field Definition Format Size PASSWORD User password. varchar 128 EMAIL User e-mail ID. varchar 1024 NOTIFICATION_ENABLED Flag for e-mail notification. smallint TABLE 52 USER_PREFERENCE Field Definition Format Size USER_NAME * User name whose preferences are saved. It corresponds to user_name in USER_table. varchar 128 CATEGORY * The name for a set of related preferences.
B Client_view TABLE 55 CLIENT_VIEW_MEMBER Field Definition Format CLIENT_VIEW_ID * Foreign key to CLIENT_VIEW table. int FABRIC_ID * Foreign key to FABRIC table. int Definition Format TABLE 56 Size FABRIC Field ID * Size int SAN_ID Foreign key to SAN table; usually 1 since there is only one SAN. int SEED_SWITCH_WWN WWN of the virtual switch used as seed switch to discover the fabric. char 23 NAME User-assigned fabric name.
B Collector Collector TABLE 57 FABRIC_CHECKSUM Field Definition Format FABRIC_ID * Fabric ID, foreign key to the FABRIC table. int CHECKSUM_KEY * Type of checksum, e.g. device data or zone data. varchar 32 CHECKSUM Actual checksum value. varchar 16 Size TABLE 58 FABRIC_COLLECTION Field Definition Format FABRIC_ID * Fabric ID, foreign key to the FABRIC table. int COLLECTOR_NAME * Name of the collector, e.g.
B Collector TABLE 60 FABRIC (Continued) Field Definition Format AD_ENVIRONMENT 1 = there are user-defined ADs in this fabric. smallint MANAGED 1 = it is an actively "monitored" fabric; otherwise, it is an "unmonitored" fabric. smallint MANAGEMENT_STATE Bit map to indicate various management indications for the fabric. smallint TRACK_CHANGES 1 = changes (member switches, ISL and devices) in the fabric are tracked.
B Collector TABLE 63 Field Definition Format VIRTUAL_SWITCH_ID * DB ID of virtual switch. int CHECKSUM_KEY * Checksum key. varchar 32 CHECKSUM Checksum value. varchar 16 Size TABLE 64 Size CORE_SWITCH_CHECKSUM Field Definition Format CORE_SWITCH_ID * DB ID. int CHECKSUM_KEY * Checksum type. varchar 32 CHECKSUM Checksum value. varchar 16 Size TABLE 65 462 VIRTUAL_SWITCH_CHECKSUM CORE_SWITCH_COLLECTION Field Definition Format CORE_SWITCH_ID * Core switch ID.
B Config TABLE 66 SECURITY_POLICY Field Definition Format Size VIRTUAL_SWITCH_ID * DB ID of virtual_switch. int POLICY_NUMBER* IPSec Policy Number. The number can range from 1 to 32. smallint POLICY_TYPE* Type of the Policy. The possible values are IKE or IPSec smallint ENCRYPTION_ALGORITHM Encryption Algorithm for the policy.The following are the possible Encryption: NONE,DES,3DES,AES-128,AES-256,AES-CM-128 or AES-CM-256.
B Config TABLE 68 FIRMWARE_FILE_DETAIL (Continued) Field Definition Format RELEASE_DATE Release date of the firmware file. timestamp IMPORTED_DATE Imported date of the file to the Management application. timestamp FIRMWARE_FILE_SIZE Firmware file size. int FIRMWARE_LOCATION Firmware file location in the Management application repository. varchar 1024 RELEASE_NOTES_ LOCATION Release notes file location in the Management application repository.
B Connected end devices TABLE 72 SWITCH_CONFIG Field Definition Format NAME Name of the switch configurations uploaded from the switch either on demand or through scheduler. int ID* varchar Size 64 SWITCH_ID ID of the switch from which the configuration has been uploaded. int BACKUP_DATE_TIME The date/time stamp at which the configuration has been uploaded. timestamp CONFIG_DATA The actual switch configuration data.
B Device Device TABLE 76 DEVICE_PORT Field Definition Format ID* int NODE_ID DB ID of the device node to which this port belongs. int DOMAIN_ID Domain ID of the switch to which this device port is attached. int WWN Device port WWN. char 23 SWITCH_PORT_WWN WWN of the switch port to which this device port is attached. char 23 NUMBER Switch port number to which this device is attached. smallint PORT_ID Device port ID. varchar 6 TYPE Device port type, such as N or NL.
B Device TABLE 77 FICON_DEVICE_PORT (Continued) Field Definition Format Size TAG FICON device property, e.g., 809a or 809b. varchar 16 FLAG FICON device property, e.g., 0x10 (hex). varchar 8 PARAMS FICON device property string, e.g., Valid channel port. varchar 16 Format Size TABLE 78 DEVICE_NODE Field Definition ID* int FABRIC_ID Fabric DB ID to which this device node belongs. int WWN Device node WWN. char 23 TYPE Initiator or target or both or unknown.
B Device TABLE 80 DEVICE_ENCLOSURE Field Definition Format ID* int FABRIC_ID ID of the fabric to which the device enclosure belongs. int NAME Name of the Device enclosure. varchar 256 TYPE Type of Device enclosure - Storage Array/Server. varchar 32 ICON Type of Icon. int OS Operating System. varchar 256 APPLICATIONS Application which created device enclosure. varchar 256 DEPARTMENT Department using this device enclosure. varchar 256 CONTACT Contact person details.
B Device TABLE 81 FABRIC (Continued) Field Definition Format SECURE 1 = it is secured fabric. smallint AD_ENVIRONMENT 1 = there are user-defined ADs in this fabric. smallint MANAGED 1 = it is an actively "monitored" fabric; otherwise, it is an "unmonitored" fabric. smallint MANAGEMENT_STATE Bit map to indicate various management indications for the fabric. smallint TRACK_CHANGES 1 = changes (member switches, ISL and devices) in the fabric are tracked.
B Device TABLE 82 Source MISSING TIME DEVICE_PORT.MISSING_TIME, NPV PHYSICAL DEVICE_PORT.NPV_PHYSICAL TYPE NUMBER FICON_DEVICE_PORT.TYPE_NUMBER MODEL NUMBER FICON_DEVICE_PORT.MODEL_NUMBER MANUFACTURER FICON_DEVICE_PORT.MANUFACTURER MANUFACTURER PLANT FICON_DEVICE_PORT.MANUFACTURER_PLANT SEQUENCE NUMBER FICON_DEVICE_PORT.SEQUENCE_NUMBER TAG FICON_DEVICE_PORT.TAG FLAG FICON_DEVICE_PORT.FLAG PARAMS FICON_DEVICE_PORT.PARAMS NAME USER_DEFINED_DEVICE_DETAIL.
