HP StorageWorks Fabric OS 5.X Administrator Guide (AA-RVHWB-TE, September 2005)

Fabric OS 5.x administrator guide 109
Configuring a high-integrity fabric
To configure a high-integrity fabric (cascaded configuration):
1. Disable each switch in the fabric.
2. For each switch:
a. Enable the IDID flag.
b. Set the domain ID.
c. Install security certificates and keys.
3. Enable the switches.
This builds the fabric.
4. Set up security on the primary FCS switch.
Use Quickmode for FICON, which activates the SCC_POLICY and does not create a DCC policy. The
security policies are distributed to each switch in the fabric. (For details on the Quickmode procedure,
see the HP StorageWorks Secure Fabric OS administrator guide.)
5. Connect and enable channel and control unit (CU) devices.
The Query for Security Attributes (QSA) response to the channel indicates that the fabric binding and
IDID are enabled.
Figure 1 and Figure 2 show two viable cascaded configurations. These configurations require Channel A
to be configured for two-byte addressing and require IDID and fabric binding. There can be only two
switches in the path from the channel to the CU.
Figure 1 Cascaded configuration with two switches
Figure 2 Cascaded configuration with three switches
Setting a unique domain ID
In a cascaded configuration, each switch must have a unique domain ID, and insistent IDID mode must be
enabled. To set a unique domain ID and enable IDID mode, follow these steps:
1. Connect to the switch and log in as admin.
2. Verify that the switch has a unique domain ID. If it does not, set a unique domain ID.
For instructions on displaying and changing the domain ID, see ”Working with domain IDs” on
page 32.
3. Issue the switchDisable command to disable the switch.
4. Issue the configure command.
5. Enter y after the Fabric Parameters prompt.
6. To enable IDID mode, enter y after the Insistent Domain ID Mode prompt.
(You can disable this mode by entering n.)
Channel
A
Control
Unit
B
Switch
Domain ID = 21
Switch
Domain ID = 22
Channel
A
Control
Unit
C
Control
Unit
D
Switch
Domain ID = 23
Switch
Domain ID = 21
Switch
Domain ID = 22