Device TABLE 83 DEVICE_INFO (Continued) Name Source DEVICE PORT TYPE DEVICE_PORT.TYPE DEVICE PORT SYMBOLICE NAME DEVICE_PORT.SYMBOLIC_NAME FC4_TYPE DEVICE_PORT.FC4_TYPE, IP_PORT DEVICE_PORT.IP_PORT HARDWARE_ADDRESS DEVICE_PORT.HARDWARE_ADDRESS DEVICE PORT TRUSTED DEVICE_PORT.TRUSTED DEVICE PORT MISSING DEVICE_PORT.MISSING COS DEVICE_PORT.COS NPV_PHYSICAL DEVICE_PORT.NPV_PHYSICAL SWITCH PORT ID SWITCH_PORT.ID SWITCH PORT WWN SWITCH_PORT.WWN SWITCH PORT NAME SWITCH_PORT.
B Device TABLE 83 Source VIRTUAL SWITCH ID SWITCH_INFO.ID VIRTUAL SWITCH NAME SWITCH_INFO.NAME OPERATIONAL STATUS SWITCH_INFO.OPERATIONAL_STATUS SWITCH_MODE SWITCH_INFO.SWITCH_MODE VIRTUAL SWITCH WWN SWITCH_INFO.WWN VIRTUAL SWITCH DOMAIN ID SWITCH_INFO.DOMAIN_ID VIRTUAL_FABRIC_ID SWITCH_INFO.VIRTUAL_FABRIC_ID BASE_SWITCH SWITCH_INFO.BASE_SWITCH VIRTUAL SWITCH STATE SWITCH_INFO.STATE VIRTUAL SWITCH STATUS SWITCH_INFO.STATUS FABRIC ID SWITCH_INFO.
B EE- Monitor TABLE 85 DEVICE_NODE_INFO (Continued) Name Source CAPABILITY DEVICE_NODE.CAPABILITY_ TRUSTED DEVICE_NODE.TRUSTED CREATION TIME DEVICE_NODE.CREATION_TIME MISSING DEVICE_NODE.MISSING MISSING TIME DEVICE_NODE.MISSING_TIME, PROXY DEVICE DEVICE_NODE.PROXY_DEVICE AG DEVICE_NODE.AG, NAME USER_DEFINED_DEVICE_DETAIL.NAME USER DEFINED TYPE USER_DEFINED_DEVICE_DETAIL.TYPE IP ADDRESS USER_DEFINED_DEVICE_DETAIL.IP_ADDRESS CONTACT USER_DEFINED_DEVICE_DETAIL.
B EE- Monitor TABLE 87 EE_MONITOR_STATS_30MIN Field Definition Format ID* int EE_MONITOR_ID int CREATION_TIME timestamp ACTIVE_STATE smallint TX double precision RX double precision CRCERRORS double TABLE 88 EE_MONITOR_STATS_2HOUR Field Definition Format ID* int EE_MONITOR_ID int CREATION_TIME timestamp ACTIVE_STATE smallint TX double precision RX double precision CRCERRORS double TABLE 89 Definition Format ID* Size int MONITOR_ID The Number (Index) given by th
B Event/FM TABLE 90 EE_MONITOR_STATS_1DAY (Continued) Field Definition Format CREATION_TIME timestamp ACTIVE_STATE smallint TX double precision RX double precision CRCERRORS double Size Event/FM TABLE 91 RECIPIENT_TYPE Field Definition ID* Size int TYPE TABLE 92 Format Type of the recipient (Syslog or SNMP). varchar 20 Format Size SOURCE_OBJECT_TYPE Field Definition ID* int TYPE_NAME Type of the object to which the event applies, such as Fabric, Switch or Port.
B Event/FM TABLE 95 EVENT_SUB_TYPE Field Definition Format ID* int EVENT_TYPE_ID Unique Event Sub type ID int DESCRIPTION Description of Event Sub Type varchar 255 Format Size TABLE 96 SNMP_CREDENTIALS Field Definition ID* 476 Size int VIRTUAL_SWITCH_ID Virtual switch ID for which this instance of the SNMP credentials apply. int RECIPIENT_ID Refers to recipient in the MESSAGE_RECIPIENT table.
B Event/FM TABLE 96 SNMP_CREDENTIALS (Continued) Field Definition Format Size AUTH_PASSWORD The localized secret key used by the authentication protocol for authenticating messages. This is applicable if the agent is configured to operate in SNMPv3. varchar 64 PRIV_PROTOCOL An indication of whether messages sent or received on behalf of this user can be encrypted and if so, which privacy protocol to use.
B Event/FM TABLE 98 EVENT Field Definition Format ID* 478 Size int SWITCH_ID ID of the switch. int PARENT_ID ID of the Parent. int 255 SOURCE_NAME Name of the source from which the event originated. varchar 32 SOURCE_ADDR IP Address of the source from which the event originated. varchar 50 EVENT_SOURCE Source from which the event is generated. varchar 32 SINK_SOURCE Sink Source of the event (Syslog/SNMP Trap/errlog/Application).
B Event/FM TABLE 98 EVENT (Continued) Field Definition Format Size EVENT_CATEGORY Category of the event varchar 64 DISCOVERY_TYPE Discovery type of the product varchar 64 MANAGEMENT_LINK Management link status varchar 255 OPERATIONAL_STATUS Operational Status of the switch from which the event is triggered varchar 255 NODE_WWN WWN of the node from which the event is triggered varchar 23 PORT_WWN WWN of the port from which the event is triggered varchar 23 NODE_NAME Node Name
B Event/FM TABLE 100 EVENT_NOTIFICATION (Continued) Field Definition Format Size USER_NAME User name for authentication. varchar 256 PASSWORD Password for authentication. varchar 256 NOTIFICATION_INTERVAL Time interval between successive event notifications. int NOTIFICATION_UNIT Time interval Unit: 0 = Seconds 1 = Minutes 2 = Hours smallint TEST_OPTION Time interval Unit: 0 = Send test to configured e-mail address. 1 = Send test to all enabled users.
B Fabric TABLE 101 EVENT_RULE (Continued) Field Definition Format LAST_MODIFIED_TIME Rules last edited time. timestamp SELECTED_TIME_UNIT Timestamp unit of the selected rule: 0 = second 1 = Minutes 2 = Hours smallint TABLE 102 Size EVENT_RULE_ACTION Field Definition ID* Format Size int RULE_ID The rule ID present in the Event_Rule Table.
B Fabric TABLE 104 FABRIC Field Definition Format ID* int SAN_ID Foreign key to SAN table; usually 1 since there is only one SAN. int SEED_SWITCH_WWN WWN of the virtual switch used as seed switch to discover the fabric. char 23 NAME User-assigned fabric name. varchar 256 CONTACT User-assigned "contact" for the fabric. varchar 256 LOCATION User-assigned "location" for the fabric. varchar 256 DESCRIPTION User-assigned fabric description.
B Fabric TABLE 105 FABRIC_INFO (Continued) Name Source MANAGEMENT_STATE FABRIC.MANAGEMENT_STATE LAST_FABRIC_CHANGED FABRIC.LAST_FABRIC_CHANGED SECURE FABRIC.SECURE AD_ENVIRONMENT FABRIC.AD_ENVIRONMENT MANAGED FABRIC.MANAGED CONTACT FABRIC.CONTACT LOCATION FABRIC.LOCATION DESCRIPTION FABRIC.DESCRIPTION CREATION_TIME FABRIC.CREATION_TIME LAST_SCAN_TIME FABRIC.LAST_SCAN_TIME LAST_UPDATE_TIME FABRIC.LAST_UPDATE_TIME TRACK_CHANGES FABRIC.TRACK_CHANGES TYPE FABRIC.
B FC Port Stats FC Port Stats TABLE 107 FC_PORT_STATS Field Definition ID* Size int SWITCH_ID References the ID in CORE_SWITCH table. int PORT_ID References the ID in SWITCH_PORT table. int TX Transmission (TX) value in bytes. double RX Receive (RX) value in bytes. double TX_UTILIZATION Transmit utilization value in percentage. double RX_UTILIZATION Receive utilization value in percentage. double‘ CREATION_TIME The polling time.
B FC Port Stats TABLE 108 FC_PORT_STATS_30MIN (Continued) Field Definition Format SIGNALLOSSES double SEQUENCEERRORS double INVALIDTRANSMISSIONS double CRCERRORS double DATA_GAPS_IN5MIN smallint TABLE 109 FC_PORT_STATS_2HOUR Field Definition Format ID* int SWITCH_ID int PORT_ID int TX double RX double TX_UTILIZATION double RX_UTILIZATION double‘ CREATION_TIME timestamp ACTIVE_STATE smallint LINKFAILURES double TXLINKRESETS double RXLINKRESETS double SYNCLOSSES
B FC Port Stats TABLE 110 FC_PORT_STATS_1DAY (Continued) Field 486 Definition Format RX_UTILIZATION double‘ CREATION_TIME timestamp ACTIVE_STATE smallint LINKFAILURES double TXLINKRESETS double RXLINKRESETS double SYNCLOSSES double SIGNALLOSSES double SEQUENCEERRORS double INVALIDTRANSMISSIONS double CRCERRORS double DATA_GAPS_IN5MIN smallint DATA_GAPS_IN30MIN smallint DATA_GAPS_IN2HOUR smallint Size DCFM Professional User Manual 53-1001355-01
B FCIP FCIP TABLE 111 FCIP_TUNNEL Field Definition ID* Format Size int ETHERNET_PORT_ID GigE Port ID on which the tunnel is created. int TUNNEL_ID Tunnel ID for that GigE Port. smallint VLAN_TAG VLAN Tag on the tunnel (if present). int SOURCE_IP Source IP on which the tunnel is created. char 64 DEST_IP Destination IP on the other end of tunnel. char 64 LOCAL_WWN Local port WWN for the tunnel. char 23 REMOTE_WWN_RESTRICT Remote Port WWN for the tunnel.
B FCIP TABLE 112 FCIP_TUNNEL_INFO (Continued) Name Source WAN_TOV_ENABLED FCIP_TUNNEL.WAN_TOV_ENABLED TUNNEL_STATUS FCIP_TUNNEL.TUNNEL_STATUS COMPRESSION_ENABLED FCIP_TUNNEL_DETAILS.COMPRESSION_ENABLED TURBO_WRITE_ENALBED FCIP_TUNNEL_DETAILS.TURBO_WRITE_ENABLED TAPE_ACCELERATION_ENABLED FCIP_TUNNEL_DETAILS.TAPE_ACCELERATION_ENABLED IKE_POLICY_NUM FCIP_TUNNEL_DETAILS.IKE_POLICY_NUM IPSEC_POLICY_NUM FCIP_TUNNEL_DETAILS.IPSEC_POLICY_NUM PRESHARED_KEY FCIP_TUNNEL_DETAILS.
B FCIP TABLE 112 FCIP_TUNNEL_INFO (Continued) Name Source REMOTE PORT WWN FCIP_PORT_TUNNEL_MAP.TUNNEL_ID = FCIP_TUNNEL.ID and FCIP_PORT_TUNNEL_MAP.SWITCHPORT_ID = PORT.ID) REMOTE_PORT_WWN REMOTE NODE WWN FCIP_PORT_TUNNEL_MAP.TUNNEL_ID = FCIP_TUNNEL.ID and FCIP_PORT_TUNNEL_MAP.SWITCHPORT_ID = PORT.ID) REMOTE_NODE_WWN TABLE 113 FCIP_PORT_TUNNEL_MAP Field Definition Format SWITCHPORT_ID* Switch Port ID. int TUNNEL_ID* FCIP Tunnel ID.
B FCIP Tunnel Stats TABLE 114 FCIP_TUNNEL_DETAILS (Continued) Field Definition Format FICON_TAPE_WRITE_ EMULATION_ENABLED Whether this is enabled on that tunnel. smallint FICON_TAPE_READ_ EMULATION_ENABLED Whether this is enabled on that tunnel. smallint FICON_DEBUG__FLAGS FICON_DEBUG_FLAGS for that particular tunnel. double Size FCIP Tunnel Stats TABLE 115 FCIP_TUNNEL_STATS Field Definition ID* Size int TUNNEL_DBID References the ID in FCIP_TUNNEL table.
B FCIP Tunnel Stats TABLE 116 FCIP_TUNNEL_STATS_30MIN (Continued) Field Definition Format DROPPED PACKETS double precision COMPRESSION double precision LATENCY double precision LINK_RETRANSMITS double precision ACTIVE_STATE smallint TABLE 117 FCIP_TUNNEL_STATS_2HOUR Field Definition Format ID* int TUNNEL_DBID int SWITCH ID int CREATION TIME timestamp TX double precision RX double precision TX_UTILIZATION double precision RX_UTILIZATION double precision DROPPED PACKETS
B GigE Port Stats TABLE 118 FCIP_TUNNEL_STATS_1DAY (Continued) Field Definition Format LINK_RETRANSMITS double precision ACTIVE_STATE smallint TABLE 119 Size FCIP_TUNNEL Field Definition ID* Format Size int ETHERNET_PORT_ID GigE Port ID on which the tunnel is created. int TUNNEL_ID Tunnel ID for that GigE Port. smallint VLAN_TAG VLAN Tag on the tunnel (if present). int SOURCE_IP Source IP on which the tunnel is created.
B GigE Port Stats TABLE 120 GIGE_PORT_STATS (Continued) Field Definition Format DROPPED PACKETS Number of dropped packets. double precision COMPRESSION The compression value. double precision LATENCY The latency value. double precision BANDWIDTH The bandwidth value.
B ISL TABLE 123 GIGE_PORT_STATS_1DAY Field Definition Format ID* int SWITCH ID int PORT_ID int CREATION TIME timestamp TX double precision RX double precision TX_UTILIZATION double precision RX_UTILIZATION double precision DROPPED PACKETS double precision COMPRESSION double precision LATENCY double precision BANDWIDTH double precision Size ISL TABLE 124 494 ISL_INFO Name Source ID ISL.ID FABRIC_ID ISL.FABRIC_ID COST ISL.COST TYPE ISL.TYPE SOURCE_DOAMIN_ID ISL.
B ISL TABLE 125 ISL_TRUNK_INFO Name Source ID ISL_TRUNK_GROUP.ID COST ISL_INFO.COST TYPE ISL_INFO.TYPE SOURCE PORT NUMBER ISL_INFO.SOURCE_PORT_NUMBER SOURCE SWITCH ID ISL_INFO.SOURCE_SWITCH_ID SOURCE SWITCH IP ADDRESS SOURCE_CORE_SWITCH.IP_ADDRESS SOURCE SWITCH WWN SOURCE_VIRTUAL_SWITCH.WWN MASTER PORT ISL_INFO.SOURCE_DOMAIN_ID SOURCE SWITCH NAME ISL_INFO.SOURCE_SWITCH_NAME SOURCE SWITCH PORT ID ISL_INFO.SOURCE_SWITCH_PORT_ID DEST PORT NUMBER ISL_INFO.
B ISL TABLE 127 FABRIC Field Definition Format ID* int SAN_ID Foreign key to SAN table; usually 1 since there is only one SAN. int SEED_SWITCH_WWN WWN of the virtual switch used as seed switch to discover the fabric. char 23 NAME User-assigned fabric name. varchar 256 CONTACT User-assigned "contact" for the fabric. varchar 256 LOCATION User-assigned "location" for the fabric. varchar 256 DESCRIPTION User-assigned fabric description.
B License TABLE 129 ISL_TRUNK_GROUP Field Definition ID* Format Size int VIRTUAL_SWITCH_ID Virtual switch DB ID. int MASTER_USER_PORT Port number of master port. smallint License TABLE 130 LICENSE_FEATURE_MAP Field Definition Format LICENSE_ID* Foreign Key (SWITCH_LICENSE.ID) and is part of the primary key. integer FEATURE_ID* Foreign Key (LICENSED_FEATURE.ID) and is part of the primary.
B Meta SAN Meta SAN TABLE 134 LSAN_DEVICE Field Definition Format ID* int BB_FABRIC_ID Backbone fabric DB ID. int FCR_FABRIC_ID FID assigned to edge fabric. int DEVICE_PORT_WWN Device port WWN of physical device. char 23 PHYSICAL_PID PID of physical device.
B Meta SAN TABLE 137 FABRIC (Continued) Field Definition Format TYPE Type of fabric: 0 = legacy fabric 1 = base fabric 2 = logical fabric smallint SECURE 1 = it is a secured fabric. smallint AD_ENVIRONMENT 1 = there are user-defined ADs in this fabric. smallint MANAGED 1 = it is an actively "monitored" fabric; otherwise, it is an "unmonitored" fabric. smallint MANAGEMENT_STATE Bit map to indicate various management indications for the fabric.
B Network TABLE 139 IFL_INFO Name Source ID IFL.ID EDGE_FABRIC_ID IFL.EDGE_FABRIC_ID FCR SWITCH ID FCR_PORT.VIRTUAL_SWITCH_ID EDGE_PORT_WWN IFL.EDGE_PORT_WWN BB_FABRIC_ID IFL.BB_FABRIC_ID BB_PORT_WWN IFL.BB_PORT_WWN BB_RA_TOV IFL.BB_RA_TOV BB_ED_TOV IFL.BB_ED_TOV BB_PID_FORMAT IFL.BB_PID_FORMAT EDGE SWITCH ID SWITCH_PORT.VIRTUAL_SWITCH_ID EDGE PORT ID SWITCH_PORT.ID EDGE PORT NUMBER SWITCH_PORT.USER_PORT_NUMBER EDGE PORT TYPE SWITCH_PORT.
B Others TABLE 141 IP_ROUTE (Continued) Field Definition Format Size FLAG Flag. int CHECKSUM Check Sum. varchar 64 Others TABLE 142 SYSTEM_PROPERTY Field Definition Format Size NAME* The name of the property. char 64 VALUE The value for the property. VARCHAR 2048 Field Definition Format Size OUI* Vendor OUI, 6-digit hexadecimal number which can have leading digits as zero. char 6 VENDOR Vendor name.
B Port Fencing Port Fencing TABLE 147 PORT_FENCING_POLICY Field Definition Format ID* int NAME Name of the policy. The length of the field should be 62 because M-EOS switch supports only maximum 62 characters. varchar TYPE 0 = ISL Protocol 1 = Link 2 = Security smallint THRESHOLD_LIMIT Threshold Limits for M-EOS Switch. int THRESHOLD_DURATION Duration In minutes for M-EOS Switch. int DEFAULT_POLICY 1 = the default port fencing policies. 0 = the non-default policies.
B Quartz Quartz TABLE 149 QRTZ_JOB_DETAILS Field Definition Format Size JOB_NAME* Name of the job. varchar 80 JOB_GROUP* Name of the job group. varchar 80 DESCRIPTION Description of the job (optional). varchar 120 JOB_CLASS_NAME The instance of the job that will be executed. varchar 128 IS_DURABLE Whether the job should remain stored after it is orphaned. bit IS_VOLATILE Whether the job should not be persisted in the JobStore for re-use after program restarts.
B Quartz TABLE 151 Field Definition Format size TRIGGER_NAME* Name of the trigger varchar 80 TRIGGER_GROUP* name of the trigger group varchar 80 REPEAT_COUNT number of times to repeat numeric 13,0 REPEAT_INTERVAL interval for first and second job numeric 13,0 TIMES_TRIGGERED Number of times the corresponding trigger fired numeric 13,0 TABLE 152 QRTZ_FIRED_TRIGGERS Field Definition Format size ENTRY_ID* Fired instance ID. varchar 95 TRIGGER_NAME Name of the trigger.
B Quartz TABLE 155 QRTZ_JTRIGGER_LISTENERS Field Definition Format Size TRIGGER_NAME* Name of the trigger. varchar 80 TRIGGER_GROUP* Name of the trigger group. varchar 80 TRIGGER_LISTENER* The listener action. varchar 80 TABLE 156 QRTZ_BLOB_TRIGGERS Field Definition Format Size TRIGGER_NAME* Name of the trigger. varchar 80 TRIGGER_GROUP* Name of the trigger group. varchar 80 BLOB_DATA The Scheduler info.
B Reports Reports TABLE 161 REPORT_TYPE Field Definition Format ID* Meta Data for available reports. int NAME Report name. varchar 128 DESCRIPTION Report type description. varchar 256 Format Size TABLE 162 Size GENERATED_REPORT Field Definition ID* int NAME Report name. varchar TYPE_ID Report type. int EFCM_USER The Management application user who has generated this report. varchar REPORT_OBJECT Report object BLOB.
B Role Based Access Control TABLE 166 PRIVILEGE Field Definition ID* Size int NAME TABLE 167 Format Privilege Name. varchar 128 Size PRIVILEGE_GROUP_MAP Field Definition Format GROUP_ID* Privilege group ID. int PRIVILEGE_ID* Privilege ID. int 128 Format Size TABLE 168 PRIVILEGE_GROUP Field Definition ID* int NAME TABLE 169 Privilege group name. 128 ROLE_PRIVILEGE_INFO name Source ID ROLE.ID ROLE NAME ROLE.NAME ROLE DESCRIPTION ROLE.DESCRIPTION ID PRIVILEGE.
B Role Based Access Control TABLE 172 RESOURCE_GROUP Field Definition Format ID* int NAME Resource group name. varchar 128 DESCRIPTION Resource group description. varchar 512 Size TABLE 173 RESOURCE_FABRIC_MAP Field Definition Format RESOURCE_GROUP_ID* Resource group ID. int FABRIC_ID* Fabric ID, which is in the resource group. int TABLE 174 508 Size USER_ROLE_RESOURCE_INFO name Source RESOURCE GROUP ID RESOURCE_GROUP.
B SNMP SNMP TABLE 175 SNMP_CREDENTIALS Field Definition ID* Format Size int VIRTUAL SWITCH_ID Virtual switch ID for which this instance of the SNMP credentials apply. int RECIPIENT_ID Recipient in the MESSAGE_RECIPIENT table. int POR)_NUMBER Port number of the SNMP agent on the switch for get and set requests. smallint RETRY_COUNT Number of times to retry if get/set request to the SNMP agent times out. Default value is 3.
B SNMP TABLE 175 Definition Format Size PRIV_PROTOCOL An indication of whether messages sent or received on behalf of this user can be encrypted and if so, which privacy protocol to use. The current values for this field are: usmNoPrivProtocol and usmDESPrivProtocol. This is applicable if the agent is configured to operate in SNMPv3. varchar 16 PRIV_PASSWORD The localized secret key used by the privacy protocol for encrypting and decrypting messages.
B SNMP TABLE 176 SNMP_PROFILE (Continued) Field Definition Format Size AUTH_PROTOCOL An indication of whether or not messages sent or received on behalf of this user can be authenticated and if so, which authentication protocol to use. The supported values for this field are: usmNoAuthProtocol, usmHMACMD5AuthProtocol, and usmHMACSHAAuthProtocol. This is applicable if the agent is configured to operate in SNMPv3.
B Stats Stats TABLE 178 FAVORITES Field Definition Format ID* int NAME Name of the favorite. varchar 64 USER_ The application user credentials. varchar 128 TOP_N The top number of ports(5,10,15,20). varchar 40 SELECTION_FILTER Types of ports (FC/FCIP/GE) and End-to-End Monitors. varchar 40 FROM_TIME The time interval in which the graph is shown. Time interval can be predefined or custom.
B Stats TABLE 180 STATS_AGING Field Definition ID* Format int FIVE_MIN_VALUE Configured maximum samples value for the five minute table. int THIRTY_MIN_VALUE Configured maximum samples value for the thirty minute table. int TWO_HR_VALUE Configured maximum samples value for the two hour table. int ONE_DAY_VALUE Configured maximum samples value for the one day table. int MAX_SAMPLES_VALUE The maximum number of samples value, i.e., 3456.
B Switch Switch TABLE 183 VIRTUAL-SWITCH Field Definition Format ID* 514 Size int LOGICAL_ID Logical ID of the switch. smallint NAME Switch name. varchar 64 WWN WWN of the switch. char 23 VIRTUAL_FABRIC_ID Virtual fabric ID. If VF enabled then will have the VFID; otherwise it will be -1. smallint DOMAIN_ID Domain ID of the switch. smallint BASE_SWITCH 1 = this is a base switch; otherwise, 0. smallint SWITCH_MODE 2 = switch is in AG mode; otherwise, 0.
B Switch TABLE 184 CORE_SWITCH Field Definition ID* Format Size int IP_ADDRESS IP address of the switch. varchar 128 WWN Chassis WWN. char 23 NAME Switch name. varchar 64 CONTACT Any associated contact name, obtained through SNMP. varchar 256 LOCATION Physical location, obtained through SNMP. varchar 256 DESCRIPTION User assigned description, obtained through SNMP. varchar 256 TYPE SWBD type number as given by Fabric OS.
B Switch TABLE 184 CORE_SWITCH (Continued) Field Definition Format NIC_PROFILE_ID NIC profile of the Management application server host used by this switch to communicate in interactive configuration and other operations. It determines which Management application host IP used by this switch. int MANAGING_SERVER_IP_ ADDRESS IP address of the server which is currently managing this switch. Used for M-EOS switch only. It does not apply to Fabric OS switches.
Switch TABLE 186 SWITCH_INFO name Source NIC_PROFILE_ID CORE_SWITCH.NIC_PROFILE_ID MANAGING_SERVER_IP_ADDRESS CORE_SWITCH.MANAGING_SERVER_IP_ADDRESS ID VIRTUAL_SWITCH.ID NAME VIRTUAL_SWITCH.NAME OPERATIONAL_STATUS VIRTUAL_SWITCH.OPERATIONAL_STATUS SWITCH_MODE VIRTUAL_SWITCH.SWITCH_MODE AD_CAPABLE VIRTUAL_SWITCH.AD_CAPABLE WWN VIRTUAL_SWITCH.WWN ROLE VIRTUAL_SWITCH.ROLE FCS_ROLE VIRTUAL_SWITCH.FCS_ROLE DOMAIN_ID VIRTUAL_SWITCH.DOMAIN_ID VIRTUAL_FABRIC_ID VIRTUAL_SWITCH.
B Switch TABLE 187 SWITCH_MODEL Field Definition Format ID* int SWBD_TYPE Switch type number, universally used by all the Management application module implementation. smallint SUBTYPE Switch subtype. At present no subtypes for existing model records are defined. smallint DESCRIPTION Model description, such as FC link speed, port count and whether multi-card (director) class switch or other type of switch. varchar 32 MODEL Switch model string.
B Switch details Switch details TABLE 189 CORE_SWITCH_DETAILS Field Definition Format Size CORE_SWITCH_ID* DB ID. int ETHERNET_MASK Subnet mask. char 64 FC_MASK Subnet mask for FC IP. char 64 FC_IP Fibre Channel IP address. char 64 FC_CERTIFICATE smallint SW_LICENSE_ID char 23 SUPPLIER_SERIAL_ NUMBER Serial number of the chassis. varchar 32 PART_NUMBER The part number assigned by the organization responsible for producing or manufacturing the PhysicalElement.
B Switch details TABLE 189 CORE_SWITCH_DETAILS (Continued) Field Definition Format Size STBY_CP_PRI_FW_VERSIO N Standby CP primary firmware version. varchar 128 STBY_CP_SEC_FW_VERSIO N Standby CP secondary firmware version. varchar 128 TYPE SWBD number as assigned by embedded SW depending upon the switch type / platform. smallint EGM_CAPABLE 1 = the switch is EGM-capable. smallint SUB_TYPE SWBD sub type number.
B Switch details TABLE 190 CORE_SWITCH (Continued) Field Definition Format LAST_SCAN_TIME timestampty LAST_UPDATE_TIME Time when this record was last updated. timestamp SYSLOG_REGISTERED 1 if the Management application server is registered with the switch to receive Syslog. smallint CALL_HOME_ENABLED 1 if "call home" is enabled for this switch. smallint SNMP_REGISTERED 1 if the Management application server is registered with the switch to receive SNMP traps.
B Switch details TABLE 191 522 SWITCH_DETAILS_INFO Name Source MANAGING_SERVER_IP_ADDRESS CORE_SWITCH.MANAGING_SERVER_IP_ADDRESS ID VIRTUAL_SWITCH.ID NAME VIRTUAL_SWITCH.NAME OPERATIONAL_STATUS VIRTUAL_SWITCH.OPERATIONAL_STATUS SWITCH_MODE VIRTUAL_SWITCH.SWITCH_MODE AD_CAPABLE VIRTUAL_SWITCH.AD_CAPABLE WWN VIRTUAL_SWITCH.WWN ROLE VIRTUAL_SWITCH.ROLE FCS_ROLE VIRTUAL_SWITCH.FCS_ROLE DOMAIN_ID VIRTUAL_SWITCH.DOMAIN_ID VIRTUAL_FABRIC_ID VIRTUAL_SWITCH.
Switch details TABLE 191 SWITCH_DETAILS_INFO Name Source PART_NUMBER CORE_SWITCH_DETAILS.PART_NUMBER CHECK_BEACON CORE_SWITCH_DETAILS.CHECK_BEACON TIMEZONE CORE_SWITCH_DETAILS.TIMEZONE FMS_MODE CORE_SWITCH_DETAILS.FMS_MODE MAX_PORT CORE_SWITCH_DETAILS.MAX_PORT CHASSIS_SERVICE_TAG CORE_SWITCH_DETAILS.CHASSIS_SERVICE_TAG BAY_ID CORE_SWITCH_DETAILS.BAY_ID TYPE_NUMBER CORE_SWITCH_DETAILS.TYPE_NUMBER MODEL_NUMBER CORE_SWITCH_DETAILS.MODEL_NUMBER MANUFACTURER CORE_SWITCH_DETAILS.
B Switch port Switch port TABLE 192 GIGE_PORT Field Definition Format ID* int SWITCH_PORT_ID ID for the GigE Port in SWITCH_PORT. int PORT_NUMBER GigE Port Number(0 for ge0 and 1 for ge1). int SLOT_NUMBER Slot number on which the GigE Port is present. int ENABLED Enabled or disabled. smallint SPEED Port speed details. int MAX_SPEED Port maximum speed supported. int MAC_ADDRESS MAC Address of that port. varchar 64 PORT_NAME GigE Port Name.
B Switch port TABLE 193 SWITCH_PORT (Continued) Field Definition Format Size MAC_ADDRESS MAC address of this port. varchar 64 varchar 64 PORT_MOD TYPE Port type. The specific mode currently enabled for the port. varchar 16 FULL_TYPE Port type. varchar 128 STATUS The current status of the switch port. varchar 64 varchar 16 255 HEALTH STATUS_MESSAGE Status message if any.
B Switch port TABLE 193 Definition Format NPIV_CAPABLE Instance NPIV mode capability: 1 = indicates port has NPIV capability 2 = NPIV license is enabled smallint NPIV_ENABLED Whether NPIV mode is enabled. smallint FC_FAST_WRITE_ENABLED 1 = FC fast write is enabled.
B Switch port TABLE 194 GIGE_PORT_INFO (Continued) name Source INTERFACE_TYPE GIGE_PORT.INTERFACE_TYPE CHECKSUM GIGE_PORT.CHECKSUM FCIP_CAPABLE GIGE_PORT.FCIP_CAPABLE ISCSI_CAPABLE GIGE_PORT.ISCSI_CAPABLE INBAND_MANAGEMENT_STATUS GIGE_PORT.INBAND_MANAGEMENT_STATUS VIRTUAL SWITCHID SWITCH_PORT.VIRTUAL_SWITCH_ID USER PORT NUMBER SWITCH_PORT.
B Switch port TABLE 198 FPORT_TRUNK_MEMBER Field Definition Format GROUP_ID* Foreign key to the PORT_TRUNK_GROUP table. INT PORT_NUMBER* Member user port number. SMALLINT WWN Member port WWN. CHAR 23 Format Size TABLE 199 VIRTUAL_SWITCH Field Definition ID* 528 Size int LOGICAL_ID Logical ID of the switch. smallint NAME Switch name. varchar 64 WWN WWN of the switch. char 23 VIRTUAL_FABRIC_ID Virtual fabric ID.
B Switch SNMP info TABLE 199 VIRTUAL_SWITCH (Continued) Field Definition Format CRYPTO_CAPABLE 0 = the switch is not crypto-enabled; if capable it will have non-zero value smallint FCR_CAPABLE 0 = the switch is not FCR-enabled; if capable it will have non-zero value smallint FCIP_CAPABLE 0 if the switch is not FCIP-enabled; if capable it will have non-zero value smallint Size Switch SNMP info TABLE 200 VIRTUAL_SWITCH Name Source PHYSICAL SWITCH ID PHYSICAL_SWITCH_ID PHYSICAL SWITCH NA
B Switch SNMP info TABLE 200 VIRTUAL_SWITCH Name Source BASE SWITCH BASE_SWITCH MAX ZONE CONFIG SIZE MAX_ZONE_CONFIG_SIZE CREATION TIME CREATION_TIME LAST UPDATE TIME LAST_UPDATE_TIME USER NAME SWITCH_INFO.
B Threshold Threshold TABLE 201 SWITCH_THRESHOLD-SETTING Field Definition Format SWITCH_ID* References the ID in CORE_SWITCH table. int POLICY_ID* References the ID in THRESHOLD_POLICY table. int STATUS The status of applied to the switch. smallint OVERRIDDEN Policy is overridden or not overridden. smallint DESCRIPTION Description about the status of policy applied to the switch.
B User Interface TABLE 206 THRESHOLD_MEASURE (Continued) Field Definition Format LOW_BOUNDARY Configured low boundary threshold value for measure ID. int BUFFER_SIZE Configured buffer size for measure ID. int POLICY_ID* References the ID in THRESHOLD_POLICY table. int Size User Interface TABLE 207 AVAILABLE_FLYOVER_PROPERTY Field Definition Format ID* int NAME Name of the available property to be included in the flyover display.
B Zoning 1 TABLE 210 TOOL_PATH (Continued) Field Definition Format Size PATH Path of the tool where installed or available. varchar 1057 WORKING_FOLDER Working folder for that application. varchar 512 Format Size TABLE 211 PRODUCT_APP Field Definition ID* int MENU_TEXT Name of the product menu. varchar 256 PROP1_KEY First condition name to be satisfied by a selected product to launch a particular tool.
B Zoning 1 TABLE 212 ZONE_DB (Continued) Field Definition Format MCDATA_DEFAULT_ZONE McData switch default zoning mode. smallint MCDATA_SAFE_ZONE McData switch safe zoning mode. smallint ZONE_CONFIG_SIZE Zone configuration string length. int TABLE 213 ZONE_DB_USERS Field Definition ID* Format Size int ZONE_DB_ID PK of the owning zone DB. int USER_NAME List of users currently editing this zone DB.
B Zoning 2 Zoning 2 TABLE 217 ZONE_ALIAS_IN_ZONE Field Definition Format ZONE_ALIAS_ID* PK of the zone alias. int ZONE_ID* PK of the zone. int 23 Definition Format Size TABLE 218 Size ZONE_ALIAS Field ID* int ZONE_DB_ID PK of the owning ZONE_DB. int NAME The zone alias name. varchar 64 Format Size TABLE 219 ZONE_ALIAS_MEMBER Field Definition ID* int TYPE Zone alias member type: 2 = WWN 4 = D,P smallint VALUE Member value (D,P or WWN).
B Zoning 2 TABLE 222 ZONE_DB Field Definition ID* Size int FABRIC_ID PK of the owning fabric. NAME Zone DB name for offline Zone DBs. varchar OFFLINE Offline Zone DB (1 = offline). smallint CREATED Created timestamp. timestamp LAST_MODIFIED Last modified timestamp. timestamp LAST_APPLIED Last saved to switch timestamp. timestamp CREATED_BY Created by user name. varchar 128 LAST_MODIFIED_BY Last modified by user name.
Index A accessing FTP server folder, 98 ACK emulation, device level, 252 activating event policies, 187 zone configuration, 391 active sessions, viewing, 63 adding, 180 destination for syslog forwarding, 205 event policies, 180 ISL offline policies, 181 PM threshold crossed policies, 182 property labels, 136 security violation policies, 183 traffic isolation zone members, 399 V1 destination, SNMP traps, 200 V3 destination, SNMP traps, 201 zone members, 381 zones, 391 advanced filtering setting up, 197 aler
Index Configure menu, 5 configuring asset polling, 107 client export port, 96 discovery, 39, 97 e-mail notification, 196 encrypted storage in a multi-path environment, 355 explicit server IP address, 103 external FTP server, 100 FCIP advanced settings, 249 FCIP tunnels, 245 FICON emulation, 252 FTP server, 98 internal FTP server, 99 IP configuration, 102 IP interfaces, 245 IP routes, 245 IPSec and IKE policies, 251 login banner, 95 login security, 94 memory allocation, 106 security authentication using the
Index deleting firmware files from firmware repository, 140 deleting servers, 144 Derby database fields, 455 destination adding for syslog forwarding, 205 editing for SNMP traps, 202 editing for syslog forwarding, 206 removing for SNMP traps, 202 removing for syslog forwarding, 206 device adding names, 89 removing name, 90 device icons, 16 device properties, 133 viewing, 133 device properties dialog boxes, customizing, 133 device tips configuring, 83 device tips, turning on and off, 86 device tips, viewing
Index enabling compression, fast write, tape pipelining, 249 default zone for fabrics, 385 FCIP tunnels, 259, 260 port connectivity view filter, 152 ports, 150 safe zoning mode, 386 syslog forwarding, 206 traffic isolation zone, 400 traffic isolation zone failover, 401 enabling backup, 75 enabling SNMP informs, 203 enabling trap forwarding, 200 encryption adding a target, 334 adding new LUNs, 335 configuration planning for the management application, 314 configure dialog box, 316 configuring hosts to acces
Index PM threshold crossed policy, 182 PM threshold crossed, duplicating, 190 PM threshold crossed, editing, 194 security violation policy, 183 security violation, duplicating, 191 security violation, editing, 195 viewing events, 195 event types, 179, 227 events Ethernet, 81 event types, 179, 227 filtering, 177, 227 monitoring methods, 171 policy actions, 180 policy types, 179 storage, 82 viewing, 195 expanding groups, 119 explicit server IP address configuring, 103 export commands --export, 430, 436 expor
Index filtering events for users, 227 master log events, 177 port connectivity view results, 151 real time performance data, 217 firmware deleting files from repository, 140 downloading, 141 management, overview, 138 overwriting, 141 firmware repository deleting firmware files, 140 displaying, 138 importing into, 139 flyovers configuring, 83 turning on and off, 86 viewing, 86 FTP overview, 98 server accessing the folder, 98 configuring, 98 testing, 101 G generating performance graph, 216 reports, 220 zoni
Index IPsec FCIP, 239 IPSec policies, 243 configuring, 251 iSCSI devices, identifying inactive, 153, 159 ISL offline policies adding, 181 duplicating, 189 editing, 193 K key vaults adding or changing using the management application, 339 connection from switch, 330 entering the IP address or host name for, 338 entering the name of the file holding the certificate, 338 setting up RKM, 440 L launch script path defining, 185 launch scripts, 185 requirements, 185 launching Server Management Console, 123 laun
Index master key active, 363 alternate, 364 backup, 364 create new master key, 364 creating a new, 372 description of, 363 reasons they are disabled, 364 restore master key, 364 saving to a file, 364 master log, 13 copying, 176 copying parts, 176 displaying, 174, 175 exporting, 177 filtering events, 177 McDATA fabric mode, 386 memory allocation configuration, 106 configuring asset polling, 107 menu bar, 3 Configure, 5 Discover, 5 Edit, 3 Help, 9 Monitor, 7 SAN, 3 Tools, 9 View, 3 M-EOS feature listing, 31
Index physical map default background color, changing, 118 displaying connections, 116 group background color, changing, 117 layout, changing, 116 layout, overview, 115 levels of detail, 66 port display, changing, 119 port label, changing, 118 product label, changing, 118 showing connected ports, 156 viewing port types, 156 viewing ports, 153 zooming in, 65 zooming out, 65 PM threshold crossed policies adding, 182 duplicating, 190 editing, 194 policies IKE, 243 IPSec, 243 policy actions, 180 policy trigger
Index removing destination for syslog forwarding, 206 destination, SNMP traps, 202 host server, 200 host server for syslog forwarding, 205 members from zone, 411 objects from zone alias, 388 servers, 144 zone from zone configuration, 412 zones from zone configuration, 412 renaming zone alias, 389 zone configuration, 413 zones, 412 renaming servers, 143 replacing zone members, 414 report types, 219 reports deleting, 222 exporting, 221 generating, 220 printing, 221 viewing, 220 zoning, 222 requirements launc
Index setting CHAP secret, 94 setting up advanced filtering, 197 discovery, 39 show commands --show -groupcfg, 433 showing levels of detail, physical map, 66 showing ports connected, 156 procedure, 153 SKM, 440 smart cards configuring, 316 removing using the management application, 375 saving to a file, 375 tracking using the management application, 375 SNMP credentials, configuring, 42 SNMP informs, disabling, 203 SNMP informs, enabling, 203 SNMP traps adding V1 destination, 200 adding V3 destination, 201
Index quartz database fields, 503–505 reports database fields, 506 role based access control database fields, 506–508 SNMP database fields, 509–511 stats database fields, 512–?? switch database fields, 514–518 switch details database fields, 519–523 switch port database fields, 524–529 switch SNMP info database fields, 529–530 threshold database fields, 531–532 UI database fields, 532–533 zoning 1 database fields, 533–534 zoning 2 database fields, 535–536 Tape Pipelining, 240 tape pipelining, 244 enabling,
Index V Z V1 destination adding, 200 V3 destination adding, 201 VE_Ports, 241 view all tab, 11 View menu, 3 view options, changing, 65 View window product list, 11 view all tab, 11 View window, toolbox, 13 viewing device properties, 133 disabling port connectivity filter, 152 enabling port connectivity filter, 152 event logs, 172 events, 195 FCIP connection properties, 253 FCIP Ethernet port properties, 256 FCIP FC port properties, 255 filtering port connectivity, 151 general FCIP properties, 254 offline
Index zone members adding to zone, 381 creating in zone by alias, 384 creating in zone by domain,port, 383 creating in zone by WWN, 382 finding in Potential Members list, 409 finding in zones, 409 listing, 411 removing from zone, 411 replacing, 414 zone set creating, 389 naming conventions, 378 zone set.
